{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-b26c2cc09c1af654", "name": "Stray `console.log` in TS/JS \u2014 scripts/gen-text-fixtures.ts:19", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/gen-text-fixtures.ts:19"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4bbdb651c823d595", "name": "Stray `console.log` in TS/JS \u2014 scripts/load-files.ts:29", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/load-files.ts:29"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-388c31240894579d", "name": "TODO/FIXME marker in shipping code \u2014 src/db/queries/specs.ts:210", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 src/db/queries/specs.ts:210"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-aa5acaa49eb8315b", "name": "Containers defined but no K8s/orchestration manifest found", "shortDescription": {"text": "Containers defined but no K8s/orchestration manifest found"}, "fullDescription": {"text": "Repo has Dockerfiles/compose but no Kubernetes/Nomad manifests. If the target deployment is K8s, the manifests may live in a separate ops repo."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9710c8d059e53154", "name": "No frontend routes/components detected", "shortDescription": {"text": "No frontend routes/components detected"}, "fullDescription": {"text": "No React/Vue/Next routes were found. This is fine for backend-only repos."}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6372cebde0220094", "name": "No auth library detected", "shortDescription": {"text": "No auth library detected"}, "fullDescription": {"text": "The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). The repo has auth/admin/session surface indicators, so auth may live in custom code, in a separate service, or be missing."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-de53ac274e5b4ecf", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-37716d9c0a33ad5c", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1838a141491ce38c", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a98823ffd68b56a8", "name": "Commented-code block (6 lines) in eslint.config.js:31", "shortDescription": {"text": "Commented-code block (6 lines) in eslint.config.js:31"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c7713f6254a1d54e", "name": "Commented-code block (10 lines) in src/ast/schemas.ts:190", "shortDescription": {"text": "Commented-code block (10 lines) in src/ast/schemas.ts:190"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-95edf8888d5215df", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/division-general.integration.test.ts:59", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/division-general.integration.test.ts:59"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-289244f68c2e5f08", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/templates-crud.integration.test.ts:49", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/templates-crud.integration.test.ts:49"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4493a6d6f48d9271", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/lineage.integration.test.ts:96", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/lineage.integration.test.ts:96"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9d3e32299379e0aa", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/templates.integration.test.ts:268", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/templates.integration.test.ts:268"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5fd539a3a51e5086", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/health.integration.test.ts:34", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/health.integration.test.ts:34"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d267047e0148984d", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/generate.integration.test.ts:67", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/generate.integration.test.ts:67"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2e1b117afbd47a0c", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/references.integration.test.ts:106", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/references.integration.test.ts:106"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ef1f800c30333ca0", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/packages.integration.test.ts:21", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/packages.integration.test.ts:21"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-71de304a9f9fb15a", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/specs.integration.test.ts:62", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/specs.integration.test.ts:62"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0454d6e4bd6d3d52", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/projects.integration.test.ts:31", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/projects.integration.test.ts:31"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-889f7821d370b9a3", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/parse-warnings.integration.test.ts:60", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/parse-warnings.integration.test.ts:60"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1d274e07dee77ac9", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/revisions.integration.test.ts:25", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/revisions.integration.test.ts:25"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-887650ec1214a6d9", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/parse.integration.test.ts:53", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/parse.integration.test.ts:53"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2994335a583642fc", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/mcp/server.rate-limit.test.ts:61", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/mcp/server.rate-limit.test.ts:61"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-94bec89addf18644", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/mcp/server.integration.test.ts:23", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/mcp/server.integration.test.ts:23"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c19c7a284b872549", "name": "Commented-code block (9 lines) in src/lib/section-number.ts:34", "shortDescription": {"text": "Commented-code block (9 lines) in src/lib/section-number.ts:34"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0c374c334b5fb90b", "name": "Commented-code block (6 lines) in src/lib/parse-worker.ts:15", "shortDescription": {"text": "Commented-code block (6 lines) in src/lib/parse-worker.ts:15"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e8d4b607ca99af9d", "name": "Commented-code block (5 lines) in src/merge/diff.ts:22", "shortDescription": {"text": "Commented-code block (5 lines) in src/merge/diff.ts:22"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5989e7d097092f0c", "name": "Commented-code block (5 lines) in src/db/migrations/020_create_design_packages.ts:3", "shortDescription": {"text": "Commented-code block (5 lines) in src/db/migrations/020_create_design_packages.ts:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-926503858bd9687e", "name": "Commented-code block (6 lines) in src/db/migrations/021_create_package_revisions.ts:8", "shortDescription": {"text": "Commented-code block (6 lines) in src/db/migrations/021_create_package_revisions.ts:8"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-13b827a7db040b99", "name": "Commented-code block (5 lines) in src/db/migrations/017_spec_lineage.ts:3", "shortDescription": {"text": "Commented-code block (5 lines) in src/db/migrations/017_spec_lineage.ts:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4822da6806b7e9f0", "name": "Commented-code block (6 lines) in src/db/migrations/019_backfill_project_copies.ts:3", "shortDescription": {"text": "Commented-code block (6 lines) in src/db/migrations/019_backfill_project_copies.ts:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a5e8bde746c9e7f7", "name": "Commented-code block (5 lines) in src/db/queries/derive.integration.test.ts:115", "shortDescription": {"text": "Commented-code block (5 lines) in src/db/queries/derive.integration.test.ts:115"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1de158efab84f841", "name": "Commented-code block (5 lines) in src/parser/docx/safety.ts:184", "shortDescription": {"text": "Commented-code block (5 lines) in src/parser/docx/safety.ts:184"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2573969d05d2eea4", "name": "Commented-code block (6 lines) in src/parser/docx/paring-fixes.integration.test.ts:16", "shortDescription": {"text": "Commented-code block (6 lines) in src/parser/docx/paring-fixes.integration.test.ts:16"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e9e66c5881c0d478", "name": "Commented-code block (5 lines) in src/parser/docx/theme.ts:24", "shortDescription": {"text": "Commented-code block (5 lines) in src/parser/docx/theme.ts:24"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-53788266c507439a", "name": "Commented-code block (10 lines) in src/parser/docx/document.ts:10", "shortDescription": {"text": "Commented-code block (10 lines) in src/parser/docx/document.ts:10"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d25205758023457c", "name": "Commented-code block (12 lines) in src/parser/docx/resolver-theme.test.ts:64", "shortDescription": {"text": "Commented-code block (12 lines) in src/parser/docx/resolver-theme.test.ts:64"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5278f14aa2458daa", "name": "Commented-code block (5 lines) in src/parser/docx/cpi.integration.test.ts:61", "shortDescription": {"text": "Commented-code block (5 lines) in src/parser/docx/cpi.integration.test.ts:61"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0a3b3b6cc50f312c", "name": "Commented-code block (5 lines) in src/parser/docx/libreoffice.integration.test.ts:45", "shortDescription": {"text": "Commented-code block (5 lines) in src/parser/docx/libreoffice.integration.test.ts:45"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-645d25cebb5ab51f", "name": "Commented-code block (7 lines) in src/parser/docx/inference.ts:54", "shortDescription": {"text": "Commented-code block (7 lines) in src/parser/docx/inference.ts:54"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e861f9d945403384", "name": "Commented-code block (5 lines) in src/parser/docx/types.ts:39", "shortDescription": {"text": "Commented-code block (5 lines) in src/parser/docx/types.ts:39"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1cf30be464b4258b", "name": "Commented-code block (6 lines) in src/parser/sec/index.ts:244", "shortDescription": {"text": "Commented-code block (6 lines) in src/parser/sec/index.ts:244"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b024b2eb01e02653", "name": "Unused endpoint: GET /specs/:id", "shortDescription": {"text": "Unused endpoint: GET /specs/:id"}, "fullDescription": {"text": "`src/api/router.ts` declares `GET /specs/:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-69b8cdf92d14fdfe", "name": "Unused endpoint: GET /specs/:id/lineage", "shortDescription": {"text": "Unused endpoint: GET /specs/:id/lineage"}, "fullDescription": {"text": "`src/api/router.ts` declares `GET /specs/:id/lineage` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-210087fa06626c6a", "name": "Unused endpoint: PATCH /specs/:id", "shortDescription": {"text": "Unused endpoint: PATCH /specs/:id"}, "fullDescription": {"text": "`src/api/router.ts` declares `PATCH /specs/:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dc373af1399722fd", "name": "Unused endpoint: POST /specs/:id/generate", "shortDescription": {"text": "Unused endpoint: POST /specs/:id/generate"}, "fullDescription": {"text": "`src/api/router.ts` declares `POST /specs/:id/generate` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-58666816ba500374", "name": "Unused endpoint: POST /projects", "shortDescription": {"text": "Unused endpoint: POST /projects"}, "fullDescription": {"text": "`src/api/router.ts` declares `POST /projects` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cdcec0c7af38dbaa", "name": "Unused endpoint: GET /projects/:id", "shortDescription": {"text": "Unused endpoint: GET /projects/:id"}, "fullDescription": {"text": "`src/api/router.ts` declares `GET /projects/:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f40e55fed3b7e826", "name": "Unused endpoint: GET /libraries/:libraryId/divisions/:division/general-spec", "shortDescription": {"text": "Unused endpoint: GET /libraries/:libraryId/divisions/:division/general-spec"}, "fullDescription": {"text": "`src/api/router.ts` declares `GET /libraries/:libraryId/divisions/:division/general-spec` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9ae8e6433939ecf7", "name": "Unused endpoint: PUT /libraries/:libraryId/divisions/:division/general-spec", "shortDescription": {"text": "Unused endpoint: PUT /libraries/:libraryId/divisions/:division/general-spec"}, "fullDescription": {"text": "`src/api/router.ts` declares `PUT /libraries/:libraryId/divisions/:division/general-spec` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-388bb381c63874e4", "name": "Unused endpoint: GET /projects/:projectId/divisions/:division/general-spec", "shortDescription": {"text": "Unused endpoint: GET /projects/:projectId/divisions/:division/general-spec"}, "fullDescription": {"text": "`src/api/router.ts` declares `GET /projects/:projectId/divisions/:division/general-spec` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3b8d3ba993000e50", "name": "Unused endpoint: PUT /projects/:projectId/divisions/:division/general-spec", "shortDescription": {"text": "Unused endpoint: PUT /projects/:projectId/divisions/:division/general-spec"}, "fullDescription": {"text": "`src/api/router.ts` declares `PUT /projects/:projectId/divisions/:division/general-spec` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d9397518a247374c", "name": "Unused endpoint: POST /projects/:id/specs", "shortDescription": {"text": "Unused endpoint: POST /projects/:id/specs"}, "fullDescription": {"text": "`src/api/router.ts` declares `POST /projects/:id/specs` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9a302cd960a3b9b0", "name": "Unused endpoint: DELETE /projects/:id/specs/:specId", "shortDescription": {"text": "Unused endpoint: DELETE /projects/:id/specs/:specId"}, "fullDescription": {"text": "`src/api/router.ts` declares `DELETE /projects/:id/specs/:specId` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3eb0741c142a5443", "name": "Unused endpoint: GET /projects/:id/references/broken", "shortDescription": {"text": "Unused endpoint: GET /projects/:id/references/broken"}, "fullDescription": {"text": "`src/api/router.ts` declares `GET /projects/:id/references/broken` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d8d19108be003e8f", "name": "Unused endpoint: GET /projects/:id/references/inbound", "shortDescription": {"text": "Unused endpoint: GET /projects/:id/references/inbound"}, "fullDescription": {"text": "`src/api/router.ts` declares `GET /projects/:id/references/inbound` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f105fe689ce94b34", "name": "Unused endpoint: GET /projects/:id/specs/:specId/references", "shortDescription": {"text": "Unused endpoint: GET /projects/:id/specs/:specId/references"}, "fullDescription": {"text": "`src/api/router.ts` declares `GET /projects/:id/specs/:specId/references` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-388b033ed2f8db82", "name": "Unused endpoint: POST /projects/:id/packages", "shortDescription": {"text": "Unused endpoint: POST /projects/:id/packages"}, "fullDescription": {"text": "`src/api/router.ts` declares `POST /projects/:id/packages` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-93a5c95a3cc06632", "name": "Unused endpoint: GET /projects/:id/packages", "shortDescription": {"text": "Unused endpoint: GET /projects/:id/packages"}, "fullDescription": {"text": "`src/api/router.ts` declares `GET /projects/:id/packages` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c1e3e74ddd72f790", "name": "Unused endpoint: PUT /packages/:id/specs", "shortDescription": {"text": "Unused endpoint: PUT /packages/:id/specs"}, "fullDescription": {"text": "`src/api/router.ts` declares `PUT /packages/:id/specs` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1a279a3fb8e59548", "name": "Unused endpoint: DELETE /packages/:id", "shortDescription": {"text": "Unused endpoint: DELETE /packages/:id"}, "fullDescription": {"text": "`src/api/router.ts` declares `DELETE /packages/:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9bff1648a3ff01ee", "name": "Unused endpoint: POST /packages/:id/revisions", "shortDescription": {"text": "Unused endpoint: POST /packages/:id/revisions"}, "fullDescription": {"text": "`src/api/router.ts` declares `POST /packages/:id/revisions` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d71b9d2860398853", "name": "Unused endpoint: GET /revisions/:id", "shortDescription": {"text": "Unused endpoint: GET /revisions/:id"}, "fullDescription": {"text": "`src/api/router.ts` declares `GET /revisions/:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-21d4e3431aa9b5dc", "name": "Unused endpoint: POST /parse", "shortDescription": {"text": "Unused endpoint: POST /parse"}, "fullDescription": {"text": "`src/api/router.ts` declares `POST /parse` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-02c98722a68115c8", "name": "Unused endpoint: GET /parse/jobs/:jobId", "shortDescription": {"text": "Unused endpoint: GET /parse/jobs/:jobId"}, "fullDescription": {"text": "`src/api/router.ts` declares `GET /parse/jobs/:jobId` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-59efec8955b90eae", "name": "Unused endpoint: POST /templates/import", "shortDescription": {"text": "Unused endpoint: POST /templates/import"}, "fullDescription": {"text": "`src/api/router.ts` declares `POST /templates/import` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2b73958ead43e47d", "name": "Unused endpoint: POST /templates", "shortDescription": {"text": "Unused endpoint: POST /templates"}, "fullDescription": {"text": "`src/api/router.ts` declares `POST /templates` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-017394171548a2b2", "name": "Unused endpoint: GET /templates", "shortDescription": {"text": "Unused endpoint: GET /templates"}, "fullDescription": {"text": "`src/api/router.ts` declares `GET /templates` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-55a40be373d84bbd", "name": "Unused endpoint: GET /templates/:id", "shortDescription": {"text": "Unused endpoint: GET /templates/:id"}, "fullDescription": {"text": "`src/api/router.ts` declares `GET /templates/:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2f3c92b362c74827", "name": "Unused endpoint: PATCH /templates/:id", "shortDescription": {"text": "Unused endpoint: PATCH /templates/:id"}, "fullDescription": {"text": "`src/api/router.ts` declares `PATCH /templates/:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a6a4d0174efbc751", "name": "Unused endpoint: DELETE /templates/:id", "shortDescription": {"text": "Unused endpoint: DELETE /templates/:id"}, "fullDescription": {"text": "`src/api/router.ts` declares `DELETE /templates/:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b537ccef8c13296b", "name": "Unused endpoint: POST /templates/:id/rules", "shortDescription": {"text": "Unused endpoint: POST /templates/:id/rules"}, "fullDescription": {"text": "`src/api/router.ts` declares `POST /templates/:id/rules` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-239a938869adf673", "name": "Unused endpoint: POST /mcp", "shortDescription": {"text": "Unused endpoint: POST /mcp"}, "fullDescription": {"text": "`src/mcp/server.ts` declares `POST /mcp` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cc1d680cdc3d6aa1", "name": "Unused endpoint: GET /mcp", "shortDescription": {"text": "Unused endpoint: GET /mcp"}, "fullDescription": {"text": "`src/mcp/server.ts` declares `GET /mcp` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-56b4efafa0127feb", "name": "Unused endpoint: DELETE /mcp", "shortDescription": {"text": "Unused endpoint: DELETE /mcp"}, "fullDescription": {"text": "`src/mcp/server.ts` declares `DELETE /mcp` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/22893"}, "properties": {"repository": "wrzonance/SpecR", "repoUrl": "https://github.com/wrzonance/SpecR", "branch": "main"}, "results": [{"ruleId": "scanner-b26c2cc09c1af654", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/gen-text-fixtures.ts:19"}, "properties": {"repobilityId": "ee06deaf5e34fd33", "scanner": "scanner-primary", "fingerprint": "b26c2cc09c1af654", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-4bbdb651c823d595", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/load-files.ts:29"}, "properties": {"repobilityId": "92efe5ba0e0c8e0b", "scanner": "scanner-primary", "fingerprint": "4bbdb651c823d595", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-388c31240894579d", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 src/db/queries/specs.ts:210"}, "properties": {"repobilityId": "362cbd8bc0fbc784", "scanner": "scanner-primary", "fingerprint": "388c31240894579d", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-aa5acaa49eb8315b", "level": "note", "message": {"text": "Containers defined but no K8s/orchestration manifest found"}, "properties": {"repobilityId": "b230ea9b68736081", "scanner": "scanner-primary", "fingerprint": "aa5acaa49eb8315b", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["coverage", "deployment"]}}, {"ruleId": "scanner-9710c8d059e53154", "level": "none", "message": {"text": "No frontend routes/components detected"}, "properties": {"repobilityId": "44ca61485762e494", "scanner": "scanner-primary", "fingerprint": "9710c8d059e53154", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-6372cebde0220094", "level": "warning", "message": {"text": "No auth library detected"}, "properties": {"repobilityId": "a5b6035a5bbf8054", "scanner": "scanner-primary", "fingerprint": "6372cebde0220094", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["coverage", "auth"]}}, {"ruleId": "scanner-de53ac274e5b4ecf", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "02600186fc092bd4", "scanner": "scanner-primary", "fingerprint": "de53ac274e5b4ecf", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/claude.yml"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-de53ac274e5b4ecf", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "8ead6a2c2bfe167b", "scanner": "scanner-primary", "fingerprint": "de53ac274e5b4ecf", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/claude.yml"}, "region": {"startLine": 35}}}]}, {"ruleId": "scanner-37716d9c0a33ad5c", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "abfb5752158cf655", "scanner": "scanner-primary", "fingerprint": "37716d9c0a33ad5c", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/claude.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1838a141491ce38c", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "b8fd4f5048f96576", "scanner": "scanner-primary", "fingerprint": "1838a141491ce38c", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "4ef6076cc0b6e148", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "5cacfaf77e8556dd", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "7aa47856a8614729", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-a98823ffd68b56a8", "level": "none", "message": {"text": "Commented-code block (6 lines) in eslint.config.js:31"}, "properties": {"repobilityId": "a079321fa6a69a9a", "scanner": "scanner-primary", "fingerprint": "a98823ffd68b56a8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c7713f6254a1d54e", "level": "none", "message": {"text": "Commented-code block (10 lines) in src/ast/schemas.ts:190"}, "properties": {"repobilityId": "e5d99d48657b4a2b", "scanner": "scanner-primary", "fingerprint": "c7713f6254a1d54e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-95edf8888d5215df", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/division-general.integration.test.ts:59"}, "properties": {"repobilityId": "5f1be5f7b21b43d5", "scanner": "scanner-primary", "fingerprint": "95edf8888d5215df", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-289244f68c2e5f08", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/templates-crud.integration.test.ts:49"}, "properties": {"repobilityId": "14ca3e7f4713a1b3", "scanner": "scanner-primary", "fingerprint": "289244f68c2e5f08", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-4493a6d6f48d9271", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/lineage.integration.test.ts:96"}, "properties": {"repobilityId": "9cae684ae5e79c10", "scanner": "scanner-primary", "fingerprint": "4493a6d6f48d9271", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-9d3e32299379e0aa", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/templates.integration.test.ts:268"}, "properties": {"repobilityId": "57125d81b2ffdeff", "scanner": "scanner-primary", "fingerprint": "9d3e32299379e0aa", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-5fd539a3a51e5086", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/health.integration.test.ts:34"}, "properties": {"repobilityId": "da699ca2dcd01f7f", "scanner": "scanner-primary", "fingerprint": "5fd539a3a51e5086", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-d267047e0148984d", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/generate.integration.test.ts:67"}, "properties": {"repobilityId": "395ea4a5ad409000", "scanner": "scanner-primary", "fingerprint": "d267047e0148984d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-2e1b117afbd47a0c", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/references.integration.test.ts:106"}, "properties": {"repobilityId": "454f7d8e5779a54e", "scanner": "scanner-primary", "fingerprint": "2e1b117afbd47a0c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-ef1f800c30333ca0", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/packages.integration.test.ts:21"}, "properties": {"repobilityId": "47f0c7c551e26062", "scanner": "scanner-primary", "fingerprint": "ef1f800c30333ca0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-71de304a9f9fb15a", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/specs.integration.test.ts:62"}, "properties": {"repobilityId": "c3007f507f12b0bc", "scanner": "scanner-primary", "fingerprint": "71de304a9f9fb15a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-0454d6e4bd6d3d52", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/projects.integration.test.ts:31"}, "properties": {"repobilityId": "627987b9da3d48f5", "scanner": "scanner-primary", "fingerprint": "0454d6e4bd6d3d52", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-889f7821d370b9a3", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/parse-warnings.integration.test.ts:60"}, "properties": {"repobilityId": "210f0d3e6015f625", "scanner": "scanner-primary", "fingerprint": "889f7821d370b9a3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-1d274e07dee77ac9", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/revisions.integration.test.ts:25"}, "properties": {"repobilityId": "4b2a383fbd098668", "scanner": "scanner-primary", "fingerprint": "1d274e07dee77ac9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-887650ec1214a6d9", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/api/parse.integration.test.ts:53"}, "properties": {"repobilityId": "2c41439f67455ce6", "scanner": "scanner-primary", "fingerprint": "887650ec1214a6d9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-2994335a583642fc", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/mcp/server.rate-limit.test.ts:61"}, "properties": {"repobilityId": "608a0c647f28fa93", "scanner": "scanner-primary", "fingerprint": "2994335a583642fc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-94bec89addf18644", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/mcp/server.integration.test.ts:23"}, "properties": {"repobilityId": "d57619e516453a42", "scanner": "scanner-primary", "fingerprint": "94bec89addf18644", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-c19c7a284b872549", "level": "none", "message": {"text": "Commented-code block (9 lines) in src/lib/section-number.ts:34"}, "properties": {"repobilityId": "938cf13bba46f942", "scanner": "scanner-primary", "fingerprint": "c19c7a284b872549", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0c374c334b5fb90b", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/lib/parse-worker.ts:15"}, "properties": {"repobilityId": "d2dec070ea3a5940", "scanner": "scanner-primary", "fingerprint": "0c374c334b5fb90b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e8d4b607ca99af9d", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/merge/diff.ts:22"}, "properties": {"repobilityId": "4bd6f93d8ea71e03", "scanner": "scanner-primary", "fingerprint": "e8d4b607ca99af9d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5989e7d097092f0c", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/db/migrations/020_create_design_packages.ts:3"}, "properties": {"repobilityId": "cdcbb90298ae8ed8", "scanner": "scanner-primary", "fingerprint": "5989e7d097092f0c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-926503858bd9687e", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/db/migrations/021_create_package_revisions.ts:8"}, "properties": {"repobilityId": "f2c0ac0488a1d0cc", "scanner": "scanner-primary", "fingerprint": "926503858bd9687e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-13b827a7db040b99", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/db/migrations/017_spec_lineage.ts:3"}, "properties": {"repobilityId": "272e20e994bf8291", "scanner": "scanner-primary", "fingerprint": "13b827a7db040b99", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4822da6806b7e9f0", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/db/migrations/019_backfill_project_copies.ts:3"}, "properties": {"repobilityId": "e4437f48531063e1", "scanner": "scanner-primary", "fingerprint": "4822da6806b7e9f0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a5e8bde746c9e7f7", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/db/queries/derive.integration.test.ts:115"}, "properties": {"repobilityId": "2a9bdc56743cb39e", "scanner": "scanner-primary", "fingerprint": "a5e8bde746c9e7f7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1de158efab84f841", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/parser/docx/safety.ts:184"}, "properties": {"repobilityId": "e6d0379a2b2070e9", "scanner": "scanner-primary", "fingerprint": "1de158efab84f841", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2573969d05d2eea4", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/parser/docx/paring-fixes.integration.test.ts:16"}, "properties": {"repobilityId": "7b9ead8da0e05642", "scanner": "scanner-primary", "fingerprint": "2573969d05d2eea4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e9e66c5881c0d478", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/parser/docx/theme.ts:24"}, "properties": {"repobilityId": "b48b1781b252837e", "scanner": "scanner-primary", "fingerprint": "e9e66c5881c0d478", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-53788266c507439a", "level": "none", "message": {"text": "Commented-code block (10 lines) in src/parser/docx/document.ts:10"}, "properties": {"repobilityId": "8305790fd201b89f", "scanner": "scanner-primary", "fingerprint": "53788266c507439a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d25205758023457c", "level": "none", "message": {"text": "Commented-code block (12 lines) in src/parser/docx/resolver-theme.test.ts:64"}, "properties": {"repobilityId": "a6d58c4aa5c9607e", "scanner": "scanner-primary", "fingerprint": "d25205758023457c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5278f14aa2458daa", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/parser/docx/cpi.integration.test.ts:61"}, "properties": {"repobilityId": "0271e91ed7fe48b8", "scanner": "scanner-primary", "fingerprint": "5278f14aa2458daa", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0a3b3b6cc50f312c", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/parser/docx/libreoffice.integration.test.ts:45"}, "properties": {"repobilityId": "9409d0e18e486b1c", "scanner": "scanner-primary", "fingerprint": "0a3b3b6cc50f312c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-645d25cebb5ab51f", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/parser/docx/inference.ts:54"}, "properties": {"repobilityId": "baf6501d8728e751", "scanner": "scanner-primary", "fingerprint": "645d25cebb5ab51f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e861f9d945403384", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/parser/docx/types.ts:39"}, "properties": {"repobilityId": "410acad136b50b9a", "scanner": "scanner-primary", "fingerprint": "e861f9d945403384", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1cf30be464b4258b", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/parser/sec/index.ts:244"}, "properties": {"repobilityId": "0c0a2d1701a49297", "scanner": "scanner-primary", "fingerprint": "1cf30be464b4258b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b024b2eb01e02653", "level": "note", "message": {"text": "Unused endpoint: GET /specs/:id"}, "properties": {"repobilityId": "cb76431bdee2d73a", "scanner": "scanner-primary", "fingerprint": "b024b2eb01e02653", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-69b8cdf92d14fdfe", "level": "note", "message": {"text": "Unused endpoint: GET /specs/:id/lineage"}, "properties": {"repobilityId": "365daea23020e030", "scanner": "scanner-primary", "fingerprint": "69b8cdf92d14fdfe", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-210087fa06626c6a", "level": "note", "message": {"text": "Unused endpoint: PATCH /specs/:id"}, "properties": {"repobilityId": "45c42202361cfe68", "scanner": "scanner-primary", "fingerprint": "210087fa06626c6a", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-dc373af1399722fd", "level": "note", "message": {"text": "Unused endpoint: POST /specs/:id/generate"}, "properties": {"repobilityId": "8212e0f6d146e5fa", "scanner": "scanner-primary", "fingerprint": "dc373af1399722fd", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-58666816ba500374", "level": "note", "message": {"text": "Unused endpoint: POST /projects"}, "properties": {"repobilityId": "c0e2a6d095efbf19", "scanner": "scanner-primary", "fingerprint": "58666816ba500374", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-cdcec0c7af38dbaa", "level": "note", "message": {"text": "Unused endpoint: GET /projects/:id"}, "properties": {"repobilityId": "301016a60ea1fb75", "scanner": "scanner-primary", "fingerprint": "cdcec0c7af38dbaa", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-f40e55fed3b7e826", "level": "note", "message": {"text": "Unused endpoint: GET /libraries/:libraryId/divisions/:division/general-spec"}, "properties": {"repobilityId": "efeb90fd69f4224c", "scanner": "scanner-primary", "fingerprint": "f40e55fed3b7e826", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-9ae8e6433939ecf7", "level": "note", "message": {"text": "Unused endpoint: PUT /libraries/:libraryId/divisions/:division/general-spec"}, "properties": {"repobilityId": "2c700b424ba795e4", "scanner": "scanner-primary", "fingerprint": "9ae8e6433939ecf7", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-388bb381c63874e4", "level": "note", "message": {"text": "Unused endpoint: GET /projects/:projectId/divisions/:division/general-spec"}, "properties": {"repobilityId": "de775f0927064dc6", "scanner": "scanner-primary", "fingerprint": "388bb381c63874e4", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-3b8d3ba993000e50", "level": "note", "message": {"text": "Unused endpoint: PUT /projects/:projectId/divisions/:division/general-spec"}, "properties": {"repobilityId": "3f84b80cdb2a54ae", "scanner": "scanner-primary", "fingerprint": "3b8d3ba993000e50", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-d9397518a247374c", "level": "note", "message": {"text": "Unused endpoint: POST /projects/:id/specs"}, "properties": {"repobilityId": "d89c939afd941637", "scanner": "scanner-primary", "fingerprint": "d9397518a247374c", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-9a302cd960a3b9b0", "level": "note", "message": {"text": "Unused endpoint: DELETE /projects/:id/specs/:specId"}, "properties": {"repobilityId": "8c1eaa21a4fc4be4", "scanner": "scanner-primary", "fingerprint": "9a302cd960a3b9b0", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-3eb0741c142a5443", "level": "note", "message": {"text": "Unused endpoint: GET /projects/:id/references/broken"}, "properties": {"repobilityId": "658007969a8c01ad", "scanner": "scanner-primary", "fingerprint": "3eb0741c142a5443", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-d8d19108be003e8f", "level": "note", "message": {"text": "Unused endpoint: GET /projects/:id/references/inbound"}, "properties": {"repobilityId": "fb15f34fdfd188f2", "scanner": "scanner-primary", "fingerprint": "d8d19108be003e8f", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-f105fe689ce94b34", "level": "note", "message": {"text": "Unused endpoint: GET /projects/:id/specs/:specId/references"}, "properties": {"repobilityId": "8fa373e8f481af1c", "scanner": "scanner-primary", "fingerprint": "f105fe689ce94b34", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-388b033ed2f8db82", "level": "note", "message": {"text": "Unused endpoint: POST /projects/:id/packages"}, "properties": {"repobilityId": "b4052329c62fcdd7", "scanner": "scanner-primary", "fingerprint": "388b033ed2f8db82", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-93a5c95a3cc06632", "level": "note", "message": {"text": "Unused endpoint: GET /projects/:id/packages"}, "properties": {"repobilityId": "9fe376bb5a619bea", "scanner": "scanner-primary", "fingerprint": "93a5c95a3cc06632", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-c1e3e74ddd72f790", "level": "note", "message": {"text": "Unused endpoint: PUT /packages/:id/specs"}, "properties": {"repobilityId": "85a5a38feeae6160", "scanner": "scanner-primary", "fingerprint": "c1e3e74ddd72f790", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-1a279a3fb8e59548", "level": "note", "message": {"text": "Unused endpoint: DELETE /packages/:id"}, "properties": {"repobilityId": "9f689452da6f6461", "scanner": "scanner-primary", "fingerprint": "1a279a3fb8e59548", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-9bff1648a3ff01ee", "level": "note", "message": {"text": "Unused endpoint: POST /packages/:id/revisions"}, "properties": {"repobilityId": "b4d8842f5c2e90b5", "scanner": "scanner-primary", "fingerprint": "9bff1648a3ff01ee", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-d71b9d2860398853", "level": "note", "message": {"text": "Unused endpoint: GET /revisions/:id"}, "properties": {"repobilityId": "73ca4d421f91a89d", "scanner": "scanner-primary", "fingerprint": "d71b9d2860398853", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-21d4e3431aa9b5dc", "level": "note", "message": {"text": "Unused endpoint: POST /parse"}, "properties": {"repobilityId": "1b500921cf13fc26", "scanner": "scanner-primary", "fingerprint": "21d4e3431aa9b5dc", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-02c98722a68115c8", "level": "note", "message": {"text": "Unused endpoint: GET /parse/jobs/:jobId"}, "properties": {"repobilityId": "1447f7bdc04beab6", "scanner": "scanner-primary", "fingerprint": "02c98722a68115c8", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-59efec8955b90eae", "level": "note", "message": {"text": "Unused endpoint: POST /templates/import"}, "properties": {"repobilityId": "74618d6ce3d2415f", "scanner": "scanner-primary", "fingerprint": "59efec8955b90eae", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-2b73958ead43e47d", "level": "note", "message": {"text": "Unused endpoint: POST /templates"}, "properties": {"repobilityId": "845a8df34a67ebfd", "scanner": "scanner-primary", "fingerprint": "2b73958ead43e47d", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-017394171548a2b2", "level": "note", "message": {"text": "Unused endpoint: GET /templates"}, "properties": {"repobilityId": "15e9daab8aaaf9e2", "scanner": "scanner-primary", "fingerprint": "017394171548a2b2", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-55a40be373d84bbd", "level": "note", "message": {"text": "Unused endpoint: GET /templates/:id"}, "properties": {"repobilityId": "2f154818d9767a59", "scanner": "scanner-primary", "fingerprint": "55a40be373d84bbd", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-2f3c92b362c74827", "level": "note", "message": {"text": "Unused endpoint: PATCH /templates/:id"}, "properties": {"repobilityId": "91438db431eedf5d", "scanner": "scanner-primary", "fingerprint": "2f3c92b362c74827", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-a6a4d0174efbc751", "level": "note", "message": {"text": "Unused endpoint: DELETE /templates/:id"}, "properties": {"repobilityId": "f9b1f4d7714a2a20", "scanner": "scanner-primary", "fingerprint": "a6a4d0174efbc751", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-b537ccef8c13296b", "level": "note", "message": {"text": "Unused endpoint: POST /templates/:id/rules"}, "properties": {"repobilityId": "bae281170d4b93bf", "scanner": "scanner-primary", "fingerprint": "b537ccef8c13296b", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-239a938869adf673", "level": "note", "message": {"text": "Unused endpoint: POST /mcp"}, "properties": {"repobilityId": "1f9a966b089d65a7", "scanner": "scanner-primary", "fingerprint": "239a938869adf673", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-cc1d680cdc3d6aa1", "level": "note", "message": {"text": "Unused endpoint: GET /mcp"}, "properties": {"repobilityId": "b823116255265f9b", "scanner": "scanner-primary", "fingerprint": "cc1d680cdc3d6aa1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-56b4efafa0127feb", "level": "note", "message": {"text": "Unused endpoint: DELETE /mcp"}, "properties": {"repobilityId": "1e43c5db5b31c214", "scanner": "scanner-primary", "fingerprint": "56b4efafa0127feb", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}]}]}