{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-ad613114b3a04537", "name": "Possibly dead Python function: generate_query_v1_orchestrations_query", "shortDescription": {"text": "Possibly dead Python function: generate_query_v1_orchestrations_query"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-774ad5e3ce0a2ce1", "name": "Possibly dead Python function: root_", "shortDescription": {"text": "Possibly dead Python function: root_"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8eb73a5158713ec3", "name": "Possibly dead Python function: generate_code_generate_code", "shortDescription": {"text": "Possibly dead Python function: generate_code_generate_code"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c84241c237010f59", "name": "Possibly dead Python function: list_data_sources_data_sources", "shortDescription": {"text": "Possibly dead Python function: list_data_sources_data_sources"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0769e6a0f425d449", "name": "Possibly dead Python function: list_semantic_models_semantic_models", "shortDescription": {"text": "Possibly dead Python function: list_semantic_models_semantic_models"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fd4a2a59de374859", "name": "Possibly dead Python function: upsert_dataset_profile_dataset_profiles__file_id_", "shortDescription": {"text": "Possibly dead Python function: upsert_dataset_profile_dataset_profiles__file_id_"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-eb66116aa83511a8", "name": "Possibly dead Python function: upsert_semantic_model_semantic_models", "shortDescription": {"text": "Possibly dead Python function: upsert_semantic_model_semantic_models"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f3967dbd435e79cd", "name": "Possibly dead Python function: upsert_user_users__user_id_", "shortDescription": {"text": "Possibly dead Python function: upsert_user_users__user_id_"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2088bfd77ca222ba", "name": "Possibly dead Python function: execute_sql_execute_sql", "shortDescription": {"text": "Possibly dead Python function: execute_sql_execute_sql"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6b0ea3d435dfcb4d", "name": "Possibly dead Python function: ingest_netsuite_batch", "shortDescription": {"text": "Possibly dead Python function: ingest_netsuite_batch"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-973db232973fabd9", "name": "Possibly dead Python function: ingest_workday_batch", "shortDescription": {"text": "Possibly dead Python function: ingest_workday_batch"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-68f9e52352777020", "name": "Possibly dead Python function: causal_discover_causal_discover", "shortDescription": {"text": "Possibly dead Python function: causal_discover_causal_discover"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-62d9bb49c86bda14", "name": "Possibly dead Python function: causal_info_causal_info", "shortDescription": {"text": "Possibly dead Python function: causal_info_causal_info"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-52fed84c3610cf3a", "name": "Possibly dead Python function: cleanup_old_executions_admin_cleanup", "shortDescription": {"text": "Possibly dead Python function: cleanup_old_executions_admin_cleanup"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5d07bd1478e0e714", "name": "Possibly dead Python function: create_job_jobs", "shortDescription": {"text": "Possibly dead Python function: create_job_jobs"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d2d12b46f63c9975", "name": "Possibly dead Python function: delete_job_jobs__job_id_", "shortDescription": {"text": "Possibly dead Python function: delete_job_jobs__job_id_"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4ddd16e242433506", "name": "Possibly dead Python function: execute_job_now_jobs__job_id__execute", "shortDescription": {"text": "Possibly dead Python function: execute_job_now_jobs__job_id__execute"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-218ec110867dad6d", "name": "Possibly dead Python function: pause_job_jobs__job_id__pause", "shortDescription": {"text": "Possibly dead Python function: pause_job_jobs__job_id__pause"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ad5af4d5485ef2bd", "name": "Possibly dead Python function: resume_job_jobs__job_id__resume", "shortDescription": {"text": "Possibly dead Python function: resume_job_jobs__job_id__resume"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c6b12d3f8b8e9ba8", "name": "Possibly dead Python function: root_", "shortDescription": {"text": "Possibly dead Python function: root_"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-06cb6c946b5faae6", "name": "Possibly dead Python function: trigger_job_execution_jobs__job_id__run", "shortDescription": {"text": "Possibly dead Python function: trigger_job_execution_jobs__job_id__run"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6b35ef1c04ac9ff4", "name": "Possibly dead Python function: update_job_jobs__job_id_", "shortDescription": {"text": "Possibly dead Python function: update_job_jobs__job_id_"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0ef3b8cc9ff30f65", "name": "Possibly dead Python function: analyze_results_analyze", "shortDescription": {"text": "Possibly dead Python function: analyze_results_analyze"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-38010a2e62e04793", "name": "Stray `console.log` in TS/JS \u2014 frontend/src/pages/PipelinesPanel.tsx:233", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 frontend/src/pages/PipelinesPanel.tsx:233"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8fefe8d857bf8f08", "name": "Stray `console.log` in TS/JS \u2014 frontend/src/plugins/PluginSystem.ts:147", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 frontend/src/plugins/PluginSystem.ts:147"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-60427b03771411b6", "name": "Dockerfile runs as root: frontend/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: frontend/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a7f39cdd5fa21931", "name": "Docker base image is tag-pinned but not digest-pinned: node:22-alpine", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: node:22-alpine"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e9c1e66a27308f49", "name": "Docker base image is tag-pinned but not digest-pinned: nginx:1.27-alpine", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: nginx:1.27-alpine"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-803a06e0ebaf5785", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.13-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.13-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-973912f2ca13d2f2", "name": "Insecure pattern 'exec_used' in aurabackend/uasr/recovery_loop.py:361", "shortDescription": {"text": "Insecure pattern 'exec_used' in aurabackend/uasr/recovery_loop.py:361"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a42cb176c23a7e9e", "name": "Insecure pattern 'eval_used' in aurabackend/agents/dpc_verifier.py:193", "shortDescription": {"text": "Insecure pattern 'eval_used' in aurabackend/agents/dpc_verifier.py:193"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e3ef7d9b918deb28", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/setup-python@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2a776c16dd0fe7d7", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-76b2ab6e6efb8a12", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-27924aa79fa4a517", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/setup-python@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0e758ec5ebe7f1a5", "name": "Very large file: sdk_clients/aura_gateway_client/client.py (1945 lines)", "shortDescription": {"text": "Very large file: sdk_clients/aura_gateway_client/client.py (1945 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1eab9329b039faa8", "name": "Very large file: frontend/src/types/api.generated.ts (5459 lines)", "shortDescription": {"text": "Very large file: frontend/src/types/api.generated.ts (5459 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-74192768328ffecb", "name": "Very large file: frontend/src/pages/PipelinesPanel.tsx (1620 lines)", "shortDescription": {"text": "Very large file: frontend/src/pages/PipelinesPanel.tsx (1620 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-97d792e16028fe9d", "name": "Very large file: aurabackend/counterfactual_service/engine.py (1836 lines)", "shortDescription": {"text": "Very large file: aurabackend/counterfactual_service/engine.py (1836 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-141b30a41e03817b", "name": "No license file detected", "shortDescription": {"text": "No license file detected"}, "fullDescription": {"text": "No LICENSE/COPYING/NOTICE file was found. Generated repositories often omit licensing, which blocks reuse and automated intake."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 55 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 51 placeholder/mock markers across 25 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-749d4bc1bd66df5f", "name": "Agent instructions exist but release-hardening basics are missing", "shortDescription": {"text": "Agent instructions exist but release-hardening basics are missing"}, "fullDescription": {"text": "AI-coder instruction files were found, but the repo is missing license. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0446c25aa6e2896c", "name": "Agent authority lacks a verifier contract: .claude/skills/speckit-agent-context-update/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/speckit-agent-context-update/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-78ac78bc4ff3cf46", "name": "Agent authority lacks a verifier contract: .claude/skills/speckit-taskstoissues/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/speckit-taskstoissues/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a1b9c60b82b59e58", "name": "Commented-code block (5 lines) in frontend/src/auth/AuthContext.tsx:40", "shortDescription": {"text": "Commented-code block (5 lines) in frontend/src/auth/AuthContext.tsx:40"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-071e730e2c96f136", "name": "Commented-code block (13 lines) in frontend/src/components/CounterfactualCard.tsx:48", "shortDescription": {"text": "Commented-code block (13 lines) in frontend/src/components/CounterfactualCard.tsx:48"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c5dce9f5468dc554", "name": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/src/components/LiveDashboard.tsx:94", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/src/components/LiveDashboard.tsx:94"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-94fd9f952c64033e", "name": "Commented-code block (6 lines) in frontend/src/audit/mappingTypeGuard.ts:5", "shortDescription": {"text": "Commented-code block (6 lines) in frontend/src/audit/mappingTypeGuard.ts:5"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-91309fe923b34fdf", "name": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/src/audit/auditApi.ts:7", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/src/audit/auditApi.ts:7"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5c445f0a05df94e1", "name": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/src/pages/Counterfactual.tsx:75", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/src/pages/Counterfactual.tsx:75"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-71390665071ad540", "name": "Commented-code block (5 lines) in frontend/src/services/api.ts:18", "shortDescription": {"text": "Commented-code block (5 lines) in frontend/src/services/api.ts:18"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3817782dbfb7680e", "name": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/src/services/api.ts:277", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/src/services/api.ts:277"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2489ce1a62bc1853", "name": "Commented-code block (7 lines) in scripts/regen_all_sdks.py:54", "shortDescription": {"text": "Commented-code block (7 lines) in scripts/regen_all_sdks.py:54"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-303fe7f640344bc8", "name": "Network/subprocess call without timeout or try/except \u2014 scripts/regen_all_sdks.py:17", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/regen_all_sdks.py:17"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d26842dfa01671dc", "name": "Commented-code block (5 lines) in aurabackend/tests/_mock_llm.py:135", "shortDescription": {"text": "Commented-code block (5 lines) in aurabackend/tests/_mock_llm.py:135"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-30eb4597e844c3c0", "name": "Commented-code block (6 lines) in aurabackend/tests/test_e2e_eval_gate.py:164", "shortDescription": {"text": "Commented-code block (6 lines) in aurabackend/tests/test_e2e_eval_gate.py:164"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5a152497f4020013", "name": "Commented-code block (5 lines) in aurabackend/tests/test_counterfactual_sensitivity.py:194", "shortDescription": {"text": "Commented-code block (5 lines) in aurabackend/tests/test_counterfactual_sensitivity.py:194"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7d73ffb014590eec", "name": "Commented-code block (5 lines) in aurabackend/tests/test_counterfactual_disagreement_challenge.py:230", "shortDescription": {"text": "Commented-code block (5 lines) in aurabackend/tests/test_counterfactual_disagreement_challenge.py:230"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d9bb54a8a47aa0f5", "name": "Commented-code block (7 lines) in aurabackend/tests/test_counterfactual_sprint15.py:121", "shortDescription": {"text": "Commented-code block (7 lines) in aurabackend/tests/test_counterfactual_sprint15.py:121"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-01e7f2f87400905f", "name": "Commented-code block (8 lines) in aurabackend/tests/test_counterfactual_engine.py:65", "shortDescription": {"text": "Commented-code block (8 lines) in aurabackend/tests/test_counterfactual_engine.py:65"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4bec93335d506ce3", "name": "Commented-code block (5 lines) in aurabackend/tests/test_counterfactual_tmle.py:36", "shortDescription": {"text": "Commented-code block (5 lines) in aurabackend/tests/test_counterfactual_tmle.py:36"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4414db0e281cc5d5", "name": "Commented-code block (5 lines) in aurabackend/tests/test_config.py:29", "shortDescription": {"text": "Commented-code block (5 lines) in aurabackend/tests/test_config.py:29"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-89e412846d528af3", "name": "Commented-code block (7 lines) in aurabackend/tests/test_counterfactual_sprint16.py:165", "shortDescription": {"text": "Commented-code block (7 lines) in aurabackend/tests/test_counterfactual_sprint16.py:165"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4edf030a1c24ff2c", "name": "Legacy-named symbol `ctx_v1` in aurabackend/tests/test_api_gateway_persistence.py:544", "shortDescription": {"text": "Legacy-named symbol `ctx_v1` in aurabackend/tests/test_api_gateway_persistence.py:544"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-30f89f440b4bd7f1", "name": "Commented-code block (8 lines) in aurabackend/tests/test_audit_merkle.py:250", "shortDescription": {"text": "Commented-code block (8 lines) in aurabackend/tests/test_audit_merkle.py:250"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d8ddc73b11b353cd", "name": "Legacy-named symbol `model_copy` in aurabackend/tests/test_counterfactual_canonical.py:129", "shortDescription": {"text": "Legacy-named symbol `model_copy` in aurabackend/tests/test_counterfactual_canonical.py:129"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-39a880af9b5a48af", "name": "Commented-code block (5 lines) in aurabackend/tests/test_service_factory.py:65", "shortDescription": {"text": "Commented-code block (5 lines) in aurabackend/tests/test_service_factory.py:65"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-04e8ecc689799f6d", "name": "Commented-code block (5 lines) in aurabackend/connectors/duckdb_connector.py:46", "shortDescription": {"text": "Commented-code block (5 lines) in aurabackend/connectors/duckdb_connector.py:46"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2904b2c0e9f604c6", "name": "Commented-code block (5 lines) in aurabackend/connectors/base.py:21", "shortDescription": {"text": "Commented-code block (5 lines) in aurabackend/connectors/base.py:21"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f9c96529f939c0bf", "name": "Legacy-named symbol `config_copy` in aurabackend/connectors/main.py:362", "shortDescription": {"text": "Legacy-named symbol `config_copy` in aurabackend/connectors/main.py:362"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-93b720ef62206242", "name": "Commented-code block (6 lines) in aurabackend/shared/config.py:131", "shortDescription": {"text": "Commented-code block (6 lines) in aurabackend/shared/config.py:131"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-425753e86a446f9b", "name": "Commented-code block (5 lines) in aurabackend/shared/db_migrations.py:24", "shortDescription": {"text": "Commented-code block (5 lines) in aurabackend/shared/db_migrations.py:24"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d3270d10f2ca759c", "name": "Commented-code block (5 lines) in aurabackend/shared/safe_paths.py:60", "shortDescription": {"text": "Commented-code block (5 lines) in aurabackend/shared/safe_paths.py:60"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b97b488241a6d64b", "name": "Commented-code block (5 lines) in aurabackend/shared/cache.py:91", "shortDescription": {"text": "Commented-code block (5 lines) in aurabackend/shared/cache.py:91"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2452a6de05349721", "name": "Commented-code block (7 lines) in aurabackend/shared/data_utils.py:26", "shortDescription": {"text": "Commented-code block (7 lines) in aurabackend/shared/data_utils.py:26"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e4a2890117f9eb47", "name": "Commented-code block (11 lines) in aurabackend/shared/middleware.py:242", "shortDescription": {"text": "Commented-code block (11 lines) in aurabackend/shared/middleware.py:242"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e8108899b2d812b0", "name": "Commented-code block (10 lines) in aurabackend/shared/audit_log.py:238", "shortDescription": {"text": "Commented-code block (10 lines) in aurabackend/shared/audit_log.py:238"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e43e7c1c212941f9", "name": "Commented-code block (5 lines) in aurabackend/shared/llm_provider.py:578", "shortDescription": {"text": "Commented-code block (5 lines) in aurabackend/shared/llm_provider.py:578"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6171acfebacdcb24", "name": "Stub function `inc` (body is just `pass`/`return`) \u2014 aurabackend/shared/observability.py:129", "shortDescription": {"text": "Stub function `inc` (body is just `pass`/`return`) \u2014 aurabackend/shared/observability.py:129"}, "fullDescription": {"text": "Likely an AI scaffold that was never filled in. Remove or implement."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8d6e24423c96eea7", "name": "Commented-code block (5 lines) in aurabackend/shared/service_factory.py:119", "shortDescription": {"text": "Commented-code block (5 lines) in aurabackend/shared/service_factory.py:119"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9a15f1f492d57d23", "name": "Legacy-named symbol `model_copy` in aurabackend/dar_service/graph.py:139", "shortDescription": {"text": "Legacy-named symbol `model_copy` in aurabackend/dar_service/graph.py:139"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bce48d2452008f28", "name": "Commented-code block (5 lines) in aurabackend/scheduler_service/worker.py:57", "shortDescription": {"text": "Commented-code block (5 lines) in aurabackend/scheduler_service/worker.py:57"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-73534bc26ae23af2", "name": "Commented-code block (8 lines) in aurabackend/scheduler_service/distributed_queue.py:96", "shortDescription": {"text": "Commented-code block (8 lines) in aurabackend/scheduler_service/distributed_queue.py:96"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b29b79d92a3958f3", "name": "Commented-code block (5 lines) in aurabackend/uasr/causal_rl_evaluator.py:80", "shortDescription": {"text": "Commented-code block (5 lines) in aurabackend/uasr/causal_rl_evaluator.py:80"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c5f0d07476ea7e4d", "name": "Commented-code block (5 lines) in aurabackend/uasr/mapek_worker.py:97", "shortDescription": {"text": "Commented-code block (5 lines) in aurabackend/uasr/mapek_worker.py:97"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-acb9edc1beb308bd", "name": "Legacy-named symbol `V_old` in aurabackend/uasr/shim_router.py:10", "shortDescription": {"text": "Legacy-named symbol `V_old` in aurabackend/uasr/shim_router.py:10"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3b704c8a8e39c3db", "name": "Commented-code block (5 lines) in aurabackend/agents/dpc_verifier.py:188", "shortDescription": {"text": "Commented-code block (5 lines) in aurabackend/agents/dpc_verifier.py:188"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9a5707d0b97537b4", "name": "Commented-code block (6 lines) in aurabackend/agents/specialists/sql_generator_agent.py:72", "shortDescription": {"text": "Commented-code block (6 lines) in aurabackend/agents/specialists/sql_generator_agent.py:72"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4e08379a6fdb65d2", "name": "Commented-code block (6 lines) in aurabackend/agents/specialists/financial_auditor.py:16", "shortDescription": {"text": "Commented-code block (6 lines) in aurabackend/agents/specialists/financial_auditor.py:16"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cb6a3966c2bd55db", "name": "Commented-code block (5 lines) in aurabackend/pipeline/streaming/watermark_tracker.py:60", "shortDescription": {"text": "Commented-code block (5 lines) in aurabackend/pipeline/streaming/watermark_tracker.py:60"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-93e3a3b5fd49e2d8", "name": "Commented-code block (5 lines) in aurabackend/pipeline/streaming/streaming_engine.py:471", "shortDescription": {"text": "Commented-code block (5 lines) in aurabackend/pipeline/streaming/streaming_engine.py:471"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-377bc9f11be761f0", "name": "Commented-code block (6 lines) in aurabackend/pipeline/streaming/models.py:128", "shortDescription": {"text": "Commented-code block (6 lines) in aurabackend/pipeline/streaming/models.py:128"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0bcd9f3120bef7e3", "name": "Commented-code block (6 lines) in aurabackend/pipeline/streaming/window_processor.py:102", "shortDescription": {"text": "Commented-code block (6 lines) in aurabackend/pipeline/streaming/window_processor.py:102"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b3186712a5910a7b", "name": "Commented-code block (6 lines) in aurabackend/api_gateway/main.py:164", "shortDescription": {"text": "Commented-code block (6 lines) in aurabackend/api_gateway/main.py:164"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0b337f4dd0e4cc4f", "name": "Commented-code block (5 lines) in aurabackend/api_gateway/routers/etl.py:407", "shortDescription": {"text": "Commented-code block (5 lines) in aurabackend/api_gateway/routers/etl.py:407"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c9484c816922b26a", "name": "Commented-code block (6 lines) in aurabackend/api_gateway/routers/queries.py:51", "shortDescription": {"text": "Commented-code block (6 lines) in aurabackend/api_gateway/routers/queries.py:51"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8171fb83b75577dd", "name": "Commented-code block (6 lines) in aurabackend/api_gateway/routers/chat.py:170", "shortDescription": {"text": "Commented-code block (6 lines) in aurabackend/api_gateway/routers/chat.py:170"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7e694e7d60e61490", "name": "Commented-code block (5 lines) in aurabackend/api_gateway/routers/files.py:76", "shortDescription": {"text": "Commented-code block (5 lines) in aurabackend/api_gateway/routers/files.py:76"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d8854bebb7fa9c11", "name": "Commented-code block (5 lines) in aurabackend/causal_service/discovery.py:109", "shortDescription": {"text": "Commented-code block (5 lines) in aurabackend/causal_service/discovery.py:109"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-19f32ff1724b3633", "name": "Commented-code block (5 lines) in aurabackend/counterfactual_service/schemas.py:133", "shortDescription": {"text": "Commented-code block (5 lines) in aurabackend/counterfactual_service/schemas.py:133"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-806c801d8d0183ea", "name": "Commented-code block (5 lines) in aurabackend/counterfactual_service/tmle.py:193", "shortDescription": {"text": "Commented-code block (5 lines) in aurabackend/counterfactual_service/tmle.py:193"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-810ab19dd65a1fe5", "name": "Commented-code block (5 lines) in aurabackend/counterfactual_service/sensitivity.py:40", "shortDescription": {"text": "Commented-code block (5 lines) in aurabackend/counterfactual_service/sensitivity.py:40"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b2a3c3823566ccc8", "name": "Commented-code block (6 lines) in aurabackend/counterfactual_service/engine.py:62", "shortDescription": {"text": "Commented-code block (6 lines) in aurabackend/counterfactual_service/engine.py:62"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d848ffc91dd983c5", "name": "Commented-code block (5 lines) in aurabackend/counterfactual_service/main.py:55", "shortDescription": {"text": "Commented-code block (5 lines) in aurabackend/counterfactual_service/main.py:55"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-008760e6f125196b", "name": "Commented-code block (9 lines) in aurabackend/counterfactual_service/conformal.py:104", "shortDescription": {"text": "Commented-code block (9 lines) in aurabackend/counterfactual_service/conformal.py:104"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c80803c901559d32", "name": "Commented-code block (5 lines) in aurabackend/metadata_store/repository.py:79", "shortDescription": {"text": "Commented-code block (5 lines) in aurabackend/metadata_store/repository.py:79"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-48e64f0dea2b08cd", "name": "Commented-code block (5 lines) in sdk/src/aura_counterfactual/client.py:356", "shortDescription": {"text": "Commented-code block (5 lines) in sdk/src/aura_counterfactual/client.py:356"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b532129177ebf6a8", "name": "Commented-code block (7 lines) in sdk/src/aura_counterfactual/models.py:101", "shortDescription": {"text": "Commented-code block (7 lines) in sdk/src/aura_counterfactual/models.py:101"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-379a33678ae64747", "name": "77 env vars used in code but missing from .env.example", "shortDescription": {"text": "77 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `API_HOST`, `AUDIT_POOL_WORKERS`, `AURA_AGENT_TIMEOUT`, `AURA_ARTIFACT_DIR`, `AURA_AUDIT_CRITIC_TIMEOUT_S`, `AURA_AUDIT_DIR`, `AURA_AUDIT_ENABLED`, `AURA_AUDIT_MAX_FIELD_BYTES` + 69 more. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nsdk_clients/aura_orchestration_client/client.py:generate_query_v1_orchestrations_query, sdk_clients/aura_orchestration_client/client.py:generate_query_v1_orchestrations_query\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b873925e6bfa53e8", "name": "Near-duplicate function bodies in 22 places", "shortDescription": {"text": "Near-duplicate function bodies in 22 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nsdk_clients/aura_orchestration_client/client.py:health, sdk_clients/aura_orchestration_client/client.py:health, sdk_clients/aura_code_generation_client/client.py:health, sdk_clients/aura_code_generation_client/client.py:health\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-33a6b62e30ce7ab4", "name": "Near-duplicate function bodies in 6 places", "shortDescription": {"text": "Near-duplicate function bodies in 6 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nsdk_clients/aura_orchestration_client/client.py:root_, sdk_clients/aura_orchestration_client/client.py:root_, sdk_clients/aura_scheduler_client/client.py:root_, sdk_clients/aura_scheduler_client/client.py:root_\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-419ae85c49dd4f77", "name": "Frontend route `/audit/:jobId` has no Link/navigate to it \u2014 frontend/src/audit/__tests__/AuditProgress.test.tsx", "shortDescription": {"text": "Frontend route `/audit/:jobId` has no Link/navigate to it \u2014 frontend/src/audit/__tests__/AuditProgress.test.tsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0830da2effccf555", "name": "Frontend route `/certificate/:hash` has no Link/navigate to it \u2014 frontend/src/AppRoutes.tsx", "shortDescription": {"text": "Frontend route `/certificate/:hash` has no Link/navigate to it \u2014 frontend/src/AppRoutes.tsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e708f1ee5c10ca9d", "name": "Frontend route `/verify/:hash` has no Link/navigate to it \u2014 frontend/src/audit/__tests__/VerifyPage.test.tsx", "shortDescription": {"text": "Frontend route `/verify/:hash` has no Link/navigate to it \u2014 frontend/src/audit/__tests__/VerifyPage.test.tsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-84954f12cdafdedc", "name": "Frontend route `/app/*` has no Link/navigate to it \u2014 frontend/src/AppRoutes.tsx", "shortDescription": {"text": "Frontend route `/app/*` has no Link/navigate to it \u2014 frontend/src/AppRoutes.tsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-028167737bc9c3d9", "name": "FastAPI POST `generate_query` without auth dependency \u2014 aurabackend/orchestration_service/main.py:73", "shortDescription": {"text": "FastAPI POST `generate_query` without auth dependency \u2014 aurabackend/orchestration_service/main.py:73"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b115ff9ab8af3796", "name": "FastAPI POST `test_connector` without auth dependency \u2014 aurabackend/connectors/main.py:86", "shortDescription": {"text": "FastAPI POST `test_connector` without auth dependency \u2014 aurabackend/connectors/main.py:86"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a685a06a80726a01", "name": "FastAPI POST `list_tables` without auth dependency \u2014 aurabackend/connectors/main.py:126", "shortDescription": {"text": "FastAPI POST `list_tables` without auth dependency \u2014 aurabackend/connectors/main.py:126"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-095a2d396915bcfd", "name": "FastAPI POST `ingest_file` without auth dependency \u2014 aurabackend/connectors/main.py:193", "shortDescription": {"text": "FastAPI POST `ingest_file` without auth dependency \u2014 aurabackend/connectors/main.py:193"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-57743f3c2cca6872", "name": "FastAPI POST `introspect_database` without auth dependency \u2014 aurabackend/connectors/main.py:253", "shortDescription": {"text": "FastAPI POST `introspect_database` without auth dependency \u2014 aurabackend/connectors/main.py:253"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-233076e10f654e8e", "name": "FastAPI POST `execute_query` without auth dependency \u2014 aurabackend/connectors/main.py:327", "shortDescription": {"text": "FastAPI POST `execute_query` without auth dependency \u2014 aurabackend/connectors/main.py:327"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-154dbfafdaecd39b", "name": "FastAPI POST `vault_query` without auth dependency \u2014 aurabackend/connectors/main.py:440", "shortDescription": {"text": "FastAPI POST `vault_query` without auth dependency \u2014 aurabackend/connectors/main.py:440"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e27a9dd67d6e4c45", "name": "FastAPI POST `vault_vector_search` without auth dependency \u2014 aurabackend/connectors/main.py:467", "shortDescription": {"text": "FastAPI POST `vault_vector_search` without auth dependency \u2014 aurabackend/connectors/main.py:467"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cdd0d5126190d408", "name": "FastAPI POST `vault_spatial_query` without auth dependency \u2014 aurabackend/connectors/main.py:494", "shortDescription": {"text": "FastAPI POST `vault_spatial_query` without auth dependency \u2014 aurabackend/connectors/main.py:494"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f9d73cc3a97dfba9", "name": "FastAPI POST `analyze_results` without auth dependency \u2014 aurabackend/insights/main.py:75", "shortDescription": {"text": "FastAPI POST `analyze_results` without auth dependency \u2014 aurabackend/insights/main.py:75"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ff8cf26840bf97fc", "name": "FastAPI POST `suggest_charts` without auth dependency \u2014 aurabackend/insights/main.py:110", "shortDescription": {"text": "FastAPI POST `suggest_charts` without auth dependency \u2014 aurabackend/insights/main.py:110"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3f06ea8a912083d9", "name": "FastAPI POST `recommend_indexes` without auth dependency \u2014 aurabackend/insights/main.py:140", "shortDescription": {"text": "FastAPI POST `recommend_indexes` without auth dependency \u2014 aurabackend/insights/main.py:140"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f28f94d53564c205", "name": "FastAPI POST `trigger_research_run` without auth dependency \u2014 aurabackend/dar_service/main.py:125", "shortDescription": {"text": "FastAPI POST `trigger_research_run` without auth dependency \u2014 aurabackend/dar_service/main.py:125"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bbfbd947202c4cf9", "name": "FastAPI POST `daemon_start` without auth dependency \u2014 aurabackend/dar_service/main.py:185", "shortDescription": {"text": "FastAPI POST `daemon_start` without auth dependency \u2014 aurabackend/dar_service/main.py:185"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-06df6930107a7ba9", "name": "FastAPI POST `daemon_stop` without auth dependency \u2014 aurabackend/dar_service/main.py:194", "shortDescription": {"text": "FastAPI POST `daemon_stop` without auth dependency \u2014 aurabackend/dar_service/main.py:194"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-666e10cb8fb1f310", "name": "FastAPI POST `ingest_batch` without auth dependency \u2014 aurabackend/uasr/service.py:206", "shortDescription": {"text": "FastAPI POST `ingest_batch` without auth dependency \u2014 aurabackend/uasr/service.py:206"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1017bfaa6b99bf06", "name": "FastAPI POST `gate_check` without auth dependency \u2014 aurabackend/uasr/service.py:424", "shortDescription": {"text": "FastAPI POST `gate_check` without auth dependency \u2014 aurabackend/uasr/service.py:424"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-82be6e28aa25ea26", "name": "FastAPI POST `rollback_shim` without auth dependency \u2014 aurabackend/uasr/service.py:437", "shortDescription": {"text": "FastAPI POST `rollback_shim` without auth dependency \u2014 aurabackend/uasr/service.py:437"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7515698e0a1c84ab", "name": "FastAPI POST `mapek_resume` without auth dependency \u2014 aurabackend/uasr/service.py:537", "shortDescription": {"text": "FastAPI POST `mapek_resume` without auth dependency \u2014 aurabackend/uasr/service.py:537"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c827afd83a89edb2", "name": "FastAPI POST `create_plan` without auth dependency \u2014 aurabackend/agents/api.py:90", "shortDescription": {"text": "FastAPI POST `create_plan` without auth dependency \u2014 aurabackend/agents/api.py:90"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e7cdd876fcfb2013", "name": "FastAPI POST `execute_prompt` without auth dependency \u2014 aurabackend/agents/api.py:115", "shortDescription": {"text": "FastAPI POST `execute_prompt` without auth dependency \u2014 aurabackend/agents/api.py:115"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9da908e5e7dda213", "name": "FastAPI POST `execute_prompt_stream` without auth dependency \u2014 aurabackend/agents/api.py:154", "shortDescription": {"text": "FastAPI POST `execute_prompt_stream` without auth dependency \u2014 aurabackend/agents/api.py:154"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7409c3e67a734585", "name": "FastAPI POST `execute_prompt_async` without auth dependency \u2014 aurabackend/agents/api.py:214", "shortDescription": {"text": "FastAPI POST `execute_prompt_async` without auth dependency \u2014 aurabackend/agents/api.py:214"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-84a47bb9a6100150", "name": "FastAPI POST `create_pipeline` without auth dependency \u2014 aurabackend/pipeline/streaming/streaming_api.py:108", "shortDescription": {"text": "FastAPI POST `create_pipeline` without auth dependency \u2014 aurabackend/pipeline/streaming/streaming_api.py:108"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7413f9badb32b300", "name": "FastAPI PUT `update_pipeline` without auth dependency \u2014 aurabackend/pipeline/streaming/streaming_api.py:133", "shortDescription": {"text": "FastAPI PUT `update_pipeline` without auth dependency \u2014 aurabackend/pipeline/streaming/streaming_api.py:133"}, "fullDescription": {"text": "`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a72c09178d9d00c4", "name": "FastAPI DELETE `delete_pipeline` without auth dependency \u2014 aurabackend/pipeline/streaming/streaming_api.py:147", "shortDescription": {"text": "FastAPI DELETE `delete_pipeline` without auth dependency \u2014 aurabackend/pipeline/streaming/streaming_api.py:147"}, "fullDescription": {"text": "`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c2becac38f695b9e", "name": "FastAPI POST `start_pipeline` without auth dependency \u2014 aurabackend/pipeline/streaming/streaming_api.py:163", "shortDescription": {"text": "FastAPI POST `start_pipeline` without auth dependency \u2014 aurabackend/pipeline/streaming/streaming_api.py:163"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6a330c3f33fe9461", "name": "FastAPI POST `stop_pipeline` without auth dependency \u2014 aurabackend/pipeline/streaming/streaming_api.py:177", "shortDescription": {"text": "FastAPI POST `stop_pipeline` without auth dependency \u2014 aurabackend/pipeline/streaming/streaming_api.py:177"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5299df81e66447c2", "name": "FastAPI POST `pause_pipeline` without auth dependency \u2014 aurabackend/pipeline/streaming/streaming_api.py:186", "shortDescription": {"text": "FastAPI POST `pause_pipeline` without auth dependency \u2014 aurabackend/pipeline/streaming/streaming_api.py:186"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-fbde21e20fcff912", "name": "FastAPI POST `resume_pipeline` without auth dependency \u2014 aurabackend/pipeline/streaming/streaming_api.py:195", "shortDescription": {"text": "FastAPI POST `resume_pipeline` without auth dependency \u2014 aurabackend/pipeline/streaming/streaming_api.py:195"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3b2229079c11dc29", "name": "FastAPI POST `pipeline_generate` without auth dependency \u2014 aurabackend/api_gateway/routers/pipelines.py:95", "shortDescription": {"text": "FastAPI POST `pipeline_generate` without auth dependency \u2014 aurabackend/api_gateway/routers/pipelines.py:95"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-621485825efb7e7f", "name": "FastAPI POST `pipeline_execute` without auth dependency \u2014 aurabackend/api_gateway/routers/pipelines.py:129", "shortDescription": {"text": "FastAPI POST `pipeline_execute` without auth dependency \u2014 aurabackend/api_gateway/routers/pipelines.py:129"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8ede96eb2cc633fe", "name": "FastAPI POST `pipeline_execute_async` without auth dependency \u2014 aurabackend/api_gateway/routers/pipelines.py:147", "shortDescription": {"text": "FastAPI POST `pipeline_execute_async` without auth dependency \u2014 aurabackend/api_gateway/routers/pipelines.py:147"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-50417d596bf6945b", "name": "FastAPI POST `pipeline_save` without auth dependency \u2014 aurabackend/api_gateway/routers/pipelines.py:252", "shortDescription": {"text": "FastAPI POST `pipeline_save` without auth dependency \u2014 aurabackend/api_gateway/routers/pipelines.py:252"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8deb69def2d3b56e", "name": "FastAPI DELETE `pipeline_delete` without auth dependency \u2014 aurabackend/api_gateway/routers/pipelines.py:286", "shortDescription": {"text": "FastAPI DELETE `pipeline_delete` without auth dependency \u2014 aurabackend/api_gateway/routers/pipelines.py:286"}, "fullDescription": {"text": "`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0ae8b69285ad1605", "name": "FastAPI POST `auto_generate_model_from_file` without auth dependency \u2014 aurabackend/api_gateway/routers/pipelines.py:340", "shortDescription": {"text": "FastAPI POST `auto_generate_model_from_file` without auth dependency \u2014 aurabackend/api_gateway/routers/pipelines.py:340"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e3e0178b7ee8f961", "name": "FastAPI POST `upsert_semantic_model` without auth dependency \u2014 aurabackend/api_gateway/routers/pipelines.py:360", "shortDescription": {"text": "FastAPI POST `upsert_semantic_model` without auth dependency \u2014 aurabackend/api_gateway/routers/pipelines.py:360"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-657a2d907ef2b6fa", "name": "FastAPI POST `uasr_ingest` without auth dependency \u2014 aurabackend/api_gateway/routers/pipelines.py:408", "shortDescription": {"text": "FastAPI POST `uasr_ingest` without auth dependency \u2014 aurabackend/api_gateway/routers/pipelines.py:408"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-56af52453b9e2820", "name": "FastAPI POST `uasr_baseline` without auth dependency \u2014 aurabackend/api_gateway/routers/pipelines.py:415", "shortDescription": {"text": "FastAPI POST `uasr_baseline` without auth dependency \u2014 aurabackend/api_gateway/routers/pipelines.py:415"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7257d7acbb6cf1cd", "name": "FastAPI POST `test_connector` without auth dependency \u2014 aurabackend/api_gateway/routers/connections.py:99", "shortDescription": {"text": "FastAPI POST `test_connector` without auth dependency \u2014 aurabackend/api_gateway/routers/connections.py:99"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8ee6fcf70732dd4a", "name": "FastAPI POST `list_connector_tables` without auth dependency \u2014 aurabackend/api_gateway/routers/connections.py:122", "shortDescription": {"text": "FastAPI POST `list_connector_tables` without auth dependency \u2014 aurabackend/api_gateway/routers/connections.py:122"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-517818b460f0375d", "name": "FastAPI POST `profile_table` without auth dependency \u2014 aurabackend/api_gateway/routers/connections.py:141", "shortDescription": {"text": "FastAPI POST `profile_table` without auth dependency \u2014 aurabackend/api_gateway/routers/connections.py:141"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ca82a2a95c479463", "name": "FastAPI POST `create_connection` without auth dependency \u2014 aurabackend/api_gateway/routers/connections.py:180", "shortDescription": {"text": "FastAPI POST `create_connection` without auth dependency \u2014 aurabackend/api_gateway/routers/connections.py:180"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6c5b943407c7f8b3", "name": "FastAPI POST `test_connection_by_id` without auth dependency \u2014 aurabackend/api_gateway/routers/connections.py:221", "shortDescription": {"text": "FastAPI POST `test_connection_by_id` without auth dependency \u2014 aurabackend/api_gateway/routers/connections.py:221"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-106ce96dacef6210", "name": "FastAPI DELETE `delete_connection` without auth dependency \u2014 aurabackend/api_gateway/routers/connections.py:252", "shortDescription": {"text": "FastAPI DELETE `delete_connection` without auth dependency \u2014 aurabackend/api_gateway/routers/connections.py:252"}, "fullDescription": {"text": "`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c8fc3fc4a8618d28", "name": "FastAPI POST `issue_token` without auth dependency \u2014 aurabackend/api_gateway/routers/auth.py:68", "shortDescription": {"text": "FastAPI POST `issue_token` without auth dependency \u2014 aurabackend/api_gateway/routers/auth.py:68"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a4aca7ced029a762", "name": "FastAPI POST `etl_preview_source` without auth dependency \u2014 aurabackend/api_gateway/routers/etl.py:252", "shortDescription": {"text": "FastAPI POST `etl_preview_source` without auth dependency \u2014 aurabackend/api_gateway/routers/etl.py:252"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-94c32719231ef86f", "name": "FastAPI POST `etl_execute` without auth dependency \u2014 aurabackend/api_gateway/routers/etl.py:300", "shortDescription": {"text": "FastAPI POST `etl_execute` without auth dependency \u2014 aurabackend/api_gateway/routers/etl.py:300"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e893ea4e699ad77e", "name": "FastAPI POST `etl_from_natural_language` without auth dependency \u2014 aurabackend/api_gateway/routers/etl.py:428", "shortDescription": {"text": "FastAPI POST `etl_from_natural_language` without auth dependency \u2014 aurabackend/api_gateway/routers/etl.py:428"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-490d5c807e0cdd7c", "name": "FastAPI POST `create_webhook` without auth dependency \u2014 aurabackend/api_gateway/routers/webhooks.py:83", "shortDescription": {"text": "FastAPI POST `create_webhook` without auth dependency \u2014 aurabackend/api_gateway/routers/webhooks.py:83"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8ef2ee4662c7e58b", "name": "FastAPI PATCH `update_webhook` without auth dependency \u2014 aurabackend/api_gateway/routers/webhooks.py:127", "shortDescription": {"text": "FastAPI PATCH `update_webhook` without auth dependency \u2014 aurabackend/api_gateway/routers/webhooks.py:127"}, "fullDescription": {"text": "`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7840eb04091af55c", "name": "FastAPI DELETE `delete_webhook` without auth dependency \u2014 aurabackend/api_gateway/routers/webhooks.py:135", "shortDescription": {"text": "FastAPI DELETE `delete_webhook` without auth dependency \u2014 aurabackend/api_gateway/routers/webhooks.py:135"}, "fullDescription": {"text": "`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-fb3508fb1ea17799", "name": "FastAPI POST `test_webhook` without auth dependency \u2014 aurabackend/api_gateway/routers/webhooks.py:142", "shortDescription": {"text": "FastAPI POST `test_webhook` without auth dependency \u2014 aurabackend/api_gateway/routers/webhooks.py:142"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1fc635476cb7f4f7", "name": "FastAPI POST `execute_for_chat` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:231", "shortDescription": {"text": "FastAPI POST `execute_for_chat` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:231"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4edb7e594a754d59", "name": "FastAPI POST `execute_query_with_insights` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:361", "shortDescription": {"text": "FastAPI POST `execute_query_with_insights` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:361"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-80003db99b02e55b", "name": "FastAPI POST `generate_query_proxy` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:418", "shortDescription": {"text": "FastAPI POST `generate_query_proxy` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:418"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e76ba57ed5a105c4", "name": "FastAPI POST `validate_query` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:437", "shortDescription": {"text": "FastAPI POST `validate_query` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:437"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8e4b09686fa99969", "name": "FastAPI POST `lint_query` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:453", "shortDescription": {"text": "FastAPI POST `lint_query` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:453"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-26f405e6c49d5c75", "name": "FastAPI POST `analyze_results` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:466", "shortDescription": {"text": "FastAPI POST `analyze_results` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:466"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b484c15b6979e557", "name": "FastAPI POST `create_saved_query` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:519", "shortDescription": {"text": "FastAPI POST `create_saved_query` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:519"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1fd0179ebb553987", "name": "FastAPI PATCH `update_saved_query` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:555", "shortDescription": {"text": "FastAPI PATCH `update_saved_query` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:555"}, "fullDescription": {"text": "`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b361cf0c55a55bf5", "name": "FastAPI DELETE `delete_saved_query` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:575", "shortDescription": {"text": "FastAPI DELETE `delete_saved_query` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:575"}, "fullDescription": {"text": "`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-dcea9890619918d8", "name": "FastAPI POST `create_share_link` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:590", "shortDescription": {"text": "FastAPI POST `create_share_link` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:590"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-350c2845f885d479", "name": "FastAPI DELETE `revoke_share_link` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:603", "shortDescription": {"text": "FastAPI DELETE `revoke_share_link` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:603"}, "fullDescription": {"text": "`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0f06d98623f8e8d0", "name": "FastAPI PUT `set_saved_query_schedule` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:685", "shortDescription": {"text": "FastAPI PUT `set_saved_query_schedule` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:685"}, "fullDescription": {"text": "`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1d501645df596157", "name": "FastAPI DELETE `clear_saved_query_schedule` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:707", "shortDescription": {"text": "FastAPI DELETE `clear_saved_query_schedule` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:707"}, "fullDescription": {"text": "`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e61902638935cf21", "name": "FastAPI POST `save_query_history` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:904", "shortDescription": {"text": "FastAPI POST `save_query_history` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:904"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-79f018836f9e5069", "name": "FastAPI POST `approve_job` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:1001", "shortDescription": {"text": "FastAPI POST `approve_job` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:1001"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6e635a8bf917a57d", "name": "FastAPI POST `cancel_job` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:1013", "shortDescription": {"text": "FastAPI POST `cancel_job` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:1013"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0932312ffddfd9e3", "name": "FastAPI POST `create_hook` without auth dependency \u2014 aurabackend/api_gateway/routers/inbound_hooks.py:68", "shortDescription": {"text": "FastAPI POST `create_hook` without auth dependency \u2014 aurabackend/api_gateway/routers/inbound_hooks.py:68"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-17eefc3df23bb411", "name": "FastAPI PATCH `update_hook` without auth dependency \u2014 aurabackend/api_gateway/routers/inbound_hooks.py:92", "shortDescription": {"text": "FastAPI PATCH `update_hook` without auth dependency \u2014 aurabackend/api_gateway/routers/inbound_hooks.py:92"}, "fullDescription": {"text": "`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-febfec3e12f5516d", "name": "FastAPI DELETE `delete_hook` without auth dependency \u2014 aurabackend/api_gateway/routers/inbound_hooks.py:103", "shortDescription": {"text": "FastAPI DELETE `delete_hook` without auth dependency \u2014 aurabackend/api_gateway/routers/inbound_hooks.py:103"}, "fullDescription": {"text": "`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-364e4097ce105e6c", "name": "FastAPI POST `fire_hook` without auth dependency \u2014 aurabackend/api_gateway/routers/inbound_hooks.py:122", "shortDescription": {"text": "FastAPI POST `fire_hook` without auth dependency \u2014 aurabackend/api_gateway/routers/inbound_hooks.py:122"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0322dbd3244edf8f", "name": "FastAPI POST `chat_endpoint` without auth dependency \u2014 aurabackend/api_gateway/routers/chat.py:144", "shortDescription": {"text": "FastAPI POST `chat_endpoint` without auth dependency \u2014 aurabackend/api_gateway/routers/chat.py:144"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-33e8d2e6dadc821c", "name": "FastAPI POST `save_chat_message` without auth dependency \u2014 aurabackend/api_gateway/routers/chat.py:325", "shortDescription": {"text": "FastAPI POST `save_chat_message` without auth dependency \u2014 aurabackend/api_gateway/routers/chat.py:325"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e1485023024d6e11", "name": "FastAPI POST `upload_universal` without auth dependency \u2014 aurabackend/api_gateway/routers/files.py:61", "shortDescription": {"text": "FastAPI POST `upload_universal` without auth dependency \u2014 aurabackend/api_gateway/routers/files.py:61"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f6c293b59aa7398a", "name": "FastAPI DELETE `delete_file` without auth dependency \u2014 aurabackend/api_gateway/routers/files.py:238", "shortDescription": {"text": "FastAPI DELETE `delete_file` without auth dependency \u2014 aurabackend/api_gateway/routers/files.py:238"}, "fullDescription": {"text": "`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a16663416bcad1a8", "name": "FastAPI POST `create_dashboard` without auth dependency \u2014 aurabackend/api_gateway/routers/dashboards.py:87", "shortDescription": {"text": "FastAPI POST `create_dashboard` without auth dependency \u2014 aurabackend/api_gateway/routers/dashboards.py:87"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0044ad73fee80c9a", "name": "FastAPI PATCH `update_dashboard` without auth dependency \u2014 aurabackend/api_gateway/routers/dashboards.py:124", "shortDescription": {"text": "FastAPI PATCH `update_dashboard` without auth dependency \u2014 aurabackend/api_gateway/routers/dashboards.py:124"}, "fullDescription": {"text": "`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b22bd983b1164352", "name": "FastAPI DELETE `delete_dashboard` without auth dependency \u2014 aurabackend/api_gateway/routers/dashboards.py:147", "shortDescription": {"text": "FastAPI DELETE `delete_dashboard` without auth dependency \u2014 aurabackend/api_gateway/routers/dashboards.py:147"}, "fullDescription": {"text": "`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f9aef1fb3784b307", "name": "FastAPI POST `render_dashboard` without auth dependency \u2014 aurabackend/api_gateway/routers/dashboards.py:236", "shortDescription": {"text": "FastAPI POST `render_dashboard` without auth dependency \u2014 aurabackend/api_gateway/routers/dashboards.py:236"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-66dd979424ea30da", "name": "FastAPI POST `create_workspace` without auth dependency \u2014 aurabackend/api_gateway/routers/workspaces.py:124", "shortDescription": {"text": "FastAPI POST `create_workspace` without auth dependency \u2014 aurabackend/api_gateway/routers/workspaces.py:124"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d2c0fa87f3a517bb", "name": "FastAPI PATCH `update_workspace` without auth dependency \u2014 aurabackend/api_gateway/routers/workspaces.py:142", "shortDescription": {"text": "FastAPI PATCH `update_workspace` without auth dependency \u2014 aurabackend/api_gateway/routers/workspaces.py:142"}, "fullDescription": {"text": "`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9a163fb6cfb07ecb", "name": "FastAPI DELETE `delete_workspace` without auth dependency \u2014 aurabackend/api_gateway/routers/workspaces.py:159", "shortDescription": {"text": "FastAPI DELETE `delete_workspace` without auth dependency \u2014 aurabackend/api_gateway/routers/workspaces.py:159"}, "fullDescription": {"text": "`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ebf2de6a5663ef5b", "name": "FastAPI POST `submit` without auth dependency \u2014 aurabackend/api_gateway/routers/counterfactual.py:70", "shortDescription": {"text": "FastAPI POST `submit` without auth dependency \u2014 aurabackend/api_gateway/routers/counterfactual.py:70"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2ab8936d03a7dc0e", "name": "FastAPI POST `run_demo` without auth dependency \u2014 aurabackend/api_gateway/routers/counterfactual.py:114", "shortDescription": {"text": "FastAPI POST `run_demo` without auth dependency \u2014 aurabackend/api_gateway/routers/counterfactual.py:114"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-266ffcc0bf617ab7", "name": "FastAPI POST `run_audit` without auth dependency \u2014 aurabackend/api_gateway/routers/counterfactual.py:119", "shortDescription": {"text": "FastAPI POST `run_audit` without auth dependency \u2014 aurabackend/api_gateway/routers/counterfactual.py:119"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b4b029211b80310e", "name": "FastAPI POST `financial_audit` without auth dependency \u2014 aurabackend/api_gateway/routers/counterfactual.py:124", "shortDescription": {"text": "FastAPI POST `financial_audit` without auth dependency \u2014 aurabackend/api_gateway/routers/counterfactual.py:124"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-05beb427b1be9e5d", "name": "FastAPI POST `causal_discover` without auth dependency \u2014 aurabackend/causal_service/main.py:83", "shortDescription": {"text": "FastAPI POST `causal_discover` without auth dependency \u2014 aurabackend/causal_service/main.py:83"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ea8956fa196d5269", "name": "FastAPI POST `submit_job` without auth dependency \u2014 aurabackend/counterfactual_service/main.py:196", "shortDescription": {"text": "FastAPI POST `submit_job` without auth dependency \u2014 aurabackend/counterfactual_service/main.py:196"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c34f0d6335122a3b", "name": "FastAPI POST `run_demo` without auth dependency \u2014 aurabackend/counterfactual_service/main.py:244", "shortDescription": {"text": "FastAPI POST `run_demo` without auth dependency \u2014 aurabackend/counterfactual_service/main.py:244"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7ecfaf9f4cc24f89", "name": "FastAPI POST `run_audit` without auth dependency \u2014 aurabackend/counterfactual_service/main.py:337", "shortDescription": {"text": "FastAPI POST `run_audit` without auth dependency \u2014 aurabackend/counterfactual_service/main.py:337"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e085b31e36ec25c4", "name": "FastAPI POST `financial_audit` without auth dependency \u2014 aurabackend/counterfactual_service/main.py:506", "shortDescription": {"text": "FastAPI POST `financial_audit` without auth dependency \u2014 aurabackend/counterfactual_service/main.py:506"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b1d198ffa24cfdd5", "name": "FastAPI POST `replay_bulk` without auth dependency \u2014 aurabackend/counterfactual_service/main.py:667", "shortDescription": {"text": "FastAPI POST `replay_bulk` without auth dependency \u2014 aurabackend/counterfactual_service/main.py:667"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-fd0dfb778a8713fa", "name": "FastAPI POST `trigger_cycle` without auth dependency \u2014 aurabackend/evolution/api.py:79", "shortDescription": {"text": "FastAPI POST `trigger_cycle` without auth dependency \u2014 aurabackend/evolution/api.py:79"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b4102845ac0d1411", "name": "FastAPI POST `submit_feedback` without auth dependency \u2014 aurabackend/evolution/api.py:87", "shortDescription": {"text": "FastAPI POST `submit_feedback` without auth dependency \u2014 aurabackend/evolution/api.py:87"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-40237d88bf8dece2", "name": "FastAPI POST `search_patterns` without auth dependency \u2014 aurabackend/evolution/api.py:105", "shortDescription": {"text": "FastAPI POST `search_patterns` without auth dependency \u2014 aurabackend/evolution/api.py:105"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2fb8892625c8825c", "name": "FastAPI PATCH `update_proposal` without auth dependency \u2014 aurabackend/evolution/api.py:183", "shortDescription": {"text": "FastAPI PATCH `update_proposal` without auth dependency \u2014 aurabackend/evolution/api.py:183"}, "fullDescription": {"text": "`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1a13b0c320a65b7c", "name": "Unused endpoint: POST /generate_code", "shortDescription": {"text": "Unused endpoint: POST /generate_code"}, "fullDescription": {"text": "`aurabackend/code_generation_service/main.py` declares `POST /generate_code` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5baa8971ebe192a1", "name": "Unused endpoint: GET /", "shortDescription": {"text": "Unused endpoint: GET /"}, "fullDescription": {"text": "`aurabackend/orchestration_service/main.py` declares `GET /` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-005a76d41f18e7f8", "name": "Unused endpoint: POST /v1/orchestrations/query", "shortDescription": {"text": "Unused endpoint: POST /v1/orchestrations/query"}, "fullDescription": {"text": "`aurabackend/orchestration_service/main.py` declares `POST /v1/orchestrations/query` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-731c57f59aaca553", "name": "Unused endpoint: POST /test", "shortDescription": {"text": "Unused endpoint: POST /test"}, "fullDescription": {"text": "`aurabackend/connectors/main.py` declares `POST /test` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5fbe9b1ac70f4e70", "name": "Unused endpoint: POST /tables", "shortDescription": {"text": "Unused endpoint: POST /tables"}, "fullDescription": {"text": "`aurabackend/connectors/main.py` declares `POST /tables` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e833b6bcbc6b3bf4", "name": "Unused endpoint: GET /connectors/available", "shortDescription": {"text": "Unused endpoint: GET /connectors/available"}, "fullDescription": {"text": "`aurabackend/connectors/main.py` declares `GET /connectors/available` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4043cd1821a3243f", "name": "Unused endpoint: GET /connectors/registry", "shortDescription": {"text": "Unused endpoint: GET /connectors/registry"}, "fullDescription": {"text": "`aurabackend/connectors/main.py` declares `GET /connectors/registry` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-65a667bcc38fb792", "name": "Unused endpoint: POST /ingest", "shortDescription": {"text": "Unused endpoint: POST /ingest"}, "fullDescription": {"text": "`aurabackend/connectors/main.py` declares `POST /ingest` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b81820162e032ee9", "name": "Unused endpoint: POST /introspect", "shortDescription": {"text": "Unused endpoint: POST /introspect"}, "fullDescription": {"text": "`aurabackend/connectors/main.py` declares `POST /introspect` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1ed72cf09be61fa7", "name": "Unused endpoint: POST /connections/{connection_id}/query", "shortDescription": {"text": "Unused endpoint: POST /connections/{connection_id}/query"}, "fullDescription": {"text": "`aurabackend/connectors/main.py` declares `POST /connections/{connection_id}/query` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-39a7767763398032", "name": "Unused endpoint: GET /vault/health", "shortDescription": {"text": "Unused endpoint: GET /vault/health"}, "fullDescription": {"text": "`aurabackend/connectors/main.py` declares `GET /vault/health` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-96bb3c8a872efbdf", "name": "Unused endpoint: GET /vault/tables", "shortDescription": {"text": "Unused endpoint: GET /vault/tables"}, "fullDescription": {"text": "`aurabackend/connectors/main.py` declares `GET /vault/tables` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6613b9a9788636e1", "name": "Unused endpoint: POST /vault/query", "shortDescription": {"text": "Unused endpoint: POST /vault/query"}, "fullDescription": {"text": "`aurabackend/connectors/main.py` declares `POST /vault/query` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-586a92cf0c3b4123", "name": "Unused endpoint: POST /vault/vector-search", "shortDescription": {"text": "Unused endpoint: POST /vault/vector-search"}, "fullDescription": {"text": "`aurabackend/connectors/main.py` declares `POST /vault/vector-search` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6a4805ea66f097c3", "name": "Unused endpoint: POST /vault/spatial-query", "shortDescription": {"text": "Unused endpoint: POST /vault/spatial-query"}, "fullDescription": {"text": "`aurabackend/connectors/main.py` declares `POST /vault/spatial-query` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-abde55559a448ed3", "name": "Unused endpoint: GET /vault/capabilities", "shortDescription": {"text": "Unused endpoint: GET /vault/capabilities"}, "fullDescription": {"text": "`aurabackend/connectors/main.py` declares `GET /vault/capabilities` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fca11d494725d7c3", "name": "Unused endpoint: POST /analyze", "shortDescription": {"text": "Unused endpoint: POST /analyze"}, "fullDescription": {"text": "`aurabackend/insights/main.py` declares `POST /analyze` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3e85717e1ed605bd", "name": "Unused endpoint: POST /chart-suggestions", "shortDescription": {"text": "Unused endpoint: POST /chart-suggestions"}, "fullDescription": {"text": "`aurabackend/insights/main.py` declares `POST /chart-suggestions` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-083c12d89c29d1b0", "name": "Unused endpoint: POST /recommend-indexes", "shortDescription": {"text": "Unused endpoint: POST /recommend-indexes"}, "fullDescription": {"text": "`aurabackend/insights/main.py` declares `POST /recommend-indexes` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-78d1adf6009598a8", "name": "Unused endpoint: POST /dar/research/run", "shortDescription": {"text": "Unused endpoint: POST /dar/research/run"}, "fullDescription": {"text": "`aurabackend/dar_service/main.py` declares `POST /dar/research/run` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8053bc7ec8f46411", "name": "Unused endpoint: GET /dar/insights", "shortDescription": {"text": "Unused endpoint: GET /dar/insights"}, "fullDescription": {"text": "`aurabackend/dar_service/main.py` declares `GET /dar/insights` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b01b18518ece9bd0", "name": "Unused endpoint: GET /dar/insights/{insight_id}", "shortDescription": {"text": "Unused endpoint: GET /dar/insights/{insight_id}"}, "fullDescription": {"text": "`aurabackend/dar_service/main.py` declares `GET /dar/insights/{insight_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b7709161a144b54c", "name": "Unused endpoint: GET /dar/daemon/status", "shortDescription": {"text": "Unused endpoint: GET /dar/daemon/status"}, "fullDescription": {"text": "`aurabackend/dar_service/main.py` declares `GET /dar/daemon/status` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9488a93a9da525e3", "name": "Unused endpoint: POST /dar/daemon/start", "shortDescription": {"text": "Unused endpoint: POST /dar/daemon/start"}, "fullDescription": {"text": "`aurabackend/dar_service/main.py` declares `POST /dar/daemon/start` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d228b30d0fd7610e", "name": "Unused endpoint: POST /dar/daemon/stop", "shortDescription": {"text": "Unused endpoint: POST /dar/daemon/stop"}, "fullDescription": {"text": "`aurabackend/dar_service/main.py` declares `POST /dar/daemon/stop` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2b73face5b06aa67", "name": "Unused endpoint: POST /jobs", "shortDescription": {"text": "Unused endpoint: POST /jobs"}, "fullDescription": {"text": "`aurabackend/scheduler_service/main.py` declares `POST /jobs` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1008c575819b3d37", "name": "Unused endpoint: GET /jobs", "shortDescription": {"text": "Unused endpoint: GET /jobs"}, "fullDescription": {"text": "`aurabackend/scheduler_service/main.py` declares `GET /jobs` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ee53a8b03729481e", "name": "Unused endpoint: GET /jobs/{job_id}", "shortDescription": {"text": "Unused endpoint: GET /jobs/{job_id}"}, "fullDescription": {"text": "`aurabackend/scheduler_service/main.py` declares `GET /jobs/{job_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-596c46554c26296f", "name": "Unused endpoint: PUT /jobs/{job_id}", "shortDescription": {"text": "Unused endpoint: PUT /jobs/{job_id}"}, "fullDescription": {"text": "`aurabackend/scheduler_service/main.py` declares `PUT /jobs/{job_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6d0b60cfd130dc4c", "name": "Unused endpoint: DELETE /jobs/{job_id}", "shortDescription": {"text": "Unused endpoint: DELETE /jobs/{job_id}"}, "fullDescription": {"text": "`aurabackend/scheduler_service/main.py` declares `DELETE /jobs/{job_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7052896437dc6f5c", "name": "Unused endpoint: POST /jobs/{job_id}/pause", "shortDescription": {"text": "Unused endpoint: POST /jobs/{job_id}/pause"}, "fullDescription": {"text": "`aurabackend/scheduler_service/main.py` declares `POST /jobs/{job_id}/pause` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-930b20a94531cc12", "name": "Unused endpoint: POST /jobs/{job_id}/resume", "shortDescription": {"text": "Unused endpoint: POST /jobs/{job_id}/resume"}, "fullDescription": {"text": "`aurabackend/scheduler_service/main.py` declares `POST /jobs/{job_id}/resume` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4b72c81da9cc7f8a", "name": "Unused endpoint: POST /jobs/{job_id}/execute", "shortDescription": {"text": "Unused endpoint: POST /jobs/{job_id}/execute"}, "fullDescription": {"text": "`aurabackend/scheduler_service/main.py` declares `POST /jobs/{job_id}/execute` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1ad84d8c38a4949d", "name": "Unused endpoint: GET /executions", "shortDescription": {"text": "Unused endpoint: GET /executions"}, "fullDescription": {"text": "`aurabackend/scheduler_service/main.py` declares `GET /executions` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-04668323ca83a301", "name": "Unused endpoint: GET /executions/{execution_id}", "shortDescription": {"text": "Unused endpoint: GET /executions/{execution_id}"}, "fullDescription": {"text": "`aurabackend/scheduler_service/main.py` declares `GET /executions/{execution_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c31afa4e80a2a3d2", "name": "Unused endpoint: GET /executions/{execution_id}/logs", "shortDescription": {"text": "Unused endpoint: GET /executions/{execution_id}/logs"}, "fullDescription": {"text": "`aurabackend/scheduler_service/main.py` declares `GET /executions/{execution_id}/logs` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c2fd1d56f1070274", "name": "Unused endpoint: POST /jobs/{job_id}/run", "shortDescription": {"text": "Unused endpoint: POST /jobs/{job_id}/run"}, "fullDescription": {"text": "`aurabackend/scheduler_service/main.py` declares `POST /jobs/{job_id}/run` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8754601194d5f53c", "name": "Unused endpoint: POST /admin/cleanup", "shortDescription": {"text": "Unused endpoint: POST /admin/cleanup"}, "fullDescription": {"text": "`aurabackend/scheduler_service/main.py` declares `POST /admin/cleanup` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-13d1450dde11acc1", "name": "Unused endpoint: POST /execute_sql", "shortDescription": {"text": "Unused endpoint: POST /execute_sql"}, "fullDescription": {"text": "`aurabackend/execution_sandbox/main.py` declares `POST /execute_sql` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2afae04aaf7e97bb", "name": "Unused endpoint: POST /api/v1/ingest/netsuite", "shortDescription": {"text": "Unused endpoint: POST /api/v1/ingest/netsuite"}, "fullDescription": {"text": "`aurabackend/ingestion_service/main.py` declares `POST /api/v1/ingest/netsuite` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-57cf174389cc22d2", "name": "Unused endpoint: POST /api/v1/ingest/workday", "shortDescription": {"text": "Unused endpoint: POST /api/v1/ingest/workday"}, "fullDescription": {"text": "`aurabackend/ingestion_service/main.py` declares `POST /api/v1/ingest/workday` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7401978ada41e5e8", "name": "Unused endpoint: GET /api/v1/ingest/erc-map/{erc}", "shortDescription": {"text": "Unused endpoint: GET /api/v1/ingest/erc-map/{erc}"}, "fullDescription": {"text": "`aurabackend/ingestion_service/main.py` declares `GET /api/v1/ingest/erc-map/{erc}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2364ec951b75f0ac", "name": "Unused endpoint: POST /uasr/ingest", "shortDescription": {"text": "Unused endpoint: POST /uasr/ingest"}, "fullDescription": {"text": "`aurabackend/uasr/service.py` declares `POST /uasr/ingest` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b2740acbde14d323", "name": "Unused endpoint: POST /uasr/baseline", "shortDescription": {"text": "Unused endpoint: POST /uasr/baseline"}, "fullDescription": {"text": "`aurabackend/uasr/service.py` declares `POST /uasr/baseline` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c065bcd37ba8bdbf", "name": "Unused endpoint: GET /uasr/drift/status", "shortDescription": {"text": "Unused endpoint: GET /uasr/drift/status"}, "fullDescription": {"text": "`aurabackend/uasr/service.py` declares `GET /uasr/drift/status` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dfe488db48de2787", "name": "Unused endpoint: GET /uasr/recovery/{recovery_id}", "shortDescription": {"text": "Unused endpoint: GET /uasr/recovery/{recovery_id}"}, "fullDescription": {"text": "`aurabackend/uasr/service.py` declares `GET /uasr/recovery/{recovery_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0f43e636bddd4bf1", "name": "Unused endpoint: GET /uasr/drift/{drift_event_id}/recovery", "shortDescription": {"text": "Unused endpoint: GET /uasr/drift/{drift_event_id}/recovery"}, "fullDescription": {"text": "`aurabackend/uasr/service.py` declares `GET /uasr/drift/{drift_event_id}/recovery` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d541521ae940fa39", "name": "Unused endpoint: GET /uasr/metrics", "shortDescription": {"text": "Unused endpoint: GET /uasr/metrics"}, "fullDescription": {"text": "`aurabackend/uasr/service.py` declares `GET /uasr/metrics` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2d3997f99a53dae9", "name": "Unused endpoint: GET /uasr/metrics/history", "shortDescription": {"text": "Unused endpoint: GET /uasr/metrics/history"}, "fullDescription": {"text": "`aurabackend/uasr/service.py` declares `GET /uasr/metrics/history` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-08380b0f5a2f7e05", "name": "Unused endpoint: GET /uasr/metrics/alerts", "shortDescription": {"text": "Unused endpoint: GET /uasr/metrics/alerts"}, "fullDescription": {"text": "`aurabackend/uasr/service.py` declares `GET /uasr/metrics/alerts` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/21209"}, "properties": {"repository": "THIRD-I-AI/AURA", "repoUrl": "https://github.com/THIRD-I-AI/AURA", "branch": "main"}, "results": [{"ruleId": "scanner-ad613114b3a04537", "level": "note", "message": {"text": "Possibly dead Python function: generate_query_v1_orchestrations_query"}, "properties": {"repobilityId": "0ab4b73893104f04", "scanner": "scanner-primary", "fingerprint": "ad613114b3a04537", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "sdk_clients/aura_orchestration_client/client.py:316"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-774ad5e3ce0a2ce1", "level": "note", "message": {"text": "Possibly dead Python function: root_"}, "properties": {"repobilityId": "8423d22e784582d6", "scanner": "scanner-primary", "fingerprint": "774ad5e3ce0a2ce1", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "sdk_clients/aura_orchestration_client/client.py:333"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8eb73a5158713ec3", "level": "note", "message": {"text": "Possibly dead Python function: generate_code_generate_code"}, "properties": {"repobilityId": "8eb2a53f0edba0e1", "scanner": "scanner-primary", "fingerprint": "8eb73a5158713ec3", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "sdk_clients/aura_code_generation_client/client.py:271"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c84241c237010f59", "level": "note", "message": {"text": "Possibly dead Python function: list_data_sources_data_sources"}, "properties": {"repobilityId": "b08903c9b8b8a60a", "scanner": "scanner-primary", "fingerprint": "c84241c237010f59", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "sdk_clients/aura_metadata_store_client/client.py:359"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0769e6a0f425d449", "level": "note", "message": {"text": "Possibly dead Python function: list_semantic_models_semantic_models"}, "properties": {"repobilityId": "e0f8a1d7c2e65d26", "scanner": "scanner-primary", "fingerprint": "0769e6a0f425d449", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "sdk_clients/aura_metadata_store_client/client.py:367"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fd4a2a59de374859", "level": "note", "message": {"text": "Possibly dead Python function: upsert_dataset_profile_dataset_profiles__file_id_"}, "properties": {"repobilityId": "6ddbb82a2ca2ed75", "scanner": "scanner-primary", "fingerprint": "fd4a2a59de374859", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "sdk_clients/aura_metadata_store_client/client.py:375"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-eb66116aa83511a8", "level": "note", "message": {"text": "Possibly dead Python function: upsert_semantic_model_semantic_models"}, "properties": {"repobilityId": "9551a6fe9f170b90", "scanner": "scanner-primary", "fingerprint": "eb66116aa83511a8", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "sdk_clients/aura_metadata_store_client/client.py:383"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f3967dbd435e79cd", "level": "note", "message": {"text": "Possibly dead Python function: upsert_user_users__user_id_"}, "properties": {"repobilityId": "0638b9fdb5682d36", "scanner": "scanner-primary", "fingerprint": "f3967dbd435e79cd", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "sdk_clients/aura_metadata_store_client/client.py:391"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2088bfd77ca222ba", "level": "note", "message": {"text": "Possibly dead Python function: execute_sql_execute_sql"}, "properties": {"repobilityId": "99e23c4ce5a1ceb8", "scanner": "scanner-primary", "fingerprint": "2088bfd77ca222ba", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "sdk_clients/aura_execution_sandbox_client/client.py:272"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6b0ea3d435dfcb4d", "level": "note", "message": {"text": "Possibly dead Python function: ingest_netsuite_batch"}, "properties": {"repobilityId": "bc14c9676e348fe8", "scanner": "scanner-primary", "fingerprint": "6b0ea3d435dfcb4d", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "sdk_clients/aura_ingestion_client/client.py:309"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-973db232973fabd9", "level": "note", "message": {"text": "Possibly dead Python function: ingest_workday_batch"}, "properties": {"repobilityId": "d6b204dcf324c314", "scanner": "scanner-primary", "fingerprint": "973db232973fabd9", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "sdk_clients/aura_ingestion_client/client.py:317"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-68f9e52352777020", "level": "note", "message": {"text": "Possibly dead Python function: causal_discover_causal_discover"}, "properties": {"repobilityId": "087dd38f46d83d7a", "scanner": "scanner-primary", "fingerprint": "68f9e52352777020", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "sdk_clients/aura_causal_client/client.py:280"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-62d9bb49c86bda14", "level": "note", "message": {"text": "Possibly dead Python function: causal_info_causal_info"}, "properties": {"repobilityId": "c80920be065116b8", "scanner": "scanner-primary", "fingerprint": "62d9bb49c86bda14", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "sdk_clients/aura_causal_client/client.py:289"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-52fed84c3610cf3a", "level": "note", "message": {"text": "Possibly dead Python function: cleanup_old_executions_admin_cleanup"}, "properties": {"repobilityId": "6b9afd6012a2dfdd", "scanner": "scanner-primary", "fingerprint": "52fed84c3610cf3a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "sdk_clients/aura_scheduler_client/client.py:396"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5d07bd1478e0e714", "level": "note", "message": {"text": "Possibly dead Python function: create_job_jobs"}, "properties": {"repobilityId": "7e2fc4ac34e6fb2b", "scanner": "scanner-primary", "fingerprint": "5d07bd1478e0e714", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "sdk_clients/aura_scheduler_client/client.py:407"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d2d12b46f63c9975", "level": "note", "message": {"text": "Possibly dead Python function: delete_job_jobs__job_id_"}, "properties": {"repobilityId": "8caccb0f4691638c", "scanner": "scanner-primary", "fingerprint": "d2d12b46f63c9975", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "sdk_clients/aura_scheduler_client/client.py:416"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4ddd16e242433506", "level": "note", "message": {"text": "Possibly dead Python function: execute_job_now_jobs__job_id__execute"}, "properties": {"repobilityId": "03d1891667aec67b", "scanner": "scanner-primary", "fingerprint": "4ddd16e242433506", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "sdk_clients/aura_scheduler_client/client.py:424"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-218ec110867dad6d", "level": "note", "message": {"text": "Possibly dead Python function: pause_job_jobs__job_id__pause"}, "properties": {"repobilityId": "538b09a631590850", "scanner": "scanner-primary", "fingerprint": "218ec110867dad6d", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "sdk_clients/aura_scheduler_client/client.py:494"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ad5af4d5485ef2bd", "level": "note", "message": {"text": "Possibly dead Python function: resume_job_jobs__job_id__resume"}, "properties": {"repobilityId": "fd9be338840d9e75", "scanner": "scanner-primary", "fingerprint": "ad5af4d5485ef2bd", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "sdk_clients/aura_scheduler_client/client.py:503"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c6b12d3f8b8e9ba8", "level": "note", "message": {"text": "Possibly dead Python function: root_"}, "properties": {"repobilityId": "8423d22e784582d6", "scanner": "scanner-primary", "fingerprint": "c6b12d3f8b8e9ba8", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "sdk_clients/aura_scheduler_client/client.py:512"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-06cb6c946b5faae6", "level": "note", "message": {"text": "Possibly dead Python function: trigger_job_execution_jobs__job_id__run"}, "properties": {"repobilityId": "637f282fc3ff1d8d", "scanner": "scanner-primary", "fingerprint": "06cb6c946b5faae6", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "sdk_clients/aura_scheduler_client/client.py:520"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6b35ef1c04ac9ff4", "level": "note", "message": {"text": "Possibly dead Python function: update_job_jobs__job_id_"}, "properties": {"repobilityId": "1032a031d8a4c420", "scanner": "scanner-primary", "fingerprint": "6b35ef1c04ac9ff4", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "sdk_clients/aura_scheduler_client/client.py:528"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0ef3b8cc9ff30f65", "level": "note", "message": {"text": "Possibly dead Python function: analyze_results_analyze"}, "properties": {"repobilityId": "b4a7442c6a79357d", "scanner": "scanner-primary", "fingerprint": "0ef3b8cc9ff30f65", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "sdk_clients/aura_insights_client/client.py:289"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-38010a2e62e04793", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 frontend/src/pages/PipelinesPanel.tsx:233"}, "properties": {"repobilityId": "a83c4cb25559a5d3", "scanner": "scanner-primary", "fingerprint": "38010a2e62e04793", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-8fefe8d857bf8f08", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 frontend/src/plugins/PluginSystem.ts:147"}, "properties": {"repobilityId": "7bfac522490781c6", "scanner": "scanner-primary", "fingerprint": "8fefe8d857bf8f08", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-60427b03771411b6", "level": "warning", "message": {"text": "Dockerfile runs as root: frontend/Dockerfile"}, "properties": {"repobilityId": "735c01d8531dfd2c", "scanner": "scanner-primary", "fingerprint": "60427b03771411b6", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-a7f39cdd5fa21931", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: node:22-alpine"}, "properties": {"repobilityId": "f91ae887b4edd4ec", "scanner": "scanner-primary", "fingerprint": "a7f39cdd5fa21931", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/Dockerfile"}, "region": {"startLine": 6}}}]}, {"ruleId": "scanner-e9c1e66a27308f49", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: nginx:1.27-alpine"}, "properties": {"repobilityId": "3718036cfc924eb1", "scanner": "scanner-primary", "fingerprint": "e9c1e66a27308f49", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/Dockerfile"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-803a06e0ebaf5785", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.13-slim"}, "properties": {"repobilityId": "5d62e0a3bf0bfba9", "scanner": "scanner-primary", "fingerprint": "803a06e0ebaf5785", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/Dockerfile"}, "region": {"startLine": 12}}}]}, {"ruleId": "scanner-803a06e0ebaf5785", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.13-slim"}, "properties": {"repobilityId": "89775cc899ff5851", "scanner": "scanner-primary", "fingerprint": "803a06e0ebaf5785", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/Dockerfile"}, "region": {"startLine": 31}}}]}, {"ruleId": "scanner-973912f2ca13d2f2", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in aurabackend/uasr/recovery_loop.py:361"}, "properties": {"repobilityId": "481fc644aabcc54d", "scanner": "scanner-primary", "fingerprint": "973912f2ca13d2f2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/uasr/recovery_loop.py"}, "region": {"startLine": 361}}}]}, {"ruleId": "scanner-a42cb176c23a7e9e", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in aurabackend/agents/dpc_verifier.py:193"}, "properties": {"repobilityId": "1f8bb1686319801c", "scanner": "scanner-primary", "fingerprint": "a42cb176c23a7e9e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/agents/dpc_verifier.py"}, "region": {"startLine": 193}}}]}, {"ruleId": "scanner-e3ef7d9b918deb28", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "f876b2fa83cf2914", "scanner": "scanner-primary", "fingerprint": "e3ef7d9b918deb28", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/nightly-e2e.yml"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-2a776c16dd0fe7d7", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "628fef943a25a16b", "scanner": "scanner-primary", "fingerprint": "2a776c16dd0fe7d7", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd.yml"}, "region": {"startLine": 40}}}]}, {"ruleId": "scanner-2a776c16dd0fe7d7", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "35177982ada423c4", "scanner": "scanner-primary", "fingerprint": "2a776c16dd0fe7d7", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd.yml"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-2a776c16dd0fe7d7", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "528d7e62df96b22d", "scanner": "scanner-primary", "fingerprint": "2a776c16dd0fe7d7", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd.yml"}, "region": {"startLine": 46}}}]}, {"ruleId": "scanner-2a776c16dd0fe7d7", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "89558eba7f7c8dcb", "scanner": "scanner-primary", "fingerprint": "2a776c16dd0fe7d7", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd.yml"}, "region": {"startLine": 54}}}]}, {"ruleId": "scanner-2a776c16dd0fe7d7", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "46d4789fdd55fab1", "scanner": "scanner-primary", "fingerprint": "2a776c16dd0fe7d7", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd.yml"}, "region": {"startLine": 66}}}]}, {"ruleId": "scanner-76b2ab6e6efb8a12", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "190f1b1d806af718", "scanner": "scanner-primary", "fingerprint": "76b2ab6e6efb8a12", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "1b0add4759a308ec", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 37}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "90dca2b9a9fbfb28", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 63}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "1b0add4759a308ec", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 80}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "1b0add4759a308ec", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 131}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "1b0add4759a308ec", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 167}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "1b0add4759a308ec", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 209}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "1b0add4759a308ec", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 259}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "1b0add4759a308ec", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 298}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "1b0add4759a308ec", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 381}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "4a63b1fd6887cae9", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 418}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "4a63b1fd6887cae9", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 443}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "4a63b1fd6887cae9", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 468}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "90dca2b9a9fbfb28", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 515}}}]}, {"ruleId": "scanner-0e758ec5ebe7f1a5", "level": "note", "message": {"text": "Very large file: sdk_clients/aura_gateway_client/client.py (1945 lines)"}, "properties": {"repobilityId": "160421f691a14bed", "scanner": "scanner-primary", "fingerprint": "0e758ec5ebe7f1a5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-1eab9329b039faa8", "level": "note", "message": {"text": "Very large file: frontend/src/types/api.generated.ts (5459 lines)"}, "properties": {"repobilityId": "b3502bfc263132d5", "scanner": "scanner-primary", "fingerprint": "1eab9329b039faa8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-74192768328ffecb", "level": "note", "message": {"text": "Very large file: frontend/src/pages/PipelinesPanel.tsx (1620 lines)"}, "properties": {"repobilityId": "604f2b83ec0e81e9", "scanner": "scanner-primary", "fingerprint": "74192768328ffecb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-97d792e16028fe9d", "level": "note", "message": {"text": "Very large file: aurabackend/counterfactual_service/engine.py (1836 lines)"}, "properties": {"repobilityId": "f215079001f89349", "scanner": "scanner-primary", "fingerprint": "97d792e16028fe9d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-141b30a41e03817b", "level": "note", "message": {"text": "No license file detected"}, "properties": {"repobilityId": "9edd6305508be6a0", "scanner": "scanner-primary", "fingerprint": "141b30a41e03817b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["license", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "096c93bec568b376", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "bb325b6e5a15db31", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "09ce88c393904e48", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-749d4bc1bd66df5f", "level": "warning", "message": {"text": "Agent instructions exist but release-hardening basics are missing"}, "properties": {"repobilityId": "5f74c1d8460bf5cb", "scanner": "scanner-primary", "fingerprint": "749d4bc1bd66df5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "5b83447dcc83fd40", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "06500bfa4d5fa497", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-0446c25aa6e2896c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/speckit-agent-context-update/SKILL.md"}, "properties": {"repobilityId": "a5d93608a9f849db", "scanner": "scanner-primary", "fingerprint": "0446c25aa6e2896c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/speckit-agent-context-update/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-78ac78bc4ff3cf46", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/speckit-taskstoissues/SKILL.md"}, "properties": {"repobilityId": "6d7a8ed1d27102fc", "scanner": "scanner-primary", "fingerprint": "78ac78bc4ff3cf46", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/speckit-taskstoissues/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a1b9c60b82b59e58", "level": "none", "message": {"text": "Commented-code block (5 lines) in frontend/src/auth/AuthContext.tsx:40"}, "properties": {"repobilityId": "122751e63e6109d4", "scanner": "scanner-primary", "fingerprint": "a1b9c60b82b59e58", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-071e730e2c96f136", "level": "none", "message": {"text": "Commented-code block (13 lines) in frontend/src/components/CounterfactualCard.tsx:48"}, "properties": {"repobilityId": "539b5a6f2ed25d34", "scanner": "scanner-primary", "fingerprint": "071e730e2c96f136", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c5dce9f5468dc554", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/src/components/LiveDashboard.tsx:94"}, "properties": {"repobilityId": "11509d89fc2b4b2a", "scanner": "scanner-primary", "fingerprint": "c5dce9f5468dc554", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-94fd9f952c64033e", "level": "none", "message": {"text": "Commented-code block (6 lines) in frontend/src/audit/mappingTypeGuard.ts:5"}, "properties": {"repobilityId": "64222d2b3e02d8c1", "scanner": "scanner-primary", "fingerprint": "94fd9f952c64033e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-91309fe923b34fdf", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/src/audit/auditApi.ts:7"}, "properties": {"repobilityId": "2b3a1a3ce63b57f9", "scanner": "scanner-primary", "fingerprint": "91309fe923b34fdf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-5c445f0a05df94e1", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/src/pages/Counterfactual.tsx:75"}, "properties": {"repobilityId": "91c310c582aed601", "scanner": "scanner-primary", "fingerprint": "5c445f0a05df94e1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-71390665071ad540", "level": "none", "message": {"text": "Commented-code block (5 lines) in frontend/src/services/api.ts:18"}, "properties": {"repobilityId": "17626220ab782fe7", "scanner": "scanner-primary", "fingerprint": "71390665071ad540", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3817782dbfb7680e", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/src/services/api.ts:277"}, "properties": {"repobilityId": "319e21d82e9cbd01", "scanner": "scanner-primary", "fingerprint": "3817782dbfb7680e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-2489ce1a62bc1853", "level": "none", "message": {"text": "Commented-code block (7 lines) in scripts/regen_all_sdks.py:54"}, "properties": {"repobilityId": "2a6679598a705174", "scanner": "scanner-primary", "fingerprint": "2489ce1a62bc1853", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-303fe7f640344bc8", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/regen_all_sdks.py:17"}, "properties": {"repobilityId": "6e9e656d2f43e2c3", "scanner": "scanner-primary", "fingerprint": "303fe7f640344bc8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-d26842dfa01671dc", "level": "none", "message": {"text": "Commented-code block (5 lines) in aurabackend/tests/_mock_llm.py:135"}, "properties": {"repobilityId": "09e79e203b67ab31", "scanner": "scanner-primary", "fingerprint": "d26842dfa01671dc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-30eb4597e844c3c0", "level": "none", "message": {"text": "Commented-code block (6 lines) in aurabackend/tests/test_e2e_eval_gate.py:164"}, "properties": {"repobilityId": "b22227e288a6b4c9", "scanner": "scanner-primary", "fingerprint": "30eb4597e844c3c0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5a152497f4020013", "level": "none", "message": {"text": "Commented-code block (5 lines) in aurabackend/tests/test_counterfactual_sensitivity.py:194"}, "properties": {"repobilityId": "5de7c59f2420658b", "scanner": "scanner-primary", "fingerprint": "5a152497f4020013", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7d73ffb014590eec", "level": "none", "message": {"text": "Commented-code block (5 lines) in aurabackend/tests/test_counterfactual_disagreement_challenge.py:230"}, "properties": {"repobilityId": "66cdcb34b1324df1", "scanner": "scanner-primary", "fingerprint": "7d73ffb014590eec", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d9bb54a8a47aa0f5", "level": "none", "message": {"text": "Commented-code block (7 lines) in aurabackend/tests/test_counterfactual_sprint15.py:121"}, "properties": {"repobilityId": "66b66848ed78bd20", "scanner": "scanner-primary", "fingerprint": "d9bb54a8a47aa0f5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-01e7f2f87400905f", "level": "none", "message": {"text": "Commented-code block (8 lines) in aurabackend/tests/test_counterfactual_engine.py:65"}, "properties": {"repobilityId": "58c7d837f95b81a3", "scanner": "scanner-primary", "fingerprint": "01e7f2f87400905f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4bec93335d506ce3", "level": "none", "message": {"text": "Commented-code block (5 lines) in aurabackend/tests/test_counterfactual_tmle.py:36"}, "properties": {"repobilityId": "d9ab657b3d859ebb", "scanner": "scanner-primary", "fingerprint": "4bec93335d506ce3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4414db0e281cc5d5", "level": "none", "message": {"text": "Commented-code block (5 lines) in aurabackend/tests/test_config.py:29"}, "properties": {"repobilityId": "85fb680379b05ddf", "scanner": "scanner-primary", "fingerprint": "4414db0e281cc5d5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-89e412846d528af3", "level": "none", "message": {"text": "Commented-code block (7 lines) in aurabackend/tests/test_counterfactual_sprint16.py:165"}, "properties": {"repobilityId": "795b3b1acdee65c1", "scanner": "scanner-primary", "fingerprint": "89e412846d528af3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4edf030a1c24ff2c", "level": "note", "message": {"text": "Legacy-named symbol `ctx_v1` in aurabackend/tests/test_api_gateway_persistence.py:544"}, "properties": {"repobilityId": "db370132d71a6cd3", "scanner": "scanner-primary", "fingerprint": "4edf030a1c24ff2c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-30f89f440b4bd7f1", "level": "none", "message": {"text": "Commented-code block (8 lines) in aurabackend/tests/test_audit_merkle.py:250"}, "properties": {"repobilityId": "c02239e6dbb6901a", "scanner": "scanner-primary", "fingerprint": "30f89f440b4bd7f1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d8ddc73b11b353cd", "level": "note", "message": {"text": "Legacy-named symbol `model_copy` in aurabackend/tests/test_counterfactual_canonical.py:129"}, "properties": {"repobilityId": "44f8bcd9b095a0b6", "scanner": "scanner-primary", "fingerprint": "d8ddc73b11b353cd", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-39a880af9b5a48af", "level": "none", "message": {"text": "Commented-code block (5 lines) in aurabackend/tests/test_service_factory.py:65"}, "properties": {"repobilityId": "f3be2e6b2702f060", "scanner": "scanner-primary", "fingerprint": "39a880af9b5a48af", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-04e8ecc689799f6d", "level": "none", "message": {"text": "Commented-code block (5 lines) in aurabackend/connectors/duckdb_connector.py:46"}, "properties": {"repobilityId": "c56b5836774e82a1", "scanner": "scanner-primary", "fingerprint": "04e8ecc689799f6d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2904b2c0e9f604c6", "level": "none", "message": {"text": "Commented-code block (5 lines) in aurabackend/connectors/base.py:21"}, "properties": {"repobilityId": "a43e71ad4f3a1c52", "scanner": "scanner-primary", "fingerprint": "2904b2c0e9f604c6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f9c96529f939c0bf", "level": "note", "message": {"text": "Legacy-named symbol `config_copy` in aurabackend/connectors/main.py:362"}, "properties": {"repobilityId": "3aefe9ff0cb47236", "scanner": "scanner-primary", "fingerprint": "f9c96529f939c0bf", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-93b720ef62206242", "level": "none", "message": {"text": "Commented-code block (6 lines) in aurabackend/shared/config.py:131"}, "properties": {"repobilityId": "4a596e9a57234205", "scanner": "scanner-primary", "fingerprint": "93b720ef62206242", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-425753e86a446f9b", "level": "none", "message": {"text": "Commented-code block (5 lines) in aurabackend/shared/db_migrations.py:24"}, "properties": {"repobilityId": "b0132ce57a8c148c", "scanner": "scanner-primary", "fingerprint": "425753e86a446f9b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d3270d10f2ca759c", "level": "none", "message": {"text": "Commented-code block (5 lines) in aurabackend/shared/safe_paths.py:60"}, "properties": {"repobilityId": "2de7de4a0255b1f5", "scanner": "scanner-primary", "fingerprint": "d3270d10f2ca759c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b97b488241a6d64b", "level": "none", "message": {"text": "Commented-code block (5 lines) in aurabackend/shared/cache.py:91"}, "properties": {"repobilityId": "9f68fb66167423ef", "scanner": "scanner-primary", "fingerprint": "b97b488241a6d64b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2452a6de05349721", "level": "none", "message": {"text": "Commented-code block (7 lines) in aurabackend/shared/data_utils.py:26"}, "properties": {"repobilityId": "5da89cdadcaa83a0", "scanner": "scanner-primary", "fingerprint": "2452a6de05349721", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e4a2890117f9eb47", "level": "none", "message": {"text": "Commented-code block (11 lines) in aurabackend/shared/middleware.py:242"}, "properties": {"repobilityId": "84ac1f9377fecdbb", "scanner": "scanner-primary", "fingerprint": "e4a2890117f9eb47", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e8108899b2d812b0", "level": "none", "message": {"text": "Commented-code block (10 lines) in aurabackend/shared/audit_log.py:238"}, "properties": {"repobilityId": "95359836e5b30139", "scanner": "scanner-primary", "fingerprint": "e8108899b2d812b0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e43e7c1c212941f9", "level": "none", "message": {"text": "Commented-code block (5 lines) in aurabackend/shared/llm_provider.py:578"}, "properties": {"repobilityId": "f7bcf8022c6887fa", "scanner": "scanner-primary", "fingerprint": "e43e7c1c212941f9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6171acfebacdcb24", "level": "note", "message": {"text": "Stub function `inc` (body is just `pass`/`return`) \u2014 aurabackend/shared/observability.py:129"}, "properties": {"repobilityId": "7c56d32ac530766a", "scanner": "scanner-primary", "fingerprint": "6171acfebacdcb24", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "empty-handler", "dead-code"]}}, {"ruleId": "scanner-8d6e24423c96eea7", "level": "none", "message": {"text": "Commented-code block (5 lines) in aurabackend/shared/service_factory.py:119"}, "properties": {"repobilityId": "8573fb4e19167348", "scanner": "scanner-primary", "fingerprint": "8d6e24423c96eea7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9a15f1f492d57d23", "level": "note", "message": {"text": "Legacy-named symbol `model_copy` in aurabackend/dar_service/graph.py:139"}, "properties": {"repobilityId": "729f6e6233ebcfee", "scanner": "scanner-primary", "fingerprint": "9a15f1f492d57d23", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-bce48d2452008f28", "level": "none", "message": {"text": "Commented-code block (5 lines) in aurabackend/scheduler_service/worker.py:57"}, "properties": {"repobilityId": "b4bde4b67bc9a3a5", "scanner": "scanner-primary", "fingerprint": "bce48d2452008f28", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-73534bc26ae23af2", "level": "none", "message": {"text": "Commented-code block (8 lines) in aurabackend/scheduler_service/distributed_queue.py:96"}, "properties": {"repobilityId": "9e0475459ef1c0d6", "scanner": "scanner-primary", "fingerprint": "73534bc26ae23af2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b29b79d92a3958f3", "level": "none", "message": {"text": "Commented-code block (5 lines) in aurabackend/uasr/causal_rl_evaluator.py:80"}, "properties": {"repobilityId": "5c050d699055f9a0", "scanner": "scanner-primary", "fingerprint": "b29b79d92a3958f3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c5f0d07476ea7e4d", "level": "none", "message": {"text": "Commented-code block (5 lines) in aurabackend/uasr/mapek_worker.py:97"}, "properties": {"repobilityId": "0699490d95486a71", "scanner": "scanner-primary", "fingerprint": "c5f0d07476ea7e4d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-acb9edc1beb308bd", "level": "note", "message": {"text": "Legacy-named symbol `V_old` in aurabackend/uasr/shim_router.py:10"}, "properties": {"repobilityId": "61eba393a8d79de0", "scanner": "scanner-primary", "fingerprint": "acb9edc1beb308bd", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-3b704c8a8e39c3db", "level": "none", "message": {"text": "Commented-code block (5 lines) in aurabackend/agents/dpc_verifier.py:188"}, "properties": {"repobilityId": "7a2a6d4cf8377cb8", "scanner": "scanner-primary", "fingerprint": "3b704c8a8e39c3db", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9a5707d0b97537b4", "level": "none", "message": {"text": "Commented-code block (6 lines) in aurabackend/agents/specialists/sql_generator_agent.py:72"}, "properties": {"repobilityId": "3408dfe1f4b34f20", "scanner": "scanner-primary", "fingerprint": "9a5707d0b97537b4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4e08379a6fdb65d2", "level": "none", "message": {"text": "Commented-code block (6 lines) in aurabackend/agents/specialists/financial_auditor.py:16"}, "properties": {"repobilityId": "cdd81b4ebe857a84", "scanner": "scanner-primary", "fingerprint": "4e08379a6fdb65d2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-cb6a3966c2bd55db", "level": "none", "message": {"text": "Commented-code block (5 lines) in aurabackend/pipeline/streaming/watermark_tracker.py:60"}, "properties": {"repobilityId": "4211ad36ac323478", "scanner": "scanner-primary", "fingerprint": "cb6a3966c2bd55db", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-93e3a3b5fd49e2d8", "level": "none", "message": {"text": "Commented-code block (5 lines) in aurabackend/pipeline/streaming/streaming_engine.py:471"}, "properties": {"repobilityId": "af4e3af1a9a50708", "scanner": "scanner-primary", "fingerprint": "93e3a3b5fd49e2d8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-377bc9f11be761f0", "level": "none", "message": {"text": "Commented-code block (6 lines) in aurabackend/pipeline/streaming/models.py:128"}, "properties": {"repobilityId": "20073c29685acda4", "scanner": "scanner-primary", "fingerprint": "377bc9f11be761f0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0bcd9f3120bef7e3", "level": "none", "message": {"text": "Commented-code block (6 lines) in aurabackend/pipeline/streaming/window_processor.py:102"}, "properties": {"repobilityId": "71a3dc90af1fcb59", "scanner": "scanner-primary", "fingerprint": "0bcd9f3120bef7e3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b3186712a5910a7b", "level": "none", "message": {"text": "Commented-code block (6 lines) in aurabackend/api_gateway/main.py:164"}, "properties": {"repobilityId": "c9ad46d8838361db", "scanner": "scanner-primary", "fingerprint": "b3186712a5910a7b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0b337f4dd0e4cc4f", "level": "none", "message": {"text": "Commented-code block (5 lines) in aurabackend/api_gateway/routers/etl.py:407"}, "properties": {"repobilityId": "c82eeea90f5f511a", "scanner": "scanner-primary", "fingerprint": "0b337f4dd0e4cc4f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c9484c816922b26a", "level": "none", "message": {"text": "Commented-code block (6 lines) in aurabackend/api_gateway/routers/queries.py:51"}, "properties": {"repobilityId": "7478a63632900bd0", "scanner": "scanner-primary", "fingerprint": "c9484c816922b26a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8171fb83b75577dd", "level": "none", "message": {"text": "Commented-code block (6 lines) in aurabackend/api_gateway/routers/chat.py:170"}, "properties": {"repobilityId": "3d225bab7801a71d", "scanner": "scanner-primary", "fingerprint": "8171fb83b75577dd", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7e694e7d60e61490", "level": "none", "message": {"text": "Commented-code block (5 lines) in aurabackend/api_gateway/routers/files.py:76"}, "properties": {"repobilityId": "5051f8d2be0f6750", "scanner": "scanner-primary", "fingerprint": "7e694e7d60e61490", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d8854bebb7fa9c11", "level": "none", "message": {"text": "Commented-code block (5 lines) in aurabackend/causal_service/discovery.py:109"}, "properties": {"repobilityId": "41ffd734b077ae71", "scanner": "scanner-primary", "fingerprint": "d8854bebb7fa9c11", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-19f32ff1724b3633", "level": "none", "message": {"text": "Commented-code block (5 lines) in aurabackend/counterfactual_service/schemas.py:133"}, "properties": {"repobilityId": "ac1630c1f75511d7", "scanner": "scanner-primary", "fingerprint": "19f32ff1724b3633", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-806c801d8d0183ea", "level": "none", "message": {"text": "Commented-code block (5 lines) in aurabackend/counterfactual_service/tmle.py:193"}, "properties": {"repobilityId": "205fb86dceed2407", "scanner": "scanner-primary", "fingerprint": "806c801d8d0183ea", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-810ab19dd65a1fe5", "level": "none", "message": {"text": "Commented-code block (5 lines) in aurabackend/counterfactual_service/sensitivity.py:40"}, "properties": {"repobilityId": "101277ffa52a213e", "scanner": "scanner-primary", "fingerprint": "810ab19dd65a1fe5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b2a3c3823566ccc8", "level": "none", "message": {"text": "Commented-code block (6 lines) in aurabackend/counterfactual_service/engine.py:62"}, "properties": {"repobilityId": "d167837afbba2c3b", "scanner": "scanner-primary", "fingerprint": "b2a3c3823566ccc8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d848ffc91dd983c5", "level": "none", "message": {"text": "Commented-code block (5 lines) in aurabackend/counterfactual_service/main.py:55"}, "properties": {"repobilityId": "fe726dea7d769bbc", "scanner": "scanner-primary", "fingerprint": "d848ffc91dd983c5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-008760e6f125196b", "level": "none", "message": {"text": "Commented-code block (9 lines) in aurabackend/counterfactual_service/conformal.py:104"}, "properties": {"repobilityId": "127bb3767749b67b", "scanner": "scanner-primary", "fingerprint": "008760e6f125196b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c80803c901559d32", "level": "none", "message": {"text": "Commented-code block (5 lines) in aurabackend/metadata_store/repository.py:79"}, "properties": {"repobilityId": "bd202d1e7918d71a", "scanner": "scanner-primary", "fingerprint": "c80803c901559d32", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-48e64f0dea2b08cd", "level": "none", "message": {"text": "Commented-code block (5 lines) in sdk/src/aura_counterfactual/client.py:356"}, "properties": {"repobilityId": "98a81584b972fb32", "scanner": "scanner-primary", "fingerprint": "48e64f0dea2b08cd", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b532129177ebf6a8", "level": "none", "message": {"text": "Commented-code block (7 lines) in sdk/src/aura_counterfactual/models.py:101"}, "properties": {"repobilityId": "b58aae2feb017991", "scanner": "scanner-primary", "fingerprint": "b532129177ebf6a8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-379a33678ae64747", "level": "note", "message": {"text": "77 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "fea0d246d8ef11b9", "scanner": "scanner-primary", "fingerprint": "379a33678ae64747", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "b2444948bde59b5c", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-b873925e6bfa53e8", "level": "note", "message": {"text": "Near-duplicate function bodies in 22 places"}, "properties": {"repobilityId": "b69bbfb476694145", "scanner": "scanner-primary", "fingerprint": "b873925e6bfa53e8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-33a6b62e30ce7ab4", "level": "note", "message": {"text": "Near-duplicate function bodies in 6 places"}, "properties": {"repobilityId": "766a3ba0d5ba59e3", "scanner": "scanner-primary", "fingerprint": "33a6b62e30ce7ab4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "e07af00b80e10145", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "95b2601cce88f074", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "ccfe8adb5bfe8009", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "a49ca2783dc14286", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "08c477288c4e85df", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "ce14ee81c9cef0ec", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "c06676ffc75794bd", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "cf8544d17916adf7", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "f6a1551442fbd483", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "3c4f1dcd0d7f47e8", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "0d55e00b620510ed", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "7bf7a293fcb12cba", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "1008acc64d1b2378", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "cd4830a54dad1a5c", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "77487be77509e126", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "26916b90dc4336b8", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "f2eb204573b52d23", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-419ae85c49dd4f77", "level": "warning", "message": {"text": "Frontend route `/audit/:jobId` has no Link/navigate to it \u2014 frontend/src/audit/__tests__/AuditProgress.test.tsx"}, "properties": {"repobilityId": "fbb637ff819a7af7", "scanner": "scanner-primary", "fingerprint": "419ae85c49dd4f77", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-0830da2effccf555", "level": "warning", "message": {"text": "Frontend route `/certificate/:hash` has no Link/navigate to it \u2014 frontend/src/AppRoutes.tsx"}, "properties": {"repobilityId": "c0cf31798a915d9b", "scanner": "scanner-primary", "fingerprint": "0830da2effccf555", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-e708f1ee5c10ca9d", "level": "warning", "message": {"text": "Frontend route `/verify/:hash` has no Link/navigate to it \u2014 frontend/src/audit/__tests__/VerifyPage.test.tsx"}, "properties": {"repobilityId": "3fa14c95e4bb242a", "scanner": "scanner-primary", "fingerprint": "e708f1ee5c10ca9d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-84954f12cdafdedc", "level": "warning", "message": {"text": "Frontend route `/app/*` has no Link/navigate to it \u2014 frontend/src/AppRoutes.tsx"}, "properties": {"repobilityId": "0fb8c8c4b8cff5d2", "scanner": "scanner-primary", "fingerprint": "84954f12cdafdedc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-028167737bc9c3d9", "level": "error", "message": {"text": "FastAPI POST `generate_query` without auth dependency \u2014 aurabackend/orchestration_service/main.py:73"}, "properties": {"repobilityId": "dbd34291c402cfeb", "scanner": "scanner-primary", "fingerprint": "028167737bc9c3d9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/orchestration_service/main.py"}, "region": {"startLine": 73}}}]}, {"ruleId": "scanner-b115ff9ab8af3796", "level": "error", "message": {"text": "FastAPI POST `test_connector` without auth dependency \u2014 aurabackend/connectors/main.py:86"}, "properties": {"repobilityId": "f10a31a67dc92dd3", "scanner": "scanner-primary", "fingerprint": "b115ff9ab8af3796", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/connectors/main.py"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-a685a06a80726a01", "level": "error", "message": {"text": "FastAPI POST `list_tables` without auth dependency \u2014 aurabackend/connectors/main.py:126"}, "properties": {"repobilityId": "4829086199b06982", "scanner": "scanner-primary", "fingerprint": "a685a06a80726a01", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/connectors/main.py"}, "region": {"startLine": 126}}}]}, {"ruleId": "scanner-095a2d396915bcfd", "level": "error", "message": {"text": "FastAPI POST `ingest_file` without auth dependency \u2014 aurabackend/connectors/main.py:193"}, "properties": {"repobilityId": "0bafb0588b9cd394", "scanner": "scanner-primary", "fingerprint": "095a2d396915bcfd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/connectors/main.py"}, "region": {"startLine": 193}}}]}, {"ruleId": "scanner-57743f3c2cca6872", "level": "error", "message": {"text": "FastAPI POST `introspect_database` without auth dependency \u2014 aurabackend/connectors/main.py:253"}, "properties": {"repobilityId": "33b72c4e16b04a3e", "scanner": "scanner-primary", "fingerprint": "57743f3c2cca6872", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/connectors/main.py"}, "region": {"startLine": 253}}}]}, {"ruleId": "scanner-233076e10f654e8e", "level": "error", "message": {"text": "FastAPI POST `execute_query` without auth dependency \u2014 aurabackend/connectors/main.py:327"}, "properties": {"repobilityId": "cf09ae7c6d4c506e", "scanner": "scanner-primary", "fingerprint": "233076e10f654e8e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/connectors/main.py"}, "region": {"startLine": 327}}}]}, {"ruleId": "scanner-154dbfafdaecd39b", "level": "error", "message": {"text": "FastAPI POST `vault_query` without auth dependency \u2014 aurabackend/connectors/main.py:440"}, "properties": {"repobilityId": "96a5788de3bb9c2a", "scanner": "scanner-primary", "fingerprint": "154dbfafdaecd39b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/connectors/main.py"}, "region": {"startLine": 440}}}]}, {"ruleId": "scanner-e27a9dd67d6e4c45", "level": "error", "message": {"text": "FastAPI POST `vault_vector_search` without auth dependency \u2014 aurabackend/connectors/main.py:467"}, "properties": {"repobilityId": "e483bf2872880924", "scanner": "scanner-primary", "fingerprint": "e27a9dd67d6e4c45", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/connectors/main.py"}, "region": {"startLine": 467}}}]}, {"ruleId": "scanner-cdd0d5126190d408", "level": "error", "message": {"text": "FastAPI POST `vault_spatial_query` without auth dependency \u2014 aurabackend/connectors/main.py:494"}, "properties": {"repobilityId": "18f7ce78c0b23540", "scanner": "scanner-primary", "fingerprint": "cdd0d5126190d408", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/connectors/main.py"}, "region": {"startLine": 494}}}]}, {"ruleId": "scanner-f9d73cc3a97dfba9", "level": "error", "message": {"text": "FastAPI POST `analyze_results` without auth dependency \u2014 aurabackend/insights/main.py:75"}, "properties": {"repobilityId": "a901ce36dc0d2326", "scanner": "scanner-primary", "fingerprint": "f9d73cc3a97dfba9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/insights/main.py"}, "region": {"startLine": 75}}}]}, {"ruleId": "scanner-ff8cf26840bf97fc", "level": "error", "message": {"text": "FastAPI POST `suggest_charts` without auth dependency \u2014 aurabackend/insights/main.py:110"}, "properties": {"repobilityId": "965aab6fd96930c5", "scanner": "scanner-primary", "fingerprint": "ff8cf26840bf97fc", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/insights/main.py"}, "region": {"startLine": 110}}}]}, {"ruleId": "scanner-3f06ea8a912083d9", "level": "error", "message": {"text": "FastAPI POST `recommend_indexes` without auth dependency \u2014 aurabackend/insights/main.py:140"}, "properties": {"repobilityId": "1b4f9ea4dcae29a0", "scanner": "scanner-primary", "fingerprint": "3f06ea8a912083d9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/insights/main.py"}, "region": {"startLine": 140}}}]}, {"ruleId": "scanner-f28f94d53564c205", "level": "error", "message": {"text": "FastAPI POST `trigger_research_run` without auth dependency \u2014 aurabackend/dar_service/main.py:125"}, "properties": {"repobilityId": "f369c51e5e24ef24", "scanner": "scanner-primary", "fingerprint": "f28f94d53564c205", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/dar_service/main.py"}, "region": {"startLine": 125}}}]}, {"ruleId": "scanner-bbfbd947202c4cf9", "level": "error", "message": {"text": "FastAPI POST `daemon_start` without auth dependency \u2014 aurabackend/dar_service/main.py:185"}, "properties": {"repobilityId": "39d2514b11c6ea41", "scanner": "scanner-primary", "fingerprint": "bbfbd947202c4cf9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/dar_service/main.py"}, "region": {"startLine": 185}}}]}, {"ruleId": "scanner-06df6930107a7ba9", "level": "error", "message": {"text": "FastAPI POST `daemon_stop` without auth dependency \u2014 aurabackend/dar_service/main.py:194"}, "properties": {"repobilityId": "3feb7357a1989e8c", "scanner": "scanner-primary", "fingerprint": "06df6930107a7ba9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/dar_service/main.py"}, "region": {"startLine": 194}}}]}, {"ruleId": "scanner-666e10cb8fb1f310", "level": "error", "message": {"text": "FastAPI POST `ingest_batch` without auth dependency \u2014 aurabackend/uasr/service.py:206"}, "properties": {"repobilityId": "f4dd8655123d0e2a", "scanner": "scanner-primary", "fingerprint": "666e10cb8fb1f310", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/uasr/service.py"}, "region": {"startLine": 206}}}]}, {"ruleId": "scanner-1017bfaa6b99bf06", "level": "error", "message": {"text": "FastAPI POST `gate_check` without auth dependency \u2014 aurabackend/uasr/service.py:424"}, "properties": {"repobilityId": "dd21b0587bdae046", "scanner": "scanner-primary", "fingerprint": "1017bfaa6b99bf06", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/uasr/service.py"}, "region": {"startLine": 424}}}]}, {"ruleId": "scanner-82be6e28aa25ea26", "level": "error", "message": {"text": "FastAPI POST `rollback_shim` without auth dependency \u2014 aurabackend/uasr/service.py:437"}, "properties": {"repobilityId": "4b60e704e9f6eca4", "scanner": "scanner-primary", "fingerprint": "82be6e28aa25ea26", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/uasr/service.py"}, "region": {"startLine": 437}}}]}, {"ruleId": "scanner-7515698e0a1c84ab", "level": "error", "message": {"text": "FastAPI POST `mapek_resume` without auth dependency \u2014 aurabackend/uasr/service.py:537"}, "properties": {"repobilityId": "b9b9b39bba6a333f", "scanner": "scanner-primary", "fingerprint": "7515698e0a1c84ab", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/uasr/service.py"}, "region": {"startLine": 537}}}]}, {"ruleId": "scanner-c827afd83a89edb2", "level": "error", "message": {"text": "FastAPI POST `create_plan` without auth dependency \u2014 aurabackend/agents/api.py:90"}, "properties": {"repobilityId": "f42a19437f28b36f", "scanner": "scanner-primary", "fingerprint": "c827afd83a89edb2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/agents/api.py"}, "region": {"startLine": 90}}}]}, {"ruleId": "scanner-e7cdd876fcfb2013", "level": "error", "message": {"text": "FastAPI POST `execute_prompt` without auth dependency \u2014 aurabackend/agents/api.py:115"}, "properties": {"repobilityId": "51798a7a72364f3c", "scanner": "scanner-primary", "fingerprint": "e7cdd876fcfb2013", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/agents/api.py"}, "region": {"startLine": 115}}}]}, {"ruleId": "scanner-9da908e5e7dda213", "level": "error", "message": {"text": "FastAPI POST `execute_prompt_stream` without auth dependency \u2014 aurabackend/agents/api.py:154"}, "properties": {"repobilityId": "a2a2b0792fd46cc6", "scanner": "scanner-primary", "fingerprint": "9da908e5e7dda213", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/agents/api.py"}, "region": {"startLine": 154}}}]}, {"ruleId": "scanner-7409c3e67a734585", "level": "error", "message": {"text": "FastAPI POST `execute_prompt_async` without auth dependency \u2014 aurabackend/agents/api.py:214"}, "properties": {"repobilityId": "9bbbd043d0a9025c", "scanner": "scanner-primary", "fingerprint": "7409c3e67a734585", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/agents/api.py"}, "region": {"startLine": 214}}}]}, {"ruleId": "scanner-84a47bb9a6100150", "level": "error", "message": {"text": "FastAPI POST `create_pipeline` without auth dependency \u2014 aurabackend/pipeline/streaming/streaming_api.py:108"}, "properties": {"repobilityId": "d7398786a64746ce", "scanner": "scanner-primary", "fingerprint": "84a47bb9a6100150", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/pipeline/streaming/streaming_api.py"}, "region": {"startLine": 108}}}]}, {"ruleId": "scanner-7413f9badb32b300", "level": "error", "message": {"text": "FastAPI PUT `update_pipeline` without auth dependency \u2014 aurabackend/pipeline/streaming/streaming_api.py:133"}, "properties": {"repobilityId": "93273116eb2db53e", "scanner": "scanner-primary", "fingerprint": "7413f9badb32b300", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/pipeline/streaming/streaming_api.py"}, "region": {"startLine": 133}}}]}, {"ruleId": "scanner-a72c09178d9d00c4", "level": "error", "message": {"text": "FastAPI DELETE `delete_pipeline` without auth dependency \u2014 aurabackend/pipeline/streaming/streaming_api.py:147"}, "properties": {"repobilityId": "0139cab15c837625", "scanner": "scanner-primary", "fingerprint": "a72c09178d9d00c4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/pipeline/streaming/streaming_api.py"}, "region": {"startLine": 147}}}]}, {"ruleId": "scanner-c2becac38f695b9e", "level": "error", "message": {"text": "FastAPI POST `start_pipeline` without auth dependency \u2014 aurabackend/pipeline/streaming/streaming_api.py:163"}, "properties": {"repobilityId": "1194c10223e374c7", "scanner": "scanner-primary", "fingerprint": "c2becac38f695b9e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/pipeline/streaming/streaming_api.py"}, "region": {"startLine": 163}}}]}, {"ruleId": "scanner-6a330c3f33fe9461", "level": "error", "message": {"text": "FastAPI POST `stop_pipeline` without auth dependency \u2014 aurabackend/pipeline/streaming/streaming_api.py:177"}, "properties": {"repobilityId": "7b44c024bea1f0d7", "scanner": "scanner-primary", "fingerprint": "6a330c3f33fe9461", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/pipeline/streaming/streaming_api.py"}, "region": {"startLine": 177}}}]}, {"ruleId": "scanner-5299df81e66447c2", "level": "error", "message": {"text": "FastAPI POST `pause_pipeline` without auth dependency \u2014 aurabackend/pipeline/streaming/streaming_api.py:186"}, "properties": {"repobilityId": "864ce3b417336fd2", "scanner": "scanner-primary", "fingerprint": "5299df81e66447c2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/pipeline/streaming/streaming_api.py"}, "region": {"startLine": 186}}}]}, {"ruleId": "scanner-fbde21e20fcff912", "level": "error", "message": {"text": "FastAPI POST `resume_pipeline` without auth dependency \u2014 aurabackend/pipeline/streaming/streaming_api.py:195"}, "properties": {"repobilityId": "838e8d3ea5266830", "scanner": "scanner-primary", "fingerprint": "fbde21e20fcff912", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/pipeline/streaming/streaming_api.py"}, "region": {"startLine": 195}}}]}, {"ruleId": "scanner-3b2229079c11dc29", "level": "error", "message": {"text": "FastAPI POST `pipeline_generate` without auth dependency \u2014 aurabackend/api_gateway/routers/pipelines.py:95"}, "properties": {"repobilityId": "b30a07fb24dcf1b3", "scanner": "scanner-primary", "fingerprint": "3b2229079c11dc29", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/pipelines.py"}, "region": {"startLine": 95}}}]}, {"ruleId": "scanner-621485825efb7e7f", "level": "error", "message": {"text": "FastAPI POST `pipeline_execute` without auth dependency \u2014 aurabackend/api_gateway/routers/pipelines.py:129"}, "properties": {"repobilityId": "523756f90cf1a111", "scanner": "scanner-primary", "fingerprint": "621485825efb7e7f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/pipelines.py"}, "region": {"startLine": 129}}}]}, {"ruleId": "scanner-8ede96eb2cc633fe", "level": "error", "message": {"text": "FastAPI POST `pipeline_execute_async` without auth dependency \u2014 aurabackend/api_gateway/routers/pipelines.py:147"}, "properties": {"repobilityId": "1a20f9dbc16c403b", "scanner": "scanner-primary", "fingerprint": "8ede96eb2cc633fe", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/pipelines.py"}, "region": {"startLine": 147}}}]}, {"ruleId": "scanner-50417d596bf6945b", "level": "error", "message": {"text": "FastAPI POST `pipeline_save` without auth dependency \u2014 aurabackend/api_gateway/routers/pipelines.py:252"}, "properties": {"repobilityId": "ef9fdafee92efa5f", "scanner": "scanner-primary", "fingerprint": "50417d596bf6945b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/pipelines.py"}, "region": {"startLine": 252}}}]}, {"ruleId": "scanner-8deb69def2d3b56e", "level": "error", "message": {"text": "FastAPI DELETE `pipeline_delete` without auth dependency \u2014 aurabackend/api_gateway/routers/pipelines.py:286"}, "properties": {"repobilityId": "6faed51d9da61db0", "scanner": "scanner-primary", "fingerprint": "8deb69def2d3b56e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/pipelines.py"}, "region": {"startLine": 286}}}]}, {"ruleId": "scanner-0ae8b69285ad1605", "level": "error", "message": {"text": "FastAPI POST `auto_generate_model_from_file` without auth dependency \u2014 aurabackend/api_gateway/routers/pipelines.py:340"}, "properties": {"repobilityId": "2250104d92d6b0b5", "scanner": "scanner-primary", "fingerprint": "0ae8b69285ad1605", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/pipelines.py"}, "region": {"startLine": 340}}}]}, {"ruleId": "scanner-e3e0178b7ee8f961", "level": "error", "message": {"text": "FastAPI POST `upsert_semantic_model` without auth dependency \u2014 aurabackend/api_gateway/routers/pipelines.py:360"}, "properties": {"repobilityId": "579be9a162eca18d", "scanner": "scanner-primary", "fingerprint": "e3e0178b7ee8f961", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/pipelines.py"}, "region": {"startLine": 360}}}]}, {"ruleId": "scanner-657a2d907ef2b6fa", "level": "error", "message": {"text": "FastAPI POST `uasr_ingest` without auth dependency \u2014 aurabackend/api_gateway/routers/pipelines.py:408"}, "properties": {"repobilityId": "974f6804f4056c16", "scanner": "scanner-primary", "fingerprint": "657a2d907ef2b6fa", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/pipelines.py"}, "region": {"startLine": 408}}}]}, {"ruleId": "scanner-56af52453b9e2820", "level": "error", "message": {"text": "FastAPI POST `uasr_baseline` without auth dependency \u2014 aurabackend/api_gateway/routers/pipelines.py:415"}, "properties": {"repobilityId": "c4e366d4fe2dadff", "scanner": "scanner-primary", "fingerprint": "56af52453b9e2820", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/pipelines.py"}, "region": {"startLine": 415}}}]}, {"ruleId": "scanner-7257d7acbb6cf1cd", "level": "error", "message": {"text": "FastAPI POST `test_connector` without auth dependency \u2014 aurabackend/api_gateway/routers/connections.py:99"}, "properties": {"repobilityId": "79e6231f245b192d", "scanner": "scanner-primary", "fingerprint": "7257d7acbb6cf1cd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/connections.py"}, "region": {"startLine": 99}}}]}, {"ruleId": "scanner-8ee6fcf70732dd4a", "level": "error", "message": {"text": "FastAPI POST `list_connector_tables` without auth dependency \u2014 aurabackend/api_gateway/routers/connections.py:122"}, "properties": {"repobilityId": "02e6df174fbfa233", "scanner": "scanner-primary", "fingerprint": "8ee6fcf70732dd4a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/connections.py"}, "region": {"startLine": 122}}}]}, {"ruleId": "scanner-517818b460f0375d", "level": "error", "message": {"text": "FastAPI POST `profile_table` without auth dependency \u2014 aurabackend/api_gateway/routers/connections.py:141"}, "properties": {"repobilityId": "dcb23cc207112f0c", "scanner": "scanner-primary", "fingerprint": "517818b460f0375d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/connections.py"}, "region": {"startLine": 141}}}]}, {"ruleId": "scanner-ca82a2a95c479463", "level": "error", "message": {"text": "FastAPI POST `create_connection` without auth dependency \u2014 aurabackend/api_gateway/routers/connections.py:180"}, "properties": {"repobilityId": "9266b6fcc8b803e8", "scanner": "scanner-primary", "fingerprint": "ca82a2a95c479463", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/connections.py"}, "region": {"startLine": 180}}}]}, {"ruleId": "scanner-6c5b943407c7f8b3", "level": "error", "message": {"text": "FastAPI POST `test_connection_by_id` without auth dependency \u2014 aurabackend/api_gateway/routers/connections.py:221"}, "properties": {"repobilityId": "c93fd0630cf4ffb9", "scanner": "scanner-primary", "fingerprint": "6c5b943407c7f8b3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/connections.py"}, "region": {"startLine": 221}}}]}, {"ruleId": "scanner-106ce96dacef6210", "level": "error", "message": {"text": "FastAPI DELETE `delete_connection` without auth dependency \u2014 aurabackend/api_gateway/routers/connections.py:252"}, "properties": {"repobilityId": "746158d90f62d649", "scanner": "scanner-primary", "fingerprint": "106ce96dacef6210", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/connections.py"}, "region": {"startLine": 252}}}]}, {"ruleId": "scanner-c8fc3fc4a8618d28", "level": "error", "message": {"text": "FastAPI POST `issue_token` without auth dependency \u2014 aurabackend/api_gateway/routers/auth.py:68"}, "properties": {"repobilityId": "dd047c4d2cef334c", "scanner": "scanner-primary", "fingerprint": "c8fc3fc4a8618d28", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/auth.py"}, "region": {"startLine": 68}}}]}, {"ruleId": "scanner-a4aca7ced029a762", "level": "error", "message": {"text": "FastAPI POST `etl_preview_source` without auth dependency \u2014 aurabackend/api_gateway/routers/etl.py:252"}, "properties": {"repobilityId": "76f0b1181116329f", "scanner": "scanner-primary", "fingerprint": "a4aca7ced029a762", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/etl.py"}, "region": {"startLine": 252}}}]}, {"ruleId": "scanner-94c32719231ef86f", "level": "error", "message": {"text": "FastAPI POST `etl_execute` without auth dependency \u2014 aurabackend/api_gateway/routers/etl.py:300"}, "properties": {"repobilityId": "de68c5005b56c666", "scanner": "scanner-primary", "fingerprint": "94c32719231ef86f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/etl.py"}, "region": {"startLine": 300}}}]}, {"ruleId": "scanner-e893ea4e699ad77e", "level": "error", "message": {"text": "FastAPI POST `etl_from_natural_language` without auth dependency \u2014 aurabackend/api_gateway/routers/etl.py:428"}, "properties": {"repobilityId": "74757c6227b2d810", "scanner": "scanner-primary", "fingerprint": "e893ea4e699ad77e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/etl.py"}, "region": {"startLine": 428}}}]}, {"ruleId": "scanner-490d5c807e0cdd7c", "level": "error", "message": {"text": "FastAPI POST `create_webhook` without auth dependency \u2014 aurabackend/api_gateway/routers/webhooks.py:83"}, "properties": {"repobilityId": "ad464eb369c63f9e", "scanner": "scanner-primary", "fingerprint": "490d5c807e0cdd7c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/webhooks.py"}, "region": {"startLine": 83}}}]}, {"ruleId": "scanner-8ef2ee4662c7e58b", "level": "error", "message": {"text": "FastAPI PATCH `update_webhook` without auth dependency \u2014 aurabackend/api_gateway/routers/webhooks.py:127"}, "properties": {"repobilityId": "92ff9977a641ce40", "scanner": "scanner-primary", "fingerprint": "8ef2ee4662c7e58b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/webhooks.py"}, "region": {"startLine": 127}}}]}, {"ruleId": "scanner-7840eb04091af55c", "level": "error", "message": {"text": "FastAPI DELETE `delete_webhook` without auth dependency \u2014 aurabackend/api_gateway/routers/webhooks.py:135"}, "properties": {"repobilityId": "1b35b967fed4bc62", "scanner": "scanner-primary", "fingerprint": "7840eb04091af55c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/webhooks.py"}, "region": {"startLine": 135}}}]}, {"ruleId": "scanner-fb3508fb1ea17799", "level": "error", "message": {"text": "FastAPI POST `test_webhook` without auth dependency \u2014 aurabackend/api_gateway/routers/webhooks.py:142"}, "properties": {"repobilityId": "464b7bf691d513cb", "scanner": "scanner-primary", "fingerprint": "fb3508fb1ea17799", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/webhooks.py"}, "region": {"startLine": 142}}}]}, {"ruleId": "scanner-1fc635476cb7f4f7", "level": "error", "message": {"text": "FastAPI POST `execute_for_chat` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:231"}, "properties": {"repobilityId": "f6c81d132eeb64a0", "scanner": "scanner-primary", "fingerprint": "1fc635476cb7f4f7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/queries.py"}, "region": {"startLine": 231}}}]}, {"ruleId": "scanner-4edb7e594a754d59", "level": "error", "message": {"text": "FastAPI POST `execute_query_with_insights` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:361"}, "properties": {"repobilityId": "80f50937af22bf80", "scanner": "scanner-primary", "fingerprint": "4edb7e594a754d59", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/queries.py"}, "region": {"startLine": 361}}}]}, {"ruleId": "scanner-80003db99b02e55b", "level": "error", "message": {"text": "FastAPI POST `generate_query_proxy` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:418"}, "properties": {"repobilityId": "bb9d45a2853e3c62", "scanner": "scanner-primary", "fingerprint": "80003db99b02e55b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/queries.py"}, "region": {"startLine": 418}}}]}, {"ruleId": "scanner-e76ba57ed5a105c4", "level": "error", "message": {"text": "FastAPI POST `validate_query` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:437"}, "properties": {"repobilityId": "1ac1ea12874f6a85", "scanner": "scanner-primary", "fingerprint": "e76ba57ed5a105c4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/queries.py"}, "region": {"startLine": 437}}}]}, {"ruleId": "scanner-8e4b09686fa99969", "level": "error", "message": {"text": "FastAPI POST `lint_query` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:453"}, "properties": {"repobilityId": "5ba340dcc1780d8b", "scanner": "scanner-primary", "fingerprint": "8e4b09686fa99969", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/queries.py"}, "region": {"startLine": 453}}}]}, {"ruleId": "scanner-26f405e6c49d5c75", "level": "error", "message": {"text": "FastAPI POST `analyze_results` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:466"}, "properties": {"repobilityId": "5d54d754878f397e", "scanner": "scanner-primary", "fingerprint": "26f405e6c49d5c75", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/queries.py"}, "region": {"startLine": 466}}}]}, {"ruleId": "scanner-b484c15b6979e557", "level": "error", "message": {"text": "FastAPI POST `create_saved_query` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:519"}, "properties": {"repobilityId": "daf8d851c875e785", "scanner": "scanner-primary", "fingerprint": "b484c15b6979e557", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/queries.py"}, "region": {"startLine": 519}}}]}, {"ruleId": "scanner-1fd0179ebb553987", "level": "error", "message": {"text": "FastAPI PATCH `update_saved_query` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:555"}, "properties": {"repobilityId": "86850a18cdd5d989", "scanner": "scanner-primary", "fingerprint": "1fd0179ebb553987", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/queries.py"}, "region": {"startLine": 555}}}]}, {"ruleId": "scanner-b361cf0c55a55bf5", "level": "error", "message": {"text": "FastAPI DELETE `delete_saved_query` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:575"}, "properties": {"repobilityId": "87115f97928c0f59", "scanner": "scanner-primary", "fingerprint": "b361cf0c55a55bf5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/queries.py"}, "region": {"startLine": 575}}}]}, {"ruleId": "scanner-dcea9890619918d8", "level": "error", "message": {"text": "FastAPI POST `create_share_link` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:590"}, "properties": {"repobilityId": "188e8ff472ac8d4d", "scanner": "scanner-primary", "fingerprint": "dcea9890619918d8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/queries.py"}, "region": {"startLine": 590}}}]}, {"ruleId": "scanner-350c2845f885d479", "level": "error", "message": {"text": "FastAPI DELETE `revoke_share_link` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:603"}, "properties": {"repobilityId": "cd6de6895f223884", "scanner": "scanner-primary", "fingerprint": "350c2845f885d479", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/queries.py"}, "region": {"startLine": 603}}}]}, {"ruleId": "scanner-0f06d98623f8e8d0", "level": "error", "message": {"text": "FastAPI PUT `set_saved_query_schedule` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:685"}, "properties": {"repobilityId": "8d431a45cd59890b", "scanner": "scanner-primary", "fingerprint": "0f06d98623f8e8d0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/queries.py"}, "region": {"startLine": 685}}}]}, {"ruleId": "scanner-1d501645df596157", "level": "error", "message": {"text": "FastAPI DELETE `clear_saved_query_schedule` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:707"}, "properties": {"repobilityId": "262fb33e5c87e570", "scanner": "scanner-primary", "fingerprint": "1d501645df596157", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/queries.py"}, "region": {"startLine": 707}}}]}, {"ruleId": "scanner-e61902638935cf21", "level": "error", "message": {"text": "FastAPI POST `save_query_history` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:904"}, "properties": {"repobilityId": "ba1b571a3bf88975", "scanner": "scanner-primary", "fingerprint": "e61902638935cf21", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/queries.py"}, "region": {"startLine": 904}}}]}, {"ruleId": "scanner-79f018836f9e5069", "level": "error", "message": {"text": "FastAPI POST `approve_job` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:1001"}, "properties": {"repobilityId": "ee36f2f01f24061d", "scanner": "scanner-primary", "fingerprint": "79f018836f9e5069", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/queries.py"}, "region": {"startLine": 1001}}}]}, {"ruleId": "scanner-6e635a8bf917a57d", "level": "error", "message": {"text": "FastAPI POST `cancel_job` without auth dependency \u2014 aurabackend/api_gateway/routers/queries.py:1013"}, "properties": {"repobilityId": "fdc2db61c0183092", "scanner": "scanner-primary", "fingerprint": "6e635a8bf917a57d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/queries.py"}, "region": {"startLine": 1013}}}]}, {"ruleId": "scanner-0932312ffddfd9e3", "level": "error", "message": {"text": "FastAPI POST `create_hook` without auth dependency \u2014 aurabackend/api_gateway/routers/inbound_hooks.py:68"}, "properties": {"repobilityId": "8343df509dec7732", "scanner": "scanner-primary", "fingerprint": "0932312ffddfd9e3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/inbound_hooks.py"}, "region": {"startLine": 68}}}]}, {"ruleId": "scanner-17eefc3df23bb411", "level": "error", "message": {"text": "FastAPI PATCH `update_hook` without auth dependency \u2014 aurabackend/api_gateway/routers/inbound_hooks.py:92"}, "properties": {"repobilityId": "0245c0a69eeb939a", "scanner": "scanner-primary", "fingerprint": "17eefc3df23bb411", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/inbound_hooks.py"}, "region": {"startLine": 92}}}]}, {"ruleId": "scanner-febfec3e12f5516d", "level": "error", "message": {"text": "FastAPI DELETE `delete_hook` without auth dependency \u2014 aurabackend/api_gateway/routers/inbound_hooks.py:103"}, "properties": {"repobilityId": "f72c93fd29ca14d6", "scanner": "scanner-primary", "fingerprint": "febfec3e12f5516d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/inbound_hooks.py"}, "region": {"startLine": 103}}}]}, {"ruleId": "scanner-364e4097ce105e6c", "level": "error", "message": {"text": "FastAPI POST `fire_hook` without auth dependency \u2014 aurabackend/api_gateway/routers/inbound_hooks.py:122"}, "properties": {"repobilityId": "d5cc2b0b29672c9d", "scanner": "scanner-primary", "fingerprint": "364e4097ce105e6c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/inbound_hooks.py"}, "region": {"startLine": 122}}}]}, {"ruleId": "scanner-0322dbd3244edf8f", "level": "error", "message": {"text": "FastAPI POST `chat_endpoint` without auth dependency \u2014 aurabackend/api_gateway/routers/chat.py:144"}, "properties": {"repobilityId": "13cd0f1fe4afd76f", "scanner": "scanner-primary", "fingerprint": "0322dbd3244edf8f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/chat.py"}, "region": {"startLine": 144}}}]}, {"ruleId": "scanner-33e8d2e6dadc821c", "level": "error", "message": {"text": "FastAPI POST `save_chat_message` without auth dependency \u2014 aurabackend/api_gateway/routers/chat.py:325"}, "properties": {"repobilityId": "156408ab4da41f4f", "scanner": "scanner-primary", "fingerprint": "33e8d2e6dadc821c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/chat.py"}, "region": {"startLine": 325}}}]}, {"ruleId": "scanner-e1485023024d6e11", "level": "error", "message": {"text": "FastAPI POST `upload_universal` without auth dependency \u2014 aurabackend/api_gateway/routers/files.py:61"}, "properties": {"repobilityId": "3d779ed2d635fcc3", "scanner": "scanner-primary", "fingerprint": "e1485023024d6e11", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/files.py"}, "region": {"startLine": 61}}}]}, {"ruleId": "scanner-f6c293b59aa7398a", "level": "error", "message": {"text": "FastAPI DELETE `delete_file` without auth dependency \u2014 aurabackend/api_gateway/routers/files.py:238"}, "properties": {"repobilityId": "325637213174adec", "scanner": "scanner-primary", "fingerprint": "f6c293b59aa7398a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/files.py"}, "region": {"startLine": 238}}}]}, {"ruleId": "scanner-a16663416bcad1a8", "level": "error", "message": {"text": "FastAPI POST `create_dashboard` without auth dependency \u2014 aurabackend/api_gateway/routers/dashboards.py:87"}, "properties": {"repobilityId": "0572414afab22ab3", "scanner": "scanner-primary", "fingerprint": "a16663416bcad1a8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/dashboards.py"}, "region": {"startLine": 87}}}]}, {"ruleId": "scanner-0044ad73fee80c9a", "level": "error", "message": {"text": "FastAPI PATCH `update_dashboard` without auth dependency \u2014 aurabackend/api_gateway/routers/dashboards.py:124"}, "properties": {"repobilityId": "8fce7e2ea9bc458f", "scanner": "scanner-primary", "fingerprint": "0044ad73fee80c9a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/dashboards.py"}, "region": {"startLine": 124}}}]}, {"ruleId": "scanner-b22bd983b1164352", "level": "error", "message": {"text": "FastAPI DELETE `delete_dashboard` without auth dependency \u2014 aurabackend/api_gateway/routers/dashboards.py:147"}, "properties": {"repobilityId": "34067efd7aa6d20e", "scanner": "scanner-primary", "fingerprint": "b22bd983b1164352", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/dashboards.py"}, "region": {"startLine": 147}}}]}, {"ruleId": "scanner-f9aef1fb3784b307", "level": "error", "message": {"text": "FastAPI POST `render_dashboard` without auth dependency \u2014 aurabackend/api_gateway/routers/dashboards.py:236"}, "properties": {"repobilityId": "b2315302c6fb9540", "scanner": "scanner-primary", "fingerprint": "f9aef1fb3784b307", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/dashboards.py"}, "region": {"startLine": 236}}}]}, {"ruleId": "scanner-66dd979424ea30da", "level": "error", "message": {"text": "FastAPI POST `create_workspace` without auth dependency \u2014 aurabackend/api_gateway/routers/workspaces.py:124"}, "properties": {"repobilityId": "a52077fc472da8e1", "scanner": "scanner-primary", "fingerprint": "66dd979424ea30da", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/workspaces.py"}, "region": {"startLine": 124}}}]}, {"ruleId": "scanner-d2c0fa87f3a517bb", "level": "error", "message": {"text": "FastAPI PATCH `update_workspace` without auth dependency \u2014 aurabackend/api_gateway/routers/workspaces.py:142"}, "properties": {"repobilityId": "e0aeb8a2d427cefe", "scanner": "scanner-primary", "fingerprint": "d2c0fa87f3a517bb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/workspaces.py"}, "region": {"startLine": 142}}}]}, {"ruleId": "scanner-9a163fb6cfb07ecb", "level": "error", "message": {"text": "FastAPI DELETE `delete_workspace` without auth dependency \u2014 aurabackend/api_gateway/routers/workspaces.py:159"}, "properties": {"repobilityId": "c4e98fba0ae7e370", "scanner": "scanner-primary", "fingerprint": "9a163fb6cfb07ecb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/workspaces.py"}, "region": {"startLine": 159}}}]}, {"ruleId": "scanner-ebf2de6a5663ef5b", "level": "error", "message": {"text": "FastAPI POST `submit` without auth dependency \u2014 aurabackend/api_gateway/routers/counterfactual.py:70"}, "properties": {"repobilityId": "2505fc3baf95ddb7", "scanner": "scanner-primary", "fingerprint": "ebf2de6a5663ef5b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/counterfactual.py"}, "region": {"startLine": 70}}}]}, {"ruleId": "scanner-2ab8936d03a7dc0e", "level": "error", "message": {"text": "FastAPI POST `run_demo` without auth dependency \u2014 aurabackend/api_gateway/routers/counterfactual.py:114"}, "properties": {"repobilityId": "8eced3d91f0c0d6e", "scanner": "scanner-primary", "fingerprint": "2ab8936d03a7dc0e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/counterfactual.py"}, "region": {"startLine": 114}}}]}, {"ruleId": "scanner-266ffcc0bf617ab7", "level": "error", "message": {"text": "FastAPI POST `run_audit` without auth dependency \u2014 aurabackend/api_gateway/routers/counterfactual.py:119"}, "properties": {"repobilityId": "1803d3f62712597a", "scanner": "scanner-primary", "fingerprint": "266ffcc0bf617ab7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/counterfactual.py"}, "region": {"startLine": 119}}}]}, {"ruleId": "scanner-b4b029211b80310e", "level": "error", "message": {"text": "FastAPI POST `financial_audit` without auth dependency \u2014 aurabackend/api_gateway/routers/counterfactual.py:124"}, "properties": {"repobilityId": "3356e6db1638bac5", "scanner": "scanner-primary", "fingerprint": "b4b029211b80310e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/api_gateway/routers/counterfactual.py"}, "region": {"startLine": 124}}}]}, {"ruleId": "scanner-05beb427b1be9e5d", "level": "error", "message": {"text": "FastAPI POST `causal_discover` without auth dependency \u2014 aurabackend/causal_service/main.py:83"}, "properties": {"repobilityId": "72e5b9f673127db7", "scanner": "scanner-primary", "fingerprint": "05beb427b1be9e5d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/causal_service/main.py"}, "region": {"startLine": 83}}}]}, {"ruleId": "scanner-ea8956fa196d5269", "level": "error", "message": {"text": "FastAPI POST `submit_job` without auth dependency \u2014 aurabackend/counterfactual_service/main.py:196"}, "properties": {"repobilityId": "8e597dc92b73cca1", "scanner": "scanner-primary", "fingerprint": "ea8956fa196d5269", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/counterfactual_service/main.py"}, "region": {"startLine": 196}}}]}, {"ruleId": "scanner-c34f0d6335122a3b", "level": "error", "message": {"text": "FastAPI POST `run_demo` without auth dependency \u2014 aurabackend/counterfactual_service/main.py:244"}, "properties": {"repobilityId": "9ba83797c318b4d8", "scanner": "scanner-primary", "fingerprint": "c34f0d6335122a3b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/counterfactual_service/main.py"}, "region": {"startLine": 244}}}]}, {"ruleId": "scanner-7ecfaf9f4cc24f89", "level": "error", "message": {"text": "FastAPI POST `run_audit` without auth dependency \u2014 aurabackend/counterfactual_service/main.py:337"}, "properties": {"repobilityId": "ce0d6a4a5b129796", "scanner": "scanner-primary", "fingerprint": "7ecfaf9f4cc24f89", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/counterfactual_service/main.py"}, "region": {"startLine": 337}}}]}, {"ruleId": "scanner-e085b31e36ec25c4", "level": "error", "message": {"text": "FastAPI POST `financial_audit` without auth dependency \u2014 aurabackend/counterfactual_service/main.py:506"}, "properties": {"repobilityId": "cf0a4d96220c6dde", "scanner": "scanner-primary", "fingerprint": "e085b31e36ec25c4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/counterfactual_service/main.py"}, "region": {"startLine": 506}}}]}, {"ruleId": "scanner-b1d198ffa24cfdd5", "level": "error", "message": {"text": "FastAPI POST `replay_bulk` without auth dependency \u2014 aurabackend/counterfactual_service/main.py:667"}, "properties": {"repobilityId": "a20d2bcdcaca5d0c", "scanner": "scanner-primary", "fingerprint": "b1d198ffa24cfdd5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/counterfactual_service/main.py"}, "region": {"startLine": 667}}}]}, {"ruleId": "scanner-fd0dfb778a8713fa", "level": "error", "message": {"text": "FastAPI POST `trigger_cycle` without auth dependency \u2014 aurabackend/evolution/api.py:79"}, "properties": {"repobilityId": "03d3b502eed80447", "scanner": "scanner-primary", "fingerprint": "fd0dfb778a8713fa", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/evolution/api.py"}, "region": {"startLine": 79}}}]}, {"ruleId": "scanner-b4102845ac0d1411", "level": "error", "message": {"text": "FastAPI POST `submit_feedback` without auth dependency \u2014 aurabackend/evolution/api.py:87"}, "properties": {"repobilityId": "48a5d43ed30a29c7", "scanner": "scanner-primary", "fingerprint": "b4102845ac0d1411", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/evolution/api.py"}, "region": {"startLine": 87}}}]}, {"ruleId": "scanner-40237d88bf8dece2", "level": "error", "message": {"text": "FastAPI POST `search_patterns` without auth dependency \u2014 aurabackend/evolution/api.py:105"}, "properties": {"repobilityId": "0f602b75c232278b", "scanner": "scanner-primary", "fingerprint": "40237d88bf8dece2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/evolution/api.py"}, "region": {"startLine": 105}}}]}, {"ruleId": "scanner-2fb8892625c8825c", "level": "error", "message": {"text": "FastAPI PATCH `update_proposal` without auth dependency \u2014 aurabackend/evolution/api.py:183"}, "properties": {"repobilityId": "8274e3b28324a53d", "scanner": "scanner-primary", "fingerprint": "2fb8892625c8825c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "aurabackend/evolution/api.py"}, "region": {"startLine": 183}}}]}, {"ruleId": "scanner-1a13b0c320a65b7c", "level": "note", "message": {"text": "Unused endpoint: POST /generate_code"}, "properties": {"repobilityId": "6ec3cee18b326be4", "scanner": "scanner-primary", "fingerprint": "1a13b0c320a65b7c", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-5baa8971ebe192a1", "level": "note", "message": {"text": "Unused endpoint: GET /"}, "properties": {"repobilityId": "8b97e031ca0b5e92", "scanner": "scanner-primary", "fingerprint": "5baa8971ebe192a1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-005a76d41f18e7f8", "level": "note", "message": {"text": "Unused endpoint: POST /v1/orchestrations/query"}, "properties": {"repobilityId": "247c11bea898bd11", "scanner": "scanner-primary", "fingerprint": "005a76d41f18e7f8", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-731c57f59aaca553", "level": "note", "message": {"text": "Unused endpoint: POST /test"}, "properties": {"repobilityId": "f008a57df1af9f37", "scanner": "scanner-primary", "fingerprint": "731c57f59aaca553", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-5fbe9b1ac70f4e70", "level": "note", "message": {"text": "Unused endpoint: POST /tables"}, "properties": {"repobilityId": "731cf30c6b4caae4", "scanner": "scanner-primary", "fingerprint": "5fbe9b1ac70f4e70", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e833b6bcbc6b3bf4", "level": "note", "message": {"text": "Unused endpoint: GET /connectors/available"}, "properties": {"repobilityId": "b1fd834be4828b01", "scanner": "scanner-primary", "fingerprint": "e833b6bcbc6b3bf4", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-4043cd1821a3243f", "level": "note", "message": {"text": "Unused endpoint: GET /connectors/registry"}, "properties": {"repobilityId": "5a8d4b7f8c3370b7", "scanner": "scanner-primary", "fingerprint": "4043cd1821a3243f", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-65a667bcc38fb792", "level": "note", "message": {"text": "Unused endpoint: POST /ingest"}, "properties": {"repobilityId": "20cd7093d2268679", "scanner": "scanner-primary", "fingerprint": "65a667bcc38fb792", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-b81820162e032ee9", "level": "note", "message": {"text": "Unused endpoint: POST /introspect"}, "properties": {"repobilityId": "11e5dac2f6e01971", "scanner": "scanner-primary", "fingerprint": "b81820162e032ee9", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-1ed72cf09be61fa7", "level": "note", "message": {"text": "Unused endpoint: POST /connections/{connection_id}/query"}, "properties": {"repobilityId": "2509394d8f6b4258", "scanner": "scanner-primary", "fingerprint": "1ed72cf09be61fa7", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-39a7767763398032", "level": "note", "message": {"text": "Unused endpoint: GET /vault/health"}, "properties": {"repobilityId": "3cf73436cd2216d7", "scanner": "scanner-primary", "fingerprint": "39a7767763398032", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-96bb3c8a872efbdf", "level": "note", "message": {"text": "Unused endpoint: GET /vault/tables"}, "properties": {"repobilityId": "53182c97cadf79c3", "scanner": "scanner-primary", "fingerprint": "96bb3c8a872efbdf", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-6613b9a9788636e1", "level": "note", "message": {"text": "Unused endpoint: POST /vault/query"}, "properties": {"repobilityId": "26696650df6d8771", "scanner": "scanner-primary", "fingerprint": "6613b9a9788636e1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-586a92cf0c3b4123", "level": "note", "message": {"text": "Unused endpoint: POST /vault/vector-search"}, "properties": {"repobilityId": "3c9272b7106cf9ef", "scanner": "scanner-primary", "fingerprint": "586a92cf0c3b4123", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-6a4805ea66f097c3", "level": "note", "message": {"text": "Unused endpoint: POST /vault/spatial-query"}, "properties": {"repobilityId": "01c8b3e2be1d247c", "scanner": "scanner-primary", "fingerprint": "6a4805ea66f097c3", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-abde55559a448ed3", "level": "note", "message": {"text": "Unused endpoint: GET /vault/capabilities"}, "properties": {"repobilityId": "827c6b5dfb24f0d3", "scanner": "scanner-primary", "fingerprint": "abde55559a448ed3", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-fca11d494725d7c3", "level": "note", "message": {"text": "Unused endpoint: POST /analyze"}, "properties": {"repobilityId": "6d3d0f3e24a406e1", "scanner": "scanner-primary", "fingerprint": "fca11d494725d7c3", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-3e85717e1ed605bd", "level": "note", "message": {"text": "Unused endpoint: POST /chart-suggestions"}, "properties": {"repobilityId": "f16cc63c1b4d8826", "scanner": "scanner-primary", "fingerprint": "3e85717e1ed605bd", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-083c12d89c29d1b0", "level": "note", "message": {"text": "Unused endpoint: POST /recommend-indexes"}, "properties": {"repobilityId": "b2eb896d27466c44", "scanner": "scanner-primary", "fingerprint": "083c12d89c29d1b0", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-78d1adf6009598a8", "level": "note", "message": {"text": "Unused endpoint: POST /dar/research/run"}, "properties": {"repobilityId": "c67b8c786cc07f6f", "scanner": "scanner-primary", "fingerprint": "78d1adf6009598a8", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8053bc7ec8f46411", "level": "note", "message": {"text": "Unused endpoint: GET /dar/insights"}, "properties": {"repobilityId": "386d8313268e1b03", "scanner": "scanner-primary", "fingerprint": "8053bc7ec8f46411", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-b01b18518ece9bd0", "level": "note", "message": {"text": "Unused endpoint: GET /dar/insights/{insight_id}"}, "properties": {"repobilityId": "2dcd97be85d125bd", "scanner": "scanner-primary", "fingerprint": "b01b18518ece9bd0", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-b7709161a144b54c", "level": "note", "message": {"text": "Unused endpoint: GET /dar/daemon/status"}, "properties": {"repobilityId": "8c2c0a02c1f9533a", "scanner": "scanner-primary", "fingerprint": "b7709161a144b54c", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-9488a93a9da525e3", "level": "note", "message": {"text": "Unused endpoint: POST /dar/daemon/start"}, "properties": {"repobilityId": "7ccf49eaaa4cfa30", "scanner": "scanner-primary", "fingerprint": "9488a93a9da525e3", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-d228b30d0fd7610e", "level": "note", "message": {"text": "Unused endpoint: POST /dar/daemon/stop"}, "properties": {"repobilityId": "a5e3d8112372bc44", "scanner": "scanner-primary", "fingerprint": "d228b30d0fd7610e", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-2b73face5b06aa67", "level": "note", "message": {"text": "Unused endpoint: POST /jobs"}, "properties": {"repobilityId": "e0f283caf2f63533", "scanner": "scanner-primary", "fingerprint": "2b73face5b06aa67", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-1008c575819b3d37", "level": "note", "message": {"text": "Unused endpoint: GET /jobs"}, "properties": {"repobilityId": "0122d9778486c0ba", "scanner": "scanner-primary", "fingerprint": "1008c575819b3d37", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-ee53a8b03729481e", "level": "note", "message": {"text": "Unused endpoint: GET /jobs/{job_id}"}, "properties": {"repobilityId": "194284cf6c4d530f", "scanner": "scanner-primary", "fingerprint": "ee53a8b03729481e", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-596c46554c26296f", "level": "note", "message": {"text": "Unused endpoint: PUT /jobs/{job_id}"}, "properties": {"repobilityId": "bff5546949b4008d", "scanner": "scanner-primary", "fingerprint": "596c46554c26296f", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-6d0b60cfd130dc4c", "level": "note", "message": {"text": "Unused endpoint: DELETE /jobs/{job_id}"}, "properties": {"repobilityId": "e67e8535e5d9a698", "scanner": "scanner-primary", "fingerprint": "6d0b60cfd130dc4c", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-7052896437dc6f5c", "level": "note", "message": {"text": "Unused endpoint: POST /jobs/{job_id}/pause"}, "properties": {"repobilityId": "168cec18769e62be", "scanner": "scanner-primary", "fingerprint": "7052896437dc6f5c", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-930b20a94531cc12", "level": "note", "message": {"text": "Unused endpoint: POST /jobs/{job_id}/resume"}, "properties": {"repobilityId": "0a9929a3fb995dae", "scanner": "scanner-primary", "fingerprint": "930b20a94531cc12", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-4b72c81da9cc7f8a", "level": "note", "message": {"text": "Unused endpoint: POST /jobs/{job_id}/execute"}, "properties": {"repobilityId": "9b16a06453bd88a8", "scanner": "scanner-primary", "fingerprint": "4b72c81da9cc7f8a", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-1ad84d8c38a4949d", "level": "note", "message": {"text": "Unused endpoint: GET /executions"}, "properties": {"repobilityId": "9112f10d7011121b", "scanner": "scanner-primary", "fingerprint": "1ad84d8c38a4949d", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-04668323ca83a301", "level": "note", "message": {"text": "Unused endpoint: GET /executions/{execution_id}"}, "properties": {"repobilityId": "f78463a355c8ad9f", "scanner": "scanner-primary", "fingerprint": "04668323ca83a301", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-c31afa4e80a2a3d2", "level": "note", "message": {"text": "Unused endpoint: GET /executions/{execution_id}/logs"}, "properties": {"repobilityId": "ff680c31fe550ed6", "scanner": "scanner-primary", "fingerprint": "c31afa4e80a2a3d2", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-c2fd1d56f1070274", "level": "note", "message": {"text": "Unused endpoint: POST /jobs/{job_id}/run"}, "properties": {"repobilityId": "1e50fa92b5b40c4d", "scanner": "scanner-primary", "fingerprint": "c2fd1d56f1070274", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8754601194d5f53c", "level": "note", "message": {"text": "Unused endpoint: POST /admin/cleanup"}, "properties": {"repobilityId": "e42a5b6743b84abb", "scanner": "scanner-primary", "fingerprint": "8754601194d5f53c", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-13d1450dde11acc1", "level": "note", "message": {"text": "Unused endpoint: POST /execute_sql"}, "properties": {"repobilityId": "22577ac90a37dc5d", "scanner": "scanner-primary", "fingerprint": "13d1450dde11acc1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-2afae04aaf7e97bb", "level": "note", "message": {"text": "Unused endpoint: POST /api/v1/ingest/netsuite"}, "properties": {"repobilityId": "d19671f56ec86025", "scanner": "scanner-primary", "fingerprint": "2afae04aaf7e97bb", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-57cf174389cc22d2", "level": "note", "message": {"text": "Unused endpoint: POST /api/v1/ingest/workday"}, "properties": {"repobilityId": "f867a0c39a9a0ed2", "scanner": "scanner-primary", "fingerprint": "57cf174389cc22d2", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-7401978ada41e5e8", "level": "note", "message": {"text": "Unused endpoint: GET /api/v1/ingest/erc-map/{erc}"}, "properties": {"repobilityId": "74c3714c5eef599e", "scanner": "scanner-primary", "fingerprint": "7401978ada41e5e8", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-2364ec951b75f0ac", "level": "note", "message": {"text": "Unused endpoint: POST /uasr/ingest"}, "properties": {"repobilityId": "8b04a71620d623e7", "scanner": "scanner-primary", "fingerprint": "2364ec951b75f0ac", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-b2740acbde14d323", "level": "note", "message": {"text": "Unused endpoint: POST /uasr/baseline"}, "properties": {"repobilityId": "b2c69fbbbe02c62d", "scanner": "scanner-primary", "fingerprint": "b2740acbde14d323", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-c065bcd37ba8bdbf", "level": "note", "message": {"text": "Unused endpoint: GET /uasr/drift/status"}, "properties": {"repobilityId": "754c290d17524053", "scanner": "scanner-primary", "fingerprint": "c065bcd37ba8bdbf", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-dfe488db48de2787", "level": "note", "message": {"text": "Unused endpoint: GET /uasr/recovery/{recovery_id}"}, "properties": {"repobilityId": "3cf2c5a15cdd5246", "scanner": "scanner-primary", "fingerprint": "dfe488db48de2787", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-0f43e636bddd4bf1", "level": "note", "message": {"text": "Unused endpoint: GET /uasr/drift/{drift_event_id}/recovery"}, "properties": {"repobilityId": "48eddff45ff309f2", "scanner": "scanner-primary", "fingerprint": "0f43e636bddd4bf1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-d541521ae940fa39", "level": "note", "message": {"text": "Unused endpoint: GET /uasr/metrics"}, "properties": {"repobilityId": "2e89b9106f8e91db", "scanner": "scanner-primary", "fingerprint": "d541521ae940fa39", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-2d3997f99a53dae9", "level": "note", "message": {"text": "Unused endpoint: GET /uasr/metrics/history"}, "properties": {"repobilityId": "74edb46a09bd6541", "scanner": "scanner-primary", "fingerprint": "2d3997f99a53dae9", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-08380b0f5a2f7e05", "level": "note", "message": {"text": "Unused endpoint: GET /uasr/metrics/alerts"}, "properties": {"repobilityId": "2fab19d84be8ff03", "scanner": "scanner-primary", "fingerprint": "08380b0f5a2f7e05", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}]}]}