Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

welovejeff/tamper-evident-verification

https://github.com/welovejeff/tamper-evident-verification · scanned 2026-06-16 00:56 UTC (2 months, 1 week ago)

79 raw signals (0 security + 79 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 1 week ago · v1 · 77 actionable findings from 1 signal source. 2 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

77.8% cov · 77 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 1 Medium 18 Low 25 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 77 Crowd 0 Layer: Software 18 Api 1 Frontend 3 Security 10 Cicd 1 Quality 44

Exclude dismissed / FP Exclude test files

All 1275 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`isRealDate`	software	healthy	`node/totals.js:isRealDate`
`leap`	software	healthy	`node/totals.js:leap`
`bucketKeyFor`	software	healthy	`node/totals.js:bucketKeyFor`
`pad`	software	healthy	`node/totals.js:pad`
`normalizedRecords`	software	healthy	`node/totals.js:normalizedRecords`
`periodBuckets`	software	healthy	`node/totals.js:periodBuckets`
`controlTotals`	software	healthy	`node/totals.js:controlTotals`
`groupedNumericColumns`	software	healthy	`node/totals.js:groupedNumericColumns`
`sortedUnion`	software	healthy	`node/totals.js:sortedUnion`
`dictAt`	software	healthy	`node/totals.js:dictAt`
`isInt`	software	healthy	`node/totals.js:isInt`
`deepEqual`	software	healthy	`node/totals.js:deepEqual`
`structuredTotalsDelta`	software	healthy	`node/totals.js:structuredTotalsDelta`
`hasBuckets`	software	healthy	`node/totals.js:hasBuckets`
`totalsDelta`	software	healthy	`node/totals.js:totalsDelta`
`send`	software	healthy	`node/express.js:send`
`receiptsMiddleware`	software	healthy	`node/express.js:receiptsMiddleware`
`tamperSignalReceipts`	software	healthy	`node/express.js:tamperSignalReceipts`
`assetsMiddleware`	software	healthy	`node/express.js:assetsMiddleware`
`tamperSignalAssets`	software	healthy	`node/express.js:tamperSignalAssets`
`signalSnippet`	software	healthy	`node/express.js:signalSnippet`
`consolePage`	software	healthy	`node/express.js:consolePage`
`tamperSignal`	software	healthy	`node/express.js:tamperSignal`
`tamperSignalConsole`	software	healthy	`node/express.js:tamperSignalConsole`
`parseBand`	software	healthy	`node/wrapper.js:parseBand`
`parseSettle`	software	healthy	`node/wrapper.js:parseSettle`
`buildTolerance`	software	healthy	`node/wrapper.js:buildTolerance`
`toRecords`	software	healthy	`node/wrapper.js:toRecords`
`receiptStep`	software	healthy	`node/wrapper.js:receiptStep`
`wrapped`	software	healthy	`node/wrapper.js:wrapped`
`ingestFile`	software	healthy	`node/wrapper.js:ingestFile`
`rebuildChain`	software	healthy	`node/wrapper.js:rebuildChain`
`appendPeriod`	software	healthy	`node/wrapper.js:appendPeriod`
`receiptsMiddleware`	software	healthy	`node/express.d.ts:receiptsMiddleware`
`assetsMiddleware`	software	healthy	`node/express.d.ts:assetsMiddleware`
`signalSnippet`	software	healthy	`node/express.d.ts:signalSnippet`
`consolePage`	software	healthy	`node/express.d.ts:consolePage`
`tamperSignal`	software	healthy	`node/express.d.ts:tamperSignal`
`cmdKeygen`	software	healthy	`node/cli.js:cmdKeygen`
`isUnsnapshottedReset`	software	healthy	`node/cli.js:isUnsnapshottedReset`
`archivePriorChain`	software	healthy	`node/cli.js:archivePriorChain`
`cmdIngestPeriod`	software	healthy	`node/cli.js:cmdIngestPeriod`
`trusted`	software	healthy	`node/cli.js:trusted`
`cmdIngest`	software	healthy	`node/cli.js:cmdIngest`
`cmdVerify`	software	healthy	`node/cli.js:cmdVerify`
`trustedForHistory`	software	healthy	`node/cli.js:trustedForHistory`
`notice`	software	healthy	`node/cli.js:notice`
`judgeAfterVerify`	software	healthy	`node/cli.js:judgeAfterVerify`
`foldJudgment`	software	healthy	`node/cli.js:foldJudgment`
`resolveSnapshotKey`	software	healthy	`node/cli.js:resolveSnapshotKey`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`demo.html`	software	healthy	`demo.html`
`README.md`	software	healthy	`README.md`
`package.json`	software	healthy	`package.json`
`index.html`	software	healthy	`index.html`
`UPDATE.md`	software	healthy	`UPDATE.md`
`pyproject.toml`	software	healthy	`pyproject.toml`
`LICENSE`	software	healthy	`LICENSE`
`CONCEPTS.md`	software	healthy	`CONCEPTS.md`
`AGENTS.md`	software	healthy	`AGENTS.md`
`CHANGELOG.md`	software	healthy	`CHANGELOG.md`
`totals.js`	software	healthy	`node/totals.js`
`express.js`	software	healthy	`node/express.js`
`wrapper.js`	software	healthy	`node/wrapper.js`
`express.d.ts`	software	healthy	`node/express.d.ts`
`cli.js`	software	healthy	`node/cli.js`
`canonical.js`	software	healthy	`node/canonical.js`
`load.js`	software	healthy	`node/load.js`
`receipts.js`	software	healthy	`node/receipts.js`
`keys.js`	software	healthy	`node/keys.js`
`index.d.ts`	software	healthy	`node/index.d.ts`
`index.js`	software	healthy	`node/index.js`
`zip.js`	software	healthy	`node/zip.js`
`history.js`	software	healthy	`node/history.js`
`history.test.js`	software	healthy	`node/test/history.test.js`
`zip.test.js`	software	healthy	`node/test/zip.test.js`
`chain.test.js`	software	healthy	`node/test/chain.test.js`
`append_period.test.js`	software	healthy	`node/test/append_period.test.js`
`pipeline.test.js`	software	healthy	`node/test/pipeline.test.js`
`badge.test.js`	software	healthy	`node/test/badge.test.js`
`diff.test.js`	software	healthy	`node/test/diff.test.js`
`express.test.js`	software	healthy	`node/test/express.test.js`
`canonical.test.js`	software	healthy	`node/test/canonical.test.js`
`log.test.js`	software	healthy	`node/test/log.test.js`
`judgment.test.js`	software	healthy	`node/test/judgment.test.js`
`totals.test.js`	software	healthy	`node/test/totals.test.js`
`theme.test.js`	software	healthy	`node/test/theme.test.js`
`interop.test.js`	software	healthy	`node/test/interop.test.js`
`vectors.json`	software	healthy	`node/test/vectors.json`
`your-data-is-supposed-to-move.html`	software	healthy	`blog/your-data-is-supposed-to-move.html`
`show-your-work.html`	software	healthy	`blog/show-your-work.html`
`index.html`	software	healthy	`blog/index.html`
`data-you-can-take-with-you.html`	software	healthy	`blog/data-you-can-take-with-you.html`
`your-vibe-coded-dashboard-needs-receipts.html`	software	healthy	`blog/your-vibe-coded-dashboard-needs-receipts.html`
`blog.css`	software	healthy	`blog/blog.css`
`core.d.ts`	software	healthy	`types/core.d.ts`
`table.d.ts`	software	healthy	`badge/table.d.ts`
`console.js`	software	healthy	`badge/console.js`
`table.js`	software	healthy	`badge/table.js`
`light-react.js`	software	healthy	`badge/light-react.js`
`element.js`	software	healthy	`badge/element.js`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`node`	software	healthy	`node`
`test`	software	healthy	`node/test`
`blog`	software	healthy	`blog`
`types`	software	healthy	`types`
`badge`	software	healthy	`badge`
`tests`	software	healthy	`tests`
`fixtures`	software	healthy	`tests/fixtures`
`judgment-parity-reverse`	software	healthy	`tests/fixtures/judgment-parity-reverse`
`history`	software	healthy	`tests/fixtures/judgment-parity-reverse/history`
`chains-1.1`	software	healthy	`tests/fixtures/chains-1.1`
`intact`	software	healthy	`tests/fixtures/chains-1.1/intact`
`tampered`	software	healthy	`tests/fixtures/chains-1.1/tampered`
`gap`	software	healthy	`tests/fixtures/chains-1.1/gap`
`snapshot-parity`	software	healthy	`tests/fixtures/snapshot-parity`
`history`	software	healthy	`tests/fixtures/snapshot-parity/history`
`judgment-parity`	software	healthy	`tests/fixtures/judgment-parity`
`history`	software	healthy	`tests/fixtures/judgment-parity/history`
`docs`	software	healthy	`docs`
`blog`	software	healthy	`docs/blog`
`solutions`	software	healthy	`docs/solutions`
`logic-errors`	software	healthy	`docs/solutions/logic-errors`
`design-patterns`	software	healthy	`docs/solutions/design-patterns`
`media`	software	healthy	`docs/media`
`thumbs`	software	healthy	`docs/media/thumbs`
`ideation`	software	healthy	`docs/ideation`
`plans`	software	healthy	`docs/plans`
`brainstorms`	software	healthy	`docs/brainstorms`
`scripts`	software	healthy	`scripts`
`animations`	software	healthy	`animations`
`src`	software	healthy	`animations/src`
`scenes`	software	healthy	`animations/src/scenes`
`ui`	software	healthy	`animations/src/scenes/ui`
`designs`	software	healthy	`designs`
`.claude`	software	healthy	`.claude`
`examples`	software	healthy	`examples`
`chains`	software	healthy	`examples/chains`
`intact`	software	healthy	`examples/chains/intact`
`tampered`	software	healthy	`examples/chains/tampered`
`gap`	software	healthy	`examples/chains/gap`
`legacy`	software	healthy	`legacy`
`.github`	software	healthy	`.github`
`workflows`	software	healthy	`.github/workflows`
`tamper_signal`	software	healthy	`tamper_signal`
`static`	software	healthy	`tamper_signal/static`

Label	Layer	Status	Path
`ChainTailMismatch`	software	healthy	`node/wrapper.js:ChainTailMismatch`
`UntrustedSignerError`	software	healthy	`node/wrapper.js:UntrustedSignerError`
`ChainTailMismatch`	software	healthy	`node/index.d.ts:ChainTailMismatch`
`UntrustedSignerError`	software	healthy	`node/index.d.ts:UntrustedSignerError`
`TamperSignalElement`	software	healthy	`badge/element.js:TamperSignalElement`
`TamperSignalElement`	software	healthy	`badge/element.d.ts:TamperSignalElement`
`AnchorUnavailable`	software	healthy	`tamper_signal/anchor.py:34`
`Handler`	software	healthy	`tamper_signal/cli.py:715`
`UntrustedSignerError`	software	healthy	`tamper_signal/wrapper.py:189`
`ChainTailMismatch`	software	healthy	`tamper_signal/wrapper.py:298`
`ChainResult`	software	healthy	`tamper_signal/receipts.py:281`
`TamperSignalElement`	software	healthy	`tamper_signal/static/element.js:TamperSignalElement`

Label	Layer	Status	Path
`auth::tests/test_tier4_hardening.py`	security	healthy	`tests/test_tier4_hardening.py`
`auth::tamper_signal/anchor.py`	security	healthy	`tamper_signal/anchor.py`
`auth::docs/advanced.html`	security	healthy	`docs/advanced.html`
`auth::README.md`	security	healthy	`README.md`
`auth::docs/ideation/2026-06-11-open-ideation.html`	security	healthy	`docs/ideation/2026-06-11-open-ideation.html`
`auth::AGENTS.md`	security	healthy	`AGENTS.md`
`auth::tamper_signal/cli.py`	security	healthy	`tamper_signal/cli.py`

Label	Layer	Status	Path
`python`	cicd	healthy	`.github/workflows/test.yml`
`node`	cicd	healthy	`.github/workflows/test.yml`
`test`	cicd	healthy	`.github/workflows/release.yml`
`pypi`	cicd	healthy	`.github/workflows/release.yml`
`npm`	cicd	healthy	`.github/workflows/release.yml`

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`tests/test_run_history.py`
`1.3.6.1`	network	healthy	`tamper_signal/anchor.py`

Label	Layer	Status	Path
`gha::test`	cicd	healthy	`.github/workflows/test.yml`
`gha::release`	cicd	healthy	`.github/workflows/release.yml`

Label	Layer	Status	Path
`repobility-clone-wj7y22qu`	software	healthy	`/tmp/repobility-clone-wj7y22qu`

Label	Layer	Status	Path
`port:3000`	network	healthy	`legacy/server.js`

Label	Layer	Status	Path
`NPM_TOKEN`	cicd	healthy	`—`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/b354070d-3369-44d6-9855-036cb1437ec0/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/b354070d-3369-44d6-9855-036cb1437ec0/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

welovejeff/tamper-evident-verification

Complete repo analysis

function 50+

file 50+

directory 44

class 12

auth 7

job 5

service 2

pipeline 2

repo 1

port 1

env_var 1