Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

vela-science/vela

https://github.com/vela-science/vela · scanned 2026-06-16 00:48 UTC (2 months, 1 week ago)

66 raw signals (0 security + 66 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 1 week ago · v1 · 55 actionable findings from 1 signal source. 11 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

88.9% cov · 55 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 0 Medium 4 Low 42 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 55 Crowd 0 Layer: Software 11 Hardware 3 Frontend 1 Security 2 Quality 38

Exclude dismissed / FP Exclude test files

All 810 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`rust-toolchain.toml`	software	healthy	`rust-toolchain.toml`
`Cargo.toml`	software	healthy	`Cargo.toml`
`README.md`	software	healthy	`README.md`
`Cargo.lock`	software	healthy	`Cargo.lock`
`README.md`	software	healthy	`bindings/python/README.md`
`__init__.py`	software	healthy	`bindings/python/vela/__init__.py`
`README.md`	software	healthy	`lean/README.md`
`verify.sh`	software	healthy	`lean/scripts/verify.sh`
`verify_canonical_hashing.py`	software	healthy	`conformance/verify_canonical_hashing.py`
`README.md`	software	healthy	`conformance/README.md`
`canonical-hashing.json`	software	healthy	`conformance/canonical-hashing.json`
`verify_attempt_id.py`	software	healthy	`conformance/verify_attempt_id.py`
`spec-surface.v1.json`	software	healthy	`conformance/spec-surface.v1.json`
`attempt-id.json`	software	healthy	`conformance/attempt-id.json`
`verify.py`	software	healthy	`conformance/verify.py`
`gate-vectors.json`	software	healthy	`conformance/gate-vectors.json`
`fixtures.manifest.json`	software	healthy	`conformance/fixtures/fixtures.manifest.json`
`cascade-fixture-06.json`	software	healthy	`conformance/fixtures/cascade-fixture-06.json`
`cascade-fixture-04.json`	software	healthy	`conformance/fixtures/cascade-fixture-04.json`
`cascade-fixture-05.json`	software	healthy	`conformance/fixtures/cascade-fixture-05.json`
`cascade-fixture-08.json`	software	healthy	`conformance/fixtures/cascade-fixture-08.json`
`cascade-fixture-17.json`	software	healthy	`conformance/fixtures/cascade-fixture-17.json`
`cascade-fixture-00.json`	software	healthy	`conformance/fixtures/cascade-fixture-00.json`
`cascade-fixture-12.json`	software	healthy	`conformance/fixtures/cascade-fixture-12.json`
`cascade-fixture-03.json`	software	healthy	`conformance/fixtures/cascade-fixture-03.json`
`cascade-fixture-07.json`	software	healthy	`conformance/fixtures/cascade-fixture-07.json`
`cascade-fixture-13.json`	software	healthy	`conformance/fixtures/cascade-fixture-13.json`
`cascade-fixture-15.json`	software	healthy	`conformance/fixtures/cascade-fixture-15.json`
`cascade-fixture-14.json`	software	healthy	`conformance/fixtures/cascade-fixture-14.json`
`cascade-fixture-10.json`	software	healthy	`conformance/fixtures/cascade-fixture-10.json`
`cascade-fixture-02.json`	software	healthy	`conformance/fixtures/cascade-fixture-02.json`
`cascade-fixture-09.json`	software	healthy	`conformance/fixtures/cascade-fixture-09.json`
`cascade-fixture-16.json`	software	healthy	`conformance/fixtures/cascade-fixture-16.json`
`cascade-fixture-01.json`	software	healthy	`conformance/fixtures/cascade-fixture-01.json`
`cascade-fixture-11.json`	software	healthy	`conformance/fixtures/cascade-fixture-11.json`
`AGENT_QUICKSTART.md`	software	healthy	`docs/AGENT_QUICKSTART.md`
`PROTOCOL.md`	software	healthy	`docs/PROTOCOL.md`
`PROOF_VERIFICATION.md`	software	healthy	`docs/PROOF_VERIFICATION.md`
`PCK.md`	software	healthy	`docs/PCK.md`
`PUBLISHING.md`	software	healthy	`docs/PUBLISHING.md`
`TRANSPARENCY_LOG.md`	software	healthy	`docs/TRANSPARENCY_LOG.md`
`AI_ATTRIBUTION.md`	software	healthy	`docs/AI_ATTRIBUTION.md`
`CHECKPOINTS.md`	software	healthy	`docs/CHECKPOINTS.md`
`THEORY.md`	software	healthy	`docs/THEORY.md`
`THEORY_AUDIT.md`	software	healthy	`docs/THEORY_AUDIT.md`
`PROTOCOL_GUARANTEES.md`	software	healthy	`docs/PROTOCOL_GUARANTEES.md`
`PREFIXES.md`	software	healthy	`docs/PREFIXES.md`
`CARINA.md`	software	healthy	`docs/CARINA.md`
`REVIEWER_PLAYBOOK.md`	software	healthy	`docs/REVIEWER_PLAYBOOK.md`
`POVD.md`	software	healthy	`docs/POVD.md`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`_validate_provenance`	software	healthy	`bindings/python/vela/__init__.py:66`
`_canonicalize`	software	healthy	`bindings/python/vela/__init__.py:84`
`to_canonical_bytes`	software	healthy	`bindings/python/vela/__init__.py:100`
`sha256_hex`	software	healthy	`bindings/python/vela/__init__.py:110`
`load`	software	healthy	`bindings/python/vela/__init__.py:129`
`from_hex_key`	software	healthy	`bindings/python/vela/__init__.py:156`
`_signing_key`	software	healthy	`bindings/python/vela/__init__.py:159`
`sign_bytes`	software	healthy	`bindings/python/vela/__init__.py:162`
`_parse_toml_minimal`	software	healthy	`bindings/python/vela/__init__.py:166`
`from_dict`	software	healthy	`bindings/python/vela/__init__.py:229`
`__init__`	software	healthy	`bindings/python/vela/__init__.py:252`
`connect`	software	healthy	`bindings/python/vela/__init__.py:257`
`_post_tool`	software	healthy	`bindings/python/vela/__init__.py:263`
`stats`	software	healthy	`bindings/python/vela/__init__.py:286`
`findings`	software	dead	`bindings/python/vela/__init__.py:291`
`list_findings`	software	dead	`bindings/python/vela/__init__.py:304`
`find`	software	dead	`bindings/python/vela/__init__.py:314`
`events_since`	software	dead	`bindings/python/vela/__init__.py:319`
`_sign_proposal`	software	healthy	`bindings/python/vela/__init__.py:337`
`propose_review`	software	dead	`bindings/python/vela/__init__.py:378`
`propose_note`	software	dead	`bindings/python/vela/__init__.py:414`
`propose_and_apply_note`	software	dead	`bindings/python/vela/__init__.py:463`
`propose_revise_confidence`	software	dead	`bindings/python/vela/__init__.py:521`
`propose_retract`	software	dead	`bindings/python/vela/__init__.py:557`
`accept`	software	dead	`bindings/python/vela/__init__.py:591`
`reject`	software	dead	`bindings/python/vela/__init__.py:618`
`main`	software	healthy	`conformance/verify_canonical_hashing.py:35`
`canonical_bytes`	software	healthy	`conformance/verify_attempt_id.py:29`
`vat_id`	software	healthy	`conformance/verify_attempt_id.py:36`
`main`	software	healthy	`conformance/verify_attempt_id.py:44`
`_check_manifest`	software	healthy	`conformance/verify.py:37`
`main`	software	healthy	`conformance/verify.py:99`
`_run_canonical_hashing`	software	healthy	`conformance/verify.py:208`
`_run_ts_reducer`	software	healthy	`conformance/verify.py:222`
`names`	software	healthy	`clients/typescript/vela_reducer.ts:names`
`mirrors`	software	healthy	`clients/typescript/vela_reducer.ts:mirrors`
`_findFinding`	software	healthy	`clients/typescript/vela_reducer.ts:_findFinding`
`_ensureFlags`	software	healthy	`clients/typescript/vela_reducer.ts:_ensureFlags`
`_ensureAnnotations`	software	healthy	`clients/typescript/vela_reducer.ts:_ensureAnnotations`
`_ensureConfidence`	software	healthy	`clients/typescript/vela_reducer.ts:_ensureConfidence`
`_deepClone`	software	healthy	`clients/typescript/vela_reducer.ts:_deepClone`
`canonicalJson`	software	healthy	`clients/typescript/vela_reducer.ts:canonicalJson`
`sort`	software	healthy	`clients/typescript/vela_reducer.ts:sort`
`applyFindingAsserted`	software	healthy	`clients/typescript/vela_reducer.ts:applyFindingAsserted`
`applyFindingReviewed`	software	healthy	`clients/typescript/vela_reducer.ts:applyFindingReviewed`
`applyFindingAnnotation`	software	healthy	`clients/typescript/vela_reducer.ts:applyFindingAnnotation`
`applyFindingConfidenceRevised`	software	healthy	`clients/typescript/vela_reducer.ts:applyFindingConfidenceRe…`
`previous`	software	healthy	`clients/typescript/vela_reducer.ts:previous`
`applyFindingRejected`	software	healthy	`clients/typescript/vela_reducer.ts:applyFindingRejected`
`applyFindingRetracted`	software	healthy	`clients/typescript/vela_reducer.ts:applyFindingRetracted`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`bindings`	software	healthy	`bindings`
`python`	software	healthy	`bindings/python`
`vela`	software	healthy	`bindings/python/vela`
`lean`	software	healthy	`lean`
`scripts`	software	healthy	`lean/scripts`
`conformance`	software	healthy	`conformance`
`fixtures`	software	healthy	`conformance/fixtures`
`docs`	software	healthy	`docs`
`assets`	software	healthy	`assets`
`brand`	software	healthy	`assets/brand`
`schema`	software	healthy	`schema`
`protocol-ingestion`	software	healthy	`schema/protocol-ingestion`
`templates`	software	healthy	`templates`
`frontier`	software	healthy	`templates/frontier`
`benchmarks`	software	healthy	`templates/frontier/benchmarks`
`review`	software	healthy	`templates/frontier/review`
`crates`	software	healthy	`crates`
`vela-protocol-core`	software	healthy	`crates/vela-protocol-core`
`src`	software	healthy	`crates/vela-protocol-core/src`
`vela-protocol`	software	healthy	`crates/vela-protocol`
`tests`	software	healthy	`crates/vela-protocol/tests`
`fixtures`	software	healthy	`crates/vela-protocol/tests/fixtures`
`source-adapters`	software	healthy	`crates/vela-protocol/tests/fixtures/source-adapters`
`materials-project-v1`	software	healthy	`crates/vela-protocol/tests/fixtures/source-adapters/materia…`
`opentargets-platform-v4`	software	healthy	`crates/vela-protocol/tests/fixtures/source-adapters/opentar…`
`nasa-earthdata-cmr-v1`	software	healthy	`crates/vela-protocol/tests/fixtures/source-adapters/nasa-ea…`
`rcsb-pdb-v1`	software	healthy	`crates/vela-protocol/tests/fixtures/source-adapters/rcsb-pd…`
`openalex-works-v1`	software	healthy	`crates/vela-protocol/tests/fixtures/source-adapters/openale…`
`embedded`	software	healthy	`crates/vela-protocol/embedded`
`tests`	software	healthy	`crates/vela-protocol/embedded/tests`
`fixtures`	software	healthy	`crates/vela-protocol/embedded/tests/fixtures`
`legacy`	software	healthy	`crates/vela-protocol/embedded/tests/fixtures/legacy`
`carina-schemas`	software	healthy	`crates/vela-protocol/embedded/carina-schemas`
`src`	software	healthy	`crates/vela-protocol/src`
`vela-edge`	software	healthy	`crates/vela-edge`
`tests`	software	healthy	`crates/vela-edge/tests`
`embedded`	software	healthy	`crates/vela-edge/embedded`
`tests`	software	healthy	`crates/vela-edge/embedded/tests`
`fixtures`	software	healthy	`crates/vela-edge/embedded/tests/fixtures`
`legacy`	software	healthy	`crates/vela-edge/embedded/tests/fixtures/legacy`
`carina-schemas`	software	healthy	`crates/vela-edge/embedded/carina-schemas`
`src`	software	healthy	`crates/vela-edge/src`
`vela-hub`	software	healthy	`crates/vela-hub`
`tests`	software	healthy	`crates/vela-hub/tests`
`src`	software	healthy	`crates/vela-hub/src`
`vela-verify`	software	healthy	`crates/vela-verify`
`tests`	software	healthy	`crates/vela-verify/tests`
`corpus`	software	healthy	`crates/vela-verify/corpus`
`invalid`	software	healthy	`crates/vela-verify/corpus/invalid`
`src`	software	healthy	`crates/vela-verify/src`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`Actor`	software	healthy	`bindings/python/vela/__init__.py:118`
`Proposal`	software	healthy	`bindings/python/vela/__init__.py:191`
`StateTarget`	software	healthy	`bindings/python/vela/__init__.py:199`
`StateActor`	software	healthy	`bindings/python/vela/__init__.py:209`
`StateEvent`	software	healthy	`bindings/python/vela/__init__.py:219`
`Frontier`	software	healthy	`bindings/python/vela/__init__.py:244`
`VelaError`	software	healthy	`bindings/python/vela/__init__.py:644`
`FileCheck`	software	healthy	`clients/python/vela_verify.py:69`
`Report`	software	healthy	`clients/python/vela_verify.py:80`
`FixtureResult`	software	healthy	`clients/python/vela_reducer.py:1004`
`_QueuedProposal`	software	healthy	`clients/python/vela_agent/client.py:61`
`_OpenRun`	software	healthy	`clients/python/vela_agent/client.py:82`
`VelaAgent`	software	healthy	`clients/python/vela_agent/client.py:93`
`ScientificDiffPack`	software	healthy	`clients/python/vela_agent/primitives.py:65`
`ToolCall`	software	healthy	`clients/python/vela_agent/primitives.py:204`
`AgentAttestation`	software	healthy	`clients/python/vela_agent/primitives.py:212`
`TrajectoryStepKind`	software	healthy	`clients/python/vela_agent/primitives.py:396`
`TrajectoryStep`	software	healthy	`clients/python/vela_agent/primitives.py:425`
`TrajectoryHandle`	software	healthy	`clients/python/vela_agent/trajectory.py:32`
`BenchRun`	software	healthy	`clients/python/vela_agent/bench.py:114`
`BenchSession`	software	healthy	`clients/python/vela_agent/bench.py:124`
`VelaReader`	software	healthy	`clients/python/vela_agent/reader.py:63`

Label	Layer	Status	Path
`sqlite`	data	healthy	`Cargo.toml`
`postgres`	data	healthy	`Cargo.toml`

Label	Layer	Status	Path
`repobility-clone-xxgb_tfg`	software	healthy	`/tmp/repobility-clone-xxgb_tfg`

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`crates/vela-edge/src/doctor.rs`

Label	Layer	Status	Path
`port:8080`	network	healthy	`crates/vela-hub/Dockerfile`

Label	Layer	Status	Path
`image::crates/vela-hub/Dockerfile`	hardware	healthy	`crates/vela-hub/Dockerfile`

Label	Layer	Status	Path
`vps::aws`	hardware	healthy	`Cargo.lock`

Label	Layer	Status	Path
`gha::conformance`	cicd	healthy	`.github/workflows/conformance.yml`

Label	Layer	Status	Path
`rust`	cicd	healthy	`.github/workflows/conformance.yml`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/f649f49f-ed90-48ef-afff-1e09adaeefb9/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/f649f49f-ed90-48ef-afff-1e09adaeefb9/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

vela-science/vela

Complete repo analysis

file 50+

function 50+

directory 50+

class 22

database 2

repo 1

service 1

port 1

container 1

vps 1

pipeline 1

job 1