Distributed AI/LLM for the people. Share compute privately or publicly to power your agents and chat.
This report summarizes scanner evidence for Mesh-LLM/mesh-llm, a Rust project with 3,495 GitHub stars. SynthScan examined 1,267,769 lines of code across 4282 source files, recording 4551 pattern matches distributed across 20 syntactic categories. The legacy adjusted pattern signal is 4.7 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 3735 finding(s).
Are imports declared and package/API names verified? 320 finding(s).
Are wrappers, guards, and repeated structures necessary? 2964 finding(s).
Which changes need focused human review? 4551 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 4551 distinct pattern matches across 20 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | mesh/evals/agentic_replay_engines.py | 341 | def resolve_engine_executable(arm: EngineArm) -> str: | CODE |
| LOW | mesh/evals/agentic_replay_engines.py | 401 | def external_server_environment(hf_home: Path | None) -> dict[str, str]: | CODE |
| LOW | mesh/evals/agentic-replay.py | 505 | def build_trajectory_manifest(args: argparse.Namespace, output: Path) -> dict[str, Any]: | CODE |
| LOW | mesh/evals/agentic-replay.py | 566 | def import_trajectory_manifest( | CODE |
| LOW | mesh/evals/agentic-replay.py | 684 | def validate_measured_cohort_capacity( | CODE |
| LOW | mesh/evals/agentic-replay.py | 700 | def validate_required_frameworks( | CODE |
| LOW | mesh/evals/agentic-replay.py | 1721 | def concurrent_final_checkpoints( | CODE |
| LOW | mesh/evals/test_agentic_replay_l3.py | 113 | def test_complete_evidence_passes(self): | CODE |
| LOW | mesh/evals/test_agentic_replay_l3.py | 117 | def test_duplicate_physical_fill_fails_closed(self): | CODE |
| LOW | …/mesh-llm-ui/e2e/configuration/schema-controls.spec.ts | 323 | async function installConfigurationBackend(page: Page, configOverride: JsonRecord = initialConfig) { | CODE |
| LOW | …/mesh-llm-ui/e2e/configuration/schema-controls.spec.ts | 461 | async function expectNoHorizontalOverflow(page: Page) { | CODE |
| LOW | …s/mesh-llm-ui/e2e/plugins/web-ui-exemplar.live.spec.ts | 55 | function collectBrowserDiagnostics(page: Page): BrowserDiagnostics { | CODE |
| LOW | …s/mesh-llm-ui/e2e/plugins/web-ui-exemplar.live.spec.ts | 69 | function collectBrowserApiResponses(page: Page): BrowserApiResponse[] { | CODE |
| LOW | …esh-llm-ui/e2e/logs/request-inspector-payloads.spec.ts | 13 | async function expectCopyAnchoredAtEndpoint( | CODE |
| LOW | …rates/mesh-llm-ui/e2e/logs/request-inspector-routes.ts | 39 | export async function installRequestInspectorRoutes( | CODE |
| LOW | mesh/crates/mesh-llm-ui/e2e/perf/meshviz-200.spec.ts | 311 | function waitForLivePacketLayerScale(page: Page, baselineTransform: string): Promise<string> { | CODE |
| LOW | mesh/crates/mesh-llm-ui/src/app/layout/shell-adapter.ts | 55 | function buildAvailableJoinCommands(inviteToken: string): TopNavJoinCommand[] { | CODE |
| LOW | mesh/crates/mesh-llm-ui/src/app/layout/shell-adapter.ts | 84 | function buildUnavailableJoinCommands(): TopNavJoinCommand[] { | CODE |
| LOW | …ures/developer/playground/developer-playground-tabs.ts | 20 | export function isDeveloperPlaygroundTabId(value: unknown): value is DeveloperPlaygroundTabId { | CODE |
| LOW | …ures/developer/playground/developer-playground-tabs.ts | 24 | export function parseDeveloperPlaygroundSearch(search: Record<string, unknown>): DeveloperPlaygroundSearch { | CODE |
| LOW | …h-llm-ui/src/features/developer/playground/registry.ts | 30 | export function getPlaygroundAreaDefinition(value: PlaygroundArea) { | CODE |
| LOW | …es/developer/playground/useDeveloperPlaygroundState.ts | 97 | function resolveSeparateContainerIdx(node: ConfigNode, desiredIdx?: number) { | CODE |
| LOW | …es/developer/playground/useDeveloperPlaygroundState.ts | 102 | export function useDeveloperPlaygroundState() { | CODE |
| LOW | …veloper/playground/areas/ConfigurationControlsArea.tsx | 34 | export function ConfigurationControlsArea({ state }: { state: DeveloperPlaygroundState }) { | CODE |
| LOW | …c/features/developer/pages/DeveloperPlaygroundPage.tsx | 39 | export function DeveloperPlaygroundPageContent({ activeTab, onTabChange }: DeveloperPlaygroundPageContentProps) { | CODE |
| LOW | …tures/developer/pages/DeveloperPlaygroundPage.test.tsx | 27 | function renderDeveloperPlaygroundPage() { | CODE |
| LOW | …tures/developer/pages/DeveloperPlaygroundPage.test.tsx | 35 | function DeveloperPlaygroundPageHarness() { | CODE |
| LOW | …ation/components/ConfigurationRuntimeControlBanner.tsx | 51 | export function ConfigurationRuntimeControlBanner({ bootstrap }: { bootstrap: RuntimeControlBootstrapPayload }) { | CODE |
| LOW | …/src/features/configuration/components/DefaultsTab.tsx | 153 | function buildDefaultsPreviewLines( | CODE |
| LOW | …/src/features/configuration/components/DefaultsTab.tsx | 280 | function writeShowAdvancedSettings(showAdvanced: boolean) { | CODE |
| LOW | …ation/components/ConfigurationReadOnlyNodesDivider.tsx | 3 | export function ConfigurationReadOnlyNodesDivider() { | CODE |
| LOW | …ures/configuration/components/configuration-tab-ids.ts | 33 | export function getEnabledConfigurationTabIds({ | CODE |
| LOW | …iguration/components/ConfigurationLiveLoadingGhost.tsx | 9 | export function ConfigurationLiveLoadingGhost() { | CODE |
| LOW | …tures/configuration/components/ConfigurationHeader.tsx | 47 | export function ConfigurationHistoryActions({ | CODE |
| LOW | …s/configuration/components/PluginIntegrationsPanel.tsx | 108 | function pluginRequestsPrimaryPlacement(entry: PluginWebUiEntry): boolean { | CODE |
| LOW | …s/configuration/components/PluginIntegrationsPanel.tsx | 112 | function PluginWebUiPrimaryTabToggle({ entry }: { readonly entry: PluginWebUiEntry }) { | CODE |
| LOW | …ation/components/ConfigurationLoadingGhostSections.tsx | 7 | export function ConfigurationHeaderLoadingGhost() { | CODE |
| LOW | …ation/components/ConfigurationLoadingGhostSections.tsx | 26 | export function ConfigurationTabsLoadingGhost() { | CODE |
| LOW | …ation/components/ConfigurationLoadingGhostSections.tsx | 41 | export function ConfigurationDefaultsNoticeLoadingGhost() { | CODE |
| LOW | …ation/components/ConfigurationLoadingGhostSections.tsx | 65 | function ConfigurationCategoryRailLoadingGhost() { | CODE |
| LOW | …ation/components/ConfigurationLoadingGhostSections.tsx | 91 | function ConfigurationSettingsCardLoadingGhost() { | CODE |
| LOW | …ation/components/ConfigurationLoadingGhostSections.tsx | 125 | function ConfigurationPreviewLoadingGhost() { | CODE |
| LOW | …ation/components/ConfigurationLoadingGhostSections.tsx | 149 | export function ConfigurationDefaultsLoadingGhost() { | CODE |
| LOW | …-ui/src/features/configuration/components/TomlView.tsx | 368 | function validationWarningsFromResponse(response: Awaited<ReturnType<typeof validateRuntimeConfigToml>>) { | CODE |
| LOW⚡ | …tures/configuration/components/runtime-control-copy.ts | 8 | export function formatRuntimeControlDisabledReason(bootstrap: RuntimeControlBootstrapPayload | undefined) { | CODE |
| LOW⚡ | …tures/configuration/components/runtime-control-copy.ts | 13 | export function formatRuntimeControlDisabledMessage(bootstrap: RuntimeControlBootstrapPayload) { | CODE |
| LOW⚡ | …tures/configuration/components/runtime-control-copy.ts | 21 | export function formatRuntimeControlDisabledSaveError(bootstrap: RuntimeControlBootstrapPayload | undefined) { | CODE |
| LOW | …iguration/components/ConfigurationLiveDataBoundary.tsx | 41 | export function ConfigurationLiveDataBoundary({ state, onRetry }: ConfigurationLiveDataBoundaryProps) { | CODE |
| LOW | …onfiguration/components/ConfigurationWakePolicyTab.tsx | 61 | export function ConfigurationWakePolicyTab() { | CODE |
| LOW | …uration/components/settings/schema-field-validation.ts | 341 | function shouldValidateAcceptedValues(setting: ConfigurationDefaultsSetting, value: string): boolean { | CODE |
| LOW | …uration/components/settings/schema-field-validation.ts | 354 | export function validateConfigurationSettingValue( | CODE |
| LOW | …ion/components/settings/SchemaRuntimeChoiceControl.tsx | 4 | export function SchemaRuntimeChoiceControl(props: SchemaSettingControlProps) { | CODE |
| LOW | …figuration/components/settings/schema-control-utils.ts | 49 | function controlConditionValueString( | CODE |
| LOW | …figuration/components/settings/schema-control-utils.ts | 123 | export function numericMetadataForSetting(setting: ConfigurationDefaultsSetting): NumericControlMetadata { | CODE |
| LOW | …n/components/settings/ConfigurationDefaultsControl.tsx | 82 | export function configurationControlDetailBuckets( | CODE |
| LOW | …n/components/settings/ConfigurationDefaultsControl.tsx | 211 | export function ConfigurationDefaultsControl(props: ConfigurationDefaultsControlProps) { | CODE |
| LOW | …tion/components/settings/DisabledControlFrame.test.tsx | 15 | function renderDisabledControlFrame({ | CODE |
| LOW | …features/configuration/layouts/ConfigurationLayout.tsx | 20 | export function ConfigurationDeploymentLayout({ rail, children }: { rail: ReactNode; children: ReactNode }) { | CODE |
| LOW | …features/configuration/layouts/ConfigurationLayout.tsx | 29 | export function ConfigurationPlaceholderPanel({ | CODE |
| LOW⚡ | …eatures/configuration/hooks/useConfigurationHistory.ts | 33 | export function createInitialConfigurationState( | CODE |
| 2403 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | mesh/evals/kv-restart-replay.py | 97 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | mesh/evals/kv-restart-replay.py | 99 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | mesh/evals/kv-restart-replay.py | 162 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | mesh/evals/kv-restart-replay.py | 164 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | mesh/evals/kv-restart-replay.py | 268 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | mesh/evals/kv-restart-replay.py | 270 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | mesh/evals/kv-restart-replay.py | 373 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | mesh/evals/kv-restart-replay.py | 375 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | mesh/evals/kv-restart-replay.py | 445 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | mesh/evals/kv-restart-replay.py | 447 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | mesh/evals/test_injection_framing.py | 34 | # ========================================================================== | COMMENT |
| MEDIUM | mesh/evals/test_injection_framing.py | 36 | # ========================================================================== | COMMENT |
| MEDIUM | mesh/evals/test_injection_framing.py | 70 | # ========================================================================== | COMMENT |
| MEDIUM | mesh/evals/test_injection_framing.py | 72 | # ========================================================================== | COMMENT |
| MEDIUM | mesh/evals/test_injection_framing.py | 96 | # ========================================================================== | COMMENT |
| MEDIUM | mesh/evals/test_injection_framing.py | 98 | # ========================================================================== | COMMENT |
| MEDIUM | mesh/evals/test_injection_framing.py | 143 | # ========================================================================== | COMMENT |
| MEDIUM | mesh/evals/test_injection_framing.py | 145 | # ========================================================================== | COMMENT |
| MEDIUM | mesh/evals/test_injection_framing.py | 220 | # ========================================================================== | COMMENT |
| MEDIUM | mesh/evals/test_injection_framing.py | 222 | # ========================================================================== | COMMENT |
| MEDIUM | mesh/evals/moa-openrouter/record.py | 47 | # ── Cases: agentic tool turns + plain chat ─────────────────────────── | COMMENT |
| MEDIUM | mesh/evals/moa-openrouter/orclient.py | 102 | # ─── Mesh-realistic worker pool ────────────────────────────────────── | COMMENT |
| MEDIUM | mesh/evals/moa-openrouter/probe_tools.py | 145 | # ── A. Agentic fan-out: does every worker propose a tool? ──────── | COMMENT |
| MEDIUM | mesh/evals/moa-openrouter/probe_tools.py | 163 | # ── A2. Aggregate Together-style, tools available ──────────────── | COMMENT |
| MEDIUM | mesh/evals/moa-openrouter/probe_tools.py | 178 | # ── B. Tool-result turn (agentic step 2) ───────────────────────── | COMMENT |
| MEDIUM | mesh/evals/moa-openrouter/probe_tools.py | 203 | # ── C. Plain chat fan-out for comparison (no tools) ────────────── | COMMENT |
| MEDIUM | mesh/evals/moa-openrouter/record_agentic.py | 26 | # ── Agentic tool schemas, close to goose / opencode shapes ─────────── | COMMENT |
| MEDIUM | mesh/evals/moa-openrouter/record_agentic.py | 143 | # ── Scenarios: (id, opening user message, canned tool results) ─────── | COMMENT |
| MEDIUM | mesh/evals/moa-openrouter/make_fixture.py | 33 | # ── Multi-step agentic traces ──────────────────────────────────────── | COMMENT |
| MEDIUM | mesh/evals/moa-openrouter/make_fixture.py | 52 | # ── Single-shot fan-out, incl. truncated responses ─────────────────── | COMMENT |
| MEDIUM | mesh/evals/moa-openrouter/make_fixture.py | 74 | # ── Report what the fixture actually contains ──────────────────────── | COMMENT |
| MEDIUM | mesh/crates/mesh-client/tests/protocol_wire.rs | 24 | // ── ALPN constants ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | mesh/crates/mesh-client/tests/protocol_wire.rs | 41 | // ── ControlProtocol ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | mesh/crates/mesh-client/tests/protocol_wire.rs | 64 | // ── Wire constants sanity ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | mesh/crates/mesh-client/tests/protocol_wire.rs | 126 | // ── Control frame encode / decode roundtrip ────────────────────────────────── | COMMENT |
| MEDIUM | mesh/crates/mesh-client/tests/protocol_wire.rs | 437 | // ── PeerDown / PeerLeaving roundtrip ───────────────────────────────────────── | COMMENT |
| MEDIUM | mesh/crates/mesh-client/tests/protocol_wire.rs | 480 | // ── RouteTable roundtrip ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | mesh/crates/mesh-client/tests/protocol_wire.rs | 513 | // ── v0 legacy compatibility ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | mesh/crates/mesh-client/tests/protocol_wire.rs | 538 | // ── ControlFrameError Display ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | mesh/crates/mesh-client/src/network/router.rs | 7 | // ── Model profiles ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | mesh/crates/mesh-client/src/network/router.rs | 25 | // ── Tier 4: Frontier ──────────────────────────────────────── | COMMENT |
| MEDIUM | mesh/crates/mesh-client/src/network/router.rs | 55 | // ── Tier 3: Strong ────────────────────────────────────────── | COMMENT |
| MEDIUM | mesh/crates/mesh-client/src/network/router.rs | 139 | // ── Tier 2: Good ──────────────────────────────────────────── | COMMENT |
| MEDIUM | mesh/crates/mesh-client/src/network/router.rs | 224 | // ── Tier 1: Small / Draft ─────────────────────────────────── | COMMENT |
| MEDIUM | mesh/crates/mesh-client/src/network/router.rs | 258 | // ── Model selection ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | mesh/crates/mesh-client/src/network/router.rs | 392 | // ── Tests ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | mesh/crates/mesh-llm-cli/src/parser/commands.rs | 671 | // ── Advanced options (hidden from default --help) ───────────── | COMMENT |
| MEDIUM | mesh/crates/mesh-llm-log-store/src/artifacts.rs | 116 | // ─── Path helpers ────────────────────── | COMMENT |
| MEDIUM | mesh/crates/mesh-llm-log-store/src/artifacts.rs | 228 | // ─── ArtifactFileStore implementation ────────────── | COMMENT |
| MEDIUM | mesh/crates/mesh-llm-log-store/src/artifacts.rs | 317 | // ─── Write ────────────── | COMMENT |
| MEDIUM | mesh/crates/mesh-llm-log-store/src/artifacts.rs | 504 | // ─── Read ────────────── | COMMENT |
| MEDIUM | mesh/crates/mesh-llm-log-store/src/artifacts.rs | 563 | // ─── Delete single artifact ────────────── | COMMENT |
| MEDIUM | mesh/crates/mesh-llm-log-store/src/artifacts.rs | 591 | // ─── Delete all artifacts for a request ────────────── | COMMENT |
| MEDIUM | mesh/crates/mesh-llm-log-store/src/artifacts.rs | 625 | // ─── Status check ────────────── | COMMENT |
| MEDIUM | mesh/crates/mesh-llm-log-store/src/artifacts.rs | 666 | // ─── Startup recovery ────────────── | COMMENT |
| MEDIUM | mesh/crates/mesh-llm-log-store/src/artifacts.rs | 921 | // ─── Helpers ────────────── | COMMENT |
| MEDIUM | mesh/crates/mesh-llm-log-store/src/repositories.rs | 33 | // ─── Row types returned by queries ────────────────────── | COMMENT |
| MEDIUM | mesh/crates/mesh-llm-log-store/src/repositories.rs | 310 | // ─── Internal helpers ────────────── | COMMENT |
| MEDIUM⚡ | mesh/crates/mesh-llm-log-store/src/repositories.rs | 732 | // ─── LogStore repository methods ────────────── | COMMENT |
| MEDIUM⚡ | mesh/crates/mesh-llm-log-store/src/repositories.rs | 735 | // ════════════════════════════ | COMMENT |
| 267 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Cargo.toml | 121 | # Roughly 80% of fat-LTO's binary-size and perf benefit at ~30% of the | COMMENT |
| LOW | mesh/evals/run-multi.sh | 1 | #!/bin/bash | COMMENT |
| LOW | mesh/crates/mesh-llm-tui/src/terminal_progress.rs | 1 | //! Inline terminal progress rendering for one-shot commands. | COMMENT |
| LOW | mesh/crates/mesh-llm-tui/src/output/terminal_out.rs | 1 | //! The writer the dashboard paints through. | COMMENT |
| LOW | mesh/crates/mesh-llm-tui/src/output/console_capture.rs | 1 | //! Redirects the process's stdout and stderr into the dashboard while it owns | COMMENT |
| LOW | mesh/crates/mesh-llm-membership/src/types.rs | 1 | //! Core peer-membership state types. | COMMENT |
| LOW | mesh/crates/mesh-llm-membership/src/peer_state.rs | 1 | //! Peer-membership state: the gossip announcement model, the neutral | COMMENT |
| LOW | mesh/crates/mesh-llm-membership/src/peer_state.rs | 201 | /// How long a confirmed-departed peer id stays barred from transitive | COMMENT |
| LOW | mesh/crates/mesh-llm-membership/src/peer_state.rs | 221 | /// - `STREAM_TUNNEL_HTTP (0x04)`: passive SDK inference path for callers that | COMMENT |
| LOW | mesh/crates/mesh-llm-membership/src/peer_state.rs | 341 | pub explicit_model_interests: Vec<String>, | COMMENT |
| LOW | mesh/crates/mesh-llm-membership/src/lib.rs | 1 | //! Mesh peer membership: peer identity, admission state, and discovery helpers. | COMMENT |
| LOW | mesh/crates/mesh-llm-membership/src/selected_path.rs | 1 | //! Dependency-neutral split-stage path selection contracts. | COMMENT |
| LOW | mesh/crates/mesh-llm-membership/src/peer_health.rs | 221 | let mut iter = path_is_ip_flags.into_iter(); | COMMENT |
| LOW | mesh/crates/mesh-llm-membership/src/signed_record.rs | 1 | //! Signed self-records: data a node signs about itself with its endpoint key | COMMENT |
| LOW | mesh/crates/mesh-llm-membership/src/weights_digest.rs | 1 | //! Content identity for a served GGUF: SHA-256 over the file BYTES actually | COMMENT |
| LOW | mesh/crates/mesh-llm-membership/src/weights_digest.rs | 21 | //! has, and remains undetected. | COMMENT |
| LOW | mesh/crates/mesh-llm-membership/src/weights_digest.rs | 461 | } | COMMENT |
| LOW | mesh/crates/mesh-llm-membership/src/announcements.rs | 21 | /// the next exchange. | COMMENT |
| LOW | mesh/crates/mesh-llm-membership/src/announcements.rs | 61 | // Any major > floor (e.g. v1.x.y) is allowed; any major < floor is | COMMENT |
| LOW | mesh/crates/mesh-llm-membership/src/announcements.rs | 81 | /// has one from its first gossip frame. | COMMENT |
| LOW | mesh/crates/mesh-llm-membership/src/state.rs | 21 | /// resume. Transitive re-admission of the id stays blocked for | COMMENT |
| LOW | mesh/crates/mesh-llm-types/src/mesh/mod.rs | 81 | Decision, | COMMENT |
| LOW | mesh/crates/mesh-llm-types/src/mesh/mod.rs | 161 | pub struct AdvertisedMemory { | COMMENT |
| LOW | mesh/crates/mesh-llm-wallet/src/lib.rs | 1 | //! Provider-neutral Lightning wallet abstraction for mesh-llm. | COMMENT |
| LOW | mesh/crates/mesh-llm-wallet/src/provider.rs | 81 | async fn transactions(&self, limit: usize) -> Result<Vec<Transaction>>; | COMMENT |
| LOW | mesh/crates/mesh-llm-wallet/src/provider.rs | 101 | /// providers must treat a repeat as a lookup of the existing payment, not | COMMENT |
| LOW | mesh/crates/mesh-llm-wallet/src/provider.rs | 121 | /// Multiple waiters must be supported. Dropping this future only stops | COMMENT |
| LOW | mesh/crates/mesh-llm-wallet/src/contract.rs | 1 | //! The `wallet.v1` plugin capability contract. | COMMENT |
| LOW | mesh/crates/mesh-llm-wallet/src/contract.rs | 41 | pub const WAIT_FOR_ARRIVAL: &str = "wallet_wait_for_arrival"; | COMMENT |
| LOW | mesh/crates/mesh-llm-wallet/src/contract.rs | 141 | pub transaction: Option<Transaction>, | COMMENT |
| LOW | mesh/crates/mesh-client/src/runtime.rs | 1 | //! Dedicated-thread tokio runtime for mesh-client. | COMMENT |
| LOW | mesh/crates/mesh-client/src/network/rewrite.rs | 1 | //! REGISTER_PEER endpoint rewriting. | COMMENT |
| LOW | mesh/crates/mesh-llm-system/src/autoupdate.rs | 21 | platform_has_release_assets, release_asset_candidates, release_has_any_platform_asset, | COMMENT |
| LOW | mesh/crates/mesh-llm-system/src/process.rs | 381 | || process_comm(pid) | COMMENT |
| LOW | mesh/crates/mesh-llm-system/src/hardware/mod.rs | 121 | impl std::error::Error for PinnedGpuResolverError {} | COMMENT |
| LOW | mesh/crates/mesh-llm-system/src/hardware/mod.rs | 141 | /// Per-GPU VRAM in bytes, same order as gpu_name list. | COMMENT |
| LOW | mesh/crates/mesh-llm-system/src/hardware/mod.rs | 161 | /// collection mechanism, not a claim that the resulting string is a verified | COMMENT |
| LOW | mesh/crates/mesh-llm-system/src/hardware/mod.rs | 181 | /// **Not assigned by new collections.** Kept in the vocabulary so that | COMMENT |
| LOW | mesh/crates/mesh-llm-system/src/hardware/mod.rs | 321 | parse_windows_total_physical_memory(&output) | COMMENT |
| LOW | mesh/crates/mesh-llm-system/src/hardware/mod.rs | 521 | #[cfg(any(feature = "skippy-devices", test))] | COMMENT |
| LOW | …crates/mesh-llm-system/src/autoupdate/release_fetch.rs | 661 | } | COMMENT |
| LOW | mesh/crates/mesh-llm-analytics/src/version_state.rs | 1 | //! The last build version this install reported under. | COMMENT |
| LOW | mesh/crates/mesh-llm-analytics/src/version_state.rs | 21 | //! must produce one `install_updated`, not none and not several. Three things | COMMENT |
| LOW | mesh/crates/mesh-llm-analytics/src/version_state.rs | 121 | /// yields an inert [`PendingVersion`], which reports nothing. The alternative | COMMENT |
| LOW | mesh/crates/mesh-llm-analytics/src/version_state.rs | 181 | /// | COMMENT |
| LOW | mesh/crates/mesh-llm-analytics/src/notice.rs | 1 | //! The first-run disclosure. | COMMENT |
| LOW | mesh/crates/mesh-llm-analytics/src/notice.rs | 41 | let _ = fs::create_dir_all(dir); | COMMENT |
| LOW | mesh/crates/mesh-llm-analytics/src/client.rs | 21 | } | COMMENT |
| LOW | mesh/crates/mesh-llm-analytics/src/properties.rs | 1 | //! Base properties attached to every event. | COMMENT |
| LOW | mesh/crates/mesh-llm-analytics/src/properties.rs | 61 | COMMENT | |
| LOW | mesh/crates/mesh-llm-analytics/src/lib.rs | 1 | #![forbid(unsafe_code)] | COMMENT |
| LOW | mesh/crates/mesh-llm-analytics/src/lib.rs | 61 | /// helper rather than something a person ran. | COMMENT |
| LOW | mesh/crates/mesh-llm-analytics/src/lib.rs | 121 | /// Why reporting is on or off. | COMMENT |
| LOW | mesh/crates/mesh-llm-analytics/src/install_id.rs | 1 | //! The anonymous install identifier. | COMMENT |
| LOW | mesh/crates/mesh-llm-analytics/src/event.rs | 1 | //! Typed analytics events and a closed property vocabulary. | COMMENT |
| LOW | mesh/crates/mesh-llm-analytics/src/event.rs | 61 | /// or over-long. | COMMENT |
| LOW | mesh/crates/mesh-llm-analytics/src/event.rs | 121 | /// extra rules prevent that, and they are why this is a distinct | COMMENT |
| LOW | mesh/crates/mesh-llm-analytics/src/consent.rs | 21 | /// | COMMENT |
| LOW | mesh/crates/mesh-llm-analytics/src/consent.rs | 81 | /// The config loaded and did not mention analytics. | COMMENT |
| LOW | mesh/crates/mesh-llm-cli/src/agent_config.rs | 1 | //! Config-only harness connection options; never launch an agent or a node. | COMMENT |
| 914 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | skippy/scripts/skippy-ocr-asr-oracle.py | 0 | post json with a bounded timeout and require an object response. | STRING |
| HIGH | scripts/ci-openai-workload-smoke.py | 0 | post json with a bounded timeout and require an object response. | STRING |
| HIGH | scripts/ci-workload-monolithic-oracle.py | 0 | post json with a bounded timeout and require an object response. | STRING |
| HIGH | scripts/skippy-llama-parity.py | 0 | compatibility entrypoint; implementation lives with its owning product. | STRING |
| HIGH | scripts/hf-skippy-mtp-certify-job.py | 0 | compatibility entrypoint; implementation lives with its owning product. | STRING |
| HIGH | scripts/promote_layer_package_snapshot.py | 0 | compatibility entrypoint; implementation lives with its owning product. | STRING |
| HIGH | scripts/check-llama-upstream-pin.py | 0 | compatibility entrypoint; implementation lives with its owning product. | STRING |
| HIGH | scripts/select-skippy-family-shards.py | 0 | compatibility entrypoint; implementation lives with its owning product. | STRING |
| HIGH | scripts/skippy-tts-oracle.py | 0 | compatibility entrypoint; implementation lives with its owning product. | STRING |
| HIGH | scripts/workload_fixtures.py | 0 | compatibility entrypoint; implementation lives with its owning product. | STRING |
| HIGH | scripts/skippy-ocr-asr-oracle.py | 0 | compatibility entrypoint; implementation lives with its owning product. | STRING |
| HIGH | scripts/qa-lightning-compatibility.py | 0 | compatibility entrypoint; implementation lives with its owning product. | STRING |
| HIGH | scripts/windows-native-runtime-deps.py | 0 | compatibility entrypoint; implementation lives with its owning product. | STRING |
| HIGH | scripts/verify-workload-oracle-evidence.py | 0 | compatibility entrypoint; implementation lives with its owning product. | STRING |
| HIGH | scripts/hf-skippy-mtp-compose-job.py | 0 | compatibility entrypoint; implementation lives with its owning product. | STRING |
| HIGH | scripts/skippy-system-one-cases.py | 0 | compatibility entrypoint; implementation lives with its owning product. | STRING |
| HIGH | scripts/generate-ocr-oracle-fixture.py | 0 | compatibility entrypoint; implementation lives with its owning product. | STRING |
| HIGH | scripts/generate-skippy-family-patch.py | 0 | compatibility entrypoint; implementation lives with its owning product. | STRING |
| HIGH | scripts/plan-family-battery.py | 0 | compatibility entrypoint; implementation lives with its owning product. | STRING |
| HIGH | scripts/generate-skippy-api-doc.py | 0 | compatibility entrypoint; implementation lives with its owning product. | STRING |
| HIGH | scripts/skippy-rewriter-harness.py | 0 | compatibility entrypoint; implementation lives with its owning product. | STRING |
| HIGH | scripts/generate-split-certified.py | 0 | compatibility entrypoint; implementation lives with its owning product. | STRING |
| HIGH | scripts/ui-distribution.py | 0 | compatibility entrypoint; implementation lives with its owning product. | STRING |
| HIGH | scripts/llama-oracle-source.py | 0 | compatibility entrypoint; implementation lives with its owning product. | STRING |
| HIGH | scripts/select-native-runtime.py | 0 | compatibility entrypoint; implementation lives with its owning product. | STRING |
| HIGH | scripts/write-workload-oracle-evidence.py | 0 | compatibility entrypoint; implementation lives with its owning product. | STRING |
| HIGH | scripts/linux-native-runtime-deps.py | 0 | compatibility entrypoint; implementation lives with its owning product. | STRING |
| HIGH | scripts/compose-product-bundle.py | 0 | compatibility entrypoint; implementation lives with its owning product. | STRING |
| HIGH | scripts/verify-skippy-family-generator-coverage.py | 0 | compatibility entrypoint; implementation lives with its owning product. | STRING |
| HIGH | scripts/verify-swift-xcframework.py | 0 | compatibility entrypoint; implementation lives with its owning product. | STRING |
| HIGH | scripts/tts_oracle_metrics.py | 0 | compatibility entrypoint; implementation lives with its owning product. | STRING |
| HIGH | scripts/hf-skippy-convert-job.py | 0 | compatibility entrypoint; implementation lives with its owning product. | STRING |
| HIGH | scripts/tests/test_verify_workload_oracle_evidence.py | 0 | workspace discovery entrypoint for product-owned tests. | STRING |
| HIGH | scripts/tests/test_skippy_dynamic_link.py | 0 | workspace discovery entrypoint for product-owned tests. | STRING |
| HIGH | scripts/tests/test_skippy_rewriter_harness.py | 0 | workspace discovery entrypoint for product-owned tests. | STRING |
| HIGH | scripts/tests/test_skippy_static_link.py | 0 | workspace discovery entrypoint for product-owned tests. | STRING |
| HIGH | scripts/tests/test_skippy_ocr_asr_oracle.py | 0 | workspace discovery entrypoint for product-owned tests. | STRING |
| HIGH | scripts/tests/test_skippy_system_one_smoke.py | 0 | workspace discovery entrypoint for product-owned tests. | STRING |
| HIGH | …/tests/test_verify_skippy_family_generator_coverage.py | 0 | workspace discovery entrypoint for product-owned tests. | STRING |
| HIGH | scripts/tests/test_windows_native_runtime_deps.py | 0 | workspace discovery entrypoint for product-owned tests. | STRING |
| HIGH | scripts/tests/test_build_development_product.py | 0 | workspace discovery entrypoint for product-owned tests. | STRING |
| HIGH | scripts/tests/test_llama_native_full_replay.py | 0 | workspace discovery entrypoint for product-owned tests. | STRING |
| HIGH | scripts/tests/test_select_skippy_family_shards.py | 0 | workspace discovery entrypoint for product-owned tests. | STRING |
| HIGH | scripts/tests/test_skippy_mixed_prefill_decode_ab.py | 0 | workspace discovery entrypoint for product-owned tests. | STRING |
| HIGH | scripts/tests/test_skippy_agentic_prompt_manifest.py | 0 | workspace discovery entrypoint for product-owned tests. | STRING |
| HIGH | scripts/tests/test_skippy_adaptive_prefill_ab.py | 0 | workspace discovery entrypoint for product-owned tests. | STRING |
| HIGH | scripts/tests/test_llama_review_regressions.py | 0 | workspace discovery entrypoint for product-owned tests. | STRING |
| HIGH | scripts/tests/test_plan_family_battery.py | 0 | workspace discovery entrypoint for product-owned tests. | STRING |
| HIGH | scripts/tests/test_agentic_trajectory_manifest.py | 0 | workspace discovery entrypoint for product-owned tests. | STRING |
| HIGH | scripts/tests/test_package_release.py | 0 | workspace discovery entrypoint for product-owned tests. | STRING |
| HIGH | scripts/tests/test_synthetic_graph_registry.py | 0 | workspace discovery entrypoint for product-owned tests. | STRING |
| HIGH | scripts/tests/test_hf_skippy_convert_job.py | 0 | workspace discovery entrypoint for product-owned tests. | STRING |
| HIGH | scripts/tests/test_build_release.py | 0 | workspace discovery entrypoint for product-owned tests. | STRING |
| HIGH | scripts/tests/test_linux_native_runtime_deps.py | 0 | workspace discovery entrypoint for product-owned tests. | STRING |
| HIGH | scripts/tests/test_hf_skippy_mtp_certify_job.py | 0 | workspace discovery entrypoint for product-owned tests. | STRING |
| HIGH | scripts/tests/test_skippy_workload_certify.py | 0 | workspace discovery entrypoint for product-owned tests. | STRING |
| HIGH | scripts/tests/test_skippy_competitive_benchmark.py | 0 | workspace discovery entrypoint for product-owned tests. | STRING |
| HIGH | scripts/tests/test_generate_skippy_api_doc.py | 0 | workspace discovery entrypoint for product-owned tests. | STRING |
| HIGH | scripts/tests/test_skippy_native_evidence_contract.py | 0 | workspace discovery entrypoint for product-owned tests. | STRING |
| HIGH | scripts/tests/test_skippy_tts_oracle.py | 0 | workspace discovery entrypoint for product-owned tests. | STRING |
| 20 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | skippy/scripts/tests/test_skippy_rewriter_harness.py | 28 | "terminal_predicates": ["il == il_end - 1 && inp_out_ids"], | CODE |
| HIGH⚡ | skippy/scripts/tests/test_skippy_system_one_smoke.py | 546 | self.assertIn("run_full_build || return 1", wrapper) | CODE |
| HIGH⚡ | skippy/scripts/tests/test_llama_review_regressions.py | 59 | self.assertIn("P < 0 || C <= 0", patch) | CODE |
| HIGH⚡ | skippy/scripts/tests/test_llama_review_regressions.py | 61 | self.assertLess(patch.index("P < 0 || C <= 0"), patch.index("sc_cache.assign(sc_size")) | CODE |
| HIGH⚡ | …py/scripts/tests/test_skippy_workload_oracles_build.py | 39 | self.assertIn("run_full_build || return 1", repair) | CODE |
| HIGH | scripts/run-event-benchmark-matrix.py | 1138 | # health data must leave `health` as `None` (JSON null), which the | COMMENT |
| HIGH | scripts/run-event-benchmark-matrix.py | 1152 | # `None` (JSON null) when the caller never ran an interleaved plan | COMMENT |
| HIGH | scripts/compare-event-benchmark-matrix.py | 150 | plan, so this verifies: (a) `executed_order` is present (non-null, | STRING |
| HIGH | scripts/compare-event-benchmark-matrix.py | 573 | """A manifest's `health` block is `None` (JSON null) when no call site | STRING |
| HIGH | scripts/tests/test_release_workflow_artifacts.py | 1007 | "MESH_CUDA_VERSION: ${{ matrix.cuda_version || vars.CUDA_VERSION || '12.9.2' }}", | CODE |
| HIGH⚡ | scripts/tests/test_pr_sibling_cancellation.py | 441 | let outcome = null; | CODE |
| HIGH⚡ | scripts/tests/test_pr_sibling_cancellation.py | 442 | let error = null; | CODE |
| HIGH⚡ | scripts/tests/test_pr_sibling_cancellation.py | 448 | cancelRun: async (runId) => { cancelled.push(runId); return true; }, | CODE |
| HIGH | scripts/tests/test_pr_sibling_cancellation.py | 247 | pages.push([field, page, options.signal instanceof AbortSignal]); | CODE |
| HIGH | scripts/tests/test_pr_sibling_cancellation.py | 308 | cancelRun: async (runId) => { cancelled.push(runId); return true; }, | CODE |
| HIGH | scripts/tests/test_pr_sibling_cancellation.py | 380 | let error = null; | CODE |
| HIGH | scripts/tests/test_pr_sibling_cancellation.py | 398 | sleepFn: async (milliseconds) => { sleeps.push(milliseconds); clock += milliseconds; }, | CODE |
| HIGH | scripts/tests/test_pr_sibling_cancellation.py | 460 | return {error, polls, cancelled, supersededBy: outcome ? outcome.supersededBy : null}; | CODE |
| HIGH | scripts/tests/test_pr_sibling_cancellation.py | 499 | let outcome = null; | CODE |
| HIGH | scripts/tests/test_pr_sibling_cancellation.py | 500 | let error = null; | CODE |
| HIGH | scripts/tests/test_pr_sibling_cancellation.py | 521 | return {error, polls, runIds: outcome ? outcome.runs.map((run) => run.id) : null}; | CODE |
| HIGH | scripts/tests/test_pr_sibling_cancellation.py | 548 | let outcome = null; | CODE |
| HIGH | scripts/tests/test_pr_sibling_cancellation.py | 549 | let error = null; | CODE |
| HIGH | scripts/tests/test_pr_sibling_cancellation.py | 572 | return {error, polls, runCount: outcome ? outcome.runs.length : null}; | CODE |
| HIGH | scripts/tests/test_ci_artifact_actions.py | 1640 | "head_sha: ${{ github.event.pull_request.head.sha || github.sha }}", | CODE |
| HIGH | scripts/tests/test_ci_artifact_actions.py | 3362 | "allow_native_github_cache: ${{ matrix.runtime.backend == 'cpu' && needs.runner_policy.outputs.allow | CODE |
| HIGH⚡ | scripts/tests/test_lld_lib.py | 64 | result = run_with_stub_cc(WORKING_CC, 'lld_links lld && echo USABLE || echo UNUSABLE') | CODE |
| HIGH⚡ | scripts/tests/test_lld_lib.py | 64 | result = run_with_stub_cc(WORKING_CC, 'lld_links lld && echo USABLE || echo UNUSABLE') | CODE |
| HIGH⚡ | scripts/tests/test_lld_lib.py | 68 | result = run_with_stub_cc(BROKEN_CC, 'lld_links lld && echo USABLE || echo UNUSABLE') | CODE |
| HIGH⚡ | scripts/tests/test_lld_lib.py | 68 | result = run_with_stub_cc(BROKEN_CC, 'lld_links lld && echo USABLE || echo UNUSABLE') | CODE |
| HIGH⚡ | scripts/tests/test_lld_lib.py | 73 | result = run_with_stub_cc(BROKEN_CC, 'lld_links lld || printf %s "$LLD_PROBE_OUTPUT"') | CODE |
| HIGH | scripts/tests/test_ci_sdk_producers.py | 453 | "head_sha: ${{ github.event.pull_request.head.sha || github.sha }}", | CODE |
| HIGH⚡ | scripts/tests/test_llama_upstream_canary_contract.py | 87 | # Valid single-target JSON (or null), not an argparse usage error. | COMMENT |
| HIGH⚡ | scripts/tests/test_compare_event_benchmark_matrix.py | 294 | # A DIFFERENT metric on the same pair, both non-null, still pairs. | COMMENT |
| HIGH | scripts/tests/test_compare_event_benchmark_matrix.py | 135 | # an unavailable health block (JSON null), e.g. a real | COMMENT |
| HIGH | scripts/tests/test_ci_sdk_json_consumer.py | 53 | self.assertIn("ref: ${{ inputs.source_sha || github.sha }}", workflow) | CODE |
| HIGH | scripts/tests/test_run_event_benchmark_matrix.py | 716 | that honestly as JSON null, never a silently-zero {}.""" | STRING |
| HIGH | scripts/tests/test_ci_lane_workflows.py | 187 | else "ref: ${{ inputs.source_sha || github.sha }}" | CODE |
| HIGH | scripts/tests/test_ci_lane_workflows.py | 201 | self.assertNotIn("inputs.source_sha || github.sha", windows_runtime) | CODE |
| HIGH | scripts/tests/test_ci_lane_workflows.py | 747 | self.assertIn("inputs.supersession_key || inputs.source_sha", workflow) | CODE |
| HIGH | scripts/tests/test_install_sh.py | 87 | printf 'cuda=%s\\n' "$(asset_name cuda || true)" | CODE |
| HIGH | scripts/tests/test_ci_pr_canary_workflow.py | 198 | "ref: ${{ inputs.policy_source_sha || github.event.repository.default_branch }}", | CODE |
| HIGH | scripts/tests/test_reusable_workflow_runner_trust.py | 153 | "head_sha: ${{ github.event.pull_request.head.sha || github.sha }}", | CODE |
| HIGH | scripts/tests/test_reusable_workflow_runner_trust.py | 199 | "head_sha: ${{ github.event.pull_request.head.sha || github.sha }}", | CODE |
| HIGH⚡ | scripts/tests/test_reusable_workflow_runner_trust.py | 264 | "runs-on: ${{ matrix.runtime.backend == 'cpu' && needs.runner_policy.outputs.runner_cpu || needs | CODE |
| HIGH | scripts/tests/test_llama_upstream_pin_guard.py | 326 | self.assertNotIn("ref: ${{ inputs.source_sha || github.sha }}", summary) | CODE |
| HIGH | …pts/tests/test_ci_runner_selection_and_cache_policy.py | 890 | "allow_native_github_cache: ${{ matrix.runtime.backend == 'cpu' && needs.runner_policy.outputs.allow | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | mesh/evals/agentic_replay_engines.py | 4 | CODE | |
| LOW | mesh/evals/agentic-replay.py | 23 | CODE | |
| LOW | mesh/evals/kv-restart-replay.py | 27 | CODE | |
| LOW | mesh/evals/agentic-trajectory-manifest.py | 4 | CODE | |
| LOW | mesh/evals/agentic_replay_evidence.py | 3 | CODE | |
| LOW | mesh/evals/moa-openrouter/lite_agent.py | 18 | CODE | |
| LOW | mesh/sdk/python/hatch_build.py | 1 | CODE | |
| LOW | mesh/sdk/python/tests/test_client.py | 1 | CODE | |
| LOW | mesh/sdk/python/src/meshllm/client.py | 1 | CODE | |
| LOW | mesh/sdk/python/src/meshllm/__init__.py | 1 | CODE | |
| LOW | mesh/sdk/python/src/meshllm/__init__.py | 3 | CODE | |
| LOW | mesh/sdk/python/src/meshllm/__init__.py | 3 | CODE | |
| LOW | mesh/sdk/python/src/meshllm/__init__.py | 4 | CODE | |
| LOW | mesh/sdk/python/src/meshllm/__init__.py | 4 | CODE | |
| LOW | mesh/sdk/python/src/meshllm/__init__.py | 4 | CODE | |
| LOW | mesh/sdk/python/src/meshllm/__init__.py | 4 | CODE | |
| LOW | mesh/sdk/python/src/meshllm/__init__.py | 4 | CODE | |
| LOW | mesh/sdk/python/src/meshllm/__init__.py | 4 | CODE | |
| LOW | mesh/sdk/python/src/meshllm/__init__.py | 4 | CODE | |
| LOW | mesh/sdk/python/src/meshllm/__init__.py | 4 | CODE | |
| LOW | mesh/sdk/python/src/meshllm/types.py | 1 | CODE | |
| LOW | mesh/sdk/python/src/meshllm/_binding.py | 1 | CODE | |
| LOW | mesh/sdk/python/src/meshllm/_generated/mesh_ffi.py | 16 | CODE | |
| LOW | mesh/sdk/python/src/meshllm/_generated/mesh_ffi.py | 24 | CODE | |
| LOW | mesh/sdk/python/src/meshllm/_generated/mesh_ffi.py | 26 | CODE | |
| LOW | mesh/sdk/python/src/meshllm/_generated/mesh_ffi.py | 27 | CODE | |
| LOW | mesh/scripts/select-native-runtime.py | 2 | CODE | |
| LOW | mesh/scripts/compose-product-bundle.py | 2 | CODE | |
| LOW | mesh/scripts/verify-swift-xcframework.py | 4 | CODE | |
| LOW | mesh/scripts/tests/test_agentic_trajectory_manifest.py | 1 | CODE | |
| LOW | mesh/scripts/tests/test_build_release.py | 1 | CODE | |
| LOW | mesh/scripts/tests/test_build_linux.py | 4 | CODE | |
| LOW | mesh/scripts/tests/test_build_ui.py | 1 | CODE | |
| LOW | mesh/scripts/tests/test_agentic_replay.py | 1 | CODE | |
| LOW | mesh/scripts/tests/test_verify_swift_xcframework.py | 1 | CODE | |
| LOW | skippy/evals/skippy-moe-expert-smoke.py | 15 | CODE | |
| LOW | skippy/evals/skippy-radix-cache-ab.py | 19 | CODE | |
| LOW | skippy/evals/skippy-cache-production-bench.py | 9 | CODE | |
| LOW | skippy/evals/skippy-cache-production-bench.py | 19 | CODE | |
| LOW | skippy/evals/skippy-cache-family-report.py | 4 | CODE | |
| LOW | skippy/evals/skippy-adaptive-prefill-ab.py | 10 | CODE | |
| LOW | skippy/evals/skippy-openai-cache-matrix.py | 8 | CODE | |
| LOW | skippy/evals/skippy-mixed-prefill-decode-ab.py | 4 | CODE | |
| LOW | skippy/evals/skippy-cache-correctness-gate.py | 4 | CODE | |
| LOW | skippy/evals/skippy-granite-tensor-equivalence.py | 9 | CODE | |
| LOW | skippy/evals/skippy-suffix-proposer-bench.py | 9 | CODE | |
| LOW | skippy/evals/skippy-competitive-benchmark.py | 9 | CODE | |
| LOW | skippy/evals/skippy-waiting-prefix-ab.py | 12 | CODE | |
| LOW | skippy/evals/serving_cli.py | 9 | CODE | |
| LOW | skippy/evals/skippy-mtp-scheduler-bench.py | 4 | CODE | |
| LOW | skippy/evals/skippy-scheduler-fixtures.py | 4 | CODE | |
| LOW | skippy/evals/skippy-agentic-prompt-manifest.py | 4 | CODE | |
| LOW | skippy/evals/latency-benchmarking/measure.py | 15 | CODE | |
| LOW | skippy/evals/latency-benchmarking/latency-proxy.py | 34 | CODE | |
| LOW | …ppy-quantize/scripts/compare-reference-quantization.py | 17 | CODE | |
| LOW | skippy/docs/manual-smoke/runtime_smoke.py | 4 | CODE | |
| LOW | skippy/scripts/skippy-llama-parity.py | 10 | CODE | |
| LOW | skippy/scripts/hf-skippy-mtp-certify-job.py | 7 | CODE | |
| LOW | skippy/scripts/promote_layer_package_snapshot.py | 4 | CODE | |
| LOW | skippy/scripts/check-llama-upstream-pin.py | 11 | CODE | |
| 202 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | mesh/evals/kv-restart-replay.py | 52 | # Same discipline as evals/agentic-replay.py: a default-startup benchmark may | COMMENT |
| MEDIUM | mesh/evals/kv-restart-replay.py | 66 | # coding-agent session: a stable scaffold, a growing project brief, and a | COMMENT |
| MEDIUM⚡ | mesh/evals/kv-restart-replay.py | 163 | # Server lifecycle (mirrors evals/agentic-replay.py) | COMMENT |
| MEDIUM⚡ | mesh/evals/kv-restart-replay.py | 269 | # Requests (mirrors evals/agentic-replay.py stream_request) | COMMENT |
| MEDIUM | mesh/evals/virtual_llm_eval.py | 46 | # Technical — small models may hallucinate | COMMENT |
| MEDIUM | mesh/evals/moa-openrouter/README.md | 40 | python3 record_agentic.py # -> agentic.jsonl | CODE |
| MEDIUM | mesh/evals/moa-openrouter/record.py | 47 | # ── Cases: agentic tool turns + plain chat ─────────────────────────── | COMMENT |
| MEDIUM | mesh/evals/moa-openrouter/probe_tools.py | 20 | # Real agentic tool schemas, close to what goose/opencode send. | COMMENT |
| MEDIUM | mesh/evals/moa-openrouter/probe_tools.py | 178 | # ── B. Tool-result turn (agentic step 2) ───────────────────────── | COMMENT |
| MEDIUM | mesh/evals/moa-openrouter/make_fixture.py | 33 | # ── Multi-step agentic traces ──────────────────────────────────────── | COMMENT |
| MEDIUM | mesh/crates/mesh-llm-membership/README.md | 59 | ## Peer health orchestration | COMMENT |
| MEDIUM | mesh/crates/mesh-llm-routing/src/affinity.rs | 66 | /// Explicit cache key or stable prompt/tool scaffold hash. | COMMENT |
| MEDIUM | mesh/crates/mesh-llm-routing/src/affinity.rs | 207 | // otherwise the stable system/tool scaffold identifies work that can be | COMMENT |
| MEDIUM | mesh/crates/mesh-llm-routing/src/affinity.rs | 222 | /// Compute the stable scaffold hash used by prefix affinity. | COMMENT |
| MEDIUM | mesh/crates/mesh-client/src/network/router.rs | 326 | // than agentic. Small models are fallbacks, not first choice. | COMMENT |
| MEDIUM | mesh/crates/mesh-client/src/network/router.rs | 334 | // Speed bonus: higher for chat (speed matters), lower for agentic (quality matters) | COMMENT |
| MEDIUM | mesh/crates/mesh-client/src/network/router.rs | 350 | // For non-agentic requests, spread load across top-scoring models. | COMMENT |
| MEDIUM | mesh/crates/mesh-client/src/network/router.rs | 478 | // Tools schema present = agentic session, always needs_tools | COMMENT |
| MEDIUM | mesh/crates/mesh-client/src/network/router.rs | 856 | // Deep agentic: tier 4 should massively beat tier 2 | COMMENT |
| MEDIUM | mesh/crates/mesh-llm-cli/src/parser/commands.rs | 427 | /// Single-stream and agentic work: speculation carries the split hop. | COMMENT |
| MEDIUM | mesh/crates/mesh-llm-cli/src/parser/commands.rs | 503 | #[arg(long = "mesh-guardrails", value_enum, default_value_t = MeshGuardrailCliMode::Disabled)] | COMMENT |
| MEDIUM | …-store/src/api_acceptance_tests/summary_audit/query.rs | 224 | r#"{"context_version":1,"command_summary":"mesh-llm runtime guardrails --mode metrics --port 41731 --roo | CODE |
| MEDIUM | …crates/mesh-mixture-of-agents/tests/eval_openrouter.rs | 914 | /// best single model in the pool, measured on the same agentic tasks under the | COMMENT |
| MEDIUM | …crates/mesh-mixture-of-agents/tests/sim_real_traces.rs | 13 | //! a list of blank strings on every agentic turn. | COMMENT |
| MEDIUM | …esh-mixture-of-agents/tests/eval_openrouter/matched.rs | 61 | /// The scaffold is identical across arms except the candidate list. | COMMENT |
| MEDIUM | mesh/crates/mesh-mixture-of-agents/src/gateway.rs | 109 | // Recorded agentic traces show how badly that misfires | COMMENT |
| MEDIUM | mesh/crates/mesh-mixture-of-agents/src/gateway.rs | 110 | // (`mesh/evals/moa-openrouter/agentic.jsonl`). "The test suite is failing. Find | COMMENT |
| MEDIUM | …h/crates/mesh-llm-host-runtime/src/runtime_data/mod.rs | 1 | //! Runtime-data snapshot ownership and compatibility guardrails. | COMMENT |
| MEDIUM | mesh/crates/mesh-llm-host-runtime/src/network/router.rs | 392 | // Tools schema present = agentic session, always needs_tools | COMMENT |
| MEDIUM | …st-runtime/src/network/openai/transport_route_model.rs | 1140 | let body = r#"{"error":"prompt exceeds the context window limit"}"#; | CODE |
| MEDIUM | …llm-host-runtime/src/network/openai/response/common.rs | 523 | let body = br#"{"error":{"message":"prompt tokens exceed context window (n_ctx=4096)"}}"#; | CODE |
| MEDIUM | mesh/crates/mesh-llm-host-runtime/src/runtime/local.rs | 96 | /// A Laya decision model: no sessions, KV cache, or guardrails, only | COMMENT |
| MEDIUM | …/mesh-llm-host-runtime/src/runtime/serving_strategy.rs | 36 | /// Single-stream and agentic work: speculation amortises the split hop. | COMMENT |
| MEDIUM | …sh-llm-host-runtime/src/runtime/proxy/tests/routing.rs | 4 | r#"{"error":{"message":"prompt tokens exceed context window (n_ctx=4096)"}}"#; | CODE |
| MEDIUM | …sh-llm-host-runtime/src/runtime/proxy/tests/routing.rs | 125 | r#"{"error":{"message":"prompt tokens exceed context window (n_ctx=4096)"}}"#; | CODE |
| MEDIUM | …sh-llm-host-runtime/src/runtime/proxy/tests/routing.rs | 155 | let first_body = r#"{"error":{"message":"prompt tokens exceed context window (n_ctx=2048)"}}"#; | CODE |
| MEDIUM | …sh-llm-host-runtime/src/runtime/proxy/tests/routing.rs | 156 | let second_body = r#"{"error":{"message":"prompt tokens exceed context window (n_ctx=4096)"}}"#; | CODE |
| MEDIUM | …mesh-llm-host-runtime/src/runtime/proxy/tests/basic.rs | 1496 | // This tests that a streaming agentic request still gets proxied correctly. | COMMENT |
| MEDIUM | …sh-llm-host-runtime/src/api/routes/logs/tests/audit.rs | 316 | Some(r#"{"context_version":1,"command_summary":"mesh-llm runtime guardrails --mode metrics --port 41731 --r | CODE |
| MEDIUM | mesh/docs/CLI.md | 593 | ### `runtime guardrails` | COMMENT |
| MEDIUM⚡ | mesh/docs/USAGE.md | 458 | ctx_size = 8192 # context window size (tokens) | CODE |
| MEDIUM | mesh/docs/USAGE.md | 909 | # The first profile ("deep-context") dedicates a large context window with | COMMENT |
| MEDIUM⚡ | mesh/sdk/python/src/meshllm/_generated/mesh_ffi.py | 552 | # Get the scaffolding contract version by calling the into the dylib | COMMENT |
| MEDIUM | skippy/evals/latency-benchmarking/README.md | 50 | llama.cpp/build/bin/llama-server # OpenAI-compatible server (orchestrates inference) | CODE |
| MEDIUM | skippy/crates/skippy-serving/src/frontend/guardrails.rs | 43 | /// Shared serving policy: automatic chat compaction and operator-selected guardrails. | COMMENT |
| MEDIUM | skippy/crates/skippy-serving/src/frontend/guardrails.rs | 120 | /// Apply common compaction and guardrails with an optional caller-owned observer. | COMMENT |
| MEDIUM | …erving/src/frontend/local_generation/cache_deadline.rs | 47 | // A 60k-token agentic-history prompt (the replay workload that failed at | COMMENT |
| MEDIUM | skippy/crates/skippy-cache/src/config.rs | 440 | /// The shipped agentic policy: 128-token stride, 256-token floor. | COMMENT |
| MEDIUM | skippy/crates/skippy-cache/src/policy/traces.rs | 60 | /// fresh entry — the realistic agentic chat shape. | COMMENT |
| MEDIUM | skippy/crates/skippy-guardrails/README.md | 1 | # skippy-guardrails | COMMENT |
| MEDIUM | …ppy/crates/skippy-coordinator/src/resource_planning.rs | 36 | /// KV budget on depth, and starve the parallel lanes that agentic serving needs | COMMENT |
| MEDIUM | ci/agentic-replay-nightly/README.md | 1 | # Complete-session agentic replay | COMMENT |
| MEDIUM | …/agentic-replay-nightly/examples/REPAIR_PR_RESOLVED.md | 1 | # ci: fix decode regression in shared-prefix cache admission (agentic replay nightly — fix verified) | COMMENT |
| MEDIUM | ci/agentic-replay-nightly/examples/CARD.md | 12 | `c28f0e2cc`. Full history: [meshllm/agentic-replay-nightly](https://huggingface.co/datasets/meshllm/agentic-replay-night | CODE |
| MEDIUM | …c-replay-nightly/examples/REPAIR_PR_NEEDS_ATTENTION.md | 1 | # ci: agentic replay nightly regression — run 4191 — NEEDS ATTENTION | COMMENT |
| MEDIUM | scripts/agentic-replay-repair.sh | 2 | # Regression repair loop for the agentic-replay nightly. | COMMENT |
| MEDIUM | .github/workflows/fly-deploy-console.yml | 5 | # runner only orchestrates the deploy. | COMMENT |
| MEDIUM | .github/actions/compute-changes/derive-outputs.sh | 345 | # orchestration files like Justfile out of this path unless changed | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | mesh/evals/agentic_replay_engines.py | 214 | CODE | |
| LOW | mesh/evals/agentic-replay.py | 603 | CODE | |
| LOW | mesh/evals/agentic-replay.py | 764 | CODE | |
| LOW | mesh/evals/agentic-replay.py | 911 | CODE | |
| LOW | mesh/evals/agentic-replay.py | 1868 | CODE | |
| LOW | mesh/evals/agentic-replay.py | 3307 | CODE | |
| LOW | mesh/evals/kv-restart-replay.py | 183 | CODE | |
| LOW | mesh/evals/kv-restart-replay.py | 273 | CODE | |
| LOW | mesh/evals/test_injection_framing.py | 158 | CODE | |
| LOW | mesh/evals/moa-openrouter/analyze_ablation.py | 55 | CODE | |
| LOW | mesh/evals/moa-openrouter/analyze_ablation.py | 84 | CODE | |
| LOW | mesh/evals/moa-openrouter/analyze_ablation.py | 141 | CODE | |
| LOW | mesh/evals/moa-openrouter/record_agentic.py | 236 | CODE | |
| LOW | mesh/evals/moa-openrouter/lite_agent.py | 110 | CODE | |
| LOW | mesh/sdk/python/src/meshllm/client.py | 107 | CODE | |
| LOW | mesh/sdk/python/src/meshllm/_generated/mesh_ffi.py | 343 | CODE | |
| LOW | mesh/scripts/select-native-runtime.py | 9 | CODE | |
| LOW | mesh/scripts/tests/test_compose_product_bundle.py | 17 | CODE | |
| LOW | mesh/scripts/tests/test_compose_product_bundle.py | 56 | CODE | |
| LOW | mesh/scripts/tests/test_compose_product_bundle.py | 69 | CODE | |
| LOW | skippy/evals/skippy-radix-cache-ab.py | 185 | CODE | |
| LOW | skippy/evals/skippy-radix-cache-ab.py | 441 | CODE | |
| LOW | skippy/evals/skippy-radix-cache-ab.py | 680 | CODE | |
| LOW | skippy/evals/skippy-radix-cache-ab.py | 705 | CODE | |
| LOW | skippy/evals/skippy-radix-cache-ab.py | 739 | CODE | |
| LOW | skippy/evals/skippy-radix-cache-ab.py | 926 | CODE | |
| LOW | skippy/evals/skippy-radix-cache-ab.py | 195 | CODE | |
| LOW | skippy/evals/skippy-cache-production-bench.py | 470 | CODE | |
| LOW | skippy/evals/skippy-cache-production-bench.py | 579 | CODE | |
| LOW | skippy/evals/skippy-cache-production-bench.py | 1227 | CODE | |
| LOW | skippy/evals/skippy-cache-production-bench.py | 485 | CODE | |
| LOW | skippy/evals/skippy-cache-production-bench.py | 596 | CODE | |
| LOW | skippy/evals/skippy-adaptive-prefill-ab.py | 62 | CODE | |
| LOW | skippy/evals/skippy-adaptive-prefill-ab.py | 219 | CODE | |
| LOW | skippy/evals/skippy-mixed-prefill-decode-ab.py | 78 | CODE | |
| LOW | skippy/evals/skippy-granite-tensor-equivalence.py | 92 | CODE | |
| LOW | skippy/evals/skippy-suffix-proposer-bench.py | 292 | CODE | |
| LOW | skippy/evals/skippy-competitive-benchmark.py | 245 | CODE | |
| LOW | skippy/evals/skippy-competitive-benchmark.py | 844 | CODE | |
| LOW | skippy/evals/skippy-competitive-benchmark.py | 1189 | CODE | |
| LOW | skippy/evals/skippy-competitive-benchmark.py | 1447 | CODE | |
| LOW | skippy/evals/skippy-competitive-benchmark.py | 1566 | CODE | |
| LOW | skippy/evals/skippy-competitive-benchmark.py | 1719 | CODE | |
| LOW | skippy/evals/skippy-competitive-benchmark.py | 1901 | CODE | |
| LOW | skippy/evals/skippy-competitive-benchmark.py | 1982 | CODE | |
| LOW | skippy/evals/skippy-competitive-benchmark.py | 2095 | CODE | |
| LOW | skippy/evals/skippy-competitive-benchmark.py | 2519 | CODE | |
| LOW | skippy/evals/skippy-waiting-prefix-ab.py | 180 | CODE | |
| LOW | skippy/evals/skippy-waiting-prefix-ab.py | 383 | CODE | |
| LOW | skippy/evals/skippy-waiting-prefix-ab.py | 558 | CODE | |
| LOW | skippy/evals/skippy-waiting-prefix-ab.py | 190 | CODE | |
| LOW | skippy/evals/skippy-waiting-prefix-ab.py | 601 | CODE | |
| LOW | skippy/evals/skippy-mtp-scheduler-bench.py | 100 | CODE | |
| LOW | skippy/evals/skippy-scheduler-fixtures.py | 69 | CODE | |
| LOW | skippy/evals/latency-benchmarking/measure.py | 19 | CODE | |
| LOW | skippy/evals/latency-benchmarking/latency-proxy.py | 92 | CODE | |
| LOW | skippy/docs/manual-smoke/runtime_smoke.py | 24 | CODE | |
| LOW | skippy/docs/manual-smoke/check_coverage.py | 23 | CODE | |
| LOW | skippy/scripts/skippy-llama-parity.py | 323 | CODE | |
| LOW | skippy/scripts/skippy-llama-parity.py | 653 | CODE | |
| 103 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | mesh/evals/agentic-replay.py | 1037 | except Exception as error: # preserve request-level failures in the artifact | CODE |
| LOW | mesh/evals/agentic-replay.py | 1857 | except Exception as error: | CODE |
| LOW | mesh/evals/virtual_llm_eval.py | 74 | except Exception as e: | CODE |
| LOW | mesh/evals/test_injection_framing.py | 188 | except Exception: | CODE |
| LOW | mesh/evals/moa-openrouter/orclient.py | 87 | except Exception as e: # timeout, connection reset, bad JSON | CODE |
| LOW | mesh/evals/moa-openrouter/lite_agent.py | 131 | except Exception as e: # noqa: BLE001 | CODE |
| MEDIUM | mesh/sdk/python/src/meshllm/_generated/mesh_ffi.py | 365 | def _uniffi_trait_interface_call(call_status, make_call, write_return_value): | CODE |
| MEDIUM | mesh/sdk/python/src/meshllm/_generated/mesh_ffi.py | 372 | def _uniffi_trait_interface_call_with_error(call_status, make_call, write_return | CODE |
| MEDIUM | mesh/sdk/python/src/meshllm/_generated/mesh_ffi.py | 409 | def get(self, handle): | CODE |
| MEDIUM | mesh/sdk/python/src/meshllm/_generated/mesh_ffi.py | 457 | def check_lower(cls, value): | CODE |
| LOW⚡ | mesh/sdk/python/src/meshllm/_generated/mesh_ffi.py | 368 | except Exception as e: | CODE |
| LOW⚡ | mesh/sdk/python/src/meshllm/_generated/mesh_ffi.py | 379 | except Exception as e: | CODE |
| LOW | mesh/sdk/python/src/meshllm/_generated/mesh_ffi.py | 448 | except Exception: | CODE |
| LOW | mesh/sdk/python/src/meshllm/_generated/mesh_ffi.py | 460 | except Exception: | CODE |
| LOW | mesh/scripts/certify-split-startup-recovery.sh | 198 | except Exception: | CODE |
| LOW | mesh/scripts/certify-split-startup-recovery.sh | 225 | except Exception: | CODE |
| LOW | mesh/scripts/certify-split-startup-recovery.sh | 286 | except Exception: | CODE |
| LOW | mesh/scripts/certify-split-startup-recovery.sh | 290 | except Exception: | CODE |
| LOW | mesh/scripts/certify-split-startup-recovery.sh | 338 | except Exception: | CODE |
| LOW | skippy/evals/skippy-radix-cache-ab.py | 275 | except Exception as error: # noqa: BLE001 - retain errors in the artifact. | CODE |
| LOW | skippy/evals/skippy-cache-production-bench.py | 289 | except Exception as exc: # noqa: BLE001 - readiness loop keeps last error. | CODE |
| LOW | skippy/evals/skippy-cache-production-bench.py | 560 | except Exception as exc: | CODE |
| LOW | skippy/evals/skippy-cache-production-bench.py | 681 | except Exception as exc: # noqa: BLE001 - retain per-request failures in the report. | CODE |
| LOW | skippy/evals/skippy-cache-production-bench.py | 1071 | except Exception as exc: # noqa: BLE001 - benchmark continues across families. | CODE |
| LOW | skippy/evals/skippy-cache-production-bench.py | 1100 | except Exception as exc: # noqa: BLE001 - benchmark continues across families. | CODE |
| LOW | skippy/evals/skippy-adaptive-prefill-ab.py | 287 | except Exception as error: # noqa: BLE001 - retain the error in the artifact. | CODE |
| LOW | skippy/evals/skippy-mixed-prefill-decode-ab.py | 335 | except Exception as error: # noqa: BLE001 - retain failures in the artifact. | CODE |
| LOW | skippy/evals/skippy-competitive-benchmark.py | 1264 | except Exception as exc: # noqa: BLE001 - preserve the failure in the artifact. | CODE |
| LOW | skippy/evals/skippy-waiting-prefix-ab.py | 281 | except Exception as error: # noqa: BLE001 - errors belong in the artifact. | CODE |
| LOW | skippy/evals/latency-benchmarking/latency-proxy.py | 99 | except Exception as e: | CODE |
| LOW | skippy/evals/latency-benchmarking/latency-proxy.py | 151 | except Exception as e: | CODE |
| LOW | …ppy-quantize/scripts/compare-reference-quantization.py | 337 | except Exception as exc: # pragma: no cover - dependency error path | CODE |
| LOW | …ppy-quantize/scripts/compare-reference-quantization.py | 416 | except Exception as exc: # pragma: no cover - dependency error path | CODE |
| LOW | …/crates/skippy-bench/src/evals/adapters/speed_bench.rs | 61 | except Exception: | CODE |
| LOW | …/crates/skippy-bench/src/evals/adapters/speed_bench.rs | 71 | except Exception: | CODE |
| MEDIUM | …/crates/skippy-bench/src/evals/adapters/speed_bench.rs | 45 | def request_sha256(response): | CODE |
| MEDIUM | …/crates/skippy-bench/src/evals/adapters/speed_bench.rs | 64 | def response_sha256(response): | CODE |
| LOW | …es/skippy-model-package/src/scripts/split-model-job.sh | 326 | except Exception as err: | CODE |
| LOW | …es/skippy-model-package/src/scripts/split-model-job.sh | 638 | except Exception: | CODE |
| LOW | …es/skippy-model-package/src/scripts/split-model-job.sh | 825 | except Exception as error: | CODE |
| MEDIUM | …es/skippy-model-package/src/scripts/split-model-job.sh | 812 | def resolve_upstream_license(): | CODE |
| LOW | skippy/docs/manual-smoke/runtime_smoke.py | 74 | except Exception: | CODE |
| LOW | skippy/scripts/skippy-llama-parity.py | 371 | except Exception as exc: # keep inventory useful for bad/corrupt downloads | CODE |
| LOW | skippy/scripts/hf-skippy-mtp-certify-job.py | 147 | except Exception: | CODE |
| LOW | skippy/scripts/promote_layer_package_snapshot.py | 66 | except Exception as error: # Promotion is complete; branch cleanup is best effort. | CODE |
| LOW | skippy/scripts/check-llama-upstream-pin.py | 167 | except Exception: | CODE |
| LOW | skippy/scripts/generate-skippy-family-patch.py | 251 | except Exception: | CODE |
| LOW | scripts/ci-opencode-smoke.sh | 112 | except Exception: | CODE |
| LOW | scripts/ci-two-node-client-serving-smoke.sh | 121 | except Exception: | CODE |
| LOW | scripts/ci-two-node-client-serving-smoke.sh | 128 | except Exception: | CODE |
| LOW | scripts/qa-nightly-stability.py | 382 | except Exception as exc: | CODE |
| LOW | scripts/qa-nightly-stability.py | 408 | except Exception as exc: | CODE |
| LOW | scripts/qa-nightly-stability.py | 454 | except Exception as exc: | CODE |
| LOW | scripts/qa-agent-tool-call-reliability.py | 337 | except Exception as exc: | CODE |
| LOW | scripts/qa-agent-tool-call-reliability.py | 357 | except Exception as exc: | CODE |
| LOW | scripts/qa-agent-tool-call-reliability.py | 379 | except Exception as exc: | CODE |
| LOW | scripts/qa-agent-tool-call-reliability.py | 400 | except Exception as exc: | CODE |
| LOW | scripts/ci-sdk-fixture.sh | 115 | except Exception: | CODE |
| LOW | scripts/ci-sdk-fixture.sh | 124 | except Exception: | CODE |
| LOW | scripts/ci-laya-smoke.py | 177 | except Exception as error: # Preserve the server log for CI diagnosis. | CODE |
| 11 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | mesh/evals/kv-restart-replay.py | 399 | except (OSError, subprocess.CalledProcessError): | CODE |
| HIGH | mesh/evals/kv-restart-replay.py | 419 | except OSError: | CODE |
| HIGH | mesh/scripts/qa-lightning-compatibility.py | 98 | except (OSError, ValueError): | CODE |
| HIGH | skippy/evals/skippy-competitive-benchmark.py | 712 | except OSError: | CODE |
| HIGH | skippy/evals/latency-benchmarking/measure.py | 60 | except json.JSONDecodeError: | CODE |
| HIGH | skippy/evals/latency-benchmarking/latency-proxy.py | 149 | except ConnectionError: | CODE |
| HIGH | skippy/docs/manual-smoke/runtime_smoke.py | 121 | except FileNotFoundError: | CODE |
| HIGH | skippy/docs/manual-smoke/runtime_smoke.py | 74 | except Exception: | CODE |
| HIGH | scripts/run-event-benchmark-matrix.py | 599 | except (urllib.error.URLError, OSError, TimeoutError): | CODE |
| HIGH | scripts/ci-laya-smoke.py | 52 | except (OSError, ValueError, urllib.error.URLError): | CODE |
| HIGH | scripts/reconcile-two-node-split-evidence.py | 406 | except FileNotFoundError: | CODE |
| HIGH | scripts/tests/test_llama_upstream_canary_contract.py | 518 | except ProcessLookupError: | CODE |
| HIGH | scripts/tests/test_ci_two_node_split_smoke.py | 116 | except (BrokenPipeError, ConnectionResetError): | CODE |
| HIGH | scripts/lib/canary_family_memory.py | 154 | except ProcessLookupError: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | mesh/evals/agentic-replay.py | 1126 | # Captured manifests retain the exact harness schemas because those | COMMENT |
| MEDIUM | mesh/evals/moa-openrouter/probe_tools.py | 61 | TOGETHER_AGG_PROMPT = """You have been provided with a set of responses from various open-source models to the latest us | CODE |
| MEDIUM | …tes/mesh-llm-host-runtime/src/runtime_events/driver.rs | 525 | /// assertions below robust to that noise without requiring every | COMMENT |
| MEDIUM | …st-runtime/src/logging/service/persistence_delivery.rs | 412 | // Carrying the canonical summary makes the artifact FK robust | COMMENT |
| MEDIUM | mesh/crates/mesh-llm-ui/package-lock.json | 10114 | "resolved": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.3.tgz", | CODE |
| MEDIUM | mesh/website/package-lock.json | 3280 | "resolved": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.3.tgz", | CODE |
| LOW | mesh/sdk/python/src/meshllm/_generated/mesh_ffi.py | 2003 | # and just create a new instance with the required handle. | COMMENT |
| MEDIUM | mesh/scripts/certify-split-startup-recovery.sh | 7 | # The harness starts one seed plus worker processes on localhost, waits for a | COMMENT |
| MEDIUM | skippy/crates/skippy-topology/src/phase_placement.rs | 116 | // to stay robust to degenerate inputs. | COMMENT |
| MEDIUM | skippy/crates/skippy-cache/src/config.rs | 183 | /// the single highest-leverage policy decision in the cache. | COMMENT |
| MEDIUM | skippy/scripts/package-native-runtime.sh | 377 | # runtime producers do not have a robust import-library path for that | COMMENT |
| MEDIUM | skippy/scripts/skippy-family-battery.sh | 785 | # the env-gated real-model harness in | COMMENT |
| MEDIUM | scripts/llama-canary-log-command.sh | 5 | # trusted harness exports this directory inside its uploaded evidence tree. | COMMENT |
| MEDIUM | scripts/llama-canary-agent-repair.sh | 4 | # Developer-style llama.cpp canary harness for changed upstream pins. | COMMENT |
| MEDIUM | scripts/llama-canary-agent-repair.sh | 13 | # parent under Rosetta. Re-enter the complete harness as arm64 before it | COMMENT |
| MEDIUM | scripts/ci-two-node-split-smoke.sh | 74 | # inputs instead: this harness creates a fresh, unlisted package identity only | COMMENT |
| MEDIUM | scripts/llama-canary-publish.sh | 5 | # harness has independently certified its exact tree. This script is invoked | COMMENT |
| MEDIUM | .github/workflows/agentic-replay-nightly.yml | 128 | # the canonical harness pin must fail in seconds, not after hours | COMMENT |
| MEDIUM | .github/workflows/website-pages.yml | 49 | # pre-merge harness coverage at all (push-to-main, path-filtered) -- | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | skippy/evals/latency-benchmarking/README.md | 18 | ## Step 1: Clone and Build | COMMENT |
| LOW | skippy/evals/latency-benchmarking/README.md | 53 | ## Step 2: Get a Model | COMMENT |
| LOW | skippy/evals/latency-benchmarking/README.md | 85 | ## Step 3: Start RPC Servers | COMMENT |
| LOW | skippy/evals/latency-benchmarking/README.md | 113 | ## Step 4: Start llama-server | COMMENT |
| LOW | skippy/evals/latency-benchmarking/README.md | 136 | ## Step 5: Test | COMMENT |
| LOW | skippy/crates/skippy-model-hf/tests/hf_download.rs | 356 | // Step 1: Resolve artifact reference. | COMMENT |
| LOW | skippy/crates/skippy-model-hf/tests/hf_download.rs | 367 | // Step 2: Download all artifact files. | COMMENT |
| LOW | skippy/crates/skippy-model-hf/tests/hf_download.rs | 389 | // Step 3: Verify identity for the downloaded path. | COMMENT |
| LOW⚡ | skippy/crates/skippy-hf-hub/src/repository/upload.rs | 426 | // Step 1: Gather file info (path, size, sample, sha) for preupload check. | COMMENT |
| LOW⚡ | skippy/crates/skippy-hf-hub/src/repository/upload.rs | 434 | // Step 2: Call preupload endpoint to classify files as "lfs" or "regular" | COMMENT |
| LOW | skippy/crates/skippy-hf-hub/src/repository/upload.rs | 452 | // Step 3: Identify LFS files (empty files are always regular) | COMMENT |
| LOW | skippy/crates/skippy-hf-hub/src/repository/upload.rs | 538 | // Step 4: SHA-256 was already computed alongside the preupload sample in | COMMENT |
| LOW | skippy/crates/skippy-hf-hub/src/repository/upload.rs | 558 | // Step 5: Call LFS batch endpoint to negotiate transfer method | COMMENT |
| LOW | skippy/crates/skippy-hf-hub/src/repository/upload.rs | 571 | // Step 6: If server chose xet, upload via xet | COMMENT |
| LOW | …ippy/docs/design/GLM_NATIVE_MTP_SKIPPY_ARCHITECTURE.md | 96 | ## Step 1: Native MTP n=1 Correctness | COMMENT |
| LOW | …ippy/docs/design/GLM_NATIVE_MTP_SKIPPY_ARCHITECTURE.md | 168 | ## Step 2: Batched Verification | COMMENT |
| LOW | scripts/affected-crates.sh | 230 | # Step 1: Get crate → manifest_path mapping (no deps) | COMMENT |
| LOW | scripts/affected-crates.sh | 244 | # Step 2: Build the reverse-dependency graph from the same no-deps metadata. | COMMENT |
| LOW | scripts/affected-crates.sh | 257 | # Step 3: Match changed files to owning crates | COMMENT |
| LOW | scripts/affected-crates.sh | 300 | # Step 4: BFS from test_crates through reverse-dep graph | COMMENT |
| LOW | scripts/affected-crates.sh | 325 | # Step 5: Emit JSON output using jq | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | skippy/crates/skippy-model-hf/tests/hf_download.rs | 356 | // Step 1: Resolve artifact reference. | COMMENT |
| LOW | skippy/crates/skippy-model-hf/tests/hf_download.rs | 367 | // Step 2: Download all artifact files. | COMMENT |
| LOW | skippy/crates/skippy-model-hf/tests/hf_download.rs | 389 | // Step 3: Verify identity for the downloaded path. | COMMENT |
| LOW⚡ | skippy/crates/skippy-hf-hub/src/repository/upload.rs | 426 | // Step 1: Gather file info (path, size, sample, sha) for preupload check. | COMMENT |
| LOW⚡ | skippy/crates/skippy-hf-hub/src/repository/upload.rs | 434 | // Step 2: Call preupload endpoint to classify files as "lfs" or "regular" | COMMENT |
| LOW | skippy/crates/skippy-hf-hub/src/repository/upload.rs | 452 | // Step 3: Identify LFS files (empty files are always regular) | COMMENT |
| LOW | skippy/crates/skippy-hf-hub/src/repository/upload.rs | 538 | // Step 4: SHA-256 was already computed alongside the preupload sample in | COMMENT |
| LOW | skippy/crates/skippy-hf-hub/src/repository/upload.rs | 558 | // Step 5: Call LFS batch endpoint to negotiate transfer method | COMMENT |
| LOW | skippy/crates/skippy-hf-hub/src/repository/upload.rs | 571 | // Step 6: If server chose xet, upload via xet | COMMENT |
| LOW | scripts/affected-crates.sh | 230 | # Step 1: Get crate → manifest_path mapping (no deps) | COMMENT |
| LOW | scripts/affected-crates.sh | 244 | # Step 2: Build the reverse-dependency graph from the same no-deps metadata. | COMMENT |
| LOW | scripts/affected-crates.sh | 257 | # Step 3: Match changed files to owning crates | COMMENT |
| LOW | scripts/affected-crates.sh | 300 | # Step 4: BFS from test_crates through reverse-dep graph | COMMENT |
| LOW | scripts/affected-crates.sh | 325 | # Step 5: Emit JSON output using jq | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | mesh/evals/run.sh | 4 | # Usage: | COMMENT |
| LOW | mesh/evals/run-multi.sh | 4 | # Usage: | COMMENT |
| LOW | mesh/crates/mesh-llm/tests/test_reasoning_compat.sh | 12 | # Usage: | COMMENT |
| LOW | mesh/sdk/kotlin/scripts/verify-alignment.sh | 5 | # Usage: | COMMENT |
| LOW | mesh/scripts/certify-split-startup-recovery.sh | 4 | # Usage: | COMMENT |
| LOW | skippy/evals/latency-benchmarking/demo.sh | 7 | # Usage: | COMMENT |
| LOW | skippy/scripts/materialize-competitive-inputs.sh | 30 | # Usage: | COMMENT |
| LOW | skippy/scripts/skippy-family-battery.sh | 23 | # Usage: | COMMENT |
| LOW | scripts/rc-release-smoke.sh | 4 | # Usage: | COMMENT |
| LOW | scripts/affected-crates.sh | 5 | # Usage: | COMMENT |
| LOW | scripts/ci-hf-download-smoke.sh | 8 | # Usage: | COMMENT |
| LOW | scripts/ci-hf-xet-portability-smoke.sh | 9 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | mesh/sdk/python/src/meshllm/_generated/mesh_ffi.py | 334 | # This function is used for rust calls that return Result<> and therefore can set the CALL_ERROR status code. | COMMENT |
| MEDIUM | skippy/crates/skippy-hf-hub/src/client.rs | 89 | /// # Creating a client | COMMENT |
| MEDIUM | skippy/crates/skippy-hf-hub/src/lib.rs | 42 | //! ## Creating a client | COMMENT |
| MEDIUM | scripts/ci-swift-sdk-smoke.sh | 22 | # Creating the empty directory keeps that legacy cleanup hook from turning a | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …mesh-llm-host-runtime/src/plugin/exchange_lifecycle.rs | 793 | let mut registry = self.manager.inner.exchange_observations.1.lock().unwrap(); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | mesh/crates/mesh-llm-ui/src/App.test.tsx | 470 | expect(input).toHaveAttribute('placeholder', 'Waiting for a warm model...') | CODE |
| LOW | mesh/crates/mesh-llm-ui/src/App.test.tsx | 491 | expect(input).toHaveAttribute('placeholder', 'Ask me anything...') | CODE |
| LOW | …onfiguration/components/settings/SchemaPathControl.tsx | 61 | placeholder={'placeholder' in setting.control ? setting.control.placeholder : './path/to/file'} | CODE |
| LOW | …nfiguration/components/settings/SchemaArrayControl.tsx | 34 | placeholder={'placeholder' in setting.control ? setting.control.placeholder : 'One item per line'} | CODE |
| LOW | …configuration/components/settings/SchemaUrlControl.tsx | 44 | placeholder={'placeholder' in setting.control ? setting.control.placeholder : 'https://example.com/resource.gguf'} | CODE |
| LOW | …n/components/settings/ConfigurationDefaultsControl.tsx | 75 | placeholder={'placeholder' in setting.control ? setting.control.placeholder : undefined} | CODE |
| LOW | …figuration/components/settings/SchemaObjectControl.tsx | 39 | placeholder={'placeholder' in setting.control ? setting.control.placeholder : '{\n "key": "value"\n}'} | CODE |
| LOW | mesh/website/src/docs/pages/system-one-api.md | 201 | "from": "user@example.com", | CODE |
| LOW | mesh/docs/design/OPENJEV_SKIPPY_POC.md | 279 | "state": {"from": "user@example.com", "body": "I was charged twice this month."}, | CODE |
| LOW | skippy/crates/skippy-hf-hub/src/users.rs | 433 | "fullname":"Acme Corp", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | mesh/sdk/python/src/meshllm/__init__.py | 15 | __all__ = [ | CODE |
| LOW | mesh/sdk/python/src/meshllm/_binding.py | 17 | def _set_native_for_testing(module: object | None) -> None: | CODE |
| LOW | mesh/sdk/python/src/meshllm/_generated/mesh_ffi.py | 2378 | __all__ = [ | CODE |
| LOW | skippy/evals/skippy-granite-tensor-equivalence.py | 23 | def update_bytes(digest: Any, values: np.ndarray) -> None: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | skippy/scripts/tests/test_skippy_llama_parity.py | 283 | CODE | |
| LOW | skippy/scripts/tests/test_build_llama.py | 107 | CODE | |
| LOW | scripts/tests/test_ci_artifact_actions.py | 494 | CODE | |
| LOW | scripts/tests/test_compare_event_benchmark_matrix.py | 86 | CODE | |
| LOW | scripts/tests/ci_test_helpers.py | 15 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | mesh/evals/ab-test.sh | 132 | # Check if any files were modified | COMMENT |
| LOW | .github/actions/compute-changes/derive-outputs.sh | 37 | # Check if all changed files match docs patterns (*.md or docs/**) | COMMENT |