{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-9f47df1b47ba1179", "name": "Possibly dead Python function: insert_kalshi_position", "shortDescription": {"text": "Possibly dead Python function: insert_kalshi_position"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a3e9478059246c96", "name": "Possibly dead Python function: close_kalshi_position", "shortDescription": {"text": "Possibly dead Python function: close_kalshi_position"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5ab7f85f3575e062", "name": "Possibly dead Python function: get_realized_pnl_24h", "shortDescription": {"text": "Possibly dead Python function: get_realized_pnl_24h"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8d236c9794a2101e", "name": "Possibly dead Python function: parse_tv_summary", "shortDescription": {"text": "Possibly dead Python function: parse_tv_summary"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-86a342dfbfcc3554", "name": "Possibly dead Python function: extract_str", "shortDescription": {"text": "Possibly dead Python function: extract_str"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-251a5dd5ed16edd9", "name": "Possibly dead Python function: generate_indicator", "shortDescription": {"text": "Possibly dead Python function: generate_indicator"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c309595d00bd1a5", "name": "Possibly dead Python function: is_loaded", "shortDescription": {"text": "Possibly dead Python function: is_loaded"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cbd4204dd9b65565", "name": "Possibly dead Python function: notify_daily_summary", "shortDescription": {"text": "Possibly dead Python function: notify_daily_summary"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c56d12ec7e06b808", "name": "Possibly dead Python function: cmd_help", "shortDescription": {"text": "Possibly dead Python function: cmd_help"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e8288fc31449708a", "name": "Possibly dead Python function: cmd_status", "shortDescription": {"text": "Possibly dead Python function: cmd_status"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c840f82386d44bbd", "name": "Possibly dead Python function: cmd_wallet", "shortDescription": {"text": "Possibly dead Python function: cmd_wallet"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-082d62c22ebc0fcb", "name": "Possibly dead Python function: cmd_vault", "shortDescription": {"text": "Possibly dead Python function: cmd_vault"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b40d3e40ab9ecf75", "name": "Possibly dead Python function: cmd_txlog", "shortDescription": {"text": "Possibly dead Python function: cmd_txlog"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a0efa2e051b55a14", "name": "Possibly dead Python function: cmd_apis", "shortDescription": {"text": "Possibly dead Python function: cmd_apis"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ca1957f226ed8a21", "name": "Possibly dead Python function: cmd_trades", "shortDescription": {"text": "Possibly dead Python function: cmd_trades"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-848c879a1a252d50", "name": "Possibly dead Python function: cmd_today", "shortDescription": {"text": "Possibly dead Python function: cmd_today"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-79e2554a8dc71c29", "name": "Possibly dead Python function: cmd_pnl", "shortDescription": {"text": "Possibly dead Python function: cmd_pnl"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c397e15dc6967ea2", "name": "Possibly dead Python function: cmd_kalshi", "shortDescription": {"text": "Possibly dead Python function: cmd_kalshi"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6fc6419ea965c99a", "name": "Possibly dead Python function: cmd_kalshi_reset", "shortDescription": {"text": "Possibly dead Python function: cmd_kalshi_reset"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6926cd28b8454901", "name": "Possibly dead Python function: cmd_prices", "shortDescription": {"text": "Possibly dead Python function: cmd_prices"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6cd098c7d53a3bc3", "name": "Possibly dead Python function: cmd_arb", "shortDescription": {"text": "Possibly dead Python function: cmd_arb"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b19fea678d61c424", "name": "Possibly dead Python function: cmd_spread", "shortDescription": {"text": "Possibly dead Python function: cmd_spread"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-78b378381f1714de", "name": "Possibly dead Python function: cmd_risk", "shortDescription": {"text": "Possibly dead Python function: cmd_risk"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a1e5e2a33956c41f", "name": "Privileged port 30 in use", "shortDescription": {"text": "Privileged port 30 in use"}, "fullDescription": {"text": "Port 30 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7947fa0f6f043f4d", "name": "Privileged port 40 in use", "shortDescription": {"text": "Privileged port 40 in use"}, "fullDescription": {"text": "Port 40 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-705dba705ed79097", "name": "Privileged port 45 in use", "shortDescription": {"text": "Privileged port 45 in use"}, "fullDescription": {"text": "Port 45 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9912588d2cede244", "name": "Insecure pattern 'cors_wildcard' in main.py:367", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in main.py:367"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5f88e21922ce47ff", "name": "Insecure pattern 'direct_innerhtml_assignment' in static/index.html:3243", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in static/index.html:3243"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6372cebde0220094", "name": "No auth library detected", "shortDescription": {"text": "No auth library detected"}, "fullDescription": {"text": "The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). The repo has auth/admin/session surface indicators, so auth may live in custom code, in a separate service, or be missing."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9f882bebe3690bfa", "name": "Very large file: app/database.py (1851 lines)", "shortDescription": {"text": "Very large file: app/database.py (1851 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-db3ea6affee17814", "name": "Very large file: app/routers/dashboard.py (3882 lines)", "shortDescription": {"text": "Very large file: app/routers/dashboard.py (3882 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1336b9635c535a11", "name": "Very large file: app/services/telegram_commands.py (1314 lines)", "shortDescription": {"text": "Very large file: app/services/telegram_commands.py (1314 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2ea8c39bbdb79e5c", "name": "Very large file: app/services/trade_engine.py (1857 lines)", "shortDescription": {"text": "Very large file: app/services/trade_engine.py (1857 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-141b30a41e03817b", "name": "No license file detected", "shortDescription": {"text": "No license file detected"}, "fullDescription": {"text": "No LICENSE/COPYING/NOTICE file was found. Generated repositories often omit licensing, which blocks reuse and automated intake."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 624 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b9088664ace7f748", "name": "Composite production-readiness gap", "shortDescription": {"text": "Composite production-readiness gap"}, "fullDescription": {"text": "Multiple low-cost hardening controls are missing together: license, ci. Opus verification showed these co-occurring gaps are a better readiness signal than reading each flag in isolation."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-749d4bc1bd66df5f", "name": "Agent instructions exist but release-hardening basics are missing", "shortDescription": {"text": "Agent instructions exist but release-hardening basics are missing"}, "fullDescription": {"text": "AI-coder instruction files were found, but the repo is missing license, ci. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e30333359fc81a09", "name": "Legacy-named symbol `csv_backup` in main.py:23", "shortDescription": {"text": "Legacy-named symbol `csv_backup` in main.py:23"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8d18e5748fd2b764", "name": "Commented-code block (16 lines) in main.py:374", "shortDescription": {"text": "Commented-code block (16 lines) in main.py:374"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f8dd4a5fccd07b41", "name": "Commented-code block (8 lines) in app/database.py:37", "shortDescription": {"text": "Commented-code block (8 lines) in app/database.py:37"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7dde1ef423c2afdf", "name": "Legacy-named symbol `run_daily_backup` in app/utils/csv_backup.py:19", "shortDescription": {"text": "Legacy-named symbol `run_daily_backup` in app/utils/csv_backup.py:19"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-16c07832f943d836", "name": "Commented-code block (6 lines) in app/routers/webhook.py:77", "shortDescription": {"text": "Commented-code block (6 lines) in app/routers/webhook.py:77"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a73d4be0dcc7bed2", "name": "Legacy-named symbol `SOL_Mean_Reversion_v1` in app/routers/dashboard.py:3344", "shortDescription": {"text": "Legacy-named symbol `SOL_Mean_Reversion_v1` in app/routers/dashboard.py:3344"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4fba6e20c3f86fd5", "name": "Commented-code block (5 lines) in app/routers/dashboard.py:751", "shortDescription": {"text": "Commented-code block (5 lines) in app/routers/dashboard.py:751"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-64570320c72a1f9b", "name": "Commented-code block (5 lines) in app/services/aave_v3_client.py:121", "shortDescription": {"text": "Commented-code block (5 lines) in app/services/aave_v3_client.py:121"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-65f10572ac9364a4", "name": "Commented-code block (7 lines) in app/services/kalshi_client.py:303", "shortDescription": {"text": "Commented-code block (7 lines) in app/services/kalshi_client.py:303"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2580f51c87bea3b5", "name": "Commented-code block (7 lines) in app/services/evm_swap_executor.py:108", "shortDescription": {"text": "Commented-code block (7 lines) in app/services/evm_swap_executor.py:108"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c45dd21b261b3282", "name": "Commented-code block (9 lines) in app/services/price_feed.py:40", "shortDescription": {"text": "Commented-code block (9 lines) in app/services/price_feed.py:40"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a5bb9feed8356ee6", "name": "Commented-code block (5 lines) in app/services/kalshi_spread_bot.py:128", "shortDescription": {"text": "Commented-code block (5 lines) in app/services/kalshi_spread_bot.py:128"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e70e7dcc72410ec9", "name": "Commented-code block (5 lines) in app/services/position_monitor.py:59", "shortDescription": {"text": "Commented-code block (5 lines) in app/services/position_monitor.py:59"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-11bd6fc49d1d5afc", "name": "Commented-code block (6 lines) in app/services/trade_engine.py:148", "shortDescription": {"text": "Commented-code block (6 lines) in app/services/trade_engine.py:148"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-760b59e32e9aabf2", "name": "Legacy-named symbol `only_old` in scripts/backtest_microstructure.py:141", "shortDescription": {"text": "Legacy-named symbol `only_old` in scripts/backtest_microstructure.py:141"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d85406a8b8fb2526", "name": "Legacy-named symbol `indicator_ema_ribbon_v1` in scripts/generate_indicator_docs.py:37", "shortDescription": {"text": "Legacy-named symbol `indicator_ema_ribbon_v1` in scripts/generate_indicator_docs.py:37"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d65db014da32378a", "name": "Legacy-named symbol `parse_csv_legacy` in tools/analyze_backtest.py:103", "shortDescription": {"text": "Legacy-named symbol `parse_csv_legacy` in tools/analyze_backtest.py:103"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a1f8eefcf2a631e4", "name": "Commented-code block (6 lines) in backtesting/data.py:57", "shortDescription": {"text": "Commented-code block (6 lines) in backtesting/data.py:57"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-719ecababd4c295f", "name": "Commented-code block (5 lines) in backtesting/regime_analog.py:30", "shortDescription": {"text": "Commented-code block (5 lines) in backtesting/regime_analog.py:30"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6d0cd7136c49e058", "name": "Commented-code block (8 lines) in backtesting/nightly.py:103", "shortDescription": {"text": "Commented-code block (8 lines) in backtesting/nightly.py:103"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2f2bdd10fefc5dfb", "name": "Commented-code block (7 lines) in backtesting/engine.py:23", "shortDescription": {"text": "Commented-code block (7 lines) in backtesting/engine.py:23"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-75f052447b9388a8", "name": "Commented-code block (5 lines) in backtesting/kalshi/nightly.py:70", "shortDescription": {"text": "Commented-code block (5 lines) in backtesting/kalshi/nightly.py:70"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8e047ab7af03962f", "name": "7 env vars used in code but missing from .env.example", "shortDescription": {"text": "7 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `BACKTEST_BOOTSTRAP_ITER`, `BACKTEST_LIFT_WIN`, `BACKTEST_MIN_TRADES`, `BACKTEST_P_TREND`, `BACKTEST_P_WINNER`, `BINANCE_US_API_KEY`, `BINANCE_US_API_SECRET`. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\napp/config.py:get_kalshi_config, app/config.py:get\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-46969939caf8120b", "name": "Near-duplicate function bodies in 9 places", "shortDescription": {"text": "Near-duplicate function bodies in 9 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\napp/services/jupiter_client.py:close, app/services/openocean_client.py:close, app/services/news_service.py:close, app/services/telegram_service.py:close\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49c98f7cedd9c977", "name": "Near-duplicate function bodies in 4 places", "shortDescription": {"text": "Near-duplicate function bodies in 4 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\napp/services/kalshi_client.py:get_events, app/services/kalshi_client.py:get_event, app/services/kalshi_client.py:get_events, app/services/kalshi_client.py:get_event\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-073623dce9757b2f", "name": "FastAPI POST `receive_webhook` without auth dependency \u2014 app/routers/webhook.py:38", "shortDescription": {"text": "FastAPI POST `receive_webhook` without auth dependency \u2014 app/routers/webhook.py:38"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-611d98456b4b1a01", "name": "FastAPI POST `update_settings` without auth dependency \u2014 app/routers/dashboard.py:1463", "shortDescription": {"text": "FastAPI POST `update_settings` without auth dependency \u2014 app/routers/dashboard.py:1463"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-89ea60745b4256f1", "name": "FastAPI POST `bot_start` without auth dependency \u2014 app/routers/dashboard.py:1562", "shortDescription": {"text": "FastAPI POST `bot_start` without auth dependency \u2014 app/routers/dashboard.py:1562"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4a55e30cc210f1cd", "name": "FastAPI POST `bot_stop` without auth dependency \u2014 app/routers/dashboard.py:1567", "shortDescription": {"text": "FastAPI POST `bot_stop` without auth dependency \u2014 app/routers/dashboard.py:1567"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0b90b136c2d48329", "name": "FastAPI POST `kamino_deposit` without auth dependency \u2014 app/routers/dashboard.py:1808", "shortDescription": {"text": "FastAPI POST `kamino_deposit` without auth dependency \u2014 app/routers/dashboard.py:1808"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-999aeeace1b2fd23", "name": "FastAPI POST `kamino_withdraw` without auth dependency \u2014 app/routers/dashboard.py:1843", "shortDescription": {"text": "FastAPI POST `kamino_withdraw` without auth dependency \u2014 app/routers/dashboard.py:1843"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a2a092e089d90ca9", "name": "FastAPI POST `aave_deposit` without auth dependency \u2014 app/routers/dashboard.py:1899", "shortDescription": {"text": "FastAPI POST `aave_deposit` without auth dependency \u2014 app/routers/dashboard.py:1899"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b9342b3dce7b76c8", "name": "FastAPI POST `aave_withdraw` without auth dependency \u2014 app/routers/dashboard.py:1963", "shortDescription": {"text": "FastAPI POST `aave_withdraw` without auth dependency \u2014 app/routers/dashboard.py:1963"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-90986b65e96ecdb0", "name": "FastAPI POST `run_scout_now` without auth dependency \u2014 app/routers/dashboard.py:2020", "shortDescription": {"text": "FastAPI POST `run_scout_now` without auth dependency \u2014 app/routers/dashboard.py:2020"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cde642a8071b13fa", "name": "FastAPI POST `manual_close_position` without auth dependency \u2014 app/routers/dashboard.py:2130", "shortDescription": {"text": "FastAPI POST `manual_close_position` without auth dependency \u2014 app/routers/dashboard.py:2130"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9f35619bfda8a07a", "name": "FastAPI POST `add_backtest` without auth dependency \u2014 app/routers/dashboard.py:2291", "shortDescription": {"text": "FastAPI POST `add_backtest` without auth dependency \u2014 app/routers/dashboard.py:2291"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8c6d5e4d03f81d8a", "name": "FastAPI POST `import_backtests_from_reports` without auth dependency \u2014 app/routers/dashboard.py:2302", "shortDescription": {"text": "FastAPI POST `import_backtests_from_reports` without auth dependency \u2014 app/routers/dashboard.py:2302"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a444e7b97cbe81c4", "name": "FastAPI DELETE `remove_backtest` without auth dependency \u2014 app/routers/dashboard.py:2351", "shortDescription": {"text": "FastAPI DELETE `remove_backtest` without auth dependency \u2014 app/routers/dashboard.py:2351"}, "fullDescription": {"text": "`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-679915d0f225efcb", "name": "FastAPI POST `parse_tv_summary` without auth dependency \u2014 app/routers/dashboard.py:2360", "shortDescription": {"text": "FastAPI POST `parse_tv_summary` without auth dependency \u2014 app/routers/dashboard.py:2360"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-43def6b7df82ff6a", "name": "FastAPI POST `generate_indicator` without auth dependency \u2014 app/routers/dashboard.py:2386", "shortDescription": {"text": "FastAPI POST `generate_indicator` without auth dependency \u2014 app/routers/dashboard.py:2386"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8f4823a2bb38b87c", "name": "FastAPI POST `parameter_grid` without auth dependency \u2014 app/routers/dashboard.py:2404", "shortDescription": {"text": "FastAPI POST `parameter_grid` without auth dependency \u2014 app/routers/dashboard.py:2404"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3590c95b9bf292ff", "name": "FastAPI POST `token_sweep` without auth dependency \u2014 app/routers/dashboard.py:2432", "shortDescription": {"text": "FastAPI POST `token_sweep` without auth dependency \u2014 app/routers/dashboard.py:2432"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bcd7cdfb7a7c50a4", "name": "FastAPI POST `kalshi_place_order` without auth dependency \u2014 app/routers/dashboard.py:2701", "shortDescription": {"text": "FastAPI POST `kalshi_place_order` without auth dependency \u2014 app/routers/dashboard.py:2701"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5c58df98c32b340d", "name": "FastAPI POST `kalshi_arb_scan_now` without auth dependency \u2014 app/routers/dashboard.py:2862", "shortDescription": {"text": "FastAPI POST `kalshi_arb_scan_now` without auth dependency \u2014 app/routers/dashboard.py:2862"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2db65d155b605a9a", "name": "FastAPI POST `kalshi_arb_toggle` without auth dependency \u2014 app/routers/dashboard.py:2871", "shortDescription": {"text": "FastAPI POST `kalshi_arb_toggle` without auth dependency \u2014 app/routers/dashboard.py:2871"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d572586ae0c94693", "name": "FastAPI POST `kalshi_spread_start` without auth dependency \u2014 app/routers/dashboard.py:2900", "shortDescription": {"text": "FastAPI POST `kalshi_spread_start` without auth dependency \u2014 app/routers/dashboard.py:2900"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-35417a823c67df55", "name": "FastAPI POST `kalshi_spread_stop` without auth dependency \u2014 app/routers/dashboard.py:2911", "shortDescription": {"text": "FastAPI POST `kalshi_spread_stop` without auth dependency \u2014 app/routers/dashboard.py:2911"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-64ce734ab1b96682", "name": "FastAPI POST `kalshi_spread_kill` without auth dependency \u2014 app/routers/dashboard.py:2920", "shortDescription": {"text": "FastAPI POST `kalshi_spread_kill` without auth dependency \u2014 app/routers/dashboard.py:2920"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2f20b1668609428e", "name": "FastAPI POST `kalshi_spread_flatten` without auth dependency \u2014 app/routers/dashboard.py:2929", "shortDescription": {"text": "FastAPI POST `kalshi_spread_flatten` without auth dependency \u2014 app/routers/dashboard.py:2929"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-01812a1f2dc1834b", "name": "FastAPI POST `kalshi_spread_add_market` without auth dependency \u2014 app/routers/dashboard.py:2943", "shortDescription": {"text": "FastAPI POST `kalshi_spread_add_market` without auth dependency \u2014 app/routers/dashboard.py:2943"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-78e2fa192005d23f", "name": "FastAPI POST `kalshi_whale_scan` without auth dependency \u2014 app/routers/dashboard.py:2970", "shortDescription": {"text": "FastAPI POST `kalshi_whale_scan` without auth dependency \u2014 app/routers/dashboard.py:2970"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8365052e3e321900", "name": "FastAPI POST `kalshi_whale_toggle` without auth dependency \u2014 app/routers/dashboard.py:2979", "shortDescription": {"text": "FastAPI POST `kalshi_whale_toggle` without auth dependency \u2014 app/routers/dashboard.py:2979"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-abae9af724222667", "name": "FastAPI POST `kalshi_tech_scan` without auth dependency \u2014 app/routers/dashboard.py:3011", "shortDescription": {"text": "FastAPI POST `kalshi_tech_scan` without auth dependency \u2014 app/routers/dashboard.py:3011"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1d31256a1e893873", "name": "FastAPI POST `kalshi_tech_toggle` without auth dependency \u2014 app/routers/dashboard.py:3020", "shortDescription": {"text": "FastAPI POST `kalshi_tech_toggle` without auth dependency \u2014 app/routers/dashboard.py:3020"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b24774bb7ebe1a47", "name": "FastAPI POST `kalshi_ai_analyze` without auth dependency \u2014 app/routers/dashboard.py:3055", "shortDescription": {"text": "FastAPI POST `kalshi_ai_analyze` without auth dependency \u2014 app/routers/dashboard.py:3055"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5108521a5afc77c0", "name": "FastAPI POST `kalshi_ai_toggle` without auth dependency \u2014 app/routers/dashboard.py:3064", "shortDescription": {"text": "FastAPI POST `kalshi_ai_toggle` without auth dependency \u2014 app/routers/dashboard.py:3064"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-58b75fe4952c6124", "name": "FastAPI POST `kalshi_sports_scan` without auth dependency \u2014 app/routers/dashboard.py:3106", "shortDescription": {"text": "FastAPI POST `kalshi_sports_scan` without auth dependency \u2014 app/routers/dashboard.py:3106"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e7ab498641e83799", "name": "FastAPI POST `kalshi_sports_toggle` without auth dependency \u2014 app/routers/dashboard.py:3114", "shortDescription": {"text": "FastAPI POST `kalshi_sports_toggle` without auth dependency \u2014 app/routers/dashboard.py:3114"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a01a294927736621", "name": "FastAPI POST `kalshi_mm_start` without auth dependency \u2014 app/routers/dashboard.py:3162", "shortDescription": {"text": "FastAPI POST `kalshi_mm_start` without auth dependency \u2014 app/routers/dashboard.py:3162"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3864e8ebc1379ed0", "name": "FastAPI POST `kalshi_mm_stop` without auth dependency \u2014 app/routers/dashboard.py:3172", "shortDescription": {"text": "FastAPI POST `kalshi_mm_stop` without auth dependency \u2014 app/routers/dashboard.py:3172"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3726450fe4a69f5d", "name": "FastAPI POST `kalshi_mm_kill` without auth dependency \u2014 app/routers/dashboard.py:3182", "shortDescription": {"text": "FastAPI POST `kalshi_mm_kill` without auth dependency \u2014 app/routers/dashboard.py:3182"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-58588aea23d370d9", "name": "FastAPI POST `kalshi_mm_flatten` without auth dependency \u2014 app/routers/dashboard.py:3191", "shortDescription": {"text": "FastAPI POST `kalshi_mm_flatten` without auth dependency \u2014 app/routers/dashboard.py:3191"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8bcae8846ff30af7", "name": "FastAPI POST `kalshi_esports_scan` without auth dependency \u2014 app/routers/dashboard.py:3228", "shortDescription": {"text": "FastAPI POST `kalshi_esports_scan` without auth dependency \u2014 app/routers/dashboard.py:3228"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c68ab3c01f746487", "name": "FastAPI POST `kalshi_esports_toggle` without auth dependency \u2014 app/routers/dashboard.py:3236", "shortDescription": {"text": "FastAPI POST `kalshi_esports_toggle` without auth dependency \u2014 app/routers/dashboard.py:3236"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4986414a17cbf0d1", "name": "FastAPI POST `kalshi_ws_subscribe` without auth dependency \u2014 app/routers/dashboard.py:3279", "shortDescription": {"text": "FastAPI POST `kalshi_ws_subscribe` without auth dependency \u2014 app/routers/dashboard.py:3279"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-62ecf212099d3ce9", "name": "FastAPI POST `kalshi_risk_reset` without auth dependency \u2014 app/routers/dashboard.py:3299", "shortDescription": {"text": "FastAPI POST `kalshi_risk_reset` without auth dependency \u2014 app/routers/dashboard.py:3299"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-dd65006d446ba663", "name": "FastAPI POST `kalshi_risk_reconcile` without auth dependency \u2014 app/routers/dashboard.py:3306", "shortDescription": {"text": "FastAPI POST `kalshi_risk_reconcile` without auth dependency \u2014 app/routers/dashboard.py:3306"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-dd68af82c23a7dab", "name": "FastAPI POST `reset_paper_portfolio` without auth dependency \u2014 app/routers/dashboard.py:3438", "shortDescription": {"text": "FastAPI POST `reset_paper_portfolio` without auth dependency \u2014 app/routers/dashboard.py:3438"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a010666d202fcd95", "name": "FastAPI POST `toggle_paper_mode` without auth dependency \u2014 app/routers/dashboard.py:3445", "shortDescription": {"text": "FastAPI POST `toggle_paper_mode` without auth dependency \u2014 app/routers/dashboard.py:3445"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f72621e7e09b7e32", "name": "FastAPI POST `rebalancer_calculate` without auth dependency \u2014 app/routers/dashboard.py:3481", "shortDescription": {"text": "FastAPI POST `rebalancer_calculate` without auth dependency \u2014 app/routers/dashboard.py:3481"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3786e9e395f236d3", "name": "FastAPI POST `rebalancer_execute` without auth dependency \u2014 app/routers/dashboard.py:3501", "shortDescription": {"text": "FastAPI POST `rebalancer_execute` without auth dependency \u2014 app/routers/dashboard.py:3501"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ead0c0360e085c6d", "name": "FastAPI POST `rebalancer_toggle` without auth dependency \u2014 app/routers/dashboard.py:3512", "shortDescription": {"text": "FastAPI POST `rebalancer_toggle` without auth dependency \u2014 app/routers/dashboard.py:3512"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3fac5e2888b4703e", "name": "FastAPI POST `toggle_dryrun_mode` without auth dependency \u2014 app/routers/dashboard.py:3677", "shortDescription": {"text": "FastAPI POST `toggle_dryrun_mode` without auth dependency \u2014 app/routers/dashboard.py:3677"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9ae1fd786e81cd92", "name": "FastAPI POST `reset_dryrun` without auth dependency \u2014 app/routers/dashboard.py:3710", "shortDescription": {"text": "FastAPI POST `reset_dryrun` without auth dependency \u2014 app/routers/dashboard.py:3710"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4d7d4eed168428d5", "name": "FastAPI POST `reset_sol_risk` without auth dependency \u2014 app/routers/dashboard.py:3749", "shortDescription": {"text": "FastAPI POST `reset_sol_risk` without auth dependency \u2014 app/routers/dashboard.py:3749"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-982dc6ea70f252d9", "name": "FastAPI POST `create_backtest_experiment` without auth dependency \u2014 app/routers/dashboard.py:3780", "shortDescription": {"text": "FastAPI POST `create_backtest_experiment` without auth dependency \u2014 app/routers/dashboard.py:3780"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3e79fb9a1d4f467b", "name": "FastAPI POST `log_backtest_trade` without auth dependency \u2014 app/routers/dashboard.py:3802", "shortDescription": {"text": "FastAPI POST `log_backtest_trade` without auth dependency \u2014 app/routers/dashboard.py:3802"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d24f1735910e4398", "name": "FastAPI POST `score_backtest_experiment` without auth dependency \u2014 app/routers/dashboard.py:3822", "shortDescription": {"text": "FastAPI POST `score_backtest_experiment` without auth dependency \u2014 app/routers/dashboard.py:3822"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-79288eb4bdf279f2", "name": "FastAPI POST `import_dry_run_to_experiment` without auth dependency \u2014 app/routers/dashboard.py:3834", "shortDescription": {"text": "FastAPI POST `import_dry_run_to_experiment` without auth dependency \u2014 app/routers/dashboard.py:3834"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-055c3bb1a094a66b", "name": "FastAPI DELETE `delete_backtest_experiment` without auth dependency \u2014 app/routers/dashboard.py:3850", "shortDescription": {"text": "FastAPI DELETE `delete_backtest_experiment` without auth dependency \u2014 app/routers/dashboard.py:3850"}, "fullDescription": {"text": "`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-117b3ed85fd7033f", "name": "FastAPI POST `quick_compare` without auth dependency \u2014 app/routers/dashboard.py:3868", "shortDescription": {"text": "FastAPI POST `quick_compare` without auth dependency \u2014 app/routers/dashboard.py:3868"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/25139"}, "properties": {"repository": "cryptord84/tradingview-bot", "repoUrl": "https://github.com/cryptord84/tradingview-bot", "branch": "main"}, "results": [{"ruleId": "scanner-9f47df1b47ba1179", "level": "note", "message": {"text": "Possibly dead Python function: insert_kalshi_position"}, "properties": {"repobilityId": "7d42b7abacee49d4", "scanner": "scanner-primary", "fingerprint": "9f47df1b47ba1179", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/database.py:1455"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a3e9478059246c96", "level": "note", "message": {"text": "Possibly dead Python function: close_kalshi_position"}, "properties": {"repobilityId": "99e1eaa899c12bcc", "scanner": "scanner-primary", "fingerprint": "a3e9478059246c96", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/database.py:1499"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5ab7f85f3575e062", "level": "note", "message": {"text": "Possibly dead Python function: get_realized_pnl_24h"}, "properties": {"repobilityId": "a62ad4ca6ae1e858", "scanner": "scanner-primary", "fingerprint": "5ab7f85f3575e062", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/database.py:1814"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8d236c9794a2101e", "level": "note", "message": {"text": "Possibly dead Python function: parse_tv_summary"}, "properties": {"repobilityId": "12aad5abac56254c", "scanner": "scanner-primary", "fingerprint": "8d236c9794a2101e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/services/strategy_builder.py:24"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-86a342dfbfcc3554", "level": "note", "message": {"text": "Possibly dead Python function: extract_str"}, "properties": {"repobilityId": "4a6b4af90e5e586d", "scanner": "scanner-primary", "fingerprint": "86a342dfbfcc3554", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/services/strategy_builder.py:43"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-251a5dd5ed16edd9", "level": "note", "message": {"text": "Possibly dead Python function: generate_indicator"}, "properties": {"repobilityId": "6ac037e68e9d6d9c", "scanner": "scanner-primary", "fingerprint": "251a5dd5ed16edd9", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/services/strategy_builder.py:221"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2c309595d00bd1a5", "level": "note", "message": {"text": "Possibly dead Python function: is_loaded"}, "properties": {"repobilityId": "c56be19cecd0852c", "scanner": "scanner-primary", "fingerprint": "2c309595d00bd1a5", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/services/btcd_calibrator.py:82"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cbd4204dd9b65565", "level": "note", "message": {"text": "Possibly dead Python function: notify_daily_summary"}, "properties": {"repobilityId": "0d6d44552cdd02e7", "scanner": "scanner-primary", "fingerprint": "cbd4204dd9b65565", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/services/telegram_service.py:143"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c56d12ec7e06b808", "level": "note", "message": {"text": "Possibly dead Python function: cmd_help"}, "properties": {"repobilityId": "f64b2a7d3ce745d2", "scanner": "scanner-primary", "fingerprint": "c56d12ec7e06b808", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/services/telegram_commands.py:186"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e8288fc31449708a", "level": "note", "message": {"text": "Possibly dead Python function: cmd_status"}, "properties": {"repobilityId": "244b91f3ae7622bf", "scanner": "scanner-primary", "fingerprint": "e8288fc31449708a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/services/telegram_commands.py:192"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c840f82386d44bbd", "level": "note", "message": {"text": "Possibly dead Python function: cmd_wallet"}, "properties": {"repobilityId": "030e5a02c83b4580", "scanner": "scanner-primary", "fingerprint": "c840f82386d44bbd", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/services/telegram_commands.py:264"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-082d62c22ebc0fcb", "level": "note", "message": {"text": "Possibly dead Python function: cmd_vault"}, "properties": {"repobilityId": "1ad1a6112da89361", "scanner": "scanner-primary", "fingerprint": "082d62c22ebc0fcb", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/services/telegram_commands.py:370"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b40d3e40ab9ecf75", "level": "note", "message": {"text": "Possibly dead Python function: cmd_txlog"}, "properties": {"repobilityId": "7dcbefd2c871abc5", "scanner": "scanner-primary", "fingerprint": "b40d3e40ab9ecf75", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/services/telegram_commands.py:412"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a0efa2e051b55a14", "level": "note", "message": {"text": "Possibly dead Python function: cmd_apis"}, "properties": {"repobilityId": "a793f0c329b9fcc2", "scanner": "scanner-primary", "fingerprint": "a0efa2e051b55a14", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/services/telegram_commands.py:460"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ca1957f226ed8a21", "level": "note", "message": {"text": "Possibly dead Python function: cmd_trades"}, "properties": {"repobilityId": "10d9b61d9900485f", "scanner": "scanner-primary", "fingerprint": "ca1957f226ed8a21", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/services/telegram_commands.py:537"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-848c879a1a252d50", "level": "note", "message": {"text": "Possibly dead Python function: cmd_today"}, "properties": {"repobilityId": "336a8e4769f807a6", "scanner": "scanner-primary", "fingerprint": "848c879a1a252d50", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/services/telegram_commands.py:583"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-79e2554a8dc71c29", "level": "note", "message": {"text": "Possibly dead Python function: cmd_pnl"}, "properties": {"repobilityId": "617b3a6f9245d49e", "scanner": "scanner-primary", "fingerprint": "79e2554a8dc71c29", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/services/telegram_commands.py:617"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c397e15dc6967ea2", "level": "note", "message": {"text": "Possibly dead Python function: cmd_kalshi"}, "properties": {"repobilityId": "c77e83e93fa3d855", "scanner": "scanner-primary", "fingerprint": "c397e15dc6967ea2", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/services/telegram_commands.py:672"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6fc6419ea965c99a", "level": "note", "message": {"text": "Possibly dead Python function: cmd_kalshi_reset"}, "properties": {"repobilityId": "7353dbfc002677ab", "scanner": "scanner-primary", "fingerprint": "6fc6419ea965c99a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/services/telegram_commands.py:763"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6926cd28b8454901", "level": "note", "message": {"text": "Possibly dead Python function: cmd_prices"}, "properties": {"repobilityId": "6689ceedc27aea4f", "scanner": "scanner-primary", "fingerprint": "6926cd28b8454901", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/services/telegram_commands.py:779"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6cd098c7d53a3bc3", "level": "note", "message": {"text": "Possibly dead Python function: cmd_arb"}, "properties": {"repobilityId": "a9d0b47aaeff5023", "scanner": "scanner-primary", "fingerprint": "6cd098c7d53a3bc3", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/services/telegram_commands.py:816"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b19fea678d61c424", "level": "note", "message": {"text": "Possibly dead Python function: cmd_spread"}, "properties": {"repobilityId": "fce9de989ee4d91d", "scanner": "scanner-primary", "fingerprint": "b19fea678d61c424", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/services/telegram_commands.py:846"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-78b378381f1714de", "level": "note", "message": {"text": "Possibly dead Python function: cmd_risk"}, "properties": {"repobilityId": "798b07e5c843cb98", "scanner": "scanner-primary", "fingerprint": "78b378381f1714de", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/services/telegram_commands.py:873"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a1e5e2a33956c41f", "level": "warning", "message": {"text": "Privileged port 30 in use"}, "properties": {"repobilityId": "54f172e7d16fc662", "scanner": "scanner-primary", "fingerprint": "a1e5e2a33956c41f", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backtesting/integration_smoke_test.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7947fa0f6f043f4d", "level": "warning", "message": {"text": "Privileged port 40 in use"}, "properties": {"repobilityId": "28c59d470d4929c6", "scanner": "scanner-primary", "fingerprint": "7947fa0f6f043f4d", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backtesting/integration_smoke_test.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-705dba705ed79097", "level": "warning", "message": {"text": "Privileged port 45 in use"}, "properties": {"repobilityId": "73cf64d92574d41c", "scanner": "scanner-primary", "fingerprint": "705dba705ed79097", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backtesting/integration_smoke_test.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9912588d2cede244", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in main.py:367"}, "properties": {"repobilityId": "7efce937690fb5d6", "scanner": "scanner-primary", "fingerprint": "9912588d2cede244", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "main.py"}, "region": {"startLine": 367}}}]}, {"ruleId": "scanner-5f88e21922ce47ff", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in static/index.html:3243"}, "properties": {"repobilityId": "54c44d8c983139f7", "scanner": "scanner-primary", "fingerprint": "5f88e21922ce47ff", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "static/index.html"}, "region": {"startLine": 3243}}}]}, {"ruleId": "scanner-6372cebde0220094", "level": "warning", "message": {"text": "No auth library detected"}, "properties": {"repobilityId": "a5b6035a5bbf8054", "scanner": "scanner-primary", "fingerprint": "6372cebde0220094", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["coverage", "auth"]}}, {"ruleId": "scanner-9f882bebe3690bfa", "level": "note", "message": {"text": "Very large file: app/database.py (1851 lines)"}, "properties": {"repobilityId": "f0a348ce22a3bd84", "scanner": "scanner-primary", "fingerprint": "9f882bebe3690bfa", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-db3ea6affee17814", "level": "note", "message": {"text": "Very large file: app/routers/dashboard.py (3882 lines)"}, "properties": {"repobilityId": "94a36a8b22f9d9a0", "scanner": "scanner-primary", "fingerprint": "db3ea6affee17814", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-1336b9635c535a11", "level": "note", "message": {"text": "Very large file: app/services/telegram_commands.py (1314 lines)"}, "properties": {"repobilityId": "4efd6592c9ef69fb", "scanner": "scanner-primary", "fingerprint": "1336b9635c535a11", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-2ea8c39bbdb79e5c", "level": "note", "message": {"text": "Very large file: app/services/trade_engine.py (1857 lines)"}, "properties": {"repobilityId": "118a4c464b27d0f0", "scanner": "scanner-primary", "fingerprint": "2ea8c39bbdb79e5c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-141b30a41e03817b", "level": "note", "message": {"text": "No license file detected"}, "properties": {"repobilityId": "6f9dead218558856", "scanner": "scanner-primary", "fingerprint": "141b30a41e03817b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["license", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "fd09492f5ce02a36", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "94c7a098c3a36552", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-b9088664ace7f748", "level": "note", "message": {"text": "Composite production-readiness gap"}, "properties": {"repobilityId": "1a77e9864f1a4e1a", "scanner": "scanner-primary", "fingerprint": "b9088664ace7f748", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["production-readiness", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-749d4bc1bd66df5f", "level": "warning", "message": {"text": "Agent instructions exist but release-hardening basics are missing"}, "properties": {"repobilityId": "9e9de2ca2d29da1c", "scanner": "scanner-primary", "fingerprint": "749d4bc1bd66df5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-e30333359fc81a09", "level": "note", "message": {"text": "Legacy-named symbol `csv_backup` in main.py:23"}, "properties": {"repobilityId": "95e753377b6de6b8", "scanner": "scanner-primary", "fingerprint": "e30333359fc81a09", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-8d18e5748fd2b764", "level": "none", "message": {"text": "Commented-code block (16 lines) in main.py:374"}, "properties": {"repobilityId": "d7d832d04ea8a411", "scanner": "scanner-primary", "fingerprint": "8d18e5748fd2b764", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f8dd4a5fccd07b41", "level": "none", "message": {"text": "Commented-code block (8 lines) in app/database.py:37"}, "properties": {"repobilityId": "fd2876bff367f612", "scanner": "scanner-primary", "fingerprint": "f8dd4a5fccd07b41", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7dde1ef423c2afdf", "level": "note", "message": {"text": "Legacy-named symbol `run_daily_backup` in app/utils/csv_backup.py:19"}, "properties": {"repobilityId": "1ce20b14a6185264", "scanner": "scanner-primary", "fingerprint": "7dde1ef423c2afdf", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-16c07832f943d836", "level": "none", "message": {"text": "Commented-code block (6 lines) in app/routers/webhook.py:77"}, "properties": {"repobilityId": "907870de9d406c77", "scanner": "scanner-primary", "fingerprint": "16c07832f943d836", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a73d4be0dcc7bed2", "level": "note", "message": {"text": "Legacy-named symbol `SOL_Mean_Reversion_v1` in app/routers/dashboard.py:3344"}, "properties": {"repobilityId": "abef36d51927e286", "scanner": "scanner-primary", "fingerprint": "a73d4be0dcc7bed2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-4fba6e20c3f86fd5", "level": "none", "message": {"text": "Commented-code block (5 lines) in app/routers/dashboard.py:751"}, "properties": {"repobilityId": "2beb417defd23d5f", "scanner": "scanner-primary", "fingerprint": "4fba6e20c3f86fd5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-64570320c72a1f9b", "level": "none", "message": {"text": "Commented-code block (5 lines) in app/services/aave_v3_client.py:121"}, "properties": {"repobilityId": "317195567fc73c81", "scanner": "scanner-primary", "fingerprint": "64570320c72a1f9b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-65f10572ac9364a4", "level": "none", "message": {"text": "Commented-code block (7 lines) in app/services/kalshi_client.py:303"}, "properties": {"repobilityId": "bb4671ed6807e657", "scanner": "scanner-primary", "fingerprint": "65f10572ac9364a4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2580f51c87bea3b5", "level": "none", "message": {"text": "Commented-code block (7 lines) in app/services/evm_swap_executor.py:108"}, "properties": {"repobilityId": "183c074ac62a2d85", "scanner": "scanner-primary", "fingerprint": "2580f51c87bea3b5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c45dd21b261b3282", "level": "none", "message": {"text": "Commented-code block (9 lines) in app/services/price_feed.py:40"}, "properties": {"repobilityId": "7a0bf6a0f001fd75", "scanner": "scanner-primary", "fingerprint": "c45dd21b261b3282", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a5bb9feed8356ee6", "level": "none", "message": {"text": "Commented-code block (5 lines) in app/services/kalshi_spread_bot.py:128"}, "properties": {"repobilityId": "5135a523ed2b406a", "scanner": "scanner-primary", "fingerprint": "a5bb9feed8356ee6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e70e7dcc72410ec9", "level": "none", "message": {"text": "Commented-code block (5 lines) in app/services/position_monitor.py:59"}, "properties": {"repobilityId": "d39c54f115a6ef64", "scanner": "scanner-primary", "fingerprint": "e70e7dcc72410ec9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-11bd6fc49d1d5afc", "level": "none", "message": {"text": "Commented-code block (6 lines) in app/services/trade_engine.py:148"}, "properties": {"repobilityId": "50bf6ff23c3f81a3", "scanner": "scanner-primary", "fingerprint": "11bd6fc49d1d5afc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-760b59e32e9aabf2", "level": "note", "message": {"text": "Legacy-named symbol `only_old` in scripts/backtest_microstructure.py:141"}, "properties": {"repobilityId": "2ab3248a2ec48caa", "scanner": "scanner-primary", "fingerprint": "760b59e32e9aabf2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-d85406a8b8fb2526", "level": "note", "message": {"text": "Legacy-named symbol `indicator_ema_ribbon_v1` in scripts/generate_indicator_docs.py:37"}, "properties": {"repobilityId": "cb4c47b93e18bcf5", "scanner": "scanner-primary", "fingerprint": "d85406a8b8fb2526", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-d65db014da32378a", "level": "note", "message": {"text": "Legacy-named symbol `parse_csv_legacy` in tools/analyze_backtest.py:103"}, "properties": {"repobilityId": "942be2568f8b72d8", "scanner": "scanner-primary", "fingerprint": "d65db014da32378a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-a1f8eefcf2a631e4", "level": "none", "message": {"text": "Commented-code block (6 lines) in backtesting/data.py:57"}, "properties": {"repobilityId": "dcb85627ac9ebc29", "scanner": "scanner-primary", "fingerprint": "a1f8eefcf2a631e4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-719ecababd4c295f", "level": "none", "message": {"text": "Commented-code block (5 lines) in backtesting/regime_analog.py:30"}, "properties": {"repobilityId": "9a20436b49ea2bac", "scanner": "scanner-primary", "fingerprint": "719ecababd4c295f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6d0cd7136c49e058", "level": "none", "message": {"text": "Commented-code block (8 lines) in backtesting/nightly.py:103"}, "properties": {"repobilityId": "7fe76e7f0c5ea6c8", "scanner": "scanner-primary", "fingerprint": "6d0cd7136c49e058", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2f2bdd10fefc5dfb", "level": "none", "message": {"text": "Commented-code block (7 lines) in backtesting/engine.py:23"}, "properties": {"repobilityId": "75c34dca160e9422", "scanner": "scanner-primary", "fingerprint": "2f2bdd10fefc5dfb", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-75f052447b9388a8", "level": "none", "message": {"text": "Commented-code block (5 lines) in backtesting/kalshi/nightly.py:70"}, "properties": {"repobilityId": "9f280deeb3be0024", "scanner": "scanner-primary", "fingerprint": "75f052447b9388a8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8e047ab7af03962f", "level": "note", "message": {"text": "7 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "5a0455f6498c27ad", "scanner": "scanner-primary", "fingerprint": "8e047ab7af03962f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "18998513521b7201", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-46969939caf8120b", "level": "note", "message": {"text": "Near-duplicate function bodies in 9 places"}, "properties": {"repobilityId": "980b361d0e47e1d8", "scanner": "scanner-primary", "fingerprint": "46969939caf8120b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "6fbe9c20a71b8b02", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "daa1e2225537c27b", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "f8b385808201adcc", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "e347a3138e7332d7", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "9b47b53aba6599b6", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "3fc86dbc5b3026fb", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "259773703404e5a4", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "d808e2e914a9384b", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "e7282546b5586b4f", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "1051bfeeb970d525", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "8b3b81bf9c4b6d39", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "9b33e635ef0d7484", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "27b0875d9d334444", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "dc258e32bdbbc59b", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "5bbf1dfb8bb231a5", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "f5bf83da1d8132ca", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "00d49d3bd8103d28", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "100b16af6641f6a1", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-073623dce9757b2f", "level": "error", "message": {"text": "FastAPI POST `receive_webhook` without auth dependency \u2014 app/routers/webhook.py:38"}, "properties": {"repobilityId": "78e33192fccc617b", "scanner": "scanner-primary", "fingerprint": "073623dce9757b2f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/webhook.py"}, "region": {"startLine": 38}}}]}, {"ruleId": "scanner-611d98456b4b1a01", "level": "error", "message": {"text": "FastAPI POST `update_settings` without auth dependency \u2014 app/routers/dashboard.py:1463"}, "properties": {"repobilityId": "f51fb4fe7e90c7bb", "scanner": "scanner-primary", "fingerprint": "611d98456b4b1a01", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 1463}}}]}, {"ruleId": "scanner-89ea60745b4256f1", "level": "error", "message": {"text": "FastAPI POST `bot_start` without auth dependency \u2014 app/routers/dashboard.py:1562"}, "properties": {"repobilityId": "b3a2531196adf220", "scanner": "scanner-primary", "fingerprint": "89ea60745b4256f1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 1562}}}]}, {"ruleId": "scanner-4a55e30cc210f1cd", "level": "error", "message": {"text": "FastAPI POST `bot_stop` without auth dependency \u2014 app/routers/dashboard.py:1567"}, "properties": {"repobilityId": "04d46dcca8a73540", "scanner": "scanner-primary", "fingerprint": "4a55e30cc210f1cd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 1567}}}]}, {"ruleId": "scanner-0b90b136c2d48329", "level": "error", "message": {"text": "FastAPI POST `kamino_deposit` without auth dependency \u2014 app/routers/dashboard.py:1808"}, "properties": {"repobilityId": "bf03ccf3a3f6ea3e", "scanner": "scanner-primary", "fingerprint": "0b90b136c2d48329", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 1808}}}]}, {"ruleId": "scanner-999aeeace1b2fd23", "level": "error", "message": {"text": "FastAPI POST `kamino_withdraw` without auth dependency \u2014 app/routers/dashboard.py:1843"}, "properties": {"repobilityId": "346d93a11258fe8b", "scanner": "scanner-primary", "fingerprint": "999aeeace1b2fd23", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 1843}}}]}, {"ruleId": "scanner-a2a092e089d90ca9", "level": "error", "message": {"text": "FastAPI POST `aave_deposit` without auth dependency \u2014 app/routers/dashboard.py:1899"}, "properties": {"repobilityId": "56a908faa3107328", "scanner": "scanner-primary", "fingerprint": "a2a092e089d90ca9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 1899}}}]}, {"ruleId": "scanner-b9342b3dce7b76c8", "level": "error", "message": {"text": "FastAPI POST `aave_withdraw` without auth dependency \u2014 app/routers/dashboard.py:1963"}, "properties": {"repobilityId": "451c2846c1c10390", "scanner": "scanner-primary", "fingerprint": "b9342b3dce7b76c8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 1963}}}]}, {"ruleId": "scanner-90986b65e96ecdb0", "level": "error", "message": {"text": "FastAPI POST `run_scout_now` without auth dependency \u2014 app/routers/dashboard.py:2020"}, "properties": {"repobilityId": "5815d49d5bf9c48a", "scanner": "scanner-primary", "fingerprint": "90986b65e96ecdb0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 2020}}}]}, {"ruleId": "scanner-cde642a8071b13fa", "level": "error", "message": {"text": "FastAPI POST `manual_close_position` without auth dependency \u2014 app/routers/dashboard.py:2130"}, "properties": {"repobilityId": "c09daf022a0aa545", "scanner": "scanner-primary", "fingerprint": "cde642a8071b13fa", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 2130}}}]}, {"ruleId": "scanner-9f35619bfda8a07a", "level": "error", "message": {"text": "FastAPI POST `add_backtest` without auth dependency \u2014 app/routers/dashboard.py:2291"}, "properties": {"repobilityId": "3d8cf931836bdb4d", "scanner": "scanner-primary", "fingerprint": "9f35619bfda8a07a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 2291}}}]}, {"ruleId": "scanner-8c6d5e4d03f81d8a", "level": "error", "message": {"text": "FastAPI POST `import_backtests_from_reports` without auth dependency \u2014 app/routers/dashboard.py:2302"}, "properties": {"repobilityId": "5000cd03ec9c10dc", "scanner": "scanner-primary", "fingerprint": "8c6d5e4d03f81d8a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 2302}}}]}, {"ruleId": "scanner-a444e7b97cbe81c4", "level": "error", "message": {"text": "FastAPI DELETE `remove_backtest` without auth dependency \u2014 app/routers/dashboard.py:2351"}, "properties": {"repobilityId": "2706263e2adb9171", "scanner": "scanner-primary", "fingerprint": "a444e7b97cbe81c4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 2351}}}]}, {"ruleId": "scanner-679915d0f225efcb", "level": "error", "message": {"text": "FastAPI POST `parse_tv_summary` without auth dependency \u2014 app/routers/dashboard.py:2360"}, "properties": {"repobilityId": "0c807ac555a9bf59", "scanner": "scanner-primary", "fingerprint": "679915d0f225efcb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 2360}}}]}, {"ruleId": "scanner-43def6b7df82ff6a", "level": "error", "message": {"text": "FastAPI POST `generate_indicator` without auth dependency \u2014 app/routers/dashboard.py:2386"}, "properties": {"repobilityId": "b8a1f699eca65746", "scanner": "scanner-primary", "fingerprint": "43def6b7df82ff6a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 2386}}}]}, {"ruleId": "scanner-8f4823a2bb38b87c", "level": "error", "message": {"text": "FastAPI POST `parameter_grid` without auth dependency \u2014 app/routers/dashboard.py:2404"}, "properties": {"repobilityId": "800162bb6bd607db", "scanner": "scanner-primary", "fingerprint": "8f4823a2bb38b87c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 2404}}}]}, {"ruleId": "scanner-3590c95b9bf292ff", "level": "error", "message": {"text": "FastAPI POST `token_sweep` without auth dependency \u2014 app/routers/dashboard.py:2432"}, "properties": {"repobilityId": "c0c70b4c4331f412", "scanner": "scanner-primary", "fingerprint": "3590c95b9bf292ff", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 2432}}}]}, {"ruleId": "scanner-bcd7cdfb7a7c50a4", "level": "error", "message": {"text": "FastAPI POST `kalshi_place_order` without auth dependency \u2014 app/routers/dashboard.py:2701"}, "properties": {"repobilityId": "af44e879230da05e", "scanner": "scanner-primary", "fingerprint": "bcd7cdfb7a7c50a4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 2701}}}]}, {"ruleId": "scanner-5c58df98c32b340d", "level": "error", "message": {"text": "FastAPI POST `kalshi_arb_scan_now` without auth dependency \u2014 app/routers/dashboard.py:2862"}, "properties": {"repobilityId": "17ed5dfb67e8601e", "scanner": "scanner-primary", "fingerprint": "5c58df98c32b340d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 2862}}}]}, {"ruleId": "scanner-2db65d155b605a9a", "level": "error", "message": {"text": "FastAPI POST `kalshi_arb_toggle` without auth dependency \u2014 app/routers/dashboard.py:2871"}, "properties": {"repobilityId": "384db9d16630d5ad", "scanner": "scanner-primary", "fingerprint": "2db65d155b605a9a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 2871}}}]}, {"ruleId": "scanner-d572586ae0c94693", "level": "error", "message": {"text": "FastAPI POST `kalshi_spread_start` without auth dependency \u2014 app/routers/dashboard.py:2900"}, "properties": {"repobilityId": "ecf9e2b03989badf", "scanner": "scanner-primary", "fingerprint": "d572586ae0c94693", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 2900}}}]}, {"ruleId": "scanner-35417a823c67df55", "level": "error", "message": {"text": "FastAPI POST `kalshi_spread_stop` without auth dependency \u2014 app/routers/dashboard.py:2911"}, "properties": {"repobilityId": "97834a912a87409a", "scanner": "scanner-primary", "fingerprint": "35417a823c67df55", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 2911}}}]}, {"ruleId": "scanner-64ce734ab1b96682", "level": "error", "message": {"text": "FastAPI POST `kalshi_spread_kill` without auth dependency \u2014 app/routers/dashboard.py:2920"}, "properties": {"repobilityId": "18ab8462940530e3", "scanner": "scanner-primary", "fingerprint": "64ce734ab1b96682", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 2920}}}]}, {"ruleId": "scanner-2f20b1668609428e", "level": "error", "message": {"text": "FastAPI POST `kalshi_spread_flatten` without auth dependency \u2014 app/routers/dashboard.py:2929"}, "properties": {"repobilityId": "01298d0bb51ee2bd", "scanner": "scanner-primary", "fingerprint": "2f20b1668609428e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 2929}}}]}, {"ruleId": "scanner-01812a1f2dc1834b", "level": "error", "message": {"text": "FastAPI POST `kalshi_spread_add_market` without auth dependency \u2014 app/routers/dashboard.py:2943"}, "properties": {"repobilityId": "cd4d27d5381085c2", "scanner": "scanner-primary", "fingerprint": "01812a1f2dc1834b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 2943}}}]}, {"ruleId": "scanner-78e2fa192005d23f", "level": "error", "message": {"text": "FastAPI POST `kalshi_whale_scan` without auth dependency \u2014 app/routers/dashboard.py:2970"}, "properties": {"repobilityId": "1775e4cfc42db30e", "scanner": "scanner-primary", "fingerprint": "78e2fa192005d23f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 2970}}}]}, {"ruleId": "scanner-8365052e3e321900", "level": "error", "message": {"text": "FastAPI POST `kalshi_whale_toggle` without auth dependency \u2014 app/routers/dashboard.py:2979"}, "properties": {"repobilityId": "e28512fe4db3d520", "scanner": "scanner-primary", "fingerprint": "8365052e3e321900", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 2979}}}]}, {"ruleId": "scanner-abae9af724222667", "level": "error", "message": {"text": "FastAPI POST `kalshi_tech_scan` without auth dependency \u2014 app/routers/dashboard.py:3011"}, "properties": {"repobilityId": "cf33dee9d6bdb6cf", "scanner": "scanner-primary", "fingerprint": "abae9af724222667", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 3011}}}]}, {"ruleId": "scanner-1d31256a1e893873", "level": "error", "message": {"text": "FastAPI POST `kalshi_tech_toggle` without auth dependency \u2014 app/routers/dashboard.py:3020"}, "properties": {"repobilityId": "939dc2134e7ee2fe", "scanner": "scanner-primary", "fingerprint": "1d31256a1e893873", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 3020}}}]}, {"ruleId": "scanner-b24774bb7ebe1a47", "level": "error", "message": {"text": "FastAPI POST `kalshi_ai_analyze` without auth dependency \u2014 app/routers/dashboard.py:3055"}, "properties": {"repobilityId": "396151234f980e43", "scanner": "scanner-primary", "fingerprint": "b24774bb7ebe1a47", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 3055}}}]}, {"ruleId": "scanner-5108521a5afc77c0", "level": "error", "message": {"text": "FastAPI POST `kalshi_ai_toggle` without auth dependency \u2014 app/routers/dashboard.py:3064"}, "properties": {"repobilityId": "4a361f2701c54c20", "scanner": "scanner-primary", "fingerprint": "5108521a5afc77c0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 3064}}}]}, {"ruleId": "scanner-58b75fe4952c6124", "level": "error", "message": {"text": "FastAPI POST `kalshi_sports_scan` without auth dependency \u2014 app/routers/dashboard.py:3106"}, "properties": {"repobilityId": "ca669991b29f5a32", "scanner": "scanner-primary", "fingerprint": "58b75fe4952c6124", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 3106}}}]}, {"ruleId": "scanner-e7ab498641e83799", "level": "error", "message": {"text": "FastAPI POST `kalshi_sports_toggle` without auth dependency \u2014 app/routers/dashboard.py:3114"}, "properties": {"repobilityId": "2de99c3055d11767", "scanner": "scanner-primary", "fingerprint": "e7ab498641e83799", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 3114}}}]}, {"ruleId": "scanner-a01a294927736621", "level": "error", "message": {"text": "FastAPI POST `kalshi_mm_start` without auth dependency \u2014 app/routers/dashboard.py:3162"}, "properties": {"repobilityId": "d1e139000cb2703e", "scanner": "scanner-primary", "fingerprint": "a01a294927736621", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 3162}}}]}, {"ruleId": "scanner-3864e8ebc1379ed0", "level": "error", "message": {"text": "FastAPI POST `kalshi_mm_stop` without auth dependency \u2014 app/routers/dashboard.py:3172"}, "properties": {"repobilityId": "55bf4d5e1a17164f", "scanner": "scanner-primary", "fingerprint": "3864e8ebc1379ed0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 3172}}}]}, {"ruleId": "scanner-3726450fe4a69f5d", "level": "error", "message": {"text": "FastAPI POST `kalshi_mm_kill` without auth dependency \u2014 app/routers/dashboard.py:3182"}, "properties": {"repobilityId": "119f1b0f277e3388", "scanner": "scanner-primary", "fingerprint": "3726450fe4a69f5d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 3182}}}]}, {"ruleId": "scanner-58588aea23d370d9", "level": "error", "message": {"text": "FastAPI POST `kalshi_mm_flatten` without auth dependency \u2014 app/routers/dashboard.py:3191"}, "properties": {"repobilityId": "e4f027db9b8cccfc", "scanner": "scanner-primary", "fingerprint": "58588aea23d370d9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 3191}}}]}, {"ruleId": "scanner-8bcae8846ff30af7", "level": "error", "message": {"text": "FastAPI POST `kalshi_esports_scan` without auth dependency \u2014 app/routers/dashboard.py:3228"}, "properties": {"repobilityId": "54e6f92ccb4d514f", "scanner": "scanner-primary", "fingerprint": "8bcae8846ff30af7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 3228}}}]}, {"ruleId": "scanner-c68ab3c01f746487", "level": "error", "message": {"text": "FastAPI POST `kalshi_esports_toggle` without auth dependency \u2014 app/routers/dashboard.py:3236"}, "properties": {"repobilityId": "cfacab6c748e15e6", "scanner": "scanner-primary", "fingerprint": "c68ab3c01f746487", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 3236}}}]}, {"ruleId": "scanner-4986414a17cbf0d1", "level": "error", "message": {"text": "FastAPI POST `kalshi_ws_subscribe` without auth dependency \u2014 app/routers/dashboard.py:3279"}, "properties": {"repobilityId": "e5630332f5740748", "scanner": "scanner-primary", "fingerprint": "4986414a17cbf0d1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 3279}}}]}, {"ruleId": "scanner-62ecf212099d3ce9", "level": "error", "message": {"text": "FastAPI POST `kalshi_risk_reset` without auth dependency \u2014 app/routers/dashboard.py:3299"}, "properties": {"repobilityId": "21b13fc986522db2", "scanner": "scanner-primary", "fingerprint": "62ecf212099d3ce9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 3299}}}]}, {"ruleId": "scanner-dd65006d446ba663", "level": "error", "message": {"text": "FastAPI POST `kalshi_risk_reconcile` without auth dependency \u2014 app/routers/dashboard.py:3306"}, "properties": {"repobilityId": "e9627545476f8b61", "scanner": "scanner-primary", "fingerprint": "dd65006d446ba663", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 3306}}}]}, {"ruleId": "scanner-dd68af82c23a7dab", "level": "error", "message": {"text": "FastAPI POST `reset_paper_portfolio` without auth dependency \u2014 app/routers/dashboard.py:3438"}, "properties": {"repobilityId": "3ec5b3381ade4587", "scanner": "scanner-primary", "fingerprint": "dd68af82c23a7dab", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 3438}}}]}, {"ruleId": "scanner-a010666d202fcd95", "level": "error", "message": {"text": "FastAPI POST `toggle_paper_mode` without auth dependency \u2014 app/routers/dashboard.py:3445"}, "properties": {"repobilityId": "be77c007508fa5ac", "scanner": "scanner-primary", "fingerprint": "a010666d202fcd95", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 3445}}}]}, {"ruleId": "scanner-f72621e7e09b7e32", "level": "error", "message": {"text": "FastAPI POST `rebalancer_calculate` without auth dependency \u2014 app/routers/dashboard.py:3481"}, "properties": {"repobilityId": "387f4ad49fa6ca46", "scanner": "scanner-primary", "fingerprint": "f72621e7e09b7e32", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 3481}}}]}, {"ruleId": "scanner-3786e9e395f236d3", "level": "error", "message": {"text": "FastAPI POST `rebalancer_execute` without auth dependency \u2014 app/routers/dashboard.py:3501"}, "properties": {"repobilityId": "89998a9ca50cc10e", "scanner": "scanner-primary", "fingerprint": "3786e9e395f236d3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 3501}}}]}, {"ruleId": "scanner-ead0c0360e085c6d", "level": "error", "message": {"text": "FastAPI POST `rebalancer_toggle` without auth dependency \u2014 app/routers/dashboard.py:3512"}, "properties": {"repobilityId": "6eb4926dadd95153", "scanner": "scanner-primary", "fingerprint": "ead0c0360e085c6d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 3512}}}]}, {"ruleId": "scanner-3fac5e2888b4703e", "level": "error", "message": {"text": "FastAPI POST `toggle_dryrun_mode` without auth dependency \u2014 app/routers/dashboard.py:3677"}, "properties": {"repobilityId": "93cdc966d12f4a27", "scanner": "scanner-primary", "fingerprint": "3fac5e2888b4703e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 3677}}}]}, {"ruleId": "scanner-9ae1fd786e81cd92", "level": "error", "message": {"text": "FastAPI POST `reset_dryrun` without auth dependency \u2014 app/routers/dashboard.py:3710"}, "properties": {"repobilityId": "4b449489728d50c9", "scanner": "scanner-primary", "fingerprint": "9ae1fd786e81cd92", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 3710}}}]}, {"ruleId": "scanner-4d7d4eed168428d5", "level": "error", "message": {"text": "FastAPI POST `reset_sol_risk` without auth dependency \u2014 app/routers/dashboard.py:3749"}, "properties": {"repobilityId": "0fd8562625b38eb4", "scanner": "scanner-primary", "fingerprint": "4d7d4eed168428d5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 3749}}}]}, {"ruleId": "scanner-982dc6ea70f252d9", "level": "error", "message": {"text": "FastAPI POST `create_backtest_experiment` without auth dependency \u2014 app/routers/dashboard.py:3780"}, "properties": {"repobilityId": "ad34a6fe0b7942fa", "scanner": "scanner-primary", "fingerprint": "982dc6ea70f252d9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 3780}}}]}, {"ruleId": "scanner-3e79fb9a1d4f467b", "level": "error", "message": {"text": "FastAPI POST `log_backtest_trade` without auth dependency \u2014 app/routers/dashboard.py:3802"}, "properties": {"repobilityId": "4221e9a53b4db6ab", "scanner": "scanner-primary", "fingerprint": "3e79fb9a1d4f467b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 3802}}}]}, {"ruleId": "scanner-d24f1735910e4398", "level": "error", "message": {"text": "FastAPI POST `score_backtest_experiment` without auth dependency \u2014 app/routers/dashboard.py:3822"}, "properties": {"repobilityId": "c5ba47786b8b9045", "scanner": "scanner-primary", "fingerprint": "d24f1735910e4398", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 3822}}}]}, {"ruleId": "scanner-79288eb4bdf279f2", "level": "error", "message": {"text": "FastAPI POST `import_dry_run_to_experiment` without auth dependency \u2014 app/routers/dashboard.py:3834"}, "properties": {"repobilityId": "21c851d4dcd8ec88", "scanner": "scanner-primary", "fingerprint": "79288eb4bdf279f2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 3834}}}]}, {"ruleId": "scanner-055c3bb1a094a66b", "level": "error", "message": {"text": "FastAPI DELETE `delete_backtest_experiment` without auth dependency \u2014 app/routers/dashboard.py:3850"}, "properties": {"repobilityId": "35c5665228fa26c6", "scanner": "scanner-primary", "fingerprint": "055c3bb1a094a66b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 3850}}}]}, {"ruleId": "scanner-117b3ed85fd7033f", "level": "error", "message": {"text": "FastAPI POST `quick_compare` without auth dependency \u2014 app/routers/dashboard.py:3868"}, "properties": {"repobilityId": "9aca196b96460a57", "scanner": "scanner-primary", "fingerprint": "117b3ed85fd7033f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/routers/dashboard.py"}, "region": {"startLine": 3868}}}]}]}]}