{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-5d7c722bc444a15c", "name": "Possibly dead Python function: score_one", "shortDescription": {"text": "Possibly dead Python function: score_one"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7a3c025296d1782f", "name": "Possibly dead Python function: check_server", "shortDescription": {"text": "Possibly dead Python function: check_server"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3c751671ae95eda3", "name": "Possibly dead Python function: ui_track2", "shortDescription": {"text": "Possibly dead Python function: ui_track2"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3b594bc7843de51e", "name": "Possibly dead Python function: ui_track1", "shortDescription": {"text": "Possibly dead Python function: ui_track1"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-89fb85a9101c8473", "name": "Possibly dead Python function: ui_track3", "shortDescription": {"text": "Possibly dead Python function: ui_track3"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-623c152ac9ad3c6f", "name": "Possibly dead Python function: ui_batch", "shortDescription": {"text": "Possibly dead Python function: ui_batch"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ef24f0e28325eb38", "name": "Possibly dead Python function: work", "shortDescription": {"text": "Possibly dead Python function: work"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7358aeacc1c9e2aa", "name": "Possibly dead Python function: initialize", "shortDescription": {"text": "Possibly dead Python function: initialize"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-50375edf82a754a3", "name": "Possibly dead Python function: execute", "shortDescription": {"text": "Possibly dead Python function: execute"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4bd91ff81f9ff7f3", "name": "Possibly dead Python function: finalize", "shortDescription": {"text": "Possibly dead Python function: finalize"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fc609c89fa2fe3f4", "name": "Possibly dead Python function: initialize", "shortDescription": {"text": "Possibly dead Python function: initialize"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9887d439651f688a", "name": "Possibly dead Python function: execute", "shortDescription": {"text": "Possibly dead Python function: execute"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fee2e6419f9f1a71", "name": "Possibly dead Python function: finalize", "shortDescription": {"text": "Possibly dead Python function: finalize"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-526298e12b064bb7", "name": "Possibly dead Python function: initialize", "shortDescription": {"text": "Possibly dead Python function: initialize"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1945e2c490bc4eaf", "name": "Possibly dead Python function: forward", "shortDescription": {"text": "Possibly dead Python function: forward"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8a09469d3d87b4a0", "name": "Possibly dead Python function: execute", "shortDescription": {"text": "Possibly dead Python function: execute"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-11b639202d38ba65", "name": "Possibly dead Python function: finalize", "shortDescription": {"text": "Possibly dead Python function: finalize"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9022fc2274688316", "name": "Possibly dead Python function: t1_predict", "shortDescription": {"text": "Possibly dead Python function: t1_predict"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-44aabf6c723ea20f", "name": "Possibly dead Python function: t3_predict", "shortDescription": {"text": "Possibly dead Python function: t3_predict"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7cb632bef4d39367", "name": "Possibly dead Python function: forward", "shortDescription": {"text": "Possibly dead Python function: forward"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8f6bc0f389e63dcf", "name": "Possibly dead Python function: t2_predict", "shortDescription": {"text": "Possibly dead Python function: t2_predict"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1d60526d2540921b", "name": "Possibly dead Python function: forward", "shortDescription": {"text": "Possibly dead Python function: forward"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0396d260de5cc5c5", "name": "Possibly dead Python function: t1_predict", "shortDescription": {"text": "Possibly dead Python function: t1_predict"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-be50bdde590c55be", "name": "Possibly dead Python function: t3_predict", "shortDescription": {"text": "Possibly dead Python function: t3_predict"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b32f35df2b1ecb40", "name": "Possibly dead Python function: forward", "shortDescription": {"text": "Possibly dead Python function: forward"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e1f749de507b7474", "name": "Possibly dead Python function: t2_predict", "shortDescription": {"text": "Possibly dead Python function: t2_predict"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-65cac6aec28ecbfb", "name": "Possibly dead Python function: forward", "shortDescription": {"text": "Possibly dead Python function: forward"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a7fe7a3488a43657", "name": "Possibly dead Python function: collate", "shortDescription": {"text": "Possibly dead Python function: collate"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c06c27e09800bd75", "name": "Possibly dead Python function: forward", "shortDescription": {"text": "Possibly dead Python function: forward"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a646b36aec97df2f", "name": "Possibly dead Python function: forward", "shortDescription": {"text": "Possibly dead Python function: forward"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cd1851b442fad549", "name": "Dockerfile runs as root: triton_service/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: triton_service/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-057aa19cd2fd4ca7", "name": "Docker base image is tag-pinned but not digest-pinned: nvcr.io/nvidia/tritonserver:24.08-py3", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: nvcr.io/nvidia/tritonserver:24.08-py3"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7f208d1d9cc976fa", "name": "Dockerfile runs as root: triton_service/gateway/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: triton_service/gateway/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-57b8ff9f16493bfb", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.10-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.10-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fa01b24723a808b3", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.10-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.10-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-aa5acaa49eb8315b", "name": "Containers defined but no K8s/orchestration manifest found", "shortDescription": {"text": "Containers defined but no K8s/orchestration manifest found"}, "fullDescription": {"text": "Repo has Dockerfiles/compose but no Kubernetes/Nomad manifests. If the target deployment is K8s, the manifests may live in a separate ops repo."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9710c8d059e53154", "name": "No frontend routes/components detected", "shortDescription": {"text": "No frontend routes/components detected"}, "fullDescription": {"text": "No React/Vue/Next routes were found. This is fine for backend-only repos."}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8b9f7818cf5fd63f", "name": "Insecure pattern 'subprocess_shell_true' in huggingface/space/app.py:107", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in huggingface/space/app.py:107"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-48913f8ae46591e9", "name": "Insecure pattern 'dangerous_innerhtml' in slide/voicemos2026_slides.html:889", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in slide/voicemos2026_slides.html:889"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ecc9aeba0b6ec95c", "name": "Insecure pattern 'direct_innerhtml_assignment' in slide/voicemos2026_slides.html:874", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in slide/voicemos2026_slides.html:874"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7233dba0008fdfef", "name": "Insecure pattern 'direct_outerhtml_assignment' in slide/voicemos2026_slides.html:874", "shortDescription": {"text": "Insecure pattern 'direct_outerhtml_assignment' in slide/voicemos2026_slides.html:874"}, "fullDescription": {"text": "Found a known-risky pattern (direct_outerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b91b1b2fd9a6927a", "name": "Insecure pattern 'insert_adjacent_html' in slide/voicemos2026_slides.html:889", "shortDescription": {"text": "Insecure pattern 'insert_adjacent_html' in slide/voicemos2026_slides.html:889"}, "fullDescription": {"text": "Found a known-risky pattern (insert_adjacent_html). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-282468b65553c546", "name": "Insecure pattern 'cors_wildcard' in api_service/app/main.py:26", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in api_service/app/main.py:26"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c3ab3d665860c77f", "name": "Insecure pattern 'subprocess_shell_true' in api_service/app/tracks/track1.py:20", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in api_service/app/tracks/track1.py:20"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-84f62deaad00d005", "name": "Insecure pattern 'subprocess_shell_true' in api_service/app/tracks/track3.py:22", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in api_service/app/tracks/track3.py:22"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1ed66ddfc2c65e6d", "name": "Insecure pattern 'subprocess_shell_true' in kaggle_baseline/demo_all_tracks_gradio_pipeline.py:61", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in kaggle_baseline/demo_all_tracks_gradio_pipeline.py:61"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-843cb74bc5dfc896", "name": "Insecure pattern 'subprocess_shell_true' in kaggle_baseline/track1/demo_track1_gradio_pipeline.py:34", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in kaggle_baseline/track1/demo_track1_gradio_pipeline.py:34"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-45632ca82503fb49", "name": "Insecure pattern 'subprocess_shell_true' in kaggle_baseline/track2/track2_prepare_data_pipeline.py:48", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in kaggle_baseline/track2/track2_prepare_data_pipeline.py:48"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6372cebde0220094", "name": "No auth library detected", "shortDescription": {"text": "No auth library detected"}, "fullDescription": {"text": "The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). The repo has auth/admin/session surface indicators, so auth may live in custom code, in a separate service, or be missing."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4601e3ad3bb28677", "name": "No CI/CD pipelines detected", "shortDescription": {"text": "No CI/CD pipelines detected"}, "fullDescription": {"text": "No GitHub Actions, GitLab CI, or CircleCI configs found. Without CI you can't gate deploys on tests/lints."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6893a6c8b0861585", "name": "Very low test-to-source ratio", "shortDescription": {"text": "Very low test-to-source ratio"}, "fullDescription": {"text": "2 test file(s) for 45 source file(s) (ratio 0.04). Consider adding integration or unit tests for critical paths."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-be5b6ac28962a744", "name": "42 TODO/FIXME markers", "shortDescription": {"text": "42 TODO/FIXME markers"}, "fullDescription": {"text": "High count of TODO/FIXME/HACK markers \u2014 track them as issues so they're not forgotten."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-141b30a41e03817b", "name": "No license file detected", "shortDescription": {"text": "No license file detected"}, "fullDescription": {"text": "No LICENSE/COPYING/NOTICE file was found. Generated repositories often omit licensing, which blocks reuse and automated intake."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 558 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b9088664ace7f748", "name": "Composite production-readiness gap", "shortDescription": {"text": "Composite production-readiness gap"}, "fullDescription": {"text": "Multiple low-cost hardening controls are missing together: license, ci. Opus verification showed these co-occurring gaps are a better readiness signal than reading each flag in isolation."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-749d4bc1bd66df5f", "name": "Agent instructions exist but release-hardening basics are missing", "shortDescription": {"text": "Agent instructions exist but release-hardening basics are missing"}, "fullDescription": {"text": "AI-coder instruction files were found, but the repo is missing license, ci. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-122f91b7f2906dc4", "name": "Agent authority lacks a verifier contract: .claude/settings.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/settings.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-35ce86f02b147d27", "name": "Network/subprocess call without timeout or try/except \u2014 triton_service/model_repository/track3_sim/1/model.py:37", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 triton_service/model_repository/track3_sim/1/model.py:37"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1406703dac02e046", "name": "Network/subprocess call without timeout or try/except \u2014 triton_service/model_repository/track1_acr/1/model.py:33", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 triton_service/model_repository/track1_acr/1/model.py:33"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bf6b82d898a6ca70", "name": "Network/subprocess call without timeout or try/except \u2014 triton_service/model_repository/track2_emotion/1/model.py:66", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 triton_service/model_repository/track2_emotion/1/model.py:66"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-665b2d3cdcd745ed", "name": "Network/subprocess call without timeout or try/except \u2014 huggingface/space/app.py:161", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 huggingface/space/app.py:161"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-aab0e414376029c7", "name": "Network/subprocess call without timeout or try/except \u2014 api_service/app/tracks/track2.py:53", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 api_service/app/tracks/track2.py:53"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-65d5150f230a82c5", "name": "Network/subprocess call without timeout or try/except \u2014 api_service/app/tracks/track3.py:21", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 api_service/app/tracks/track3.py:21"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4d2301c1fedb6193", "name": "Commented-code block (6 lines) in kaggle_baseline/demo_run_from_hf_pipeline.py:54", "shortDescription": {"text": "Commented-code block (6 lines) in kaggle_baseline/demo_run_from_hf_pipeline.py:54"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cee1f6a90b81f935", "name": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/demo_run_from_hf_pipeline.py:24", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/demo_run_from_hf_pipeline.py:24"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-668e22b8439e1eb6", "name": "Commented-code block (5 lines) in kaggle_baseline/demo_all_tracks_gradio_pipeline.py:12", "shortDescription": {"text": "Commented-code block (5 lines) in kaggle_baseline/demo_all_tracks_gradio_pipeline.py:12"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2bfbf2ec5b735668", "name": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/demo_all_tracks_gradio_pipeline.py:27", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/demo_all_tracks_gradio_pipeline.py:27"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-79392a7f0ef82b1c", "name": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track1/demo_track1_gradio_pipeline.py:33", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track1/demo_track1_gradio_pipeline.py:33"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e6213fd79fedb963", "name": "Commented-code block (6 lines) in kaggle_baseline/track1/track1_baseline_pipeline.py:59", "shortDescription": {"text": "Commented-code block (6 lines) in kaggle_baseline/track1/track1_baseline_pipeline.py:59"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bb582884db04b0d9", "name": "Commented-code block (5 lines) in kaggle_baseline/track3/track3_baseline_pipeline.py:13", "shortDescription": {"text": "Commented-code block (5 lines) in kaggle_baseline/track3/track3_baseline_pipeline.py:13"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9e3110159ef6e24c", "name": "Commented-code block (6 lines) in kaggle_baseline/track2/exp07_fusion_qmos_pipeline.py:12", "shortDescription": {"text": "Commented-code block (6 lines) in kaggle_baseline/track2/exp07_fusion_qmos_pipeline.py:12"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ca24d124bcf854af", "name": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp07_fusion_qmos_pipeline.py:102", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp07_fusion_qmos_pipeline.py:102"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-269442c7ee1da9ec", "name": "Commented-code block (5 lines) in kaggle_baseline/track2/exp03_emos_sailer_pipeline.py:12", "shortDescription": {"text": "Commented-code block (5 lines) in kaggle_baseline/track2/exp03_emos_sailer_pipeline.py:12"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-59f96f35a60bdb13", "name": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp03_emos_sailer_pipeline.py:89", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp03_emos_sailer_pipeline.py:89"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-007634f8f6b4dcfb", "name": "Commented-code block (5 lines) in kaggle_baseline/track2/exp08b_finetune_resume_pipeline.py:12", "shortDescription": {"text": "Commented-code block (5 lines) in kaggle_baseline/track2/exp08b_finetune_resume_pipeline.py:12"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6bd8abaeeaece99c", "name": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp08b_finetune_resume_pipeline.py:108", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp08b_finetune_resume_pipeline.py:108"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-76f3cef23e0ba1e1", "name": "Commented-code block (6 lines) in kaggle_baseline/track2/exp13_finetune_qmos_pipeline.py:9", "shortDescription": {"text": "Commented-code block (6 lines) in kaggle_baseline/track2/exp13_finetune_qmos_pipeline.py:9"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-aca11969e8f3b377", "name": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp13_finetune_qmos_pipeline.py:141", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp13_finetune_qmos_pipeline.py:141"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0d64ece0183d299d", "name": "Commented-code block (13 lines) in kaggle_baseline/track2/exp08_finetune_emotion_pipeline.py:7", "shortDescription": {"text": "Commented-code block (13 lines) in kaggle_baseline/track2/exp08_finetune_emotion_pipeline.py:7"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e0e182360902bcb6", "name": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp08_finetune_emotion_pipeline.py:116", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp08_finetune_emotion_pipeline.py:116"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6426758cdfdbe095", "name": "Commented-code block (6 lines) in kaggle_baseline/track2/exp15_wavlm_mamba_emotion_pipeline.py:9", "shortDescription": {"text": "Commented-code block (6 lines) in kaggle_baseline/track2/exp15_wavlm_mamba_emotion_pipeline.py:9"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6051b76da3fc1535", "name": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp15_wavlm_mamba_emotion_pipeline.py:183", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp15_wavlm_mamba_emotion_pipeline.py:183"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b133171601f6ce21", "name": "Commented-code block (11 lines) in kaggle_baseline/track2/exp05_vad_audeering_pipeline.py:8", "shortDescription": {"text": "Commented-code block (11 lines) in kaggle_baseline/track2/exp05_vad_audeering_pipeline.py:8"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-596ce58dd1e230fc", "name": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp05_vad_audeering_pipeline.py:73", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp05_vad_audeering_pipeline.py:73"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f8d76e1dc3a889f0", "name": "Commented-code block (6 lines) in kaggle_baseline/track2/track2_baseline_pipeline.py:6", "shortDescription": {"text": "Commented-code block (6 lines) in kaggle_baseline/track2/track2_baseline_pipeline.py:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fc6c7adcf3dc6320", "name": "Commented-code block (8 lines) in kaggle_baseline/track2/exp06_qmos_train_pipeline.py:8", "shortDescription": {"text": "Commented-code block (8 lines) in kaggle_baseline/track2/exp06_qmos_train_pipeline.py:8"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-13fa4d821a9cc623", "name": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp06_qmos_train_pipeline.py:87", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp06_qmos_train_pipeline.py:87"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-99e2c8e7afca2fe5", "name": "Commented-code block (7 lines) in kaggle_baseline/track2/exp11_finetune_joint_pipeline.py:7", "shortDescription": {"text": "Commented-code block (7 lines) in kaggle_baseline/track2/exp11_finetune_joint_pipeline.py:7"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-708b4bf823bdadcc", "name": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp11_finetune_joint_pipeline.py:111", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp11_finetune_joint_pipeline.py:111"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-986a2b78c7bbf061", "name": "Commented-code block (5 lines) in kaggle_baseline/track2/exp12_wavlm_scratch_pipeline.py:7", "shortDescription": {"text": "Commented-code block (5 lines) in kaggle_baseline/track2/exp12_wavlm_scratch_pipeline.py:7"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-866230a4d49f5a86", "name": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp12_wavlm_scratch_pipeline.py:108", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp12_wavlm_scratch_pipeline.py:108"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-631246b7581f4cd6", "name": "Commented-code block (6 lines) in kaggle_baseline/track2/exp04_fusion_pipeline.py:18", "shortDescription": {"text": "Commented-code block (6 lines) in kaggle_baseline/track2/exp04_fusion_pipeline.py:18"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4759744b6de7ea16", "name": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp04_fusion_pipeline.py:115", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp04_fusion_pipeline.py:115"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fbc16bfc468e160a", "name": "Legacy-named symbol `p_v1` in kaggle_baseline/track2/exp09a_qmos_utmosv2_probe_pipeline.py:167", "shortDescription": {"text": "Legacy-named symbol `p_v1` in kaggle_baseline/track2/exp09a_qmos_utmosv2_probe_pipeline.py:167"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7b81600fbd8a46ec", "name": "Commented-code block (5 lines) in kaggle_baseline/track2/exp09a_qmos_utmosv2_probe_pipeline.py:8", "shortDescription": {"text": "Commented-code block (5 lines) in kaggle_baseline/track2/exp09a_qmos_utmosv2_probe_pipeline.py:8"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5d4e90e3ad2fb424", "name": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp09a_qmos_utmosv2_probe_pipeline.py:61", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp09a_qmos_utmosv2_probe_pipeline.py:61"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-44a999d868979902", "name": "Commented-code block (8 lines) in kaggle_baseline/track2/track2_prepare_data_pipeline.py:10", "shortDescription": {"text": "Commented-code block (8 lines) in kaggle_baseline/track2/track2_prepare_data_pipeline.py:10"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6acab6d8e96b1f52", "name": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/track2_prepare_data_pipeline.py:48", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/track2_prepare_data_pipeline.py:48"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-579d10ab63ed8638", "name": "Commented-code block (6 lines) in kaggle_baseline/track2/exp10_finetune_audeering_pipeline.py:8", "shortDescription": {"text": "Commented-code block (6 lines) in kaggle_baseline/track2/exp10_finetune_audeering_pipeline.py:8"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6bdc36f8da039529", "name": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp10_finetune_audeering_pipeline.py:92", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp10_finetune_audeering_pipeline.py:92"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e84965bd8821dc55", "name": "Commented-code block (5 lines) in kaggle_baseline/track2/exp14_mamba_head_pipeline.py:9", "shortDescription": {"text": "Commented-code block (5 lines) in kaggle_baseline/track2/exp14_mamba_head_pipeline.py:9"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b768892c2322b569", "name": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp14_mamba_head_pipeline.py:116", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp14_mamba_head_pipeline.py:116"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1b1dcd15c3457d33", "name": "Commented-code block (7 lines) in kaggle_baseline/track2/demo_track2_emotion_gradio_pipeline.py:425", "shortDescription": {"text": "Commented-code block (7 lines) in kaggle_baseline/track2/demo_track2_emotion_gradio_pipeline.py:425"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1deaba83d483ffd5", "name": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/demo_track2_emotion_gradio_pipeline.py:98", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/demo_track2_emotion_gradio_pipeline.py:98"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dc7d580a2cd5f18f", "name": "Commented-code block (6 lines) in kaggle_baseline/track2/exp16_llm_judge_pipeline.py:10", "shortDescription": {"text": "Commented-code block (6 lines) in kaggle_baseline/track2/exp16_llm_judge_pipeline.py:10"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-54716b5be81a9e22", "name": "Commented-code block (5 lines) in kaggle_baseline/track2/exp02_train_emos_pipeline.py:11", "shortDescription": {"text": "Commented-code block (5 lines) in kaggle_baseline/track2/exp02_train_emos_pipeline.py:11"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-35e0cf597c657e3c", "name": "Commented-code block (5 lines) in kaggle_baseline/track2/exp15_predict_pipeline.py:13", "shortDescription": {"text": "Commented-code block (5 lines) in kaggle_baseline/track2/exp15_predict_pipeline.py:13"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3e1ebf53e8109fab", "name": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp15_predict_pipeline.py:146", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp15_predict_pipeline.py:146"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f808a4ef3e1071fb", "name": "14 env vars used in code but missing from .env.example", "shortDescription": {"text": "14 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `API_BASE`, `GATEWAY_URL`, `GRADIO_SERVER_PORT`, `HF_TOKEN`, `LOCUST_EMOTION`, `MODELS_DIR`, `SAMPLE_DIR`, `SPACE_ID` + 6 more. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-46969939caf8120b", "name": "Near-duplicate function bodies in 9 places", "shortDescription": {"text": "Near-duplicate function bodies in 9 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\ntriton_service/model_repository/track2_emotion/1/model.py:find_hf_backbone, huggingface/space/app.py:find_hf_backbone, api_service/app/tracks/track2.py:find_hf_backbone, kaggle_baseline/demo_all_tracks_gradio_pipeline.py:find_hf_backbone\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nhuggingface/space/app.py:gauges_row, huggingface/space/app.py:gauge\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0027e313ade46c8f", "name": "Near-duplicate function bodies in 7 places", "shortDescription": {"text": "Near-duplicate function bodies in 7 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nhuggingface/space/app.py:masked_mean, api_service/app/tracks/track2.py:masked_mean, kaggle_baseline/demo_all_tracks_gradio_pipeline.py:masked_mean, kaggle_baseline/track2/exp08b_finetune_resume_pipeline.py:masked_mean\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-be46ea126aa5d8dc", "name": "Near-duplicate function bodies in 3 places", "shortDescription": {"text": "Near-duplicate function bodies in 3 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nhuggingface/space/app.py:audeering_feat, api_service/app/tracks/track2.py:audeering_feat, kaggle_baseline/demo_all_tracks_gradio_pipeline.py:audeering_feat\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-02525d39071dd2c7", "name": "Near-duplicate function bodies in 5 places", "shortDescription": {"text": "Near-duplicate function bodies in 5 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nhuggingface/space/app.py:onehot_target, api_service/app/tracks/track2.py:onehot_target, kaggle_baseline/demo_all_tracks_gradio_pipeline.py:onehot_target, kaggle_baseline/track2/exp13_finetune_qmos_pipeline.py:onehot_target\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-380b7cb95b387b9c", "name": "Near-duplicate function bodies in 11 places", "shortDescription": {"text": "Near-duplicate function bodies in 11 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nkaggle_baseline/track2/exp07_fusion_qmos_pipeline.py:norm_emotion, kaggle_baseline/track2/exp08b_finetune_resume_pipeline.py:norm_emotion, kaggle_baseline/track2/exp13_finetune_qmos_pipeline.py:norm_emotion, kaggle_baseline/track2/exp08_finetune_emotion_pipeline.py:norm_emotion\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49c98f7cedd9c977", "name": "Near-duplicate function bodies in 4 places", "shortDescription": {"text": "Near-duplicate function bodies in 4 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nkaggle_baseline/track2/exp07_fusion_qmos_pipeline.py:pip_install, kaggle_baseline/track2/exp06_qmos_train_pipeline.py:pip_install, kaggle_baseline/track2/exp04_fusion_pipeline.py:pip_install, kaggle_baseline/track2/exp14_mamba_head_pipeline.py:pip_install\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-76a2f6818267a9a8", "name": "Near-duplicate function bodies in 8 places", "shortDescription": {"text": "Near-duplicate function bodies in 8 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nkaggle_baseline/track2/exp07_fusion_qmos_pipeline.py:parse_emocat_votes, kaggle_baseline/track2/exp08b_finetune_resume_pipeline.py:parse_emocat_votes, kaggle_baseline/track2/exp08_finetune_emotion_pipeline.py:parse_emocat_votes, kaggle_baseline/track2/exp15_wavlm_mamba_emotion_pipeline.py:parse_emocat_votes\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-648f654dc421004a", "name": "FastAPI POST `track2` without auth dependency \u2014 triton_service/gateway/app.py:61", "shortDescription": {"text": "FastAPI POST `track2` without auth dependency \u2014 triton_service/gateway/app.py:61"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-533533e68631ce42", "name": "FastAPI POST `track1` without auth dependency \u2014 triton_service/gateway/app.py:77", "shortDescription": {"text": "FastAPI POST `track1` without auth dependency \u2014 triton_service/gateway/app.py:77"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ed34b494f553be83", "name": "FastAPI POST `track3` without auth dependency \u2014 triton_service/gateway/app.py:94", "shortDescription": {"text": "FastAPI POST `track3` without auth dependency \u2014 triton_service/gateway/app.py:94"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d00dddd25d5f09a9", "name": "FastAPI POST `track1_ep` without auth dependency \u2014 api_service/app/main.py:64", "shortDescription": {"text": "FastAPI POST `track1_ep` without auth dependency \u2014 api_service/app/main.py:64"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9adc092dc571a674", "name": "FastAPI POST `track2_ep` without auth dependency \u2014 api_service/app/main.py:75", "shortDescription": {"text": "FastAPI POST `track2_ep` without auth dependency \u2014 api_service/app/main.py:75"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-637266ef7b746da2", "name": "FastAPI POST `track3_ep` without auth dependency \u2014 api_service/app/main.py:85", "shortDescription": {"text": "FastAPI POST `track3_ep` without auth dependency \u2014 api_service/app/main.py:85"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6c2d0ac831a2268b", "name": "Unused endpoint: POST /track2", "shortDescription": {"text": "Unused endpoint: POST /track2"}, "fullDescription": {"text": "`triton_service/gateway/app.py` declares `POST /track2` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e385d117a04506a2", "name": "Unused endpoint: POST /track1", "shortDescription": {"text": "Unused endpoint: POST /track1"}, "fullDescription": {"text": "`triton_service/gateway/app.py` declares `POST /track1` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-33fd5a53ddfd7f1d", "name": "Unused endpoint: POST /track3", "shortDescription": {"text": "Unused endpoint: POST /track3"}, "fullDescription": {"text": "`triton_service/gateway/app.py` declares `POST /track3` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5baa8971ebe192a1", "name": "Unused endpoint: GET /", "shortDescription": {"text": "Unused endpoint: GET /"}, "fullDescription": {"text": "`api_service/app/main.py` declares `GET /` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/23292"}, "properties": {"repository": "yonroy/VoiceMOS-Challenge", "repoUrl": "https://github.com/yonroy/VoiceMOS-Challenge", "branch": "main"}, "results": [{"ruleId": "scanner-5d7c722bc444a15c", "level": "note", "message": {"text": "Possibly dead Python function: score_one"}, "properties": {"repobilityId": "20e359c624f1dd94", "scanner": "scanner-primary", "fingerprint": "5d7c722bc444a15c", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "triton_service/client/batch_client.py:40"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7a3c025296d1782f", "level": "note", "message": {"text": "Possibly dead Python function: check_server"}, "properties": {"repobilityId": "5696ab70a31a30b4", "scanner": "scanner-primary", "fingerprint": "7a3c025296d1782f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "triton_service/ui/app_ui.py:41"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3c751671ae95eda3", "level": "note", "message": {"text": "Possibly dead Python function: ui_track2"}, "properties": {"repobilityId": "77c08c433524e5e8", "scanner": "scanner-primary", "fingerprint": "3c751671ae95eda3", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "triton_service/ui/app_ui.py:55"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3b594bc7843de51e", "level": "note", "message": {"text": "Possibly dead Python function: ui_track1"}, "properties": {"repobilityId": "6670eaef05a6be7f", "scanner": "scanner-primary", "fingerprint": "3b594bc7843de51e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "triton_service/ui/app_ui.py:84"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-89fb85a9101c8473", "level": "note", "message": {"text": "Possibly dead Python function: ui_track3"}, "properties": {"repobilityId": "fe94f6fa1e14b1ea", "scanner": "scanner-primary", "fingerprint": "89fb85a9101c8473", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "triton_service/ui/app_ui.py:108"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-623c152ac9ad3c6f", "level": "note", "message": {"text": "Possibly dead Python function: ui_batch"}, "properties": {"repobilityId": "e51bdc6a4a9a83b2", "scanner": "scanner-primary", "fingerprint": "623c152ac9ad3c6f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "triton_service/ui/app_ui.py:133"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ef24f0e28325eb38", "level": "note", "message": {"text": "Possibly dead Python function: work"}, "properties": {"repobilityId": "c5b0e9acf413d08f", "scanner": "scanner-primary", "fingerprint": "ef24f0e28325eb38", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "triton_service/ui/app_ui.py:140"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7358aeacc1c9e2aa", "level": "note", "message": {"text": "Possibly dead Python function: initialize"}, "properties": {"repobilityId": "024b267ec08e6038", "scanner": "scanner-primary", "fingerprint": "7358aeacc1c9e2aa", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "triton_service/model_repository/track3_sim/1/model.py:32"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-50375edf82a754a3", "level": "note", "message": {"text": "Possibly dead Python function: execute"}, "properties": {"repobilityId": "a0497c418f1db27e", "scanner": "scanner-primary", "fingerprint": "50375edf82a754a3", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "triton_service/model_repository/track3_sim/1/model.py:52"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4bd91ff81f9ff7f3", "level": "note", "message": {"text": "Possibly dead Python function: finalize"}, "properties": {"repobilityId": "f86273d3ca55aca9", "scanner": "scanner-primary", "fingerprint": "4bd91ff81f9ff7f3", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "triton_service/model_repository/track3_sim/1/model.py:111"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fc609c89fa2fe3f4", "level": "note", "message": {"text": "Possibly dead Python function: initialize"}, "properties": {"repobilityId": "024b267ec08e6038", "scanner": "scanner-primary", "fingerprint": "fc609c89fa2fe3f4", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "triton_service/model_repository/track1_acr/1/model.py:28"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9887d439651f688a", "level": "note", "message": {"text": "Possibly dead Python function: execute"}, "properties": {"repobilityId": "a0497c418f1db27e", "scanner": "scanner-primary", "fingerprint": "9887d439651f688a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "triton_service/model_repository/track1_acr/1/model.py:60"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fee2e6419f9f1a71", "level": "note", "message": {"text": "Possibly dead Python function: finalize"}, "properties": {"repobilityId": "f86273d3ca55aca9", "scanner": "scanner-primary", "fingerprint": "fee2e6419f9f1a71", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "triton_service/model_repository/track1_acr/1/model.py:109"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-526298e12b064bb7", "level": "note", "message": {"text": "Possibly dead Python function: initialize"}, "properties": {"repobilityId": "024b267ec08e6038", "scanner": "scanner-primary", "fingerprint": "526298e12b064bb7", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "triton_service/model_repository/track2_emotion/1/model.py:46"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1945e2c490bc4eaf", "level": "note", "message": {"text": "Possibly dead Python function: forward"}, "properties": {"repobilityId": "ea414cce7f8e5874", "scanner": "scanner-primary", "fingerprint": "1945e2c490bc4eaf", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "triton_service/model_repository/track2_emotion/1/model.py:139"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8a09469d3d87b4a0", "level": "note", "message": {"text": "Possibly dead Python function: execute"}, "properties": {"repobilityId": "a0497c418f1db27e", "scanner": "scanner-primary", "fingerprint": "8a09469d3d87b4a0", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "triton_service/model_repository/track2_emotion/1/model.py:234"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-11b639202d38ba65", "level": "note", "message": {"text": "Possibly dead Python function: finalize"}, "properties": {"repobilityId": "f86273d3ca55aca9", "scanner": "scanner-primary", "fingerprint": "11b639202d38ba65", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "triton_service/model_repository/track2_emotion/1/model.py:345"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9022fc2274688316", "level": "note", "message": {"text": "Possibly dead Python function: t1_predict"}, "properties": {"repobilityId": "44e5f5e0ddb5f225", "scanner": "scanner-primary", "fingerprint": "9022fc2274688316", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "huggingface/space/app.py:123"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-44aabf6c723ea20f", "level": "note", "message": {"text": "Possibly dead Python function: t3_predict"}, "properties": {"repobilityId": "3904aff2a996dd69", "scanner": "scanner-primary", "fingerprint": "44aabf6c723ea20f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "huggingface/space/app.py:171"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7cb632bef4d39367", "level": "note", "message": {"text": "Possibly dead Python function: forward"}, "properties": {"repobilityId": "ea414cce7f8e5874", "scanner": "scanner-primary", "fingerprint": "7cb632bef4d39367", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "huggingface/space/app.py:301"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8f6bc0f389e63dcf", "level": "note", "message": {"text": "Possibly dead Python function: t2_predict"}, "properties": {"repobilityId": "212846c55d99f369", "scanner": "scanner-primary", "fingerprint": "8f6bc0f389e63dcf", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "huggingface/space/app.py:336"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1d60526d2540921b", "level": "note", "message": {"text": "Possibly dead Python function: forward"}, "properties": {"repobilityId": "ea414cce7f8e5874", "scanner": "scanner-primary", "fingerprint": "1d60526d2540921b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "api_service/app/tracks/track2.py:141"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0396d260de5cc5c5", "level": "note", "message": {"text": "Possibly dead Python function: t1_predict"}, "properties": {"repobilityId": "44e5f5e0ddb5f225", "scanner": "scanner-primary", "fingerprint": "0396d260de5cc5c5", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "kaggle_baseline/demo_all_tracks_gradio_pipeline.py:77"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-be50bdde590c55be", "level": "note", "message": {"text": "Possibly dead Python function: t3_predict"}, "properties": {"repobilityId": "3904aff2a996dd69", "scanner": "scanner-primary", "fingerprint": "be50bdde590c55be", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "kaggle_baseline/demo_all_tracks_gradio_pipeline.py:125"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b32f35df2b1ecb40", "level": "note", "message": {"text": "Possibly dead Python function: forward"}, "properties": {"repobilityId": "ea414cce7f8e5874", "scanner": "scanner-primary", "fingerprint": "b32f35df2b1ecb40", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "kaggle_baseline/demo_all_tracks_gradio_pipeline.py:268"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e1f749de507b7474", "level": "note", "message": {"text": "Possibly dead Python function: t2_predict"}, "properties": {"repobilityId": "212846c55d99f369", "scanner": "scanner-primary", "fingerprint": "e1f749de507b7474", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "kaggle_baseline/demo_all_tracks_gradio_pipeline.py:304"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-65cac6aec28ecbfb", "level": "note", "message": {"text": "Possibly dead Python function: forward"}, "properties": {"repobilityId": "ea414cce7f8e5874", "scanner": "scanner-primary", "fingerprint": "65cac6aec28ecbfb", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "kaggle_baseline/track2/exp07_fusion_qmos_pipeline.py:429"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a7fe7a3488a43657", "level": "note", "message": {"text": "Possibly dead Python function: collate"}, "properties": {"repobilityId": "c888bba08ce6c6c5", "scanner": "scanner-primary", "fingerprint": "a7fe7a3488a43657", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "kaggle_baseline/track2/exp08b_finetune_resume_pipeline.py:378"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c06c27e09800bd75", "level": "note", "message": {"text": "Possibly dead Python function: forward"}, "properties": {"repobilityId": "ea414cce7f8e5874", "scanner": "scanner-primary", "fingerprint": "c06c27e09800bd75", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "kaggle_baseline/track2/exp08b_finetune_resume_pipeline.py:420"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a646b36aec97df2f", "level": "note", "message": {"text": "Possibly dead Python function: forward"}, "properties": {"repobilityId": "ea414cce7f8e5874", "scanner": "scanner-primary", "fingerprint": "a646b36aec97df2f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "kaggle_baseline/track2/exp13_finetune_qmos_pipeline.py:502"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cd1851b442fad549", "level": "warning", "message": {"text": "Dockerfile runs as root: triton_service/Dockerfile"}, "properties": {"repobilityId": "861bdceb975e1844", "scanner": "scanner-primary", "fingerprint": "cd1851b442fad549", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-057aa19cd2fd4ca7", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: nvcr.io/nvidia/tritonserver:24.08-py3"}, "properties": {"repobilityId": "e651c30601c1fca5", "scanner": "scanner-primary", "fingerprint": "057aa19cd2fd4ca7", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "triton_service/Dockerfile"}, "region": {"startLine": 12}}}]}, {"ruleId": "scanner-7f208d1d9cc976fa", "level": "warning", "message": {"text": "Dockerfile runs as root: triton_service/gateway/Dockerfile"}, "properties": {"repobilityId": "a92a02b328be9700", "scanner": "scanner-primary", "fingerprint": "7f208d1d9cc976fa", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-57b8ff9f16493bfb", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.10-slim"}, "properties": {"repobilityId": "4ba5d0c4888a3785", "scanner": "scanner-primary", "fingerprint": "57b8ff9f16493bfb", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "triton_service/gateway/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fa01b24723a808b3", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.10-slim"}, "properties": {"repobilityId": "848d54dc9c3e4c75", "scanner": "scanner-primary", "fingerprint": "fa01b24723a808b3", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "api_service/Dockerfile"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-aa5acaa49eb8315b", "level": "note", "message": {"text": "Containers defined but no K8s/orchestration manifest found"}, "properties": {"repobilityId": "b230ea9b68736081", "scanner": "scanner-primary", "fingerprint": "aa5acaa49eb8315b", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["coverage", "deployment"]}}, {"ruleId": "scanner-9710c8d059e53154", "level": "none", "message": {"text": "No frontend routes/components detected"}, "properties": {"repobilityId": "44ca61485762e494", "scanner": "scanner-primary", "fingerprint": "9710c8d059e53154", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-8b9f7818cf5fd63f", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in huggingface/space/app.py:107"}, "properties": {"repobilityId": "9a4aa4f8edfe7c4f", "scanner": "scanner-primary", "fingerprint": "8b9f7818cf5fd63f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "huggingface/space/app.py"}, "region": {"startLine": 107}}}]}, {"ruleId": "scanner-48913f8ae46591e9", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in slide/voicemos2026_slides.html:889"}, "properties": {"repobilityId": "b622a79baae526f8", "scanner": "scanner-primary", "fingerprint": "48913f8ae46591e9", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slide/voicemos2026_slides.html"}, "region": {"startLine": 889}}}]}, {"ruleId": "scanner-ecc9aeba0b6ec95c", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in slide/voicemos2026_slides.html:874"}, "properties": {"repobilityId": "da9e8427c1babf8f", "scanner": "scanner-primary", "fingerprint": "ecc9aeba0b6ec95c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slide/voicemos2026_slides.html"}, "region": {"startLine": 874}}}]}, {"ruleId": "scanner-7233dba0008fdfef", "level": "warning", "message": {"text": "Insecure pattern 'direct_outerhtml_assignment' in slide/voicemos2026_slides.html:874"}, "properties": {"repobilityId": "f69b4571766fecc0", "scanner": "scanner-primary", "fingerprint": "7233dba0008fdfef", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_outerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slide/voicemos2026_slides.html"}, "region": {"startLine": 874}}}]}, {"ruleId": "scanner-b91b1b2fd9a6927a", "level": "warning", "message": {"text": "Insecure pattern 'insert_adjacent_html' in slide/voicemos2026_slides.html:889"}, "properties": {"repobilityId": "383761f02d585e2b", "scanner": "scanner-primary", "fingerprint": "b91b1b2fd9a6927a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "insert_adjacent_html"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slide/voicemos2026_slides.html"}, "region": {"startLine": 889}}}]}, {"ruleId": "scanner-282468b65553c546", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in api_service/app/main.py:26"}, "properties": {"repobilityId": "b425115ede347192", "scanner": "scanner-primary", "fingerprint": "282468b65553c546", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "api_service/app/main.py"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-c3ab3d665860c77f", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in api_service/app/tracks/track1.py:20"}, "properties": {"repobilityId": "9773740f534e3850", "scanner": "scanner-primary", "fingerprint": "c3ab3d665860c77f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "api_service/app/tracks/track1.py"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-84f62deaad00d005", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in api_service/app/tracks/track3.py:22"}, "properties": {"repobilityId": "7380ae11b181cd86", "scanner": "scanner-primary", "fingerprint": "84f62deaad00d005", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "api_service/app/tracks/track3.py"}, "region": {"startLine": 22}}}]}, {"ruleId": "scanner-1ed66ddfc2c65e6d", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in kaggle_baseline/demo_all_tracks_gradio_pipeline.py:61"}, "properties": {"repobilityId": "2542a91aec02fae2", "scanner": "scanner-primary", "fingerprint": "1ed66ddfc2c65e6d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "kaggle_baseline/demo_all_tracks_gradio_pipeline.py"}, "region": {"startLine": 61}}}]}, {"ruleId": "scanner-843cb74bc5dfc896", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in kaggle_baseline/track1/demo_track1_gradio_pipeline.py:34"}, "properties": {"repobilityId": "eee9eb535f47d2ea", "scanner": "scanner-primary", "fingerprint": "843cb74bc5dfc896", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "kaggle_baseline/track1/demo_track1_gradio_pipeline.py"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-45632ca82503fb49", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in kaggle_baseline/track2/track2_prepare_data_pipeline.py:48"}, "properties": {"repobilityId": "ca9df8825c2021cc", "scanner": "scanner-primary", "fingerprint": "45632ca82503fb49", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "kaggle_baseline/track2/track2_prepare_data_pipeline.py"}, "region": {"startLine": 48}}}]}, {"ruleId": "scanner-6372cebde0220094", "level": "warning", "message": {"text": "No auth library detected"}, "properties": {"repobilityId": "a5b6035a5bbf8054", "scanner": "scanner-primary", "fingerprint": "6372cebde0220094", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["coverage", "auth"]}}, {"ruleId": "scanner-4601e3ad3bb28677", "level": "warning", "message": {"text": "No CI/CD pipelines detected"}, "properties": {"repobilityId": "c3ee439bce2bc51e", "scanner": "scanner-primary", "fingerprint": "4601e3ad3bb28677", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-6893a6c8b0861585", "level": "warning", "message": {"text": "Very low test-to-source ratio"}, "properties": {"repobilityId": "54a7de3f06314bf0", "scanner": "scanner-primary", "fingerprint": "6893a6c8b0861585", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["tests", "coverage"]}}, {"ruleId": "scanner-be5b6ac28962a744", "level": "note", "message": {"text": "42 TODO/FIXME markers"}, "properties": {"repobilityId": "4b38c118003e07d2", "scanner": "scanner-primary", "fingerprint": "be5b6ac28962a744", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["maintenance"]}}, {"ruleId": "scanner-141b30a41e03817b", "level": "note", "message": {"text": "No license file detected"}, "properties": {"repobilityId": "83be88af4260413d", "scanner": "scanner-primary", "fingerprint": "141b30a41e03817b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["license", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "8b2a73781c9393ed", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-b9088664ace7f748", "level": "note", "message": {"text": "Composite production-readiness gap"}, "properties": {"repobilityId": "ab0c228f5810226a", "scanner": "scanner-primary", "fingerprint": "b9088664ace7f748", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["production-readiness", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-749d4bc1bd66df5f", "level": "warning", "message": {"text": "Agent instructions exist but release-hardening basics are missing"}, "properties": {"repobilityId": "4894ac630074fff7", "scanner": "scanner-primary", "fingerprint": "749d4bc1bd66df5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "79304ad43647843b", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "ae13a0516fbc8afc", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-122f91b7f2906dc4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/settings.json"}, "properties": {"repobilityId": "a2967269048b6a9d", "scanner": "scanner-primary", "fingerprint": "122f91b7f2906dc4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/settings.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-35ce86f02b147d27", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 triton_service/model_repository/track3_sim/1/model.py:37"}, "properties": {"repobilityId": "4d2171a87d3e496c", "scanner": "scanner-primary", "fingerprint": "35ce86f02b147d27", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-1406703dac02e046", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 triton_service/model_repository/track1_acr/1/model.py:33"}, "properties": {"repobilityId": "e29a2d5ca8745d93", "scanner": "scanner-primary", "fingerprint": "1406703dac02e046", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-bf6b82d898a6ca70", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 triton_service/model_repository/track2_emotion/1/model.py:66"}, "properties": {"repobilityId": "50868d3e9e8560f7", "scanner": "scanner-primary", "fingerprint": "bf6b82d898a6ca70", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-665b2d3cdcd745ed", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 huggingface/space/app.py:161"}, "properties": {"repobilityId": "dcad3f42c941c648", "scanner": "scanner-primary", "fingerprint": "665b2d3cdcd745ed", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-aab0e414376029c7", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 api_service/app/tracks/track2.py:53"}, "properties": {"repobilityId": "f9f40e4fb2564a01", "scanner": "scanner-primary", "fingerprint": "aab0e414376029c7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-65d5150f230a82c5", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 api_service/app/tracks/track3.py:21"}, "properties": {"repobilityId": "84f5129d8cddd87f", "scanner": "scanner-primary", "fingerprint": "65d5150f230a82c5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-4d2301c1fedb6193", "level": "none", "message": {"text": "Commented-code block (6 lines) in kaggle_baseline/demo_run_from_hf_pipeline.py:54"}, "properties": {"repobilityId": "f87fc697c3d82757", "scanner": "scanner-primary", "fingerprint": "4d2301c1fedb6193", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-cee1f6a90b81f935", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/demo_run_from_hf_pipeline.py:24"}, "properties": {"repobilityId": "590a562b90d00ce2", "scanner": "scanner-primary", "fingerprint": "cee1f6a90b81f935", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-668e22b8439e1eb6", "level": "none", "message": {"text": "Commented-code block (5 lines) in kaggle_baseline/demo_all_tracks_gradio_pipeline.py:12"}, "properties": {"repobilityId": "37ce897aedef193e", "scanner": "scanner-primary", "fingerprint": "668e22b8439e1eb6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2bfbf2ec5b735668", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/demo_all_tracks_gradio_pipeline.py:27"}, "properties": {"repobilityId": "7327be502aad155b", "scanner": "scanner-primary", "fingerprint": "2bfbf2ec5b735668", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-79392a7f0ef82b1c", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track1/demo_track1_gradio_pipeline.py:33"}, "properties": {"repobilityId": "8fc520945987120c", "scanner": "scanner-primary", "fingerprint": "79392a7f0ef82b1c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-e6213fd79fedb963", "level": "none", "message": {"text": "Commented-code block (6 lines) in kaggle_baseline/track1/track1_baseline_pipeline.py:59"}, "properties": {"repobilityId": "fa4faa3a2bb22793", "scanner": "scanner-primary", "fingerprint": "e6213fd79fedb963", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-bb582884db04b0d9", "level": "none", "message": {"text": "Commented-code block (5 lines) in kaggle_baseline/track3/track3_baseline_pipeline.py:13"}, "properties": {"repobilityId": "cb5ccc9c2be18464", "scanner": "scanner-primary", "fingerprint": "bb582884db04b0d9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9e3110159ef6e24c", "level": "none", "message": {"text": "Commented-code block (6 lines) in kaggle_baseline/track2/exp07_fusion_qmos_pipeline.py:12"}, "properties": {"repobilityId": "355d5bbb4aaedee3", "scanner": "scanner-primary", "fingerprint": "9e3110159ef6e24c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ca24d124bcf854af", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp07_fusion_qmos_pipeline.py:102"}, "properties": {"repobilityId": "0f8b43d1e4a95653", "scanner": "scanner-primary", "fingerprint": "ca24d124bcf854af", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-269442c7ee1da9ec", "level": "none", "message": {"text": "Commented-code block (5 lines) in kaggle_baseline/track2/exp03_emos_sailer_pipeline.py:12"}, "properties": {"repobilityId": "55cab485653c4623", "scanner": "scanner-primary", "fingerprint": "269442c7ee1da9ec", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-59f96f35a60bdb13", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp03_emos_sailer_pipeline.py:89"}, "properties": {"repobilityId": "9fb98e331ee403df", "scanner": "scanner-primary", "fingerprint": "59f96f35a60bdb13", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-007634f8f6b4dcfb", "level": "none", "message": {"text": "Commented-code block (5 lines) in kaggle_baseline/track2/exp08b_finetune_resume_pipeline.py:12"}, "properties": {"repobilityId": "b265a75495e415bd", "scanner": "scanner-primary", "fingerprint": "007634f8f6b4dcfb", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6bd8abaeeaece99c", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp08b_finetune_resume_pipeline.py:108"}, "properties": {"repobilityId": "d5de152aa568f5f2", "scanner": "scanner-primary", "fingerprint": "6bd8abaeeaece99c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-76f3cef23e0ba1e1", "level": "none", "message": {"text": "Commented-code block (6 lines) in kaggle_baseline/track2/exp13_finetune_qmos_pipeline.py:9"}, "properties": {"repobilityId": "124f2268eef3cd1e", "scanner": "scanner-primary", "fingerprint": "76f3cef23e0ba1e1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-aca11969e8f3b377", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp13_finetune_qmos_pipeline.py:141"}, "properties": {"repobilityId": "e4057a66e01fb982", "scanner": "scanner-primary", "fingerprint": "aca11969e8f3b377", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-0d64ece0183d299d", "level": "none", "message": {"text": "Commented-code block (13 lines) in kaggle_baseline/track2/exp08_finetune_emotion_pipeline.py:7"}, "properties": {"repobilityId": "4274b6216df7de7f", "scanner": "scanner-primary", "fingerprint": "0d64ece0183d299d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e0e182360902bcb6", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp08_finetune_emotion_pipeline.py:116"}, "properties": {"repobilityId": "95e985531b3a5282", "scanner": "scanner-primary", "fingerprint": "e0e182360902bcb6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-6426758cdfdbe095", "level": "none", "message": {"text": "Commented-code block (6 lines) in kaggle_baseline/track2/exp15_wavlm_mamba_emotion_pipeline.py:9"}, "properties": {"repobilityId": "9da2d36dfb3bcff3", "scanner": "scanner-primary", "fingerprint": "6426758cdfdbe095", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6051b76da3fc1535", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp15_wavlm_mamba_emotion_pipeline.py:183"}, "properties": {"repobilityId": "9d32c7319b7383f7", "scanner": "scanner-primary", "fingerprint": "6051b76da3fc1535", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b133171601f6ce21", "level": "none", "message": {"text": "Commented-code block (11 lines) in kaggle_baseline/track2/exp05_vad_audeering_pipeline.py:8"}, "properties": {"repobilityId": "025ae69a36541cf0", "scanner": "scanner-primary", "fingerprint": "b133171601f6ce21", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-596ce58dd1e230fc", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp05_vad_audeering_pipeline.py:73"}, "properties": {"repobilityId": "a66f11dd5a569fba", "scanner": "scanner-primary", "fingerprint": "596ce58dd1e230fc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-f8d76e1dc3a889f0", "level": "none", "message": {"text": "Commented-code block (6 lines) in kaggle_baseline/track2/track2_baseline_pipeline.py:6"}, "properties": {"repobilityId": "502621caf6afef97", "scanner": "scanner-primary", "fingerprint": "f8d76e1dc3a889f0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fc6c7adcf3dc6320", "level": "none", "message": {"text": "Commented-code block (8 lines) in kaggle_baseline/track2/exp06_qmos_train_pipeline.py:8"}, "properties": {"repobilityId": "7f2d81fdfb3d9fcd", "scanner": "scanner-primary", "fingerprint": "fc6c7adcf3dc6320", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-13fa4d821a9cc623", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp06_qmos_train_pipeline.py:87"}, "properties": {"repobilityId": "e42c8581a2db6841", "scanner": "scanner-primary", "fingerprint": "13fa4d821a9cc623", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-99e2c8e7afca2fe5", "level": "none", "message": {"text": "Commented-code block (7 lines) in kaggle_baseline/track2/exp11_finetune_joint_pipeline.py:7"}, "properties": {"repobilityId": "018f66dd9ba67dbd", "scanner": "scanner-primary", "fingerprint": "99e2c8e7afca2fe5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-708b4bf823bdadcc", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp11_finetune_joint_pipeline.py:111"}, "properties": {"repobilityId": "8cde8713f1fc65c5", "scanner": "scanner-primary", "fingerprint": "708b4bf823bdadcc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-986a2b78c7bbf061", "level": "none", "message": {"text": "Commented-code block (5 lines) in kaggle_baseline/track2/exp12_wavlm_scratch_pipeline.py:7"}, "properties": {"repobilityId": "141eed52acd3825e", "scanner": "scanner-primary", "fingerprint": "986a2b78c7bbf061", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-866230a4d49f5a86", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp12_wavlm_scratch_pipeline.py:108"}, "properties": {"repobilityId": "23384399360dca43", "scanner": "scanner-primary", "fingerprint": "866230a4d49f5a86", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-631246b7581f4cd6", "level": "none", "message": {"text": "Commented-code block (6 lines) in kaggle_baseline/track2/exp04_fusion_pipeline.py:18"}, "properties": {"repobilityId": "5f5c9731371559cc", "scanner": "scanner-primary", "fingerprint": "631246b7581f4cd6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4759744b6de7ea16", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp04_fusion_pipeline.py:115"}, "properties": {"repobilityId": "b649eae59b34eaa4", "scanner": "scanner-primary", "fingerprint": "4759744b6de7ea16", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-fbc16bfc468e160a", "level": "note", "message": {"text": "Legacy-named symbol `p_v1` in kaggle_baseline/track2/exp09a_qmos_utmosv2_probe_pipeline.py:167"}, "properties": {"repobilityId": "ab14dc456cdbcb66", "scanner": "scanner-primary", "fingerprint": "fbc16bfc468e160a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-7b81600fbd8a46ec", "level": "none", "message": {"text": "Commented-code block (5 lines) in kaggle_baseline/track2/exp09a_qmos_utmosv2_probe_pipeline.py:8"}, "properties": {"repobilityId": "84cac2a31c2ba5c3", "scanner": "scanner-primary", "fingerprint": "7b81600fbd8a46ec", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5d4e90e3ad2fb424", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp09a_qmos_utmosv2_probe_pipeline.py:61"}, "properties": {"repobilityId": "424eead12e7d6616", "scanner": "scanner-primary", "fingerprint": "5d4e90e3ad2fb424", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-44a999d868979902", "level": "none", "message": {"text": "Commented-code block (8 lines) in kaggle_baseline/track2/track2_prepare_data_pipeline.py:10"}, "properties": {"repobilityId": "3ff46c9ca3863303", "scanner": "scanner-primary", "fingerprint": "44a999d868979902", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6acab6d8e96b1f52", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/track2_prepare_data_pipeline.py:48"}, "properties": {"repobilityId": "9bba71c9654722f3", "scanner": "scanner-primary", "fingerprint": "6acab6d8e96b1f52", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-579d10ab63ed8638", "level": "none", "message": {"text": "Commented-code block (6 lines) in kaggle_baseline/track2/exp10_finetune_audeering_pipeline.py:8"}, "properties": {"repobilityId": "d4ee1bbb03466c46", "scanner": "scanner-primary", "fingerprint": "579d10ab63ed8638", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6bdc36f8da039529", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp10_finetune_audeering_pipeline.py:92"}, "properties": {"repobilityId": "4376d7aa4d8c7051", "scanner": "scanner-primary", "fingerprint": "6bdc36f8da039529", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-e84965bd8821dc55", "level": "none", "message": {"text": "Commented-code block (5 lines) in kaggle_baseline/track2/exp14_mamba_head_pipeline.py:9"}, "properties": {"repobilityId": "b7156eb90a1dc9da", "scanner": "scanner-primary", "fingerprint": "e84965bd8821dc55", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b768892c2322b569", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp14_mamba_head_pipeline.py:116"}, "properties": {"repobilityId": "9de5354ce6634346", "scanner": "scanner-primary", "fingerprint": "b768892c2322b569", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-1b1dcd15c3457d33", "level": "none", "message": {"text": "Commented-code block (7 lines) in kaggle_baseline/track2/demo_track2_emotion_gradio_pipeline.py:425"}, "properties": {"repobilityId": "7946b3bf4ceec95a", "scanner": "scanner-primary", "fingerprint": "1b1dcd15c3457d33", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1deaba83d483ffd5", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/demo_track2_emotion_gradio_pipeline.py:98"}, "properties": {"repobilityId": "54dc3695261b2a2b", "scanner": "scanner-primary", "fingerprint": "1deaba83d483ffd5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-dc7d580a2cd5f18f", "level": "none", "message": {"text": "Commented-code block (6 lines) in kaggle_baseline/track2/exp16_llm_judge_pipeline.py:10"}, "properties": {"repobilityId": "820ef32f2fcf9220", "scanner": "scanner-primary", "fingerprint": "dc7d580a2cd5f18f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-54716b5be81a9e22", "level": "none", "message": {"text": "Commented-code block (5 lines) in kaggle_baseline/track2/exp02_train_emos_pipeline.py:11"}, "properties": {"repobilityId": "8a7d5c7e9a897e22", "scanner": "scanner-primary", "fingerprint": "54716b5be81a9e22", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-35e0cf597c657e3c", "level": "none", "message": {"text": "Commented-code block (5 lines) in kaggle_baseline/track2/exp15_predict_pipeline.py:13"}, "properties": {"repobilityId": "368bb4d470a114da", "scanner": "scanner-primary", "fingerprint": "35e0cf597c657e3c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3e1ebf53e8109fab", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 kaggle_baseline/track2/exp15_predict_pipeline.py:146"}, "properties": {"repobilityId": "11fc8b6b77d12eb1", "scanner": "scanner-primary", "fingerprint": "3e1ebf53e8109fab", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-f808a4ef3e1071fb", "level": "note", "message": {"text": "14 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "ce6b2ec4be4ec75a", "scanner": "scanner-primary", "fingerprint": "f808a4ef3e1071fb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}, {"ruleId": "scanner-46969939caf8120b", "level": "note", "message": {"text": "Near-duplicate function bodies in 9 places"}, "properties": {"repobilityId": "ea342c4f6a040d27", "scanner": "scanner-primary", "fingerprint": "46969939caf8120b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "37e3098a7191803b", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-0027e313ade46c8f", "level": "note", "message": {"text": "Near-duplicate function bodies in 7 places"}, "properties": {"repobilityId": "68c9541306babfc9", "scanner": "scanner-primary", "fingerprint": "0027e313ade46c8f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "526b00e4642375cc", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "fd3920a2ea0aeeb4", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-02525d39071dd2c7", "level": "note", "message": {"text": "Near-duplicate function bodies in 5 places"}, "properties": {"repobilityId": "9ef4ce76cce47563", "scanner": "scanner-primary", "fingerprint": "02525d39071dd2c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "841fdac2124697cd", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-380b7cb95b387b9c", "level": "note", "message": {"text": "Near-duplicate function bodies in 11 places"}, "properties": {"repobilityId": "c23f620cac93a767", "scanner": "scanner-primary", "fingerprint": "380b7cb95b387b9c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "c61b5de41a7edc90", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "ebf61132e71f1788", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-76a2f6818267a9a8", "level": "note", "message": {"text": "Near-duplicate function bodies in 8 places"}, "properties": {"repobilityId": "b823833456a7d7d3", "scanner": "scanner-primary", "fingerprint": "76a2f6818267a9a8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "fdc68aaae08fea19", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "0371cb2d7ec28827", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "be10dc4e2c2993fd", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-380b7cb95b387b9c", "level": "note", "message": {"text": "Near-duplicate function bodies in 11 places"}, "properties": {"repobilityId": "ee18b4df34801640", "scanner": "scanner-primary", "fingerprint": "380b7cb95b387b9c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-380b7cb95b387b9c", "level": "note", "message": {"text": "Near-duplicate function bodies in 11 places"}, "properties": {"repobilityId": "c9f71333239940e3", "scanner": "scanner-primary", "fingerprint": "380b7cb95b387b9c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "a2907f2201b7e006", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "2e8dec62a1d04bac", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "cee9d773b66f44ce", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-76a2f6818267a9a8", "level": "note", "message": {"text": "Near-duplicate function bodies in 8 places"}, "properties": {"repobilityId": "adb01563e94e2a87", "scanner": "scanner-primary", "fingerprint": "76a2f6818267a9a8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-648f654dc421004a", "level": "error", "message": {"text": "FastAPI POST `track2` without auth dependency \u2014 triton_service/gateway/app.py:61"}, "properties": {"repobilityId": "2d8be3f459927cc1", "scanner": "scanner-primary", "fingerprint": "648f654dc421004a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "triton_service/gateway/app.py"}, "region": {"startLine": 61}}}]}, {"ruleId": "scanner-533533e68631ce42", "level": "error", "message": {"text": "FastAPI POST `track1` without auth dependency \u2014 triton_service/gateway/app.py:77"}, "properties": {"repobilityId": "ef9ed2321299335b", "scanner": "scanner-primary", "fingerprint": "533533e68631ce42", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "triton_service/gateway/app.py"}, "region": {"startLine": 77}}}]}, {"ruleId": "scanner-ed34b494f553be83", "level": "error", "message": {"text": "FastAPI POST `track3` without auth dependency \u2014 triton_service/gateway/app.py:94"}, "properties": {"repobilityId": "0700628c3862c643", "scanner": "scanner-primary", "fingerprint": "ed34b494f553be83", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "triton_service/gateway/app.py"}, "region": {"startLine": 94}}}]}, {"ruleId": "scanner-d00dddd25d5f09a9", "level": "error", "message": {"text": "FastAPI POST `track1_ep` without auth dependency \u2014 api_service/app/main.py:64"}, "properties": {"repobilityId": "416463e903116b02", "scanner": "scanner-primary", "fingerprint": "d00dddd25d5f09a9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "api_service/app/main.py"}, "region": {"startLine": 64}}}]}, {"ruleId": "scanner-9adc092dc571a674", "level": "error", "message": {"text": "FastAPI POST `track2_ep` without auth dependency \u2014 api_service/app/main.py:75"}, "properties": {"repobilityId": "9f69724708c3ce28", "scanner": "scanner-primary", "fingerprint": "9adc092dc571a674", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "api_service/app/main.py"}, "region": {"startLine": 75}}}]}, {"ruleId": "scanner-637266ef7b746da2", "level": "error", "message": {"text": "FastAPI POST `track3_ep` without auth dependency \u2014 api_service/app/main.py:85"}, "properties": {"repobilityId": "24ff25e78eace370", "scanner": "scanner-primary", "fingerprint": "637266ef7b746da2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "api_service/app/main.py"}, "region": {"startLine": 85}}}]}, {"ruleId": "scanner-6c2d0ac831a2268b", "level": "note", "message": {"text": "Unused endpoint: POST /track2"}, "properties": {"repobilityId": "3f26956553ed8689", "scanner": "scanner-primary", "fingerprint": "6c2d0ac831a2268b", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e385d117a04506a2", "level": "note", "message": {"text": "Unused endpoint: POST /track1"}, "properties": {"repobilityId": "b8da6c35e956a681", "scanner": "scanner-primary", "fingerprint": "e385d117a04506a2", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-33fd5a53ddfd7f1d", "level": "note", "message": {"text": "Unused endpoint: POST /track3"}, "properties": {"repobilityId": "7aafd9e577aec97e", "scanner": "scanner-primary", "fingerprint": "33fd5a53ddfd7f1d", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-5baa8971ebe192a1", "level": "note", "message": {"text": "Unused endpoint: GET /"}, "properties": {"repobilityId": "bf4e7115fce58457", "scanner": "scanner-primary", "fingerprint": "5baa8971ebe192a1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}]}]}