{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-19e1bef9cb71be7a", "name": "Possibly dead Python function: replacer", "shortDescription": {"text": "Possibly dead Python function: replacer"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f69ec0f5c627ba49", "name": "Possibly dead Python function: parse_file", "shortDescription": {"text": "Possibly dead Python function: parse_file"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f1bbe2a1ce9a2192", "name": "Possibly dead Python function: list_models", "shortDescription": {"text": "Possibly dead Python function: list_models"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fdca402f6a06a162", "name": "Possibly dead Python function: unregister_module", "shortDescription": {"text": "Possibly dead Python function: unregister_module"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7a828b7c2542685d", "name": "Possibly dead Python function: can_suggest", "shortDescription": {"text": "Possibly dead Python function: can_suggest"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9918133b85ce41a7", "name": "Possibly dead Python function: can_monitor", "shortDescription": {"text": "Possibly dead Python function: can_monitor"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4b1087403e04ba86", "name": "Possibly dead Python function: can_execute", "shortDescription": {"text": "Possibly dead Python function: can_execute"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f526a64e278d48b7", "name": "Possibly dead Python function: is_autonomous", "shortDescription": {"text": "Possibly dead Python function: is_autonomous"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f04eecf30163a625", "name": "Possibly dead Python function: find_contact_by_name", "shortDescription": {"text": "Possibly dead Python function: find_contact_by_name"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-90408b838aa7171b", "name": "Possibly dead Python function: find_connections", "shortDescription": {"text": "Possibly dead Python function: find_connections"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a74ad06084ed4395", "name": "Possibly dead Python function: add_link", "shortDescription": {"text": "Possibly dead Python function: add_link"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5e26c118cf770202", "name": "Possibly dead Python function: set_modules", "shortDescription": {"text": "Possibly dead Python function: set_modules"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4440d124f38924c6", "name": "Possibly dead Python function: list_sources", "shortDescription": {"text": "Possibly dead Python function: list_sources"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-11b912ceaafccdde", "name": "Possibly dead Python function: score_information", "shortDescription": {"text": "Possibly dead Python function: score_information"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a14d974f04884416", "name": "Possibly dead Python function: receive_counter", "shortDescription": {"text": "Possibly dead Python function: receive_counter"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ba3abead99ea04b0", "name": "Possibly dead Python function: remove_rule", "shortDescription": {"text": "Possibly dead Python function: remove_rule"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1345d15a5b9ee35f", "name": "Possibly dead Python function: acknowledge", "shortDescription": {"text": "Possibly dead Python function: acknowledge"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f5e077efb3d219b5", "name": "Possibly dead Python function: read_key", "shortDescription": {"text": "Possibly dead Python function: read_key"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4046e7acf66660da", "name": "Possibly dead Python function: read_xml", "shortDescription": {"text": "Possibly dead Python function: read_xml"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-89e0e4af88e06e89", "name": "Possibly dead Python function: workspaces_for", "shortDescription": {"text": "Possibly dead Python function: workspaces_for"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6fe083e9d2074fde", "name": "Icon-only button without accessible name \u2014 nexus/aurora/app.js:4826", "shortDescription": {"text": "Icon-only button without accessible name \u2014 nexus/aurora/app.js:4826"}, "fullDescription": {"text": "A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work.\n\nWhy: P3 in CHECKLIST.md \u2014 icon-only buttons skipped a title.\nRule id: fq.button.no-label"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5b37fafd509d448d", "name": "Privileged port 13 in use", "shortDescription": {"text": "Privileged port 13 in use"}, "fullDescription": {"text": "Port 13 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6b6f8f83d6d38618", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.14-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.14-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9710c8d059e53154", "name": "No frontend routes/components detected", "shortDescription": {"text": "No frontend routes/components detected"}, "fullDescription": {"text": "No React/Vue/Next routes were found. This is fine for backend-only repos."}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ceeecc18ac391524", "name": "Insecure pattern 'direct_innerhtml_assignment' in nexus/dashboard/app.js:135", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in nexus/dashboard/app.js:135"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d32ed9df2d083e9f", "name": "Insecure pattern 'direct_innerhtml_assignment' in nexus/dashboard/index.html:203", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in nexus/dashboard/index.html:203"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ef212954ca714b94", "name": "Insecure pattern 'direct_innerhtml_assignment' in nexus/aurora/app.js:65", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in nexus/aurora/app.js:65"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-27a852ea5b1367dd", "name": "Insecure pattern 'cors_wildcard' in nexus/api/server.py:344", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in nexus/api/server.py:344"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-31eeaec4339bb234", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dc826d0fe369e56f", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cc2141b2090903ad", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a5037ecad3c32cc8", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3808dc79ba3f91b4", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2baa0e1cd02da976", "name": "Very large file: nexus/aurora/app.js (5723 lines)", "shortDescription": {"text": "Very large file: nexus/aurora/app.js (5723 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 10 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 25 placeholder/mock markers across 3 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9f091a9fb1ebc750", "name": "Legacy-named symbol `test_legacy` in tests/modules/test_legacy.py:1", "shortDescription": {"text": "Legacy-named symbol `test_legacy` in tests/modules/test_legacy.py:1"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a985a41aa763b313", "name": "Commented-code block (7 lines) in nexus/agents/launcher.py:19", "shortDescription": {"text": "Commented-code block (7 lines) in nexus/agents/launcher.py:19"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-df621f24a84eee52", "name": "`fetch()` without try/.catch or AbortSignal \u2014 nexus/dashboard/app.js:115", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 nexus/dashboard/app.js:115"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-49e4dc90f2438953", "name": "Commented-code block (5 lines) in nexus/aurora/app.js:253", "shortDescription": {"text": "Commented-code block (5 lines) in nexus/aurora/app.js:253"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fd1f5a77816d3cee", "name": "`fetch()` without try/.catch or AbortSignal \u2014 nexus/aurora/app.js:520", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 nexus/aurora/app.js:520"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-acd3754f434d616e", "name": "Commented-code block (6 lines) in nexus/api/server.py:243", "shortDescription": {"text": "Commented-code block (6 lines) in nexus/api/server.py:243"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4ad190732b196e8f", "name": "Commented-code block (5 lines) in nexus/api/routes/messages.py:21", "shortDescription": {"text": "Commented-code block (5 lines) in nexus/api/routes/messages.py:21"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-124100d4e792ba5c", "name": "Commented-code block (7 lines) in nexus/api/routes/cortex.py:43", "shortDescription": {"text": "Commented-code block (7 lines) in nexus/api/routes/cortex.py:43"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-088a80bf29c1bb20", "name": "Legacy-named symbol `_load_intents_legacy` in nexus/kernel/cortex.py:276", "shortDescription": {"text": "Legacy-named symbol `_load_intents_legacy` in nexus/kernel/cortex.py:276"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-09fb5957434abf08", "name": "Commented-code block (6 lines) in nexus/modules/council.py:826", "shortDescription": {"text": "Commented-code block (6 lines) in nexus/modules/council.py:826"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1d560b9e6791f206", "name": "Commented-code block (5 lines) in nexus/multimodal/audio.py:170", "shortDescription": {"text": "Commented-code block (5 lines) in nexus/multimodal/audio.py:170"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ddb71e749a358c1f", "name": "Legacy-named symbol `model_copy` in nexus/workspaces/manager.py:162", "shortDescription": {"text": "Legacy-named symbol `model_copy` in nexus/workspaces/manager.py:162"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nnexus/agents/catalog.py:from_json, nexus/agents/catalog.py:from_json\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49c98f7cedd9c977", "name": "Near-duplicate function bodies in 4 places", "shortDescription": {"text": "Near-duplicate function bodies in 4 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nnexus/kernel/engram.py:init_db, nexus/kernel/engram.py:init_db, nexus/kernel/engram.py:init_db, nexus/kernel/engram.py:init_db\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-02525d39071dd2c7", "name": "Near-duplicate function bodies in 5 places", "shortDescription": {"text": "Near-duplicate function bodies in 5 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nnexus/tui/panels.py:render, nexus/tui/panels.py:render, nexus/tui/panels.py:render, nexus/tui/panels.py:render\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7b8456f1eb10ed18", "name": "FastAPI POST `upload_file` without auth dependency \u2014 nexus/api/routes/files.py:45", "shortDescription": {"text": "FastAPI POST `upload_file` without auth dependency \u2014 nexus/api/routes/files.py:45"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b9b01bfe53e3c803", "name": "FastAPI POST `run` without auth dependency \u2014 nexus/api/routes/workshop.py:88", "shortDescription": {"text": "FastAPI POST `run` without auth dependency \u2014 nexus/api/routes/workshop.py:88"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a5040598628a2445", "name": "FastAPI DELETE `erase_memory` without auth dependency \u2014 nexus/api/routes/memory.py:62", "shortDescription": {"text": "FastAPI DELETE `erase_memory` without auth dependency \u2014 nexus/api/routes/memory.py:62"}, "fullDescription": {"text": "`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6fe956528a6c0be8", "name": "FastAPI POST `observe` without auth dependency \u2014 nexus/api/routes/mood.py:229", "shortDescription": {"text": "FastAPI POST `observe` without auth dependency \u2014 nexus/api/routes/mood.py:229"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7407740c5f9c3e5d", "name": "FastAPI POST `run_now` without auth dependency \u2014 nexus/api/routes/dreamweaver.py:37", "shortDescription": {"text": "FastAPI POST `run_now` without auth dependency \u2014 nexus/api/routes/dreamweaver.py:37"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-669f536bf2ead5ee", "name": "FastAPI POST `send_message` without auth dependency \u2014 nexus/api/routes/messages.py:89", "shortDescription": {"text": "FastAPI POST `send_message` without auth dependency \u2014 nexus/api/routes/messages.py:89"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1ce789e6e4ee4fff", "name": "FastAPI POST `stream_message` without auth dependency \u2014 nexus/api/routes/messages.py:136", "shortDescription": {"text": "FastAPI POST `stream_message` without auth dependency \u2014 nexus/api/routes/messages.py:136"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3f3c9434512d05ad", "name": "FastAPI POST `submit_feedback` without auth dependency \u2014 nexus/api/routes/messages.py:216", "shortDescription": {"text": "FastAPI POST `submit_feedback` without auth dependency \u2014 nexus/api/routes/messages.py:216"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-54bdff79742fe636", "name": "FastAPI POST `counterfactual` without auth dependency \u2014 nexus/api/routes/chronos.py:32", "shortDescription": {"text": "FastAPI POST `counterfactual` without auth dependency \u2014 nexus/api/routes/chronos.py:32"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1454befcc9ecd319", "name": "FastAPI POST `process_file` without auth dependency \u2014 nexus/api/routes/multimodal.py:55", "shortDescription": {"text": "FastAPI POST `process_file` without auth dependency \u2014 nexus/api/routes/multimodal.py:55"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-24624970c258ee10", "name": "FastAPI POST `describe_file` without auth dependency \u2014 nexus/api/routes/multimodal.py:112", "shortDescription": {"text": "FastAPI POST `describe_file` without auth dependency \u2014 nexus/api/routes/multimodal.py:112"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-84292a7a656d532b", "name": "FastAPI POST `publish_event` without auth dependency \u2014 nexus/api/routes/events.py:93", "shortDescription": {"text": "FastAPI POST `publish_event` without auth dependency \u2014 nexus/api/routes/events.py:93"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b4e0d19e98d20245", "name": "FastAPI POST `decide` without auth dependency \u2014 nexus/api/routes/permissions.py:84", "shortDescription": {"text": "FastAPI POST `decide` without auth dependency \u2014 nexus/api/routes/permissions.py:84"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f5c23f7be515be50", "name": "FastAPI POST `seed` without auth dependency \u2014 nexus/api/routes/permissions.py:206", "shortDescription": {"text": "FastAPI POST `seed` without auth dependency \u2014 nexus/api/routes/permissions.py:206"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-40f8d9551b931953", "name": "FastAPI POST `allow_module` without auth dependency \u2014 nexus/api/routes/modules.py:102", "shortDescription": {"text": "FastAPI POST `allow_module` without auth dependency \u2014 nexus/api/routes/modules.py:102"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-11428e593744aabf", "name": "FastAPI POST `deny_module` without auth dependency \u2014 nexus/api/routes/modules.py:113", "shortDescription": {"text": "FastAPI POST `deny_module` without auth dependency \u2014 nexus/api/routes/modules.py:113"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4680f06b6575a61e", "name": "FastAPI POST `accept_handshake` without auth dependency \u2014 nexus/api/routes/federation.py:135", "shortDescription": {"text": "FastAPI POST `accept_handshake` without auth dependency \u2014 nexus/api/routes/federation.py:135"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-76f6717e8ce2c587", "name": "FastAPI POST `accept_route` without auth dependency \u2014 nexus/api/routes/federation.py:146", "shortDescription": {"text": "FastAPI POST `accept_route` without auth dependency \u2014 nexus/api/routes/federation.py:146"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c6fe1004944445c4", "name": "FastAPI POST `accept_heartbeat` without auth dependency \u2014 nexus/api/routes/federation.py:171", "shortDescription": {"text": "FastAPI POST `accept_heartbeat` without auth dependency \u2014 nexus/api/routes/federation.py:171"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-07ca35106b9ceddf", "name": "FastAPI POST `discover_manual` without auth dependency \u2014 nexus/api/routes/federation.py:207", "shortDescription": {"text": "FastAPI POST `discover_manual` without auth dependency \u2014 nexus/api/routes/federation.py:207"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bcb67e8d0e35a768", "name": "FastAPI POST `discover_local` without auth dependency \u2014 nexus/api/routes/federation.py:220", "shortDescription": {"text": "FastAPI POST `discover_local` without auth dependency \u2014 nexus/api/routes/federation.py:220"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-370362f951b735db", "name": "FastAPI DELETE `remove_peer` without auth dependency \u2014 nexus/api/routes/federation.py:233", "shortDescription": {"text": "FastAPI DELETE `remove_peer` without auth dependency \u2014 nexus/api/routes/federation.py:233"}, "fullDescription": {"text": "`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5fc883a942f581d1", "name": "FastAPI POST `sync_allow` without auth dependency \u2014 nexus/api/routes/federation.py:248", "shortDescription": {"text": "FastAPI POST `sync_allow` without auth dependency \u2014 nexus/api/routes/federation.py:248"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f24b6395e84b15d7", "name": "FastAPI DELETE `sync_revoke` without auth dependency \u2014 nexus/api/routes/federation.py:257", "shortDescription": {"text": "FastAPI DELETE `sync_revoke` without auth dependency \u2014 nexus/api/routes/federation.py:257"}, "fullDescription": {"text": "`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3f37deff0982dc87", "name": "FastAPI POST `sync_inbound_atlas` without auth dependency \u2014 nexus/api/routes/federation.py:272", "shortDescription": {"text": "FastAPI POST `sync_inbound_atlas` without auth dependency \u2014 nexus/api/routes/federation.py:272"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6eb224115a758187", "name": "FastAPI POST `sync_push` without auth dependency \u2014 nexus/api/routes/federation.py:279", "shortDescription": {"text": "FastAPI POST `sync_push` without auth dependency \u2014 nexus/api/routes/federation.py:279"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8a171793b5311d7b", "name": "FastAPI POST `adjust_trust` without auth dependency \u2014 nexus/api/routes/trust.py:67", "shortDescription": {"text": "FastAPI POST `adjust_trust` without auth dependency \u2014 nexus/api/routes/trust.py:67"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-67ff45466e7df46f", "name": "FastAPI POST `launch` without auth dependency \u2014 nexus/api/routes/cortex.py:412", "shortDescription": {"text": "FastAPI POST `launch` without auth dependency \u2014 nexus/api/routes/cortex.py:412"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-70ca4d9354f9fcfa", "name": "FastAPI POST `continue_thread` without auth dependency \u2014 nexus/api/routes/cortex.py:607", "shortDescription": {"text": "FastAPI POST `continue_thread` without auth dependency \u2014 nexus/api/routes/cortex.py:607"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d614ec84f2fb59f1", "name": "FastAPI POST `create_workspace` without auth dependency \u2014 nexus/api/routes/workspaces.py:82", "shortDescription": {"text": "FastAPI POST `create_workspace` without auth dependency \u2014 nexus/api/routes/workspaces.py:82"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-aa5557ef8c99b673", "name": "FastAPI DELETE `delete_workspace` without auth dependency \u2014 nexus/api/routes/workspaces.py:123", "shortDescription": {"text": "FastAPI DELETE `delete_workspace` without auth dependency \u2014 nexus/api/routes/workspaces.py:123"}, "fullDescription": {"text": "`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d60efbf92f3ccf90", "name": "FastAPI POST `switch_workspace` without auth dependency \u2014 nexus/api/routes/workspaces.py:133", "shortDescription": {"text": "FastAPI POST `switch_workspace` without auth dependency \u2014 nexus/api/routes/workspaces.py:133"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c42bfb4e8cd809b6", "name": "FastAPI POST `install` without auth dependency \u2014 nexus/api/routes/installer.py:19", "shortDescription": {"text": "FastAPI POST `install` without auth dependency \u2014 nexus/api/routes/installer.py:19"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7bff04f7bcac12e0", "name": "FastAPI DELETE `remove_provider` without auth dependency \u2014 nexus/api/routes/providers.py:123", "shortDescription": {"text": "FastAPI DELETE `remove_provider` without auth dependency \u2014 nexus/api/routes/providers.py:123"}, "fullDescription": {"text": "`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-06e39f56a0872167", "name": "FastAPI POST `set_default_provider` without auth dependency \u2014 nexus/api/routes/providers.py:158", "shortDescription": {"text": "FastAPI POST `set_default_provider` without auth dependency \u2014 nexus/api/routes/providers.py:158"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a355d76e7e3b6de7", "name": "FastAPI DELETE `unregister_codebase` without auth dependency \u2014 nexus/api/routes/codebases.py:247", "shortDescription": {"text": "FastAPI DELETE `unregister_codebase` without auth dependency \u2014 nexus/api/routes/codebases.py:247"}, "fullDescription": {"text": "`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7b338ca93ac3760c", "name": "FastAPI POST `launch_agent` without auth dependency \u2014 nexus/api/routes/agents.py:210", "shortDescription": {"text": "FastAPI POST `launch_agent` without auth dependency \u2014 nexus/api/routes/agents.py:210"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c3ec577af6a08c1e", "name": "FastAPI POST `stop_agent` without auth dependency \u2014 nexus/api/routes/agents.py:231", "shortDescription": {"text": "FastAPI POST `stop_agent` without auth dependency \u2014 nexus/api/routes/agents.py:231"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-15289653c6f312d9", "name": "FastAPI POST `save_key` without auth dependency \u2014 nexus/api/routes/provider_keys.py:149", "shortDescription": {"text": "FastAPI POST `save_key` without auth dependency \u2014 nexus/api/routes/provider_keys.py:149"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9c2e6c70e5ab8e44", "name": "FastAPI DELETE `delete_key` without auth dependency \u2014 nexus/api/routes/provider_keys.py:182", "shortDescription": {"text": "FastAPI DELETE `delete_key` without auth dependency \u2014 nexus/api/routes/provider_keys.py:182"}, "fullDescription": {"text": "`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9868511a96566a11", "name": "FastAPI POST `offer` without auth dependency \u2014 nexus/api/routes/herald.py:60", "shortDescription": {"text": "FastAPI POST `offer` without auth dependency \u2014 nexus/api/routes/herald.py:60"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e408302d3cb43473", "name": "FastAPI POST `counter` without auth dependency \u2014 nexus/api/routes/herald.py:72", "shortDescription": {"text": "FastAPI POST `counter` without auth dependency \u2014 nexus/api/routes/herald.py:72"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1d36f6b5f19dee26", "name": "FastAPI POST `respond` without auth dependency \u2014 nexus/api/routes/herald.py:86", "shortDescription": {"text": "FastAPI POST `respond` without auth dependency \u2014 nexus/api/routes/herald.py:86"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7a34d1243d0fc228", "name": "FastAPI POST `commit` without auth dependency \u2014 nexus/api/routes/herald.py:100", "shortDescription": {"text": "FastAPI POST `commit` without auth dependency \u2014 nexus/api/routes/herald.py:100"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-61937cefb11958cb", "name": "Dangling fetch: GET /api/chat-history/workspaces (nexus/aurora/app.js:486)", "shortDescription": {"text": "Dangling fetch: GET /api/chat-history/workspaces (nexus/aurora/app.js:486)"}, "fullDescription": {"text": "`nexus/aurora/app.js:486` calls `GET /api/chat-history/workspaces` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/chat-history/workspaces`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0e15fb1df98bd560", "name": "Dangling fetch: GET /api/cortex/modules (nexus/aurora/app.js:520)", "shortDescription": {"text": "Dangling fetch: GET /api/cortex/modules (nexus/aurora/app.js:520)"}, "fullDescription": {"text": "`nexus/aurora/app.js:520` calls `GET /api/cortex/modules` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/cortex/modules`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-071b1a4dd0893777", "name": "Dangling fetch: GET /api/chat-history/recent-agents?limit=12 (nexus/aurora/app.js:539)", "shortDescription": {"text": "Dangling fetch: GET /api/chat-history/recent-agents?limit=12 (nexus/aurora/app.js:539)"}, "fullDescription": {"text": "`nexus/aurora/app.js:539` calls `GET /api/chat-history/recent-agents?limit=12` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/chat-history/recent-agents`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-67a18a192090b6b3", "name": "Dangling fetch: GET /api/agents/running (nexus/aurora/app.js:572)", "shortDescription": {"text": "Dangling fetch: GET /api/agents/running (nexus/aurora/app.js:572)"}, "fullDescription": {"text": "`nexus/aurora/app.js:572` calls `GET /api/agents/running` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/agents/running`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2b07c8b5704cb96b", "name": "Dangling fetch: GET /api/chronicle?source=aegis&event_type=aegis.trust_change&limit=100 (nexus/aurora/app.js:588)", "shortDescription": {"text": "Dangling fetch: GET /api/chronicle?source=aegis&event_type=aegis.trust_change&limit=100 (nexus/aurora/app.js:588)"}, "fullDescription": {"text": "`nexus/aurora/app.js:588` calls `GET /api/chronicle?source=aegis&event_type=aegis.trust_change&limit=100` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/chronicle`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-17d0b8f3522b2b2b", "name": "Dangling fetch: GET /api/permissions/pending (nexus/aurora/app.js:620)", "shortDescription": {"text": "Dangling fetch: GET /api/permissions/pending (nexus/aurora/app.js:620)"}, "fullDescription": {"text": "`nexus/aurora/app.js:620` calls `GET /api/permissions/pending` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/permissions/pending`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d3c94e28320595cf", "name": "Dangling fetch: GET /api/permissions/recent?limit=20 (nexus/aurora/app.js:628)", "shortDescription": {"text": "Dangling fetch: GET /api/permissions/recent?limit=20 (nexus/aurora/app.js:628)"}, "fullDescription": {"text": "`nexus/aurora/app.js:628` calls `GET /api/permissions/recent?limit=20` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/permissions/recent`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-46296608bde850a0", "name": "Dangling fetch: GET /api/chronicle?source=aegis&limit=40 (nexus/aurora/app.js:636)", "shortDescription": {"text": "Dangling fetch: GET /api/chronicle?source=aegis&limit=40 (nexus/aurora/app.js:636)"}, "fullDescription": {"text": "`nexus/aurora/app.js:636` calls `GET /api/chronicle?source=aegis&limit=40` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/chronicle`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5852397764485806", "name": "Dangling fetch: GET /api/mood/current (nexus/aurora/app.js:678)", "shortDescription": {"text": "Dangling fetch: GET /api/mood/current (nexus/aurora/app.js:678)"}, "fullDescription": {"text": "`nexus/aurora/app.js:678` calls `GET /api/mood/current` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/mood/current`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4be26c3c6ce26d44", "name": "Dangling fetch: POST /api/workspaces/${encodeURIComponent(id)}/switch (nexus/aurora/app.js:825)", "shortDescription": {"text": "Dangling fetch: POST /api/workspaces/${encodeURIComponent(id)}/switch (nexus/aurora/app.js:825)"}, "fullDescription": {"text": "`nexus/aurora/app.js:825` calls `POST /api/workspaces/${encodeURIComponent(id)}/switch` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/workspaces/<p>/switch`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9add427c7c09ca75", "name": "Dangling fetch: DELETE /api/workspaces/${encodeURIComponent(id)} (nexus/aurora/app.js:839)", "shortDescription": {"text": "Dangling fetch: DELETE /api/workspaces/${encodeURIComponent(id)} (nexus/aurora/app.js:839)"}, "fullDescription": {"text": "`nexus/aurora/app.js:839` calls `DELETE /api/workspaces/${encodeURIComponent(id)}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/workspaces/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7e7d008a44a82227", "name": "Dangling fetch: GET /api/dreamweaver/brief (nexus/aurora/app.js:1068)", "shortDescription": {"text": "Dangling fetch: GET /api/dreamweaver/brief (nexus/aurora/app.js:1068)"}, "fullDescription": {"text": "`nexus/aurora/app.js:1068` calls `GET /api/dreamweaver/brief` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/dreamweaver/brief`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-766910272a1f0cc1", "name": "Dangling fetch: GET /api/herald (nexus/aurora/app.js:1096)", "shortDescription": {"text": "Dangling fetch: GET /api/herald (nexus/aurora/app.js:1096)"}, "fullDescription": {"text": "`nexus/aurora/app.js:1096` calls `GET /api/herald` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/herald`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f18ccb8ab3341ca2", "name": "Dangling fetch: GET /api/atlas/graph (nexus/aurora/app.js:1140)", "shortDescription": {"text": "Dangling fetch: GET /api/atlas/graph (nexus/aurora/app.js:1140)"}, "fullDescription": {"text": "`nexus/aurora/app.js:1140` calls `GET /api/atlas/graph` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/atlas/graph`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-abd7441158a6670a", "name": "Dangling fetch: GET /api/chronos/timeline?limit=80 (nexus/aurora/app.js:1189)", "shortDescription": {"text": "Dangling fetch: GET /api/chronos/timeline?limit=80 (nexus/aurora/app.js:1189)"}, "fullDescription": {"text": "`nexus/aurora/app.js:1189` calls `GET /api/chronos/timeline?limit=80` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/chronos/timeline`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f60c286ab944cf31", "name": "Dangling fetch: POST /api/chronos/counterfactual (nexus/aurora/app.js:1234)", "shortDescription": {"text": "Dangling fetch: POST /api/chronos/counterfactual (nexus/aurora/app.js:1234)"}, "fullDescription": {"text": "`nexus/aurora/app.js:1234` calls `POST /api/chronos/counterfactual` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/chronos/counterfactual`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b7c0edaf6c4be026", "name": "Dangling fetch: GET /api/workspaces/${encodeURIComponent(workspaceId)} (nexus/aurora/app.js:1482)", "shortDescription": {"text": "Dangling fetch: GET /api/workspaces/${encodeURIComponent(workspaceId)} (nexus/aurora/app.js:1482)"}, "fullDescription": {"text": "`nexus/aurora/app.js:1482` calls `GET /api/workspaces/${encodeURIComponent(workspaceId)}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/workspaces/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-27a602699c02b466", "name": "Dangling fetch: POST /api/trust/oracle/adjust (nexus/aurora/app.js:1722)", "shortDescription": {"text": "Dangling fetch: POST /api/trust/oracle/adjust (nexus/aurora/app.js:1722)"}, "fullDescription": {"text": "`nexus/aurora/app.js:1722` calls `POST /api/trust/oracle/adjust` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/trust/oracle/adjust`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b392880ca5807fad", "name": "Dangling fetch: POST /api/trust/echo/adjust (nexus/aurora/app.js:1726)", "shortDescription": {"text": "Dangling fetch: POST /api/trust/echo/adjust (nexus/aurora/app.js:1726)"}, "fullDescription": {"text": "`nexus/aurora/app.js:1726` calls `POST /api/trust/echo/adjust` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/trust/echo/adjust`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-984fdb963868a959", "name": "Dangling fetch: POST /api/trust/council/adjust (nexus/aurora/app.js:1730)", "shortDescription": {"text": "Dangling fetch: POST /api/trust/council/adjust (nexus/aurora/app.js:1730)"}, "fullDescription": {"text": "`nexus/aurora/app.js:1730` calls `POST /api/trust/council/adjust` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/trust/council/adjust`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e52308dbd8474774", "name": "Dangling fetch: POST /api/permissions/seed (nexus/aurora/app.js:1739)", "shortDescription": {"text": "Dangling fetch: POST /api/permissions/seed (nexus/aurora/app.js:1739)"}, "fullDescription": {"text": "`nexus/aurora/app.js:1739` calls `POST /api/permissions/seed` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/permissions/seed`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a93f9fca5a28a393", "name": "Dangling fetch: POST /api/messages/feedback (nexus/aurora/app.js:1766)", "shortDescription": {"text": "Dangling fetch: POST /api/messages/feedback (nexus/aurora/app.js:1766)"}, "fullDescription": {"text": "`nexus/aurora/app.js:1766` calls `POST /api/messages/feedback` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/messages/feedback`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-72c071464c8b7c6a", "name": "Dangling fetch: POST /api/permissions/decide (nexus/aurora/app.js:1787)", "shortDescription": {"text": "Dangling fetch: POST /api/permissions/decide (nexus/aurora/app.js:1787)"}, "fullDescription": {"text": "`nexus/aurora/app.js:1787` calls `POST /api/permissions/decide` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/permissions/decide`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ba7b93a2ef7a6616", "name": "Dangling fetch: POST /api/files (nexus/aurora/app.js:2047)", "shortDescription": {"text": "Dangling fetch: POST /api/files (nexus/aurora/app.js:2047)"}, "fullDescription": {"text": "`nexus/aurora/app.js:2047` calls `POST /api/files` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/files`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d292af9fcd94b6a6", "name": "Dangling fetch: GET /api/codebases?workspace_id=${encodeURIComponent(workspaceId)} (nexus/aurora/app.js:2147)", "shortDescription": {"text": "Dangling fetch: GET /api/codebases?workspace_id=${encodeURIComponent(workspaceId)} (nexus/aurora/app.js:2147)"}, "fullDescription": {"text": "`nexus/aurora/app.js:2147` calls `GET /api/codebases?workspace_id=${encodeURIComponent(workspaceId)}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/codebases`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-176878f54775640a", "name": "Dangling fetch: POST /api/codebases (nexus/aurora/app.js:2181)", "shortDescription": {"text": "Dangling fetch: POST /api/codebases (nexus/aurora/app.js:2181)"}, "fullDescription": {"text": "`nexus/aurora/app.js:2181` calls `POST /api/codebases` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/codebases`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-109419d878b3cbc8", "name": "Dangling fetch: DELETE /api/codebases/${encodeURIComponent(id)} (nexus/aurora/app.js:2201)", "shortDescription": {"text": "Dangling fetch: DELETE /api/codebases/${encodeURIComponent(id)} (nexus/aurora/app.js:2201)"}, "fullDescription": {"text": "`nexus/aurora/app.js:2201` calls `DELETE /api/codebases/${encodeURIComponent(id)}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/codebases/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d112b0d40f37af00", "name": "Dangling fetch: GET /api/codebases/${encodeURIComponent(id)}/tree?path=${encodeURIComponent(rel)} (nexus/aurora/app.js:2", "shortDescription": {"text": "Dangling fetch: GET /api/codebases/${encodeURIComponent(id)}/tree?path=${encodeURIComponent(rel)} (nexus/aurora/app.js:2220)"}, "fullDescription": {"text": "`nexus/aurora/app.js:2220` calls `GET /api/codebases/${encodeURIComponent(id)}/tree?path=${encodeURIComponent(rel)}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/codebases/<p>/tree`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6cc244c894ecf601", "name": "Dangling fetch: GET /api/codebases/${encodeURIComponent(id)}/file?path=${encodeURIComponent(rel)} (nexus/aurora/app.js:2", "shortDescription": {"text": "Dangling fetch: GET /api/codebases/${encodeURIComponent(id)}/file?path=${encodeURIComponent(rel)} (nexus/aurora/app.js:2245)"}, "fullDescription": {"text": "`nexus/aurora/app.js:2245` calls `GET /api/codebases/${encodeURIComponent(id)}/file?path=${encodeURIComponent(rel)}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/codebases/<p>/file`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ab03e259d16616c0", "name": "Dangling fetch: POST /api/messages (nexus/aurora/app.js:2315)", "shortDescription": {"text": "Dangling fetch: POST /api/messages (nexus/aurora/app.js:2315)"}, "fullDescription": {"text": "`nexus/aurora/app.js:2315` calls `POST /api/messages` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/messages`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ea972a26810d7574", "name": "Dangling fetch: POST /api/messages/stream (nexus/aurora/app.js:2393)", "shortDescription": {"text": "Dangling fetch: POST /api/messages/stream (nexus/aurora/app.js:2393)"}, "fullDescription": {"text": "`nexus/aurora/app.js:2393` calls `POST /api/messages/stream` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/messages/stream`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7514d5dd8c3bf492", "name": "Dangling fetch: POST /api/workspaces/${el.dataset.id}/switch (nexus/aurora/app.js:2515)", "shortDescription": {"text": "Dangling fetch: POST /api/workspaces/${el.dataset.id}/switch (nexus/aurora/app.js:2515)"}, "fullDescription": {"text": "`nexus/aurora/app.js:2515` calls `POST /api/workspaces/${el.dataset.id}/switch` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/workspaces/<p>/switch`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5de7e314d8dd6849", "name": "Dangling fetch: POST /api/agents/${encodeURIComponent(slug)}/launch (nexus/aurora/app.js:2605)", "shortDescription": {"text": "Dangling fetch: POST /api/agents/${encodeURIComponent(slug)}/launch (nexus/aurora/app.js:2605)"}, "fullDescription": {"text": "`nexus/aurora/app.js:2605` calls `POST /api/agents/${encodeURIComponent(slug)}/launch` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/agents/<p>/launch`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cd95dc7ba2f0eabc", "name": "Dangling fetch: POST /api/trust/${encodeURIComponent(mod)}/adjust (nexus/aurora/app.js:2697)", "shortDescription": {"text": "Dangling fetch: POST /api/trust/${encodeURIComponent(mod)}/adjust (nexus/aurora/app.js:2697)"}, "fullDescription": {"text": "`nexus/aurora/app.js:2697` calls `POST /api/trust/${encodeURIComponent(mod)}/adjust` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/trust/<p>/adjust`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cf545597779dc924", "name": "Dangling fetch: GET /api/cortex/agent-search?q=${encodeURIComponent(preselectAgent)}&limit=5 (nexus/aurora/app.js:2798)", "shortDescription": {"text": "Dangling fetch: GET /api/cortex/agent-search?q=${encodeURIComponent(preselectAgent)}&limit=5 (nexus/aurora/app.js:2798)"}, "fullDescription": {"text": "`nexus/aurora/app.js:2798` calls `GET /api/cortex/agent-search?q=${encodeURIComponent(preselectAgent)}&limit=5` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/cortex/agent-search`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4957cd25abf5a50b", "name": "Dangling fetch: POST /api/cortex/continue (nexus/aurora/app.js:3163)", "shortDescription": {"text": "Dangling fetch: POST /api/cortex/continue (nexus/aurora/app.js:3163)"}, "fullDescription": {"text": "`nexus/aurora/app.js:3163` calls `POST /api/cortex/continue` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/cortex/continue`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d3e13a4bec4a18f6", "name": "Dangling fetch: POST /api/messages/feedback (nexus/aurora/app.js:3211)", "shortDescription": {"text": "Dangling fetch: POST /api/messages/feedback (nexus/aurora/app.js:3211)"}, "fullDescription": {"text": "`nexus/aurora/app.js:3211` calls `POST /api/messages/feedback` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/messages/feedback`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-88bd4acb448011a6", "name": "Dangling fetch: GET /api/cortex/agent-search?q=${encodeURIComponent(q)}&limit=24 (nexus/aurora/app.js:3283)", "shortDescription": {"text": "Dangling fetch: GET /api/cortex/agent-search?q=${encodeURIComponent(q)}&limit=24 (nexus/aurora/app.js:3283)"}, "fullDescription": {"text": "`nexus/aurora/app.js:3283` calls `GET /api/cortex/agent-search?q=${encodeURIComponent(q)}&limit=24` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/cortex/agent-search`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3df60392f9324e23", "name": "Dangling fetch: GET /api/cortex/agent-search?q=${encodeURIComponent(q)}&limit=24 (nexus/aurora/app.js:3344)", "shortDescription": {"text": "Dangling fetch: GET /api/cortex/agent-search?q=${encodeURIComponent(q)}&limit=24 (nexus/aurora/app.js:3344)"}, "fullDescription": {"text": "`nexus/aurora/app.js:3344` calls `GET /api/cortex/agent-search?q=${encodeURIComponent(q)}&limit=24` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/cortex/agent-search`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-56e4a363d39e4ee9", "name": "Dangling fetch: POST /api/cortex/launch (nexus/aurora/app.js:3466)", "shortDescription": {"text": "Dangling fetch: POST /api/cortex/launch (nexus/aurora/app.js:3466)"}, "fullDescription": {"text": "`nexus/aurora/app.js:3466` calls `POST /api/cortex/launch` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/cortex/launch`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-690e8443cbcea172", "name": "Dangling fetch: GET /api/providers (nexus/aurora/app.js:3532)", "shortDescription": {"text": "Dangling fetch: GET /api/providers (nexus/aurora/app.js:3532)"}, "fullDescription": {"text": "`nexus/aurora/app.js:3532` calls `GET /api/providers` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/providers`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-706725c016124859", "name": "Dangling fetch: GET /api/providers/keys (nexus/aurora/app.js:3533)", "shortDescription": {"text": "Dangling fetch: GET /api/providers/keys (nexus/aurora/app.js:3533)"}, "fullDescription": {"text": "`nexus/aurora/app.js:3533` calls `GET /api/providers/keys` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/providers/keys`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2b86d76d2aba1713", "name": "Dangling fetch: POST /api/providers/keys (nexus/aurora/app.js:3665)", "shortDescription": {"text": "Dangling fetch: POST /api/providers/keys (nexus/aurora/app.js:3665)"}, "fullDescription": {"text": "`nexus/aurora/app.js:3665` calls `POST /api/providers/keys` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/providers/keys`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cd54ec9316873d22", "name": "Dangling fetch: DELETE /api/providers/keys/${encodeURIComponent(slug)} (nexus/aurora/app.js:3693)", "shortDescription": {"text": "Dangling fetch: DELETE /api/providers/keys/${encodeURIComponent(slug)} (nexus/aurora/app.js:3693)"}, "fullDescription": {"text": "`nexus/aurora/app.js:3693` calls `DELETE /api/providers/keys/${encodeURIComponent(slug)}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/providers/keys/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c68aabb3d2a99e62", "name": "Dangling fetch: GET /api/chat-history/workspaces (nexus/aurora/app.js:3808)", "shortDescription": {"text": "Dangling fetch: GET /api/chat-history/workspaces (nexus/aurora/app.js:3808)"}, "fullDescription": {"text": "`nexus/aurora/app.js:3808` calls `GET /api/chat-history/workspaces` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/chat-history/workspaces`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4beabf1f860586c0", "name": "Dangling fetch: GET /api/chat-history/workspaces/${encodeURIComponent(wsId)}/agents (nexus/aurora/app.js:3858)", "shortDescription": {"text": "Dangling fetch: GET /api/chat-history/workspaces/${encodeURIComponent(wsId)}/agents (nexus/aurora/app.js:3858)"}, "fullDescription": {"text": "`nexus/aurora/app.js:3858` calls `GET /api/chat-history/workspaces/${encodeURIComponent(wsId)}/agents` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/chat-history/workspaces/<p>/agents`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e8243f082147073f", "name": "Dangling fetch: GET /api/system/config (nexus/aurora/app.js:4046)", "shortDescription": {"text": "Dangling fetch: GET /api/system/config (nexus/aurora/app.js:4046)"}, "fullDescription": {"text": "`nexus/aurora/app.js:4046` calls `GET /api/system/config` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/system/config`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-29ddd4ae0495fa21", "name": "Dangling fetch: GET /api/trust (nexus/aurora/app.js:4075)", "shortDescription": {"text": "Dangling fetch: GET /api/trust (nexus/aurora/app.js:4075)"}, "fullDescription": {"text": "`nexus/aurora/app.js:4075` calls `GET /api/trust` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/trust`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-525812ebf11e09b5", "name": "Dangling fetch: GET /api/federation/peers (nexus/aurora/app.js:4102)", "shortDescription": {"text": "Dangling fetch: GET /api/federation/peers (nexus/aurora/app.js:4102)"}, "fullDescription": {"text": "`nexus/aurora/app.js:4102` calls `GET /api/federation/peers` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/federation/peers`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-95d0abbfd0d3f6fc", "name": "Dangling fetch: GET /api/mood/current (nexus/aurora/app.js:4121)", "shortDescription": {"text": "Dangling fetch: GET /api/mood/current (nexus/aurora/app.js:4121)"}, "fullDescription": {"text": "`nexus/aurora/app.js:4121` calls `GET /api/mood/current` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/mood/current`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0fa0420f865cd2ba", "name": "Dangling fetch: GET /api/system/tests (nexus/aurora/app.js:4154)", "shortDescription": {"text": "Dangling fetch: GET /api/system/tests (nexus/aurora/app.js:4154)"}, "fullDescription": {"text": "`nexus/aurora/app.js:4154` calls `GET /api/system/tests` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/system/tests`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-552d695d5d0eb167", "name": "Dangling fetch: POST /api/mood/observe (nexus/aurora/app.js:4288)", "shortDescription": {"text": "Dangling fetch: POST /api/mood/observe (nexus/aurora/app.js:4288)"}, "fullDescription": {"text": "`nexus/aurora/app.js:4288` calls `POST /api/mood/observe` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/mood/observe`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f7c83e54fe7444a0", "name": "Dangling fetch: POST /api/permissions/seed (nexus/aurora/app.js:4601)", "shortDescription": {"text": "Dangling fetch: POST /api/permissions/seed (nexus/aurora/app.js:4601)"}, "fullDescription": {"text": "`nexus/aurora/app.js:4601` calls `POST /api/permissions/seed` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/permissions/seed`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5ceb9d7fefb74da9", "name": "Dangling fetch: GET /api/workshop/languages (nexus/aurora/app.js:4769)", "shortDescription": {"text": "Dangling fetch: GET /api/workshop/languages (nexus/aurora/app.js:4769)"}, "fullDescription": {"text": "`nexus/aurora/app.js:4769` calls `GET /api/workshop/languages` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/workshop/languages`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7fc9925249d40126", "name": "Dangling fetch: POST /api/workshop/run (nexus/aurora/app.js:4852)", "shortDescription": {"text": "Dangling fetch: POST /api/workshop/run (nexus/aurora/app.js:4852)"}, "fullDescription": {"text": "`nexus/aurora/app.js:4852` calls `POST /api/workshop/run` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/workshop/run`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-062d03a7065090b1", "name": "Dangling fetch: POST /api/cortex/continue (nexus/aurora/app.js:4979)", "shortDescription": {"text": "Dangling fetch: POST /api/cortex/continue (nexus/aurora/app.js:4979)"}, "fullDescription": {"text": "`nexus/aurora/app.js:4979` calls `POST /api/cortex/continue` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/cortex/continue`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c476f4502d29a1a0", "name": "Dangling fetch: GET /api/search/reader?url=${encodeURIComponent(hit.url)}&digest=true (nexus/aurora/app.js:5214)", "shortDescription": {"text": "Dangling fetch: GET /api/search/reader?url=${encodeURIComponent(hit.url)}&digest=true (nexus/aurora/app.js:5214)"}, "fullDescription": {"text": "`nexus/aurora/app.js:5214` calls `GET /api/search/reader?url=${encodeURIComponent(hit.url)}&digest=true` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/search/reader`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c1821d44896ef6ea", "name": "Dangling fetch: POST /api/workspaces/${el.dataset.id}/switch (nexus/aurora/app.js:5322)", "shortDescription": {"text": "Dangling fetch: POST /api/workspaces/${el.dataset.id}/switch (nexus/aurora/app.js:5322)"}, "fullDescription": {"text": "`nexus/aurora/app.js:5322` calls `POST /api/workspaces/${el.dataset.id}/switch` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/workspaces/<p>/switch`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f069d468cf47e040", "name": "Dangling fetch: POST /api/workspaces/${encodeURIComponent(id)}/switch (nexus/aurora/app.js:5434)", "shortDescription": {"text": "Dangling fetch: POST /api/workspaces/${encodeURIComponent(id)}/switch (nexus/aurora/app.js:5434)"}, "fullDescription": {"text": "`nexus/aurora/app.js:5434` calls `POST /api/workspaces/${encodeURIComponent(id)}/switch` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/workspaces/<p>/switch`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cd1c80f2a45819ab", "name": "Dangling fetch: GET /api/chronicle?source=aegis&event_type=aegis.trust_change&limit=1 (nexus/aurora/app.js:5646)", "shortDescription": {"text": "Dangling fetch: GET /api/chronicle?source=aegis&event_type=aegis.trust_change&limit=1 (nexus/aurora/app.js:5646)"}, "fullDescription": {"text": "`nexus/aurora/app.js:5646` calls `GET /api/chronicle?source=aegis&event_type=aegis.trust_change&limit=1` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/chronicle`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7a009b1a56794f45", "name": "Unused endpoint: POST /", "shortDescription": {"text": "Unused endpoint: POST /"}, "fullDescription": {"text": "`nexus/api/routes/files.py` declares `POST /` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-40a72f7080f3c204", "name": "Unused endpoint: GET /{workspace_id}", "shortDescription": {"text": "Unused endpoint: GET /{workspace_id}"}, "fullDescription": {"text": "`nexus/api/routes/files.py` declares `GET /{workspace_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f856bc2f70786253", "name": "Unused endpoint: GET /languages", "shortDescription": {"text": "Unused endpoint: GET /languages"}, "fullDescription": {"text": "`nexus/api/routes/workshop.py` declares `GET /languages` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-69a693dfc33637f4", "name": "Unused endpoint: POST /run", "shortDescription": {"text": "Unused endpoint: POST /run"}, "fullDescription": {"text": "`nexus/api/routes/workshop.py` declares `POST /run` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-28d09cee3d92e399", "name": "Unused endpoint: GET /working", "shortDescription": {"text": "Unused endpoint: GET /working"}, "fullDescription": {"text": "`nexus/api/routes/memory.py` declares `GET /working` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72f1fcd622542101", "name": "Unused endpoint: GET /episodic", "shortDescription": {"text": "Unused endpoint: GET /episodic"}, "fullDescription": {"text": "`nexus/api/routes/memory.py` declares `GET /episodic` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9d856c3cc701687c", "name": "Unused endpoint: GET /semantic", "shortDescription": {"text": "Unused endpoint: GET /semantic"}, "fullDescription": {"text": "`nexus/api/routes/memory.py` declares `GET /semantic` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3b30f4c0994a30b4", "name": "Unused endpoint: DELETE /", "shortDescription": {"text": "Unused endpoint: DELETE /"}, "fullDescription": {"text": "`nexus/api/routes/memory.py` declares `DELETE /` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-959e83c0a87139d8", "name": "Unused endpoint: GET /current", "shortDescription": {"text": "Unused endpoint: GET /current"}, "fullDescription": {"text": "`nexus/api/routes/mood.py` declares `GET /current` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9ded26c8fff30981", "name": "Unused endpoint: POST /observe", "shortDescription": {"text": "Unused endpoint: POST /observe"}, "fullDescription": {"text": "`nexus/api/routes/mood.py` declares `POST /observe` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ca4c3a6fd7d717d0", "name": "Unused endpoint: GET /brief", "shortDescription": {"text": "Unused endpoint: GET /brief"}, "fullDescription": {"text": "`nexus/api/routes/dreamweaver.py` declares `GET /brief` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5f4ee569e1562771", "name": "Unused endpoint: POST /stream", "shortDescription": {"text": "Unused endpoint: POST /stream"}, "fullDescription": {"text": "`nexus/api/routes/messages.py` declares `POST /stream` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8f95d7ec49f00406", "name": "Unused endpoint: POST /feedback", "shortDescription": {"text": "Unused endpoint: POST /feedback"}, "fullDescription": {"text": "`nexus/api/routes/messages.py` declares `POST /feedback` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d19d1badda232e3c", "name": "Unused endpoint: GET /pulse-rate", "shortDescription": {"text": "Unused endpoint: GET /pulse-rate"}, "fullDescription": {"text": "`nexus/api/routes/cockpit.py` declares `GET /pulse-rate` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c085d1b690941f8", "name": "Unused endpoint: GET /snapshot", "shortDescription": {"text": "Unused endpoint: GET /snapshot"}, "fullDescription": {"text": "`nexus/api/routes/cockpit.py` declares `GET /snapshot` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bf8708f93c5621bc", "name": "Unused endpoint: GET /timeline", "shortDescription": {"text": "Unused endpoint: GET /timeline"}, "fullDescription": {"text": "`nexus/api/routes/chronos.py` declares `GET /timeline` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-50a01cd9ac89c460", "name": "Unused endpoint: POST /counterfactual", "shortDescription": {"text": "Unused endpoint: POST /counterfactual"}, "fullDescription": {"text": "`nexus/api/routes/chronos.py` declares `POST /counterfactual` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fd278a3c91aa5b3c", "name": "Unused endpoint: POST /process", "shortDescription": {"text": "Unused endpoint: POST /process"}, "fullDescription": {"text": "`nexus/api/routes/multimodal.py` declares `POST /process` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9558568720c343c6", "name": "Unused endpoint: GET /formats", "shortDescription": {"text": "Unused endpoint: GET /formats"}, "fullDescription": {"text": "`nexus/api/routes/multimodal.py` declares `GET /formats` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3f48cfd44f91d8a8", "name": "Unused endpoint: POST /describe", "shortDescription": {"text": "Unused endpoint: POST /describe"}, "fullDescription": {"text": "`nexus/api/routes/multimodal.py` declares `POST /describe` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e86f9903f210b752", "name": "Unused endpoint: GET /recent-agents", "shortDescription": {"text": "Unused endpoint: GET /recent-agents"}, "fullDescription": {"text": "`nexus/api/routes/chat_history.py` declares `GET /recent-agents` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-858a176bbe6ee3b8", "name": "Unused endpoint: GET /workspaces/{workspace_id}/agents", "shortDescription": {"text": "Unused endpoint: GET /workspaces/{workspace_id}/agents"}, "fullDescription": {"text": "`nexus/api/routes/chat_history.py` declares `GET /workspaces/{workspace_id}/agents` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5bcd33df980602c0", "name": "Unused endpoint: GET /workspaces/{workspace_id}/agents/{module}/chats", "shortDescription": {"text": "Unused endpoint: GET /workspaces/{workspace_id}/agents/{module}/chats"}, "fullDescription": {"text": "`nexus/api/routes/chat_history.py` declares `GET /workspaces/{workspace_id}/agents/{module}/chats` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4982dbfd71045a81", "name": "Unused endpoint: GET /topics", "shortDescription": {"text": "Unused endpoint: GET /topics"}, "fullDescription": {"text": "`nexus/api/routes/events.py` declares `GET /topics` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c2bfe4416b42315f", "name": "Unused endpoint: POST /publish", "shortDescription": {"text": "Unused endpoint: POST /publish"}, "fullDescription": {"text": "`nexus/api/routes/events.py` declares `POST /publish` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9de4cecd0e235584", "name": "Unused endpoint: GET /pending", "shortDescription": {"text": "Unused endpoint: GET /pending"}, "fullDescription": {"text": "`nexus/api/routes/permissions.py` declares `GET /pending` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-050023c4cc2f9d01", "name": "Unused endpoint: POST /decide", "shortDescription": {"text": "Unused endpoint: POST /decide"}, "fullDescription": {"text": "`nexus/api/routes/permissions.py` declares `POST /decide` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-955005a6da85f786", "name": "Unused endpoint: GET /recent", "shortDescription": {"text": "Unused endpoint: GET /recent"}, "fullDescription": {"text": "`nexus/api/routes/permissions.py` declares `GET /recent` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f3c4eb974e4684dd", "name": "Unused endpoint: POST /seed", "shortDescription": {"text": "Unused endpoint: POST /seed"}, "fullDescription": {"text": "`nexus/api/routes/permissions.py` declares `POST /seed` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5baa8971ebe192a1", "name": "Unused endpoint: GET /", "shortDescription": {"text": "Unused endpoint: GET /"}, "fullDescription": {"text": "`nexus/api/routes/modules.py` declares `GET /` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a12f85b46010cb53", "name": "Unused endpoint: GET /{name}", "shortDescription": {"text": "Unused endpoint: GET /{name}"}, "fullDescription": {"text": "`nexus/api/routes/modules.py` declares `GET /{name}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4c425b755231d3ff", "name": "Unused endpoint: POST /{name}/allow", "shortDescription": {"text": "Unused endpoint: POST /{name}/allow"}, "fullDescription": {"text": "`nexus/api/routes/modules.py` declares `POST /{name}/allow` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-55aacc893ef1bdc6", "name": "Unused endpoint: POST /{name}/deny", "shortDescription": {"text": "Unused endpoint: POST /{name}/deny"}, "fullDescription": {"text": "`nexus/api/routes/modules.py` declares `POST /{name}/deny` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d79f3ce283730b1a", "name": "Unused endpoint: POST /handshake", "shortDescription": {"text": "Unused endpoint: POST /handshake"}, "fullDescription": {"text": "`nexus/api/routes/federation.py` declares `POST /handshake` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-120d320863420a12", "name": "Unused endpoint: POST /route", "shortDescription": {"text": "Unused endpoint: POST /route"}, "fullDescription": {"text": "`nexus/api/routes/federation.py` declares `POST /route` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d10e5c556d4bcff6", "name": "Unused endpoint: GET /capabilities", "shortDescription": {"text": "Unused endpoint: GET /capabilities"}, "fullDescription": {"text": "`nexus/api/routes/federation.py` declares `GET /capabilities` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5205d6c0bf0b6069", "name": "Unused endpoint: POST /heartbeat", "shortDescription": {"text": "Unused endpoint: POST /heartbeat"}, "fullDescription": {"text": "`nexus/api/routes/federation.py` declares `POST /heartbeat` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c368dede2e2f5cee", "name": "Unused endpoint: GET /peers", "shortDescription": {"text": "Unused endpoint: GET /peers"}, "fullDescription": {"text": "`nexus/api/routes/federation.py` declares `GET /peers` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dce96c906e1e33a2", "name": "Unused endpoint: POST /discover", "shortDescription": {"text": "Unused endpoint: POST /discover"}, "fullDescription": {"text": "`nexus/api/routes/federation.py` declares `POST /discover` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-39138ec669ee41a1", "name": "Unused endpoint: POST /discover/local", "shortDescription": {"text": "Unused endpoint: POST /discover/local"}, "fullDescription": {"text": "`nexus/api/routes/federation.py` declares `POST /discover/local` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d525464ef414ff00", "name": "Unused endpoint: DELETE /peers/{peer_id}", "shortDescription": {"text": "Unused endpoint: DELETE /peers/{peer_id}"}, "fullDescription": {"text": "`nexus/api/routes/federation.py` declares `DELETE /peers/{peer_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cdad061b14bb3082", "name": "Unused endpoint: POST /sync/allow", "shortDescription": {"text": "Unused endpoint: POST /sync/allow"}, "fullDescription": {"text": "`nexus/api/routes/federation.py` declares `POST /sync/allow` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e37b94581d4bf6c3", "name": "Unused endpoint: DELETE /sync/allow/{peer_id}/{workspace_id}", "shortDescription": {"text": "Unused endpoint: DELETE /sync/allow/{peer_id}/{workspace_id}"}, "fullDescription": {"text": "`nexus/api/routes/federation.py` declares `DELETE /sync/allow/{peer_id}/{workspace_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b6a3611f48a61fc1", "name": "Unused endpoint: GET /sync/allowlist", "shortDescription": {"text": "Unused endpoint: GET /sync/allowlist"}, "fullDescription": {"text": "`nexus/api/routes/federation.py` declares `GET /sync/allowlist` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fe0d69d74163573a", "name": "Unused endpoint: POST /sync/atlas", "shortDescription": {"text": "Unused endpoint: POST /sync/atlas"}, "fullDescription": {"text": "`nexus/api/routes/federation.py` declares `POST /sync/atlas` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cc0dc99f893a3e7b", "name": "Unused endpoint: POST /sync/push", "shortDescription": {"text": "Unused endpoint: POST /sync/push"}, "fullDescription": {"text": "`nexus/api/routes/federation.py` declares `POST /sync/push` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f153e1c799edbb37", "name": "Unused endpoint: GET /snapshot/{timestamp:path}", "shortDescription": {"text": "Unused endpoint: GET /snapshot/{timestamp:path}"}, "fullDescription": {"text": "`nexus/api/routes/replay.py` declares `GET /snapshot/{timestamp:path}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8b1b274b32469392", "name": "Unused endpoint: GET /diff", "shortDescription": {"text": "Unused endpoint: GET /diff"}, "fullDescription": {"text": "`nexus/api/routes/replay.py` declares `GET /diff` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-51122717873ce68b", "name": "Unused endpoint: GET /trust/{module}", "shortDescription": {"text": "Unused endpoint: GET /trust/{module}"}, "fullDescription": {"text": "`nexus/api/routes/replay.py` declares `GET /trust/{module}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d289a285027a5e62", "name": "Unused endpoint: GET /routing", "shortDescription": {"text": "Unused endpoint: GET /routing"}, "fullDescription": {"text": "`nexus/api/routes/replay.py` declares `GET /routing` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/24105"}, "properties": {"repository": "AllStreets/ONEXUS", "repoUrl": "https://github.com/AllStreets/ONEXUS", "branch": "main"}, "results": [{"ruleId": "scanner-19e1bef9cb71be7a", "level": "note", "message": {"text": "Possibly dead Python function: replacer"}, "properties": {"repobilityId": "4c6d041d83cc4187", "scanner": "scanner-primary", "fingerprint": "19e1bef9cb71be7a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/workflow/engine.py:305"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f69ec0f5c627ba49", "level": "note", "message": {"text": "Possibly dead Python function: parse_file"}, "properties": {"repobilityId": "5bd5d78f3c5a40c4", "scanner": "scanner-primary", "fingerprint": "f69ec0f5c627ba49", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/workflow/parser.py:24"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f1bbe2a1ce9a2192", "level": "note", "message": {"text": "Possibly dead Python function: list_models"}, "properties": {"repobilityId": "e51c5236028c4e4f", "scanner": "scanner-primary", "fingerprint": "f1bbe2a1ce9a2192", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/inference/ollama.py:136"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fdca402f6a06a162", "level": "note", "message": {"text": "Possibly dead Python function: unregister_module"}, "properties": {"repobilityId": "24409d469a1339d3", "scanner": "scanner-primary", "fingerprint": "fdca402f6a06a162", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/kernel/cortex.py:569"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7a828b7c2542685d", "level": "note", "message": {"text": "Possibly dead Python function: can_suggest"}, "properties": {"repobilityId": "c8a17b0ad3d45bac", "scanner": "scanner-primary", "fingerprint": "7a828b7c2542685d", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/kernel/aegis.py:420"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9918133b85ce41a7", "level": "note", "message": {"text": "Possibly dead Python function: can_monitor"}, "properties": {"repobilityId": "ebe0a9b3fd636526", "scanner": "scanner-primary", "fingerprint": "9918133b85ce41a7", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/kernel/aegis.py:423"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4b1087403e04ba86", "level": "note", "message": {"text": "Possibly dead Python function: can_execute"}, "properties": {"repobilityId": "c650aa9f6803c42a", "scanner": "scanner-primary", "fingerprint": "4b1087403e04ba86", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/kernel/aegis.py:426"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f526a64e278d48b7", "level": "note", "message": {"text": "Possibly dead Python function: is_autonomous"}, "properties": {"repobilityId": "9a88c0848ca2cfa8", "scanner": "scanner-primary", "fingerprint": "f526a64e278d48b7", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/kernel/aegis.py:429"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f04eecf30163a625", "level": "note", "message": {"text": "Possibly dead Python function: find_contact_by_name"}, "properties": {"repobilityId": "fb1d20b19819b915", "scanner": "scanner-primary", "fingerprint": "f04eecf30163a625", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/modules/echo.py:305"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-90408b838aa7171b", "level": "note", "message": {"text": "Possibly dead Python function: find_connections"}, "properties": {"repobilityId": "da642bac59fc476a", "scanner": "scanner-primary", "fingerprint": "90408b838aa7171b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/modules/echo.py:349"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a74ad06084ed4395", "level": "note", "message": {"text": "Possibly dead Python function: add_link"}, "properties": {"repobilityId": "ab889a68b9f3306b", "scanner": "scanner-primary", "fingerprint": "a74ad06084ed4395", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/modules/echo.py:360"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5e26c118cf770202", "level": "note", "message": {"text": "Possibly dead Python function: set_modules"}, "properties": {"repobilityId": "819f4314ab9c335f", "scanner": "scanner-primary", "fingerprint": "5e26c118cf770202", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/modules/council.py:418"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4440d124f38924c6", "level": "note", "message": {"text": "Possibly dead Python function: list_sources"}, "properties": {"repobilityId": "cc068843fa5a25a1", "scanner": "scanner-primary", "fingerprint": "4440d124f38924c6", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/modules/council.py:473"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-11b912ceaafccdde", "level": "note", "message": {"text": "Possibly dead Python function: score_information"}, "properties": {"repobilityId": "34559dbb9ebaffb2", "scanner": "scanner-primary", "fingerprint": "11b912ceaafccdde", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/modules/council.py:476"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a14d974f04884416", "level": "note", "message": {"text": "Possibly dead Python function: receive_counter"}, "properties": {"repobilityId": "ca10f83cbed4c8d9", "scanner": "scanner-primary", "fingerprint": "a14d974f04884416", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/modules/council.py:693"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ba3abead99ea04b0", "level": "note", "message": {"text": "Possibly dead Python function: remove_rule"}, "properties": {"repobilityId": "fa659d574f448f9d", "scanner": "scanner-primary", "fingerprint": "ba3abead99ea04b0", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/modules/oracle.py:133"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1345d15a5b9ee35f", "level": "note", "message": {"text": "Possibly dead Python function: acknowledge"}, "properties": {"repobilityId": "547dae663578d0ef", "scanner": "scanner-primary", "fingerprint": "1345d15a5b9ee35f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/modules/oracle.py:184"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f5e077efb3d219b5", "level": "note", "message": {"text": "Possibly dead Python function: read_key"}, "properties": {"repobilityId": "21bc43a522599c6a", "scanner": "scanner-primary", "fingerprint": "f5e077efb3d219b5", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/tui/input_handler.py:143"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4046e7acf66660da", "level": "note", "message": {"text": "Possibly dead Python function: read_xml"}, "properties": {"repobilityId": "aa4392277532edd4", "scanner": "scanner-primary", "fingerprint": "4046e7acf66660da", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/multimodal/document.py:172"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-89e0e4af88e06e89", "level": "note", "message": {"text": "Possibly dead Python function: workspaces_for"}, "properties": {"repobilityId": "c82f41cc62f3b3d1", "scanner": "scanner-primary", "fingerprint": "89e0e4af88e06e89", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/federation/sync.py:41"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6fe083e9d2074fde", "level": "note", "message": {"text": "Icon-only button without accessible name \u2014 nexus/aurora/app.js:4826"}, "properties": {"repobilityId": "9321f5f0acd4306c", "scanner": "scanner-primary", "fingerprint": "6fe083e9d2074fde", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.button.no-label"]}}, {"ruleId": "scanner-5b37fafd509d448d", "level": "warning", "message": {"text": "Privileged port 13 in use"}, "properties": {"repobilityId": "79d721e4d6f64798", "scanner": "scanner-primary", "fingerprint": "5b37fafd509d448d", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/daily-briefing.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6b6f8f83d6d38618", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.14-slim"}, "properties": {"repobilityId": "d79e1e1302979a23", "scanner": "scanner-primary", "fingerprint": "6b6f8f83d6d38618", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Dockerfile"}, "region": {"startLine": 7}}}]}, {"ruleId": "scanner-9710c8d059e53154", "level": "none", "message": {"text": "No frontend routes/components detected"}, "properties": {"repobilityId": "44ca61485762e494", "scanner": "scanner-primary", "fingerprint": "9710c8d059e53154", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-ceeecc18ac391524", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in nexus/dashboard/app.js:135"}, "properties": {"repobilityId": "6f607a953d168b26", "scanner": "scanner-primary", "fingerprint": "ceeecc18ac391524", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/dashboard/app.js"}, "region": {"startLine": 135}}}]}, {"ruleId": "scanner-d32ed9df2d083e9f", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in nexus/dashboard/index.html:203"}, "properties": {"repobilityId": "10968bfbd5f35ae1", "scanner": "scanner-primary", "fingerprint": "d32ed9df2d083e9f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/dashboard/index.html"}, "region": {"startLine": 203}}}]}, {"ruleId": "scanner-ef212954ca714b94", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in nexus/aurora/app.js:65"}, "properties": {"repobilityId": "bc506ad5f6329766", "scanner": "scanner-primary", "fingerprint": "ef212954ca714b94", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/aurora/app.js"}, "region": {"startLine": 65}}}]}, {"ruleId": "scanner-27a852ea5b1367dd", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in nexus/api/server.py:344"}, "properties": {"repobilityId": "482104e32d5552b8", "scanner": "scanner-primary", "fingerprint": "27a852ea5b1367dd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/server.py"}, "region": {"startLine": 344}}}]}, {"ruleId": "scanner-31eeaec4339bb234", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a2dce077d876fc31", "scanner": "scanner-primary", "fingerprint": "31eeaec4339bb234", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/daily-briefing.yml"}, "region": {"startLine": 21}}}]}, {"ruleId": "scanner-31eeaec4339bb234", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "728e588c7ff5d7b3", "scanner": "scanner-primary", "fingerprint": "31eeaec4339bb234", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/daily-briefing.yml"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-dc826d0fe369e56f", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "1796dddefc144f67", "scanner": "scanner-primary", "fingerprint": "dc826d0fe369e56f", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/daily-briefing.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cc2141b2090903ad", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "97c14f3222e8691d", "scanner": "scanner-primary", "fingerprint": "cc2141b2090903ad", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/nightly-catalog.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a5037ecad3c32cc8", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "c8ca78df3ed25925", "scanner": "scanner-primary", "fingerprint": "a5037ecad3c32cc8", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/deploy-site.yml"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-a5037ecad3c32cc8", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "48fdbe7638504509", "scanner": "scanner-primary", "fingerprint": "a5037ecad3c32cc8", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/deploy-site.yml"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-a5037ecad3c32cc8", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "6082bd58f057a6a4", "scanner": "scanner-primary", "fingerprint": "a5037ecad3c32cc8", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/deploy-site.yml"}, "region": {"startLine": 37}}}]}, {"ruleId": "scanner-a5037ecad3c32cc8", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "dc5221153a1144e7", "scanner": "scanner-primary", "fingerprint": "a5037ecad3c32cc8", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/deploy-site.yml"}, "region": {"startLine": 53}}}]}, {"ruleId": "scanner-a5037ecad3c32cc8", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "dcfe9d7677756547", "scanner": "scanner-primary", "fingerprint": "a5037ecad3c32cc8", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/deploy-site.yml"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-a5037ecad3c32cc8", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "4d31bd7d8435fedc", "scanner": "scanner-primary", "fingerprint": "a5037ecad3c32cc8", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/deploy-site.yml"}, "region": {"startLine": 62}}}]}, {"ruleId": "scanner-3808dc79ba3f91b4", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "e5c492438c53b765", "scanner": "scanner-primary", "fingerprint": "3808dc79ba3f91b4", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/deploy-site.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2baa0e1cd02da976", "level": "note", "message": {"text": "Very large file: nexus/aurora/app.js (5723 lines)"}, "properties": {"repobilityId": "4661d31d8dcc3cd8", "scanner": "scanner-primary", "fingerprint": "2baa0e1cd02da976", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "f670288e00f4adbf", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "6f38e3b475fff243", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "a487bd5ce3f65e5b", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-9f091a9fb1ebc750", "level": "note", "message": {"text": "Legacy-named symbol `test_legacy` in tests/modules/test_legacy.py:1"}, "properties": {"repobilityId": "5903d8872d289bde", "scanner": "scanner-primary", "fingerprint": "9f091a9fb1ebc750", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-a985a41aa763b313", "level": "none", "message": {"text": "Commented-code block (7 lines) in nexus/agents/launcher.py:19"}, "properties": {"repobilityId": "1aaddaa45f8958e8", "scanner": "scanner-primary", "fingerprint": "a985a41aa763b313", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-df621f24a84eee52", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 nexus/dashboard/app.js:115"}, "properties": {"repobilityId": "c1b676374f3d2ae0", "scanner": "scanner-primary", "fingerprint": "df621f24a84eee52", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-49e4dc90f2438953", "level": "none", "message": {"text": "Commented-code block (5 lines) in nexus/aurora/app.js:253"}, "properties": {"repobilityId": "4a2ce8db45fad48b", "scanner": "scanner-primary", "fingerprint": "49e4dc90f2438953", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fd1f5a77816d3cee", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 nexus/aurora/app.js:520"}, "properties": {"repobilityId": "4274ea9a3cc8c9b9", "scanner": "scanner-primary", "fingerprint": "fd1f5a77816d3cee", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-acd3754f434d616e", "level": "none", "message": {"text": "Commented-code block (6 lines) in nexus/api/server.py:243"}, "properties": {"repobilityId": "b5d72fd4899b9fcc", "scanner": "scanner-primary", "fingerprint": "acd3754f434d616e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4ad190732b196e8f", "level": "none", "message": {"text": "Commented-code block (5 lines) in nexus/api/routes/messages.py:21"}, "properties": {"repobilityId": "834a4b15860ba018", "scanner": "scanner-primary", "fingerprint": "4ad190732b196e8f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-124100d4e792ba5c", "level": "none", "message": {"text": "Commented-code block (7 lines) in nexus/api/routes/cortex.py:43"}, "properties": {"repobilityId": "6b812ed2471d559d", "scanner": "scanner-primary", "fingerprint": "124100d4e792ba5c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-088a80bf29c1bb20", "level": "note", "message": {"text": "Legacy-named symbol `_load_intents_legacy` in nexus/kernel/cortex.py:276"}, "properties": {"repobilityId": "c7cc8827f5248cf4", "scanner": "scanner-primary", "fingerprint": "088a80bf29c1bb20", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-09fb5957434abf08", "level": "none", "message": {"text": "Commented-code block (6 lines) in nexus/modules/council.py:826"}, "properties": {"repobilityId": "d2b31ce1ce79f2fa", "scanner": "scanner-primary", "fingerprint": "09fb5957434abf08", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1d560b9e6791f206", "level": "none", "message": {"text": "Commented-code block (5 lines) in nexus/multimodal/audio.py:170"}, "properties": {"repobilityId": "284f03e38e3c9967", "scanner": "scanner-primary", "fingerprint": "1d560b9e6791f206", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ddb71e749a358c1f", "level": "note", "message": {"text": "Legacy-named symbol `model_copy` in nexus/workspaces/manager.py:162"}, "properties": {"repobilityId": "bb2d7d4a20e3dbaf", "scanner": "scanner-primary", "fingerprint": "ddb71e749a358c1f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "7a22ce05e9cd027a", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "deb816393b0c3177", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "912fbc57a101b253", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "f1190c5ee9b4fdf2", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "3f7d92f19c6c282b", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "cfeb97d79cdcad5e", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "1dbb02e83f0c8141", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "0cfa7a05857d87a6", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "468f3cfd3dc6547b", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "ac0f8eaa10a2c516", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "ce77054f58582915", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-02525d39071dd2c7", "level": "note", "message": {"text": "Near-duplicate function bodies in 5 places"}, "properties": {"repobilityId": "97face8fa0763c99", "scanner": "scanner-primary", "fingerprint": "02525d39071dd2c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "abbc09b8e6bc813b", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-02525d39071dd2c7", "level": "note", "message": {"text": "Near-duplicate function bodies in 5 places"}, "properties": {"repobilityId": "31d5065a28ad8fc4", "scanner": "scanner-primary", "fingerprint": "02525d39071dd2c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-02525d39071dd2c7", "level": "note", "message": {"text": "Near-duplicate function bodies in 5 places"}, "properties": {"repobilityId": "09bee9d3f4e9ee49", "scanner": "scanner-primary", "fingerprint": "02525d39071dd2c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-7b8456f1eb10ed18", "level": "error", "message": {"text": "FastAPI POST `upload_file` without auth dependency \u2014 nexus/api/routes/files.py:45"}, "properties": {"repobilityId": "b7e112ba7e82c088", "scanner": "scanner-primary", "fingerprint": "7b8456f1eb10ed18", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/files.py"}, "region": {"startLine": 45}}}]}, {"ruleId": "scanner-b9b01bfe53e3c803", "level": "error", "message": {"text": "FastAPI POST `run` without auth dependency \u2014 nexus/api/routes/workshop.py:88"}, "properties": {"repobilityId": "febc2be88c4f9828", "scanner": "scanner-primary", "fingerprint": "b9b01bfe53e3c803", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/workshop.py"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-a5040598628a2445", "level": "error", "message": {"text": "FastAPI DELETE `erase_memory` without auth dependency \u2014 nexus/api/routes/memory.py:62"}, "properties": {"repobilityId": "b0496dbbe17adb70", "scanner": "scanner-primary", "fingerprint": "a5040598628a2445", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/memory.py"}, "region": {"startLine": 62}}}]}, {"ruleId": "scanner-6fe956528a6c0be8", "level": "error", "message": {"text": "FastAPI POST `observe` without auth dependency \u2014 nexus/api/routes/mood.py:229"}, "properties": {"repobilityId": "4b3e72ee0038d26e", "scanner": "scanner-primary", "fingerprint": "6fe956528a6c0be8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/mood.py"}, "region": {"startLine": 229}}}]}, {"ruleId": "scanner-7407740c5f9c3e5d", "level": "error", "message": {"text": "FastAPI POST `run_now` without auth dependency \u2014 nexus/api/routes/dreamweaver.py:37"}, "properties": {"repobilityId": "dd22f2836dd0371e", "scanner": "scanner-primary", "fingerprint": "7407740c5f9c3e5d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/dreamweaver.py"}, "region": {"startLine": 37}}}]}, {"ruleId": "scanner-669f536bf2ead5ee", "level": "error", "message": {"text": "FastAPI POST `send_message` without auth dependency \u2014 nexus/api/routes/messages.py:89"}, "properties": {"repobilityId": "88329292cd898675", "scanner": "scanner-primary", "fingerprint": "669f536bf2ead5ee", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/messages.py"}, "region": {"startLine": 89}}}]}, {"ruleId": "scanner-1ce789e6e4ee4fff", "level": "error", "message": {"text": "FastAPI POST `stream_message` without auth dependency \u2014 nexus/api/routes/messages.py:136"}, "properties": {"repobilityId": "a9f5d3cc71f73a10", "scanner": "scanner-primary", "fingerprint": "1ce789e6e4ee4fff", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/messages.py"}, "region": {"startLine": 136}}}]}, {"ruleId": "scanner-3f3c9434512d05ad", "level": "error", "message": {"text": "FastAPI POST `submit_feedback` without auth dependency \u2014 nexus/api/routes/messages.py:216"}, "properties": {"repobilityId": "c8a4e6cba9b8c307", "scanner": "scanner-primary", "fingerprint": "3f3c9434512d05ad", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/messages.py"}, "region": {"startLine": 216}}}]}, {"ruleId": "scanner-54bdff79742fe636", "level": "error", "message": {"text": "FastAPI POST `counterfactual` without auth dependency \u2014 nexus/api/routes/chronos.py:32"}, "properties": {"repobilityId": "e655066d77413dc7", "scanner": "scanner-primary", "fingerprint": "54bdff79742fe636", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/chronos.py"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-1454befcc9ecd319", "level": "error", "message": {"text": "FastAPI POST `process_file` without auth dependency \u2014 nexus/api/routes/multimodal.py:55"}, "properties": {"repobilityId": "6c0e6750997d7b40", "scanner": "scanner-primary", "fingerprint": "1454befcc9ecd319", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/multimodal.py"}, "region": {"startLine": 55}}}]}, {"ruleId": "scanner-24624970c258ee10", "level": "error", "message": {"text": "FastAPI POST `describe_file` without auth dependency \u2014 nexus/api/routes/multimodal.py:112"}, "properties": {"repobilityId": "83e343fd1c8a3344", "scanner": "scanner-primary", "fingerprint": "24624970c258ee10", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/multimodal.py"}, "region": {"startLine": 112}}}]}, {"ruleId": "scanner-84292a7a656d532b", "level": "error", "message": {"text": "FastAPI POST `publish_event` without auth dependency \u2014 nexus/api/routes/events.py:93"}, "properties": {"repobilityId": "256d158dfd501846", "scanner": "scanner-primary", "fingerprint": "84292a7a656d532b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/events.py"}, "region": {"startLine": 93}}}]}, {"ruleId": "scanner-b4e0d19e98d20245", "level": "error", "message": {"text": "FastAPI POST `decide` without auth dependency \u2014 nexus/api/routes/permissions.py:84"}, "properties": {"repobilityId": "65d011c568e427db", "scanner": "scanner-primary", "fingerprint": "b4e0d19e98d20245", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/permissions.py"}, "region": {"startLine": 84}}}]}, {"ruleId": "scanner-f5c23f7be515be50", "level": "error", "message": {"text": "FastAPI POST `seed` without auth dependency \u2014 nexus/api/routes/permissions.py:206"}, "properties": {"repobilityId": "9e13a4722d0da045", "scanner": "scanner-primary", "fingerprint": "f5c23f7be515be50", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/permissions.py"}, "region": {"startLine": 206}}}]}, {"ruleId": "scanner-40f8d9551b931953", "level": "error", "message": {"text": "FastAPI POST `allow_module` without auth dependency \u2014 nexus/api/routes/modules.py:102"}, "properties": {"repobilityId": "eb62a9c8e1c46774", "scanner": "scanner-primary", "fingerprint": "40f8d9551b931953", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/modules.py"}, "region": {"startLine": 102}}}]}, {"ruleId": "scanner-11428e593744aabf", "level": "error", "message": {"text": "FastAPI POST `deny_module` without auth dependency \u2014 nexus/api/routes/modules.py:113"}, "properties": {"repobilityId": "fa2453233976f99e", "scanner": "scanner-primary", "fingerprint": "11428e593744aabf", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/modules.py"}, "region": {"startLine": 113}}}]}, {"ruleId": "scanner-4680f06b6575a61e", "level": "error", "message": {"text": "FastAPI POST `accept_handshake` without auth dependency \u2014 nexus/api/routes/federation.py:135"}, "properties": {"repobilityId": "50e021da84391a13", "scanner": "scanner-primary", "fingerprint": "4680f06b6575a61e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/federation.py"}, "region": {"startLine": 135}}}]}, {"ruleId": "scanner-76f6717e8ce2c587", "level": "error", "message": {"text": "FastAPI POST `accept_route` without auth dependency \u2014 nexus/api/routes/federation.py:146"}, "properties": {"repobilityId": "88c706b797b3b64b", "scanner": "scanner-primary", "fingerprint": "76f6717e8ce2c587", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/federation.py"}, "region": {"startLine": 146}}}]}, {"ruleId": "scanner-c6fe1004944445c4", "level": "error", "message": {"text": "FastAPI POST `accept_heartbeat` without auth dependency \u2014 nexus/api/routes/federation.py:171"}, "properties": {"repobilityId": "bd7b14e2f53cdf07", "scanner": "scanner-primary", "fingerprint": "c6fe1004944445c4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/federation.py"}, "region": {"startLine": 171}}}]}, {"ruleId": "scanner-07ca35106b9ceddf", "level": "error", "message": {"text": "FastAPI POST `discover_manual` without auth dependency \u2014 nexus/api/routes/federation.py:207"}, "properties": {"repobilityId": "f4d75aa582cf8f72", "scanner": "scanner-primary", "fingerprint": "07ca35106b9ceddf", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/federation.py"}, "region": {"startLine": 207}}}]}, {"ruleId": "scanner-bcb67e8d0e35a768", "level": "error", "message": {"text": "FastAPI POST `discover_local` without auth dependency \u2014 nexus/api/routes/federation.py:220"}, "properties": {"repobilityId": "8944f4c6a560d822", "scanner": "scanner-primary", "fingerprint": "bcb67e8d0e35a768", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/federation.py"}, "region": {"startLine": 220}}}]}, {"ruleId": "scanner-370362f951b735db", "level": "error", "message": {"text": "FastAPI DELETE `remove_peer` without auth dependency \u2014 nexus/api/routes/federation.py:233"}, "properties": {"repobilityId": "183ca950b1cc4eba", "scanner": "scanner-primary", "fingerprint": "370362f951b735db", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/federation.py"}, "region": {"startLine": 233}}}]}, {"ruleId": "scanner-5fc883a942f581d1", "level": "error", "message": {"text": "FastAPI POST `sync_allow` without auth dependency \u2014 nexus/api/routes/federation.py:248"}, "properties": {"repobilityId": "f1159c137883f29a", "scanner": "scanner-primary", "fingerprint": "5fc883a942f581d1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/federation.py"}, "region": {"startLine": 248}}}]}, {"ruleId": "scanner-f24b6395e84b15d7", "level": "error", "message": {"text": "FastAPI DELETE `sync_revoke` without auth dependency \u2014 nexus/api/routes/federation.py:257"}, "properties": {"repobilityId": "2eb959ba8885655e", "scanner": "scanner-primary", "fingerprint": "f24b6395e84b15d7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/federation.py"}, "region": {"startLine": 257}}}]}, {"ruleId": "scanner-3f37deff0982dc87", "level": "error", "message": {"text": "FastAPI POST `sync_inbound_atlas` without auth dependency \u2014 nexus/api/routes/federation.py:272"}, "properties": {"repobilityId": "aa490ce8dd4d3bc4", "scanner": "scanner-primary", "fingerprint": "3f37deff0982dc87", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/federation.py"}, "region": {"startLine": 272}}}]}, {"ruleId": "scanner-6eb224115a758187", "level": "error", "message": {"text": "FastAPI POST `sync_push` without auth dependency \u2014 nexus/api/routes/federation.py:279"}, "properties": {"repobilityId": "9870d62872e65bda", "scanner": "scanner-primary", "fingerprint": "6eb224115a758187", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/federation.py"}, "region": {"startLine": 279}}}]}, {"ruleId": "scanner-8a171793b5311d7b", "level": "error", "message": {"text": "FastAPI POST `adjust_trust` without auth dependency \u2014 nexus/api/routes/trust.py:67"}, "properties": {"repobilityId": "8b5653e82a02f75c", "scanner": "scanner-primary", "fingerprint": "8a171793b5311d7b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/trust.py"}, "region": {"startLine": 67}}}]}, {"ruleId": "scanner-67ff45466e7df46f", "level": "error", "message": {"text": "FastAPI POST `launch` without auth dependency \u2014 nexus/api/routes/cortex.py:412"}, "properties": {"repobilityId": "4d4cd5d7cd2da268", "scanner": "scanner-primary", "fingerprint": "67ff45466e7df46f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/cortex.py"}, "region": {"startLine": 412}}}]}, {"ruleId": "scanner-70ca4d9354f9fcfa", "level": "error", "message": {"text": "FastAPI POST `continue_thread` without auth dependency \u2014 nexus/api/routes/cortex.py:607"}, "properties": {"repobilityId": "eb5b397437dc3084", "scanner": "scanner-primary", "fingerprint": "70ca4d9354f9fcfa", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/cortex.py"}, "region": {"startLine": 607}}}]}, {"ruleId": "scanner-d614ec84f2fb59f1", "level": "error", "message": {"text": "FastAPI POST `create_workspace` without auth dependency \u2014 nexus/api/routes/workspaces.py:82"}, "properties": {"repobilityId": "518c0795c2f44bd5", "scanner": "scanner-primary", "fingerprint": "d614ec84f2fb59f1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/workspaces.py"}, "region": {"startLine": 82}}}]}, {"ruleId": "scanner-aa5557ef8c99b673", "level": "error", "message": {"text": "FastAPI DELETE `delete_workspace` without auth dependency \u2014 nexus/api/routes/workspaces.py:123"}, "properties": {"repobilityId": "b9c71bcf9362925f", "scanner": "scanner-primary", "fingerprint": "aa5557ef8c99b673", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/workspaces.py"}, "region": {"startLine": 123}}}]}, {"ruleId": "scanner-d60efbf92f3ccf90", "level": "error", "message": {"text": "FastAPI POST `switch_workspace` without auth dependency \u2014 nexus/api/routes/workspaces.py:133"}, "properties": {"repobilityId": "78d906855905489b", "scanner": "scanner-primary", "fingerprint": "d60efbf92f3ccf90", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/workspaces.py"}, "region": {"startLine": 133}}}]}, {"ruleId": "scanner-c42bfb4e8cd809b6", "level": "error", "message": {"text": "FastAPI POST `install` without auth dependency \u2014 nexus/api/routes/installer.py:19"}, "properties": {"repobilityId": "049dfe85f0b14fbc", "scanner": "scanner-primary", "fingerprint": "c42bfb4e8cd809b6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/installer.py"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-7bff04f7bcac12e0", "level": "error", "message": {"text": "FastAPI DELETE `remove_provider` without auth dependency \u2014 nexus/api/routes/providers.py:123"}, "properties": {"repobilityId": "867e92b08ea61ebe", "scanner": "scanner-primary", "fingerprint": "7bff04f7bcac12e0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/providers.py"}, "region": {"startLine": 123}}}]}, {"ruleId": "scanner-06e39f56a0872167", "level": "error", "message": {"text": "FastAPI POST `set_default_provider` without auth dependency \u2014 nexus/api/routes/providers.py:158"}, "properties": {"repobilityId": "2e5f9fa2b6facfd2", "scanner": "scanner-primary", "fingerprint": "06e39f56a0872167", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/providers.py"}, "region": {"startLine": 158}}}]}, {"ruleId": "scanner-a355d76e7e3b6de7", "level": "error", "message": {"text": "FastAPI DELETE `unregister_codebase` without auth dependency \u2014 nexus/api/routes/codebases.py:247"}, "properties": {"repobilityId": "c171446b9fd9702a", "scanner": "scanner-primary", "fingerprint": "a355d76e7e3b6de7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/codebases.py"}, "region": {"startLine": 247}}}]}, {"ruleId": "scanner-7b338ca93ac3760c", "level": "error", "message": {"text": "FastAPI POST `launch_agent` without auth dependency \u2014 nexus/api/routes/agents.py:210"}, "properties": {"repobilityId": "10cddcb244f7fb5e", "scanner": "scanner-primary", "fingerprint": "7b338ca93ac3760c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/agents.py"}, "region": {"startLine": 210}}}]}, {"ruleId": "scanner-c3ec577af6a08c1e", "level": "error", "message": {"text": "FastAPI POST `stop_agent` without auth dependency \u2014 nexus/api/routes/agents.py:231"}, "properties": {"repobilityId": "e6fdd55884000dfc", "scanner": "scanner-primary", "fingerprint": "c3ec577af6a08c1e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/agents.py"}, "region": {"startLine": 231}}}]}, {"ruleId": "scanner-15289653c6f312d9", "level": "error", "message": {"text": "FastAPI POST `save_key` without auth dependency \u2014 nexus/api/routes/provider_keys.py:149"}, "properties": {"repobilityId": "0178958caade172d", "scanner": "scanner-primary", "fingerprint": "15289653c6f312d9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/provider_keys.py"}, "region": {"startLine": 149}}}]}, {"ruleId": "scanner-9c2e6c70e5ab8e44", "level": "error", "message": {"text": "FastAPI DELETE `delete_key` without auth dependency \u2014 nexus/api/routes/provider_keys.py:182"}, "properties": {"repobilityId": "67add372f96d0d6a", "scanner": "scanner-primary", "fingerprint": "9c2e6c70e5ab8e44", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/provider_keys.py"}, "region": {"startLine": 182}}}]}, {"ruleId": "scanner-9868511a96566a11", "level": "error", "message": {"text": "FastAPI POST `offer` without auth dependency \u2014 nexus/api/routes/herald.py:60"}, "properties": {"repobilityId": "6808038cf4fe6327", "scanner": "scanner-primary", "fingerprint": "9868511a96566a11", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/herald.py"}, "region": {"startLine": 60}}}]}, {"ruleId": "scanner-e408302d3cb43473", "level": "error", "message": {"text": "FastAPI POST `counter` without auth dependency \u2014 nexus/api/routes/herald.py:72"}, "properties": {"repobilityId": "a53cadc64cd8e334", "scanner": "scanner-primary", "fingerprint": "e408302d3cb43473", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/herald.py"}, "region": {"startLine": 72}}}]}, {"ruleId": "scanner-1d36f6b5f19dee26", "level": "error", "message": {"text": "FastAPI POST `respond` without auth dependency \u2014 nexus/api/routes/herald.py:86"}, "properties": {"repobilityId": "895080964303178c", "scanner": "scanner-primary", "fingerprint": "1d36f6b5f19dee26", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/herald.py"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-7a34d1243d0fc228", "level": "error", "message": {"text": "FastAPI POST `commit` without auth dependency \u2014 nexus/api/routes/herald.py:100"}, "properties": {"repobilityId": "1b3de4a582d01181", "scanner": "scanner-primary", "fingerprint": "7a34d1243d0fc228", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nexus/api/routes/herald.py"}, "region": {"startLine": 100}}}]}, {"ruleId": "scanner-61937cefb11958cb", "level": "error", "message": {"text": "Dangling fetch: GET /api/chat-history/workspaces (nexus/aurora/app.js:486)"}, "properties": {"repobilityId": "5d79a9bba43ea92f", "scanner": "scanner-primary", "fingerprint": "61937cefb11958cb", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-0e15fb1df98bd560", "level": "error", "message": {"text": "Dangling fetch: GET /api/cortex/modules (nexus/aurora/app.js:520)"}, "properties": {"repobilityId": "ee00359ad020bd92", "scanner": "scanner-primary", "fingerprint": "0e15fb1df98bd560", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-071b1a4dd0893777", "level": "error", "message": {"text": "Dangling fetch: GET /api/chat-history/recent-agents?limit=12 (nexus/aurora/app.js:539)"}, "properties": {"repobilityId": "f7ac2d43c155f069", "scanner": "scanner-primary", "fingerprint": "071b1a4dd0893777", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-67a18a192090b6b3", "level": "error", "message": {"text": "Dangling fetch: GET /api/agents/running (nexus/aurora/app.js:572)"}, "properties": {"repobilityId": "66d1ad0399998e1b", "scanner": "scanner-primary", "fingerprint": "67a18a192090b6b3", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-2b07c8b5704cb96b", "level": "error", "message": {"text": "Dangling fetch: GET /api/chronicle?source=aegis&event_type=aegis.trust_change&limit=100 (nexus/aurora/app.js:588)"}, "properties": {"repobilityId": "30d515c4bf70a60e", "scanner": "scanner-primary", "fingerprint": "2b07c8b5704cb96b", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-17d0b8f3522b2b2b", "level": "error", "message": {"text": "Dangling fetch: GET /api/permissions/pending (nexus/aurora/app.js:620)"}, "properties": {"repobilityId": "69aae94923fefa4c", "scanner": "scanner-primary", "fingerprint": "17d0b8f3522b2b2b", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-d3c94e28320595cf", "level": "error", "message": {"text": "Dangling fetch: GET /api/permissions/recent?limit=20 (nexus/aurora/app.js:628)"}, "properties": {"repobilityId": "0db4ac30ed6325ec", "scanner": "scanner-primary", "fingerprint": "d3c94e28320595cf", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-46296608bde850a0", "level": "error", "message": {"text": "Dangling fetch: GET /api/chronicle?source=aegis&limit=40 (nexus/aurora/app.js:636)"}, "properties": {"repobilityId": "dcde4ab61a5ecffb", "scanner": "scanner-primary", "fingerprint": "46296608bde850a0", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-5852397764485806", "level": "error", "message": {"text": "Dangling fetch: GET /api/mood/current (nexus/aurora/app.js:678)"}, "properties": {"repobilityId": "5b9fd131a86d92e8", "scanner": "scanner-primary", "fingerprint": "5852397764485806", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-4be26c3c6ce26d44", "level": "error", "message": {"text": "Dangling fetch: POST /api/workspaces/${encodeURIComponent(id)}/switch (nexus/aurora/app.js:825)"}, "properties": {"repobilityId": "13bfc885df6dfa3e", "scanner": "scanner-primary", "fingerprint": "4be26c3c6ce26d44", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-9add427c7c09ca75", "level": "error", "message": {"text": "Dangling fetch: DELETE /api/workspaces/${encodeURIComponent(id)} (nexus/aurora/app.js:839)"}, "properties": {"repobilityId": "ce38ed29ef56581c", "scanner": "scanner-primary", "fingerprint": "9add427c7c09ca75", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-7e7d008a44a82227", "level": "error", "message": {"text": "Dangling fetch: GET /api/dreamweaver/brief (nexus/aurora/app.js:1068)"}, "properties": {"repobilityId": "e21ef90c26a65ac4", "scanner": "scanner-primary", "fingerprint": "7e7d008a44a82227", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-766910272a1f0cc1", "level": "error", "message": {"text": "Dangling fetch: GET /api/herald (nexus/aurora/app.js:1096)"}, "properties": {"repobilityId": "b26a61f85139df94", "scanner": "scanner-primary", "fingerprint": "766910272a1f0cc1", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-f18ccb8ab3341ca2", "level": "error", "message": {"text": "Dangling fetch: GET /api/atlas/graph (nexus/aurora/app.js:1140)"}, "properties": {"repobilityId": "e25e7e788a029e62", "scanner": "scanner-primary", "fingerprint": "f18ccb8ab3341ca2", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-abd7441158a6670a", "level": "error", "message": {"text": "Dangling fetch: GET /api/chronos/timeline?limit=80 (nexus/aurora/app.js:1189)"}, "properties": {"repobilityId": "28fbaad36c171257", "scanner": "scanner-primary", "fingerprint": "abd7441158a6670a", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-f60c286ab944cf31", "level": "error", "message": {"text": "Dangling fetch: POST /api/chronos/counterfactual (nexus/aurora/app.js:1234)"}, "properties": {"repobilityId": "0278ad1cf33dd3be", "scanner": "scanner-primary", "fingerprint": "f60c286ab944cf31", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-b7c0edaf6c4be026", "level": "error", "message": {"text": "Dangling fetch: GET /api/workspaces/${encodeURIComponent(workspaceId)} (nexus/aurora/app.js:1482)"}, "properties": {"repobilityId": "e5d354c0f2d41eb2", "scanner": "scanner-primary", "fingerprint": "b7c0edaf6c4be026", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-27a602699c02b466", "level": "error", "message": {"text": "Dangling fetch: POST /api/trust/oracle/adjust (nexus/aurora/app.js:1722)"}, "properties": {"repobilityId": "0f57aaa842a78190", "scanner": "scanner-primary", "fingerprint": "27a602699c02b466", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-b392880ca5807fad", "level": "error", "message": {"text": "Dangling fetch: POST /api/trust/echo/adjust (nexus/aurora/app.js:1726)"}, "properties": {"repobilityId": "95454272aa69295f", "scanner": "scanner-primary", "fingerprint": "b392880ca5807fad", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-984fdb963868a959", "level": "error", "message": {"text": "Dangling fetch: POST /api/trust/council/adjust (nexus/aurora/app.js:1730)"}, "properties": {"repobilityId": "a69d1d2131f5c7dc", "scanner": "scanner-primary", "fingerprint": "984fdb963868a959", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-e52308dbd8474774", "level": "error", "message": {"text": "Dangling fetch: POST /api/permissions/seed (nexus/aurora/app.js:1739)"}, "properties": {"repobilityId": "b764483ff33170e7", "scanner": "scanner-primary", "fingerprint": "e52308dbd8474774", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-a93f9fca5a28a393", "level": "error", "message": {"text": "Dangling fetch: POST /api/messages/feedback (nexus/aurora/app.js:1766)"}, "properties": {"repobilityId": "13ab6307a9cea179", "scanner": "scanner-primary", "fingerprint": "a93f9fca5a28a393", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-72c071464c8b7c6a", "level": "error", "message": {"text": "Dangling fetch: POST /api/permissions/decide (nexus/aurora/app.js:1787)"}, "properties": {"repobilityId": "92be0b0995f49fed", "scanner": "scanner-primary", "fingerprint": "72c071464c8b7c6a", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-ba7b93a2ef7a6616", "level": "error", "message": {"text": "Dangling fetch: POST /api/files (nexus/aurora/app.js:2047)"}, "properties": {"repobilityId": "3149f09befb64472", "scanner": "scanner-primary", "fingerprint": "ba7b93a2ef7a6616", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-d292af9fcd94b6a6", "level": "error", "message": {"text": "Dangling fetch: GET /api/codebases?workspace_id=${encodeURIComponent(workspaceId)} (nexus/aurora/app.js:2147)"}, "properties": {"repobilityId": "e1a994d9dfc02dce", "scanner": "scanner-primary", "fingerprint": "d292af9fcd94b6a6", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-176878f54775640a", "level": "error", "message": {"text": "Dangling fetch: POST /api/codebases (nexus/aurora/app.js:2181)"}, "properties": {"repobilityId": "866615feb3b80f3b", "scanner": "scanner-primary", "fingerprint": "176878f54775640a", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-109419d878b3cbc8", "level": "error", "message": {"text": "Dangling fetch: DELETE /api/codebases/${encodeURIComponent(id)} (nexus/aurora/app.js:2201)"}, "properties": {"repobilityId": "7b3ed325861ef053", "scanner": "scanner-primary", "fingerprint": "109419d878b3cbc8", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-d112b0d40f37af00", "level": "error", "message": {"text": "Dangling fetch: GET /api/codebases/${encodeURIComponent(id)}/tree?path=${encodeURIComponent(rel)} (nexus/aurora/app.js:2220)"}, "properties": {"repobilityId": "e27379472acde9c0", "scanner": "scanner-primary", "fingerprint": "d112b0d40f37af00", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-6cc244c894ecf601", "level": "error", "message": {"text": "Dangling fetch: GET /api/codebases/${encodeURIComponent(id)}/file?path=${encodeURIComponent(rel)} (nexus/aurora/app.js:2245)"}, "properties": {"repobilityId": "5d2c980c1f06b9ab", "scanner": "scanner-primary", "fingerprint": "6cc244c894ecf601", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-ab03e259d16616c0", "level": "error", "message": {"text": "Dangling fetch: POST /api/messages (nexus/aurora/app.js:2315)"}, "properties": {"repobilityId": "43a28807c5c69498", "scanner": "scanner-primary", "fingerprint": "ab03e259d16616c0", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-ea972a26810d7574", "level": "error", "message": {"text": "Dangling fetch: POST /api/messages/stream (nexus/aurora/app.js:2393)"}, "properties": {"repobilityId": "b7dd15cac68b0c65", "scanner": "scanner-primary", "fingerprint": "ea972a26810d7574", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-7514d5dd8c3bf492", "level": "error", "message": {"text": "Dangling fetch: POST /api/workspaces/${el.dataset.id}/switch (nexus/aurora/app.js:2515)"}, "properties": {"repobilityId": "5e497fed35b5c3e6", "scanner": "scanner-primary", "fingerprint": "7514d5dd8c3bf492", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-5de7e314d8dd6849", "level": "error", "message": {"text": "Dangling fetch: POST /api/agents/${encodeURIComponent(slug)}/launch (nexus/aurora/app.js:2605)"}, "properties": {"repobilityId": "667d95e9f330787f", "scanner": "scanner-primary", "fingerprint": "5de7e314d8dd6849", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-cd95dc7ba2f0eabc", "level": "error", "message": {"text": "Dangling fetch: POST /api/trust/${encodeURIComponent(mod)}/adjust (nexus/aurora/app.js:2697)"}, "properties": {"repobilityId": "8de6efd9bb985dcb", "scanner": "scanner-primary", "fingerprint": "cd95dc7ba2f0eabc", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-cf545597779dc924", "level": "error", "message": {"text": "Dangling fetch: GET /api/cortex/agent-search?q=${encodeURIComponent(preselectAgent)}&limit=5 (nexus/aurora/app.js:2798)"}, "properties": {"repobilityId": "4b709a95c8e5f154", "scanner": "scanner-primary", "fingerprint": "cf545597779dc924", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-4957cd25abf5a50b", "level": "error", "message": {"text": "Dangling fetch: POST /api/cortex/continue (nexus/aurora/app.js:3163)"}, "properties": {"repobilityId": "82390a5b4baf9ba6", "scanner": "scanner-primary", "fingerprint": "4957cd25abf5a50b", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-d3e13a4bec4a18f6", "level": "error", "message": {"text": "Dangling fetch: POST /api/messages/feedback (nexus/aurora/app.js:3211)"}, "properties": {"repobilityId": "ab1aba8ef6c8b52c", "scanner": "scanner-primary", "fingerprint": "d3e13a4bec4a18f6", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-88bd4acb448011a6", "level": "error", "message": {"text": "Dangling fetch: GET /api/cortex/agent-search?q=${encodeURIComponent(q)}&limit=24 (nexus/aurora/app.js:3283)"}, "properties": {"repobilityId": "9cdae053069197e5", "scanner": "scanner-primary", "fingerprint": "88bd4acb448011a6", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-3df60392f9324e23", "level": "error", "message": {"text": "Dangling fetch: GET /api/cortex/agent-search?q=${encodeURIComponent(q)}&limit=24 (nexus/aurora/app.js:3344)"}, "properties": {"repobilityId": "008637581d8867b0", "scanner": "scanner-primary", "fingerprint": "3df60392f9324e23", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-56e4a363d39e4ee9", "level": "error", "message": {"text": "Dangling fetch: POST /api/cortex/launch (nexus/aurora/app.js:3466)"}, "properties": {"repobilityId": "1018e896883026d2", "scanner": "scanner-primary", "fingerprint": "56e4a363d39e4ee9", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-690e8443cbcea172", "level": "error", "message": {"text": "Dangling fetch: GET /api/providers (nexus/aurora/app.js:3532)"}, "properties": {"repobilityId": "3257cd668eb7ace7", "scanner": "scanner-primary", "fingerprint": "690e8443cbcea172", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-706725c016124859", "level": "error", "message": {"text": "Dangling fetch: GET /api/providers/keys (nexus/aurora/app.js:3533)"}, "properties": {"repobilityId": "7f8a841c75c11f04", "scanner": "scanner-primary", "fingerprint": "706725c016124859", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-2b86d76d2aba1713", "level": "error", "message": {"text": "Dangling fetch: POST /api/providers/keys (nexus/aurora/app.js:3665)"}, "properties": {"repobilityId": "ab6dbb51ea57361a", "scanner": "scanner-primary", "fingerprint": "2b86d76d2aba1713", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-cd54ec9316873d22", "level": "error", "message": {"text": "Dangling fetch: DELETE /api/providers/keys/${encodeURIComponent(slug)} (nexus/aurora/app.js:3693)"}, "properties": {"repobilityId": "438ff0f49775e09d", "scanner": "scanner-primary", "fingerprint": "cd54ec9316873d22", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-c68aabb3d2a99e62", "level": "error", "message": {"text": "Dangling fetch: GET /api/chat-history/workspaces (nexus/aurora/app.js:3808)"}, "properties": {"repobilityId": "a63e38dde97dd516", "scanner": "scanner-primary", "fingerprint": "c68aabb3d2a99e62", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-4beabf1f860586c0", "level": "error", "message": {"text": "Dangling fetch: GET /api/chat-history/workspaces/${encodeURIComponent(wsId)}/agents (nexus/aurora/app.js:3858)"}, "properties": {"repobilityId": "3832759fba846b2e", "scanner": "scanner-primary", "fingerprint": "4beabf1f860586c0", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-e8243f082147073f", "level": "error", "message": {"text": "Dangling fetch: GET /api/system/config (nexus/aurora/app.js:4046)"}, "properties": {"repobilityId": "00e1d8651ea85dff", "scanner": "scanner-primary", "fingerprint": "e8243f082147073f", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-29ddd4ae0495fa21", "level": "error", "message": {"text": "Dangling fetch: GET /api/trust (nexus/aurora/app.js:4075)"}, "properties": {"repobilityId": "5b3e7080dfea24fe", "scanner": "scanner-primary", "fingerprint": "29ddd4ae0495fa21", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-525812ebf11e09b5", "level": "error", "message": {"text": "Dangling fetch: GET /api/federation/peers (nexus/aurora/app.js:4102)"}, "properties": {"repobilityId": "0ef0ae3d22f35237", "scanner": "scanner-primary", "fingerprint": "525812ebf11e09b5", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-95d0abbfd0d3f6fc", "level": "error", "message": {"text": "Dangling fetch: GET /api/mood/current (nexus/aurora/app.js:4121)"}, "properties": {"repobilityId": "841bac2af13fc70d", "scanner": "scanner-primary", "fingerprint": "95d0abbfd0d3f6fc", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-0fa0420f865cd2ba", "level": "error", "message": {"text": "Dangling fetch: GET /api/system/tests (nexus/aurora/app.js:4154)"}, "properties": {"repobilityId": "dd60f6a7bafab127", "scanner": "scanner-primary", "fingerprint": "0fa0420f865cd2ba", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-552d695d5d0eb167", "level": "error", "message": {"text": "Dangling fetch: POST /api/mood/observe (nexus/aurora/app.js:4288)"}, "properties": {"repobilityId": "197e144b022e017e", "scanner": "scanner-primary", "fingerprint": "552d695d5d0eb167", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-f7c83e54fe7444a0", "level": "error", "message": {"text": "Dangling fetch: POST /api/permissions/seed (nexus/aurora/app.js:4601)"}, "properties": {"repobilityId": "c9c0f930ed52f931", "scanner": "scanner-primary", "fingerprint": "f7c83e54fe7444a0", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-5ceb9d7fefb74da9", "level": "error", "message": {"text": "Dangling fetch: GET /api/workshop/languages (nexus/aurora/app.js:4769)"}, "properties": {"repobilityId": "8d73a84cde33df1c", "scanner": "scanner-primary", "fingerprint": "5ceb9d7fefb74da9", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-7fc9925249d40126", "level": "error", "message": {"text": "Dangling fetch: POST /api/workshop/run (nexus/aurora/app.js:4852)"}, "properties": {"repobilityId": "f804ce369444b286", "scanner": "scanner-primary", "fingerprint": "7fc9925249d40126", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-062d03a7065090b1", "level": "error", "message": {"text": "Dangling fetch: POST /api/cortex/continue (nexus/aurora/app.js:4979)"}, "properties": {"repobilityId": "40d5a064ed392ab5", "scanner": "scanner-primary", "fingerprint": "062d03a7065090b1", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-c476f4502d29a1a0", "level": "error", "message": {"text": "Dangling fetch: GET /api/search/reader?url=${encodeURIComponent(hit.url)}&digest=true (nexus/aurora/app.js:5214)"}, "properties": {"repobilityId": "f16556559a35bac5", "scanner": "scanner-primary", "fingerprint": "c476f4502d29a1a0", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-c1821d44896ef6ea", "level": "error", "message": {"text": "Dangling fetch: POST /api/workspaces/${el.dataset.id}/switch (nexus/aurora/app.js:5322)"}, "properties": {"repobilityId": "a85b90c7694dc608", "scanner": "scanner-primary", "fingerprint": "c1821d44896ef6ea", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-f069d468cf47e040", "level": "error", "message": {"text": "Dangling fetch: POST /api/workspaces/${encodeURIComponent(id)}/switch (nexus/aurora/app.js:5434)"}, "properties": {"repobilityId": "fe9383e98ca40e13", "scanner": "scanner-primary", "fingerprint": "f069d468cf47e040", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-cd1c80f2a45819ab", "level": "error", "message": {"text": "Dangling fetch: GET /api/chronicle?source=aegis&event_type=aegis.trust_change&limit=1 (nexus/aurora/app.js:5646)"}, "properties": {"repobilityId": "6c254a7e7096170e", "scanner": "scanner-primary", "fingerprint": "cd1c80f2a45819ab", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-7a009b1a56794f45", "level": "note", "message": {"text": "Unused endpoint: POST /"}, "properties": {"repobilityId": "4da8afee16f76e35", "scanner": "scanner-primary", "fingerprint": "7a009b1a56794f45", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-40a72f7080f3c204", "level": "note", "message": {"text": "Unused endpoint: GET /{workspace_id}"}, "properties": {"repobilityId": "fae9c15805a589ba", "scanner": "scanner-primary", "fingerprint": "40a72f7080f3c204", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-f856bc2f70786253", "level": "note", "message": {"text": "Unused endpoint: GET /languages"}, "properties": {"repobilityId": "aaf4278db40fd7ec", "scanner": "scanner-primary", "fingerprint": "f856bc2f70786253", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-69a693dfc33637f4", "level": "note", "message": {"text": "Unused endpoint: POST /run"}, "properties": {"repobilityId": "e2033a0d6984fc08", "scanner": "scanner-primary", "fingerprint": "69a693dfc33637f4", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-28d09cee3d92e399", "level": "note", "message": {"text": "Unused endpoint: GET /working"}, "properties": {"repobilityId": "6e3cd1d13f768504", "scanner": "scanner-primary", "fingerprint": "28d09cee3d92e399", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-72f1fcd622542101", "level": "note", "message": {"text": "Unused endpoint: GET /episodic"}, "properties": {"repobilityId": "a9942fa3dd38dc87", "scanner": "scanner-primary", "fingerprint": "72f1fcd622542101", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-9d856c3cc701687c", "level": "note", "message": {"text": "Unused endpoint: GET /semantic"}, "properties": {"repobilityId": "1326f634c6f8e197", "scanner": "scanner-primary", "fingerprint": "9d856c3cc701687c", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-3b30f4c0994a30b4", "level": "note", "message": {"text": "Unused endpoint: DELETE /"}, "properties": {"repobilityId": "d4c5dd21370bd762", "scanner": "scanner-primary", "fingerprint": "3b30f4c0994a30b4", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-959e83c0a87139d8", "level": "note", "message": {"text": "Unused endpoint: GET /current"}, "properties": {"repobilityId": "c3dd34c29fc1ef3a", "scanner": "scanner-primary", "fingerprint": "959e83c0a87139d8", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-9ded26c8fff30981", "level": "note", "message": {"text": "Unused endpoint: POST /observe"}, "properties": {"repobilityId": "c6aa7a6119dc32ad", "scanner": "scanner-primary", "fingerprint": "9ded26c8fff30981", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-ca4c3a6fd7d717d0", "level": "note", "message": {"text": "Unused endpoint: GET /brief"}, "properties": {"repobilityId": "ae7616f0df4555d2", "scanner": "scanner-primary", "fingerprint": "ca4c3a6fd7d717d0", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-5f4ee569e1562771", "level": "note", "message": {"text": "Unused endpoint: POST /stream"}, "properties": {"repobilityId": "9cd9fba53fe73991", "scanner": "scanner-primary", "fingerprint": "5f4ee569e1562771", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8f95d7ec49f00406", "level": "note", "message": {"text": "Unused endpoint: POST /feedback"}, "properties": {"repobilityId": "b88d515d8b40613f", "scanner": "scanner-primary", "fingerprint": "8f95d7ec49f00406", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-d19d1badda232e3c", "level": "note", "message": {"text": "Unused endpoint: GET /pulse-rate"}, "properties": {"repobilityId": "4c885cd86a57ce4f", "scanner": "scanner-primary", "fingerprint": "d19d1badda232e3c", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-2c085d1b690941f8", "level": "note", "message": {"text": "Unused endpoint: GET /snapshot"}, "properties": {"repobilityId": "202d5d8a8d2d3d86", "scanner": "scanner-primary", "fingerprint": "2c085d1b690941f8", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-bf8708f93c5621bc", "level": "note", "message": {"text": "Unused endpoint: GET /timeline"}, "properties": {"repobilityId": "486553e0d2e3f257", "scanner": "scanner-primary", "fingerprint": "bf8708f93c5621bc", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-50a01cd9ac89c460", "level": "note", "message": {"text": "Unused endpoint: POST /counterfactual"}, "properties": {"repobilityId": "10fe0196af8503e7", "scanner": "scanner-primary", "fingerprint": "50a01cd9ac89c460", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-fd278a3c91aa5b3c", "level": "note", "message": {"text": "Unused endpoint: POST /process"}, "properties": {"repobilityId": "0d532ac71a195b93", "scanner": "scanner-primary", "fingerprint": "fd278a3c91aa5b3c", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-9558568720c343c6", "level": "note", "message": {"text": "Unused endpoint: GET /formats"}, "properties": {"repobilityId": "fb3272deb636daf3", "scanner": "scanner-primary", "fingerprint": "9558568720c343c6", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-3f48cfd44f91d8a8", "level": "note", "message": {"text": "Unused endpoint: POST /describe"}, "properties": {"repobilityId": "853160175303123c", "scanner": "scanner-primary", "fingerprint": "3f48cfd44f91d8a8", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e86f9903f210b752", "level": "note", "message": {"text": "Unused endpoint: GET /recent-agents"}, "properties": {"repobilityId": "7965384bce89e110", "scanner": "scanner-primary", "fingerprint": "e86f9903f210b752", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-858a176bbe6ee3b8", "level": "note", "message": {"text": "Unused endpoint: GET /workspaces/{workspace_id}/agents"}, "properties": {"repobilityId": "d1e8ed96dc2d736f", "scanner": "scanner-primary", "fingerprint": "858a176bbe6ee3b8", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-5bcd33df980602c0", "level": "note", "message": {"text": "Unused endpoint: GET /workspaces/{workspace_id}/agents/{module}/chats"}, "properties": {"repobilityId": "dafb170cdd50f048", "scanner": "scanner-primary", "fingerprint": "5bcd33df980602c0", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-4982dbfd71045a81", "level": "note", "message": {"text": "Unused endpoint: GET /topics"}, "properties": {"repobilityId": "0093d0d2928bd53c", "scanner": "scanner-primary", "fingerprint": "4982dbfd71045a81", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-c2bfe4416b42315f", "level": "note", "message": {"text": "Unused endpoint: POST /publish"}, "properties": {"repobilityId": "f43b1f0e99da4ea4", "scanner": "scanner-primary", "fingerprint": "c2bfe4416b42315f", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-9de4cecd0e235584", "level": "note", "message": {"text": "Unused endpoint: GET /pending"}, "properties": {"repobilityId": "a964042854f736ba", "scanner": "scanner-primary", "fingerprint": "9de4cecd0e235584", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-050023c4cc2f9d01", "level": "note", "message": {"text": "Unused endpoint: POST /decide"}, "properties": {"repobilityId": "7d4dea5bf6a5d9df", "scanner": "scanner-primary", "fingerprint": "050023c4cc2f9d01", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-955005a6da85f786", "level": "note", "message": {"text": "Unused endpoint: GET /recent"}, "properties": {"repobilityId": "11f621ed6b6dbf4c", "scanner": "scanner-primary", "fingerprint": "955005a6da85f786", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-f3c4eb974e4684dd", "level": "note", "message": {"text": "Unused endpoint: POST /seed"}, "properties": {"repobilityId": "e93bcf4cef493e88", "scanner": "scanner-primary", "fingerprint": "f3c4eb974e4684dd", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-5baa8971ebe192a1", "level": "note", "message": {"text": "Unused endpoint: GET /"}, "properties": {"repobilityId": "0057184a9826f8bf", "scanner": "scanner-primary", "fingerprint": "5baa8971ebe192a1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-a12f85b46010cb53", "level": "note", "message": {"text": "Unused endpoint: GET /{name}"}, "properties": {"repobilityId": "e2b76fe10d64496c", "scanner": "scanner-primary", "fingerprint": "a12f85b46010cb53", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-4c425b755231d3ff", "level": "note", "message": {"text": "Unused endpoint: POST /{name}/allow"}, "properties": {"repobilityId": "69aaf9c56515a1fb", "scanner": "scanner-primary", "fingerprint": "4c425b755231d3ff", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-55aacc893ef1bdc6", "level": "note", "message": {"text": "Unused endpoint: POST /{name}/deny"}, "properties": {"repobilityId": "548f79fca55e1b89", "scanner": "scanner-primary", "fingerprint": "55aacc893ef1bdc6", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-d79f3ce283730b1a", "level": "note", "message": {"text": "Unused endpoint: POST /handshake"}, "properties": {"repobilityId": "c2ca517b0fc9e0d2", "scanner": "scanner-primary", "fingerprint": "d79f3ce283730b1a", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-120d320863420a12", "level": "note", "message": {"text": "Unused endpoint: POST /route"}, "properties": {"repobilityId": "6e0e86263d7b553f", "scanner": "scanner-primary", "fingerprint": "120d320863420a12", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-d10e5c556d4bcff6", "level": "note", "message": {"text": "Unused endpoint: GET /capabilities"}, "properties": {"repobilityId": "53528b58f7c84d9b", "scanner": "scanner-primary", "fingerprint": "d10e5c556d4bcff6", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-5205d6c0bf0b6069", "level": "note", "message": {"text": "Unused endpoint: POST /heartbeat"}, "properties": {"repobilityId": "33b1e418be5e53cd", "scanner": "scanner-primary", "fingerprint": "5205d6c0bf0b6069", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-c368dede2e2f5cee", "level": "note", "message": {"text": "Unused endpoint: GET /peers"}, "properties": {"repobilityId": "4b15e45b5e84a8ce", "scanner": "scanner-primary", "fingerprint": "c368dede2e2f5cee", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-dce96c906e1e33a2", "level": "note", "message": {"text": "Unused endpoint: POST /discover"}, "properties": {"repobilityId": "7f21f18f82ebb301", "scanner": "scanner-primary", "fingerprint": "dce96c906e1e33a2", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-39138ec669ee41a1", "level": "note", "message": {"text": "Unused endpoint: POST /discover/local"}, "properties": {"repobilityId": "ad0eb6dd9c178548", "scanner": "scanner-primary", "fingerprint": "39138ec669ee41a1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-d525464ef414ff00", "level": "note", "message": {"text": "Unused endpoint: DELETE /peers/{peer_id}"}, "properties": {"repobilityId": "6b326ba5d9dfd530", "scanner": "scanner-primary", "fingerprint": "d525464ef414ff00", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-cdad061b14bb3082", "level": "note", "message": {"text": "Unused endpoint: POST /sync/allow"}, "properties": {"repobilityId": "977473910368cf4d", "scanner": "scanner-primary", "fingerprint": "cdad061b14bb3082", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e37b94581d4bf6c3", "level": "note", "message": {"text": "Unused endpoint: DELETE /sync/allow/{peer_id}/{workspace_id}"}, "properties": {"repobilityId": "dada570b52966c71", "scanner": "scanner-primary", "fingerprint": "e37b94581d4bf6c3", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-b6a3611f48a61fc1", "level": "note", "message": {"text": "Unused endpoint: GET /sync/allowlist"}, "properties": {"repobilityId": "f0abd9ca21992c30", "scanner": "scanner-primary", "fingerprint": "b6a3611f48a61fc1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-fe0d69d74163573a", "level": "note", "message": {"text": "Unused endpoint: POST /sync/atlas"}, "properties": {"repobilityId": "4d257b80099164ac", "scanner": "scanner-primary", "fingerprint": "fe0d69d74163573a", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-cc0dc99f893a3e7b", "level": "note", "message": {"text": "Unused endpoint: POST /sync/push"}, "properties": {"repobilityId": "80f6ae51ab4dcd99", "scanner": "scanner-primary", "fingerprint": "cc0dc99f893a3e7b", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-f153e1c799edbb37", "level": "note", "message": {"text": "Unused endpoint: GET /snapshot/{timestamp:path}"}, "properties": {"repobilityId": "e4c03a260f6d327f", "scanner": "scanner-primary", "fingerprint": "f153e1c799edbb37", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8b1b274b32469392", "level": "note", "message": {"text": "Unused endpoint: GET /diff"}, "properties": {"repobilityId": "b478adeaeceb18d6", "scanner": "scanner-primary", "fingerprint": "8b1b274b32469392", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-51122717873ce68b", "level": "note", "message": {"text": "Unused endpoint: GET /trust/{module}"}, "properties": {"repobilityId": "bd8e014f93d003d3", "scanner": "scanner-primary", "fingerprint": "51122717873ce68b", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-d289a285027a5e62", "level": "note", "message": {"text": "Unused endpoint: GET /routing"}, "properties": {"repobilityId": "3d70f60cae73428a", "scanner": "scanner-primary", "fingerprint": "d289a285027a5e62", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}]}]}