Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

terrene-foundation/envoy

https://github.com/terrene-foundation/envoy · scanned 2026-06-16 00:32 UTC (2 months, 2 weeks ago)

811 raw signals (61 security + 750 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 2 weeks ago · v1 · 741 actionable findings from 2 signal sources. 198 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

100.0% cov · 732 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 5 High 141 Medium 341 Low 82 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 9 System graph 732 Crowd 0 Layer: Quality 502 Security 191 Software 11 Api 1 Frontend 32 Network 4

Exclude dismissed / FP Exclude test files

All 10336 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`pytest_configure`	software	healthy	`conftest.py:12`
`_load_env`	software	healthy	`conftest.py:19`
`test_empty_token_rejected`	software	healthy	`tests/integration/test_grant_moment_friction_token_vocabula…`
`test_unknown_token_rejected_with_canonical_vocabulary`	software	healthy	`tests/integration/test_grant_moment_friction_token_vocabula…`
`test_each_canonical_token_accepted`	software	healthy	`tests/integration/test_grant_moment_friction_token_vocabula…`
`_mint_steward`	software	healthy	`tests/integration/test_registry_resolve_signature_threshold…`
`test_two_distinct_pinned_signers_meets_quorum`	software	healthy	`tests/integration/test_registry_resolve_signature_threshold…`
`test_single_valid_signer_raises_threshold_not_met`	software	healthy	`tests/integration/test_registry_resolve_signature_threshold…`
`test_duplicate_signature_by_same_key_does_not_inflate_count`	software	healthy	`tests/integration/test_registry_resolve_signature_threshold…`
`test_unpinned_signer_is_ignored_not_counted`	software	healthy	`tests/integration/test_registry_resolve_signature_threshold…`
`test_no_pinned_signer_raises_no_pinned_signers`	software	healthy	`tests/integration/test_registry_resolve_signature_threshold…`
`test_tampered_signature_does_not_count`	software	healthy	`tests/integration/test_registry_resolve_signature_threshold…`
`test_zero_threshold_is_input_error_not_silent_pass`	software	healthy	`tests/integration/test_registry_resolve_signature_threshold…`
`test_revoked_key_is_hard_rejected_even_when_present`	software	healthy	`tests/integration/test_registry_resolve_signature_threshold…`
`test_rotated_out_but_not_revoked_key_still_validates`	software	healthy	`tests/integration/test_registry_resolve_signature_threshold…`
`test_revocation_and_rotation_are_distinct_branches`	software	healthy	`tests/integration/test_registry_resolve_signature_threshold…`
`_steward`	software	healthy	`tests/integration/test_ohttp_key_config_steward_signed.py:28`
`hpke_keypair`	software	healthy	`tests/integration/test_ohttp_key_config_steward_signed.py:35`
`key_config`	software	healthy	`tests/integration/test_ohttp_key_config_steward_signed.py:40`
`test_two_of_n_steward_signed_config_verifies`	software	healthy	`tests/integration/test_ohttp_key_config_steward_signed.py:46`
`test_single_steward_signature_rejected`	software	healthy	`tests/integration/test_ohttp_key_config_steward_signed.py:69`
`test_unpinned_signer_does_not_count_toward_quorum`	software	healthy	`tests/integration/test_ohttp_key_config_steward_signed.py:86`
`_flag_measurement`	software	healthy	`tests/integration/test_heartbeat_21_flag_payload.py:46`
`_signed_config`	software	healthy	`tests/integration/test_heartbeat_21_flag_payload.py:51`
`test_exactly_21_flags`	software	healthy	`tests/integration/test_heartbeat_21_flag_payload.py:67`
`test_duress_flag_never_in_allowed_set`	software	healthy	`tests/integration/test_heartbeat_21_flag_payload.py:70`
`test_star_shares_over_21_flag_payload_combine`	software	healthy	`tests/integration/test_heartbeat_21_flag_payload.py:73`
`test_malformed_share_raises_star_shard_corrupt`	software	healthy	`tests/integration/test_heartbeat_21_flag_payload.py:88`
`test_mixed_commitment_cohort_raises`	software	healthy	`tests/integration/test_heartbeat_21_flag_payload.py:94`
`test_rare_flag_below_floor_structurally_withheld`	software	healthy	`tests/integration/test_heartbeat_21_flag_payload.py:105`
`test_encapsulation_routes_through_verified_key`	software	healthy	`tests/integration/test_heartbeat_21_flag_payload.py:124`
`test_tampered_config_rejected_at_fetch`	software	healthy	`tests/integration/test_heartbeat_21_flag_payload.py:151`
`test_none_config_maps_to_existence_check_failed`	software	healthy	`tests/integration/test_heartbeat_21_flag_payload.py:172`
`test_encapsulation_info_binds_key_id`	software	healthy	`tests/integration/test_heartbeat_21_flag_payload.py:178`
`test_round_trip_seal_open_with_bound_info`	software	healthy	`tests/integration/test_heartbeat_21_flag_payload.py:189`
`test_open_with_wrong_info_fails`	software	healthy	`tests/integration/test_heartbeat_21_flag_payload.py:200`
`test_high_stakes_decided_on_non_primary_raises_at_m3`	software	healthy	`tests/integration/test_h03_primary_channel_binding.py:31`
`test_high_stakes_decided_on_primary_succeeds`	software	healthy	`tests/integration/test_h03_primary_channel_binding.py:61`
`test_low_stakes_decided_on_non_primary_is_allowed`	software	healthy	`tests/integration/test_h03_primary_channel_binding.py:86`
`test_default_route_is_ohttp_only_no_tor_dependency`	software	healthy	`tests/integration/test_tor_route_optional_phase02.py:20`
`test_tor_selected_and_reachable_uses_tor`	software	healthy	`tests/integration/test_tor_route_optional_phase02.py:26`
`test_tor_requested_but_daemon_down_raises`	software	healthy	`tests/integration/test_tor_route_optional_phase02.py:29`
`signed_publisher`	software	healthy	`tests/integration/test_co_validator_100_benign_corpus.py:43`
`sign`	software	healthy	`tests/integration/test_co_validator_100_benign_corpus.py:49`
`test_corpus_has_exactly_100_benign_fixtures`	software	healthy	`tests/integration/test_co_validator_100_benign_corpus.py:57`
`test_benign_skill_accepts`	software	healthy	`tests/integration/test_co_validator_100_benign_corpus.py:63`
`test_all_benign_accept_aggregate`	software	healthy	`tests/integration/test_co_validator_100_benign_corpus.py:89`
`test_eviction_at_ceiling_releases_oldest_nonce`	software	healthy	`tests/integration/test_grant_moment_dedup_store_fifo_evicti…`
`test_non_evicted_nonces_still_replay_defended`	software	healthy	`tests/integration/test_grant_moment_dedup_store_fifo_evicti…`
`test_intent_id_axis_evicts_independently_of_nonce`	software	healthy	`tests/integration/test_grant_moment_dedup_store_fifo_evicti…`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`conftest.py`	software	healthy	`conftest.py`
`GEMINI.md`	software	healthy	`GEMINI.md`
`README.md`	software	healthy	`README.md`
`CLAUDE.md`	software	healthy	`CLAUDE.md`
`CONTRIBUTING.md`	software	healthy	`CONTRIBUTING.md`
`CHARTER.md`	software	healthy	`CHARTER.md`
`pyrightconfig.json`	software	healthy	`pyrightconfig.json`
`ROADMAP.md`	software	healthy	`ROADMAP.md`
`.env.example`	software	healthy	`.env.example`
`pyproject.toml`	software	healthy	`pyproject.toml`
`LICENSE`	software	healthy	`LICENSE`
`NOTICE`	software	healthy	`NOTICE`
`SECURITY.md`	software	healthy	`SECURITY.md`
`AGENTS.md`	software	healthy	`AGENTS.md`
`DECISIONS.md`	software	healthy	`DECISIONS.md`
`__init__.py`	software	healthy	`tests/__init__.py`
`conftest.py`	software	healthy	`tests/conftest.py`
`test_grant_moment_friction_token_vocabulary.py`	software	healthy	`tests/integration/test_grant_moment_friction_token_vocabula…`
`test_registry_resolve_signature_threshold.py`	software	healthy	`tests/integration/test_registry_resolve_signature_threshold…`
`test_ohttp_key_config_steward_signed.py`	software	healthy	`tests/integration/test_ohttp_key_config_steward_signed.py`
`test_heartbeat_21_flag_payload.py`	software	healthy	`tests/integration/test_heartbeat_21_flag_payload.py`
`test_h03_primary_channel_binding.py`	software	healthy	`tests/integration/test_h03_primary_channel_binding.py`
`test_tor_route_optional_phase02.py`	software	healthy	`tests/integration/test_tor_route_optional_phase02.py`
`test_co_validator_100_benign_corpus.py`	software	healthy	`tests/integration/test_co_validator_100_benign_corpus.py`
`test_grant_moment_dedup_store_fifo_eviction.py`	software	healthy	`tests/integration/test_grant_moment_dedup_store_fifo_evicti…`
`__init__.py`	software	healthy	`tests/integration/__init__.py`
`test_edr_verifier_six_steps.py`	software	healthy	`tests/integration/test_edr_verifier_six_steps.py`
`test_skill_md_parser_canonical_format.py`	software	healthy	`tests/integration/test_skill_md_parser_canonical_format.py`
`test_heartbeat_consent_grant_moment.py`	software	healthy	`tests/integration/test_heartbeat_consent_grant_moment.py`
`test_envelope_library_tier_signatures.py`	software	healthy	`tests/integration/test_envelope_library_tier_signatures.py`
`test_ohttp_key_config_expiry_iso.py`	software	healthy	`tests/integration/test_ohttp_key_config_expiry_iso.py`
`test_envelope_md_generator_field_complete.py`	software	healthy	`tests/integration/test_envelope_md_generator_field_complete…`
`test-learning-system.js`	software	healthy	`tests/integration/test-learning-system.js`
`test_ohttp_freshest_config_selection.py`	software	healthy	`tests/integration/test_ohttp_freshest_config_selection.py`
`test_envelope_library_offline_cache.py`	software	healthy	`tests/integration/test_envelope_library_offline_cache.py`
`test-hooks-system.js`	software	healthy	`tests/integration/test-hooks-system.js`
`test_ohttp_relay_down_typed.py`	software	healthy	`tests/integration/test_ohttp_relay_down_typed.py`
`test_co_validator_six_steps.py`	software	healthy	`tests/integration/test_co_validator_six_steps.py`
`test_heartbeat_dp_epsilon_budget_per_metric.py`	software	healthy	`tests/integration/test_heartbeat_dp_epsilon_budget_per_metr…`
`run-all.js`	software	healthy	`tests/integration/run-all.js`
`test_cert_pin_mismatch.py`	software	healthy	`tests/integration/test_cert_pin_mismatch.py`
`test_cross_principal_dual_signature.py`	software	healthy	`tests/integration/test_cross_principal_dual_signature.py`
`test_tls_hsts_enforcement.py`	software	healthy	`tests/integration/test_tls_hsts_enforcement.py`
`test_heartbeat_consent_cascade_revoke.py`	software	healthy	`tests/integration/test_heartbeat_consent_cascade_revoke.py`
`test_grant_moment_cross_channel_confirm_failed.py`	software	healthy	`tests/integration/test_grant_moment_cross_channel_confirm_f…`
`test_heartbeat_consent_to_emit_gate.py`	software	healthy	`tests/integration/test_heartbeat_consent_to_emit_gate.py`
`test_heartbeat_dp_client_side_before_split.py`	software	healthy	`tests/integration/test_heartbeat_dp_client_side_before_spli…`
`test_heartbeat_k_anonymity_floor_100.py`	software	healthy	`tests/integration/test_heartbeat_k_anonymity_floor_100.py`
`test_co_validator_3_adversarial_corpus.py`	software	healthy	`tests/integration/test_co_validator_3_adversarial_corpus.py`
`test_edr_dual_sign_required.py`	software	healthy	`tests/integration/test_edr_dual_sign_required.py`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`TestFrictionTokenVocabulary`	software	healthy	`tests/integration/test_grant_moment_friction_token_vocabula…`
`TestStewardQuorumThreshold`	software	healthy	`tests/integration/test_registry_resolve_signature_threshold…`
`TestRevocationVersusRotation`	software	healthy	`tests/integration/test_registry_resolve_signature_threshold…`
`TestKeyConfigStewardSigned`	software	healthy	`tests/integration/test_ohttp_key_config_steward_signed.py:45`
`TestStarRoundTripAndPayload`	software	healthy	`tests/integration/test_heartbeat_21_flag_payload.py:66`
`TestH03PrimaryChannelBinding`	software	healthy	`tests/integration/test_h03_primary_channel_binding.py:30`
`TestTorRouteOptional`	software	healthy	`tests/integration/test_tor_route_optional_phase02.py:19`
`TestDedupStoreFifoEviction`	software	healthy	`tests/integration/test_grant_moment_dedup_store_fifo_evicti…`
`TestGreenPath`	software	healthy	`tests/integration/test_edr_verifier_six_steps.py:57`
`TestStep1OrgGenesisRoot`	software	healthy	`tests/integration/test_edr_verifier_six_steps.py:83`
`TestStep2DeployingSignature`	software	healthy	`tests/integration/test_edr_verifier_six_steps.py:94`
`TestStep3EmployeeSignature`	software	healthy	`tests/integration/test_edr_verifier_six_steps.py:124`
`TestStep4ScopeClosedEnum`	software	healthy	`tests/integration/test_edr_verifier_six_steps.py:142`
`TestStep5ReattestationWindow`	software	healthy	`tests/integration/test_edr_verifier_six_steps.py:156`
`TestStep6AlgorithmCompatibility`	software	healthy	`tests/integration/test_edr_verifier_six_steps.py:204`
`TestCanonicalParse`	software	healthy	`tests/integration/test_skill_md_parser_canonical_format.py:…`
`TestParserEdgeCases`	software	healthy	`tests/integration/test_skill_md_parser_canonical_format.py:…`
`TestParserFailClosed`	software	healthy	`tests/integration/test_skill_md_parser_canonical_format.py:…`
`TestConsentDefaultOptOut`	software	healthy	`tests/integration/test_heartbeat_consent_grant_moment.py:86`
`TestConsentGrantMoment`	software	healthy	`tests/integration/test_heartbeat_consent_grant_moment.py:106`
`_NexusFetchClient`	software	healthy	`tests/integration/test_envelope_library_tier_signatures.py:…`
`TestFvReadPath`	software	healthy	`tests/integration/test_envelope_library_tier_signatures.py:…`
`TestPublishReadBack`	software	healthy	`tests/integration/test_envelope_library_tier_signatures.py:…`
`TestCommunityPublishGate`	software	healthy	`tests/integration/test_envelope_library_tier_signatures.py:…`
`TestKeyConfigExpiryIso`	software	healthy	`tests/integration/test_ohttp_key_config_expiry_iso.py:34`
`TestEnvelopeFieldCompleteness`	software	healthy	`tests/integration/test_envelope_md_generator_field_complete…`
`TestEnvelopeYamlRoundTrip`	software	healthy	`tests/integration/test_envelope_md_generator_field_complete…`
`TestFreshestConfigSelection`	software	healthy	`tests/integration/test_ohttp_freshest_config_selection.py:24`
`_ToggleClient`	software	healthy	`tests/integration/test_envelope_library_offline_cache.py:35`
`TestRelayDownTyped`	software	healthy	`tests/integration/test_ohttp_relay_down_typed.py:23`
`TestSixStepsHappyPath`	software	healthy	`tests/integration/test_co_validator_six_steps.py:64`
`TestStep4OverPrivilege`	software	healthy	`tests/integration/test_co_validator_six_steps.py:100`
`TestStep5TypedPending`	software	healthy	`tests/integration/test_co_validator_six_steps.py:124`
`TestStep2UnknownPattern`	software	healthy	`tests/integration/test_co_validator_six_steps.py:144`
`TestStep1SchemaValidation`	software	healthy	`tests/integration/test_co_validator_six_steps.py:161`
`TestStep6PublisherSignature`	software	healthy	`tests/integration/test_co_validator_six_steps.py:178`
`TestSkillSourceHashIntegrity`	software	healthy	`tests/integration/test_co_validator_six_steps.py:209`
`TestDPBudgetPerMetric`	software	healthy	`tests/integration/test_heartbeat_dp_epsilon_budget_per_metr…`
`TestCertPinMismatch`	software	healthy	`tests/integration/test_cert_pin_mismatch.py:47`
`TestCrossPrincipalPhase01Refusal`	software	healthy	`tests/integration/test_cross_principal_dual_signature.py:30`
`TestHstsEnforcement`	software	healthy	`tests/integration/test_tls_hsts_enforcement.py:48`
`TestConsentCascadeRevoke`	software	healthy	`tests/integration/test_heartbeat_consent_cascade_revoke.py:…`
`TestCrossChannelConfirmFailed`	software	healthy	`tests/integration/test_grant_moment_cross_channel_confirm_f…`
`TestConsentToEmitGate`	software	healthy	`tests/integration/test_heartbeat_consent_to_emit_gate.py:81`
`_RecordingStarClient`	software	healthy	`tests/integration/test_heartbeat_dp_client_side_before_spli…`
`TestDPBeforeSplit`	software	healthy	`tests/integration/test_heartbeat_dp_client_side_before_spli…`
`TestKAnonymityFloorTrueCohort`	software	healthy	`tests/integration/test_heartbeat_k_anonymity_floor_100.py:44`
`TestAdversarialLiteralCalls`	software	healthy	`tests/integration/test_co_validator_3_adversarial_corpus.py…`
`TestAdversarialDynamicDispatch`	software	healthy	`tests/integration/test_co_validator_3_adversarial_corpus.py…`
`TestDualSignRequired`	software	healthy	`tests/integration/test_edr_dual_sign_required.py:33`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`tests`	software	healthy	`tests`
`integration`	software	healthy	`tests/integration`
`channels`	software	healthy	`tests/integration/channels`
`tier1`	software	healthy	`tests/tier1`
`fixtures`	software	healthy	`tests/fixtures`
`conformance`	software	healthy	`tests/fixtures/conformance`
`e7`	software	healthy	`tests/fixtures/conformance/e7`
`conformance`	software	healthy	`tests/conformance`
`helpers`	software	healthy	`tests/helpers`
`tier3`	software	healthy	`tests/tier3`
`regression`	software	healthy	`tests/regression`
`support`	software	healthy	`tests/support`
`tier2`	software	healthy	`tests/tier2`
`acceptance`	software	healthy	`tests/acceptance`
`phase_02`	software	healthy	`tests/acceptance/phase_02`
`co_validator_corpus`	software	healthy	`tests/acceptance/phase_02/co_validator_corpus`
`adversarial`	software	healthy	`tests/acceptance/phase_02/co_validator_corpus/adversarial`
`benign`	software	healthy	`tests/acceptance/phase_02/co_validator_corpus/benign`
`e2e`	software	healthy	`tests/e2e`
`sdk`	software	healthy	`tests/sdk`
`workspaces`	software	healthy	`workspaces`
`kailash-upgrade`	software	healthy	`workspaces/kailash-upgrade`
`04-validate`	software	healthy	`workspaces/kailash-upgrade/04-validate`
`phase-01-mvp`	software	healthy	`workspaces/phase-01-mvp`
`briefs`	software	healthy	`workspaces/phase-01-mvp/briefs`
`journal`	software	healthy	`workspaces/phase-01-mvp/journal`
`todos`	software	healthy	`workspaces/phase-01-mvp/todos`
`done`	software	healthy	`workspaces/phase-01-mvp/todos/done`
`active`	software	healthy	`workspaces/phase-01-mvp/todos/active`
`02-plans`	software	healthy	`workspaces/phase-01-mvp/02-plans`
`03-user-flows`	software	healthy	`workspaces/phase-01-mvp/03-user-flows`
`04-validate`	software	healthy	`workspaces/phase-01-mvp/04-validate`
`01-analysis`	software	healthy	`workspaces/phase-01-mvp/01-analysis`
`phase-02-distribution`	software	healthy	`workspaces/phase-02-distribution`
`briefs`	software	healthy	`workspaces/phase-02-distribution/briefs`
`journal`	software	healthy	`workspaces/phase-02-distribution/journal`
`todos`	software	healthy	`workspaces/phase-02-distribution/todos`
`active`	software	healthy	`workspaces/phase-02-distribution/todos/active`
`02-plans`	software	healthy	`workspaces/phase-02-distribution/02-plans`
`03-user-flows`	software	healthy	`workspaces/phase-02-distribution/03-user-flows`
`04-validate`	software	healthy	`workspaces/phase-02-distribution/04-validate`
`01-analysis`	software	healthy	`workspaces/phase-02-distribution/01-analysis`
`01-research`	software	healthy	`workspaces/phase-02-distribution/01-analysis/01-research`
`phase-00-alignment`	software	healthy	`workspaces/phase-00-alignment`
`journal`	software	healthy	`workspaces/phase-00-alignment/journal`
`issues`	software	healthy	`workspaces/phase-00-alignment/issues`
`todos`	software	healthy	`workspaces/phase-00-alignment/todos`
`active`	software	healthy	`workspaces/phase-00-alignment/todos/active`
`02-plans`	software	healthy	`workspaces/phase-00-alignment/02-plans`
`legal`	software	healthy	`workspaces/phase-00-alignment/02-plans/legal`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`auth::.claude/skills/03-nexus/README.md`	security	healthy	`.claude/skills/03-nexus/README.md`
`auth::envoy/channels/errors.py`	security	healthy	`envoy/channels/errors.py`
`auth::.codex/skills/18-security-patterns/SKILL.md`	security	healthy	`.codex/skills/18-security-patterns/SKILL.md`
`auth::.codex/skills/03-nexus/SKILL.md`	security	healthy	`.codex/skills/03-nexus/SKILL.md`
`auth::envoy/connection_vault/adapter.py`	security	healthy	`envoy/connection_vault/adapter.py`
`auth::tests/integration/channels/test_web_adapter_lifecycle…`	security	healthy	`tests/integration/channels/test_web_adapter_lifecycle.py`
`auth::.claude/skills/18-security-patterns/SKILL.md`	security	healthy	`.claude/skills/18-security-patterns/SKILL.md`
`auth::envoy/skill_ingest/permission_registry.py`	security	healthy	`envoy/skill_ingest/permission_registry.py`
`auth::envoy/connection_vault/__init__.py`	security	healthy	`envoy/connection_vault/__init__.py`
`auth::.claude/skills/26-eatp-reference/SKILL.md`	security	healthy	`.claude/skills/26-eatp-reference/SKILL.md`
`auth::workspaces/phase-00-alignment/issues/generate-specs.py`	security	healthy	`workspaces/phase-00-alignment/issues/generate-specs.py`
`auth::envoy/skill_ingest/envelope_md.py`	security	healthy	`envoy/skill_ingest/envelope_md.py`
`auth::.claude/skills/03-nexus/SKILL.md`	security	healthy	`.claude/skills/03-nexus/SKILL.md`
`auth::tests/acceptance/phase_02/co_validator_corpus/generat…`	security	healthy	`tests/acceptance/phase_02/co_validator_corpus/generate_corp…`
`auth::envoy/channels/slack.py`	security	healthy	`envoy/channels/slack.py`
`auth::tests/integration/test_envelope_md_generator_field_co…`	security	healthy	`tests/integration/test_envelope_md_generator_field_complete…`
`auth::.codex/skills/26-eatp-reference/SKILL.md`	security	healthy	`.codex/skills/26-eatp-reference/SKILL.md`
`auth::GEMINI.md`	security	healthy	`GEMINI.md`
`auth::.claude/skills/05-enterprise/SKILL.md`	security	healthy	`.claude/skills/05-enterprise/SKILL.md`
`auth::.claude/hooks/validate-workflow.js`	security	healthy	`.claude/hooks/validate-workflow.js`
`auth::.codex/skills/01-core-sdk/SKILL.md`	security	healthy	`.codex/skills/01-core-sdk/SKILL.md`
`auth::.codex/skills/03-nexus/README.md`	security	healthy	`.codex/skills/03-nexus/README.md`
`auth::.claude/skills/01-core-sdk/SKILL.md`	security	healthy	`.claude/skills/01-core-sdk/SKILL.md`
`auth::AGENTS.md`	security	healthy	`AGENTS.md`

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`GEMINI.md`
`203.0.113.42`	network	healthy	`tests/integration/test_ohttp_relay_ip_stripped.py`
`198.51.100.7`	network	healthy	`tests/integration/test_ohttp_relay_ip_stripped.py`
`10.0.0.1`	network	healthy	`tests/integration/channels/test_wave_a_r3_closures.py`
`08.0.0.1`	network	healthy	`tests/integration/channels/test_redteam_r4_closures.py`
`192.168.1.10`	network	healthy	`tests/integration/channels/test_web_adapter_lifecycle.py`
`169.254.169.254`	network	healthy	`envoy/channels/discord.py`
`127.0.0.0`	network	healthy	`envoy/channels/discord.py`
`10.0.0.0`	network	healthy	`envoy/channels/discord.py`
`172.16.0.0`	network	healthy	`envoy/channels/discord.py`
`192.168.0.0`	network	healthy	`envoy/channels/discord.py`
`169.254.0.0`	network	healthy	`envoy/channels/discord.py`

Label	Layer	Status	Path
`pending_grant`	data	healthy	`envoy/runtime/session.py`
`session_observed_state`	data	healthy	`envoy/runtime/session.py`
`velocity_raise_ratchet`	data	healthy	`envoy/runtime/session.py`
`visible_secret`	data	healthy	`envoy/trust/store.py`
`boundary_conversation_state`	data	healthy	`envoy/trust/store.py`
`digest_pause`	data	healthy	`envoy/trust/store.py`
`digest_schedule`	data	healthy	`envoy/trust/store.py`
`digest_backfill`	data	healthy	`envoy/trust/store.py`
`digest_engagement`	data	healthy	`envoy/trust/store.py`
`digest_form_preference`	data	healthy	`envoy/trust/store.py`
`digest_active_channels`	data	healthy	`envoy/trust/store.py`

Label	Layer	Status	Path
`port:5433`	network	healthy	`scripts/development/setup-databases.sh`
`port:3307`	network	healthy	`scripts/development/setup-databases.sh`
`port:5432`	network	healthy	`scripts/development/setup-databases.sh`
`port:3306`	network	healthy	`scripts/development/setup-databases.sh`
`port:23`	network	healthy	`scripts/metrics/weekly-summary.sh`
`port:59`	network	healthy	`scripts/metrics/weekly-summary.sh`
`port:10`	network	healthy	`.claude/sync-manifest.yaml`
`port:20`	network	healthy	`.claude/sync-manifest.yaml`
`port:30`	network	healthy	`.claude/sync-manifest.yaml`
`port:31`	network	healthy	`.claude/sync-manifest.yaml`
`port:3000`	network	healthy	`.claude/skills/10-deployment-git/SKILL.md`

Label	Layer	Status	Path
`mysql`	data	healthy	`GEMINI.md`
`postgresql`	data	healthy	`.env.example`
`sqlite`	data	healthy	`tests/tier1/test_daily_digest_pause.py`
`mongodb`	data	healthy	`scripts/development/README.md`
`postgres`	data	healthy	`scripts/development/README.md`
`redis`	data	healthy	`.claude/workflows/redteam-round.mjs`

Label	Layer	Status	Path
`changes`	cicd	healthy	`.github/workflows/tests.yml`
`test`	cicd	healthy	`.github/workflows/tests.yml`
`tests-gate`	cicd	healthy	`.github/workflows/tests.yml`
`notify`	cicd	healthy	`.github/workflows/auto-merge.yml`
`validate`	cicd	healthy	`.github/workflows/validate.yml`

Label	Layer	Status	Path
`envoy`	network	healthy	`README.md`
`nginx`	network	healthy	`scripts/deployment/deploy-tenant.sh`
`loadbalancer`	network	healthy	`.claude/skills/03-nexus/SKILL.md`
`traefik`	network	healthy	`.claude/skills/03-nexus/SKILL.md`

Label	Layer	Status	Path
`slack_token::tests/integration/channels/test_f15b2_visible_…`	security	healthy	`tests/integration/channels/test_f15b2_visible_secret_channe…`
`password_literal::scripts/deployment/deploy-tenant.sh`	security	healthy	`scripts/deployment/deploy-tenant.sh`
`password_literal::.claude/skills/18-security-patterns/SKILL…`	security	healthy	`.claude/skills/18-security-patterns/SKILL.md`
`password_literal::.codex/skills/18-security-patterns/SKILL.…`	security	healthy	`.codex/skills/18-security-patterns/SKILL.md`

Label	Layer	Status	Path
`vps::aws`	hardware	healthy	`scripts/deployment/README.md`
`vps::gcp`	hardware	healthy	`scripts/deployment/README.md`
`vps::azure`	hardware	healthy	`scripts/deployment/README.md`

Label	Layer	Status	Path
`gha::tests`	cicd	healthy	`.github/workflows/tests.yml`
`gha::auto-merge`	cicd	healthy	`.github/workflows/auto-merge.yml`
`gha::validate`	cicd	healthy	`.github/workflows/validate.yml`

Label	Layer	Status	Path
`repobility-clone-_vq1isli`	software	healthy	`/tmp/repobility-clone-_vq1isli`

Label	Layer	Status	Path
`kafka`	data	healthy	`scripts/development/README.md`

Label	Layer	Status	Path
`gpu (detected)`	hardware	healthy	`.claude/skills/23-uiux-design-principles/SKILL.md`

Label	Layer	Status	Path
`DISCORD_WEBHOOK_URL`	cicd	healthy	`—`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/86ffcffd-1af8-41b1-bd74-0b509c763bf1/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/86ffcffd-1af8-41b1-bd74-0b509c763bf1/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

terrene-foundation/envoy

Complete repo analysis

function 50+

file 50+

class 50+

directory 50+

auth 24

service 12

table 11

port 11

database 6

job 5

load_balancer 4

secret 4

vps 3

pipeline 3

repo 1

queue 1

gpu 1

env_var 1