{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-bead75b0f9233e05", "name": "No API endpoints detected", "shortDescription": {"text": "No API endpoints detected"}, "fullDescription": {"text": "The scanner did not find FastAPI/Flask/Express/NestJS/GraphQL/gRPC routes. If this repo exposes APIs, the framework may be unsupported."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4ece1a6c6035b5a0", "name": "Stray `console.log` in TS/JS \u2014 scripts/db-apply-pending.ts:44", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/db-apply-pending.ts:44"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c6d5f374ce0c87f5", "name": "Stray `console.log` in TS/JS \u2014 scripts/seed-community-rules.ts:365", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/seed-community-rules.ts:365"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6b2309cac675e4ed", "name": "Stray `console.log` in TS/JS \u2014 scripts/seed-dev-user.ts:36", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/seed-dev-user.ts:36"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e71233965ceb5626", "name": "Stray `console.log` in TS/JS \u2014 scripts/seed-launchpad.ts:50", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/seed-launchpad.ts:50"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e4310324733a0593", "name": "Stray `console.log` in TS/JS \u2014 scripts/seed-articles.ts:22", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/seed-articles.ts:22"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-702350a8b6b7cb79", "name": "Stray `console.log` in TS/JS \u2014 scripts/test-mcp-tools.ts:34", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/test-mcp-tools.ts:34"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8fadc540fc9faa53", "name": "Stray `console.log` in TS/JS \u2014 scripts/db-verify-state.ts:36", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/db-verify-state.ts:36"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b3d092b6e7554927", "name": "Stray `console.log` in TS/JS \u2014 scripts/migrate-forum-data.ts:16", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/migrate-forum-data.ts:16"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-97326cd5c48bcf81", "name": "Stray `console.log` in TS/JS \u2014 scripts/payload-push.ts:18", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/payload-push.ts:18"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d98eb96244ff312f", "name": "Stray `console.log` in TS/JS \u2014 scripts/seed-demo-challenge.ts:31", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/seed-demo-challenge.ts:31"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d458dce80b788c1a", "name": "Stray `console.log` in TS/JS \u2014 scripts/generate-challenge.ts:17", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/generate-challenge.ts:17"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-83b5e1edecf274b4", "name": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/investigations/suppliers/[slug]/page.tsx:208", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/investigations/suppliers/[slug]/page.tsx:208"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7b0b99fd4d23efba", "name": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/communities/[slug]/events/[eventSlug]/manage/layou", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/communities/[slug]/events/[eventSlug]/manage/layout.tsx:39"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-079248630ff106c9", "name": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/benchmark/brands/page.tsx:87", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/benchmark/brands/page.tsx:87"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fbaa6fe5fa669cf9", "name": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/benchmark/brands/[slug]/_components/SurfaceCompari", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/benchmark/brands/[slug]/_components/SurfaceComparisonCard.tsx:49"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-23ad955fcf02eb7c", "name": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/benchmark/brands/[slug]/_components/CitationsPanel", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/benchmark/brands/[slug]/_components/CitationsPanel.tsx:40"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3d56b52b44c9248a", "name": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/benchmark/brands/[slug]/_components/PerModelBar.ts", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/benchmark/brands/[slug]/_components/PerModelBar.tsx:35"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3c617152413febdc", "name": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/benchmark/_components/submit-prompt-tab.tsx:113", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/benchmark/_components/submit-prompt-tab.tsx:113"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d9e95a4355c8261a", "name": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/benchmark/_components/benchmark-assignment-panel.t", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/benchmark/_components/benchmark-assignment-panel.tsx:184"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d94160766f7522f3", "name": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/benchmark/_components/dashboard/ranked-brand-row.t", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/benchmark/_components/dashboard/ranked-brand-row.tsx:50"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-61722b3f63a08135", "name": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/events/[slug]/page.tsx:436", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/events/[slug]/page.tsx:436"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-dc1a76f910015f66", "name": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/events/[slug]/agents/page.tsx:182", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/events/[slug]/agents/page.tsx:182"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0aa98a0486d3c85c", "name": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/events/[slug]/projects/page.tsx:106", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/events/[slug]/projects/page.tsx:106"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0424b66cdb132ffa", "name": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/events/[slug]/winners/page.tsx:122", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/events/[slug]/winners/page.tsx:122"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-51b0921c5b929f8c", "name": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/members/page.tsx:89", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/members/page.tsx:89"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-892fa6820f016a27", "name": "Stray `console.log` in TS/JS \u2014 src/scripts/seed-commitments.ts:497", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/scripts/seed-commitments.ts:497"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c68b3831ca0f85a1", "name": "Stray `console.log` in TS/JS \u2014 src/scripts/dev-backfill-unresolved-mentions.ts:32", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/scripts/dev-backfill-unresolved-mentions.ts:32"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3fa8b44a562d640e", "name": "Stray `console.log` in TS/JS \u2014 src/scripts/dev-extract-run.ts:135", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/scripts/dev-extract-run.ts:135"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5eba4e86d1629fee", "name": "Stray `console.log` in TS/JS \u2014 src/scripts/seed-datacenters.ts:293", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/scripts/seed-datacenters.ts:293"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-45feda93b2772005", "name": "TODO/FIXME marker in shipping code \u2014 src/scripts/backfill-impact-metadata.ts:210", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 src/scripts/backfill-impact-metadata.ts:210"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-87dd047af16705b5", "name": "Stray `console.log` in TS/JS \u2014 src/scripts/backfill-impact-metadata.ts:29", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/scripts/backfill-impact-metadata.ts:29"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-332c7b4d65e75f05", "name": "Stray `console.log` in TS/JS \u2014 src/scripts/seed-suppliers.ts:2088", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/scripts/seed-suppliers.ts:2088"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ad4e912c2f3dc781", "name": "Stray `console.log` in TS/JS \u2014 src/scripts/backfill-event-geocoding.ts:40", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/scripts/backfill-event-geocoding.ts:40"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c5b2e473bb784e6e", "name": "Stray `console.log` in TS/JS \u2014 src/scripts/seed-benchmark.ts:115", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/scripts/seed-benchmark.ts:115"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b6acc080e00b13b1", "name": "Stray `console.log` in TS/JS \u2014 src/scripts/apply-manifest-acceptance.ts:63", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/scripts/apply-manifest-acceptance.ts:63"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f14d4dd775b8d647", "name": "Stray `console.log` in TS/JS \u2014 src/scripts/seed-investigations.ts:33", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/scripts/seed-investigations.ts:33"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7fa8945da9faac72", "name": "Stray `console.log` in TS/JS \u2014 src/scripts/list-pending-runs.ts:44", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/scripts/list-pending-runs.ts:44"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-20fe891bb059dae8", "name": "Stray `console.log` in TS/JS \u2014 src/scripts/benchmark-extractor/run.ts:69", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/scripts/benchmark-extractor/run.ts:69"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6d32ed7cea09d760", "name": "Stray `console.log` in TS/JS \u2014 src/server/api/trpc.ts:108", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/server/api/trpc.ts:108"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3362831b42004816", "name": "Stray `console.log` in TS/JS \u2014 src/server/db/seed-ait-community.ts:17", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/server/db/seed-ait-community.ts:17"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9e5f3594927f1eb7", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 src/components/json-ld.tsx:5", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 src/components/json-ld.tsx:5"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bb6b67e1aae5001a", "name": "`truncate` class without `title=` for hover reveal \u2014 src/components/agent-quick-start.tsx:633", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/agent-quick-start.tsx:633"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-80563168bf6b2cfe", "name": "`truncate` class without `title=` for hover reveal \u2014 src/components/agent-drafts.tsx:92", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/agent-drafts.tsx:92"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4dd099442bbe5728", "name": "`truncate` class without `title=` for hover reveal \u2014 src/components/social-suggestions.tsx:55", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/social-suggestions.tsx:55"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1b4e85c36c289caf", "name": "`truncate` class without `title=` for hover reveal \u2014 src/components/agent-suggestions.tsx:61", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/agent-suggestions.tsx:61"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9f6c17fb7513a64f", "name": "React Flow <Controls> without dark theming \u2014 src/components/datacenters/relationship-graph.tsx:149", "shortDescription": {"text": "React Flow <Controls> without dark theming \u2014 src/components/datacenters/relationship-graph.tsx:149"}, "fullDescription": {"text": "`<Controls>` ships with white buttons. Override `.react-flow__controls` and `.react-flow__controls-button` in your stylesheet or pass a styled wrapper.\n\nWhy: P1 in CHECKLIST.md \u2014 vendor defaults bleed light through.\nRule id: fq.controls.no-bg"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5d00c7b789a216c0", "name": "`truncate` class without `title=` for hover reveal \u2014 src/components/datacenters/red-flags-panel.tsx:149", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/datacenters/red-flags-panel.tsx:149"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b92625fe1c48f925", "name": "`truncate` class without `title=` for hover reveal \u2014 src/components/hackathon/team-leaderboard.tsx:70", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/hackathon/team-leaderboard.tsx:70"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e44be28a4bd09a03", "name": "`truncate` class without `title=` for hover reveal \u2014 src/components/hackathon/workspace/activity-feed.tsx:86", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/hackathon/workspace/activity-feed.tsx:86"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1167a016bd2ce723", "name": "`truncate` class without `title=` for hover reveal \u2014 src/components/hackathon/workspace/cell-drawer.tsx:110", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/hackathon/workspace/cell-drawer.tsx:110"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b60a1a0640d5db7b", "name": "`truncate` class without `title=` for hover reveal \u2014 src/components/classroom/lesson-editor.tsx:224", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/classroom/lesson-editor.tsx:224"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b189e9f040168adc", "name": "`truncate` class without `title=` for hover reveal \u2014 src/components/classroom/course-view.tsx:377", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/classroom/course-view.tsx:377"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-91c87c035e918099", "name": "`truncate` class without `title=` for hover reveal \u2014 src/components/agent/setup-n8n.tsx:112", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/agent/setup-n8n.tsx:112"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c63eb000f04f3d9a", "name": "Icon-only button without accessible name \u2014 src/components/article-editor/floating-toolbar.tsx:363", "shortDescription": {"text": "Icon-only button without accessible name \u2014 src/components/article-editor/floating-toolbar.tsx:363"}, "fullDescription": {"text": "A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work.\n\nWhy: P3 in CHECKLIST.md \u2014 icon-only buttons skipped a title.\nRule id: fq.button.no-label"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a268577bebc4d3b3", "name": "`truncate` class without `title=` for hover reveal \u2014 src/components/ai-elements/attachments.tsx:303", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/ai-elements/attachments.tsx:303"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6cd631c6e3cb5fba", "name": "`truncate` class without `title=` for hover reveal \u2014 src/components/ai-elements/inline-citation.tsx:264", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/ai-elements/inline-citation.tsx:264"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-472aed3d3afb178a", "name": "`truncate` class without `title=` for hover reveal \u2014 src/components/ai-elements/queue.tsx:180", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/ai-elements/queue.tsx:180"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ac34dd3b6e90c677", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 src/components/ai-elements/schema-display.tsx:180", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 src/components/ai-elements/schema-display.tsx:180"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-414eee0c2884ae68", "name": "`truncate` class without `title=` for hover reveal \u2014 src/components/communities/community-card.tsx:63", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/communities/community-card.tsx:63"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7ba6158a32608df6", "name": "`truncate` class without `title=` for hover reveal \u2014 src/components/communities/feed/community-sidebar.tsx:103", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/communities/feed/community-sidebar.tsx:103"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ec7b2622a29de048", "name": "`truncate` class without `title=` for hover reveal \u2014 src/components/communities/rituals/rituals-manager.tsx:79", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/communities/rituals/rituals-manager.tsx:79"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ca308ecf4c34edef", "name": "`truncate` class without `title=` for hover reveal \u2014 src/components/launchpad/launchpad-card.tsx:146", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/launchpad/launchpad-card.tsx:146"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-83a9b939558a356c", "name": "`truncate` class without `title=` for hover reveal \u2014 src/components/notifications/notification-panel.tsx:184", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/notifications/notification-panel.tsx:184"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5eaf76edc20ff93f", "name": "`truncate` class without `title=` for hover reveal \u2014 src/components/inbox/inbox-mobile-view.tsx:172", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/inbox/inbox-mobile-view.tsx:172"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8256e2c710d4c3a3", "name": "`truncate` class without `title=` for hover reveal \u2014 src/components/inbox/chat-window-minimized.tsx:61", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/inbox/chat-window-minimized.tsx:61"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c9a17950b3f6fd4c", "name": "`truncate` class without `title=` for hover reveal \u2014 src/components/inbox/chat-window.tsx:166", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/inbox/chat-window.tsx:166"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d930ee64664caeff", "name": "`truncate` class without `title=` for hover reveal \u2014 src/components/inbox/inbox-list.tsx:261", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/inbox/inbox-list.tsx:261"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ad6339d612386ca6", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 src/lib/lexical.tsx:387", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 src/lib/lexical.tsx:387"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d63da3583b14afc0", "name": "Dockerfile runs as root: Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-59cbf6e36a0e3777", "name": "Docker base image is tag-pinned but not digest-pinned: node:22-bookworm-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: node:22-bookworm-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cc9b5a945a64fa05", "name": "Runtime dotenv file present in repo: .env.local.off", "shortDescription": {"text": "Runtime dotenv file present in repo: .env.local.off"}, "fullDescription": {"text": "`.env.local.off` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-976dcfdf81caa739", "name": "Runtime dotenv file present in repo: .env.docker", "shortDescription": {"text": "Runtime dotenv file present in repo: .env.docker"}, "fullDescription": {"text": "`.env.docker` looks like a runtime dotenv file. It contains secret-looking assignments for BETTER_AUTH_SECRET, BETTER_AUTH_GITHUB_CLIENT_SECRET, PAYLOAD_SECRET, CRON_SECRET, DEV_USER_PASSWORD. Move real values to a secret manager and keep only `.env.example` style templates in source control."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-5c6c07665bfc7984", "name": "Insecure pattern 'dangerous_innerhtml' in src/components/json-ld.tsx:5", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in src/components/json-ld.tsx:5"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f3e1ca103b058769", "name": "Insecure pattern 'dangerous_innerhtml' in src/components/ai-elements/schema-display.tsx:180", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in src/components/ai-elements/schema-display.tsx:180"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1a50d0a57dae9658", "name": "Insecure pattern 'dangerous_innerhtml' in src/lib/lexical.tsx:387", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in src/lib/lexical.tsx:387"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dc61681288557880", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a60752b9441f0394", "name": "Very large file: src/payload-types.ts (2238 lines)", "shortDescription": {"text": "Very large file: src/payload-types.ts (2238 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b865fd3b8c6be4df", "name": "Very large file: src/payload-generated-schema.ts (3473 lines)", "shortDescription": {"text": "Very large file: src/payload-generated-schema.ts (3473 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-44fa889799b53730", "name": "Very large file: src/scripts/seed-suppliers.ts (2170 lines)", "shortDescription": {"text": "Very large file: src/scripts/seed-suppliers.ts (2170 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a7a21d1db8b87776", "name": "Very large file: src/scripts/seed-data/ai-native.ts (2113 lines)", "shortDescription": {"text": "Very large file: src/scripts/seed-data/ai-native.ts (2113 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-92de1410ee8d1a8e", "name": "Very large file: src/scripts/seed-data/na.ts (2053 lines)", "shortDescription": {"text": "Very large file: src/scripts/seed-data/na.ts (2053 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a997fbf8638abb2a", "name": "Very large file: src/server/api/routers/benchmark.ts (2038 lines)", "shortDescription": {"text": "Very large file: src/server/api/routers/benchmark.ts (2038 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49ba9d8a1a6c17c7", "name": "Very large file: src/server/api/routers/hackathon.ts (1622 lines)", "shortDescription": {"text": "Very large file: src/server/api/routers/hackathon.ts (1622 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-86c2562e45916719", "name": "Very large file: src/server/api/routers/agent.ts (2054 lines)", "shortDescription": {"text": "Very large file: src/server/api/routers/agent.ts (2054 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1e91ba95273bd504", "name": "Very large file: src/server/api/routers/work-grid.integration.test.ts (1325 lines)", "shortDescription": {"text": "Very large file: src/server/api/routers/work-grid.integration.test.ts (1325 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b020bf439debcfbb", "name": "Very large file: src/server/api/routers/agent-management.ts (1645 lines)", "shortDescription": {"text": "Very large file: src/server/api/routers/agent-management.ts (1645 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-91a88d8de31aaa2c", "name": "Very large file: src/server/api/routers/datacenters.ts (1830 lines)", "shortDescription": {"text": "Very large file: src/server/api/routers/datacenters.ts (1830 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a145099b572a9c98", "name": "Very large file: src/server/db/schema.ts (3613 lines)", "shortDescription": {"text": "Very large file: src/server/db/schema.ts (3613 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ea3b5e389d8c9c0f", "name": "Low test-to-source ratio", "shortDescription": {"text": "Low test-to-source ratio"}, "fullDescription": {"text": "102 tests / 829 src (ratio 0.12)."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 133 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 193 placeholder/mock markers across 74 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-358318a96ee31dc4", "name": "Agent authority lacks a verifier contract: skills/openclaw/ait-community/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/openclaw/ait-community/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6df3158cf227df6e", "name": "Agent instruction/config may expose a secret: .claude/skills/neon-postgres/references/getting-started.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/neon-postgres/references/getting-started.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-63a78b1473140d0a", "name": "Agent authority lacks a verifier contract: .claude/skills/neon-postgres/references/connection-methods.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/neon-postgres/references/connection-methods.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f63dcbf5423b2e42", "name": "Agent authority lacks a verifier contract: .claude/skills/neon-postgres/references/neon-cli.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/neon-postgres/references/neon-cli.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f09f1d3c2ba0f06a", "name": "Agent instruction contains unpinned remote install: .claude/skills/neon-postgres/references/neon-cli.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/skills/neon-postgres/references/neon-cli.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b8576425e0418657", "name": "Agent authority lacks a verifier contract: .claude/skills/neon-postgres/references/neon-js.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/neon-postgres/references/neon-js.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c8c1bb1f88e8cc07", "name": "Agent authority lacks a verifier contract: .claude/skills/neon-postgres/references/branching.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/neon-postgres/references/branching.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-49cb1bd5688cc9ac", "name": "Agent authority lacks a verifier contract: .claude/skills/neon-postgres/references/neon-python-sdk.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/neon-postgres/references/neon-python-sdk.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cdb7bf4f6a265696", "name": "Agent authority lacks a verifier contract: .claude/skills/neon-postgres/references/neon-serverless.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/neon-postgres/references/neon-serverless.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7b3efb32afd31889", "name": "Agent authority lacks a verifier contract: .claude/skills/neon-postgres/references/neon-typescript-sdk.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/neon-postgres/references/neon-typescript-sdk.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6776fd0e148a8066", "name": "Commented-code block (6 lines) in next.config.js:14", "shortDescription": {"text": "Commented-code block (6 lines) in next.config.js:14"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ddd2c7362276fc8d", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/seed-articles.ts:231", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/seed-articles.ts:231"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dca8f90e40d3faf7", "name": "Commented-code block (7 lines) in src/app/api/mcp/route.ts:12", "shortDescription": {"text": "Commented-code block (7 lines) in src/app/api/mcp/route.ts:12"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-03aacac5a0861450", "name": "Commented-code block (7 lines) in src/app/api/mcp/commission-tools.ts:5", "shortDescription": {"text": "Commented-code block (7 lines) in src/app/api/mcp/commission-tools.ts:5"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6a4d4e253cdde507", "name": "Commented-code block (5 lines) in src/app/[locale]/benchmark/dashboard/page.tsx:1", "shortDescription": {"text": "Commented-code block (5 lines) in src/app/[locale]/benchmark/dashboard/page.tsx:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ebb8935e56e7b893", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/scripts/dev-extract-run.ts:44", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/scripts/dev-extract-run.ts:44"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-49ba44572f98feec", "name": "Commented-code block (6 lines) in src/scripts/backfill-impact-metadata.ts:210", "shortDescription": {"text": "Commented-code block (6 lines) in src/scripts/backfill-impact-metadata.ts:210"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f3e76cf16fc49ad2", "name": "Commented-code block (9 lines) in src/scripts/seed-data/ownership.ts:37", "shortDescription": {"text": "Commented-code block (9 lines) in src/scripts/seed-data/ownership.ts:37"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c75f76cfdb54d494", "name": "Commented-code block (6 lines) in src/scripts/seed-data/permits.ts:20", "shortDescription": {"text": "Commented-code block (6 lines) in src/scripts/seed-data/permits.ts:20"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-77153849b9b7cb27", "name": "Commented-code block (7 lines) in src/scripts/seed-data/capex.ts:10", "shortDescription": {"text": "Commented-code block (7 lines) in src/scripts/seed-data/capex.ts:10"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-43132a8734fe5619", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/scripts/benchmark-extractor/run.ts:15", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/scripts/benchmark-extractor/run.ts:15"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c75c4ea9582bb1f8", "name": "Commented-code block (7 lines) in src/server/api/routers/benchmark.ts:180", "shortDescription": {"text": "Commented-code block (7 lines) in src/server/api/routers/benchmark.ts:180"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c19b73f89563f5cd", "name": "Commented-code block (8 lines) in src/server/api/routers/hackathon.ts:274", "shortDescription": {"text": "Commented-code block (8 lines) in src/server/api/routers/hackathon.ts:274"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-eba275ade4b46b4b", "name": "Commented-code block (7 lines) in src/server/api/routers/team-workspace.ts:1", "shortDescription": {"text": "Commented-code block (7 lines) in src/server/api/routers/team-workspace.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-67685a73679890fc", "name": "Commented-code block (10 lines) in src/server/api/routers/teams.ts:1", "shortDescription": {"text": "Commented-code block (10 lines) in src/server/api/routers/teams.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d9b3d16e57c7451b", "name": "Commented-code block (7 lines) in src/server/api/routers/work-grid.ts:260", "shortDescription": {"text": "Commented-code block (7 lines) in src/server/api/routers/work-grid.ts:260"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-18a3f7caf2c3ea4e", "name": "Commented-code block (7 lines) in src/server/hackathon/phase.ts:1", "shortDescription": {"text": "Commented-code block (7 lines) in src/server/hackathon/phase.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-460c4c9760785e0e", "name": "Commented-code block (5 lines) in src/server/hackathon/team-membership.ts:4", "shortDescription": {"text": "Commented-code block (5 lines) in src/server/hackathon/team-membership.ts:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c0091355fd29605c", "name": "Commented-code block (5 lines) in src/server/hackathon/agent-tab-surfaces.ts:1", "shortDescription": {"text": "Commented-code block (5 lines) in src/server/hackathon/agent-tab-surfaces.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cc46346ad6700fa3", "name": "Commented-code block (5 lines) in src/server/hackathon/analytics.ts:1", "shortDescription": {"text": "Commented-code block (5 lines) in src/server/hackathon/analytics.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-83636c50d866d960", "name": "Commented-code block (5 lines) in src/server/hackathon/task-progress.ts:1", "shortDescription": {"text": "Commented-code block (5 lines) in src/server/hackathon/task-progress.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-15502fa5b70429f7", "name": "Commented-code block (7 lines) in src/server/hackathon/looking-for-team.ts:1", "shortDescription": {"text": "Commented-code block (7 lines) in src/server/hackathon/looking-for-team.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-88b56274b54570fa", "name": "Commented-code block (5 lines) in src/server/hackathon/binding-invariant.ts:1", "shortDescription": {"text": "Commented-code block (5 lines) in src/server/hackathon/binding-invariant.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0fd773a6bb5ad298", "name": "Commented-code block (6 lines) in src/server/hackathon/gallery.ts:1", "shortDescription": {"text": "Commented-code block (6 lines) in src/server/hackathon/gallery.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b6816090a5c4da22", "name": "Commented-code block (8 lines) in src/server/hackathon/certificates.ts:1", "shortDescription": {"text": "Commented-code block (8 lines) in src/server/hackathon/certificates.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bfa8975ab4a1c6be", "name": "Commented-code block (5 lines) in src/server/hackathon/hub-tabs.ts:1", "shortDescription": {"text": "Commented-code block (5 lines) in src/server/hackathon/hub-tabs.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5f6b716730f010d7", "name": "Commented-code block (5 lines) in src/server/hackathon/activity.ts:1", "shortDescription": {"text": "Commented-code block (5 lines) in src/server/hackathon/activity.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1d9ebdd3216effbc", "name": "Commented-code block (6 lines) in src/server/hackathon/resolve-public-hackathon.ts:1", "shortDescription": {"text": "Commented-code block (6 lines) in src/server/hackathon/resolve-public-hackathon.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8992119211587b58", "name": "Commented-code block (5 lines) in src/server/hackathon/team-join-code.ts:1", "shortDescription": {"text": "Commented-code block (5 lines) in src/server/hackathon/team-join-code.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-48e9c17887511f4b", "name": "Commented-code block (5 lines) in src/server/hackathon/winners.ts:1", "shortDescription": {"text": "Commented-code block (5 lines) in src/server/hackathon/winners.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4832397910caaa73", "name": "Commented-code block (5 lines) in src/server/hackathon/scoring.ts:1", "shortDescription": {"text": "Commented-code block (5 lines) in src/server/hackathon/scoring.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f3b6620fadfb6382", "name": "Commented-code block (7 lines) in src/server/hackathon/peoples-choice.ts:1", "shortDescription": {"text": "Commented-code block (7 lines) in src/server/hackathon/peoples-choice.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9cbfb20c2357ebeb", "name": "Commented-code block (5 lines) in src/server/agent/verify-x-tweet.ts:3", "shortDescription": {"text": "Commented-code block (5 lines) in src/server/agent/verify-x-tweet.ts:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-97a2f6cac191a94c", "name": "Commented-code block (5 lines) in src/server/db/schema.ts:1727", "shortDescription": {"text": "Commented-code block (5 lines) in src/server/db/schema.ts:1727"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-235aa1ad0440ba72", "name": "Commented-code block (7 lines) in src/server/notifications/broadcast-send.ts:112", "shortDescription": {"text": "Commented-code block (7 lines) in src/server/notifications/broadcast-send.ts:112"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-604404c9c4a3718e", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/server/benchmark/suggest-prompts.ts:104", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/server/benchmark/suggest-prompts.ts:104"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2ed92d81a67f10d2", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/server/benchmark/extract-run.ts:180", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/server/benchmark/extract-run.ts:180"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-011f9e1c4566df8c", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/server/benchmark/strategy.ts:411", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/server/benchmark/strategy.ts:411"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2067a896e9eb91b4", "name": "Commented-code block (5 lines) in src/server/benchmark/coverage-badges.ts:6", "shortDescription": {"text": "Commented-code block (5 lines) in src/server/benchmark/coverage-badges.ts:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ebd03406d8a13af3", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/server/events/import-from-url.ts:42", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/server/events/import-from-url.ts:42"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-25bd8e5207ca7105", "name": "Commented-code block (5 lines) in src/components/agents/tool-catalog-list.tsx:1", "shortDescription": {"text": "Commented-code block (5 lines) in src/components/agents/tool-catalog-list.tsx:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-74e30c90f829b018", "name": "Commented-code block (5 lines) in src/components/hackathon/hackathon-analytics.tsx:3", "shortDescription": {"text": "Commented-code block (5 lines) in src/components/hackathon/hackathon-analytics.tsx:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-38ce4b5330a44c24", "name": "Commented-code block (7 lines) in src/collections/Events.ts:185", "shortDescription": {"text": "Commented-code block (7 lines) in src/collections/Events.ts:185"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f4ec4f739cd32465", "name": "Commented-code block (5 lines) in src/lib/benchmark-constants.ts:31", "shortDescription": {"text": "Commented-code block (5 lines) in src/lib/benchmark-constants.ts:31"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-246f0f04a43f0392", "name": "Commented-code block (5 lines) in src/migrations/20260608b_classrooms.ts:65", "shortDescription": {"text": "Commented-code block (5 lines) in src/migrations/20260608b_classrooms.ts:65"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4d36a27b2e08ba20", "name": "Commented-code block (7 lines) in src/migrations/20260612f_work_cell_progress.ts:1", "shortDescription": {"text": "Commented-code block (7 lines) in src/migrations/20260612f_work_cell_progress.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3bf37405d508fe0e", "name": "Commented-code block (7 lines) in src/migrations/20260610a_participant_workspace.ts:1", "shortDescription": {"text": "Commented-code block (7 lines) in src/migrations/20260610a_participant_workspace.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fbbd0324963484ed", "name": "Commented-code block (7 lines) in src/migrations/20260609c_events_challenge_binding.ts:4", "shortDescription": {"text": "Commented-code block (7 lines) in src/migrations/20260609c_events_challenge_binding.ts:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3a785dbec1646043", "name": "Commented-code block (5 lines) in src/migrations/20260611a_classroom_modules.ts:1", "shortDescription": {"text": "Commented-code block (5 lines) in src/migrations/20260611a_classroom_modules.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a7845f031ca8912f", "name": "Commented-code block (8 lines) in src/migrations/20260612b_looking_for_team.ts:1", "shortDescription": {"text": "Commented-code block (8 lines) in src/migrations/20260612b_looking_for_team.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-130e39c0425a87a9", "name": "Commented-code block (8 lines) in src/migrations/20260612a_hackathon_certificates.ts:1", "shortDescription": {"text": "Commented-code block (8 lines) in src/migrations/20260612a_hackathon_certificates.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5b759be608b5d773", "name": "Commented-code block (10 lines) in src/migrations/20260612d_peoples_choice_votes.ts:1", "shortDescription": {"text": "Commented-code block (10 lines) in src/migrations/20260612d_peoples_choice_votes.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a65e58503e2e3736", "name": "Commented-code block (8 lines) in src/migrations/20260604a_work_grid_commission.ts:1", "shortDescription": {"text": "Commented-code block (8 lines) in src/migrations/20260604a_work_grid_commission.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b3a65c9072a7c130", "name": "Commented-code block (7 lines) in src/migrations/20260611c_events_status_enum_values.ts:4", "shortDescription": {"text": "Commented-code block (7 lines) in src/migrations/20260611c_events_status_enum_values.ts:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-aae72eedfdcae0b4", "name": "Commented-code block (8 lines) in src/migrations/20260612e_email_templates.ts:1", "shortDescription": {"text": "Commented-code block (8 lines) in src/migrations/20260612e_email_templates.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-088117fe95b6dde4", "name": "Commented-code block (6 lines) in src/migrations/20260601a_agent_manifest_acceptance.ts:1", "shortDescription": {"text": "Commented-code block (6 lines) in src/migrations/20260601a_agent_manifest_acceptance.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-582a114c241d7b97", "name": "Commented-code block (6 lines) in src/migrations/20260612c_event_timezone.ts:9", "shortDescription": {"text": "Commented-code block (6 lines) in src/migrations/20260612c_event_timezone.ts:9"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2c92aa09ce7aff5a", "name": "Commented-code block (6 lines) in src/migrations/20260609d_challenge_team_config_and_cell_template.ts:4", "shortDescription": {"text": "Commented-code block (6 lines) in src/migrations/20260609d_challenge_team_config_and_cell_template.ts:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8e9bbe264e6bcf81", "name": "Commented-code block (7 lines) in src/migrations/20260609a_hackathon_teams.ts:1", "shortDescription": {"text": "Commented-code block (7 lines) in src/migrations/20260609a_hackathon_teams.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7c8b918e1fee9558", "name": "20 env vars used in code but missing from .env.example", "shortDescription": {"text": "20 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `AIT_API_BASE`, `AIT_EXTRACTOR_API_KEY`, `DAY_WINDOW`, `DEFAULT_VISITOR_COUNTRY`, `DEV_USER_EMAIL`, `DEV_USER_NAME`, `DEV_USER_PASSWORD`, `EXTRACTOR_MODEL` + 12 more. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/24003"}, "properties": {"repository": "ai-tech-community/aitcom", "repoUrl": "https://github.com/ai-tech-community/aitcom", "branch": "main"}, "results": [{"ruleId": "scanner-bead75b0f9233e05", "level": "none", "message": {"text": "No API endpoints detected"}, "properties": {"repobilityId": "0f8bb852027c38f8", "scanner": "scanner-primary", "fingerprint": "bead75b0f9233e05", "layer": "api", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-4ece1a6c6035b5a0", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/db-apply-pending.ts:44"}, "properties": {"repobilityId": "da8e58eb323499bc", "scanner": "scanner-primary", "fingerprint": "4ece1a6c6035b5a0", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c6d5f374ce0c87f5", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/seed-community-rules.ts:365"}, "properties": {"repobilityId": "e1405337e05d268c", "scanner": "scanner-primary", "fingerprint": "c6d5f374ce0c87f5", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-6b2309cac675e4ed", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/seed-dev-user.ts:36"}, "properties": {"repobilityId": "ceb73ba988cdc3a9", "scanner": "scanner-primary", "fingerprint": "6b2309cac675e4ed", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-e71233965ceb5626", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/seed-launchpad.ts:50"}, "properties": {"repobilityId": "6f667e1f313fdd0d", "scanner": "scanner-primary", "fingerprint": "e71233965ceb5626", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-e4310324733a0593", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/seed-articles.ts:22"}, "properties": {"repobilityId": "d0f496c2fb27f224", "scanner": "scanner-primary", "fingerprint": "e4310324733a0593", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-702350a8b6b7cb79", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/test-mcp-tools.ts:34"}, "properties": {"repobilityId": "fa54e6a458e0cda8", "scanner": "scanner-primary", "fingerprint": "702350a8b6b7cb79", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-8fadc540fc9faa53", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/db-verify-state.ts:36"}, "properties": {"repobilityId": "645254e0a39bbbad", "scanner": "scanner-primary", "fingerprint": "8fadc540fc9faa53", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-b3d092b6e7554927", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/migrate-forum-data.ts:16"}, "properties": {"repobilityId": "fabe6804d941475d", "scanner": "scanner-primary", "fingerprint": "b3d092b6e7554927", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-97326cd5c48bcf81", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/payload-push.ts:18"}, "properties": {"repobilityId": "323dd59d0dd89b14", "scanner": "scanner-primary", "fingerprint": "97326cd5c48bcf81", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d98eb96244ff312f", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/seed-demo-challenge.ts:31"}, "properties": {"repobilityId": "6aa07db7c596488b", "scanner": "scanner-primary", "fingerprint": "d98eb96244ff312f", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d458dce80b788c1a", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/generate-challenge.ts:17"}, "properties": {"repobilityId": "be027d9b13c079cd", "scanner": "scanner-primary", "fingerprint": "d458dce80b788c1a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-83b5e1edecf274b4", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/investigations/suppliers/[slug]/page.tsx:208"}, "properties": {"repobilityId": "7ccd4d75aaf39695", "scanner": "scanner-primary", "fingerprint": "83b5e1edecf274b4", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-7b0b99fd4d23efba", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/communities/[slug]/events/[eventSlug]/manage/layout.tsx:39"}, "properties": {"repobilityId": "122a516ee573eddb", "scanner": "scanner-primary", "fingerprint": "7b0b99fd4d23efba", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-079248630ff106c9", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/benchmark/brands/page.tsx:87"}, "properties": {"repobilityId": "2bd2d2be624d49dc", "scanner": "scanner-primary", "fingerprint": "079248630ff106c9", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-fbaa6fe5fa669cf9", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/benchmark/brands/[slug]/_components/SurfaceComparisonCard.tsx:49"}, "properties": {"repobilityId": "52eb926329cd29db", "scanner": "scanner-primary", "fingerprint": "fbaa6fe5fa669cf9", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-23ad955fcf02eb7c", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/benchmark/brands/[slug]/_components/CitationsPanel.tsx:40"}, "properties": {"repobilityId": "a7b98f04361826cf", "scanner": "scanner-primary", "fingerprint": "23ad955fcf02eb7c", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-3d56b52b44c9248a", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/benchmark/brands/[slug]/_components/PerModelBar.tsx:35"}, "properties": {"repobilityId": "1502e044b817c91d", "scanner": "scanner-primary", "fingerprint": "3d56b52b44c9248a", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-3c617152413febdc", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/benchmark/_components/submit-prompt-tab.tsx:113"}, "properties": {"repobilityId": "88e3cf69abdfe506", "scanner": "scanner-primary", "fingerprint": "3c617152413febdc", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-d9e95a4355c8261a", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/benchmark/_components/benchmark-assignment-panel.tsx:184"}, "properties": {"repobilityId": "df4d13ce5ca1819d", "scanner": "scanner-primary", "fingerprint": "d9e95a4355c8261a", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-d94160766f7522f3", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/benchmark/_components/dashboard/ranked-brand-row.tsx:50"}, "properties": {"repobilityId": "e416a456ea2ae434", "scanner": "scanner-primary", "fingerprint": "d94160766f7522f3", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-61722b3f63a08135", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/events/[slug]/page.tsx:436"}, "properties": {"repobilityId": "1911283aaaca9b60", "scanner": "scanner-primary", "fingerprint": "61722b3f63a08135", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-dc1a76f910015f66", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/events/[slug]/agents/page.tsx:182"}, "properties": {"repobilityId": "ef68f011bd006ca0", "scanner": "scanner-primary", "fingerprint": "dc1a76f910015f66", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-0aa98a0486d3c85c", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/events/[slug]/projects/page.tsx:106"}, "properties": {"repobilityId": "8755b8130813a534", "scanner": "scanner-primary", "fingerprint": "0aa98a0486d3c85c", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-0424b66cdb132ffa", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/events/[slug]/winners/page.tsx:122"}, "properties": {"repobilityId": "a0d4d127ddda2a1a", "scanner": "scanner-primary", "fingerprint": "0424b66cdb132ffa", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-51b0921c5b929f8c", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/app/[locale]/members/page.tsx:89"}, "properties": {"repobilityId": "b39ea320dc208668", "scanner": "scanner-primary", "fingerprint": "51b0921c5b929f8c", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-892fa6820f016a27", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/scripts/seed-commitments.ts:497"}, "properties": {"repobilityId": "cf2e299a1c65c631", "scanner": "scanner-primary", "fingerprint": "892fa6820f016a27", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c68b3831ca0f85a1", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/scripts/dev-backfill-unresolved-mentions.ts:32"}, "properties": {"repobilityId": "0b850dcd16ff324d", "scanner": "scanner-primary", "fingerprint": "c68b3831ca0f85a1", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-3fa8b44a562d640e", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/scripts/dev-extract-run.ts:135"}, "properties": {"repobilityId": "7ef4d8aeb72b9b4f", "scanner": "scanner-primary", "fingerprint": "3fa8b44a562d640e", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-5eba4e86d1629fee", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/scripts/seed-datacenters.ts:293"}, "properties": {"repobilityId": "299837c969add72c", "scanner": "scanner-primary", "fingerprint": "5eba4e86d1629fee", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-45feda93b2772005", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 src/scripts/backfill-impact-metadata.ts:210"}, "properties": {"repobilityId": "11f1b17ac1506eba", "scanner": "scanner-primary", "fingerprint": "45feda93b2772005", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-87dd047af16705b5", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/scripts/backfill-impact-metadata.ts:29"}, "properties": {"repobilityId": "506217df21b30278", "scanner": "scanner-primary", "fingerprint": "87dd047af16705b5", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-332c7b4d65e75f05", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/scripts/seed-suppliers.ts:2088"}, "properties": {"repobilityId": "7b83a23686544849", "scanner": "scanner-primary", "fingerprint": "332c7b4d65e75f05", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-ad4e912c2f3dc781", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/scripts/backfill-event-geocoding.ts:40"}, "properties": {"repobilityId": "fc6e817395dd328d", "scanner": "scanner-primary", "fingerprint": "ad4e912c2f3dc781", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c5b2e473bb784e6e", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/scripts/seed-benchmark.ts:115"}, "properties": {"repobilityId": "a62d753ee7b8aeda", "scanner": "scanner-primary", "fingerprint": "c5b2e473bb784e6e", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-b6acc080e00b13b1", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/scripts/apply-manifest-acceptance.ts:63"}, "properties": {"repobilityId": "bb56f2b864aff0c5", "scanner": "scanner-primary", "fingerprint": "b6acc080e00b13b1", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-f14d4dd775b8d647", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/scripts/seed-investigations.ts:33"}, "properties": {"repobilityId": "92bead79d57fe11e", "scanner": "scanner-primary", "fingerprint": "f14d4dd775b8d647", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-7fa8945da9faac72", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/scripts/list-pending-runs.ts:44"}, "properties": {"repobilityId": "198f56b77b1e8b83", "scanner": "scanner-primary", "fingerprint": "7fa8945da9faac72", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-20fe891bb059dae8", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/scripts/benchmark-extractor/run.ts:69"}, "properties": {"repobilityId": "0f92c9675e2f81e3", "scanner": "scanner-primary", "fingerprint": "20fe891bb059dae8", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-6d32ed7cea09d760", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/server/api/trpc.ts:108"}, "properties": {"repobilityId": "c488a145e6db2a13", "scanner": "scanner-primary", "fingerprint": "6d32ed7cea09d760", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-3362831b42004816", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/server/db/seed-ait-community.ts:17"}, "properties": {"repobilityId": "08650e49ec366645", "scanner": "scanner-primary", "fingerprint": "3362831b42004816", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-9e5f3594927f1eb7", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 src/components/json-ld.tsx:5"}, "properties": {"repobilityId": "a0a0d37f8caa6f14", "scanner": "scanner-primary", "fingerprint": "9e5f3594927f1eb7", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-bb6b67e1aae5001a", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/agent-quick-start.tsx:633"}, "properties": {"repobilityId": "cdbbe4058fb61036", "scanner": "scanner-primary", "fingerprint": "bb6b67e1aae5001a", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-80563168bf6b2cfe", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/agent-drafts.tsx:92"}, "properties": {"repobilityId": "a65b5eaf319c5935", "scanner": "scanner-primary", "fingerprint": "80563168bf6b2cfe", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-4dd099442bbe5728", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/social-suggestions.tsx:55"}, "properties": {"repobilityId": "53e0de5316eaa3ac", "scanner": "scanner-primary", "fingerprint": "4dd099442bbe5728", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-1b4e85c36c289caf", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/agent-suggestions.tsx:61"}, "properties": {"repobilityId": "b9fd4cacabf85842", "scanner": "scanner-primary", "fingerprint": "1b4e85c36c289caf", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-9f6c17fb7513a64f", "level": "note", "message": {"text": "React Flow <Controls> without dark theming \u2014 src/components/datacenters/relationship-graph.tsx:149"}, "properties": {"repobilityId": "6b4e7bca1448e45f", "scanner": "scanner-primary", "fingerprint": "9f6c17fb7513a64f", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.controls.no-bg"]}}, {"ruleId": "scanner-5d00c7b789a216c0", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/datacenters/red-flags-panel.tsx:149"}, "properties": {"repobilityId": "8802bbc768726700", "scanner": "scanner-primary", "fingerprint": "5d00c7b789a216c0", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-b92625fe1c48f925", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/hackathon/team-leaderboard.tsx:70"}, "properties": {"repobilityId": "98f896d24d3c6861", "scanner": "scanner-primary", "fingerprint": "b92625fe1c48f925", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-e44be28a4bd09a03", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/hackathon/workspace/activity-feed.tsx:86"}, "properties": {"repobilityId": "4ab51ccc8933f093", "scanner": "scanner-primary", "fingerprint": "e44be28a4bd09a03", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-1167a016bd2ce723", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/hackathon/workspace/cell-drawer.tsx:110"}, "properties": {"repobilityId": "dfce4215bb73395a", "scanner": "scanner-primary", "fingerprint": "1167a016bd2ce723", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-b60a1a0640d5db7b", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/classroom/lesson-editor.tsx:224"}, "properties": {"repobilityId": "e1305b8d29223a53", "scanner": "scanner-primary", "fingerprint": "b60a1a0640d5db7b", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-b189e9f040168adc", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/classroom/course-view.tsx:377"}, "properties": {"repobilityId": "2abadf263ee00b8a", "scanner": "scanner-primary", "fingerprint": "b189e9f040168adc", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-91c87c035e918099", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/agent/setup-n8n.tsx:112"}, "properties": {"repobilityId": "a1ca1d5465608689", "scanner": "scanner-primary", "fingerprint": "91c87c035e918099", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-c63eb000f04f3d9a", "level": "note", "message": {"text": "Icon-only button without accessible name \u2014 src/components/article-editor/floating-toolbar.tsx:363"}, "properties": {"repobilityId": "aba488aa798cd300", "scanner": "scanner-primary", "fingerprint": "c63eb000f04f3d9a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.button.no-label"]}}, {"ruleId": "scanner-a268577bebc4d3b3", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/ai-elements/attachments.tsx:303"}, "properties": {"repobilityId": "1560dcb846336557", "scanner": "scanner-primary", "fingerprint": "a268577bebc4d3b3", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-6cd631c6e3cb5fba", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/ai-elements/inline-citation.tsx:264"}, "properties": {"repobilityId": "b3ae45652cef865c", "scanner": "scanner-primary", "fingerprint": "6cd631c6e3cb5fba", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-472aed3d3afb178a", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/ai-elements/queue.tsx:180"}, "properties": {"repobilityId": "a3dfa8c9a44e0db6", "scanner": "scanner-primary", "fingerprint": "472aed3d3afb178a", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-ac34dd3b6e90c677", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 src/components/ai-elements/schema-display.tsx:180"}, "properties": {"repobilityId": "d8484c71380d11f6", "scanner": "scanner-primary", "fingerprint": "ac34dd3b6e90c677", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-414eee0c2884ae68", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/communities/community-card.tsx:63"}, "properties": {"repobilityId": "c2405a7f424b3b42", "scanner": "scanner-primary", "fingerprint": "414eee0c2884ae68", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-7ba6158a32608df6", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/communities/feed/community-sidebar.tsx:103"}, "properties": {"repobilityId": "2ad619ee1e73fc2d", "scanner": "scanner-primary", "fingerprint": "7ba6158a32608df6", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-ec7b2622a29de048", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/communities/rituals/rituals-manager.tsx:79"}, "properties": {"repobilityId": "e254a32f74e0b44f", "scanner": "scanner-primary", "fingerprint": "ec7b2622a29de048", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-ca308ecf4c34edef", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/launchpad/launchpad-card.tsx:146"}, "properties": {"repobilityId": "6f3a95ad2d4a055b", "scanner": "scanner-primary", "fingerprint": "ca308ecf4c34edef", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-83a9b939558a356c", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/notifications/notification-panel.tsx:184"}, "properties": {"repobilityId": "febc3eed2b6727fe", "scanner": "scanner-primary", "fingerprint": "83a9b939558a356c", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-5eaf76edc20ff93f", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/inbox/inbox-mobile-view.tsx:172"}, "properties": {"repobilityId": "883c3a82aa74d523", "scanner": "scanner-primary", "fingerprint": "5eaf76edc20ff93f", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-8256e2c710d4c3a3", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/inbox/chat-window-minimized.tsx:61"}, "properties": {"repobilityId": "1ce674bbfe1023ab", "scanner": "scanner-primary", "fingerprint": "8256e2c710d4c3a3", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-c9a17950b3f6fd4c", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/inbox/chat-window.tsx:166"}, "properties": {"repobilityId": "7d80518d3cdfd9c9", "scanner": "scanner-primary", "fingerprint": "c9a17950b3f6fd4c", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-d930ee64664caeff", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 src/components/inbox/inbox-list.tsx:261"}, "properties": {"repobilityId": "1b099695bf98026d", "scanner": "scanner-primary", "fingerprint": "d930ee64664caeff", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-ad6339d612386ca6", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 src/lib/lexical.tsx:387"}, "properties": {"repobilityId": "8d1854bc08b75d16", "scanner": "scanner-primary", "fingerprint": "ad6339d612386ca6", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-d63da3583b14afc0", "level": "warning", "message": {"text": "Dockerfile runs as root: Dockerfile"}, "properties": {"repobilityId": "a2ed1bd120e507db", "scanner": "scanner-primary", "fingerprint": "d63da3583b14afc0", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-59cbf6e36a0e3777", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: node:22-bookworm-slim"}, "properties": {"repobilityId": "c1bd6981589c01e1", "scanner": "scanner-primary", "fingerprint": "59cbf6e36a0e3777", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Dockerfile"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-cc9b5a945a64fa05", "level": "error", "message": {"text": "Runtime dotenv file present in repo: .env.local.off"}, "properties": {"repobilityId": "c3e9b84a44fc64aa", "scanner": "scanner-primary", "fingerprint": "cc9b5a945a64fa05", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["secrets", "config", "env-file", "runtime-env"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".env.local.off"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-976dcfdf81caa739", "level": "error", "message": {"text": "Runtime dotenv file present in repo: .env.docker"}, "properties": {"repobilityId": "3a53c9b40c032bdd", "scanner": "scanner-primary", "fingerprint": "976dcfdf81caa739", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets", "config", "env-file", "runtime-env", "env_file_with_secret"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".env.docker"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5c6c07665bfc7984", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in src/components/json-ld.tsx:5"}, "properties": {"repobilityId": "9b57d463e843e76c", "scanner": "scanner-primary", "fingerprint": "5c6c07665bfc7984", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/components/json-ld.tsx"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-f3e1ca103b058769", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in src/components/ai-elements/schema-display.tsx:180"}, "properties": {"repobilityId": "07d920ff7b611f5d", "scanner": "scanner-primary", "fingerprint": "f3e1ca103b058769", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/components/ai-elements/schema-display.tsx"}, "region": {"startLine": 180}}}]}, {"ruleId": "scanner-1a50d0a57dae9658", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in src/lib/lexical.tsx:387"}, "properties": {"repobilityId": "e1d08fc832ed567b", "scanner": "scanner-primary", "fingerprint": "1a50d0a57dae9658", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lib/lexical.tsx"}, "region": {"startLine": 387}}}]}, {"ruleId": "scanner-dc61681288557880", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "45853331bd093501", "scanner": "scanner-primary", "fingerprint": "dc61681288557880", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/challenge-template/.github/workflows/challenge-ci.yml"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-dc61681288557880", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "13edf27de8a6f07e", "scanner": "scanner-primary", "fingerprint": "dc61681288557880", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/challenge-template/.github/workflows/challenge-ci.yml"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-dc61681288557880", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "f8dd13e7042d9a77", "scanner": "scanner-primary", "fingerprint": "dc61681288557880", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/challenge-template/.github/workflows/challenge-ci.yml"}, "region": {"startLine": 49}}}]}, {"ruleId": "scanner-a60752b9441f0394", "level": "note", "message": {"text": "Very large file: src/payload-types.ts (2238 lines)"}, "properties": {"repobilityId": "359a441de923eb20", "scanner": "scanner-primary", "fingerprint": "a60752b9441f0394", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-b865fd3b8c6be4df", "level": "note", "message": {"text": "Very large file: src/payload-generated-schema.ts (3473 lines)"}, "properties": {"repobilityId": "d0c8129178710f34", "scanner": "scanner-primary", "fingerprint": "b865fd3b8c6be4df", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-44fa889799b53730", "level": "note", "message": {"text": "Very large file: src/scripts/seed-suppliers.ts (2170 lines)"}, "properties": {"repobilityId": "18fec22c3fc16cac", "scanner": "scanner-primary", "fingerprint": "44fa889799b53730", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-a7a21d1db8b87776", "level": "note", "message": {"text": "Very large file: src/scripts/seed-data/ai-native.ts (2113 lines)"}, "properties": {"repobilityId": "3e3b67006944b7e6", "scanner": "scanner-primary", "fingerprint": "a7a21d1db8b87776", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-92de1410ee8d1a8e", "level": "note", "message": {"text": "Very large file: src/scripts/seed-data/na.ts (2053 lines)"}, "properties": {"repobilityId": "804c96688bcf216b", "scanner": "scanner-primary", "fingerprint": "92de1410ee8d1a8e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-a997fbf8638abb2a", "level": "note", "message": {"text": "Very large file: src/server/api/routers/benchmark.ts (2038 lines)"}, "properties": {"repobilityId": "261b84096ed6611d", "scanner": "scanner-primary", "fingerprint": "a997fbf8638abb2a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-49ba9d8a1a6c17c7", "level": "note", "message": {"text": "Very large file: src/server/api/routers/hackathon.ts (1622 lines)"}, "properties": {"repobilityId": "e4016bb8a5c193df", "scanner": "scanner-primary", "fingerprint": "49ba9d8a1a6c17c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-86c2562e45916719", "level": "note", "message": {"text": "Very large file: src/server/api/routers/agent.ts (2054 lines)"}, "properties": {"repobilityId": "f8b4cfb04b089922", "scanner": "scanner-primary", "fingerprint": "86c2562e45916719", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-1e91ba95273bd504", "level": "note", "message": {"text": "Very large file: src/server/api/routers/work-grid.integration.test.ts (1325 lines)"}, "properties": {"repobilityId": "62a69130d21d2af3", "scanner": "scanner-primary", "fingerprint": "1e91ba95273bd504", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-b020bf439debcfbb", "level": "note", "message": {"text": "Very large file: src/server/api/routers/agent-management.ts (1645 lines)"}, "properties": {"repobilityId": "20afd5da7c5da2e1", "scanner": "scanner-primary", "fingerprint": "b020bf439debcfbb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-91a88d8de31aaa2c", "level": "note", "message": {"text": "Very large file: src/server/api/routers/datacenters.ts (1830 lines)"}, "properties": {"repobilityId": "f824d43b0f5780fa", "scanner": "scanner-primary", "fingerprint": "91a88d8de31aaa2c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-a145099b572a9c98", "level": "note", "message": {"text": "Very large file: src/server/db/schema.ts (3613 lines)"}, "properties": {"repobilityId": "ebbc2960ba09de74", "scanner": "scanner-primary", "fingerprint": "a145099b572a9c98", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-ea3b5e389d8c9c0f", "level": "note", "message": {"text": "Low test-to-source ratio"}, "properties": {"repobilityId": "ef7b2552cc00a375", "scanner": "scanner-primary", "fingerprint": "ea3b5e389d8c9c0f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["tests"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "303595da91948958", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "14ad4422b1d26f63", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "af0a8d11df08b51c", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-358318a96ee31dc4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/openclaw/ait-community/SKILL.md"}, "properties": {"repobilityId": "302308c82a160238", "scanner": "scanner-primary", "fingerprint": "358318a96ee31dc4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/openclaw/ait-community/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6df3158cf227df6e", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/neon-postgres/references/getting-started.md"}, "properties": {"repobilityId": "1ae44416e54d245f", "scanner": "scanner-primary", "fingerprint": "6df3158cf227df6e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/neon-postgres/references/getting-started.md"}, "region": {"startLine": 50}}}]}, {"ruleId": "scanner-63a78b1473140d0a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/neon-postgres/references/connection-methods.md"}, "properties": {"repobilityId": "06ef68ec613cc2fc", "scanner": "scanner-primary", "fingerprint": "63a78b1473140d0a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/neon-postgres/references/connection-methods.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f63dcbf5423b2e42", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/neon-postgres/references/neon-cli.md"}, "properties": {"repobilityId": "40f432674c9a2f71", "scanner": "scanner-primary", "fingerprint": "f63dcbf5423b2e42", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/neon-postgres/references/neon-cli.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f09f1d3c2ba0f06a", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/skills/neon-postgres/references/neon-cli.md"}, "properties": {"repobilityId": "93ef94d8d856af53", "scanner": "scanner-primary", "fingerprint": "f09f1d3c2ba0f06a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/neon-postgres/references/neon-cli.md"}, "region": {"startLine": 16}}}]}, {"ruleId": "scanner-b8576425e0418657", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/neon-postgres/references/neon-js.md"}, "properties": {"repobilityId": "9af3e7b12d3a0f2a", "scanner": "scanner-primary", "fingerprint": "b8576425e0418657", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/neon-postgres/references/neon-js.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c8c1bb1f88e8cc07", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/neon-postgres/references/branching.md"}, "properties": {"repobilityId": "76f35d88d6b893eb", "scanner": "scanner-primary", "fingerprint": "c8c1bb1f88e8cc07", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/neon-postgres/references/branching.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-49cb1bd5688cc9ac", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/neon-postgres/references/neon-python-sdk.md"}, "properties": {"repobilityId": "90db06315a4a4553", "scanner": "scanner-primary", "fingerprint": "49cb1bd5688cc9ac", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/neon-postgres/references/neon-python-sdk.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cdb7bf4f6a265696", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/neon-postgres/references/neon-serverless.md"}, "properties": {"repobilityId": "a24d7159ae136d05", "scanner": "scanner-primary", "fingerprint": "cdb7bf4f6a265696", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/neon-postgres/references/neon-serverless.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7b3efb32afd31889", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/neon-postgres/references/neon-typescript-sdk.md"}, "properties": {"repobilityId": "d35bcd024b5bf46d", "scanner": "scanner-primary", "fingerprint": "7b3efb32afd31889", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/neon-postgres/references/neon-typescript-sdk.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6776fd0e148a8066", "level": "none", "message": {"text": "Commented-code block (6 lines) in next.config.js:14"}, "properties": {"repobilityId": "6cd9360fc1a0c3e9", "scanner": "scanner-primary", "fingerprint": "6776fd0e148a8066", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ddd2c7362276fc8d", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/seed-articles.ts:231"}, "properties": {"repobilityId": "3bab2ec000a189c5", "scanner": "scanner-primary", "fingerprint": "ddd2c7362276fc8d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-dca8f90e40d3faf7", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/app/api/mcp/route.ts:12"}, "properties": {"repobilityId": "b792c73f6f898409", "scanner": "scanner-primary", "fingerprint": "dca8f90e40d3faf7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-03aacac5a0861450", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/app/api/mcp/commission-tools.ts:5"}, "properties": {"repobilityId": "687c9813ac533a2b", "scanner": "scanner-primary", "fingerprint": "03aacac5a0861450", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6a4d4e253cdde507", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/app/[locale]/benchmark/dashboard/page.tsx:1"}, "properties": {"repobilityId": "5f6d084502e4aec9", "scanner": "scanner-primary", "fingerprint": "6a4d4e253cdde507", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ebb8935e56e7b893", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/scripts/dev-extract-run.ts:44"}, "properties": {"repobilityId": "27a847407096faf1", "scanner": "scanner-primary", "fingerprint": "ebb8935e56e7b893", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-49ba44572f98feec", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/scripts/backfill-impact-metadata.ts:210"}, "properties": {"repobilityId": "5790de8d833644fe", "scanner": "scanner-primary", "fingerprint": "49ba44572f98feec", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f3e76cf16fc49ad2", "level": "none", "message": {"text": "Commented-code block (9 lines) in src/scripts/seed-data/ownership.ts:37"}, "properties": {"repobilityId": "a1ffeb620d48f401", "scanner": "scanner-primary", "fingerprint": "f3e76cf16fc49ad2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c75f76cfdb54d494", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/scripts/seed-data/permits.ts:20"}, "properties": {"repobilityId": "bca89b2c8130c681", "scanner": "scanner-primary", "fingerprint": "c75f76cfdb54d494", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-77153849b9b7cb27", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/scripts/seed-data/capex.ts:10"}, "properties": {"repobilityId": "846e9a6342671784", "scanner": "scanner-primary", "fingerprint": "77153849b9b7cb27", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-43132a8734fe5619", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/scripts/benchmark-extractor/run.ts:15"}, "properties": {"repobilityId": "43ed6d63f4adaf4a", "scanner": "scanner-primary", "fingerprint": "43132a8734fe5619", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-c75c4ea9582bb1f8", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/server/api/routers/benchmark.ts:180"}, "properties": {"repobilityId": "bf7811673dbda3ba", "scanner": "scanner-primary", "fingerprint": "c75c4ea9582bb1f8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c19b73f89563f5cd", "level": "none", "message": {"text": "Commented-code block (8 lines) in src/server/api/routers/hackathon.ts:274"}, "properties": {"repobilityId": "a16ca77c53f96b1a", "scanner": "scanner-primary", "fingerprint": "c19b73f89563f5cd", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-eba275ade4b46b4b", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/server/api/routers/team-workspace.ts:1"}, "properties": {"repobilityId": "8fb2172d4371aabf", "scanner": "scanner-primary", "fingerprint": "eba275ade4b46b4b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-67685a73679890fc", "level": "none", "message": {"text": "Commented-code block (10 lines) in src/server/api/routers/teams.ts:1"}, "properties": {"repobilityId": "1edf15c3506f5183", "scanner": "scanner-primary", "fingerprint": "67685a73679890fc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d9b3d16e57c7451b", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/server/api/routers/work-grid.ts:260"}, "properties": {"repobilityId": "935aebe0d1511530", "scanner": "scanner-primary", "fingerprint": "d9b3d16e57c7451b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-18a3f7caf2c3ea4e", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/server/hackathon/phase.ts:1"}, "properties": {"repobilityId": "5747a6986fe8c472", "scanner": "scanner-primary", "fingerprint": "18a3f7caf2c3ea4e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-460c4c9760785e0e", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/server/hackathon/team-membership.ts:4"}, "properties": {"repobilityId": "e3818ee6982c2ba6", "scanner": "scanner-primary", "fingerprint": "460c4c9760785e0e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c0091355fd29605c", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/server/hackathon/agent-tab-surfaces.ts:1"}, "properties": {"repobilityId": "b1f3dfc0409a8380", "scanner": "scanner-primary", "fingerprint": "c0091355fd29605c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-cc46346ad6700fa3", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/server/hackathon/analytics.ts:1"}, "properties": {"repobilityId": "c7b5cfc1b4290e81", "scanner": "scanner-primary", "fingerprint": "cc46346ad6700fa3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-83636c50d866d960", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/server/hackathon/task-progress.ts:1"}, "properties": {"repobilityId": "4be95250289d78f2", "scanner": "scanner-primary", "fingerprint": "83636c50d866d960", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-15502fa5b70429f7", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/server/hackathon/looking-for-team.ts:1"}, "properties": {"repobilityId": "5db42cf9b149455a", "scanner": "scanner-primary", "fingerprint": "15502fa5b70429f7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-88b56274b54570fa", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/server/hackathon/binding-invariant.ts:1"}, "properties": {"repobilityId": "a2035bb11b0b4d4e", "scanner": "scanner-primary", "fingerprint": "88b56274b54570fa", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0fd773a6bb5ad298", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/server/hackathon/gallery.ts:1"}, "properties": {"repobilityId": "dcd3cb4ab7689661", "scanner": "scanner-primary", "fingerprint": "0fd773a6bb5ad298", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b6816090a5c4da22", "level": "none", "message": {"text": "Commented-code block (8 lines) in src/server/hackathon/certificates.ts:1"}, "properties": {"repobilityId": "9dc88db1e54dc0db", "scanner": "scanner-primary", "fingerprint": "b6816090a5c4da22", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-bfa8975ab4a1c6be", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/server/hackathon/hub-tabs.ts:1"}, "properties": {"repobilityId": "f4218316062e37f5", "scanner": "scanner-primary", "fingerprint": "bfa8975ab4a1c6be", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5f6b716730f010d7", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/server/hackathon/activity.ts:1"}, "properties": {"repobilityId": "d1c3cdffb5b2b2aa", "scanner": "scanner-primary", "fingerprint": "5f6b716730f010d7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1d9ebdd3216effbc", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/server/hackathon/resolve-public-hackathon.ts:1"}, "properties": {"repobilityId": "eefc5df1f12a0aa5", "scanner": "scanner-primary", "fingerprint": "1d9ebdd3216effbc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8992119211587b58", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/server/hackathon/team-join-code.ts:1"}, "properties": {"repobilityId": "9b2b9c2f2bb449bd", "scanner": "scanner-primary", "fingerprint": "8992119211587b58", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-48e9c17887511f4b", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/server/hackathon/winners.ts:1"}, "properties": {"repobilityId": "84a9e69139f23ba2", "scanner": "scanner-primary", "fingerprint": "48e9c17887511f4b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4832397910caaa73", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/server/hackathon/scoring.ts:1"}, "properties": {"repobilityId": "016e427397f434ea", "scanner": "scanner-primary", "fingerprint": "4832397910caaa73", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f3b6620fadfb6382", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/server/hackathon/peoples-choice.ts:1"}, "properties": {"repobilityId": "953a5e1ae2ad0683", "scanner": "scanner-primary", "fingerprint": "f3b6620fadfb6382", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9cbfb20c2357ebeb", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/server/agent/verify-x-tweet.ts:3"}, "properties": {"repobilityId": "ec9fbf98a4cea012", "scanner": "scanner-primary", "fingerprint": "9cbfb20c2357ebeb", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-97a2f6cac191a94c", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/server/db/schema.ts:1727"}, "properties": {"repobilityId": "34c5897606db40ea", "scanner": "scanner-primary", "fingerprint": "97a2f6cac191a94c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-235aa1ad0440ba72", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/server/notifications/broadcast-send.ts:112"}, "properties": {"repobilityId": "cdddc212726da2c1", "scanner": "scanner-primary", "fingerprint": "235aa1ad0440ba72", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-604404c9c4a3718e", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/server/benchmark/suggest-prompts.ts:104"}, "properties": {"repobilityId": "34f83e8b5e6c5584", "scanner": "scanner-primary", "fingerprint": "604404c9c4a3718e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-2ed92d81a67f10d2", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/server/benchmark/extract-run.ts:180"}, "properties": {"repobilityId": "56aadd243e20e83c", "scanner": "scanner-primary", "fingerprint": "2ed92d81a67f10d2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-011f9e1c4566df8c", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/server/benchmark/strategy.ts:411"}, "properties": {"repobilityId": "5f3c4142a040b39c", "scanner": "scanner-primary", "fingerprint": "011f9e1c4566df8c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-2067a896e9eb91b4", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/server/benchmark/coverage-badges.ts:6"}, "properties": {"repobilityId": "c63c9d12216c2358", "scanner": "scanner-primary", "fingerprint": "2067a896e9eb91b4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ebd03406d8a13af3", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/server/events/import-from-url.ts:42"}, "properties": {"repobilityId": "17d9b7893847d10d", "scanner": "scanner-primary", "fingerprint": "ebd03406d8a13af3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-25bd8e5207ca7105", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/components/agents/tool-catalog-list.tsx:1"}, "properties": {"repobilityId": "9f59b2506d37f3f8", "scanner": "scanner-primary", "fingerprint": "25bd8e5207ca7105", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-74e30c90f829b018", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/components/hackathon/hackathon-analytics.tsx:3"}, "properties": {"repobilityId": "e0a1dae2edcd2f1f", "scanner": "scanner-primary", "fingerprint": "74e30c90f829b018", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-38ce4b5330a44c24", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/collections/Events.ts:185"}, "properties": {"repobilityId": "e1d30660f99bc343", "scanner": "scanner-primary", "fingerprint": "38ce4b5330a44c24", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f4ec4f739cd32465", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/lib/benchmark-constants.ts:31"}, "properties": {"repobilityId": "3fef1ed8bfa24e7c", "scanner": "scanner-primary", "fingerprint": "f4ec4f739cd32465", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-246f0f04a43f0392", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/migrations/20260608b_classrooms.ts:65"}, "properties": {"repobilityId": "50e3a98c0557d162", "scanner": "scanner-primary", "fingerprint": "246f0f04a43f0392", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4d36a27b2e08ba20", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/migrations/20260612f_work_cell_progress.ts:1"}, "properties": {"repobilityId": "ccb2f1cec50cd1ef", "scanner": "scanner-primary", "fingerprint": "4d36a27b2e08ba20", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3bf37405d508fe0e", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/migrations/20260610a_participant_workspace.ts:1"}, "properties": {"repobilityId": "c16ed28c6a076502", "scanner": "scanner-primary", "fingerprint": "3bf37405d508fe0e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fbbd0324963484ed", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/migrations/20260609c_events_challenge_binding.ts:4"}, "properties": {"repobilityId": "e51e79328684c73f", "scanner": "scanner-primary", "fingerprint": "fbbd0324963484ed", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3a785dbec1646043", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/migrations/20260611a_classroom_modules.ts:1"}, "properties": {"repobilityId": "dcf791fb69d56f10", "scanner": "scanner-primary", "fingerprint": "3a785dbec1646043", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a7845f031ca8912f", "level": "none", "message": {"text": "Commented-code block (8 lines) in src/migrations/20260612b_looking_for_team.ts:1"}, "properties": {"repobilityId": "70c0dcdafcd18a02", "scanner": "scanner-primary", "fingerprint": "a7845f031ca8912f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-130e39c0425a87a9", "level": "none", "message": {"text": "Commented-code block (8 lines) in src/migrations/20260612a_hackathon_certificates.ts:1"}, "properties": {"repobilityId": "fb656d81f318b5fc", "scanner": "scanner-primary", "fingerprint": "130e39c0425a87a9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5b759be608b5d773", "level": "none", "message": {"text": "Commented-code block (10 lines) in src/migrations/20260612d_peoples_choice_votes.ts:1"}, "properties": {"repobilityId": "0fd8f39c2d9b6e5c", "scanner": "scanner-primary", "fingerprint": "5b759be608b5d773", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a65e58503e2e3736", "level": "none", "message": {"text": "Commented-code block (8 lines) in src/migrations/20260604a_work_grid_commission.ts:1"}, "properties": {"repobilityId": "8ac850ae78cc3c6f", "scanner": "scanner-primary", "fingerprint": "a65e58503e2e3736", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b3a65c9072a7c130", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/migrations/20260611c_events_status_enum_values.ts:4"}, "properties": {"repobilityId": "bf1c6d474b929dca", "scanner": "scanner-primary", "fingerprint": "b3a65c9072a7c130", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-aae72eedfdcae0b4", "level": "none", "message": {"text": "Commented-code block (8 lines) in src/migrations/20260612e_email_templates.ts:1"}, "properties": {"repobilityId": "97fb052cfaf0364d", "scanner": "scanner-primary", "fingerprint": "aae72eedfdcae0b4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-088117fe95b6dde4", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/migrations/20260601a_agent_manifest_acceptance.ts:1"}, "properties": {"repobilityId": "273c6e096d5df5a7", "scanner": "scanner-primary", "fingerprint": "088117fe95b6dde4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-582a114c241d7b97", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/migrations/20260612c_event_timezone.ts:9"}, "properties": {"repobilityId": "bfce099471d39404", "scanner": "scanner-primary", "fingerprint": "582a114c241d7b97", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2c92aa09ce7aff5a", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/migrations/20260609d_challenge_team_config_and_cell_template.ts:4"}, "properties": {"repobilityId": "f1a651b24012b3d4", "scanner": "scanner-primary", "fingerprint": "2c92aa09ce7aff5a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8e9bbe264e6bcf81", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/migrations/20260609a_hackathon_teams.ts:1"}, "properties": {"repobilityId": "25e8991c219e2419", "scanner": "scanner-primary", "fingerprint": "8e9bbe264e6bcf81", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7c8b918e1fee9558", "level": "note", "message": {"text": "20 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "bd1f6d44917e8105", "scanner": "scanner-primary", "fingerprint": "7c8b918e1fee9558", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}]}]}