{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-bead75b0f9233e05", "name": "No API endpoints detected", "shortDescription": {"text": "No API endpoints detected"}, "fullDescription": {"text": "The scanner did not find FastAPI/Flask/Express/NestJS/GraphQL/gRPC routes. If this repo exposes APIs, the framework may be unsupported."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f568f16a8b20a42a", "name": "Stray `console.log` in TS/JS \u2014 docs/harvest/test-media-gen.ts:44", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 docs/harvest/test-media-gen.ts:44"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2033cd973004d81e", "name": "Stray `console.log` in TS/JS \u2014 scripts/visual-qa.ts:16", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/visual-qa.ts:16"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a79d0b6db2683c91", "name": "Stray `console.log` in TS/JS \u2014 scripts/mem-pad.ts:61", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/mem-pad.ts:61"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0027f82bc771d6fc", "name": "Stray `console.log` in TS/JS \u2014 scripts/seed-share-fixture.ts:179", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/seed-share-fixture.ts:179"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9822900ce17e7173", "name": "Stray `console.log` in TS/JS \u2014 scripts/test-media-homework.ts:98", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/test-media-homework.ts:98"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-491410c66d12f234", "name": "Stray `console.log` in TS/JS \u2014 scripts/seed-demo.ts:76", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/seed-demo.ts:76"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-af0e2ce93b355fab", "name": "Stray `console.log` in TS/JS \u2014 scripts/test-homework-handler.ts:92", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/test-homework-handler.ts:92"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-38005f3982b46fea", "name": "Stray `console.log` in TS/JS \u2014 scripts/mem-seed.ts:30", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/mem-seed.ts:30"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e76730c872fc4d40", "name": "Stray `console.log` in TS/JS \u2014 scripts/gen-brand-images.ts:205", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/gen-brand-images.ts:205"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-af72d92fda31dbdd", "name": "Stray `console.log` in TS/JS \u2014 scripts/video/cards.ts:92", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/video/cards.ts:92"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b539f5de476f0c56", "name": "Stray `console.log` in TS/JS \u2014 scripts/video/assemble.ts:124", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/video/assemble.ts:124"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6ae8a6424473c14a", "name": "Stray `console.log` in TS/JS \u2014 scripts/video/record-chat-fallback.ts:45", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/video/record-chat-fallback.ts:45"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b995ac110c3f0fc5", "name": "Stray `console.log` in TS/JS \u2014 scripts/video/record-static.ts:24", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/video/record-static.ts:24"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-907b9073f4e29788", "name": "Stray `console.log` in TS/JS \u2014 scripts/video/_debug2.ts:6", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/video/_debug2.ts:6"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0cfb313dc3dde32f", "name": "Stray `console.log` in TS/JS \u2014 scripts/video/_debug-login.ts:9", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/video/_debug-login.ts:9"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f505e455a7a4de06", "name": "Stray `console.log` in TS/JS \u2014 scripts/video/manifest.ts:61", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/video/manifest.ts:61"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c8a5c665022e370b", "name": "Stray `console.log` in TS/JS \u2014 scripts/video/record-chat.ts:58", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/video/record-chat.ts:58"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e4eacef33b2642dc", "name": "Stray `console.log` in TS/JS \u2014 scripts/video/narrate.ts:63", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/video/narrate.ts:63"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5c312a554bdd41b3", "name": "Stray `console.log` in TS/JS \u2014 scripts/video/review.ts:55", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/video/review.ts:55"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-90d6069876440b1c", "name": "`truncate` class without `title=` for hover reveal \u2014 components/chat/sidebar-history-item.tsx:53", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 components/chat/sidebar-history-item.tsx:53"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4a504b2b28d246b0", "name": "`truncate` class without `title=` for hover reveal \u2014 components/chat/sidebar-user-nav.tsx:67", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 components/chat/sidebar-user-nav.tsx:67"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-95ea646010bab980", "name": "`truncate` class without `title=` for hover reveal \u2014 components/quiz/chain/FinalScreen.tsx:57", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 components/quiz/chain/FinalScreen.tsx:57"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-86099a8828ba9db2", "name": "`truncate` class without `title=` for hover reveal \u2014 components/studio/student-panel.tsx:53", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 components/studio/student-panel.tsx:53"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ea57d5a36d5ec97c", "name": "`truncate` class without `title=` for hover reveal \u2014 components/studio/student-list.tsx:81", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 components/studio/student-list.tsx:81"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cf24d29a3aaa685b", "name": "`truncate` class without `title=` for hover reveal \u2014 components/studio/student-videos-tab.tsx:158", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 components/studio/student-videos-tab.tsx:158"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-eff8eb0cd00a8ce9", "name": "`truncate` class without `title=` for hover reveal \u2014 components/studio/student-artifacts-tab.tsx:72", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 components/studio/student-artifacts-tab.tsx:72"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-89ca1028b4496d35", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 app/layout.tsx:82", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 app/layout.tsx:82"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eb4d7e44d92faf66", "name": "Stray `console.log` in TS/JS \u2014 lib/agent/run.ts:48", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 lib/agent/run.ts:48"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8cddeedc5340fd6a", "name": "Stray `console.log` in TS/JS \u2014 lib/analysis/video-analyze.ts:292", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 lib/analysis/video-analyze.ts:292"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-63c16dc6b76b7c4a", "name": "Stray `console.log` in TS/JS \u2014 lib/db/migrate.ts:12", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 lib/db/migrate.ts:12"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e513b93dbb4a07cf", "name": "Stray `console.log` in TS/JS \u2014 evals/homework-eval.ts:777", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 evals/homework-eval.ts:777"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d63da3583b14afc0", "name": "Dockerfile runs as root: Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-93e02e0d67c8f3e8", "name": "Docker base image is tag-pinned but not digest-pinned: node:22-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: node:22-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-aa5acaa49eb8315b", "name": "Containers defined but no K8s/orchestration manifest found", "shortDescription": {"text": "Containers defined but no K8s/orchestration manifest found"}, "fullDescription": {"text": "Repo has Dockerfiles/compose but no Kubernetes/Nomad manifests. If the target deployment is K8s, the manifests may live in a separate ops repo."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-13653cb55bebeddf", "name": "Insecure pattern 'new_function_used' in mcp/exercise-server.cjs:2953", "shortDescription": {"text": "Insecure pattern 'new_function_used' in mcp/exercise-server.cjs:2953"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d1b2306ed360c90c", "name": "Possible secret in scripts/seed-demo.ts", "shortDescription": {"text": "Possible secret in scripts/seed-demo.ts"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-0e0453c8c109acce", "name": "Insecure pattern 'node_child_process' in scripts/gen-brand-images.ts:12", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/gen-brand-images.ts:12"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-79f0096afb22b8a3", "name": "Insecure pattern 'node_child_process' in scripts/video/assemble.ts:6", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/video/assemble.ts:6"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fdc3df6a5d0bb27e", "name": "Possible secret in scripts/video/_debug2.ts", "shortDescription": {"text": "Possible secret in scripts/video/_debug2.ts"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-92e90f882fe9e110", "name": "Insecure pattern 'direct_innerhtml_assignment' in scripts/video/helpers.ts:59", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in scripts/video/helpers.ts:59"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cd0bec412831ce67", "name": "Insecure pattern 'node_child_process' in scripts/video/manifest.ts:2", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/video/manifest.ts:2"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7debb789905d3447", "name": "Insecure pattern 'node_child_process' in scripts/video/narrate.ts:10", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/video/narrate.ts:10"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-11aa5618ca848608", "name": "Insecure pattern 'direct_innerhtml_assignment' in components/chat/diffview.tsx:70", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in components/chat/diffview.tsx:70"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1e0980a2d01c34bd", "name": "Insecure pattern 'dangerous_innerhtml' in app/layout.tsx:82", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in app/layout.tsx:82"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3f4d0dafb2beb032", "name": "Insecure pattern 'direct_innerhtml_assignment' in lib/editor/functions.tsx:19", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in lib/editor/functions.tsx:19"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-479c030e693eb938", "name": "Very large file: mcp/exercise-server.cjs (21353 lines)", "shortDescription": {"text": "Very large file: mcp/exercise-server.cjs (21353 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-52c319098e2e0b50", "name": "Very large file: components/chat/icons.tsx (1213 lines)", "shortDescription": {"text": "Very large file: components/chat/icons.tsx (1213 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6893a6c8b0861585", "name": "Very low test-to-source ratio", "shortDescription": {"text": "Very low test-to-source ratio"}, "fullDescription": {"text": "14 test file(s) for 250 source file(s) (ratio 0.06). Consider adding integration or unit tests for critical paths."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 116 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 26 placeholder/mock markers across 11 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3769d96599d57714", "name": "Commented-code block (5 lines) in tests/demo-path.spec.ts:223", "shortDescription": {"text": "Commented-code block (5 lines) in tests/demo-path.spec.ts:223"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f2a443d5eb5bfa5d", "name": "Commented-code block (17 lines) in mcp/exercise-server.cjs:9404", "shortDescription": {"text": "Commented-code block (17 lines) in mcp/exercise-server.cjs:9404"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-761341ae7f731739", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/mem-probe-newchat.mjs:18", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/mem-probe-newchat.mjs:18"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f8d8c9868f54bd82", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/visual-qa.ts:119", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/visual-qa.ts:119"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f1e432da30d426fc", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/mem-stress.mjs:29", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/mem-stress.mjs:29"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b4cab2c5593cc4b2", "name": "Commented-code block (5 lines) in scripts/video/assemble.ts:1", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/video/assemble.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-848b2aa5cc34dc9e", "name": "Commented-code block (9 lines) in scripts/video/record-chat-fallback.ts:1", "shortDescription": {"text": "Commented-code block (9 lines) in scripts/video/record-chat-fallback.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-69ca1df2cea84b3f", "name": "Commented-code block (10 lines) in scripts/video/record-static.ts:1", "shortDescription": {"text": "Commented-code block (10 lines) in scripts/video/record-static.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f3e41abe915c6fe6", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/video/_debug2.ts:3", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/video/_debug2.ts:3"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-81d92fc6cfacd430", "name": "Commented-code block (6 lines) in scripts/video/helpers.ts:150", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/video/helpers.ts:150"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c671f39f7ef6fcd5", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/video/helpers.ts:166", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/video/helpers.ts:166"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e4db8f6e3def73cf", "name": "Commented-code block (6 lines) in scripts/video/record-chat.ts:1", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/video/record-chat.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9e58ba0756e3a1ad", "name": "`fetch()` without try/.catch or AbortSignal \u2014 components/chat/multimodal-input.tsx:194", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 components/chat/multimodal-input.tsx:194"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fe3fde52d53767a6", "name": "`fetch()` without try/.catch or AbortSignal \u2014 components/chat/artifact.tsx:177", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 components/chat/artifact.tsx:177"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6c9327f7b4ffaa03", "name": "`fetch()` without try/.catch or AbortSignal \u2014 components/chat/app-sidebar.tsx:69", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 components/chat/app-sidebar.tsx:69"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0d425a4042652378", "name": "`fetch()` without try/.catch or AbortSignal \u2014 components/chat/sidebar-history.tsx:173", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 components/chat/sidebar-history.tsx:173"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1696214f97fd88ca", "name": "`fetch()` without try/.catch or AbortSignal \u2014 components/chat/message-actions.tsx:91", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 components/chat/message-actions.tsx:91"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f8138c02b7ef90d9", "name": "`fetch()` without try/.catch or AbortSignal \u2014 components/studio/student-form-dialog.tsx:83", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 components/studio/student-form-dialog.tsx:83"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7659ed38d5f764e2", "name": "`fetch()` without try/.catch or AbortSignal \u2014 components/studio/student-memory-tab.tsx:165", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 components/studio/student-memory-tab.tsx:165"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8e09cd0722a9540b", "name": "`fetch()` without try/.catch or AbortSignal \u2014 components/studio/student-videos-tab.tsx:24", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 components/studio/student-videos-tab.tsx:24"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-40c84a997e2e4b7f", "name": "`fetch()` without try/.catch or AbortSignal \u2014 lib/ai/tools/get-weather.ts:66", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 lib/ai/tools/get-weather.ts:66"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5339296f226cda39", "name": "Commented-code block (5 lines) in lib/agent/run.ts:244", "shortDescription": {"text": "Commented-code block (5 lines) in lib/agent/run.ts:244"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-78c26cf0c1a234b1", "name": "Commented-code block (5 lines) in lib/analysis/video-analyze.ts:281", "shortDescription": {"text": "Commented-code block (5 lines) in lib/analysis/video-analyze.ts:281"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ec3df286d1165b46", "name": "Legacy-named symbol `Message_v2` in lib/db/schema.ts:45", "shortDescription": {"text": "Legacy-named symbol `Message_v2` in lib/db/schema.ts:45"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-adbdcab376b8f238", "name": "`fetch()` without try/.catch or AbortSignal \u2014 lib/db/queries-studio.ts:118", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 lib/db/queries-studio.ts:118"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c36bca2671e2ce57", "name": "Commented-code block (5 lines) in evals/homework-eval.ts:45", "shortDescription": {"text": "Commented-code block (5 lines) in evals/homework-eval.ts:45"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-14f70653d1c5b85d", "name": "`fetch()` without try/.catch or AbortSignal \u2014 artifacts/text/client.tsx:158", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 artifacts/text/client.tsx:158"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ae9bef57a85a391d", "name": "`fetch()` without try/.catch or AbortSignal \u2014 artifacts/homework/client.tsx:23", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 artifacts/homework/client.tsx:23"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-51dbf90b6ad9e4e9", "name": "28 env vars used in code but missing from .env.example", "shortDescription": {"text": "28 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `CI`, `CI_PLAYWRIGHT`, `COMPARE_MODELS`, `DEBUG_HW`, `DEMO_BASE_URL`, `GCS_BUCKET`, `GOOGLE_CLOUD_PROJECT`, `IS_DEMO` + 20 more. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/21720"}, "properties": {"repository": "Turanchoks/teachflow", "repoUrl": "https://github.com/Turanchoks/teachflow", "branch": "main"}, "results": [{"ruleId": "scanner-bead75b0f9233e05", "level": "none", "message": {"text": "No API endpoints detected"}, "properties": {"repobilityId": "0f8bb852027c38f8", "scanner": "scanner-primary", "fingerprint": "bead75b0f9233e05", "layer": "api", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-f568f16a8b20a42a", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 docs/harvest/test-media-gen.ts:44"}, "properties": {"repobilityId": "2ff44a8fd1624a2d", "scanner": "scanner-primary", "fingerprint": "f568f16a8b20a42a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-2033cd973004d81e", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/visual-qa.ts:16"}, "properties": {"repobilityId": "6a7d05e062f3dd52", "scanner": "scanner-primary", "fingerprint": "2033cd973004d81e", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-a79d0b6db2683c91", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/mem-pad.ts:61"}, "properties": {"repobilityId": "c61677544b10eb27", "scanner": "scanner-primary", "fingerprint": "a79d0b6db2683c91", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-0027f82bc771d6fc", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/seed-share-fixture.ts:179"}, "properties": {"repobilityId": "6ec4400c7d4b33d4", "scanner": "scanner-primary", "fingerprint": "0027f82bc771d6fc", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-9822900ce17e7173", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/test-media-homework.ts:98"}, "properties": {"repobilityId": "37bea3fa084fe122", "scanner": "scanner-primary", "fingerprint": "9822900ce17e7173", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-491410c66d12f234", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/seed-demo.ts:76"}, "properties": {"repobilityId": "b7f1ec3c1a06f2fb", "scanner": "scanner-primary", "fingerprint": "491410c66d12f234", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-af0e2ce93b355fab", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/test-homework-handler.ts:92"}, "properties": {"repobilityId": "e6f03e203c251705", "scanner": "scanner-primary", "fingerprint": "af0e2ce93b355fab", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-38005f3982b46fea", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/mem-seed.ts:30"}, "properties": {"repobilityId": "0e59c0ef02698b80", "scanner": "scanner-primary", "fingerprint": "38005f3982b46fea", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-e76730c872fc4d40", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/gen-brand-images.ts:205"}, "properties": {"repobilityId": "745c292e0996e93d", "scanner": "scanner-primary", "fingerprint": "e76730c872fc4d40", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-af72d92fda31dbdd", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/video/cards.ts:92"}, "properties": {"repobilityId": "953178b28af6da6f", "scanner": "scanner-primary", "fingerprint": "af72d92fda31dbdd", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-b539f5de476f0c56", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/video/assemble.ts:124"}, "properties": {"repobilityId": "05b41f13fa519ea0", "scanner": "scanner-primary", "fingerprint": "b539f5de476f0c56", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-6ae8a6424473c14a", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/video/record-chat-fallback.ts:45"}, "properties": {"repobilityId": "841377451892fcf5", "scanner": "scanner-primary", "fingerprint": "6ae8a6424473c14a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-b995ac110c3f0fc5", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/video/record-static.ts:24"}, "properties": {"repobilityId": "ddd47a06cadc7452", "scanner": "scanner-primary", "fingerprint": "b995ac110c3f0fc5", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-907b9073f4e29788", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/video/_debug2.ts:6"}, "properties": {"repobilityId": "a8037b75b8a11c3a", "scanner": "scanner-primary", "fingerprint": "907b9073f4e29788", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-0cfb313dc3dde32f", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/video/_debug-login.ts:9"}, "properties": {"repobilityId": "520d15ab4c41bff9", "scanner": "scanner-primary", "fingerprint": "0cfb313dc3dde32f", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-f505e455a7a4de06", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/video/manifest.ts:61"}, "properties": {"repobilityId": "cb6f404c8b2fdb32", "scanner": "scanner-primary", "fingerprint": "f505e455a7a4de06", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c8a5c665022e370b", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/video/record-chat.ts:58"}, "properties": {"repobilityId": "a3f3cd2b29d573a9", "scanner": "scanner-primary", "fingerprint": "c8a5c665022e370b", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-e4eacef33b2642dc", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/video/narrate.ts:63"}, "properties": {"repobilityId": "2f8004fb22865197", "scanner": "scanner-primary", "fingerprint": "e4eacef33b2642dc", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-5c312a554bdd41b3", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/video/review.ts:55"}, "properties": {"repobilityId": "511c3f24c48563af", "scanner": "scanner-primary", "fingerprint": "5c312a554bdd41b3", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-90d6069876440b1c", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 components/chat/sidebar-history-item.tsx:53"}, "properties": {"repobilityId": "1e1d56d685c462d7", "scanner": "scanner-primary", "fingerprint": "90d6069876440b1c", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-4a504b2b28d246b0", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 components/chat/sidebar-user-nav.tsx:67"}, "properties": {"repobilityId": "c52ed17b22cb3e8f", "scanner": "scanner-primary", "fingerprint": "4a504b2b28d246b0", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-95ea646010bab980", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 components/quiz/chain/FinalScreen.tsx:57"}, "properties": {"repobilityId": "7989954cff630dae", "scanner": "scanner-primary", "fingerprint": "95ea646010bab980", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-86099a8828ba9db2", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 components/studio/student-panel.tsx:53"}, "properties": {"repobilityId": "cd6222acae3a4274", "scanner": "scanner-primary", "fingerprint": "86099a8828ba9db2", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-ea57d5a36d5ec97c", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 components/studio/student-list.tsx:81"}, "properties": {"repobilityId": "b1f5ae4fea1c026b", "scanner": "scanner-primary", "fingerprint": "ea57d5a36d5ec97c", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-cf24d29a3aaa685b", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 components/studio/student-videos-tab.tsx:158"}, "properties": {"repobilityId": "3721f9452a60df1b", "scanner": "scanner-primary", "fingerprint": "cf24d29a3aaa685b", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-eff8eb0cd00a8ce9", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 components/studio/student-artifacts-tab.tsx:72"}, "properties": {"repobilityId": "c3e850ea9990358d", "scanner": "scanner-primary", "fingerprint": "eff8eb0cd00a8ce9", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-89ca1028b4496d35", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 app/layout.tsx:82"}, "properties": {"repobilityId": "6f16eb9b82a2dcd6", "scanner": "scanner-primary", "fingerprint": "89ca1028b4496d35", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-eb4d7e44d92faf66", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 lib/agent/run.ts:48"}, "properties": {"repobilityId": "2e349d4d1e9f2253", "scanner": "scanner-primary", "fingerprint": "eb4d7e44d92faf66", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-8cddeedc5340fd6a", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 lib/analysis/video-analyze.ts:292"}, "properties": {"repobilityId": "2bbc9a8b46b6e56a", "scanner": "scanner-primary", "fingerprint": "8cddeedc5340fd6a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-63c16dc6b76b7c4a", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 lib/db/migrate.ts:12"}, "properties": {"repobilityId": "ddda78f85672bc81", "scanner": "scanner-primary", "fingerprint": "63c16dc6b76b7c4a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-e513b93dbb4a07cf", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 evals/homework-eval.ts:777"}, "properties": {"repobilityId": "a01c4b28fcbf1c08", "scanner": "scanner-primary", "fingerprint": "e513b93dbb4a07cf", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d63da3583b14afc0", "level": "warning", "message": {"text": "Dockerfile runs as root: Dockerfile"}, "properties": {"repobilityId": "a2ed1bd120e507db", "scanner": "scanner-primary", "fingerprint": "d63da3583b14afc0", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-93e02e0d67c8f3e8", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: node:22-slim"}, "properties": {"repobilityId": "8f26506e5075ff15", "scanner": "scanner-primary", "fingerprint": "93e02e0d67c8f3e8", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Dockerfile"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-93e02e0d67c8f3e8", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: node:22-slim"}, "properties": {"repobilityId": "26572de9bc387d62", "scanner": "scanner-primary", "fingerprint": "93e02e0d67c8f3e8", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Dockerfile"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-aa5acaa49eb8315b", "level": "note", "message": {"text": "Containers defined but no K8s/orchestration manifest found"}, "properties": {"repobilityId": "b230ea9b68736081", "scanner": "scanner-primary", "fingerprint": "aa5acaa49eb8315b", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["coverage", "deployment"]}}, {"ruleId": "scanner-13653cb55bebeddf", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in mcp/exercise-server.cjs:2953"}, "properties": {"repobilityId": "462c29c999ad4ded", "scanner": "scanner-primary", "fingerprint": "13653cb55bebeddf", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "mcp/exercise-server.cjs"}, "region": {"startLine": 2953}}}]}, {"ruleId": "scanner-d1b2306ed360c90c", "level": "error", "message": {"text": "Possible secret in scripts/seed-demo.ts"}, "properties": {"repobilityId": "ef6b1a2033a44417", "scanner": "scanner-primary", "fingerprint": "d1b2306ed360c90c", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/seed-demo.ts"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-0e0453c8c109acce", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/gen-brand-images.ts:12"}, "properties": {"repobilityId": "aeab00ee609fbaeb", "scanner": "scanner-primary", "fingerprint": "0e0453c8c109acce", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/gen-brand-images.ts"}, "region": {"startLine": 12}}}]}, {"ruleId": "scanner-79f0096afb22b8a3", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/video/assemble.ts:6"}, "properties": {"repobilityId": "3bf635123f8480e3", "scanner": "scanner-primary", "fingerprint": "79f0096afb22b8a3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/video/assemble.ts"}, "region": {"startLine": 6}}}]}, {"ruleId": "scanner-fdc3df6a5d0bb27e", "level": "error", "message": {"text": "Possible secret in scripts/video/_debug2.ts"}, "properties": {"repobilityId": "42510e8ffbd9ddd8", "scanner": "scanner-primary", "fingerprint": "fdc3df6a5d0bb27e", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/video/_debug2.ts"}, "region": {"startLine": 10}}}]}, {"ruleId": "scanner-92e90f882fe9e110", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in scripts/video/helpers.ts:59"}, "properties": {"repobilityId": "189c3ad42f954c87", "scanner": "scanner-primary", "fingerprint": "92e90f882fe9e110", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/video/helpers.ts"}, "region": {"startLine": 59}}}]}, {"ruleId": "scanner-cd0bec412831ce67", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/video/manifest.ts:2"}, "properties": {"repobilityId": "d7d43c96b6f0907d", "scanner": "scanner-primary", "fingerprint": "cd0bec412831ce67", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/video/manifest.ts"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-7debb789905d3447", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/video/narrate.ts:10"}, "properties": {"repobilityId": "45a4d23603d12b3c", "scanner": "scanner-primary", "fingerprint": "7debb789905d3447", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/video/narrate.ts"}, "region": {"startLine": 10}}}]}, {"ruleId": "scanner-11aa5618ca848608", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in components/chat/diffview.tsx:70"}, "properties": {"repobilityId": "296d4554482750d0", "scanner": "scanner-primary", "fingerprint": "11aa5618ca848608", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/chat/diffview.tsx"}, "region": {"startLine": 70}}}]}, {"ruleId": "scanner-1e0980a2d01c34bd", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in app/layout.tsx:82"}, "properties": {"repobilityId": "69d4743587f721a0", "scanner": "scanner-primary", "fingerprint": "1e0980a2d01c34bd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/layout.tsx"}, "region": {"startLine": 82}}}]}, {"ruleId": "scanner-3f4d0dafb2beb032", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in lib/editor/functions.tsx:19"}, "properties": {"repobilityId": "f7f651a2656a5aa0", "scanner": "scanner-primary", "fingerprint": "3f4d0dafb2beb032", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "lib/editor/functions.tsx"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-479c030e693eb938", "level": "note", "message": {"text": "Very large file: mcp/exercise-server.cjs (21353 lines)"}, "properties": {"repobilityId": "21a47faf5b49fc96", "scanner": "scanner-primary", "fingerprint": "479c030e693eb938", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-52c319098e2e0b50", "level": "note", "message": {"text": "Very large file: components/chat/icons.tsx (1213 lines)"}, "properties": {"repobilityId": "284845fa7c314dbb", "scanner": "scanner-primary", "fingerprint": "52c319098e2e0b50", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-6893a6c8b0861585", "level": "warning", "message": {"text": "Very low test-to-source ratio"}, "properties": {"repobilityId": "54a7de3f06314bf0", "scanner": "scanner-primary", "fingerprint": "6893a6c8b0861585", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["tests", "coverage"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "1e6c111787fab1b2", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "9b2624756f831fe9", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "64330f0f87c05aab", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "6573f791d14c230f", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "a945a21dd36429b4", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-3769d96599d57714", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/demo-path.spec.ts:223"}, "properties": {"repobilityId": "e0be6dc9e40cfcb6", "scanner": "scanner-primary", "fingerprint": "3769d96599d57714", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f2a443d5eb5bfa5d", "level": "none", "message": {"text": "Commented-code block (17 lines) in mcp/exercise-server.cjs:9404"}, "properties": {"repobilityId": "fbf3fc7dc85a952f", "scanner": "scanner-primary", "fingerprint": "f2a443d5eb5bfa5d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-761341ae7f731739", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/mem-probe-newchat.mjs:18"}, "properties": {"repobilityId": "62d70108bb609804", "scanner": "scanner-primary", "fingerprint": "761341ae7f731739", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-f8d8c9868f54bd82", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/visual-qa.ts:119"}, "properties": {"repobilityId": "157338b2712e6481", "scanner": "scanner-primary", "fingerprint": "f8d8c9868f54bd82", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-f1e432da30d426fc", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/mem-stress.mjs:29"}, "properties": {"repobilityId": "397f162b4fad7b33", "scanner": "scanner-primary", "fingerprint": "f1e432da30d426fc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b4cab2c5593cc4b2", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/video/assemble.ts:1"}, "properties": {"repobilityId": "440985e4bca44f1d", "scanner": "scanner-primary", "fingerprint": "b4cab2c5593cc4b2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-848b2aa5cc34dc9e", "level": "none", "message": {"text": "Commented-code block (9 lines) in scripts/video/record-chat-fallback.ts:1"}, "properties": {"repobilityId": "31767d69049ee50f", "scanner": "scanner-primary", "fingerprint": "848b2aa5cc34dc9e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-69ca1df2cea84b3f", "level": "none", "message": {"text": "Commented-code block (10 lines) in scripts/video/record-static.ts:1"}, "properties": {"repobilityId": "ecb9a45812a8e0bd", "scanner": "scanner-primary", "fingerprint": "69ca1df2cea84b3f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f3e41abe915c6fe6", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/video/_debug2.ts:3"}, "properties": {"repobilityId": "8f3550327f1b8950", "scanner": "scanner-primary", "fingerprint": "f3e41abe915c6fe6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-81d92fc6cfacd430", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/video/helpers.ts:150"}, "properties": {"repobilityId": "8998718087714724", "scanner": "scanner-primary", "fingerprint": "81d92fc6cfacd430", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c671f39f7ef6fcd5", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/video/helpers.ts:166"}, "properties": {"repobilityId": "d6ddd336fe765047", "scanner": "scanner-primary", "fingerprint": "c671f39f7ef6fcd5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-e4db8f6e3def73cf", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/video/record-chat.ts:1"}, "properties": {"repobilityId": "06c93e67da31d98e", "scanner": "scanner-primary", "fingerprint": "e4db8f6e3def73cf", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9e58ba0756e3a1ad", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 components/chat/multimodal-input.tsx:194"}, "properties": {"repobilityId": "78c35b505ab20810", "scanner": "scanner-primary", "fingerprint": "9e58ba0756e3a1ad", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-fe3fde52d53767a6", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 components/chat/artifact.tsx:177"}, "properties": {"repobilityId": "1c980b914376a6ff", "scanner": "scanner-primary", "fingerprint": "fe3fde52d53767a6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-6c9327f7b4ffaa03", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 components/chat/app-sidebar.tsx:69"}, "properties": {"repobilityId": "398cd553b8754bd2", "scanner": "scanner-primary", "fingerprint": "6c9327f7b4ffaa03", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-0d425a4042652378", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 components/chat/sidebar-history.tsx:173"}, "properties": {"repobilityId": "cd257db1ec4d8be3", "scanner": "scanner-primary", "fingerprint": "0d425a4042652378", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-1696214f97fd88ca", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 components/chat/message-actions.tsx:91"}, "properties": {"repobilityId": "b46b267366e89c58", "scanner": "scanner-primary", "fingerprint": "1696214f97fd88ca", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-f8138c02b7ef90d9", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 components/studio/student-form-dialog.tsx:83"}, "properties": {"repobilityId": "fef4478981188beb", "scanner": "scanner-primary", "fingerprint": "f8138c02b7ef90d9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-7659ed38d5f764e2", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 components/studio/student-memory-tab.tsx:165"}, "properties": {"repobilityId": "08eb44a298a3ec31", "scanner": "scanner-primary", "fingerprint": "7659ed38d5f764e2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-8e09cd0722a9540b", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 components/studio/student-videos-tab.tsx:24"}, "properties": {"repobilityId": "8e376177a5714db0", "scanner": "scanner-primary", "fingerprint": "8e09cd0722a9540b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-40c84a997e2e4b7f", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 lib/ai/tools/get-weather.ts:66"}, "properties": {"repobilityId": "efe258ea93f39553", "scanner": "scanner-primary", "fingerprint": "40c84a997e2e4b7f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-5339296f226cda39", "level": "none", "message": {"text": "Commented-code block (5 lines) in lib/agent/run.ts:244"}, "properties": {"repobilityId": "d5d39872afc20396", "scanner": "scanner-primary", "fingerprint": "5339296f226cda39", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-78c26cf0c1a234b1", "level": "none", "message": {"text": "Commented-code block (5 lines) in lib/analysis/video-analyze.ts:281"}, "properties": {"repobilityId": "e1219eefb471fe7e", "scanner": "scanner-primary", "fingerprint": "78c26cf0c1a234b1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ec3df286d1165b46", "level": "note", "message": {"text": "Legacy-named symbol `Message_v2` in lib/db/schema.ts:45"}, "properties": {"repobilityId": "e028a4eb80d39d0b", "scanner": "scanner-primary", "fingerprint": "ec3df286d1165b46", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-adbdcab376b8f238", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 lib/db/queries-studio.ts:118"}, "properties": {"repobilityId": "7003fcd0e4e21fe9", "scanner": "scanner-primary", "fingerprint": "adbdcab376b8f238", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-c36bca2671e2ce57", "level": "none", "message": {"text": "Commented-code block (5 lines) in evals/homework-eval.ts:45"}, "properties": {"repobilityId": "c3c1ab1b6ea1175e", "scanner": "scanner-primary", "fingerprint": "c36bca2671e2ce57", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-14f70653d1c5b85d", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 artifacts/text/client.tsx:158"}, "properties": {"repobilityId": "35c739b1481301b7", "scanner": "scanner-primary", "fingerprint": "14f70653d1c5b85d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-ae9bef57a85a391d", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 artifacts/homework/client.tsx:23"}, "properties": {"repobilityId": "d23be2727724a8f3", "scanner": "scanner-primary", "fingerprint": "ae9bef57a85a391d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-51dbf90b6ad9e4e9", "level": "note", "message": {"text": "28 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "b01aa43f6ad2a3c8", "scanner": "scanner-primary", "fingerprint": "51dbf90b6ad9e4e9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}]}]}