{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-455d1603e0df4f05", "name": "Possibly dead Python function: update_event_state", "shortDescription": {"text": "Possibly dead Python function: update_event_state"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1356a30ee91277a0", "name": "Possibly dead Python function: related_concept_ids", "shortDescription": {"text": "Possibly dead Python function: related_concept_ids"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-911be1399d61c4ef", "name": "Possibly dead Python function: write_inbox", "shortDescription": {"text": "Possibly dead Python function: write_inbox"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bc173e7001add5f7", "name": "Possibly dead Python function: launch_browser", "shortDescription": {"text": "Possibly dead Python function: launch_browser"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fb7d035f492ec1ad", "name": "Possibly dead Python function: log_message", "shortDescription": {"text": "Possibly dead Python function: log_message"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6b8b525d2b78c9f9", "name": "Possibly dead Python function: do_GET", "shortDescription": {"text": "Possibly dead Python function: do_GET"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5e0f4ff83722abc8", "name": "Possibly dead Python function: do_POST", "shortDescription": {"text": "Possibly dead Python function: do_POST"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-879bcf29c43dd6af", "name": "Possibly dead Python function: idle_watchdog", "shortDescription": {"text": "Possibly dead Python function: idle_watchdog"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-da45702af3023053", "name": "Possibly dead Python function: lookup_fix_hints", "shortDescription": {"text": "Possibly dead Python function: lookup_fix_hints"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7d13100d86bd2b88", "name": "Privileged port 78 in use", "shortDescription": {"text": "Privileged port 78 in use"}, "fullDescription": {"text": "Port 78 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-89e99096ae922c66", "name": "Privileged port 65 in use", "shortDescription": {"text": "Privileged port 65 in use"}, "fullDescription": {"text": "Port 65 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5079bdb788a7fc5f", "name": "Privileged port 58 in use", "shortDescription": {"text": "Privileged port 58 in use"}, "fullDescription": {"text": "Port 58 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-da8a44f0369ff968", "name": "Privileged port 27 in use", "shortDescription": {"text": "Privileged port 27 in use"}, "fullDescription": {"text": "Port 27 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7f01925c1ed706a7", "name": "Privileged port 17 in use", "shortDescription": {"text": "Privileged port 17 in use"}, "fullDescription": {"text": "Port 17 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bcae649ee5bed2c9", "name": "Privileged port 19 in use", "shortDescription": {"text": "Privileged port 19 in use"}, "fullDescription": {"text": "Port 19 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-356cc86fab16dbad", "name": "Privileged port 24 in use", "shortDescription": {"text": "Privileged port 24 in use"}, "fullDescription": {"text": "Port 24 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6e4eddd7e8dc504d", "name": "Privileged port 49 in use", "shortDescription": {"text": "Privileged port 49 in use"}, "fullDescription": {"text": "Port 49 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e13ad8d8f3138ffc", "name": "Privileged port 51 in use", "shortDescription": {"text": "Privileged port 51 in use"}, "fullDescription": {"text": "Port 51 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-72e0aaf743e8dfb2", "name": "Privileged port 55 in use", "shortDescription": {"text": "Privileged port 55 in use"}, "fullDescription": {"text": "Port 55 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1d9355c526e870bb", "name": "Privileged port 52 in use", "shortDescription": {"text": "Privileged port 52 in use"}, "fullDescription": {"text": "Port 52 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4e8544ac8c547cb3", "name": "Privileged port 56 in use", "shortDescription": {"text": "Privileged port 56 in use"}, "fullDescription": {"text": "Port 56 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2c024688d30fca4d", "name": "Privileged port 57 in use", "shortDescription": {"text": "Privileged port 57 in use"}, "fullDescription": {"text": "Port 57 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3222076caa99015c", "name": "Privileged port 36 in use", "shortDescription": {"text": "Privileged port 36 in use"}, "fullDescription": {"text": "Port 36 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c43005c0a2058685", "name": "Privileged port 41 in use", "shortDescription": {"text": "Privileged port 41 in use"}, "fullDescription": {"text": "Port 41 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-60d30ed43b2e6e01", "name": "Privileged port 38 in use", "shortDescription": {"text": "Privileged port 38 in use"}, "fullDescription": {"text": "Port 38 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9325f18f40429cc6", "name": "Privileged port 46 in use", "shortDescription": {"text": "Privileged port 46 in use"}, "fullDescription": {"text": "Port 46 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eb449d1e59575d9a", "name": "Privileged port 44 in use", "shortDescription": {"text": "Privileged port 44 in use"}, "fullDescription": {"text": "Port 44 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1c11343bfad67f17", "name": "Privileged port 43 in use", "shortDescription": {"text": "Privileged port 43 in use"}, "fullDescription": {"text": "Port 43 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-074f80f0a0e83cad", "name": "Privileged port 37 in use", "shortDescription": {"text": "Privileged port 37 in use"}, "fullDescription": {"text": "Port 37 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-053400a0802f9c5b", "name": "Privileged port 13 in use", "shortDescription": {"text": "Privileged port 13 in use"}, "fullDescription": {"text": "Port 13 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-221d6026b6f46e09", "name": "Privileged port 55 in use", "shortDescription": {"text": "Privileged port 55 in use"}, "fullDescription": {"text": "Port 55 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9710c8d059e53154", "name": "No frontend routes/components detected", "shortDescription": {"text": "No frontend routes/components detected"}, "fullDescription": {"text": "No React/Vue/Next routes were found. This is fine for backend-only repos."}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0a81e912c6a366b0", "name": "Insecure pattern 'direct_innerhtml_assignment' in scripts/note_draft.sh:363", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in scripts/note_draft.sh:363"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7efbda965f283c17", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-af3390edc24c2ecd", "name": "Very large file: shutsujin_departure.sh (1198 lines)", "shortDescription": {"text": "Very large file: shutsujin_departure.sh (1198 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ad08fba64152e42a", "name": "Very large file: scripts/deploy_task.sh (8035 lines)", "shortDescription": {"text": "Very large file: scripts/deploy_task.sh (8035 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e16e92986a915f43", "name": "Very large file: scripts/inbox_write.sh (1649 lines)", "shortDescription": {"text": "Very large file: scripts/inbox_write.sh (1649 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ba503fec0f860b1a", "name": "Very large file: scripts/memory_db_import.py (1705 lines)", "shortDescription": {"text": "Very large file: scripts/memory_db_import.py (1705 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2938a98a32e57b3d", "name": "Very large file: scripts/ninja_monitor.sh (5372 lines)", "shortDescription": {"text": "Very large file: scripts/ninja_monitor.sh (5372 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-91746411e8906d20", "name": "Very large file: scripts/dashboard_auto_section.sh (1352 lines)", "shortDescription": {"text": "Very large file: scripts/dashboard_auto_section.sh (1352 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-776747c7f73feeb8", "name": "Very large file: scripts/semantic_index_update.sh (1406 lines)", "shortDescription": {"text": "Very large file: scripts/semantic_index_update.sh (1406 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-186eb6c1d844d70a", "name": "Very large file: scripts/cmd_save.sh (6046 lines)", "shortDescription": {"text": "Very large file: scripts/cmd_save.sh (6046 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-00980c96ce1e1d8e", "name": "Very large file: scripts/report_field_set.sh (1666 lines)", "shortDescription": {"text": "Very large file: scripts/report_field_set.sh (1666 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a6d760cf342265c9", "name": "Very large file: scripts/archive_completed.sh (1755 lines)", "shortDescription": {"text": "Very large file: scripts/archive_completed.sh (1755 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-75bf55c5e0c5ec52", "name": "Very large file: scripts/cmd_complete_gate.sh (7698 lines)", "shortDescription": {"text": "Very large file: scripts/cmd_complete_gate.sh (7698 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4015d38c1e8bd8ad", "name": "Very large file: scripts/gates/gate_report_format_main.py (906 lines)", "shortDescription": {"text": "Very large file: scripts/gates/gate_report_format_main.py (906 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c842def44fd76abc", "name": "Very large file: scripts/gates/gate_karo_startup.sh (1690 lines)", "shortDescription": {"text": "Very large file: scripts/gates/gate_karo_startup.sh (1690 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0f7a2b13116362dd", "name": "Very large file: scripts/gates/gate_shogun_startup.sh (3484 lines)", "shortDescription": {"text": "Very large file: scripts/gates/gate_shogun_startup.sh (3484 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6893a6c8b0861585", "name": "Very low test-to-source ratio", "shortDescription": {"text": "Very low test-to-source ratio"}, "fullDescription": {"text": "1 test file(s) for 26 source file(s) (ratio 0.04). Consider adding integration or unit tests for critical paths."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 1918 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 31 placeholder/mock markers across 9 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-24f2ea4bd14badc1", "name": "Agent instruction contains unpinned remote install: CLAUDE.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: CLAUDE.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e1d3fbc30bead412", "name": "Agent instruction contains unpinned remote install: AGENTS.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: AGENTS.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4ea57c71985faef7", "name": "Agent authority lacks a verifier contract: skills/recon-dual/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/recon-dual/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c7b670b96cded799", "name": "Agent authority lacks a verifier contract: skills/sengoku-writer/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/sengoku-writer/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f5aad14bd5b83d6b", "name": "Agent authority lacks a verifier contract: skills/hensei-mixed/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/hensei-mixed/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-101e6a00ddf177cf", "name": "Agent authority lacks a verifier contract: skills/hensei/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/hensei/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-40afad6e4454aa38", "name": "Agent authority lacks a verifier contract: skills/lesson-sort/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/lesson-sort/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-65704bafab4f6c3f", "name": "Agent authority lacks a verifier contract: skills/x-research/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/x-research/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f47b9763881bf0db", "name": "Agent authority lacks a verifier contract: skills/idle-persist/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/idle-persist/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4d6856e284733224", "name": "Agent authority lacks a verifier contract: skills/gate-sync/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/gate-sync/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea19bf986b2204c7", "name": "Agent authority lacks a verifier contract: skills/dashboard-update/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/dashboard-update/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-615d280380be5b57", "name": "Agent authority lacks a verifier contract: skills/shogun-param-neighbor-check/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/shogun-param-neighbor-check/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-418c3690a442b3b2", "name": "Agent authority lacks a verifier contract: skills/shogun-pd-sync/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/shogun-pd-sync/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-63eb295bd5332bf7", "name": "Agent authority lacks a verifier contract: skills/hensei-opus/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/hensei-opus/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-84a9f7bc62aac3cc", "name": "Agent authority lacks a verifier contract: skills/ninja-commit/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/ninja-commit/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-03ec9cc602ae5d34", "name": "Agent authority lacks a verifier contract: skills/cdp-browse/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/cdp-browse/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d2a10fd8e07d7694", "name": "Agent authority lacks a verifier contract: skills/pf-registration/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/pf-registration/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-521eb33cefb89c90", "name": "Agent authority lacks a verifier contract: skills/note-writer/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/note-writer/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-208fac21fa77ff6f", "name": "Agent authority lacks a verifier contract: skills/db-check/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/db-check/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-934a56cbbfcc8326", "name": "Agent authority lacks a verifier contract: skills/shogun-clear-prep/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/shogun-clear-prep/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4681f39e4fa4ba00", "name": "Agent authority lacks a verifier contract: skills/shogun-teire/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/shogun-teire/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c089d81dc0baf01f", "name": "Agent authority lacks a verifier contract: skills/report-write/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/report-write/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c2fbba3f81dfc793", "name": "Agent authority lacks a verifier contract: skills/repo-clean/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/repo-clean/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a4e9093fc32b170b", "name": "Agent authority lacks a verifier contract: skills/gs-bench-gate/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/gs-bench-gate/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7d6838321f4a03fc", "name": "Agent authority lacks a verifier contract: skills/reset-layout/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/reset-layout/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-32cb7a17a02b425a", "name": "Agent authority lacks a verifier contract: skills/karo-direct/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/karo-direct/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-289fd8556772266c", "name": "Agent authority lacks a verifier contract: skills/verdict-check/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/verdict-check/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-85c828e66ce3bf96", "name": "Agent authority lacks a verifier contract: skills/modern-web-guidance/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/modern-web-guidance/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fabf65bb559358f1", "name": "Agent instruction contains unpinned remote install: skills/modern-web-guidance/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: skills/modern-web-guidance/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c6ae9a6d2169f8eb", "name": "Agent authority lacks a verifier contract: skills/cmd-complete/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/cmd-complete/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-689c443f76be0003", "name": "Agent instruction contains unpinned remote install: .github/copilot-instructions.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .github/copilot-instructions.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8c1565d9a3310d2d", "name": "Legacy-named symbol `create_sqlite_backup` in scripts/memory_db_live_insert.py:101", "shortDescription": {"text": "Legacy-named symbol `create_sqlite_backup` in scripts/memory_db_live_insert.py:101"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5593ea1dd02031ca", "name": "Commented-code block (5 lines) in scripts/memory_db_live_insert_async.py:40", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/memory_db_live_insert_async.py:40"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-57f78a6c8e899065", "name": "Network/subprocess call without timeout or try/except \u2014 scripts/backfill_lesson_when_how.py:290", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/backfill_lesson_when_how.py:290"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-767d5db61ba9afa4", "name": "Network/subprocess call without timeout or try/except \u2014 scripts/cdp/cdp_benchmark.py:409", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/cdp/cdp_benchmark.py:409"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-29629853a46a09d4", "name": "Commented-code block (6 lines) in scripts/gates/gate_gunshi_report_precheck_engine.py:2", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/gates/gate_gunshi_report_precheck_engine.py:2"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c9e444b6148e4749", "name": "Legacy-named symbol `first_old` in outputs/analysis/cmd_1578_ward_correlation_analysis.py:297", "shortDescription": {"text": "Legacy-named symbol `first_old` in outputs/analysis/cmd_1578_ward_correlation_analysis.py:297"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nscripts/memory_db_live_insert.py:normalize_text, scripts/memory_db_import.py:normalize_text\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-33a6b62e30ce7ab4", "name": "Near-duplicate function bodies in 6 places", "shortDescription": {"text": "Near-duplicate function bodies in 6 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nscripts/memory_db_import.py:event_rows_from_bulletins, scripts/memory_db_import.py:event_rows_from_insights, scripts/memory_db_import.py:event_rows_from_skill_executions, scripts/memory_db_import.py:event_rows_from_cmd_archives\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/19675"}, "properties": {"repository": "simokitafresh/multi-agent-shogun", "repoUrl": "https://github.com/simokitafresh/multi-agent-shogun", "branch": "main"}, "results": [{"ruleId": "scanner-455d1603e0df4f05", "level": "note", "message": {"text": "Possibly dead Python function: update_event_state"}, "properties": {"repobilityId": "54396021ee854bbe", "scanner": "scanner-primary", "fingerprint": "455d1603e0df4f05", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/memory_db_live_insert.py:144"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1356a30ee91277a0", "level": "note", "message": {"text": "Possibly dead Python function: related_concept_ids"}, "properties": {"repobilityId": "7cb46553ce7c9db6", "scanner": "scanner-primary", "fingerprint": "1356a30ee91277a0", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/semantic_index.py:43"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-911be1399d61c4ef", "level": "note", "message": {"text": "Possibly dead Python function: write_inbox"}, "properties": {"repobilityId": "9a0963164dd2fb17", "scanner": "scanner-primary", "fingerprint": "911be1399d61c4ef", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/lib/write_inbox_yaml.py:21"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bc173e7001add5f7", "level": "note", "message": {"text": "Possibly dead Python function: launch_browser"}, "properties": {"repobilityId": "4633a8872ef91dc9", "scanner": "scanner-primary", "fingerprint": "bc173e7001add5f7", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/cdp/cdp_helper.py:127"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fb7d035f492ec1ad", "level": "note", "message": {"text": "Possibly dead Python function: log_message"}, "properties": {"repobilityId": "965f3150b4af5b2e", "scanner": "scanner-primary", "fingerprint": "fb7d035f492ec1ad", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/cdp/cdp_server.py:372"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6b8b525d2b78c9f9", "level": "note", "message": {"text": "Possibly dead Python function: do_GET"}, "properties": {"repobilityId": "2d943bb45e4f13bd", "scanner": "scanner-primary", "fingerprint": "6b8b525d2b78c9f9", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/cdp/cdp_server.py:409"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5e0f4ff83722abc8", "level": "note", "message": {"text": "Possibly dead Python function: do_POST"}, "properties": {"repobilityId": "53357410ca9379a9", "scanner": "scanner-primary", "fingerprint": "5e0f4ff83722abc8", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/cdp/cdp_server.py:432"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-879bcf29c43dd6af", "level": "note", "message": {"text": "Possibly dead Python function: idle_watchdog"}, "properties": {"repobilityId": "10c183a0467504b6", "scanner": "scanner-primary", "fingerprint": "879bcf29c43dd6af", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/cdp/cdp_server.py:531"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-da45702af3023053", "level": "note", "message": {"text": "Possibly dead Python function: lookup_fix_hints"}, "properties": {"repobilityId": "0b0b5becb0090b1f", "scanner": "scanner-primary", "fingerprint": "da45702af3023053", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/gates/gate_report_format_main.py:886"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7d13100d86bd2b88", "level": "warning", "message": {"text": "Privileged port 78 in use"}, "properties": {"repobilityId": "868e846725814578", "scanner": "scanner-primary", "fingerprint": "7d13100d86bd2b88", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/deploy_task.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-89e99096ae922c66", "level": "warning", "message": {"text": "Privileged port 65 in use"}, "properties": {"repobilityId": "91f4542de5d09e32", "scanner": "scanner-primary", "fingerprint": "89e99096ae922c66", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/deploy_task.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5079bdb788a7fc5f", "level": "warning", "message": {"text": "Privileged port 58 in use"}, "properties": {"repobilityId": "6d9ae83ac6aad676", "scanner": "scanner-primary", "fingerprint": "5079bdb788a7fc5f", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/usage_status.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-da8a44f0369ff968", "level": "warning", "message": {"text": "Privileged port 27 in use"}, "properties": {"repobilityId": "69cb2b980eb576a0", "scanner": "scanner-primary", "fingerprint": "da8a44f0369ff968", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/semantic_search.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7f01925c1ed706a7", "level": "warning", "message": {"text": "Privileged port 17 in use"}, "properties": {"repobilityId": "0bf38fb8f89ec589", "scanner": "scanner-primary", "fingerprint": "7f01925c1ed706a7", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/cmd_delegate.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bcae649ee5bed2c9", "level": "warning", "message": {"text": "Privileged port 19 in use"}, "properties": {"repobilityId": "a6b5b06deac36eac", "scanner": "scanner-primary", "fingerprint": "bcae649ee5bed2c9", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "logs/script_speed_training_ledger.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-356cc86fab16dbad", "level": "warning", "message": {"text": "Privileged port 24 in use"}, "properties": {"repobilityId": "a6356ba91a17fcb8", "scanner": "scanner-primary", "fingerprint": "356cc86fab16dbad", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "logs/script_speed_training_ledger.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6e4eddd7e8dc504d", "level": "warning", "message": {"text": "Privileged port 49 in use"}, "properties": {"repobilityId": "6108a3341973dcab", "scanner": "scanner-primary", "fingerprint": "6e4eddd7e8dc504d", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "logs/script_speed_training_ledger.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e13ad8d8f3138ffc", "level": "warning", "message": {"text": "Privileged port 51 in use"}, "properties": {"repobilityId": "22e13070198289ad", "scanner": "scanner-primary", "fingerprint": "e13ad8d8f3138ffc", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "logs/script_speed_training_ledger.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-72e0aaf743e8dfb2", "level": "warning", "message": {"text": "Privileged port 55 in use"}, "properties": {"repobilityId": "51a768b3e1831ac0", "scanner": "scanner-primary", "fingerprint": "72e0aaf743e8dfb2", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "logs/script_speed_training_ledger.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1d9355c526e870bb", "level": "warning", "message": {"text": "Privileged port 52 in use"}, "properties": {"repobilityId": "2b6877fa37212075", "scanner": "scanner-primary", "fingerprint": "1d9355c526e870bb", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "logs/script_speed_training_ledger.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4e8544ac8c547cb3", "level": "warning", "message": {"text": "Privileged port 56 in use"}, "properties": {"repobilityId": "104b02b29065e84a", "scanner": "scanner-primary", "fingerprint": "4e8544ac8c547cb3", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "logs/script_speed_training_ledger.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2c024688d30fca4d", "level": "warning", "message": {"text": "Privileged port 57 in use"}, "properties": {"repobilityId": "7f473bea32892301", "scanner": "scanner-primary", "fingerprint": "2c024688d30fca4d", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "logs/script_speed_training_ledger.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3222076caa99015c", "level": "warning", "message": {"text": "Privileged port 36 in use"}, "properties": {"repobilityId": "d1c2650d13d67a60", "scanner": "scanner-primary", "fingerprint": "3222076caa99015c", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "logs/gunshi_review_log.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c43005c0a2058685", "level": "warning", "message": {"text": "Privileged port 41 in use"}, "properties": {"repobilityId": "21c3be090ea64fdb", "scanner": "scanner-primary", "fingerprint": "c43005c0a2058685", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "logs/gunshi_review_log.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-60d30ed43b2e6e01", "level": "warning", "message": {"text": "Privileged port 38 in use"}, "properties": {"repobilityId": "b7214bb254c5881d", "scanner": "scanner-primary", "fingerprint": "60d30ed43b2e6e01", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "logs/gunshi_review_log.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9325f18f40429cc6", "level": "warning", "message": {"text": "Privileged port 46 in use"}, "properties": {"repobilityId": "e83b659b6ec9a0fc", "scanner": "scanner-primary", "fingerprint": "9325f18f40429cc6", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "logs/gunshi_review_log.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-eb449d1e59575d9a", "level": "warning", "message": {"text": "Privileged port 44 in use"}, "properties": {"repobilityId": "1f021a2e926773a0", "scanner": "scanner-primary", "fingerprint": "eb449d1e59575d9a", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "logs/gunshi_review_log.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1c11343bfad67f17", "level": "warning", "message": {"text": "Privileged port 43 in use"}, "properties": {"repobilityId": "af1bc8881542418e", "scanner": "scanner-primary", "fingerprint": "1c11343bfad67f17", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "logs/gunshi_review_log.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-074f80f0a0e83cad", "level": "warning", "message": {"text": "Privileged port 37 in use"}, "properties": {"repobilityId": "3bc0728a81a76695", "scanner": "scanner-primary", "fingerprint": "074f80f0a0e83cad", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "logs/gunshi_review_log.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-053400a0802f9c5b", "level": "warning", "message": {"text": "Privileged port 13 in use"}, "properties": {"repobilityId": "79d721e4d6f64798", "scanner": "scanner-primary", "fingerprint": "053400a0802f9c5b", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/hooks/post-bash-combined.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-221d6026b6f46e09", "level": "warning", "message": {"text": "Privileged port 55 in use"}, "properties": {"repobilityId": "51a768b3e1831ac0", "scanner": "scanner-primary", "fingerprint": "221d6026b6f46e09", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/hooks/post-shogun-inbox-check.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9710c8d059e53154", "level": "none", "message": {"text": "No frontend routes/components detected"}, "properties": {"repobilityId": "44ca61485762e494", "scanner": "scanner-primary", "fingerprint": "9710c8d059e53154", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-0a81e912c6a366b0", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in scripts/note_draft.sh:363"}, "properties": {"repobilityId": "18af64e4d32a65c8", "scanner": "scanner-primary", "fingerprint": "0a81e912c6a366b0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/note_draft.sh"}, "region": {"startLine": 363}}}]}, {"ruleId": "scanner-7efbda965f283c17", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "56929525eac9a554", "scanner": "scanner-primary", "fingerprint": "7efbda965f283c17", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/test.yml"}, "region": {"startLine": 16}}}]}, {"ruleId": "scanner-7efbda965f283c17", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "c7b0656e54a8a817", "scanner": "scanner-primary", "fingerprint": "7efbda965f283c17", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/test.yml"}, "region": {"startLine": 67}}}]}, {"ruleId": "scanner-7efbda965f283c17", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "56929525eac9a554", "scanner": "scanner-primary", "fingerprint": "7efbda965f283c17", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/test.yml"}, "region": {"startLine": 79}}}]}, {"ruleId": "scanner-7efbda965f283c17", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "56929525eac9a554", "scanner": "scanner-primary", "fingerprint": "7efbda965f283c17", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/test.yml"}, "region": {"startLine": 129}}}]}, {"ruleId": "scanner-7efbda965f283c17", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "56929525eac9a554", "scanner": "scanner-primary", "fingerprint": "7efbda965f283c17", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/test.yml"}, "region": {"startLine": 160}}}]}, {"ruleId": "scanner-7efbda965f283c17", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "56929525eac9a554", "scanner": "scanner-primary", "fingerprint": "7efbda965f283c17", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/test.yml"}, "region": {"startLine": 188}}}]}, {"ruleId": "scanner-7efbda965f283c17", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "56929525eac9a554", "scanner": "scanner-primary", "fingerprint": "7efbda965f283c17", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/test.yml"}, "region": {"startLine": 208}}}]}, {"ruleId": "scanner-7efbda965f283c17", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "c7b0656e54a8a817", "scanner": "scanner-primary", "fingerprint": "7efbda965f283c17", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/test.yml"}, "region": {"startLine": 238}}}]}, {"ruleId": "scanner-af3390edc24c2ecd", "level": "note", "message": {"text": "Very large file: shutsujin_departure.sh (1198 lines)"}, "properties": {"repobilityId": "f6d0063666eff4e0", "scanner": "scanner-primary", "fingerprint": "af3390edc24c2ecd", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-ad08fba64152e42a", "level": "note", "message": {"text": "Very large file: scripts/deploy_task.sh (8035 lines)"}, "properties": {"repobilityId": "a59747908c63f905", "scanner": "scanner-primary", "fingerprint": "ad08fba64152e42a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-e16e92986a915f43", "level": "note", "message": {"text": "Very large file: scripts/inbox_write.sh (1649 lines)"}, "properties": {"repobilityId": "02591ccff744195a", "scanner": "scanner-primary", "fingerprint": "e16e92986a915f43", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-ba503fec0f860b1a", "level": "note", "message": {"text": "Very large file: scripts/memory_db_import.py (1705 lines)"}, "properties": {"repobilityId": "6dd3d99e33fc6e6e", "scanner": "scanner-primary", "fingerprint": "ba503fec0f860b1a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-2938a98a32e57b3d", "level": "note", "message": {"text": "Very large file: scripts/ninja_monitor.sh (5372 lines)"}, "properties": {"repobilityId": "d1f6a50babfb0d6f", "scanner": "scanner-primary", "fingerprint": "2938a98a32e57b3d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-91746411e8906d20", "level": "note", "message": {"text": "Very large file: scripts/dashboard_auto_section.sh (1352 lines)"}, "properties": {"repobilityId": "8889c3e12d24d752", "scanner": "scanner-primary", "fingerprint": "91746411e8906d20", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-776747c7f73feeb8", "level": "note", "message": {"text": "Very large file: scripts/semantic_index_update.sh (1406 lines)"}, "properties": {"repobilityId": "023b18bf1826fa48", "scanner": "scanner-primary", "fingerprint": "776747c7f73feeb8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-186eb6c1d844d70a", "level": "note", "message": {"text": "Very large file: scripts/cmd_save.sh (6046 lines)"}, "properties": {"repobilityId": "13dd086e43bacec1", "scanner": "scanner-primary", "fingerprint": "186eb6c1d844d70a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-00980c96ce1e1d8e", "level": "note", "message": {"text": "Very large file: scripts/report_field_set.sh (1666 lines)"}, "properties": {"repobilityId": "b2ed5d00cb47314b", "scanner": "scanner-primary", "fingerprint": "00980c96ce1e1d8e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-a6d760cf342265c9", "level": "note", "message": {"text": "Very large file: scripts/archive_completed.sh (1755 lines)"}, "properties": {"repobilityId": "1bd8af826af1d1c5", "scanner": "scanner-primary", "fingerprint": "a6d760cf342265c9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-75bf55c5e0c5ec52", "level": "note", "message": {"text": "Very large file: scripts/cmd_complete_gate.sh (7698 lines)"}, "properties": {"repobilityId": "ae191a66e161eec9", "scanner": "scanner-primary", "fingerprint": "75bf55c5e0c5ec52", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-4015d38c1e8bd8ad", "level": "note", "message": {"text": "Very large file: scripts/gates/gate_report_format_main.py (906 lines)"}, "properties": {"repobilityId": "21d1e9df4e1440b2", "scanner": "scanner-primary", "fingerprint": "4015d38c1e8bd8ad", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-c842def44fd76abc", "level": "note", "message": {"text": "Very large file: scripts/gates/gate_karo_startup.sh (1690 lines)"}, "properties": {"repobilityId": "38383243246e0cdd", "scanner": "scanner-primary", "fingerprint": "c842def44fd76abc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-0f7a2b13116362dd", "level": "note", "message": {"text": "Very large file: scripts/gates/gate_shogun_startup.sh (3484 lines)"}, "properties": {"repobilityId": "57151a09fc819060", "scanner": "scanner-primary", "fingerprint": "0f7a2b13116362dd", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-6893a6c8b0861585", "level": "warning", "message": {"text": "Very low test-to-source ratio"}, "properties": {"repobilityId": "54a7de3f06314bf0", "scanner": "scanner-primary", "fingerprint": "6893a6c8b0861585", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["tests", "coverage"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "27cf90aa174f5873", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "f129c67cafed5fb2", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "e9a18f62cc9f16cc", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "29792873559f3736", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "0a234701238d0fc5", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-24f2ea4bd14badc1", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: CLAUDE.md"}, "properties": {"repobilityId": "0f6049734704e537", "scanner": "scanner-primary", "fingerprint": "24f2ea4bd14badc1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "CLAUDE.md"}, "region": {"startLine": 618}}}]}, {"ruleId": "scanner-e1d3fbc30bead412", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: AGENTS.md"}, "properties": {"repobilityId": "56bfc666b358d0d0", "scanner": "scanner-primary", "fingerprint": "e1d3fbc30bead412", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "agents_md"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "AGENTS.md"}, "region": {"startLine": 618}}}]}, {"ruleId": "scanner-4ea57c71985faef7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/recon-dual/SKILL.md"}, "properties": {"repobilityId": "25a7bd0bf3ccbbc5", "scanner": "scanner-primary", "fingerprint": "4ea57c71985faef7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/recon-dual/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c7b670b96cded799", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/sengoku-writer/SKILL.md"}, "properties": {"repobilityId": "c5d6ac7a7a09231e", "scanner": "scanner-primary", "fingerprint": "c7b670b96cded799", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/sengoku-writer/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f5aad14bd5b83d6b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/hensei-mixed/SKILL.md"}, "properties": {"repobilityId": "a5c64388f6dfcf8c", "scanner": "scanner-primary", "fingerprint": "f5aad14bd5b83d6b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/hensei-mixed/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-101e6a00ddf177cf", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/hensei/SKILL.md"}, "properties": {"repobilityId": "3f1b7ef98ba3e3e0", "scanner": "scanner-primary", "fingerprint": "101e6a00ddf177cf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/hensei/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-40afad6e4454aa38", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/lesson-sort/SKILL.md"}, "properties": {"repobilityId": "df8168967f3cc144", "scanner": "scanner-primary", "fingerprint": "40afad6e4454aa38", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/lesson-sort/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-65704bafab4f6c3f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/x-research/SKILL.md"}, "properties": {"repobilityId": "2806e5f2fd428762", "scanner": "scanner-primary", "fingerprint": "65704bafab4f6c3f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/x-research/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f47b9763881bf0db", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/idle-persist/SKILL.md"}, "properties": {"repobilityId": "0cc560c44681d8bd", "scanner": "scanner-primary", "fingerprint": "f47b9763881bf0db", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/idle-persist/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4d6856e284733224", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/gate-sync/SKILL.md"}, "properties": {"repobilityId": "463126ab9ed1af44", "scanner": "scanner-primary", "fingerprint": "4d6856e284733224", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/gate-sync/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ea19bf986b2204c7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/dashboard-update/SKILL.md"}, "properties": {"repobilityId": "a9f487a0384f59cd", "scanner": "scanner-primary", "fingerprint": "ea19bf986b2204c7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/dashboard-update/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-615d280380be5b57", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/shogun-param-neighbor-check/SKILL.md"}, "properties": {"repobilityId": "714e7ffc40008390", "scanner": "scanner-primary", "fingerprint": "615d280380be5b57", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/shogun-param-neighbor-check/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-418c3690a442b3b2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/shogun-pd-sync/SKILL.md"}, "properties": {"repobilityId": "1826020066b10328", "scanner": "scanner-primary", "fingerprint": "418c3690a442b3b2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/shogun-pd-sync/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-63eb295bd5332bf7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/hensei-opus/SKILL.md"}, "properties": {"repobilityId": "c7338cfb78044179", "scanner": "scanner-primary", "fingerprint": "63eb295bd5332bf7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/hensei-opus/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-84a9f7bc62aac3cc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/ninja-commit/SKILL.md"}, "properties": {"repobilityId": "5d944e19862da49d", "scanner": "scanner-primary", "fingerprint": "84a9f7bc62aac3cc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/ninja-commit/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-03ec9cc602ae5d34", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/cdp-browse/SKILL.md"}, "properties": {"repobilityId": "eb67e2eb606fcb9b", "scanner": "scanner-primary", "fingerprint": "03ec9cc602ae5d34", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/cdp-browse/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d2a10fd8e07d7694", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/pf-registration/SKILL.md"}, "properties": {"repobilityId": "a8251d3a17f435ad", "scanner": "scanner-primary", "fingerprint": "d2a10fd8e07d7694", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/pf-registration/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-521eb33cefb89c90", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/note-writer/SKILL.md"}, "properties": {"repobilityId": "0dffe930d7fec73c", "scanner": "scanner-primary", "fingerprint": "521eb33cefb89c90", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/note-writer/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-208fac21fa77ff6f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/db-check/SKILL.md"}, "properties": {"repobilityId": "6958ba2f46caecae", "scanner": "scanner-primary", "fingerprint": "208fac21fa77ff6f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/db-check/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-934a56cbbfcc8326", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/shogun-clear-prep/SKILL.md"}, "properties": {"repobilityId": "86b241ab400a8246", "scanner": "scanner-primary", "fingerprint": "934a56cbbfcc8326", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/shogun-clear-prep/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4681f39e4fa4ba00", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/shogun-teire/SKILL.md"}, "properties": {"repobilityId": "ae070509eb3332f0", "scanner": "scanner-primary", "fingerprint": "4681f39e4fa4ba00", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/shogun-teire/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c089d81dc0baf01f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/report-write/SKILL.md"}, "properties": {"repobilityId": "dd6dfc0d1d2a799d", "scanner": "scanner-primary", "fingerprint": "c089d81dc0baf01f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/report-write/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c2fbba3f81dfc793", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/repo-clean/SKILL.md"}, "properties": {"repobilityId": "fa2fd6cc550e5754", "scanner": "scanner-primary", "fingerprint": "c2fbba3f81dfc793", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/repo-clean/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a4e9093fc32b170b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/gs-bench-gate/SKILL.md"}, "properties": {"repobilityId": "fbb2f1fe861d169e", "scanner": "scanner-primary", "fingerprint": "a4e9093fc32b170b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/gs-bench-gate/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7d6838321f4a03fc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/reset-layout/SKILL.md"}, "properties": {"repobilityId": "47e738c9cf44949a", "scanner": "scanner-primary", "fingerprint": "7d6838321f4a03fc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/reset-layout/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-32cb7a17a02b425a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/karo-direct/SKILL.md"}, "properties": {"repobilityId": "a041b48b8e9da86a", "scanner": "scanner-primary", "fingerprint": "32cb7a17a02b425a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/karo-direct/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-289fd8556772266c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/verdict-check/SKILL.md"}, "properties": {"repobilityId": "1b7d6a5e53ba425e", "scanner": "scanner-primary", "fingerprint": "289fd8556772266c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/verdict-check/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-85c828e66ce3bf96", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/modern-web-guidance/SKILL.md"}, "properties": {"repobilityId": "eacf3847347d0064", "scanner": "scanner-primary", "fingerprint": "85c828e66ce3bf96", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/modern-web-guidance/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fabf65bb559358f1", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: skills/modern-web-guidance/SKILL.md"}, "properties": {"repobilityId": "289cd6b72ec83c9a", "scanner": "scanner-primary", "fingerprint": "fabf65bb559358f1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/modern-web-guidance/SKILL.md"}, "region": {"startLine": 38}}}]}, {"ruleId": "scanner-c6ae9a6d2169f8eb", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/cmd-complete/SKILL.md"}, "properties": {"repobilityId": "05f77d843da4777b", "scanner": "scanner-primary", "fingerprint": "c6ae9a6d2169f8eb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/cmd-complete/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-689c443f76be0003", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .github/copilot-instructions.md"}, "properties": {"repobilityId": "ed6e51fcbf704e54", "scanner": "scanner-primary", "fingerprint": "689c443f76be0003", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "agent_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/copilot-instructions.md"}, "region": {"startLine": 618}}}]}, {"ruleId": "scanner-8c1565d9a3310d2d", "level": "note", "message": {"text": "Legacy-named symbol `create_sqlite_backup` in scripts/memory_db_live_insert.py:101"}, "properties": {"repobilityId": "649b1f98727d904a", "scanner": "scanner-primary", "fingerprint": "8c1565d9a3310d2d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-5593ea1dd02031ca", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/memory_db_live_insert_async.py:40"}, "properties": {"repobilityId": "6487110881be40a1", "scanner": "scanner-primary", "fingerprint": "5593ea1dd02031ca", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-57f78a6c8e899065", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/backfill_lesson_when_how.py:290"}, "properties": {"repobilityId": "8eee40463c845309", "scanner": "scanner-primary", "fingerprint": "57f78a6c8e899065", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-767d5db61ba9afa4", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/cdp/cdp_benchmark.py:409"}, "properties": {"repobilityId": "e625862ebbc992af", "scanner": "scanner-primary", "fingerprint": "767d5db61ba9afa4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-29629853a46a09d4", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/gates/gate_gunshi_report_precheck_engine.py:2"}, "properties": {"repobilityId": "64739e46983993ce", "scanner": "scanner-primary", "fingerprint": "29629853a46a09d4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c9e444b6148e4749", "level": "note", "message": {"text": "Legacy-named symbol `first_old` in outputs/analysis/cmd_1578_ward_correlation_analysis.py:297"}, "properties": {"repobilityId": "ec93128fbced76b5", "scanner": "scanner-primary", "fingerprint": "c9e444b6148e4749", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "8cd0a43be4f1c0a3", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-33a6b62e30ce7ab4", "level": "note", "message": {"text": "Near-duplicate function bodies in 6 places"}, "properties": {"repobilityId": "3bf41e752a9a253b", "scanner": "scanner-primary", "fingerprint": "33a6b62e30ce7ab4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "6d496019325087ab", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}]}]}