Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

tombaldwin/candor-rust

https://github.com/tombaldwin/candor-rust · scanned 2026-06-16 00:39 UTC (2 months, 1 week ago)

27 raw signals (0 security + 27 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 1 week ago · v1 · 27 actionable findings from 1 signal source. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

88.9% cov · 27 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 0 Medium 9 Low 13 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 27 Crowd 0 Layer: Software 2 Frontend 1 Security 1 Cicd 3 Quality 20

Exclude dismissed / FP Exclude test files

All 710 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`ANNOUNCE.md`	software	healthy	`ANNOUNCE.md`
`Cargo.toml`	software	healthy	`Cargo.toml`
`EVAL.md`	software	healthy	`EVAL.md`
`README.md`	software	healthy	`README.md`
`PRINCIPLES.md`	software	healthy	`PRINCIPLES.md`
`PROVE-IT.md`	software	healthy	`PROVE-IT.md`
`install.sh`	software	healthy	`install.sh`
`CONTRIBUTING.md`	software	healthy	`CONTRIBUTING.md`
`PUBLISHING.md`	software	healthy	`PUBLISHING.md`
`build.rs`	software	healthy	`build.rs`
`CRITIQUE.md`	software	healthy	`CRITIQUE.md`
`Cargo.lock`	software	healthy	`Cargo.lock`
`SECURITY.md`	software	healthy	`SECURITY.md`
`AGENTS.md`	software	healthy	`AGENTS.md`
`CHANGELOG.md`	software	healthy	`CHANGELOG.md`
`BACKLOG.md`	software	healthy	`BACKLOG.md`
`README.md`	software	healthy	`integrations/mcp/README.md`
`candor-mcp.py`	software	healthy	`integrations/mcp/candor-mcp.py`
`README.md`	software	healthy	`integrations/claude-code/README.md`
`install.sh`	software	healthy	`integrations/claude-code/install.sh`
`candor-run.sh`	software	healthy	`integrations/claude-code/candor-run.sh`
`test-receipt.sh`	software	healthy	`integrations/claude-code/test-receipt.sh`
`stop-hook.sh`	software	healthy	`integrations/claude-code/stop-hook.sh`
`candor.md`	software	healthy	`integrations/claude-code/commands/candor.md`
`integration.sh`	software	healthy	`tests/integration.sh`
`Cargo.toml`	software	healthy	`sample-capstd/Cargo.toml`
`Cargo.lock`	software	healthy	`sample-capstd/Cargo.lock`
`main.rs`	software	healthy	`sample-capstd/src/main.rs`
`closure-flow.md`	software	healthy	`docs/closure-flow.md`
`devirt.rs`	software	healthy	`ui/devirt.rs`
`callbacks.rs`	software	healthy	`ui/callbacks.rs`
`trust.rs`	software	healthy	`ui/trust.rs`
`closures.rs`	software	healthy	`ui/closures.rs`
`inherited.rs`	software	healthy	`ui/inherited.rs`
`main.rs`	software	healthy	`ui/main.rs`
`effects.rs`	software	healthy	`ui/effects.rs`
`Cargo.toml`	software	healthy	`crates/candor-classify/Cargo.toml`
`README.md`	software	healthy	`crates/candor-classify/README.md`
`lib.rs`	software	healthy	`crates/candor-classify/src/lib.rs`
`policy.rs`	software	healthy	`crates/candor-classify/src/policy.rs`
`Cargo.toml`	software	healthy	`crates/candor-report/Cargo.toml`
`README.md`	software	healthy	`crates/candor-report/README.md`
`lib.rs`	software	healthy	`crates/candor-report/src/lib.rs`
`Cargo.toml`	software	healthy	`crates/candor-scan/Cargo.toml`
`README.md`	software	healthy	`crates/candor-scan/README.md`
`AGENTS.md`	software	healthy	`crates/candor-scan/AGENTS.md`
`main.rs`	software	healthy	`crates/candor-scan/src/main.rs`
`Cargo.toml`	software	healthy	`crates/candor-query/Cargo.toml`
`AGENTS.md`	software	healthy	`crates/candor-query/AGENTS.md`
`main.rs`	software	healthy	`crates/candor-query/src/main.rs`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`integrations`	software	healthy	`integrations`
`mcp`	software	healthy	`integrations/mcp`
`claude-code`	software	healthy	`integrations/claude-code`
`commands`	software	healthy	`integrations/claude-code/commands`
`tests`	software	healthy	`tests`
`sample-capstd`	software	healthy	`sample-capstd`
`src`	software	healthy	`sample-capstd/src`
`docs`	software	healthy	`docs`
`ui`	software	healthy	`ui`
`crates`	software	healthy	`crates`
`candor-classify`	software	healthy	`crates/candor-classify`
`src`	software	healthy	`crates/candor-classify/src`
`candor-report`	software	healthy	`crates/candor-report`
`src`	software	healthy	`crates/candor-report/src`
`candor-scan`	software	healthy	`crates/candor-scan`
`src`	software	healthy	`crates/candor-scan/src`
`candor-query`	software	healthy	`crates/candor-query`
`src`	software	healthy	`crates/candor-query/src`
`soundness`	software	healthy	`soundness`
`eval`	software	healthy	`eval`
`bet2`	software	healthy	`eval/bet2`
`fixture`	software	healthy	`eval/bet2/fixture`
`src`	software	healthy	`eval/bet2/fixture/src`
`ref-dirty`	software	healthy	`eval/bet2/ref-dirty`
`src`	software	healthy	`eval/bet2/ref-dirty/src`
`ref-clean`	software	healthy	`eval/bet2/ref-clean`
`src`	software	healthy	`eval/bet2/ref-clean/src`
`fixture3`	software	healthy	`eval/bet2/fixture3`
`src`	software	healthy	`eval/bet2/fixture3/src`
`fixture2`	software	healthy	`eval/bet2/fixture2`
`src`	software	healthy	`eval/bet2/fixture2/src`
`unknownwhy-sweep`	software	healthy	`eval/unknownwhy-sweep`
`bet3`	software	healthy	`eval/bet3`
`host-allowlist`	software	healthy	`eval/bet3/host-allowlist`
`httpkit`	software	healthy	`eval/bet3/host-allowlist/httpkit`
`src`	software	healthy	`eval/bet3/host-allowlist/httpkit/src`
`app`	software	healthy	`eval/bet3/host-allowlist/app`
`src`	software	healthy	`eval/bet3/host-allowlist/app/src`
`layering-xcrate`	software	healthy	`eval/bet3/layering-xcrate`
`app`	software	healthy	`eval/bet3/layering-xcrate/app`
`src`	software	healthy	`eval/bet3/layering-xcrate/app/src`
`infra`	software	healthy	`eval/bet3/layering-xcrate/infra`
`src`	software	healthy	`eval/bet3/layering-xcrate/infra/src`
`layering-laundered`	software	healthy	`eval/bet3/layering-laundered`
`util`	software	healthy	`eval/bet3/layering-laundered/util`
`src`	software	healthy	`eval/bet3/layering-laundered/util/src`
`app`	software	healthy	`eval/bet3/layering-laundered/app`
`src`	software	healthy	`eval/bet3/layering-laundered/app/src`
`infra`	software	healthy	`eval/bet3/layering-laundered/infra`
`src`	software	healthy	`eval/bet3/layering-laundered/infra/src`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`run_query`	software	healthy	`integrations/mcp/candor-mcp.py:88`
`dispatch`	software	healthy	`integrations/mcp/candor-mcp.py:96`
`send`	software	healthy	`integrations/mcp/candor-mcp.py:110`
`main`	software	healthy	`integrations/mcp/candor-mcp.py:120`
`main`	software	healthy	`soundness/gen_drop.py:40`
`effects_for`	software	healthy	`soundness/gen.py:29`
`edge_forms`	software	healthy	`soundness/gen.py:54`
`main`	software	healthy	`soundness/gen.py:256`
`emit`	software	healthy	`soundness/gen.py:288`
`main`	software	healthy	`soundness/gen_cross.py:23`
`report_inferred`	software	healthy	`soundness/oracle_pf_check.py:22`
`main`	software	healthy	`soundness/oracle_pf_check.py:41`
`main`	software	healthy	`soundness/check.py:17`
`predicted_effects`	software	healthy	`soundness/oracle_check.py:23`
`main`	software	healthy	`soundness/oracle_check.py:48`
`emit_fixture`	software	healthy	`soundness/fabrication_probe.py:189`
`run`	software	healthy	`soundness/fabrication_probe.py:214`
`run_raw`	software	healthy	`soundness/fabrication_probe.py:293`
`main`	software	healthy	`soundness/fabrication_probe.py:319`
`main`	software	healthy	`eval/token-cost/measure.py:28`
`newest`	software	healthy	`eval/calibration/sweep.py:17`
`ver`	software	dead	`eval/calibration/sweep.py:20`
`newest`	software	healthy	`eval/calibration/query_properties.py:21`
`q`	software	healthy	`eval/calibration/query_properties.py:25`
`fail`	software	healthy	`eval/calibration/query_properties.py:30`
`closure`	software	healthy	`eval/calibration/query_properties.py:56`
`newest`	software	healthy	`eval/calibration/blackout_screen.py:44`
`scan`	software	healthy	`eval/calibration/blackout_screen.py:56`
`main`	software	healthy	`eval/calibration/blackout_screen.py:76`
`newest`	software	healthy	`eval/calibration/widesweep.py:17`
`ver`	software	dead	`eval/calibration/widesweep.py:20`
`read`	software	healthy	`eval/agentuse/grade.py:32`
`main`	software	healthy	`eval/agentuse/grade.py:39`
`read`	software	healthy	`eval/agentuse/grade-hard.py:37`
`main`	software	healthy	`eval/agentuse/grade-hard.py:44`

Label	Layer	Status	Path
`postgres`	data	healthy	`README.md`
`sqlite`	data	healthy	`eval/calibration/sweep.py`
`redis`	data	healthy	`eval/calibration/sweep.py`
`mongodb`	data	healthy	`eval/calibration/query_properties.py`
`mysql`	data	healthy	`eval/calibration/query_properties.py`
`cassandra`	data	healthy	`eval/calibration/blackout_screen.py`

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`tests/integration.sh`
`10.0.0.2`	network	healthy	`tests/integration.sh`
`203.0.113.1`	network	healthy	`eval/scaled/tasks/geoip/src/report.rs`
`198.51.100.7`	network	healthy	`eval/scaled/tasks/geoip/src/report.rs`
`192.0.2.5`	network	healthy	`eval/scaled/tasks/geoip/src/report.rs`
`1.2.3.4`	network	healthy	`src/lib.rs`

Label	Layer	Status	Path
`gha::ci`	cicd	healthy	`.github/workflows/ci.yml`
`gha::nightly-bump`	cicd	healthy	`.github/workflows/nightly-bump.yml`

Label	Layer	Status	Path
`build-and-test`	cicd	healthy	`.github/workflows/ci.yml`
`bump`	cicd	healthy	`.github/workflows/nightly-bump.yml`

Label	Layer	Status	Path
`repobility-clone-0szmag8x`	software	healthy	`/tmp/repobility-clone-0szmag8x`

Label	Layer	Status	Path
`kafka`	data	healthy	`eval/calibration/blackout_screen.py`

Label	Layer	Status	Path
`envoy`	network	healthy	`crates/candor-scan/src/main.rs`

Label	Layer	Status	Path
`port:06`	network	healthy	`.github/workflows/nightly-bump.yml`

Label	Layer	Status	Path
`vps::aws`	hardware	healthy	`README.md`

Label	Layer	Status	Path
`NIGHTLY_BUMP_PAT`	cicd	healthy	`—`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/fddffb30-8406-4059-ad65-b8539e270bf5/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/fddffb30-8406-4059-ad65-b8539e270bf5/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

tombaldwin/candor-rust

Complete repo analysis

file 50+

directory 50+

function 35

database 6

service 6

pipeline 2

job 2

repo 1

queue 1

load_balancer 1

port 1

vps 1

env_var 1