Pattern Findings

The scanner identified 2350 distinct pattern matches across 19 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers1547 hits · 1721 pts

Severity	File	Line	Snippet	Context
LOW⚡	zig/tests/server/test_memory_http.py	52	def test_warning_and_port_in_one_write(self):	CODE
LOW⚡	zig/tests/server/test_memory_http.py	56	def test_eof_without_port_is_refused(self):	CODE
LOW⚡	zig/tests/server/test_memory_http.py	61	def test_silent_child_times_out(self):	CODE
LOW	zig/tests/server/test_memory_http.py	101	def test_both_routes_are_gated_even_with_metrics_open(self):	CODE
LOW	zig/tests/server/test_memory_http.py	113	def test_health_redaction_is_preserved(self):	CODE
LOW	zig/tests/server/test_memory_http.py	118	def test_process_peak_scope_and_metrics(self):	CODE
LOW	tools/evidence_index.py	249	def read_conformance_profiles(root):	CODE
LOW	tools/test_memory_receipts.py	27	def test_both_ranks_require_complete_lifecycle(self):	CODE
LOW	tools/test_memory_receipts.py	35	def test_invalid_identity_clock_peak_and_missing_fields(self):	CODE
LOW⚡	tools/test_memory_receipts.py	46	def test_resets_are_retained_as_separate_intervals(self):	CODE
LOW⚡	tools/test_memory_receipts.py	54	def test_invalid_interval_never_launches(self):	CODE
LOW⚡	tools/test_memory_receipts.py	63	def test_actual_child_memory_exit_and_missing_native_status(self):	CODE
LOW	tools/test_memory_receipts.py	78	def test_forwarding_is_disarmed_before_child_can_be_reaped(self):	CODE
LOW	tools/test_memory_receipts.py	91	def test_failed_child_cannot_record_qualified_native_result(self):	CODE
LOW	tools/test_fsr_profile.py	24	def test_synthetic_routes_are_complete_repeatable_and_preserve_raw_rows(self):	CODE
LOW	tools/test_fsr_profile.py	38	def test_uniform_component_io_model_counts_coalescing_and_labels_predictions(self):	CODE
LOW	tools/test_fsr_profile.py	53	def test_malformed_io_geometry_and_unmeasured_rates_refuse(self):	CODE
LOW	tools/test_fsr_profile.py	63	def test_hit_observations_preserve_union_and_whole_budget(self):	CODE
LOW	tools/test_fsr_profile.py	77	def test_native_batch_rows_and_streams_remain_visible(self):	CODE
LOW	tools/test_fsr_profile.py	89	def test_truncation_missing_layer_duplicate_and_false_close_refuse(self):	CODE
LOW	tools/test_fsr_profile.py	101	def test_bad_metadata_and_forecasts_cannot_claim_actual_union(self):	CODE
LOW⚡	tools/test_pr_check.py	16	def test_touched_source_limit_including_inherited_long_file(self):	CODE
LOW⚡	tools/test_pr_check.py	22	def test_home_paths_warn_without_echoing_the_value(self):	CODE
LOW⚡	tools/test_pr_check.py	31	def test_parent_patch_warns_and_regular_relative_path_is_allowed(self):	CODE
LOW⚡	tools/test_pr_check.py	41	def test_documentation_examples_only_warn_and_main_stays_successful(self):	CODE
LOW⚡	tools/test_pr_check.py	53	def test_only_new_top_level_markdown_warns(self):	CODE
LOW⚡	tools/test_pr_check.py	58	def test_unreleased_pr_warning_never_uses_an_old_release(self):	CODE
LOW⚡	tools/test_pr_check.py	65	def test_added_diff_lines_keep_numbers_and_ignore_removed_private_text(self):	CODE
LOW⚡	tools/test_pr_check.py	69	def test_same_current_lean_checker_counts_baseline_and_planted_new_comment(self):	CODE
LOW⚡	tools/test_pr_check.py	80	def test_duplicate_lean_findings_count_and_line_moves_do_not(self):	CODE
LOW⚡	tools/test_pr_check.py	86	def test_merge_base_uses_local_ref_and_common_ancestor(self):	CODE
LOW⚡	tools/test_pr_check.py	96	def test_staged_unstaged_untracked_and_deleted_are_in_the_check(self):	CODE
LOW	tools/test_pr_check.py	119	def test_advisories_exit_zero_errors_exit_one_and_incomplete_exit_two(self):	CODE
LOW⚡	tools/test_draft_vocab_responses.py	31	def test_frequency_ties_use_global_id_and_receipt_order_is_irrelevant(self):	CODE
LOW⚡	tools/test_draft_vocab_responses.py	37	def test_selection_and_heldout_never_train_the_list(self):	CODE
LOW⚡	tools/test_draft_vocab_responses.py	45	def test_split_leakage_is_refused_for_prompt_template_and_source(self):	CODE
LOW⚡	tools/test_draft_vocab_responses.py	52	def test_same_vocab_wrong_checkpoint_tokenizer_or_head_receipt_refuses(self):	CODE
LOW⚡	tools/test_draft_vocab_responses.py	61	def test_empty_negative_bool_float_string_and_outside_ids_refuse(self):	CODE
LOW⚡	tools/test_draft_vocab_responses.py	68	def test_checksum_settings_collector_prompt_and_uncommitted_receipts_refuse(self):	CODE
LOW⚡	tools/test_draft_vocab_responses.py	77	def test_missing_duplicate_unplanned_and_extra_fields_refuse(self):	CODE
LOW⚡	tools/test_draft_vocab_responses.py	87	def test_mandatory_controls_are_complete_without_low_id_fill(self):	CODE
LOW	tools/test_draft_vocab_responses.py	101	def test_every_split_and_bucket_has_exact_independent_counts(self):	CODE
LOW⚡	tools/test_draft_vocab_responses.py	119	def test_duplicate_json_keys_nonfinite_numbers_and_unknown_metadata_refuse(self):	CODE
LOW⚡	tools/test_draft_vocab_responses.py	129	def test_output_is_the_artifact_the_zig_parser_actually_loads(self):	CODE
LOW⚡	tools/test_draft_vocab_responses.py	139	def test_cli_needs_no_tokenizer_and_failure_preserves_existing_output(self):	CODE
LOW	tools/test_draft_vocab_responses.py	156	def test_atomic_write_failure_removes_its_temporary(self):	CODE
LOW	tools/test_draft_vocab_responses.py	165	def test_legacy_text_mode_keeps_its_existing_cli_and_low_id_fill(self):	CODE
LOW	tools/pipeline/test_pipe_receipt.py	79	def test_table_ratio_against_the_best_box(self):	STRING
LOW⚡	tools/pipeline/test_pipe_receipt.py	97	def test_ring_env_names_both_link_addresses(self):	STRING
LOW⚡	tools/pipeline/test_pipe_receipt.py	105	def test_remote_command_quotes_and_never_carries_the_key(self):	STRING
LOW⚡	tools/zig/check_cuda_symbols.py	35	def test_missing_entry_and_arch_are_refused(self):	CODE
LOW⚡	tools/zig/check_cuda_symbols.py	39	def test_declaration_or_substring_is_not_a_function(self):	CODE
LOW⚡	tools/zig/check_cuda_symbols.py	42	def test_each_sm_must_hold_each_function(self):	CODE
LOW⚡	tools/zig/cuda_common_check_test.py	34	def test_baseline_and_planted_ldmatrix(self):	CODE
LOW⚡	tools/zig/cuda_common_check_test.py	39	def test_duplicate_definition(self):	CODE
LOW⚡	tools/zig/cuda_common_check_test.py	47	def test_comment_and_whitespace_are_not_new_copies(self):	CODE
LOW⚡	tools/zig/cuda_common_check_test.py	51	def test_multiline_asm_and_constraint_change(self):	CODE
LOW	tools/zig/cuda_common_check_test.py	65	def test_removed_copy_is_stale(self):	CODE
LOW	tools/zig/cuda_common_check_test.py	75	def test_every_requested_instruction_and_definition(self):	CODE
LOW	tools/zig/cuda_sass_identity_test.py	52	def test_second_encoding_word(self):	CODE
1487 more matches not shown…

Unused Imports227 hits · 227 pts

Severity	File	Line	Context
LOW	zig/tests/cuda/aot_fallback_kernels.py	10	CODE
LOW	zig/tests/cuda/flashnext/capture_rows.py	4	CODE
LOW	zig/tests/cuda/flashnext/capture_mtp.py	4	CODE
LOW	zig/tests/cuda/flashnext/capture.py	4	CODE
LOW	zig/tests/cuda/flashnext/capture_sparse.py	4	CODE
LOW	zig/tests/cuda/flashnext/capture_sparse.py	27	CODE
LOW	zig/tests/cuda/oracle/sass_compare.py	3	CODE
LOW	zig/tests/cuda/oracle/oracle.py	3	CODE
LOW	zig/tests/cuda/nemotron/sass_compare.py	3	CODE
LOW	zig/tests/cuda/nemotron/capture.py	4	CODE
LOW	zig/tests/cuda/nemotron/gate.py	4	CODE
LOW	zig/tests/cuda/nemotron/test_aot_manifest.py	6	CODE
LOW	zig/tests/server/security_cases.py	2	CODE
LOW	zig/tests/server/fake_text.py	3	CODE
LOW	zig/tests/server/wire.py	3	CODE
LOW	zig/tests/server/freeze_cases.py	3	CODE
LOW	zig/tests/server/freeze_cases.py	7	CODE
LOW	zig/tests/server/corpus.py	3	CODE
LOW	tools/zig_gate.py	3	CODE
LOW	tools/draft_vocab_responses.py	2	CODE
LOW	tools/step5_fp8_to_mlx.py	28	CODE
LOW	tools/step5_fp8_to_mlx.py	39	CODE
LOW	tools/draft_vocab.py	10	CODE
LOW	tools/clef_head_gate.py	12	CODE
LOW	tools/clef_head_gate.py	12	CODE
LOW	tools/glm5_q8_0_gguf_to_mlx.py	19	CODE
LOW	tools/draft_vocab_extend.py	14	CODE
LOW	tools/test_draft_vocab_responses.py	4	CODE
LOW	tools/clef_e2e.py	11	CODE
LOW	tools/zig/llama_teacher_judge.py	2	CODE
LOW	tools/zig/gate_judge.py	3	CODE
LOW	tools/zig/check_prefill_model.py	3	CODE
LOW	tools/zig/spark25_convert.py	3	CODE
LOW	tools/zig/vision_urls_served.py	3	CODE
LOW	tools/zig/gemma4_e4b_toolcmp.py	4	CODE
LOW	tools/zig/step5_check_ref.py	5	CODE
LOW	tools/zig/record_lanes.py	3	CODE
LOW	tools/zig/mlx_op_cases.py	3	CODE
LOW	tools/zig/lanes_units.py	3	CODE
LOW	tools/zig/xpu_fixtures_qmv.py	2	CODE
LOW	tools/zig/glm_compare.py	3	CODE
LOW	tools/zig/vision_served.py	3	CODE
LOW	tools/zig/gemma4_12b_convert.py	3	CODE
LOW	tools/zig/grammar_masks.py	3	CODE
LOW	tools/zig/grammar_masks.py	145	CODE
LOW	tools/zig/check_mlx_ops.py	3	CODE
LOW	tools/zig/metal_source.py	3	CODE
LOW	tools/zig/step5_vision_ref.py	5	CODE
LOW	tools/zig/lighton_ocr_pixels.py	3	CODE
LOW	tools/zig/qwen27_gate.py	2	CODE
LOW	tools/zig/lighton_ocr_reference.py	3	CODE
LOW	tools/zig/flashnext_check_dump.py	3	CODE
LOW	tools/zig/qwen27_http_gate.py	2	CODE
LOW	tools/zig/gemma4_e4b_reference.py	4	CODE
LOW	tools/zig/capture_qwen35.py	2	CODE
LOW	tools/zig/gemma4_e4b_layers.py	3	CODE
LOW	tools/zig/picture_webp_fixtures.py	3	CODE
LOW	tools/zig/oracle_nemotron_rows.py	3	CODE
LOW	tools/zig/oracle_nemotron_rows.py	18	CODE
LOW	tools/zig/triton_aot_pack.py	4	CODE
167 more matches not shown…

Hallucination Indicators16 hits · 205 pts

Severity	File	Line	Snippet	Context
CRITICAL	zig/src/server/slide_bloom.js	99	this.blur.uniforms.step.value.set(0.5 / this.half[0].width, 0.5 / this.half[0].height);	CODE
CRITICAL	app/electron/agent/tool-parallel-search.test.ts	81	assert.ok(schema.function.parameters.properties.provider.enum.includes('parallel'), 'the maintained tool schema expo	CODE
CRITICAL	app/electron/main/host/bot-polling-runtime.ts	214	const token = store.settings.botControl.telegram.botToken.trim()	CODE
CRITICAL	app/electron/main/host/bot-polling-runtime.ts	228	const token = store.settings.botControl.telegram.botToken.trim()	CODE
CRITICAL⚡	app/electron/main/host/whatsapp-lifecycle-ipc.test.ts	64	assert.equal(state.store.settings.whatsapp.sources.find((item) => item.id === 'missing')!.paired, false, 'missing prot	CODE
CRITICAL⚡	app/electron/main/host/whatsapp-lifecycle-ipc.test.ts	69	assert.equal(state.store.settings.whatsapp.sources.find((item) => item.id === 'paired')!.enabled, false)	CODE
CRITICAL⚡	app/electron/main/host/whatsapp-lifecycle-ipc.test.ts	74	assert.equal(state.store.settings.whatsapp.sources.find((item) => item.id === 'paired')!.enabled, true)	CODE
CRITICAL	app/electron/main/host/whatsapp-lifecycle-ipc.test.ts	85	state.store.settings = { ...state.store.settings, whatsapp: { ...state.store.settings.whatsapp, sources: state.store	CODE
CRITICAL	app/electron/main/host/whatsapp-lifecycle-ipc.test.ts	95	state.beforeAuthRead = (id) => { if (id === 'paired') state.store.settings.whatsapp.sources = state.store.settings.wha	CODE
CRITICAL⚡	app/src/lib/mock/connectors.ts	64	const telegramOptedIn = mockState.settings.botControl.telegram.enabled && Boolean(mockState.settings.botControl.telegr	CODE
CRITICAL⚡	app/src/lib/mock/connectors.ts	72	&& Boolean(mockState.settings.botControl.whatsapp.accessToken.trim())	CODE
CRITICAL⚡	app/src/lib/mock/connectors.ts	73	&& Boolean(mockState.settings.botControl.whatsapp.phoneNumberId.trim())	CODE
CRITICAL⚡	app/src/lib/mock/connectors.ts	74	&& Boolean(mockState.settings.botControl.whatsapp.verifyToken.trim())	CODE
CRITICAL⚡	app/src/lib/mock/connectors.ts	75	&& Boolean(mockState.settings.botControl.whatsapp.appSecret.trim())	CODE
CRITICAL⚡	web/tensorfold_web/ui_dist/assets/index-cck1M0ft.js	64	`,y="/",x="*",g="",v="comment",j="declaration";function T(R,D){if(typeof R!="string")throw new TypeError("First argument	CODE
CRITICAL	web/tensorfold_web/ui_dist/assets/index-cck1M0ft.js	91	`))}function p(j,T,_,R){const D=_.enter("tableCell"),$=_.enter("phrasing"),U=_.containerPhrasing(j,{...R,before:f,after:	CODE

Deep Nesting187 hits · 186 pts

Severity	File	Line	Context
LOW	zig/tests/hip_affine_fixtures.py	14	CODE
LOW	zig/tests/qwen35/serve_prefix.py	14	CODE
LOW	zig/tests/qwen35/serve_prefill.py	23	CODE
LOW	zig/tests/cuda/flashnext/capture.py	154	CODE
LOW	zig/tests/cuda/oracle/oracle.py	81	CODE
LOW	zig/tests/cuda/nemotron/capture.py	118	CODE
LOW	zig/tests/cuda/nemotron/capture.py	160	CODE
LOW	zig/tests/cuda/nemotron/capture.py	125	CODE
LOW	zig/tests/server/security_check.py	123	CODE
LOW	zig/tests/server/wire.py	50	CODE
LOW	tools/fsr_profile.py	35	CODE
LOW	tools/evidence_index.py	271	CODE
LOW	tools/bench_image_session.py	57	CODE
LOW	tools/shared_prefix_load.py	19	CODE
LOW	tools/bench_concurrent.py	203	CODE
LOW	tools/startup_receipt.py	85	CODE
LOW	tools/step5_fp8_to_mlx.py	160	CODE
LOW	tools/image_cache_turns.py	53	CODE
LOW	tools/conformance.py	435	CODE
LOW	tools/conformance.py	302	CODE
LOW	tools/conformance.py	396	CODE
LOW	tools/pr_check.py	40	CODE
LOW	tools/fsr_synthetic.py	8	CODE
LOW	tools/clef_e2e.py	53	CODE
LOW	tools/clef_e2e.py	149	CODE
LOW	tools/memory_receipts.py	14	CODE
LOW	tools/memory_receipts.py	39	CODE
LOW	tools/pipeline/pipe_receipt.py	308	CODE
LOW	tools/zig/llama_teacher_judge.py	50	CODE
LOW	tools/zig/glm_ocr_reference.py	298	CODE
LOW	tools/zig/gate_judge.py	106	CODE
LOW	tools/zig/bench_sessions.py	282	CODE
LOW	tools/zig/bench_sessions.py	109	CODE
LOW	tools/zig/check_cuda_sources.py	46	CODE
LOW	tools/zig/check_prefill_model.py	86	CODE
LOW	tools/zig/spark25_convert.py	89	CODE
LOW	tools/zig/flashnext_mtp_chain.py	13	CODE
LOW	tools/zig/k3_check.py	131	CODE
LOW	tools/zig/mlx_op_cases.py	165	CODE
LOW	tools/zig/mlx_op_cases.py	309	CODE
LOW	tools/zig/mlx_op_cases.py	351	CODE
LOW	tools/zig/lanes_units.py	41	CODE
LOW	tools/zig/lanes_units.py	154	CODE
LOW	tools/zig/lanes_units.py	252	CODE
LOW	tools/zig/xpu_soak_server.py	72	CODE
LOW	tools/zig/reuse_served.py	346	CODE
LOW	tools/zig/reuse_served.py	410	CODE
LOW	tools/zig/reuse_served.py	468	CODE
LOW	tools/zig/drama_reference_cache_check.py	44	CODE
LOW	tools/zig/drama_reference_cache_check.py	58	CODE
LOW	tools/zig/xpu_compare_ref.py	50	CODE
LOW	tools/zig/gemma4_e4b_mstreams.py	19	CODE
LOW	tools/zig/grammar_masks.py	137	CODE
LOW	tools/zig/check_mlx_ops.py	215	CODE
LOW	tools/zig/metal_source.py	78	CODE
LOW	tools/zig/test_flashnext_constraint_gate.py	14	CODE
LOW	tools/zig/test_flashnext_constraint_gate.py	29	CODE
LOW	tools/zig/keep_rate_records.py	7	CODE
LOW	tools/zig/qwen27_gate.py	115	CODE
LOW	tools/zig/lighton_ocr_reference.py	445	CODE
127 more matches not shown…

Cross-Language Confusion31 hits · 171 pts

Severity	File	Line	Snippet	Context
HIGH	zig/tests/server/security_check.py	80	decision = b'{"state":null,"questions":{"q":{"instructions":"Choose one","criteria":{"A":"Alpha","B":"Beta"}}}}'	CODE
HIGH	tools/evidence_index.py	35	is ``unknown`` (null).	STRING
HIGH	tools/clef_e2e.py	123	"""KL(p \|\| q), strict: a term with p > 0 and q == 0 is infinite; only terms where p is 0 drop out."""	STRING
HIGH⚡	tools/pipeline/test_pipe_receipt.py	109	self.assertTrue(cmd.startswith("cd /r/TensorFold && env "))	STRING
HIGH	tools/pipeline/pipe_receipt.py	213	cmd = f"umask 077 && cat > {shlex.quote(self.a.peer_secret)}"	CODE
HIGH⚡	tools/zig/lean_check_test.py	31	'const c = @import("sys").getenv("TF_NEW_KNOB") != null and sys.getenv("TF_OTHER") == null;\n')	CODE
HIGH⚡	tools/zig/lean_check_test.py	48	("zig/src/platform/sys.zig", "return std.mem.span(c.getenv(name) orelse return null);\n"),	CODE
HIGH⚡	tools/zig/lean_check_test.py	49	("zig/src/platform/win_c.zig", "const wide = getenv(key) orelse return null;\n"),	CODE
HIGH⚡	tools/zig/lean_check_test.py	63	'const off = envOff("TF_NEW") or getenv("NCCL_DEBUG") != null;\n')	CODE
HIGH	tools/zig/flashnext_dump.py	82	(" if (m < M && nn < N)\n"	CODE
HIGH	tools/zig/flashnext_checked.py	24	(" if (m < M && nn < N)\n"	CODE
HIGH	tools/zig/tokenizer_parity.py	19	'pub fn main() !void {\n std.debug.print("{d}\\n", .{42});\n}\n// x+=1; y--; z->w; a<=b && c!=d \|\| e>=f\n'	CODE
HIGH	tools/zig/tokenizer_parity.py	19	'pub fn main() !void {\n std.debug.print("{d}\\n", .{42});\n}\n// x+=1; y--; z->w; a<=b && c!=d \|\| e>=f\n'	CODE
HIGH	tools/zig/minimax_m3_kl.py	10	Row r is the distribution of token r + 1 given tokens 0..r. Per row: KL(release \|\| served) in float64 over the whole	CODE
HIGH	tools/zig/minimax_m3_kl.py	106	print(f"{rows} rows: KL(release \|\| served) mean {rep['kl_mean']:.5f}, median {rep['kl_median']:.5f}, "	CODE
HIGH	tools/xpu/a8_study.py	2	against the same rows in fp16, both through the GPTQ checkpoint's fp16 head: top-1 agreement and KL(fp16 \|\| int8).	STRING
HIGH	web/tensorfold_web/series.py	69	db.execute("create table if not exists series (id text primary key, created real not null, doc text not null	CODE
HIGH	web/tensorfold_web/suites.py	119	db.execute("create table if not exists suites (id text primary key, created real not null, doc text not null	CODE
HIGH	web/tensorfold_web/kl.py	129	"""A lower bound of KL(P \|\| Q), from the tokens each side lists."""	STRING
HIGH⚡	web/tensorfold_web/conversations.py	131	db.execute("create table if not exists conversations (id text primary key, created real not null, "	CODE
HIGH⚡	web/tensorfold_web/conversations.py	132	"updated real not null, title text, doc text not null)")	CODE
HIGH⚡	web/tensorfold_web/conversations.py	134	db.execute("create table if not exists folders (name text primary key, created real not null)")	CODE
HIGH⚡	web/tensorfold_web/conversations.py	136	db.execute("create table if not exists presets (name text primary key, created real not null, "	CODE
HIGH⚡	web/tensorfold_web/conversations.py	137	"doc text not null)")	CODE
HIGH⚡	web/tensorfold_web/bench_store.py	20	create table if not exists runs (id text primary key, created real not null, finished real,	CODE
HIGH⚡	web/tensorfold_web/bench_store.py	21	mode text not null, status text not null, model text, doc text not null);	CODE
HIGH⚡	web/tensorfold_web/bench_store.py	23	seq integer not null, suite text not null, prompt text not null, draft integer not null,	CODE
HIGH⚡	web/tensorfold_web/bench_store.py	24	doc text not null, primary key (run_id, seq));	CODE
HIGH	web/tests/test_storage.py	27	db.execute("create table if not exists series (id text primary key, created real not null, doc text not null)")	CODE
HIGH	docs/receipts/glm-fp4local-80517fc3/tools/s5_compare.py	6	- KL(bf16 \|\| engine) over bf16's top 20 only, an approximation: sum p_bf16 (lp_bf16 - lp_engine) over bf16's 20, the	STRING
HIGH	…s/receipts/glm-fp4local-80517fc3/tools/s5_prompt_lp.py	4	A reply's row t scores the sequence's token t from tokens 0..t-1 (row 0 is null): the given token's logprob and rank,	STRING

Empty Error Handlers29 hits · 145 pts

Severity	File	Line	Snippet	Context
HIGH	tools/shared_prefix_load.py	97	except ValueError:	CODE
HIGH	tools/startup_receipt.py	82	except queue.Full:	CODE
HIGH	tools/bench_thinking.py	27	except (OSError, ValueError, TypeError):	CODE
HIGH	tools/conformance.py	257	except threading.BrokenBarrierError:	CODE
HIGH	tools/conformance.py	418	except (urllib.error.URLError, OSError):	CODE
HIGH	tools/pr_check.py	33	except subprocess.CalledProcessError:	CODE
HIGH	tools/memory_receipts.py	34	except (OSError, ValueError):	CODE
HIGH	tools/memory_receipts.py	99	except ProcessLookupError:	CODE
HIGH	tools/zig/drama_reference_cache_check.py	52	except (urllib.error.URLError, OSError):	CODE
HIGH	tools/zig/gate_cells.py	68	except OSError:	CODE
HIGH	tools/zig/flashnext_batch_serve.py	74	except (OSError, ValueError):	CODE
HIGH	tools/zig/flashnext_batch_serve.py	92	except (OSError, ValueError):	CODE
HIGH	tools/zig/gate_serve.py	107	except ProcessLookupError:	CODE
HIGH	tools/zig/mcdma_pair/compare_log.py	111	except ValueError:	CODE
HIGH	tools/lfm3/serve_check.py	66	except (urllib.error.URLError, TimeoutError):	CODE
HIGH	tools/tests/test_startup_receipt.py	253	except subprocess.TimeoutExpired:	CODE
HIGH	web/tensorfold_web/catalog.py	81	except OSError:	CODE
HIGH	web/tensorfold_web/living.py	140	except OSError:	CODE
HIGH	web/tensorfold_web/bench_modes.py	43	except (httpx.HTTPError, ValueError):	CODE
HIGH	web/tensorfold_web/engine_child.py	47	except psutil.Error:	CODE
HIGH	web/tensorfold_web/storage.py	59	except sqlite3.Error:	CODE
HIGH	web/tensorfold_web/living_versions.py	80	except (ValueError, OSError):	CODE
HIGH	web/tensorfold_web/living_versions.py	376	except (ValueError, OSError):	CODE
HIGH	web/tensorfold_web/httpread.py	47	except (httpx.HTTPError, OSError, RuntimeError):	CODE
HIGH	web/tensorfold_web/mock_engine.py	175	except (BrokenPipeError, ConnectionResetError):	CODE
HIGH	web/tensorfold_web/mock_engine.py	330	except (BrokenPipeError, ConnectionResetError):	CODE
HIGH	web/tensorfold_web/living_teacher.py	140	except OSError:	CODE
HIGH	web/tensorfold_web/living_teacher.py	62	except OSError:	CODE
HIGH	web/tensorfold_web/living_teacher.py	239	except OSError:	CODE

Decorative Section Separators46 hits · 142 pts

Severity	File	Line	Snippet	Context
MEDIUM	app/experiments/agent/calendar-ics.test.ts	15	// ── create ──────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	app/experiments/agent/calendar-ics.test.ts	60	// ── all-day ───────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	app/experiments/agent/calendar-ics.test.ts	71	// ── reschedule ────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	app/experiments/agent/calendar-ics.test.ts	92	// ── cancel ────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	app/experiments/agent/calendar-ics.test.ts	108	// ── line folding ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	app/experiments/agent/calendar-ics.test.ts	121	// ── icsInputFromMutation ──────────────────────────────────────────────────────	COMMENT
MEDIUM	app/experiments/agent/calendar-ics.test.ts	149	// ── assembleMeetingPrep ───────────────────────────────────────────────────────	COMMENT
MEDIUM	app/experiments/agent/kg-memory.ts	80	// ── Entities ────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	app/experiments/agent/kg-memory.ts	105	// ── Facts (insert-with-supersede) ─────────────────────────────────────────────	COMMENT
MEDIUM	app/experiments/agent/kg-memory.ts	204	// ── Point-in-time queries ─────────────────────────────────────────────────────	COMMENT
MEDIUM	app/experiments/agent/kg-memory.ts	263	// ── Connected recall ──────────────────────────────────────────────────────────	COMMENT
MEDIUM	app/experiments/agent/calendar-ics.ts	136	// ── Meeting prep ────────────────────────────────────────────────────────────	COMMENT
MEDIUM	app/experiments/agent/calendar-ics.ts	236	// ── helpers ─────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	app/electron/main-app.ts	1208	// ── Phase 6: production incident mode ────────────────────────────────────────	COMMENT
MEDIUM	app/electron/agent/interrupt-registry.ts	18	// ── Request kinds ────────────────────────────────────────────────────────────	COMMENT
MEDIUM	app/electron/agent/interrupt-registry.ts	40	// ── Resolutions ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	app/electron/agent/interrupt-registry.ts	218	// ── Validation (pure) ────────────────────────────────────────────────────────	COMMENT
MEDIUM	app/electron/agent/export.test.ts	17	// ── redactText ───────────────────────────────────────────────────────────────	COMMENT
MEDIUM	app/electron/agent/export.test.ts	104	// ── buildRunExport ───────────────────────────────────────────────────────────	COMMENT
MEDIUM	app/electron/agent/conversation-checkpoints.test.ts	44	// ── capture: counts + fingerprint + fields ───────────────────────────────────	COMMENT
MEDIUM	app/electron/agent/conversation-checkpoints.test.ts	59	// ── fingerprint is order-stable + content-sensitive ──────────────────────────	COMMENT
MEDIUM	app/electron/agent/conversation-checkpoints.test.ts	84	// ── immutability: snapshot is frozen + isolated from live mutation ───────────	COMMENT
MEDIUM	app/electron/agent/conversation-checkpoints.test.ts	104	// ── restore returns a fresh mutable clone (rewind) ───────────────────────────	COMMENT
MEDIUM	app/electron/agent/conversation-checkpoints.test.ts	119	// ── fork creates an alternate branch off a past snapshot ─────────────────────	COMMENT
MEDIUM	app/electron/agent/conversation-checkpoints.test.ts	137	// ── nextForkBranch avoids collisions ─────────────────────────────────────────	COMMENT
MEDIUM	app/electron/agent/conversation-checkpoints.test.ts	144	// ── log: capture chain, dedup, rewind, fork, lineage ─────────────────────────	COMMENT
MEDIUM	app/electron/agent/conversation-checkpoints.test.ts	188	// ── fileSha correlation carries through capture + fork ───────────────────────	COMMENT
MEDIUM	app/electron/agent/interrupt-registry.test.ts	25	// ── park returns a pending promise that stays pending until resolved ──────────	COMMENT
MEDIUM	app/electron/agent/interrupt-registry.test.ts	40	// ── allow (no edit) resolves with the original args, edited=false ─────────────	COMMENT
MEDIUM	app/electron/agent/interrupt-registry.test.ts	52	// ── allow WITH edited args resolves with the edit, edited=true ────────────────	COMMENT
MEDIUM	app/electron/agent/interrupt-registry.test.ts	64	// ── deny rejects with InterruptDeniedError carrying id + reason ───────────────	COMMENT
MEDIUM	app/electron/agent/interrupt-registry.test.ts	79	// ── question → answer resolves with the free-form value ───────────────────────	COMMENT
MEDIUM	app/electron/agent/interrupt-registry.test.ts	101	// ── kind/resolution mismatch is rejected both ways ────────────────────────────	COMMENT
MEDIUM⚡	app/electron/agent/interrupt-registry.test.ts	114	// ── unknown id and double-resolve both throw ──────────────────────────────────	COMMENT
MEDIUM⚡	app/electron/agent/interrupt-registry.test.ts	124	// ── invalid requests are rejected at park time ────────────────────────────────	COMMENT
MEDIUM⚡	app/electron/agent/interrupt-registry.test.ts	133	// ── list()/peek() reflect parked state deterministically (oldest first) ───────	COMMENT
MEDIUM	app/electron/agent/interrupt-registry.test.ts	147	// ── cancelAll denies every parked interrupt and empties the registry ──────────	COMMENT
MEDIUM	app/electron/agent/interrupt-registry.test.ts	162	// ── onEvent observes the lifecycle deterministically ──────────────────────────	COMMENT
MEDIUM	app/electron/agent/interrupt-registry.test.ts	179	// ── a throwing observer never breaks the registry ────────────────────────────	COMMENT
MEDIUM	app/electron/agent/types/timeline.ts	473	// ── Phase 7: Run export & sharing ────────────────────────────────────────────	COMMENT
MEDIUM	app/electron/agent/types/timeline.ts	576	// ── Phase 6: Production incident mode ────────────────────────────────────────	COMMENT
MEDIUM	app/src/lib/activity-grouping.test.ts	19	// ── groupToolRuns ───────────────────────────────────────────────────────────	COMMENT
MEDIUM	app/src/lib/activity-grouping.test.ts	79	// ── activityGroupLabel ──────────────────────────────────────────────────────	COMMENT
MEDIUM	app/src/lib/activity-grouping.test.ts	94	// ── activityGroupStateSummary ───────────────────────────────────────────────	COMMENT
MEDIUM	app/src/lib/activity-grouping.test.ts	128	// ── reasoningDisplayState (Task #34) ────────────────────────────────────────	COMMENT
MEDIUM	app/src/lib/activity-grouping.test.ts	128	// ── reasoningDisplayState (Task #34) ────────────────────────────────────────	COMMENT

Over-Commented Block126 hits · 126 pts

Severity	File	Line	Snippet	Context
LOW	zig/kernels/cuda/w4a8_normalize.h	1	// Shared finite normalization, compiled by CUDA and by the CPU regression without CUDA headers.	COMMENT
LOW	zig/kernels/cuda/window_fallback.h	1	// The exceptional prompt path replaces only a head whose ordinary output is nonfinite.	COMMENT
LOW	zig/kernels/xpu/qwen27/shape.h	1	// Qwen3.8-27B sizes for the qwen27 kernels; other qwen3_5 models pass each with -D.	COMMENT
LOW	zig/kernels/xpu/qwen27/shape.h	21	#define Q27_NQK 2048 // Q27_GK * 128	COMMENT
LOW	zig/kernels/xpu/qwen27/shape.h	41	#ifndef Q27_AKV	COMMENT
LOW	zig/kernels/xpu/qwen27/shape.h	61	#endif	COMMENT
LOW	zig/kernels/hip/quant/mlx_tiles.hpp	1	#pragma once	COMMENT
LOW	zig/kernels/hip/common/arch.hpp	41	#else	COMMENT
LOW	zig/tests/rpc_library_mock.c	1	#include <stdint.h>	COMMENT
LOW	zig/tests/rpc_library_mock.c	21	#endif	COMMENT
LOW	zig/tests/qwen4/weight_only_host.cpp	1	// Execute the shared device arithmetic over owned CPU buffers with the kernels' exact shuffle tree.	COMMENT
LOW	tools/zig/mcdma_pair/loop_fabric.c	1	// loop_fabric: a stand-in libmcdma-fabric (ABI 1), not MCDMA, for stub_proof.sh's two-process cases (README.md)	COMMENT
LOW	tools/zig/cuda_host/math_constants.h	1	#pragma once	COMMENT
LOW	tools/zig/cuda_host/cuda_runtime.h	1	#pragma once	COMMENT
LOW	tools/zig/cuda_host/cuda_runtime_api.h	1	#pragma once	COMMENT
LOW	tools/glm_index_emulate/cuda_runtime.h	1	// Host stand-ins for the CUDA names glm_index_*.cuh use: a block's threads are OS threads, __syncthreads a barrier.	COMMENT
LOW	app/experiments/agent/prompt-registry.ts	1	// Prompt / config version registry + run linkage.	COMMENT
LOW	app/experiments/agent/semantic-code-index.ts	1	// Semantic / symbol codebase index — the CONTAINED, pure core.	COMMENT
LOW	app/experiments/agent/ambient-reactions.ts	1	// Event-triggered ambient reactions. The connector spine (connector-spine.ts) already	COMMENT
LOW	app/experiments/agent/memory-consolidate.ts	1	// Sleep-time memory consolidation (Wave 7+). A PURE consolidation pass over a set of durable	COMMENT
LOW	app/experiments/agent/managed-tunnel.ts	1	// Supervise a cloudflared/ngrok child so a TensorFold remote-control server (see remote-control.ts) can	COMMENT
LOW	app/experiments/agent/provider-session.ts	1	// Uniform ProviderSession SPI. Owned-loop providers (OpenAI-compatible HTTP /	COMMENT
LOW	app/experiments/agent/approval-queue.ts	1	// Durable batch-approval queue — a PURE reducer that sits on top of the per-job	COMMENT
LOW	app/experiments/agent/difficulty-router.ts	1	// Pure, dependency-free difficulty / cost-aware model tiering.	COMMENT
LOW	app/experiments/agent/trajectory-regression.ts	1	// Golden trajectory regression tests — pure capture + comparison.	COMMENT
LOW	app/experiments/agent/guided-decoding.ts	1	// Schema-constrained decoding + validate-then-retry.	COMMENT
LOW	app/experiments/agent/guided-decoding.ts	61	// ---------------------------------------------------------------------------	COMMENT
LOW	app/experiments/agent/semantic-recall.ts	1	// Embedding-based memory recall — replaces literal token/phrase overlap	COMMENT
LOW	app/experiments/agent/procedural-distiller.ts	1	// Distill reusable, repo-specific procedural notes from recorded run trajectories.	COMMENT
LOW	app/experiments/agent/procedural-distiller.ts	21	// - Recurrence = confidence: a reason seen once is 'low', a few times 'medium', many	COMMENT
LOW	app/experiments/agent/online-evals.ts	1	// Online eval scoring + threshold alerts on live runs.	COMMENT
LOW	app/experiments/agent/mcp-oauth-registry.ts	1	// OAuth 2.1 + PKCE request builder and MCP registry search/install descriptor parser —	COMMENT
LOW	app/experiments/agent/env-snapshots.ts	1	// Reusable environment snapshots — the PURE PLANNING CORE.	COMMENT
LOW	app/experiments/agent/kg-memory.ts	1	// Bi-temporal knowledge-graph memory (contained core).	COMMENT
LOW	app/experiments/agent/mcp-sampling-elicitation.ts	1	// MCP client-side handlers for the two SERVER→CLIENT requests an MCP server can make once the	COMMENT
LOW	app/electron/agent/mcp-server-main.ts	1	// Standalone entry: run TensorFold's tools as an MCP server over stdio, so Codex/Claude	COMMENT
LOW	app/electron/agent/whatsapp-media-ingest.ts	1	// WhatsApp incoming-media ingest: turn an ENCRYPTED Baileys media message into a LOCAL cached	COMMENT
LOW	app/electron/agent/acp-server.ts	1	// TensorFold-Studio-as-ACP-agent: a REAL Agent Client Protocol server that hosts TensorFold's	COMMENT
LOW	app/electron/agent/acp-server.ts	61		COMMENT
LOW	app/electron/agent/draft-throttle.ts	1	// Rate-limit for streaming-draft edits. Telegram's editMessageText is rate-limited (a burst of	COMMENT
LOW	app/electron/agent/best-of-n.ts	1	// Best-of-N attempts + verifier auto-select — the pure orchestration core.	COMMENT
LOW	app/electron/agent/outlook-connector.ts	21	// The new Outlook for Mac ("Outlook 15") stores mail in a SQLite file, but the table/column	COMMENT
LOW	app/electron/agent/instruction-graph.ts	1	// Instruction Graph (build.md P0).	COMMENT
LOW	app/electron/agent/whatsapp-media.test.ts	1	// Run: jiti electron/agent/whatsapp-media.test.ts	COMMENT
LOW	app/electron/agent/cursor-agent-cli.ts	1	// Cursor Agent engine (VST-033): drive `cursor-agent` headless as a thread engine. Wire	COMMENT
LOW	app/electron/agent/model-context-windows.ts	1	// Task #41: model-aware context window registry.	COMMENT
LOW	app/electron/agent/codex-app-server.ts	1	// JSON-RPC-over-stdio client for a PERSISTENT `codex app-server` session.	COMMENT
LOW	app/electron/agent/googlechat-connector.ts	21	// • SEND : POST the webhook URL with { text } (+ { thread: { threadKey } } and a	COMMENT
LOW	app/electron/agent/automation-scheduler.ts	1	// Automation scheduler kernel (VST-038): the pure decisions for scheduler leases and each	COMMENT
LOW	app/electron/agent/diff.ts	1	import { diffLines } from 'diff'	COMMENT
LOW	app/electron/agent/ssh-config.ts	1	// OpenSSH client-config parsing for SSH host discovery and effective-settings	COMMENT
LOW	app/electron/agent/loop.ts	161	): Promise<Awaited<ReturnType<typeof resolveInstructionGraph>>> {	COMMENT
LOW	app/electron/agent/loop.ts	181	// "succeeds") earns a stop-repeating nudge. Catches small local models that loop.	COMMENT
LOW	app/electron/agent/loop.ts	361		COMMENT
LOW	app/electron/agent/loop.ts	481		COMMENT
LOW	app/electron/agent/loop.ts	501	// during a streaming turn aborts + re-requests; cap so a user mashing Guide	COMMENT
LOW	app/electron/agent/loop.ts	1381	// Intra-generation doom-loop breaker (#63 follow-up): a local model can stream	COMMENT
LOW	app/electron/agent/orchestration-journal.ts	1	// Durable, append-only NDJSON lifecycle journal for missions and rooms.	COMMENT
LOW	app/electron/agent/orchestration-journal.ts	381		COMMENT
LOW	app/electron/agent/event-spine.ts	1	// Ordered event spine v2 (VST-034): the pure core of an event-sourced store with ordered	COMMENT
66 more matches not shown…

Excessive Try-Catch Wrapping69 hits · 74 pts

Severity	File	Line	Snippet	Context
LOW	tools/bench_image_session.py	155	except Exception as exc: # noqa: BLE001 - a failed turn is recorded, not fatal	CODE
LOW	tools/shared_prefix_load.py	67	except Exception as exc: # noqa: BLE001 - a failed request is reported	CODE
LOW	tools/bench_concurrent.py	63	except Exception as exc: # noqa: BLE001 - a failed request is reported, not fatal	CODE
LOW	tools/bench_concurrent.py	146	except Exception as exc: # noqa: BLE001 - retain failures outside the HTTP request too	CODE
LOW	tools/image_cache_turns.py	82	except Exception as exc: # noqa: BLE001 - a failed request is reported, not fatal	CODE
LOW	tools/image_cache_turns.py	100	except Exception: # noqa: BLE001 - optional evidence	CODE
LOW	tools/bench_openai.py	117	except Exception as exc:	CODE
LOW	tools/conformance.py	204	except Exception as exc: # noqa: BLE001 - a failed request is evidence, not a crash	CODE
LOW	tools/conformance.py	214	except Exception: # noqa: BLE001 - an unanswered probe is evidence, not a crash	CODE
LOW	tools/zig/bench_sessions.py	137	except Exception as exc: # noqa: BLE001 - a failed request is recorded, not fatal	CODE
LOW	tools/zig/xpu_soak_server.py	110	except Exception as e:	CODE
LOW	tools/zig/lighton_ocr_reference.py	514	except Exception as error:	CODE
LOW	tools/zig/keep_rate_ab.py	97	except Exception as error:	CODE
LOW	tools/zig/keep_rate_ab.py	109	except Exception as error:	CODE
LOW	tools/zig/keep_rate_ab.py	119	except Exception as error:	CODE
LOW	tools/zig/gate_visit.py	121	except Exception as exc: # noqa: BLE001 - a failed visit is a receipt; SIGTERM still ends the run	CODE
LOW	tools/zig/gate_visit.py	126	except Exception as exc: # noqa: BLE001 - a server that will not go away fails the visit	CODE
LOW	tools/zig/template_parity.py	357	except Exception as err: # every failure is compared: the native engine must fail too	CODE
LOW	tools/zig/gate_serve.py	45	except Exception: # noqa: BLE001 - not listening yet	CODE
LOW	tools/zig/cuda_sass_compare.py	246	except Exception as error:	CODE
LOW	tools/lfm3/serve_check.py	127	except Exception as exc:	CODE
LOW	tools/lfm3/serve_check.py	302	except Exception as exc:	CODE
LOW	app/scripts/youtube_video_research.py	151	except Exception:	CODE
LOW	app/scripts/youtube_video_research.py	301	except Exception as exc:	CODE
LOW	app/scripts/public_post_research.py	183	except Exception as exc:	CODE
LOW	app/electron/agent/bot-vm/guest.ts	148	except Exception as e:	CODE
LOW	web/tensorfold_web/catalog.py	92	except Exception: # noqa: BLE001 - offline, gated, moved: the curated size stands	CODE
LOW	web/tensorfold_web/catalog.py	116	except Exception: # noqa: BLE001	CODE
LOW	web/tensorfold_web/catalog.py	232	except Exception: # noqa: BLE001 - a binary that hangs or fails says nothing	CODE
LOW	web/tensorfold_web/catalog.py	252	except Exception: # noqa: BLE001 - an engine that cannot say keeps the catalog's flag	CODE
MEDIUM	web/tensorfold_web/catalog.py	69	def _read_sizes_cache() -> dict[str, Any]:	CODE
LOW	web/tensorfold_web/server_living.py	147	except Exception as exc: # noqa: BLE001 - any failure undoes the whole forgetting	CODE
LOW	web/tensorfold_web/server.py	506	except Exception as exc: # noqa: BLE001 - said on the page	CODE
MEDIUM	web/tensorfold_web/server.py	275	def until_done() -> None:	CODE
LOW	web/tensorfold_web/living_checks.py	125	except Exception as exc: # noqa: BLE001 - a question that fails is said in its cell	CODE
LOW	web/tensorfold_web/living.py	185	except Exception as exc: # not downloaded, or a cache the library cannot read	CODE
LOW	web/tensorfold_web/living.py	228	except Exception: # noqa: BLE001 - not downloaded here	CODE
LOW	web/tensorfold_web/living.py	251	except Exception: # noqa: BLE001	CODE
LOW	web/tensorfold_web/living.py	422	except Exception: # noqa: BLE001 - a question that fails says nothing of the lesson	CODE
MEDIUM	web/tensorfold_web/living.py	419	def _safe(ask) -> str \| None:	CODE
LOW	web/tensorfold_web/server_lessons.py	68	except Exception:	CODE
LOW	web/tensorfold_web/server_lessons.py	157	except Exception as exc: # noqa: BLE001 - said on the page	CODE
MEDIUM	web/tensorfold_web/server_lessons.py	153	def go() -> None:	CODE
LOW	web/tensorfold_web/series.py	158	except Exception as exc: # noqa: BLE001 - a configuration that does not start is said, the next goes on	CODE
LOW	web/tensorfold_web/series.py	181	except Exception as exc: # noqa: BLE001 - the comparison is kept and says why it stopped	CODE
LOW	web/tensorfold_web/series.py	189	except Exception as exc: # noqa: BLE001	CODE
MEDIUM	web/tensorfold_web/series.py	133	def _go(self) -> None:	CODE
LOW	web/tensorfold_web/bench.py	292	except Exception as exc: # noqa: BLE001 - a power source that cannot open: the run goes on without it	CODE
LOW	web/tensorfold_web/bench.py	347	except Exception as exc: # noqa: BLE001 - whatever stopped it, the run is kept and says why	CODE
LOW	web/tensorfold_web/bench.py	352	except Exception as exc: # noqa: BLE001 - a summary that cannot be made leaves a failed run, not a live one	CODE
LOW	web/tensorfold_web/machine.py	110	except Exception: # noqa: BLE001 - no MLX in this environment: the verdict uses the RAM fractions alone	CODE
LOW	web/tensorfold_web/server_engine_control.py	106	except Exception as exc:	CODE
LOW	web/tensorfold_web/engine.py	409	except Exception as exc: # noqa: BLE001	CODE
LOW	web/tensorfold_web/replay.py	159	except Exception as exc: # noqa: BLE001 - the replay keeps what it has and says why it stopped	CODE
LOW	web/tensorfold_web/storage.py	131	except Exception: # noqa: BLE001 - no cache yet, or one the library cannot read	CODE
LOW	web/tensorfold_web/bench_sampling.py	44	except Exception: # noqa: BLE001 - a missed reading is not a failed run	CODE
LOW	web/tensorfold_web/bench_sampling.py	52	except Exception: # noqa: BLE001	CODE
LOW	web/tensorfold_web/living_versions.py	65	except Exception: # noqa: BLE001 - the base was removed from the cache: every file is kept in the store	CODE
LOW	web/tensorfold_web/living_versions.py	430	except Exception:	CODE
LOW	web/tensorfold_web/living_teacher.py	105	except Exception as exc: # noqa: BLE001 - one fact failing does not stop the others	CODE
9 more matches not shown…

Modern AI Meta-Vocabulary15 hits · 38 pts

Severity	File	Line	Snippet	Context
MEDIUM	CHANGELOG.md	2598	decode to their schema types, Gemma 4's bare tool calls parse (#121), and a prompt past the context window gets	CODE
MEDIUM	zig/tests/server/golden/cancel/metrics-after.json	16	"body": "# HELP tensorfold:requests_running Requests in prefill or decode.\n# TYPE tensorfold:requests_running gauge\	CODE
MEDIUM	zig/tests/server/golden/metrics-open/metrics.json	16	"body": "# HELP tensorfold:requests_running Requests in prefill or decode.\n# TYPE tensorfold:requests_running gauge\	CODE
MEDIUM	zig/tests/server/golden/metrics-open/v1-metrics.json	16	"body": "# HELP tensorfold:requests_total HTTP replies by API key label and status.\n# TYPE tensorfold:requests_total	CODE
MEDIUM	zig/tests/server/golden/keys/metrics-counted.json	16	"body": "# HELP tensorfold:requests_total HTTP replies by API key label and status.\n# TYPE tensorfold:requests_total	CODE
MEDIUM	app/experiments/agent/difficulty-router.ts	216	// Many tool calls / many files => harder, agentic work.	COMMENT
MEDIUM	app/experiments/agent/mcp-sampling-elicitation.ts	5	// (agentic MCP servers that want an LLM completion without holding their own API key). The	COMMENT
MEDIUM	app/electron/agent/model-context-windows.ts	1	// Task #41: model-aware context window registry.	COMMENT
MEDIUM	app/electron/agent/room-cli-seat.ts	41	// One-shot, non-agentic dispatch: no resume cursor and no steering channel, so every turn	COMMENT
MEDIUM	app/electron/agent/model-context-windows.test.ts	2	// Task #41: model-aware context window scaling. Proves the registry returns real	COMMENT
MEDIUM	app/electron/agent/pi-cli.ts	11	// - `agent_end` marks the whole agentic run complete; stdin EOF then exits the process	COMMENT
MEDIUM	app/src/components/Board.tsx	421	// Build routes by the ticket's chosen execution mode (#55): room → multi-agent	COMMENT
MEDIUM	app/src/components/WorkspaceDock.tsx	411	{/* Loop Mode is rooms-only (rescope #56): multi-agent surfaces loop; a solo	CODE
MEDIUM	app/src/lib/workbench-verdict.ts	6	// Pure derivation over the agentic run contract; ThreadPanel renders it.	COMMENT
MEDIUM	web/tensorfold_web/recipes.py	36	window: int \| None = None # the context window the engine serves now, when it says	CODE

Cross-File Repetition6 hits · 30 pts

Severity	File	Snippet	Context
HIGH	tools/zig/glm_ocr_reference.py	check the snapshot and the transformers sources against the pins and print their hashes; no model loads.	STRING
HIGH	tools/zig/lighton_ocr_reference.py	check the snapshot and the transformers sources against the pins and print their hashes; no model loads.	STRING
HIGH	tools/rerank/qwen3_reranker_oracle.py	check the snapshot and the transformers sources against the pins and print their hashes; no model loads.	STRING
HIGH	tools/zig/lighton_ocr_reference.py	refuse, before any model code runs, a snapshot or transformers install whose sources differ from the pins.	STRING
HIGH	tools/zig/oracle_qwen3_embedding.py	refuse, before any model code runs, a snapshot or transformers install whose sources differ from the pins.	STRING
HIGH	tools/rerank/qwen3_reranker_oracle.py	refuse, before any model code runs, a snapshot or transformers install whose sources differ from the pins.	STRING

Cross-Language Confusion (JS/TS)5 hits · 25 pts

Severity	File	Line	Snippet	Context
HIGH	app/electron/agent/bot-vm/guest.ts	9	elif value.startswith('/workspace/'): value=value[11:]	CODE
HIGH	app/electron/agent/bot-vm/guest.ts	10	elif value.startswith('/'): raise ValueError('Files must stay inside /workspace.')	CODE
HIGH	app/electron/agent/bot-vm/guest.ts	65	elif stat.S_ISREG(info.st_mode) and info.st_nlink==1: yield rel	CODE
HIGH	app/electron/agent/bot-vm/guest.ts	81	elif len(data)<MAX: data.extend(chunk[:MAX-len(data)])	CODE
HIGH	app/electron/agent/bot-vm/guest.ts	149	print(json.dumps({'ok':False,'output':'VM tool refused: '+str(e)[:500]}))	CODE

Fake / Example Data21 hits · 21 pts

Severity	File	Line	Snippet	Context
LOW	app/native/computer-use/Elements.swift	75	if let placeholder = node.placeholder { out["placeholder"] = placeholder }	CODE
LOW	app/electron/agent/planning-guard.test.ts	15	configurePlanningGuard({ confidentialTerms: () => ['Acme Corp'] })	CODE
LOW	app/electron/agent/planning-guard.test.ts	56	for (const leaked of ['jane.roe@example.com', 'Acme Corp', workspace, 'FILE BODY', 'secret.txt']) assert.ok(!sent.in	CODE
LOW	app/electron/agent/outbound-redaction.test.ts	11	terms: ['Acme Corp', 'Project Falcon'],	CODE
LOW	app/electron/agent/approval-policy.test.ts	29	recipientOrPerson: 'user@example.com',	CODE
LOW	app/electron/agent/approval-policy.test.ts	42	recipientOrPerson: 'user@example.com',	CODE
LOW	app/electron/agent/approval-policy.test.ts	182	const draft = approvalPolicyScope('tool', 'email_compose', { mode: 'draft', to: 'user@example.com', subject: 'Update'	CODE
LOW	app/electron/agent/approval-policy.test.ts	183	const send = approvalPolicyScope('tool', 'email_compose', { mode: 'send', to: 'user@example.com', subject: 'Update' })	CODE
LOW	app/electron/agent/approval-policy.test.ts	222	const send = approvalPolicyScope('connector', 'email:send_requested', { actor: 'user@example.com', threadKey: 'email:t	CODE
LOW	app/electron/agent/approval-policy.test.ts	224	const reply = approvalPolicyScope('connector', 'email:reply_requested', { actor: 'user@example.com', threadKey: 'email	CODE
LOW	app/electron/agent/export.test.ts	59	assert.ok(!r.text.includes('user@example.com'), 'email removed')	CODE
LOW	app/electron/agent/git-hygiene.ts	29	const PLACEHOLDER_PATH_USERS = new Set(['example', 'demo', 'sample', 'placeholder', 'test'])	CODE
LOW	app/electron/agent/git-hygiene.ts	129	if (lower.includes('placeholder')) return false	CODE
LOW	app/electron/agent/cli-auth.test.ts	17	const cIn = parseAuthStatus('claude-cli', JSON.stringify({ loggedIn: true, email: 'user@example.com', subscriptionType:	CODE
LOW	app/electron/agent/cli-auth.test.ts	19	assert.ok((cIn.detail \|\| '').includes('user@example.com'), 'claude detail includes the account email')	CODE
LOW	app/electron/agent/planning-sandbox.test.ts	101	writeFileSync(path.join(authDir, 'oauth_creds.json'), '{"token":"placeholder"}')	CODE
LOW	app/electron/agent/engine/hub-network.test.ts	79	await assert.rejects(() => scoped('https://mirror.example.test/api/models', { headers: { Cookie: 'placeholder' } }), /	CODE
LOW	app/electron/agent/engine/hub-network.test.ts	80	await assert.rejects(() => scoped(new Request('https://mirror.example.test/api/models', { headers: { Authorization: 'p	CODE
LOW	app/electron/agent/engine/hub-endpoint.test.ts	41	const env = { HOME: '/placeholder', PATH: '/bin', HF_ENDPOINT: `${ENDPOINT}/`, HF_TOKEN: 'placeholder', OPENAI_API_KEY	CODE
LOW	app/electron/agent/engine/hub-endpoint.test.ts	70	const h = await makeHarness({ HF_ENDPOINT: `${ENDPOINT}/`, HF_TOKEN: 'placeholder', FAKE_PULL_FILES: '1', FAKE_PULL_SI	CODE
LOW	app/electron/main/host/browser-automation.ts	392	\|\| el.getAttribute('placeholder')	CODE

AI Slop Vocabulary7 hits · 19 pts

Severity	File	Line	Snippet	Context
MEDIUM	tools/zig/oracle_nemotron_chunked.py	59	_, first = once(ids, 1, drafts) # the harness's rule: decode time is the run past its first token	CODE
MEDIUM	app/electron/local-crypto.ts	78	// Retain a read-only fallback for a seamless one-time migration from the	COMMENT
MEDIUM	web/tensorfold_web/ui_dist/assets/index-cck1M0ft.js	49	`).replace(Rv,"")}function Up(e,n){return n=$p(n),$p(e)===n}function kt(e,n,a,i,u,h){switch(a){case"children":if(typeof	CODE
MEDIUM⚡	web/tensorfold_web/ui_dist/assets/index-cck1M0ft.js	63	`).map(B=>B.trim()).filter(Boolean),w=(M=s==null?void 0:s.startup)==null?void 0:M.streams,z=async(B,Y)=>{var ie,ge,fe,E,	CODE
MEDIUM⚡	web/tensorfold_web/ui_dist/assets/index-cck1M0ft.js	63	`).map(B=>B.trim()).filter(Boolean),w=(M=s==null?void 0:s.startup)==null?void 0:M.streams,z=async(B,Y)=>{var ie,ge,fe,E,	CODE
MEDIUM	.github/workflows/no-gpu.yml	139	# Cortheon's readers of untrusted web bytes under the fuzz harness: seeds, 100,000 edits, linear time.	COMMENT
MEDIUM	.github/workflows/no-gpu.yml	195	# The server goldens and the Cortheon fuzz harness on Windows too; the goldens skip the signal-driven cases.	COMMENT

Verbosity Indicators3 hits · 6 pts

Severity	File	Line	Snippet	Context
LOW	app/electron/agent/compaction-prepass.ts	99	// Step 3: strip stale image parts (array content only). Recent messages skip this.	COMMENT
LOW⚡	app/electron/agent/compaction-prepass.ts	113	// Step 1: dedupe byte-identical tool results (applies regardless of recency —	COMMENT
LOW⚡	app/electron/agent/compaction-prepass.ts	123	// Step 2: collapse old (non-recent) large tool results into a one-liner.	COMMENT

Structural Annotation Overuse3 hits · 6 pts

Severity	File	Line	Snippet	Context
LOW	app/electron/agent/compaction-prepass.ts	99	// Step 3: strip stale image parts (array content only). Recent messages skip this.	COMMENT
LOW⚡	app/electron/agent/compaction-prepass.ts	113	// Step 1: dedupe byte-identical tool results (applies regardless of recency —	COMMENT
LOW⚡	app/electron/agent/compaction-prepass.ts	123	// Step 2: collapse old (non-recent) large tool results into a one-liner.	COMMENT

AI Structural Patterns6 hits · 6 pts

Severity	File	Line	Context
LOW	tools/zig/prefill_swap.py	111	CODE
LOW	tools/zig/test_bench_sessions.py	43	CODE
LOW	web/tensorfold_web/bench.py	158	CODE
LOW	web/tensorfold_web/bench.py	169	CODE
LOW	web/tensorfold_web/engine_metrics.py	135	CODE
LOW	web/tests/test_usage.py	7	CODE

Modern Structural Boilerplate5 hits · 5 pts

Severity	File	Line	Snippet	Context
LOW	web/tensorfold_web/server.py	546	__all__ = ['ENGINE_SETTINGS', 'LOGS_COOKIE', 'LOGS_STREAM', 'LOOPBACK_NAMES', 'REDEEM_BYTES', 'TOKEN_HEADER', 'UI_DIST',	CODE
LOW	web/tensorfold_web/living.py	428	__all__ = ['FACTS_SCHEMA', 'KEPT', 'LEARNABLE', 'NAME', 'ONLY', 'PREFIX', 'PREVIEW_SYSTEM', 'Item', 'Job', 'Target', 'Te	CODE
LOW	web/tensorfold_web/bench.py	405	__all__ = ['GROWTH', 'LEVELS', 'LOAD_LIMIT_S', 'LOAD_MIN_REQUESTS', 'LOAD_SHARE', 'LOAD_TOKENS', 'LOAD_TTFT_LIMIT_S', 'M	CODE
LOW	web/tensorfold_web/engine.py	560	__all__ = ['COUNTERS', 'GIB', 'KV_FILL', 'LIMIT_ENV', 'LINE_MAX', 'LOG_LINES', 'LOG_MAX_BYTES', 'METRICS', 'Engine', 'He	CODE
LOW	web/tensorfold_web/report.py	342	__all__ = ['CSS', 'KIND', 'LOGO', 'STATUS', '_bars', '_e', '_identical', '_load_chart', '_logo', '_power_chart', '_sweep	CODE

Dead Code1 hit · 2 pts

Severity	File	Line	Snippet	Context
MEDIUM	web/tests/test_living_storage.py	128		CODE

ashhart/TensorFold

Open-Source Code Quality, Security and Technical Debt Review

Risk Review · Payload v1

What These Metrics Mean

Pattern-Signal History

Severity Breakdown

Directory Score Breakdown

Pattern Findings