{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-4e85a90f68f60a40", "name": "Possibly dead Python function: to_execute_args", "shortDescription": {"text": "Possibly dead Python function: to_execute_args"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ad82a70bd816cc42", "name": "Possibly dead Python function: to_relay_args", "shortDescription": {"text": "Possibly dead Python function: to_relay_args"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-300c966a4855241b", "name": "Possibly dead Python function: log_message", "shortDescription": {"text": "Possibly dead Python function: log_message"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7eeebee396395244", "name": "Possibly dead Python function: do_GET", "shortDescription": {"text": "Possibly dead Python function: do_GET"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7f28bac05fcf533d", "name": "Possibly dead Python function: do_POST", "shortDescription": {"text": "Possibly dead Python function: do_POST"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1e646091d8b51096", "name": "Possibly dead Python function: refresh_spent_status", "shortDescription": {"text": "Possibly dead Python function: refresh_spent_status"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-209616d4233d8848", "name": "Possibly dead Python function: read_variable", "shortDescription": {"text": "Possibly dead Python function: read_variable"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cd6e02af8e597d54", "name": "Possibly dead Python function: read_hash", "shortDescription": {"text": "Possibly dead Python function: read_hash"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a0d833d9fe6070ad", "name": "Possibly dead Python function: scan_hash_entries", "shortDescription": {"text": "Possibly dead Python function: scan_hash_entries"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-37ebe845169311b4", "name": "Possibly dead Python function: handle_syscall", "shortDescription": {"text": "Possibly dead Python function: handle_syscall"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-94f049c5b405625a", "name": "Possibly dead Python function: sign_msg", "shortDescription": {"text": "Possibly dead Python function: sign_msg"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a65ab28b8ea9edc8", "name": "Possibly dead Python function: verify_msg", "shortDescription": {"text": "Possibly dead Python function: verify_msg"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c1f1700659136a7a", "name": "Possibly dead Python function: set_driver_runtime_features", "shortDescription": {"text": "Possibly dead Python function: set_driver_runtime_features"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4dd4336e565f8301", "name": "Possibly dead Python function: module_ir_uses_zk", "shortDescription": {"text": "Possibly dead Python function: module_ir_uses_zk"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-81dbfb98a2f4b531", "name": "Possibly dead Python function: quick_read", "shortDescription": {"text": "Possibly dead Python function: quick_read"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bd0c12ce7f412878", "name": "Possibly dead Python function: quick_write", "shortDescription": {"text": "Possibly dead Python function: quick_write"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b601ba2e302c5749", "name": "Possibly dead Python function: build_parallel_executor", "shortDescription": {"text": "Possibly dead Python function: build_parallel_executor"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6e038643a05c12f0", "name": "Possibly dead Python function: is_valid_import", "shortDescription": {"text": "Possibly dead Python function: is_valid_import"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-76f8b26453d551ac", "name": "Possibly dead Python function: restricted_import", "shortDescription": {"text": "Possibly dead Python function: restricted_import"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ced1aa217e3bb705", "name": "Possibly dead Python function: install_system_contracts", "shortDescription": {"text": "Possibly dead Python function: install_system_contracts"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9710c8d059e53154", "name": "No frontend routes/components detected", "shortDescription": {"text": "No frontend routes/components detected"}, "fullDescription": {"text": "No React/Vue/Next routes were found. This is fine for backend-only repos."}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7d6388212e89175e", "name": "Insecure pattern 'node_child_process' in packages/xian-compiler-core/npm/scripts/build-wasm.mjs:2", "shortDescription": {"text": "Insecure pattern 'node_child_process' in packages/xian-compiler-core/npm/scripts/build-wasm.mjs:2"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-118ef19d08895aad", "name": "Insecure pattern 'exec_used' in src/contracting/execution/module.py:179", "shortDescription": {"text": "Insecure pattern 'exec_used' in src/contracting/execution/module.py:179"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-20ba85b0c39b8ba1", "name": "Insecure pattern 'exec_used' in src/contracting/storage/contract.py:148", "shortDescription": {"text": "Insecure pattern 'exec_used' in src/contracting/storage/contract.py:148"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6372cebde0220094", "name": "No auth library detected", "shortDescription": {"text": "No auth library detected"}, "fullDescription": {"text": "The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). The repo has auth/admin/session surface indicators, so auth may live in custom code, in a separate service, or be missing."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-46c644c6227e4d4a", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1838a141491ce38c", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e5b09dab12a4e2c0", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ab4e31ef847a8d7a", "name": "Very large file: scripts/generate_vm_parity_fixtures.py (2333 lines)", "shortDescription": {"text": "Very large file: scripts/generate_vm_parity_fixtures.py (2333 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-68120495198d9470", "name": "Very large file: packages/xian-zk/python/xian_zk/shielded_notes.py (2104 lines)", "shortDescription": {"text": "Very large file: packages/xian-zk/python/xian_zk/shielded_notes.py (2104 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-019119895f559ed1", "name": "Very large file: packages/xian-zk/src/shielded_notes.rs (2920 lines)", "shortDescription": {"text": "Very large file: packages/xian-zk/src/shielded_notes.rs (2920 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9bca6d548384f126", "name": "Very large file: packages/xian-compiler-core/src/ir.rs (2535 lines)", "shortDescription": {"text": "Very large file: packages/xian-compiler-core/src/ir.rs (2535 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-64e756584f003da3", "name": "Very large file: packages/xian-vm-core/src/interpreter_support.rs (3271 lines)", "shortDescription": {"text": "Very large file: packages/xian-vm-core/src/interpreter_support.rs (3271 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f9c05833d639e752", "name": "Very large file: packages/xian-vm-core/src/interpreter.rs (5471 lines)", "shortDescription": {"text": "Very large file: packages/xian-vm-core/src/interpreter.rs (5471 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a0f050e0a4da8caf", "name": "Very large file: src/contracting/compilation/conformance.py (1857 lines)", "shortDescription": {"text": "Very large file: src/contracting/compilation/conformance.py (1857 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 36 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bb1127e994ee5575", "name": "Commented-code block (6 lines) in tests/integration/test_senecaCompiler_integration.py:103", "shortDescription": {"text": "Commented-code block (6 lines) in tests/integration/test_senecaCompiler_integration.py:103"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cc2aa86f8732df4d", "name": "Legacy-named symbol `xian_vm_v1` in tests/integration/test_rich_ctx_calling.py:12", "shortDescription": {"text": "Legacy-named symbol `xian_vm_v1` in tests/integration/test_rich_ctx_calling.py:12"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fcbdbaaab820a4fb", "name": "Legacy-named symbol `xian_vm_v1` in tests/integration/test_executor_submission_process.py:16", "shortDescription": {"text": "Legacy-named symbol `xian_vm_v1` in tests/integration/test_executor_submission_process.py:16"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9ac836bfb585f81b", "name": "Legacy-named symbol `xian_vm_v1` in tests/integration/test_atomic_swap.py:17", "shortDescription": {"text": "Legacy-named symbol `xian_vm_v1` in tests/integration/test_atomic_swap.py:17"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4f7e05917a905402", "name": "Legacy-named symbol `xian_vm_v1` in tests/integration/test_chi_deduction.py:15", "shortDescription": {"text": "Legacy-named symbol `xian_vm_v1` in tests/integration/test_chi_deduction.py:15"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0ca77b3019afd9a4", "name": "Legacy-named symbol `xian_vm_v1` in tests/integration/test_complex_contracts.py:17", "shortDescription": {"text": "Legacy-named symbol `xian_vm_v1` in tests/integration/test_complex_contracts.py:17"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5d2a61b217354766", "name": "Legacy-named symbol `xian_vm_v1` in tests/integration/test_misc_contracts.py:14", "shortDescription": {"text": "Legacy-named symbol `xian_vm_v1` in tests/integration/test_misc_contracts.py:14"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-924d6fcc6f973d52", "name": "Legacy-named symbol `xian_vm_v1` in tests/integration/test_memory_clean_up_after_execution.py:14", "shortDescription": {"text": "Legacy-named symbol `xian_vm_v1` in tests/integration/test_memory_clean_up_after_execution.py:14"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3d78dd622d7557f8", "name": "Legacy-named symbol `xian_vm_v1` in tests/unit/test_conformance_manifest.py:25", "shortDescription": {"text": "Legacy-named symbol `xian_vm_v1` in tests/unit/test_conformance_manifest.py:25"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1603509be9961f52", "name": "Legacy-named symbol `xian_vm_v1` in tests/unit/test_artifacts.py:17", "shortDescription": {"text": "Legacy-named symbol `xian_vm_v1` in tests/unit/test_artifacts.py:17"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-74d47a6f17d2ff37", "name": "Legacy-named symbol `xian_vm_v1` in tests/unit/test_compiler_fixtures.py:32", "shortDescription": {"text": "Legacy-named symbol `xian_vm_v1` in tests/unit/test_compiler_fixtures.py:32"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0e353cbb06391b9b", "name": "Commented-code block (5 lines) in tests/unit/test_contract_runtime_guards.py:104", "shortDescription": {"text": "Commented-code block (5 lines) in tests/unit/test_contract_runtime_guards.py:104"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4d15570fe2059ada", "name": "Legacy-named symbol `xian_vm_v1` in tests/unit/test_client.py:219", "shortDescription": {"text": "Legacy-named symbol `xian_vm_v1` in tests/unit/test_client.py:219"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-50eb861ead504df6", "name": "Legacy-named symbol `xian_vm_v1` in tests/performance/prof_transfer.py:13", "shortDescription": {"text": "Legacy-named symbol `xian_vm_v1` in tests/performance/prof_transfer.py:13"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-314a038877ce917b", "name": "Legacy-named symbol `xian_vm_v1` in tests/performance/test_transfer.py:15", "shortDescription": {"text": "Legacy-named symbol `xian_vm_v1` in tests/performance/test_transfer.py:15"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49c8d339885aad78", "name": "Legacy-named symbol `xian_contract_artifact_v1` in scripts/audit_compiler_core_parity.py:56", "shortDescription": {"text": "Legacy-named symbol `xian_contract_artifact_v1` in scripts/audit_compiler_core_parity.py:56"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8f11cf5f14fc30a3", "name": "Commented-code block (6 lines) in packages/xian-zk/python/xian_zk/prover_service.py:80", "shortDescription": {"text": "Commented-code block (6 lines) in packages/xian-zk/python/xian_zk/prover_service.py:80"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f9581184ca75e847", "name": "Stub function `log_message` (body is just `pass`/`return`) \u2014 packages/xian-zk/python/xian_zk/prover_service.py:357", "shortDescription": {"text": "Stub function `log_message` (body is just `pass`/`return`) \u2014 packages/xian-zk/python/xian_zk/prover_service.py:357"}, "fullDescription": {"text": "Likely an AI scaffold that was never filled in. Remove or implement."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e81c774eb2f02cb4", "name": "Legacy-named symbol `xian_vm_v1` in packages/xian-compiler-core/python/xian_compiler_core/__init__.py:24", "shortDescription": {"text": "Legacy-named symbol `xian_vm_v1` in packages/xian-compiler-core/python/xian_compiler_core/__init__.py:24"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-120ae4cbb9749d4b", "name": "Legacy-named symbol `xian_vm_v1` in packages/xian-vm-core/python/xian_vm_core/__init__.py:80", "shortDescription": {"text": "Legacy-named symbol `xian_vm_v1` in packages/xian-vm-core/python/xian_vm_core/__init__.py:80"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7b3cb371713ff600", "name": "Legacy-named symbol `xian_contract_artifact_v1` in src/contracting/compiler/fixtures.py:41", "shortDescription": {"text": "Legacy-named symbol `xian_contract_artifact_v1` in src/contracting/compiler/fixtures.py:41"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-54e0fa63ef27ec33", "name": "Legacy-named symbol `xian_vm_v1` in src/contracting/local/client.py:291", "shortDescription": {"text": "Legacy-named symbol `xian_vm_v1` in src/contracting/local/client.py:291"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4e5348e2ea3f1600", "name": "Stub function `install_system_contracts` (body is just `pass`/`return`) \u2014 src/contracting/execution/module.py:86", "shortDescription": {"text": "Stub function `install_system_contracts` (body is just `pass`/`return`) \u2014 src/contracting/execution/module.py:86"}, "fullDescription": {"text": "Likely an AI scaffold that was never filled in. Remove or implement."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6990c05cc93b4e52", "name": "Commented-code block (7 lines) in src/contracting/execution/executor.py:232", "shortDescription": {"text": "Commented-code block (7 lines) in src/contracting/execution/executor.py:232"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e153cc7c3ed0811e", "name": "Legacy-named symbol `python_line_v1` in src/contracting/execution/tracer_common.py:11", "shortDescription": {"text": "Legacy-named symbol `python_line_v1` in src/contracting/execution/tracer_common.py:11"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cebb7427a1a2a7eb", "name": "Stub function `close` (body is just `pass`/`return`) \u2014 src/contracting/execution/parallel.py:550", "shortDescription": {"text": "Stub function `close` (body is just `pass`/`return`) \u2014 src/contracting/execution/parallel.py:550"}, "fullDescription": {"text": "Likely an AI scaffold that was never filled in. Remove or implement."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-edcc3afe75c50639", "name": "Legacy-named symbol `xian_vm_v1` in src/contracting/compilation/vm.py:13", "shortDescription": {"text": "Legacy-named symbol `xian_vm_v1` in src/contracting/compilation/vm.py:13"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f1f5c5bc2a124dc3", "name": "Legacy-named symbol `xian_ir_v1` in src/contracting/compilation/ir.py:7", "shortDescription": {"text": "Legacy-named symbol `xian_ir_v1` in src/contracting/compilation/ir.py:7"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f7913dc5e201e3a8", "name": "Legacy-named symbol `xian_contract_language_v1` in src/contracting/compilation/conformance.py:34", "shortDescription": {"text": "Legacy-named symbol `xian_contract_language_v1` in src/contracting/compilation/conformance.py:34"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8b48d8d2727f27e7", "name": "Legacy-named symbol `xian_contract_artifact_v1` in src/contracting/compilation/artifacts.py:11", "shortDescription": {"text": "Legacy-named symbol `xian_contract_artifact_v1` in src/contracting/compilation/artifacts.py:11"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7888cf7010dc549f", "name": "Commented-code block (5 lines) in src/contracting/stdlib/builtins.py:234", "shortDescription": {"text": "Commented-code block (5 lines) in src/contracting/stdlib/builtins.py:234"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-840a689b3913066b", "name": "Legacy-named symbol `xian_vm_v1` in src/contracting/storage/contract.py:77", "shortDescription": {"text": "Legacy-named symbol `xian_vm_v1` in src/contracting/storage/contract.py:77"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c82a2ba18eacf739", "name": "Commented-code block (6 lines) in src/contracting/storage/orm.py:25", "shortDescription": {"text": "Commented-code block (6 lines) in src/contracting/storage/orm.py:25"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3884332604df19c8", "name": "Legacy-named symbol `xian_vm_v1` in src/contracting/storage/driver.py:225", "shortDescription": {"text": "Legacy-named symbol `xian_vm_v1` in src/contracting/storage/driver.py:225"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nscripts/audit_compiler_core_parity.py:compile_with_python, scripts/audit_compiler_core_parity.py:compile_with_rust\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-be46ea126aa5d8dc", "name": "Near-duplicate function bodies in 3 places", "shortDescription": {"text": "Near-duplicate function bodies in 3 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\npackages/xian-zk/python/xian_zk/prover_service.py:registry_manifest, packages/xian-zk/python/xian_zk/prover_service.py:registry_manifest, packages/xian-zk/python/xian_zk/prover_service.py:registry_manifest\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49c98f7cedd9c977", "name": "Near-duplicate function bodies in 4 places", "shortDescription": {"text": "Near-duplicate function bodies in 4 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\npackages/xian-zk/python/xian_zk/shielded_notes.py:generate_owner_secret, packages/xian-zk/python/xian_zk/shielded_notes.py:generate, packages/xian-zk/python/xian_zk/shielded_notes.py:generate, packages/xian-zk/python/xian_zk/shielded_notes.py:generate\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/22979"}, "properties": {"repository": "xian-technology/xian-contracting", "repoUrl": "https://github.com/xian-technology/xian-contracting", "branch": "main"}, "results": [{"ruleId": "scanner-4e85a90f68f60a40", "level": "note", "message": {"text": "Possibly dead Python function: to_execute_args"}, "properties": {"repobilityId": "9d8df92fb363f8af", "scanner": "scanner-primary", "fingerprint": "4e85a90f68f60a40", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/xian-zk/python/xian_zk/shielded_commands.py:216"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ad82a70bd816cc42", "level": "note", "message": {"text": "Possibly dead Python function: to_relay_args"}, "properties": {"repobilityId": "d6cf1bf020bf636f", "scanner": "scanner-primary", "fingerprint": "ad82a70bd816cc42", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/xian-zk/python/xian_zk/shielded_relay.py:155"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-300c966a4855241b", "level": "note", "message": {"text": "Possibly dead Python function: log_message"}, "properties": {"repobilityId": "965f3150b4af5b2e", "scanner": "scanner-primary", "fingerprint": "300c966a4855241b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/xian-zk/python/xian_zk/prover_service.py:357"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7eeebee396395244", "level": "note", "message": {"text": "Possibly dead Python function: do_GET"}, "properties": {"repobilityId": "2d943bb45e4f13bd", "scanner": "scanner-primary", "fingerprint": "7eeebee396395244", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/xian-zk/python/xian_zk/prover_service.py:360"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7f28bac05fcf533d", "level": "note", "message": {"text": "Possibly dead Python function: do_POST"}, "properties": {"repobilityId": "53357410ca9379a9", "scanner": "scanner-primary", "fingerprint": "7f28bac05fcf533d", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/xian-zk/python/xian_zk/prover_service.py:363"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1e646091d8b51096", "level": "note", "message": {"text": "Possibly dead Python function: refresh_spent_status"}, "properties": {"repobilityId": "895ea040207e9252", "scanner": "scanner-primary", "fingerprint": "1e646091d8b51096", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/xian-zk/python/xian_zk/shielded_notes.py:1499"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-209616d4233d8848", "level": "note", "message": {"text": "Possibly dead Python function: read_variable"}, "properties": {"repobilityId": "33e35f4bbf97ee96", "scanner": "scanner-primary", "fingerprint": "209616d4233d8848", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/xian-vm-core/python/xian_vm_core/__init__.py:168"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cd6e02af8e597d54", "level": "note", "message": {"text": "Possibly dead Python function: read_hash"}, "properties": {"repobilityId": "52039a08525019d5", "scanner": "scanner-primary", "fingerprint": "cd6e02af8e597d54", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/xian-vm-core/python/xian_vm_core/__init__.py:171"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a0d833d9fe6070ad", "level": "note", "message": {"text": "Possibly dead Python function: scan_hash_entries"}, "properties": {"repobilityId": "d097e6be82b2bb8c", "scanner": "scanner-primary", "fingerprint": "a0d833d9fe6070ad", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/xian-vm-core/python/xian_vm_core/__init__.py:174"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-37ebe845169311b4", "level": "note", "message": {"text": "Possibly dead Python function: handle_syscall"}, "properties": {"repobilityId": "a0fe1d9f2d567653", "scanner": "scanner-primary", "fingerprint": "37ebe845169311b4", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/xian-vm-core/python/xian_vm_core/__init__.py:473"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-94f049c5b405625a", "level": "note", "message": {"text": "Possibly dead Python function: sign_msg"}, "properties": {"repobilityId": "694db4e59bd5947b", "scanner": "scanner-primary", "fingerprint": "94f049c5b405625a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/xian-accounts/src/xian_accounts/ed25519.py:76"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a65ab28b8ea9edc8", "level": "note", "message": {"text": "Possibly dead Python function: verify_msg"}, "properties": {"repobilityId": "4d3d6b3c506cf160", "scanner": "scanner-primary", "fingerprint": "a65ab28b8ea9edc8", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/xian-accounts/src/xian_accounts/ed25519.py:79"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c1f1700659136a7a", "level": "note", "message": {"text": "Possibly dead Python function: set_driver_runtime_features"}, "properties": {"repobilityId": "de06b13ce5989f09", "scanner": "scanner-primary", "fingerprint": "c1f1700659136a7a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/contracting/runtime_features.py:42"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4dd4336e565f8301", "level": "note", "message": {"text": "Possibly dead Python function: module_ir_uses_zk"}, "properties": {"repobilityId": "1ee68351fab48cef", "scanner": "scanner-primary", "fingerprint": "4dd4336e565f8301", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/contracting/runtime_features.py:92"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-81dbfb98a2f4b531", "level": "note", "message": {"text": "Possibly dead Python function: quick_read"}, "properties": {"repobilityId": "d05fedd20e74a673", "scanner": "scanner-primary", "fingerprint": "81dbfb98a2f4b531", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/contracting/local/client.py:79"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bd0c12ce7f412878", "level": "note", "message": {"text": "Possibly dead Python function: quick_write"}, "properties": {"repobilityId": "35cafe0c4e4c2c89", "scanner": "scanner-primary", "fingerprint": "bd0c12ce7f412878", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/contracting/local/client.py:92"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b601ba2e302c5749", "level": "note", "message": {"text": "Possibly dead Python function: build_parallel_executor"}, "properties": {"repobilityId": "b7dcf37cb3d528b3", "scanner": "scanner-primary", "fingerprint": "b601ba2e302c5749", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/contracting/local/client.py:300"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6e038643a05c12f0", "level": "note", "message": {"text": "Possibly dead Python function: is_valid_import"}, "properties": {"repobilityId": "5806ac73aee31ecc", "scanner": "scanner-primary", "fingerprint": "6e038643a05c12f0", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/contracting/execution/module.py:28"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-76f8b26453d551ac", "level": "note", "message": {"text": "Possibly dead Python function: restricted_import"}, "properties": {"repobilityId": "4756994b8b5535a1", "scanner": "scanner-primary", "fingerprint": "76f8b26453d551ac", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/contracting/execution/module.py:38"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ced1aa217e3bb705", "level": "note", "message": {"text": "Possibly dead Python function: install_system_contracts"}, "properties": {"repobilityId": "ae327404d0a37dc5", "scanner": "scanner-primary", "fingerprint": "ced1aa217e3bb705", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/contracting/execution/module.py:86"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9710c8d059e53154", "level": "none", "message": {"text": "No frontend routes/components detected"}, "properties": {"repobilityId": "44ca61485762e494", "scanner": "scanner-primary", "fingerprint": "9710c8d059e53154", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-7d6388212e89175e", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in packages/xian-compiler-core/npm/scripts/build-wasm.mjs:2"}, "properties": {"repobilityId": "fb3060443a59a77f", "scanner": "scanner-primary", "fingerprint": "7d6388212e89175e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/xian-compiler-core/npm/scripts/build-wasm.mjs"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-118ef19d08895aad", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in src/contracting/execution/module.py:179"}, "properties": {"repobilityId": "465d6dccc4d6da04", "scanner": "scanner-primary", "fingerprint": "118ef19d08895aad", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/contracting/execution/module.py"}, "region": {"startLine": 179}}}]}, {"ruleId": "scanner-20ba85b0c39b8ba1", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in src/contracting/storage/contract.py:148"}, "properties": {"repobilityId": "4100d7598c6f8baf", "scanner": "scanner-primary", "fingerprint": "20ba85b0c39b8ba1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/contracting/storage/contract.py"}, "region": {"startLine": 148}}}]}, {"ruleId": "scanner-6372cebde0220094", "level": "warning", "message": {"text": "No auth library detected"}, "properties": {"repobilityId": "a5b6035a5bbf8054", "scanner": "scanner-primary", "fingerprint": "6372cebde0220094", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["coverage", "auth"]}}, {"ruleId": "scanner-46c644c6227e4d4a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "04f6c832d67a7838", "scanner": "scanner-primary", "fingerprint": "46c644c6227e4d4a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 114}}}]}, {"ruleId": "scanner-46c644c6227e4d4a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "111ded8435b78771", "scanner": "scanner-primary", "fingerprint": "46c644c6227e4d4a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 117}}}]}, {"ruleId": "scanner-46c644c6227e4d4a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "04f6c832d67a7838", "scanner": "scanner-primary", "fingerprint": "46c644c6227e4d4a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 152}}}]}, {"ruleId": "scanner-46c644c6227e4d4a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "111ded8435b78771", "scanner": "scanner-primary", "fingerprint": "46c644c6227e4d4a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 155}}}]}, {"ruleId": "scanner-46c644c6227e4d4a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "3863e0af2f2768cd", "scanner": "scanner-primary", "fingerprint": "46c644c6227e4d4a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 205}}}]}, {"ruleId": "scanner-46c644c6227e4d4a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "04f6c832d67a7838", "scanner": "scanner-primary", "fingerprint": "46c644c6227e4d4a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 222}}}]}, {"ruleId": "scanner-46c644c6227e4d4a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "111ded8435b78771", "scanner": "scanner-primary", "fingerprint": "46c644c6227e4d4a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 225}}}]}, {"ruleId": "scanner-46c644c6227e4d4a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "3863e0af2f2768cd", "scanner": "scanner-primary", "fingerprint": "46c644c6227e4d4a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 249}}}]}, {"ruleId": "scanner-46c644c6227e4d4a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "04f6c832d67a7838", "scanner": "scanner-primary", "fingerprint": "46c644c6227e4d4a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 274}}}]}, {"ruleId": "scanner-46c644c6227e4d4a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "111ded8435b78771", "scanner": "scanner-primary", "fingerprint": "46c644c6227e4d4a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 277}}}]}, {"ruleId": "scanner-46c644c6227e4d4a", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "b79bb1ca9b97da7f", "scanner": "scanner-primary", "fingerprint": "46c644c6227e4d4a", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 282}}}]}, {"ruleId": "scanner-46c644c6227e4d4a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "3863e0af2f2768cd", "scanner": "scanner-primary", "fingerprint": "46c644c6227e4d4a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 293}}}]}, {"ruleId": "scanner-46c644c6227e4d4a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "04f6c832d67a7838", "scanner": "scanner-primary", "fingerprint": "46c644c6227e4d4a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 310}}}]}, {"ruleId": "scanner-46c644c6227e4d4a", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "9e54fac6c290138e", "scanner": "scanner-primary", "fingerprint": "46c644c6227e4d4a", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 313}}}]}, {"ruleId": "scanner-46c644c6227e4d4a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "b28f2eb9ce3eea56", "scanner": "scanner-primary", "fingerprint": "46c644c6227e4d4a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 325}}}]}, {"ruleId": "scanner-46c644c6227e4d4a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "3863e0af2f2768cd", "scanner": "scanner-primary", "fingerprint": "46c644c6227e4d4a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 362}}}]}, {"ruleId": "scanner-46c644c6227e4d4a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "9d3cbe42802fdd9d", "scanner": "scanner-primary", "fingerprint": "46c644c6227e4d4a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 388}}}]}, {"ruleId": "scanner-46c644c6227e4d4a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "3863e0af2f2768cd", "scanner": "scanner-primary", "fingerprint": "46c644c6227e4d4a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 426}}}]}, {"ruleId": "scanner-46c644c6227e4d4a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "9d3cbe42802fdd9d", "scanner": "scanner-primary", "fingerprint": "46c644c6227e4d4a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 446}}}]}, {"ruleId": "scanner-46c644c6227e4d4a", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "8eb96fb1706184f3", "scanner": "scanner-primary", "fingerprint": "46c644c6227e4d4a", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 452}}}]}, {"ruleId": "scanner-1838a141491ce38c", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "b8fd4f5048f96576", "scanner": "scanner-primary", "fingerprint": "1838a141491ce38c", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e5b09dab12a4e2c0", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "0f16a0487cea03fc", "scanner": "scanner-primary", "fingerprint": "e5b09dab12a4e2c0", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/validate.yml"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-e5b09dab12a4e2c0", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "969dd03ce9ee9f08", "scanner": "scanner-primary", "fingerprint": "e5b09dab12a4e2c0", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/validate.yml"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-e5b09dab12a4e2c0", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "f314e90a316d0e6b", "scanner": "scanner-primary", "fingerprint": "e5b09dab12a4e2c0", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/validate.yml"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-e5b09dab12a4e2c0", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "0f16a0487cea03fc", "scanner": "scanner-primary", "fingerprint": "e5b09dab12a4e2c0", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/validate.yml"}, "region": {"startLine": 53}}}]}, {"ruleId": "scanner-e5b09dab12a4e2c0", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "0f16a0487cea03fc", "scanner": "scanner-primary", "fingerprint": "e5b09dab12a4e2c0", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/validate.yml"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-e5b09dab12a4e2c0", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "0f16a0487cea03fc", "scanner": "scanner-primary", "fingerprint": "e5b09dab12a4e2c0", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/validate.yml"}, "region": {"startLine": 62}}}]}, {"ruleId": "scanner-e5b09dab12a4e2c0", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "0f16a0487cea03fc", "scanner": "scanner-primary", "fingerprint": "e5b09dab12a4e2c0", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/validate.yml"}, "region": {"startLine": 68}}}]}, {"ruleId": "scanner-e5b09dab12a4e2c0", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "969dd03ce9ee9f08", "scanner": "scanner-primary", "fingerprint": "e5b09dab12a4e2c0", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/validate.yml"}, "region": {"startLine": 74}}}]}, {"ruleId": "scanner-e5b09dab12a4e2c0", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "239bac56bfa91b29", "scanner": "scanner-primary", "fingerprint": "e5b09dab12a4e2c0", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/validate.yml"}, "region": {"startLine": 79}}}]}, {"ruleId": "scanner-ab4e31ef847a8d7a", "level": "note", "message": {"text": "Very large file: scripts/generate_vm_parity_fixtures.py (2333 lines)"}, "properties": {"repobilityId": "c76ab6c2b9c54c39", "scanner": "scanner-primary", "fingerprint": "ab4e31ef847a8d7a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-68120495198d9470", "level": "note", "message": {"text": "Very large file: packages/xian-zk/python/xian_zk/shielded_notes.py (2104 lines)"}, "properties": {"repobilityId": "bcefaa93dd7639f6", "scanner": "scanner-primary", "fingerprint": "68120495198d9470", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-019119895f559ed1", "level": "note", "message": {"text": "Very large file: packages/xian-zk/src/shielded_notes.rs (2920 lines)"}, "properties": {"repobilityId": "ca48502b958930cf", "scanner": "scanner-primary", "fingerprint": "019119895f559ed1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-9bca6d548384f126", "level": "note", "message": {"text": "Very large file: packages/xian-compiler-core/src/ir.rs (2535 lines)"}, "properties": {"repobilityId": "e200c2bcc23a4a70", "scanner": "scanner-primary", "fingerprint": "9bca6d548384f126", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-64e756584f003da3", "level": "note", "message": {"text": "Very large file: packages/xian-vm-core/src/interpreter_support.rs (3271 lines)"}, "properties": {"repobilityId": "ecb4c4d10f438426", "scanner": "scanner-primary", "fingerprint": "64e756584f003da3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-f9c05833d639e752", "level": "note", "message": {"text": "Very large file: packages/xian-vm-core/src/interpreter.rs (5471 lines)"}, "properties": {"repobilityId": "7d2c5548c04e3a96", "scanner": "scanner-primary", "fingerprint": "f9c05833d639e752", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-a0f050e0a4da8caf", "level": "note", "message": {"text": "Very large file: src/contracting/compilation/conformance.py (1857 lines)"}, "properties": {"repobilityId": "4a702d1e575ece15", "scanner": "scanner-primary", "fingerprint": "a0f050e0a4da8caf", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "3a999a76af284b93", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "a6c8cab005e7c240", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "d56be8621b5b3b6e", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "827ec6edd68356da", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-bb1127e994ee5575", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/integration/test_senecaCompiler_integration.py:103"}, "properties": {"repobilityId": "393db4a262e761f5", "scanner": "scanner-primary", "fingerprint": "bb1127e994ee5575", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-cc2aa86f8732df4d", "level": "note", "message": {"text": "Legacy-named symbol `xian_vm_v1` in tests/integration/test_rich_ctx_calling.py:12"}, "properties": {"repobilityId": "76c026e0e6ecc91b", "scanner": "scanner-primary", "fingerprint": "cc2aa86f8732df4d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-fcbdbaaab820a4fb", "level": "note", "message": {"text": "Legacy-named symbol `xian_vm_v1` in tests/integration/test_executor_submission_process.py:16"}, "properties": {"repobilityId": "8106ea7b605ee3dc", "scanner": "scanner-primary", "fingerprint": "fcbdbaaab820a4fb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-9ac836bfb585f81b", "level": "note", "message": {"text": "Legacy-named symbol `xian_vm_v1` in tests/integration/test_atomic_swap.py:17"}, "properties": {"repobilityId": "4b5a3b47ff3427b2", "scanner": "scanner-primary", "fingerprint": "9ac836bfb585f81b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-4f7e05917a905402", "level": "note", "message": {"text": "Legacy-named symbol `xian_vm_v1` in tests/integration/test_chi_deduction.py:15"}, "properties": {"repobilityId": "595d53cc52fd871e", "scanner": "scanner-primary", "fingerprint": "4f7e05917a905402", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-0ca77b3019afd9a4", "level": "note", "message": {"text": "Legacy-named symbol `xian_vm_v1` in tests/integration/test_complex_contracts.py:17"}, "properties": {"repobilityId": "530e78e12638531e", "scanner": "scanner-primary", "fingerprint": "0ca77b3019afd9a4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-5d2a61b217354766", "level": "note", "message": {"text": "Legacy-named symbol `xian_vm_v1` in tests/integration/test_misc_contracts.py:14"}, "properties": {"repobilityId": "e9ed0a2841014b41", "scanner": "scanner-primary", "fingerprint": "5d2a61b217354766", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-924d6fcc6f973d52", "level": "note", "message": {"text": "Legacy-named symbol `xian_vm_v1` in tests/integration/test_memory_clean_up_after_execution.py:14"}, "properties": {"repobilityId": "a51d980beb3cce6f", "scanner": "scanner-primary", "fingerprint": "924d6fcc6f973d52", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-3d78dd622d7557f8", "level": "note", "message": {"text": "Legacy-named symbol `xian_vm_v1` in tests/unit/test_conformance_manifest.py:25"}, "properties": {"repobilityId": "53843eedff5e1684", "scanner": "scanner-primary", "fingerprint": "3d78dd622d7557f8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-1603509be9961f52", "level": "note", "message": {"text": "Legacy-named symbol `xian_vm_v1` in tests/unit/test_artifacts.py:17"}, "properties": {"repobilityId": "0e56c59004e77502", "scanner": "scanner-primary", "fingerprint": "1603509be9961f52", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-74d47a6f17d2ff37", "level": "note", "message": {"text": "Legacy-named symbol `xian_vm_v1` in tests/unit/test_compiler_fixtures.py:32"}, "properties": {"repobilityId": "f09d91e0b9fd4bea", "scanner": "scanner-primary", "fingerprint": "74d47a6f17d2ff37", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-0e353cbb06391b9b", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/unit/test_contract_runtime_guards.py:104"}, "properties": {"repobilityId": "c75c7b498298074f", "scanner": "scanner-primary", "fingerprint": "0e353cbb06391b9b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4d15570fe2059ada", "level": "note", "message": {"text": "Legacy-named symbol `xian_vm_v1` in tests/unit/test_client.py:219"}, "properties": {"repobilityId": "613b1f17ea9686df", "scanner": "scanner-primary", "fingerprint": "4d15570fe2059ada", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-50eb861ead504df6", "level": "note", "message": {"text": "Legacy-named symbol `xian_vm_v1` in tests/performance/prof_transfer.py:13"}, "properties": {"repobilityId": "9fa7898f34d92b4f", "scanner": "scanner-primary", "fingerprint": "50eb861ead504df6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-314a038877ce917b", "level": "note", "message": {"text": "Legacy-named symbol `xian_vm_v1` in tests/performance/test_transfer.py:15"}, "properties": {"repobilityId": "ccb66792b83c30cd", "scanner": "scanner-primary", "fingerprint": "314a038877ce917b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-49c8d339885aad78", "level": "note", "message": {"text": "Legacy-named symbol `xian_contract_artifact_v1` in scripts/audit_compiler_core_parity.py:56"}, "properties": {"repobilityId": "d5e84812c42e41c9", "scanner": "scanner-primary", "fingerprint": "49c8d339885aad78", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-8f11cf5f14fc30a3", "level": "none", "message": {"text": "Commented-code block (6 lines) in packages/xian-zk/python/xian_zk/prover_service.py:80"}, "properties": {"repobilityId": "1fe07a77384f2e04", "scanner": "scanner-primary", "fingerprint": "8f11cf5f14fc30a3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f9581184ca75e847", "level": "note", "message": {"text": "Stub function `log_message` (body is just `pass`/`return`) \u2014 packages/xian-zk/python/xian_zk/prover_service.py:357"}, "properties": {"repobilityId": "8b7869f49c78a007", "scanner": "scanner-primary", "fingerprint": "f9581184ca75e847", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "empty-handler", "dead-code"]}}, {"ruleId": "scanner-e81c774eb2f02cb4", "level": "note", "message": {"text": "Legacy-named symbol `xian_vm_v1` in packages/xian-compiler-core/python/xian_compiler_core/__init__.py:24"}, "properties": {"repobilityId": "dd441223919d7b0a", "scanner": "scanner-primary", "fingerprint": "e81c774eb2f02cb4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-120ae4cbb9749d4b", "level": "note", "message": {"text": "Legacy-named symbol `xian_vm_v1` in packages/xian-vm-core/python/xian_vm_core/__init__.py:80"}, "properties": {"repobilityId": "fd21c32d335498b5", "scanner": "scanner-primary", "fingerprint": "120ae4cbb9749d4b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-7b3cb371713ff600", "level": "note", "message": {"text": "Legacy-named symbol `xian_contract_artifact_v1` in src/contracting/compiler/fixtures.py:41"}, "properties": {"repobilityId": "0c9d0324b55b8a33", "scanner": "scanner-primary", "fingerprint": "7b3cb371713ff600", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-54e0fa63ef27ec33", "level": "note", "message": {"text": "Legacy-named symbol `xian_vm_v1` in src/contracting/local/client.py:291"}, "properties": {"repobilityId": "5ad00a7343ad53d4", "scanner": "scanner-primary", "fingerprint": "54e0fa63ef27ec33", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-4e5348e2ea3f1600", "level": "note", "message": {"text": "Stub function `install_system_contracts` (body is just `pass`/`return`) \u2014 src/contracting/execution/module.py:86"}, "properties": {"repobilityId": "6374b46db187e521", "scanner": "scanner-primary", "fingerprint": "4e5348e2ea3f1600", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "empty-handler", "dead-code"]}}, {"ruleId": "scanner-6990c05cc93b4e52", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/contracting/execution/executor.py:232"}, "properties": {"repobilityId": "d81c2e94f8c84c62", "scanner": "scanner-primary", "fingerprint": "6990c05cc93b4e52", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e153cc7c3ed0811e", "level": "note", "message": {"text": "Legacy-named symbol `python_line_v1` in src/contracting/execution/tracer_common.py:11"}, "properties": {"repobilityId": "6a017c6389b8791a", "scanner": "scanner-primary", "fingerprint": "e153cc7c3ed0811e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-cebb7427a1a2a7eb", "level": "note", "message": {"text": "Stub function `close` (body is just `pass`/`return`) \u2014 src/contracting/execution/parallel.py:550"}, "properties": {"repobilityId": "932ab4867c0dd747", "scanner": "scanner-primary", "fingerprint": "cebb7427a1a2a7eb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "empty-handler", "dead-code"]}}, {"ruleId": "scanner-edcc3afe75c50639", "level": "note", "message": {"text": "Legacy-named symbol `xian_vm_v1` in src/contracting/compilation/vm.py:13"}, "properties": {"repobilityId": "1c99e409355e83dc", "scanner": "scanner-primary", "fingerprint": "edcc3afe75c50639", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-f1f5c5bc2a124dc3", "level": "note", "message": {"text": "Legacy-named symbol `xian_ir_v1` in src/contracting/compilation/ir.py:7"}, "properties": {"repobilityId": "f7d831ae7e324d7c", "scanner": "scanner-primary", "fingerprint": "f1f5c5bc2a124dc3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-f7913dc5e201e3a8", "level": "note", "message": {"text": "Legacy-named symbol `xian_contract_language_v1` in src/contracting/compilation/conformance.py:34"}, "properties": {"repobilityId": "645c3434c7be176c", "scanner": "scanner-primary", "fingerprint": "f7913dc5e201e3a8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-8b48d8d2727f27e7", "level": "note", "message": {"text": "Legacy-named symbol `xian_contract_artifact_v1` in src/contracting/compilation/artifacts.py:11"}, "properties": {"repobilityId": "786697f41ca2f8d7", "scanner": "scanner-primary", "fingerprint": "8b48d8d2727f27e7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-7888cf7010dc549f", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/contracting/stdlib/builtins.py:234"}, "properties": {"repobilityId": "4b4f80e3d9ba0ed5", "scanner": "scanner-primary", "fingerprint": "7888cf7010dc549f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-840a689b3913066b", "level": "note", "message": {"text": "Legacy-named symbol `xian_vm_v1` in src/contracting/storage/contract.py:77"}, "properties": {"repobilityId": "c84db22f60ce2a85", "scanner": "scanner-primary", "fingerprint": "840a689b3913066b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-c82a2ba18eacf739", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/contracting/storage/orm.py:25"}, "properties": {"repobilityId": "9854a8bf7227b76b", "scanner": "scanner-primary", "fingerprint": "c82a2ba18eacf739", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3884332604df19c8", "level": "note", "message": {"text": "Legacy-named symbol `xian_vm_v1` in src/contracting/storage/driver.py:225"}, "properties": {"repobilityId": "e5872429788e806a", "scanner": "scanner-primary", "fingerprint": "3884332604df19c8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "087323c504277a71", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "69741b31e6c85f87", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "6a88a884edb4ea57", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "338cd60f96b77422", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "391a93cfe2b09112", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "fc0eb0cdf1a82343", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "d523505a4706008b", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "2f5e09368dfcccd5", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "cec321025ab55b9c", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "7d3cc36159743c5d", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "14eb677da70fbd35", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "b78b7d3c62631c23", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "d5844ff05e078073", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "eab92024e3d7d49a", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "9aa0f2848f566ea0", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "68d7721e231d3732", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "739295d3781c9118", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "e7a98e43d0171d25", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "ddae55df986a298b", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "2ee320201e08840c", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}]}]}