Dicklesworthstone/destructive_command_guard

7.1

Adjusted Score

7.1

Raw Score

100%

Time Factor

2026-08-28

Last Push

5.9K

Stars

Rust

Language

317.0K

Lines of Code

504

Files

1.3K

Pattern Hits

2026-08-29

Scan Date

0.01

HC Hit Rate

What These Metrics Mean

Adjusted Score: Primary synthetic code indicator. Raw score normalised per 1,000 lines of code and multiplied by the temporal discount factor. This is the definitive comparative metric — use it to rank repositories by AI authorship density.
Raw Score: The unmodified sum of all severity-weighted, context-multiplied pattern match scores before temporal discounting. Reflects the absolute signal strength independent of when the repository was last active.
Time Factor: The temporal discount multiplier (0–100%) applied to the raw score. Repositories last updated before ChatGPT's launch (Nov 2022) receive a 5% factor. Full signal is only assigned to repositories active in the post-adoption era (Jan 2024+).
Pattern Hits: Total count of individual pattern matches across all files and categories. A high hit count with a low score may indicate a very large codebase with isolated AI snippets; a low count with a high score indicates dense, concentrated AI signatures.
HC Hit Rate: High+Critical pattern hits per file, averaged across the repository. This orthogonal signal catches repositories where a few files are densely packed with high-severity AI tells — a strong indicator even when the normalised score appears moderate due to codebase size.
Lines of Code / Files: Total lines and files analysed. The scanner examines 94 file extensions. These denominators are used to normalise the score, enabling fair comparison between repositories of vastly different sizes.

Score History

This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.

Severity Breakdown

Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.

CRITICAL 0HIGH 3MEDIUM 446LOW 840

Directory Score Breakdown

This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.

Pattern Findings

The scanner identified 1289 distinct pattern matches across 15 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.

Decorative Section Separators394 hits · 1244 pts

Severity	File	Line	Snippet	Context
MEDIUM	install.sh	226	# ═══════════════════════════════════════════════════════════════════════════════	COMMENT
MEDIUM	install.sh	228	# ═══════════════════════════════════════════════════════════════════════════════	COMMENT
MEDIUM	install.sh	1725	# ═══════════════════════════════════════════════════════════════════════════════	COMMENT
MEDIUM	install.sh	1727	# ═══════════════════════════════════════════════════════════════════════════════	COMMENT
MEDIUM	install.sh	1811	# ═══════════════════════════════════════════════════════════════════════════════	COMMENT
MEDIUM	install.sh	1813	# ═══════════════════════════════════════════════════════════════════════════════	COMMENT
MEDIUM	install.sh	4074	# ═══════════════════════════════════════════════════════════════════════════════	COMMENT
MEDIUM	install.sh	4076	# ═══════════════════════════════════════════════════════════════════════════════	COMMENT
MEDIUM	install.sh	4159	# ═══════════════════════════════════════════════════════════════════════════════	COMMENT
MEDIUM	install.sh	4161	# ═══════════════════════════════════════════════════════════════════════════════	COMMENT
MEDIUM	install.sh	4198	# ═══════════════════════════════════════════════════════════════════════════════	COMMENT
MEDIUM	install.sh	4200	# ═══════════════════════════════════════════════════════════════════════════════	COMMENT
MEDIUM	.config/nextest.toml	4	# =============================================================================	COMMENT
MEDIUM	.config/nextest.toml	6	# =============================================================================	COMMENT
MEDIUM	.config/nextest.toml	20	# =============================================================================	COMMENT
MEDIUM	.config/nextest.toml	22	# =============================================================================	COMMENT
MEDIUM	.config/nextest.toml	46	# =============================================================================	COMMENT
MEDIUM	.config/nextest.toml	48	# =============================================================================	COMMENT
MEDIUM	.config/nextest.toml	66	# =============================================================================	COMMENT
MEDIUM	.config/nextest.toml	68	# =============================================================================	COMMENT
MEDIUM	tests/corpus/edge_cases/multi_segment.toml	6	# ============================================================================	COMMENT
MEDIUM	tests/corpus/edge_cases/multi_segment.toml	8	# ============================================================================	COMMENT
MEDIUM	tests/corpus/edge_cases/multi_segment.toml	37	# ============================================================================	COMMENT
MEDIUM	tests/corpus/edge_cases/multi_segment.toml	39	# ============================================================================	COMMENT
MEDIUM	tests/corpus/edge_cases/multi_segment.toml	68	# ============================================================================	COMMENT
MEDIUM	tests/corpus/edge_cases/multi_segment.toml	70	# ============================================================================	COMMENT
MEDIUM	tests/corpus/edge_cases/multi_segment.toml	88	# ============================================================================	COMMENT
MEDIUM	tests/corpus/edge_cases/multi_segment.toml	90	# ============================================================================	COMMENT
MEDIUM	tests/corpus/edge_cases/multi_segment.toml	113	# ============================================================================	COMMENT
MEDIUM	tests/corpus/edge_cases/multi_segment.toml	115	# ============================================================================	COMMENT
MEDIUM	tests/corpus/edge_cases/multi_segment.toml	138	# ============================================================================	COMMENT
MEDIUM	tests/corpus/edge_cases/multi_segment.toml	140	# ============================================================================	COMMENT
MEDIUM	tests/corpus/edge_cases/multi_segment.toml	173	# ============================================================================	COMMENT
MEDIUM	tests/corpus/edge_cases/multi_segment.toml	175	# ============================================================================	COMMENT
MEDIUM	tests/corpus/edge_cases/multi_segment.toml	199	# ============================================================================	COMMENT
MEDIUM	tests/corpus/edge_cases/multi_segment.toml	201	# ============================================================================	COMMENT
MEDIUM	tests/corpus/edge_cases/regex_worst_case.toml	12	# -----------------------------------------------------------------------------	COMMENT
MEDIUM	tests/corpus/edge_cases/regex_worst_case.toml	14	# -----------------------------------------------------------------------------	COMMENT
MEDIUM	tests/corpus/edge_cases/regex_worst_case.toml	32	# -----------------------------------------------------------------------------	COMMENT
MEDIUM	tests/corpus/edge_cases/regex_worst_case.toml	34	# -----------------------------------------------------------------------------	COMMENT
MEDIUM	tests/corpus/edge_cases/regex_worst_case.toml	51	# -----------------------------------------------------------------------------	COMMENT
MEDIUM	tests/corpus/edge_cases/regex_worst_case.toml	53	# -----------------------------------------------------------------------------	COMMENT
MEDIUM	tests/corpus/edge_cases/regex_worst_case.toml	70	# -----------------------------------------------------------------------------	COMMENT
MEDIUM	tests/corpus/edge_cases/regex_worst_case.toml	72	# -----------------------------------------------------------------------------	COMMENT
MEDIUM	tests/corpus/edge_cases/regex_worst_case.toml	84	# -----------------------------------------------------------------------------	COMMENT
MEDIUM	tests/corpus/edge_cases/regex_worst_case.toml	86	# -----------------------------------------------------------------------------	COMMENT
MEDIUM	tests/corpus/edge_cases/regex_worst_case.toml	98	# -----------------------------------------------------------------------------	COMMENT
MEDIUM	tests/corpus/edge_cases/regex_worst_case.toml	100	# -----------------------------------------------------------------------------	COMMENT
MEDIUM	tests/corpus/edge_cases/quoting.toml	5	# ============================================================================	COMMENT
MEDIUM	tests/corpus/edge_cases/quoting.toml	7	# ============================================================================	COMMENT
MEDIUM	tests/corpus/edge_cases/quoting.toml	24	# ============================================================================	COMMENT
MEDIUM	tests/corpus/edge_cases/quoting.toml	26	# ============================================================================	COMMENT
MEDIUM	tests/corpus/edge_cases/quoting.toml	48	# ============================================================================	COMMENT
MEDIUM	tests/corpus/edge_cases/quoting.toml	50	# ============================================================================	COMMENT
MEDIUM	tests/corpus/edge_cases/quoting.toml	73	# ============================================================================	COMMENT
MEDIUM	tests/corpus/edge_cases/quoting.toml	75	# ============================================================================	COMMENT
MEDIUM	tests/corpus/edge_cases/quoting.toml	87	# ============================================================================	COMMENT
MEDIUM	tests/corpus/edge_cases/quoting.toml	89	# ============================================================================	COMMENT
MEDIUM	tests/corpus/edge_cases/quoting.toml	106	# ============================================================================	COMMENT
MEDIUM	tests/corpus/edge_cases/quoting.toml	108	# ============================================================================	COMMENT
334 more matches not shown…

Over-Commented Block668 hits · 568 pts

Severity	File	Line	Snippet	Context
LOW	uninstall.sh	1	#!/usr/bin/env bash	COMMENT
LOW	install.sh	1	#!/usr/bin/env bash	COMMENT
LOW	install.sh	81	if ( : </dev/tty >/dev/tty ) 2>/dev/null; then	COMMENT
LOW	install.sh	281	elif command -v gtimeout >/dev/null 2>&1; then	COMMENT
LOW	install.sh	2521	AUTO_CONFIGURED=1	COMMENT
LOW	install.sh	2561	# Codex CLI (https://github.com/openai/codex) is OpenAI's coding assistant.	COMMENT
LOW	install.sh	2581	# (codex-rs/hooks/src/schema.rs documents it as "Codex extension"; Claude	COMMENT
LOW	install.sh	3361	# block decision lives in the JSON payload (`{"decision":"block",...}`),	COMMENT
LOW	install.sh	3621	}	COMMENT
LOW	install.sh	3641	# matcher copied from the Claude entry would never fire. Listing both	COMMENT
LOW	build.rs	21	.commit_date(true)	COMMENT
LOW	build.rs	141	/// changes no code path.	COMMENT
LOW	rust-toolchain.toml	1	[toolchain]	COMMENT
LOW	.config/nextest.toml	1	# cargo-nextest configuration for git_safety_guard	COMMENT
LOW	patches/uring-fs/src/lib.rs	1		COMMENT
LOW	patches/uring-fs/src/lib.rs	21	//! let info = io.stat("src/file.txt").await?;	COMMENT
LOW	tests/codex_hook_protocol.rs	1	//! Subprocess integration tests for Codex CLI hook protocol.	COMMENT
LOW	tests/codex_hook_protocol.rs	201	)	COMMENT
LOW	tests/codex_hook_protocol.rs	441	);	COMMENT
LOW	tests/codex_hook_protocol.rs	1001	"Claude bypass must produce no stdout\n{outcome}"	COMMENT
LOW	tests/codex_hook_protocol.rs	1621	assert!(claude.is_allow_shape(), "Claude allow shape\n{claude}");	COMMENT
LOW	tests/codex_hook_protocol.rs	2001	// KNOWN BEHAVIOR: `DCG_DISABLE=core.git` does NOT disable core.git with	COMMENT
LOW	tests/codex_hook_protocol.rs	2121		COMMENT
LOW	tests/temporary_allowlist_tests.rs	1	//! Comprehensive tests for Temporary/Expiring Allowlist Entries (Epic 6).	COMMENT
LOW	tests/repro_331_rebase_recovery_embedded_cd.rs	1	//! Regression tests for issue #331: the rebase-recovery auto-allow and permit	COMMENT
LOW	tests/suggestion_integration.rs	1	//! Integration tests for Command Rewriting Suggestions end-to-end flow.	COMMENT
LOW	tests/cross_pack_corpus.rs	1	//! Cross-pack regression corpus (issue #289 part D).	COMMENT
LOW	tests/cross_pack_corpus.rs	21	//! # Case format (TOML)	COMMENT
LOW	tests/cross_pack_corpus.rs	41	//! fails so the marker gets removed. `known_failing_dialects` keeps the	COMMENT
LOW	tests/repro_277_git_stdin_sink_fallback.rs	1	//! Regression tests for issue #277: a `git commit -F - <<'EOF'` heredoc whose	COMMENT
LOW	tests/agent_exit_codes.rs	1	//! Tests for exit code compliance with Claude Code hook protocol.	COMMENT
LOW	tests/repro_290_oversized_hook_input.rs	1	//! Repro for issue #290: an oversized hook payload must not fail open blind.	COMMENT
LOW	tests/config_schema_drift.rs	1	//! Drift check for the committed `config.schema.json`.	COMMENT
LOW	tests/repro_327_dead_override_keys.rs	1	//! Regression tests for issue #327: `overrides.allowlist` and	COMMENT
LOW	tests/suggest_allowlist_e2e.rs	1	#![allow(clippy::uninlined_format_args)]	COMMENT
LOW	tests/repro_1o5h_cmd_pwsh_stdin_consumer.rs	1	//! Regression pins for bd-1o5h: bare `cmd`/`pwsh` reading piped or redirected	COMMENT
LOW	tests/repro_dotnet_directory_delete.rs	1	//! Regression tests for issue #222: `windows.filesystem` must block the .NET	COMMENT
LOW	tests/agent_hook_output.rs	461	);	COMMENT
LOW	tests/golden_isomorphism.rs	1	//! Golden isomorphism tests for the evaluator.	COMMENT
LOW	tests/robot_mode.rs	1	//! Tests for robot mode (`--robot` flag and `DCG_ROBOT` env var).	COMMENT
LOW	tests/repro_heredoc_pipeline_producer_bypass.rs	1	//! Regression tests for a heredoc-producer pipeline bypass found while	COMMENT
LOW	tests/repro_heredoc_pipeline_producer_bypass.rs	181	// `cat <<EOF >log … EOF \| bash` sends the heredoc body to `log`, so the	COMMENT
LOW	tests/repro_329_heredoc_prose_data_sink.rs	1	//! Regression tests for issue #329: prose about destructive commands written	COMMENT
LOW	tests/cli_e2e.rs	1	#![allow(clippy::needless_raw_string_hashes)]	COMMENT
LOW	tests/cli_e2e.rs	3761	/// dcg resolves its working directory with `std::env::current_dir()` on	COMMENT
LOW	tests/stdin_batch_mode.rs	1	//! End-to-end tests for stdin batch mode (`dcg hook --batch`).	COMMENT
LOW	tests/suggestion_scoring.rs	1	//! Comprehensive tests for Command Rewriting Suggestions scoring and analysis.	COMMENT
LOW	tests/repro_252_vscode_agent_host.rs	1	//! Regression tests for issue #252: the VS Code "Agent Host" batched	COMMENT
LOW	tests/repro_256_launcher_assignment_fp.rs	1	//! Regression tests for issue #256: leading `NAME=value` assignment prefixes	COMMENT
LOW	tests/security_regressions_v2.rs	1	//! Regression tests for security bypasses fixed in Jan 2025.	COMMENT
LOW	tests/repro_255_utf8_escape_panic.rs	1	//! Regression tests for issue #255: escape-sequence scanning panicked on	COMMENT
LOW	tests/regression_corpus.rs	1	//! Regression corpus test harness with full isomorphism verification.	COMMENT
LOW	tests/regression_corpus.rs	21	//! command = "git reset --hard"	COMMENT
LOW	tests/regression_corpus.rs	41	//! - `rule_id` (pack:pattern format)	COMMENT
LOW	tests/config_toggles_e2e.rs	1	#![allow(	COMMENT
LOW	tests/memory_tests.rs	1	//! Memory leak detection tests for DCG	COMMENT
LOW	tests/memory_tests.rs	101	}	COMMENT
LOW	tests/suggestion_self_consistency.rs	1	//! Registry-wide suggestion self-consistency (#316).	COMMENT
LOW	tests/agent_profile_comprehensive.rs	1	//! Comprehensive testing for Agent-Specific Profiles (Epic 9).	COMMENT
LOW	tests/repro_294_unknown_dialect_pack_fanout.rs	1	//! Regression tests for issue #294: under `ShellDialect::Unknown` the regex	COMMENT
608 more matches not shown…

Verbosity Indicators45 hits · 74 pts

Severity	File	Line	Snippet	Context
LOW	tests/codex_hook_protocol.rs	1452	// Step 1: Get a Claude deny with allow-once code	COMMENT
LOW	tests/codex_hook_protocol.rs	1499	// Step 2: Redeem the allow-once code using `dcg allow-once <code> --yes`	COMMENT
LOW	tests/codex_hook_protocol.rs	1523	// Step 3: Retry the same command — should now be allowed	COMMENT
LOW	tests/codex_hook_protocol.rs	2225	// Step 1: Codex deny — creates pending exception in hermetic HOME	COMMENT
LOW	tests/codex_hook_protocol.rs	2265	// Step 2: Redeem the allow-once code	COMMENT
LOW	tests/codex_hook_protocol.rs	2292	// Step 3: Retry under Codex — must now be allowed (exit 0)	COMMENT
LOW⚡	tests/cli_e2e.rs	1189	// Step 2: Use dcg allow-once <code> --yes to activate the exception	COMMENT
LOW⚡	tests/cli_e2e.rs	1198	// Step 3: Re-run the same command, should now be allowed	COMMENT
LOW⚡	tests/cli_e2e.rs	1202	// Step 4: Run it again to verify reusable (not single-use)	COMMENT
LOW⚡	tests/cli_e2e.rs	1287	// Step 1: Block and get code	COMMENT
LOW⚡	tests/cli_e2e.rs	1292	// Step 2: Allow it	COMMENT
LOW⚡	tests/cli_e2e.rs	1296	// Step 3: Same command in same directory is allowed	COMMENT
LOW⚡	tests/cli_e2e.rs	1300	// Step 4: Create a different directory outside the original temp dir	COMMENT
LOW⚡	tests/cli_e2e.rs	1304	// Step 5: Same command in different directory is still blocked	COMMENT
LOW⚡	tests/cli_e2e.rs	1314	// Step 1: Block and get code	COMMENT
LOW⚡	tests/cli_e2e.rs	1319	// Step 2: Allow it with --single-use	COMMENT
LOW⚡	tests/cli_e2e.rs	1328	// Step 3: First run is allowed	COMMENT
LOW⚡	tests/cli_e2e.rs	1332	// Step 4: Second run is blocked again (single-use consumed)	COMMENT
LOW⚡	tests/cli_e2e.rs	1342	// Step 1: Block to create pending entry	COMMENT
LOW⚡	tests/cli_e2e.rs	1347	// Step 2: Check list shows pending	COMMENT
LOW⚡	tests/cli_e2e.rs	1357	// Step 3: Allow it	COMMENT
LOW⚡	tests/cli_e2e.rs	1361	// Step 4: Check list shows active entry	COMMENT
LOW⚡	tests/cli_e2e.rs	1508	// Step 2: Revoke the exception before it's used	COMMENT
LOW⚡	tests/cli_e2e.rs	1517	// Step 3: Command should be blocked again	COMMENT
LOW⚡	tests/cli_e2e.rs	1527	// Step 1: Block and get code	COMMENT
LOW⚡	tests/cli_e2e.rs	1532	// Step 2: Dry-run allow	COMMENT
LOW⚡	tests/cli_e2e.rs	1539	// Step 3: Command should still be blocked (dry-run doesn't write)	COMMENT
LOW	tests/cli_e2e.rs	1178	// Step 1: Run blocked command in hook mode, verify it's denied with a code	COMMENT
LOW	tests/cli_e2e.rs	1423	// Step 2: Try to allow without --force - should fail	COMMENT
LOW	tests/cli_e2e.rs	1497	// Step 1: Block and allow	COMMENT
LOW⚡	src/main.rs	2457	// Step 1: pack_aware_quick_reject should NOT reject this command	COMMENT
LOW⚡	src/main.rs	2463	// Step 2: Normalize command	COMMENT
LOW⚡	src/main.rs	2466	// Step 3: Check against pack registry (should block)	COMMENT
LOW⚡	src/scan.rs	4812	// Step 1: Extract	COMMENT
LOW⚡	src/scan.rs	4819	// Step 2: Evaluate	COMMENT
LOW⚡	src/cli.rs	3804	// Step 7: Check for empty pack	COMMENT
LOW⚡	src/cli.rs	3814	// Step 8: Check for duplicate pattern names	COMMENT
LOW	src/cli.rs	3717	// Step 1: Check if file exists	COMMENT
LOW	src/cli.rs	3728	// Step 2: Read file content	COMMENT
LOW	src/cli.rs	3742	// Step 3: Parse YAML	COMMENT
LOW	src/cli.rs	3761	// Step 4: Validate schema version	COMMENT
LOW	src/cli.rs	3776	// Step 5: Validate ID format	COMMENT
LOW	src/cli.rs	3790	// Step 6: Validate version format (semver)	COMMENT
LOW	src/cli.rs	3837	// Step 9: Validate regex patterns	COMMENT
LOW	src/cli.rs	3859	// Step 10: Check for collision with built-in packs	COMMENT

Structural Annotation Overuse45 hits · 74 pts

Severity	File	Line	Snippet	Context
LOW	tests/codex_hook_protocol.rs	1452	// Step 1: Get a Claude deny with allow-once code	COMMENT
LOW	tests/codex_hook_protocol.rs	1499	// Step 2: Redeem the allow-once code using `dcg allow-once <code> --yes`	COMMENT
LOW	tests/codex_hook_protocol.rs	1523	// Step 3: Retry the same command — should now be allowed	COMMENT
LOW	tests/codex_hook_protocol.rs	2225	// Step 1: Codex deny — creates pending exception in hermetic HOME	COMMENT
LOW	tests/codex_hook_protocol.rs	2265	// Step 2: Redeem the allow-once code	COMMENT
LOW	tests/codex_hook_protocol.rs	2292	// Step 3: Retry under Codex — must now be allowed (exit 0)	COMMENT
LOW⚡	tests/cli_e2e.rs	1189	// Step 2: Use dcg allow-once <code> --yes to activate the exception	COMMENT
LOW⚡	tests/cli_e2e.rs	1198	// Step 3: Re-run the same command, should now be allowed	COMMENT
LOW⚡	tests/cli_e2e.rs	1202	// Step 4: Run it again to verify reusable (not single-use)	COMMENT
LOW⚡	tests/cli_e2e.rs	1287	// Step 1: Block and get code	COMMENT
LOW⚡	tests/cli_e2e.rs	1292	// Step 2: Allow it	COMMENT
LOW⚡	tests/cli_e2e.rs	1296	// Step 3: Same command in same directory is allowed	COMMENT
LOW⚡	tests/cli_e2e.rs	1300	// Step 4: Create a different directory outside the original temp dir	COMMENT
LOW⚡	tests/cli_e2e.rs	1304	// Step 5: Same command in different directory is still blocked	COMMENT
LOW⚡	tests/cli_e2e.rs	1314	// Step 1: Block and get code	COMMENT
LOW⚡	tests/cli_e2e.rs	1319	// Step 2: Allow it with --single-use	COMMENT
LOW⚡	tests/cli_e2e.rs	1328	// Step 3: First run is allowed	COMMENT
LOW⚡	tests/cli_e2e.rs	1332	// Step 4: Second run is blocked again (single-use consumed)	COMMENT
LOW⚡	tests/cli_e2e.rs	1342	// Step 1: Block to create pending entry	COMMENT
LOW⚡	tests/cli_e2e.rs	1347	// Step 2: Check list shows pending	COMMENT
LOW⚡	tests/cli_e2e.rs	1357	// Step 3: Allow it	COMMENT
LOW⚡	tests/cli_e2e.rs	1361	// Step 4: Check list shows active entry	COMMENT
LOW⚡	tests/cli_e2e.rs	1508	// Step 2: Revoke the exception before it's used	COMMENT
LOW⚡	tests/cli_e2e.rs	1517	// Step 3: Command should be blocked again	COMMENT
LOW⚡	tests/cli_e2e.rs	1527	// Step 1: Block and get code	COMMENT
LOW⚡	tests/cli_e2e.rs	1532	// Step 2: Dry-run allow	COMMENT
LOW⚡	tests/cli_e2e.rs	1539	// Step 3: Command should still be blocked (dry-run doesn't write)	COMMENT
LOW	tests/cli_e2e.rs	1178	// Step 1: Run blocked command in hook mode, verify it's denied with a code	COMMENT
LOW	tests/cli_e2e.rs	1423	// Step 2: Try to allow without --force - should fail	COMMENT
LOW	tests/cli_e2e.rs	1497	// Step 1: Block and allow	COMMENT
LOW⚡	src/main.rs	2457	// Step 1: pack_aware_quick_reject should NOT reject this command	COMMENT
LOW⚡	src/main.rs	2463	// Step 2: Normalize command	COMMENT
LOW⚡	src/main.rs	2466	// Step 3: Check against pack registry (should block)	COMMENT
LOW⚡	src/scan.rs	4812	// Step 1: Extract	COMMENT
LOW⚡	src/scan.rs	4819	// Step 2: Evaluate	COMMENT
LOW⚡	src/cli.rs	3804	// Step 7: Check for empty pack	COMMENT
LOW⚡	src/cli.rs	3814	// Step 8: Check for duplicate pattern names	COMMENT
LOW	src/cli.rs	3717	// Step 1: Check if file exists	COMMENT
LOW	src/cli.rs	3728	// Step 2: Read file content	COMMENT
LOW	src/cli.rs	3742	// Step 3: Parse YAML	COMMENT
LOW	src/cli.rs	3761	// Step 4: Validate schema version	COMMENT
LOW	src/cli.rs	3776	// Step 5: Validate ID format	COMMENT
LOW	src/cli.rs	3790	// Step 6: Validate version format (semver)	COMMENT
LOW	src/cli.rs	3837	// Step 9: Validate regex patterns	COMMENT
LOW	src/cli.rs	3859	// Step 10: Check for collision with built-in packs	COMMENT

AI Slop Vocabulary20 hits · 70 pts

Severity	File	Line	Snippet	Context
MEDIUM	tests/install/test_helper.bash	152	# the harness capability before invoking rm, or teardown itself can lose the	COMMENT
MEDIUM	tests/corpus/canonical.toml	1	# Canonical command corpus for golden tests and the shared e2e harness.	COMMENT
MEDIUM	tests/e2e/framework.rs	590	# All features enabled for comprehensive testing	COMMENT
MEDIUM	tests/e2e/run_agent_e2e.sh	4	# This script runs comprehensive end-to-end tests for AI agent integration features.	COMMENT
MEDIUM	tests/e2e/run_install_e2e.sh	339	# Extract and source install.sh functions using the robust method	COMMENT
MEDIUM	tests/e2e/run_history_e2e.sh	4	# This script runs comprehensive end-to-end tests for the DCG history system.	COMMENT
MEDIUM	scripts/e2e_codex.sh	3	# Real Codex CLI end-to-end harness for dcg.	COMMENT
MEDIUM⚡	scripts/e2e_destructive_equivalents.sh	272	# harness contract by exercising the closed bypass family)	COMMENT
MEDIUM	scripts/e2e_destructive_equivalents.sh	5	# Shared end-to-end test harness for the EPIC tracked at	COMMENT
MEDIUM⚡	scripts/e2e_harness_matrix.sh	7	# dcg's value is entirely in what a harness does with its output. A change	COMMENT
MEDIUM⚡	scripts/e2e_harness_matrix.sh	9	# the exit code, or the stream a harness reads changes. The unit tests call	COMMENT
MEDIUM⚡	scripts/e2e_harness_matrix.sh	11	# payload each harness actually sends and asserts on the exact bytes it emits.	COMMENT
MEDIUM⚡	scripts/e2e_harness_matrix.sh	13	# Every case is triple-asserted: the decision field the harness parses, the	COMMENT
MEDIUM⚡	scripts/e2e_harness_matrix.sh	128	# assert_case <harness> <case> <payload> <expect: deny\|allow>	COMMENT
MEDIUM⚡	scripts/e2e_harness_matrix.sh	129	# <jq filter yielding the harness's decision value>	COMMENT
MEDIUM	scripts/templates/test_pack.sh	89	# Create JSON input using robust escaping	COMMENT
MEDIUM	.github/workflows/ci.yml	1401	# samples also support the harness's 95/95 one-sided binomial tolerance	COMMENT
MEDIUM	src/heredoc.rs	817	// Use robust wrapper stripping to handle env flags (e.g. -u, -C) correctly.	COMMENT
MEDIUM	src/main.rs	815	/// (#331): the harness-reported `cwd` when present (else the hook process	COMMENT
MEDIUM	src/packs/platform/github.rs	57	// We use a robust value matcher that handles quoted strings to prevent bypasses.	COMMENT

Self-Referential Comments16 hits · 57 pts

Severity	File	Line	Snippet	Context
MEDIUM	tests/install/test_helper.bash	4	# This file is sourced by Bats test files to provide:	COMMENT
MEDIUM	tests/install/test_helper.bash	31	# Create a modified version of install.sh that can be sourced.	COMMENT
MEDIUM	tests/install/test_helper.bash	522	# Create a test file with known content and checksum	COMMENT
MEDIUM	tests/e2e/run_agent_e2e.sh	107	# Create a minimal config	COMMENT
MEDIUM	tests/e2e/run_history_e2e.sh	128	# Create a minimal config that enables history	COMMENT
MEDIUM⚡	scripts/scan_gitdiff_e2e.sh	288	# Create a safe script first	COMMENT
MEDIUM⚡	scripts/scan_gitdiff_e2e.sh	352	# Create a script	COMMENT
MEDIUM	scripts/scan_gitdiff_e2e.sh	137	# Create a fixture git repo with test files	COMMENT
MEDIUM	scripts/scan_gitdiff_e2e.sh	465	# Create a markdown file with dangerous commands as documentation	COMMENT
MEDIUM	scripts/scan_gitdiff_e2e.sh	601	# Create a file with a destructive command (error level)	COMMENT
MEDIUM⚡	scripts/scan_precommit_e2e.sh	202	# Create a shell script with a destructive command	COMMENT
MEDIUM⚡	scripts/scan_precommit_e2e.sh	289	# Create a markdown file that mentions dangerous commands but doesn't execute them	COMMENT
MEDIUM⚡	scripts/scan_precommit_e2e.sh	358	# Create a safe shell script	COMMENT
MEDIUM⚡	scripts/scan_precommit_e2e.sh	366	# Create a dangerous Dockerfile	COMMENT
MEDIUM⚡	scripts/scan_precommit_e2e.sh	432	# Create a shell script with destructive command (use git reset --hard which is always error)	COMMENT
MEDIUM	scripts/scan_precommit_e2e.sh	128	# Create a fixture git repo with test files	COMMENT

Modern AI Meta-Vocabulary13 hits · 37 pts

Severity	File	Line	Snippet	Context
MEDIUM	README.md	476	# Containers and orchestration	COMMENT
MEDIUM	tests/codex_hook_protocol.rs	378	// Smoke tests — validate the scaffold helpers work before leaf tests depend	COMMENT
MEDIUM	tests/repro_313_powershell_read_only_false_positives.rs	9	//! Windows/guardrails packs enabled as on a native Windows install, and with	COMMENT
MEDIUM	tests/scripts/run_e2e_tests.sh	5	# This script orchestrates all E2E tests for the Destructive Command Guard.	COMMENT
MEDIUM	docs/planning/DGC_IMPROVEMENT_PLAN__GPT.md	44	3. [Design principles](#design-principles-guardrails-for-the-whole-project)	CODE
MEDIUM	docs/planning/DGC_IMPROVEMENT_PLAN__GPT.md	128	## Design principles (guardrails for the whole project)	COMMENT
MEDIUM	docs/planning/DGC_IMPROVEMENT_PLAN__GPT.md	904	### Cross-cutting: Performance + safety guardrails (limits, hardening, benchmarks)	COMMENT
MEDIUM	docs/planning/DCG_IMPROVEMENT_PLAN__OPUS.md	49	9. [Test Infrastructure & Performance Guardrails](#7-test-infrastructure--performance-guardrails)	CODE
MEDIUM	scripts/e2e_codex.sh	5	# This scaffold mirrors scripts/e2e_test.sh logging conventions, but drives the	COMMENT
MEDIUM	src/packs/mod.rs	2386	// `careful_company_running_windows.guardrails:stop-security-service`).	COMMENT
MEDIUM	src/packs/careful_company_running_windows/mod.rs	24	//! \| [`guardrails`] \| Turning off the safety net: AV/firewall/EDR, audit logs, and dcg itself \|	COMMENT
MEDIUM	src/packs/careful_company_running_windows/mod.rs	151	// blocked by `guardrails:dcg-policy-self-weakening`.	COMMENT
MEDIUM	src/packs/careful_company_running_windows/guardrails.rs	4	//! standing between a bad idea and a bad outcome: the guardrails. This sub-pack	COMMENT

Excessive Try-Catch Wrapping27 hits · 26 pts

Severity	File	Line	Snippet	Context
MEDIUM	install.sh	3154	def main():	CODE
LOW	install.sh	3157	except Exception:	CODE
LOW	install.sh	3166	except Exception:	CODE
LOW	install.sh	3187	except Exception:	CODE
LOW	install.sh	3198	except Exception:	CODE
LOW	install.sh	3236	except Exception:	CODE
LOW	install.sh	3292	except Exception:	CODE
LOW	tests/install/test_helper.bash	338	except Exception:	CODE
LOW	tests/install/test_helper.bash	450	except Exception:	CODE
LOW	tests/install/test_helper.bash	505	except Exception:	CODE
LOW	scripts/audit_patterns.py	19	except Exception as e:	CODE
MEDIUM	scripts/audit_patterns.py	20	print(f"Error reading {filepath}: {e}")	CODE
MEDIUM	scripts/audit_patterns.py	15	def scan_file(filepath):	CODE
LOW	scripts/e2e_fleet_install.sh	367	except Exception:	CODE
LOW	scripts/perf_baseline.py	138	except Exception:	CODE
LOW	scripts/perf_baseline.py	424	except Exception as exc: # noqa: BLE001	CODE
LOW	scripts/perf_baseline.py	479	except Exception:	CODE
LOW	scripts/perf_baseline.py	499	except Exception:	CODE
LOW	scripts/perf_baseline.py	835	except Exception as exc: # noqa: BLE001	CODE
LOW	scripts/perf_baseline.py	1656	except Exception as exc: # noqa: BLE001	CODE
LOW	scripts/perf_baseline.py	1704	except Exception as exc: # noqa: BLE001	CODE
LOW	scripts/perf_baseline.py	1779	except Exception as exc: # noqa: BLE001	CODE
LOW	scripts/perf_baseline.py	1868	except Exception as exc: # noqa: BLE001	CODE
LOW	scripts/perf_baseline.py	1879	except Exception as exc: # noqa: BLE001	CODE
LOW	scripts/perf_baseline.py	1886	except Exception as exc: # noqa: BLE001	CODE
LOW	scripts/perf_baseline.py	2101	except Exception as exc: # noqa: BLE001	CODE
LOW	scripts/perf_baseline.py	2116	except Exception as certificate_exc: # noqa: BLE001	CODE

Redundant / Tautological Comments19 hits · 24 pts

Severity	File	Line	Snippet	Context
LOW	uninstall.sh	349	# Check if dcg is configured	COMMENT
LOW	uninstall.sh	452	# Check if dcg is configured	COMMENT
LOW	uninstall.sh	677	# Check if our settings exist	COMMENT
LOW	uninstall.sh	693	# Check if file is now empty (just whitespace)	COMMENT
LOW	install.sh	616	# Check if a specific agent was detected	COMMENT
LOW	install.sh	682	# Check if installed version matches target	COMMENT
LOW	install.sh	1136	# Check if the completions subcommand exists (added in v0.2.11+)	COMMENT
LOW	install.sh	1551	# Check if already at target version (skip download if so, unless --force)	COMMENT
LOW	install.sh	1567	# Check if existing lock is stale (process no longer running)	COMMENT
LOW	install.sh	1876	# Check if the exact current dcg hook is already configured. A stale dcg	COMMENT
LOW	install.sh	2197	# Check if Gemini CLI appears to be installed (has config dir or gemini command exists)	COMMENT
LOW	install.sh	2453	# Check if Aider is installed (command exists)	COMMENT
LOW	install.sh	2470	# Check if git-commit-verify is already set to true	COMMENT
LOW	install.sh	2477	# Check if git-commit-verify exists but is false	COMMENT
LOW	install.sh	2538	# Check if Continue is installed	COMMENT
LOW	install.sh	2600	# Check if Codex is installed	COMMENT
LOW	install.sh	2624	# Check if the exact current dcg hook is already configured. A stale dcg	COMMENT
LOW	tests/e2e/run_agent_e2e.sh	141	# Check if jq is available	COMMENT
LOW	tests/e2e/run_install_e2e.sh	284	# Check if detection works	COMMENT

Example Usage Blocks16 hits · 22 pts

Severity	File	Line	Snippet	Context
LOW	tests/e2e/run_tui_e2e.sh	12	# Usage:	COMMENT
LOW	tests/e2e/run_agent_e2e.sh	8	# Usage:	COMMENT
LOW	tests/e2e/run_install_e2e.sh	11	# Usage:	COMMENT
LOW	tests/e2e/robot_mode_test.sh	11	# Usage:	COMMENT
LOW	tests/e2e/test_doctor_install_uninstall.sh	9	# Usage:	COMMENT
LOW	tests/e2e/run_history_e2e.sh	7	# Usage:	COMMENT
LOW	tests/e2e/run_update_e2e.sh	11	# Usage:	COMMENT
LOW	scripts/check_benchmark_budgets.sh	8	# Usage:	COMMENT
LOW	scripts/scan_gitdiff_e2e.sh	11	# Usage:	COMMENT
LOW	scripts/e2e_fleet_install.sh	22	# Usage:	COMMENT
LOW	scripts/e2e_test.sh	8	# Usage:	COMMENT
LOW	scripts/scan_precommit_e2e.sh	11	# Usage:	COMMENT
LOW	scripts/test-quick.sh	5	# Usage:	COMMENT
LOW	scripts/coverage.sh	5	# Usage:	COMMENT
LOW⚡	scripts/e2e_harness_matrix.sh	17	# Usage:	COMMENT
LOW	scripts/templates/test_pack.sh	8	# Usage:	COMMENT

Hyper-Verbose Identifiers17 hits · 15 pts

Severity	File	Line	Snippet	Context
LOW	uninstall.sh	593	def strip_dcg_platform_fields(entry):	CODE
LOW	install.sh	2975	def strip_dcg_platform_fields(entry):	CODE
LOW	scripts/check_cli_versions.sh	118	def github_repo_from_releases_url(url)	CODE
LOW	scripts/perf_baseline.py	363	def create_toolchain_probe_environment(	CODE
LOW	scripts/perf_baseline.py	503	def extract_embedded_git_describe(version_output: str) -> Optional[str]:	CODE
LOW	scripts/perf_baseline.py	529	def extract_embedded_rustc_toolchain(version_output: str) -> Dict[str, Optional[str]]:	CODE
LOW	scripts/perf_baseline.py	550	def invalid_rustc_identity_fields(identity: Dict[str, Any]) -> Dict[str, str]:	CODE
LOW	scripts/perf_baseline.py	578	def classify_toolchain_binding(	CODE
LOW	scripts/perf_baseline.py	702	def capture_build_input_manifest(repo_root: str) -> Dict[str, Any]:	CODE
LOW	scripts/perf_baseline.py	924	def create_isolated_environment() -> Tuple[Dict[str, str], Dict[str, Any]]:	CODE
LOW	scripts/perf_baseline.py	1057	def max_allowed_tail_exceedances(sample_count: int) -> int:	CODE
LOW	.github/workflows/ci.yml	1209	def reject_non_finite_json_constant(value):	CODE
LOW	.github/workflows/ci.yml	1224	def finite_nonnegative_number(value, label):	CODE
LOW	src/perf.rs	557	.split("def classify_toolchain_binding(")	CODE
LOW	src/cli.rs	13303	export function childOutcomeFromTermination(	CODE
LOW	src/cli.rs	13329	function describeChildCollectionFailure(reason: unknown): string {{	CODE
LOW	src/cli.rs	20865	assert!(source.contains("export function childOutcomeFromTermination("));	CODE

Synthetic Comment Markers2 hits · 15 pts

Severity	File	Line	Snippet	Context
HIGH	docs/planning/DCG_IMPROVEMENT_PLAN__OPUS.md	2031	Document generated by Claude Opus 4.5 on 2026-01-08 (Enhanced Hybrid Version)	COMMENT
HIGH	docs/planning/AGENT_FRIENDLINESS_REPORT.md	205	Generated by Claude Opus 4.5 during bd-dpr execution	COMMENT

Cross-Language Confusion1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	scripts/perf_baseline.py	913	"git init -q . 2>/dev/null; git config user.email t@t.t\n"	CODE

Deep Nesting5 hits · 3 pts

Severity	File	Line	Context
LOW	scripts/audit_patterns.py	42	CODE
LOW	scripts/perf_baseline.py	108	CODE
LOW	scripts/perf_baseline.py	529	CODE
LOW	scripts/perf_baseline.py	578	CODE
LOW	scripts/perf_baseline.py	632	CODE

Unused Imports1 hit · 0 pts

Severity	File	Line	Snippet	Context
LOW	scripts/perf_baseline.py	11		CODE