A hive mind communication platform
This report summarizes scanner evidence for block/buzz, a Rust project with 35,842 GitHub stars. SynthScan examined 1,507,363 lines of code across 4525 source files, recording 6967 pattern matches distributed across 18 syntactic categories. The legacy adjusted pattern signal is 7.0 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 5083 finding(s).
Are imports declared and package/API names verified? 91 finding(s).
Are wrappers, guards, and repeated structures necessary? 3713 finding(s).
Which changes need focused human review? 6967 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 6967 distinct pattern matches across 18 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | docker-compose.harness.yml | 1 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | docker-compose.harness.yml | 13 | # ============================================================================= | COMMENT |
| MEDIUM | crates/buzz-db/src/store/admin_moderation.rs | 999 | // ── activeAction LATERAL join ───────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-db/src/store/admin_moderation.rs | 1153 | // ── Feedback severed-provenance survival ────────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-db/src/store/admin_moderation.rs | 1239 | // ── Wire contract: nullable action fields are required-nullable ─────────── | COMMENT |
| MEDIUM | crates/buzz-db/src/store/channel_members.rs | 200 | // ── Transaction-level membership helpers (for commit_participant_join) ──────── | COMMENT |
| MEDIUM | crates/buzz-db/src/store/channel_members.rs | 302 | // ── End transaction-level helpers ───────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-db/src/store/event.rs | 3872 | // ─── canvas CAS tests ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-db/src/store/relay_admin_actions.rs | 2414 | // ── Racing moderators ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-db/src/store/relay_admin_actions.rs | 2456 | // ── Same request_id idempotent retry ────────────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-db/src/store/relay_admin_actions.rs | 2486 | // ── Different request_id against processing report → conflict ───────────── | COMMENT |
| MEDIUM | crates/buzz-db/src/store/relay_admin_actions.rs | 2506 | // ── Mutation + step_marker atomicity: cancel rejected post-marker ───────── | COMMENT |
| MEDIUM | crates/buzz-db/src/store/relay_admin_actions.rs | 2550 | // ── Crash re-drive: step_marker skips the mutation, finalize succeeds ───── | COMMENT |
| MEDIUM | crates/buzz-db/src/store/relay_admin_actions.rs | 2609 | // ── Decision-only atomicity: no orphan audit row on concurrent close ─────── | COMMENT |
| MEDIUM | crates/buzz-db/src/store/relay_admin_actions.rs | 2667 | // ── Outbox rows created in finalize_success, NOT at claim time ──────────── | COMMENT |
| MEDIUM | crates/buzz-db/src/store/relay_admin_actions.rs | 2713 | // ── Affected-user notice: actioned user hears the truth ─────────────────── | COMMENT |
| MEDIUM | crates/buzz-db/src/store/relay_admin_actions.rs | 2951 | // ── record_failure lease fence: stale worker cannot strand the report ───── | COMMENT |
| MEDIUM | crates/buzz-db/src/store/relay_admin_actions.rs | 3020 | // ── Finalize fences: requires step_marker + active_action_id ───────────── | COMMENT |
| MEDIUM | crates/buzz-db/src/store/relay_admin_actions.rs | 3048 | // ── Action lease: concurrent drivers cannot both run mutation branch ────── | COMMENT |
| MEDIUM | crates/buzz-db/src/store/relay_admin_actions.rs | 3100 | // ── execute_ban_with_marker: atomic mutation + step marker ───────────────── | COMMENT |
| MEDIUM | crates/buzz-db/src/store/relay_admin_actions.rs | 3159 | // ── execute_delete_with_marker: thread counters ───────────────────────── | COMMENT |
| MEDIUM | crates/buzz-db/src/store/relay_admin_actions.rs | 3689 | // ── execute_kick_with_marker: provenance — Removed vs AlreadyGone ───────── | COMMENT |
| MEDIUM | crates/buzz-db/src/store/relay_admin_actions.rs | 3905 | // ── Stranded action recovery: claim_stranded_action_batch ───────────────── | COMMENT |
| MEDIUM | crates/buzz-db/src/store/relay_admin_actions.rs | 3941 | // ── Deploy kick member distinguishes Removed vs AlreadyGone ────────────── | COMMENT |
| MEDIUM | crates/buzz-db/src/store/relay_admin_actions.rs | 4004 | // ── Reopen: terminal → open CAS + durable audit row ─────────────────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/config.rs | 2709 | // ── Session policy parsing + default ────────────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/config.rs | 2745 | // ── Multiple-event-handling validation + default ────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/config.rs | 2798 | // ── Idle timeout constant + guard (PR #935) ─────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/config.rs | 2798 | // ── Idle timeout constant + guard (PR #935) ─────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/lib.rs | 2790 | // ── Setup-mode early branch ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/lib.rs | 4429 | // ── signal_in_flight_task ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/lib.rs | 4655 | // ── try_native_steer fallback-log tests ─────────────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/lib.rs | 4938 | // ── dispatch_pending ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/lib.rs | 6146 | // ── spawn_and_init ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/lib.rs | 8434 | // ── DM hardening ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/lib.rs | 8518 | // ── sibling verdict caching ─────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/lib.rs | 8896 | // ── is_dm_channel resolution ────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/lib.rs | 12705 | // ── is_auth_error classification ─────────────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/lib.rs | 12758 | // ── auth error dead-letter behavior ──────────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/setup_mode.rs | 46 | // ── Availability mirror ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/setup_mode.rs | 81 | // ── Payload ─────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/setup_mode.rs | 312 | // ── setup listener ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/setup_mode.rs | 733 | // ── Tests ───────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/setup_mode.rs | 1191 | // ── config-invalid footer tests ──────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/setup_mode.rs | 1270 | // ── sentinel block tests ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/setup_mode.rs | 1367 | // ── should_nudge_for_event gate tests ───────────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/setup_mode.rs | 1409 | // ── availability round-trip tests ───────────────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/queue.rs | 1112 | // ── Goose-native steer withhold (side table) ────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/queue.rs | 2800 | // ── Step 2: scope partitioning ────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/queue.rs | 3370 | // ── Test 9b: requeue preserves events ──────────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/queue.rs | 3397 | // ── Retry-throttled work must block idle-pool-sleep teardown ──────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/queue.rs | 4981 | // ── Human-aware reply anchoring ────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/queue.rs | 5731 | // ── Test: requeue_as_cancelled fallback (no new events) ────────────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/queue.rs | 6264 | // ── Goose-native steer withhold tests ─────────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/queue.rs | 6456 | // ── format_prompt: agent_canvas ───────────────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/queue.rs | 6747 | // ── kind:40003 edit routing ───────────────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/queue.rs | 6939 | // ── F2 case 2.5: steer renewal is monotonic across repeated steers ─────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/queue.rs | 6965 | // ── channel description delivery ───────────────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/usage.rs | 1123 | // ── Delta computation: non-happy paths ───────────────────────────────── | COMMENT |
| MEDIUM | crates/buzz-acp/src/usage.rs | 1251 | // ── Happy path ───────────────────────────────────────────────────────── | COMMENT |
| 1721 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Cargo.toml | 181 | codegen-units = 1 | COMMENT |
| LOW | deny.toml | 1 | [advisories] | COMMENT |
| LOW | lefthook.yml | 1 | # Glob patterns below mirror the `changes` job's dorny/paths-filter groups in | COMMENT |
| LOW | lefthook.yml | 21 | # constants. Running the full desktop suite on every crate push would be | COMMENT |
| LOW | docker-compose.harness.yml | 1 | # ============================================================================= | COMMENT |
| LOW | pnpm-workspace.yaml | 1 | packages: | COMMENT |
| LOW | admin-web/src/api.ts | 21 | /// same-URL requests in the same second produce byte-identical events (the | COMMENT |
| LOW | crates/ifc-core/src/lib.rs | 1 | //! Generic information-flow control over reader-set confidentiality labels. | COMMENT |
| LOW | crates/ifc-core/src/lib.rs | 21 | //! flow.check_egress(&public), | COMMENT |
| LOW | crates/ifc-core/src/lib.rs | 201 | formatter.write_str("restricted label has no authorized readers") | COMMENT |
| LOW | crates/buzz-db/tests/observability_source.rs | 881 | COMMENT | |
| LOW | crates/buzz-db/src/lib.rs | 1 | #![deny(unsafe_code)] | COMMENT |
| LOW | crates/buzz-db/src/runtime/observability.rs | 1 | //! Bounded-cardinality database pressure instrumentation primitives. | COMMENT |
| LOW | crates/buzz-db/src/runtime/connection_observability.rs | 1 | //! Fixed-vocabulary metrics for writer-pool connection setup. | COMMENT |
| LOW | crates/buzz-db/src/runtime/replica_fence.rs | 1 | //! Replica freshness fence for keyset-cursor read routing. | COMMENT |
| LOW | crates/buzz-db/src/runtime/replica_fence.rs | 21 | //! observes `token >= M` on its own connection has, by WAL/storage replay | COMMENT |
| LOW | crates/buzz-db/src/runtime/replica_fence.rs | 41 | //! exact snapshot every follow-up statement in the request (page, | COMMENT |
| LOW | crates/buzz-db/src/runtime/replica_fence.rs | 81 | /// Shared holders are channel-event write transactions validating `created_at` | COMMENT |
| LOW | crates/buzz-db/src/runtime/replica_fence.rs | 101 | pub const PROBE_INTERVAL: Duration = Duration::from_millis(500); | COMMENT |
| LOW | crates/buzz-db/src/runtime/replica_fence.rs | 121 | // The retained window must outlast the staleness gate: if the ring held | COMMENT |
| LOW | crates/buzz-db/src/runtime/replica_fence.rs | 161 | /// The token went backwards within the same epoch — a restore that kept | COMMENT |
| LOW | crates/buzz-db/src/runtime/replica_fence.rs | 321 | COMMENT | |
| LOW | crates/buzz-db/src/runtime/replica_fence.rs | 541 | /// Errors that close the fence. All variants are logged and treated | COMMENT |
| LOW | crates/buzz-db/src/runtime/replica_fence.rs | 581 | COMMENT | |
| LOW | crates/buzz-db/src/runtime/replica_fence.rs | 601 | // conservative direction (a long autovacuum merely holds the fence | COMMENT |
| LOW | crates/buzz-db/src/runtime/replica_fence.rs | 721 | fence_wall: wall, | COMMENT |
| LOW | crates/buzz-db/src/runtime/admitted_tx.rs | 21 | /// Outside this crate the value exposes neither the inner transaction nor its | COMMENT |
| LOW | crates/buzz-db/src/runtime/admitted_tx.rs | 41 | /// ```compile_fail | COMMENT |
| LOW | crates/buzz-db/src/runtime/admitted_tx.rs | 61 | /// ``` | COMMENT |
| LOW | crates/buzz-db/src/runtime/mod.rs | 201 | /// route here (see [`Db::read`]); locks, transactions, and anything | COMMENT |
| LOW | crates/buzz-db/src/runtime/mod.rs | 221 | /// `None` disables the bounded arm entirely (the rollout default) — | COMMENT |
| LOW | crates/buzz-db/src/runtime/mod.rs | 241 | /// different replay position, and even the same connection advances its | COMMENT |
| LOW | crates/buzz-db/src/runtime/mod.rs | 261 | /// never holes — and never a 500 the writer could have served. | COMMENT |
| LOW | crates/buzz-db/src/runtime/mod.rs | 341 | COMMENT | |
| LOW | crates/buzz-db/src/runtime/mod.rs | 361 | /// COUNT builder (`event::count_events`) pin identically; if the | COMMENT |
| LOW | crates/buzz-db/src/runtime/mod.rs | 381 | COMMENT | |
| LOW | crates/buzz-db/src/runtime/mod.rs | 401 | /// global (channel-NULL) rows: it relies only on heartbeat commit order, | COMMENT |
| LOW | crates/buzz-db/src/runtime/mod.rs | 421 | /// Never read — the field exists so constructing this variant | COMMENT |
| LOW | crates/buzz-db/src/runtime/mod.rs | 461 | } | COMMENT |
| LOW | crates/buzz-db/src/runtime/mod.rs | 561 | /// The variants deliberately separate waiting for a pooled connection from | COMMENT |
| LOW | crates/buzz-db/src/runtime/mod.rs | 581 | pub struct DbConfig { | COMMENT |
| LOW | crates/buzz-db/src/runtime/mod.rs | 601 | pub max_lifetime_secs: u64, | COMMENT |
| LOW | crates/buzz-db/src/runtime/mod.rs | 861 | /// fast: a saturated reader pool that made routed reads wait the full | COMMENT |
| LOW | crates/buzz-db/src/runtime/mod.rs | 1001 | COMMENT | |
| LOW | crates/buzz-db/src/runtime/mod.rs | 1041 | /// The pool for lag-tolerant reads: the read replica when configured, | COMMENT |
| LOW | crates/buzz-db/src/runtime/mod.rs | 1061 | /// ONLY`, then observe the heartbeat token/epoch as the transaction's | COMMENT |
| LOW | crates/buzz-db/src/runtime/mod.rs | 1121 | // short acquire timeout (READER_ACQUIRE_TIMEOUT) makes this the | COMMENT |
| LOW | crates/buzz-db/src/runtime/mod.rs | 1301 | /// | COMMENT |
| LOW | crates/buzz-db/src/runtime/mod.rs | 1321 | max: self.read_max_connections, | COMMENT |
| LOW | crates/buzz-db/src/runtime/migration.rs | 61 | crate::channel::verify_channel_roster_fence_catalog(&mut *conn).await?; | COMMENT |
| LOW | crates/buzz-db/src/runtime/migration.rs | 2361 | /// SQL is still executing server-side. | COMMENT |
| LOW | crates/buzz-db/src/runtime/migration.rs | 2561 | .await | COMMENT |
| LOW | crates/buzz-db/src/runtime/tests.rs | 1881 | /// test refuses to take that on faith and re-proves it through the | COMMENT |
| LOW | crates/buzz-db/src/runtime/tests.rs | 1901 | /// | COMMENT |
| LOW | crates/buzz-db/src/runtime/cold_start.rs | 1 | //! Bounded cold database startup for run-once operator workers. | COMMENT |
| LOW | crates/buzz-db/src/runtime/cold_start.rs | 41 | class: &'static str, | COMMENT |
| LOW | crates/buzz-db/src/store/relay_invite.rs | 1 | //! Use-limited relay invite persistence (v2 opaque tokens). | COMMENT |
| LOW | crates/buzz-db/src/store/relay_invite.rs | 201 | } | COMMENT |
| LOW | crates/buzz-db/src/store/feed.rs | 1 | //! Feed-specific DB queries for the Home Feed feature. | COMMENT |
| LOW | crates/buzz-db/src/store/api_token.rs | 601 | owner_pubkey, | COMMENT |
| 2784 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | web/src/shared/lib/buzz-download.ts | 95 | export async function detectBuzzDownloadPlatform( | CODE |
| LOW | web/src/shared/lib/buzz-download.ts | 160 | export async function resolveBuzzDownloadUrlForPlatform( | CODE |
| LOW | desktop/tests/e2e/project-cold-start.spec.ts | 60 | async function waitForProjectEnumeration( | CODE |
| LOW | desktop/tests/e2e/huddle-thread-load-failure.spec.ts | 30 | async function waitForMockLiveSubscription(page: Page, channelName: string) { | CODE |
| LOW | desktop/tests/e2e/huddle-thread-load-failure.spec.ts | 49 | async function installPerRootThreadFailureSwitch(page: Page) { | CODE |
| LOW | desktop/tests/e2e/navigation.spec.ts | 20 | async function hoverUntilMetadataTooltip( | CODE |
| LOW | desktop/tests/e2e/threadpane-ultrawide.spec.ts | 8 | async function waitForMockLiveSubscription( | CODE |
| LOW | desktop/tests/e2e/persistent-agent-audience.spec.ts | 21 | async function keepMentionedAgentsPinned(page: Page) { | CODE |
| LOW | desktop/tests/e2e/persistent-agent-audience.spec.ts | 52 | async function waitForMockLiveSubscription(page: Page, channelName: string) { | CODE |
| LOW | desktop/tests/e2e/persistent-agent-audience.spec.ts | 113 | async function readPersistedDraftContent(page: Page, draftKey: string) { | CODE |
| LOW | desktop/tests/e2e/persistent-agent-audience.spec.ts | 127 | async function readOutgoingMentionPubkeys(page: Page, content: string) { | CODE |
| LOW | desktop/tests/e2e/channel-composer-overflow.spec.ts | 15 | async function waitForMockLiveSubscription( | CODE |
| LOW | desktop/tests/e2e/message-copy-link.spec.ts | 16 | async function expectCopyLinkUnavailable(row: Locator, messageId: string) { | CODE |
| LOW | desktop/tests/e2e/profile.spec.ts | 27 | async function selectFirstEmojiFromPicker(page: Page) { | CODE |
| LOW | desktop/tests/e2e/profile.spec.ts | 46 | async function waitForAvatarEditorToClose(page: Page) { | CODE |
| LOW | desktop/tests/e2e/profile.spec.ts | 78 | async function readVisibleProfileSurface(page: Page) { | CODE |
| LOW | desktop/tests/e2e/profile.spec.ts | 143 | async function readOwnedAgentProfileContract(page: Page) { | CODE |
| LOW | desktop/tests/e2e/profile.spec.ts | 255 | async function waitForMockLiveSubscription( | CODE |
| LOW | desktop/tests/e2e/messaging.spec.ts | 15 | async function waitForReadyComposerSnapshots( | CODE |
| LOW | desktop/tests/e2e/messaging.spec.ts | 34 | async function expectThreadReplyUnobscured(row: Locator) { | CODE |
| LOW | desktop/tests/e2e/messaging.spec.ts | 61 | async function measureThreadSummaryGeometry(summaryRow: Locator) { | CODE |
| LOW | desktop/tests/e2e/thread-focus-mode.spec.ts | 33 | async function scrollToMiddleVisibleMessage( | CODE |
| LOW | desktop/tests/e2e/thread-focus-mode.spec.ts | 78 | async function expectChannelHeaderUnobscured( | CODE |
| LOW | desktop/tests/e2e/smoke.spec.ts | 43 | async function focusSidebarSearchWithShortcut( | CODE |
| LOW | desktop/tests/e2e/smoke.spec.ts | 96 | async function chooseSharedComputeProvider( | CODE |
| LOW | desktop/tests/e2e/persona-sync.spec.ts | 85 | async function listenForAgentsDataChanged( | CODE |
| LOW | desktop/tests/e2e/badge.spec.ts | 9 | async function waitForMockLiveSubscription( | CODE |
| LOW | desktop/tests/e2e/top-chrome-zoom-clearance.spec.ts | 55 | async function expectTopChromeFixedHeight( | CODE |
| LOW | desktop/tests/e2e/top-chrome-zoom-clearance.spec.ts | 65 | async function expectNavButtonsFixedSize( | CODE |
| LOW | desktop/tests/e2e/team-catalog-screenshots.spec.ts | 69 | function createPersonaCatalogEvent(input: { | CODE |
| LOW | desktop/tests/e2e/unread-pill.spec.ts | 5 | async function waitForMockLiveSubscription( | CODE |
| LOW | …op/tests/e2e/project-conversation-load-failure.spec.ts | 41 | async function installThreadFailureSwitch(page: Page) { | CODE |
| LOW | …op/tests/e2e/onboarding-docked-cta-screenshots.spec.ts | 65 | async function expectProfileFooterMatchesContentGutters(page: Page) { | CODE |
| LOW | …op/tests/e2e/onboarding-docked-cta-screenshots.spec.ts | 91 | async function expectHorizontalCardTransition( | CODE |
| LOW | desktop/tests/e2e/channel-mute.spec.ts | 29 | async function waitForMockLiveSubscription( | CODE |
| LOW | desktop/tests/e2e/project-pr-review.spec.ts | 12 | async function expectSinglePrimaryTextColumn(row: Locator) { | CODE |
| LOW | desktop/tests/e2e/project-pr-review.spec.ts | 37 | async function waitForMockLiveSubscription( | CODE |
| LOW | desktop/tests/e2e/project-pr-review.spec.ts | 90 | async function expectLocalRepositoryOpenAction( | CODE |
| LOW | desktop/tests/e2e/thread-load-failure.spec.ts | 26 | async function installThreadFailureSwitch(page: Page) { | CODE |
| LOW | desktop/tests/e2e/inbox-refactor-screenshots.spec.ts | 37 | async function seedConversationPreferences( | CODE |
| LOW | desktop/tests/e2e/inbox-refactor-screenshots.spec.ts | 56 | async function applyConversationPreferences( | CODE |
| LOW | desktop/tests/e2e/voice-note.spec.ts | 17 | async function waitForMockLiveSubscription(page: Page, channelName: string) { | CODE |
| LOW | desktop/tests/e2e/workflow-title-stability.spec.ts | 65 | async function finishRiskyActivationIfShown(page: Page, dialog: Locator) { | CODE |
| LOW | desktop/tests/e2e/where-to-run-config.spec.ts | 91 | async function openCreateDialogOnProvider(page: Page) { | CODE |
| LOW | desktop/tests/e2e/bestie.spec.ts | 18 | async function waitForMockLiveSubscription( | CODE |
| LOW | desktop/tests/e2e/live-broadcast-reply-timeline.spec.ts | 38 | async function waitForMockLiveSubscription( | CODE |
| LOW | desktop/tests/e2e/warm-switch-markdown.perf.ts | 93 | async function waitForMockLiveSubscription( | CODE |
| LOW | desktop/tests/e2e/timeline-no-shift.spec.ts | 18 | async function waitForMockTimelineBridge(page: Page) { | CODE |
| LOW | desktop/tests/e2e/timeline-no-shift.spec.ts | 197 | function expectAnchorOrderUnchanged( | CODE |
| LOW | desktop/tests/e2e/community-rail.spec.ts | 28 | async function expectContentSurfaceHorizontalGutters( | CODE |
| LOW | desktop/tests/e2e/channel-sort.spec.ts | 31 | async function waitForMockLiveSubscription(page: Page, channelName: string) { | CODE |
| LOW | desktop/tests/e2e/projects-v3-screenshots.spec.ts | 8 | async function expectSinglePrimaryTextColumn(row: Locator) { | CODE |
| LOW | desktop/tests/e2e/projects-v3-screenshots.spec.ts | 22 | async function expectProjectContextGroups( | CODE |
| LOW | …ts/e2e/hosted-communities-settings-screenshots.spec.ts | 20 | async function openHostedCommunitiesSettings( | CODE |
| LOW | desktop/tests/e2e/sidebar-relay-card.spec.ts | 106 | async function expectGenericReconnectCard(page: Page) { | CODE |
| LOW | desktop/tests/e2e/thread-reply-anchor-roleplay.spec.ts | 15 | async function waitForMockLiveSubscription( | CODE |
| LOW | desktop/tests/e2e/thread-unread.spec.ts | 11 | async function waitForMockLiveSubscription( | CODE |
| LOW | desktop/tests/e2e/channels.spec.ts | 79 | async function hasOutgoingEventWithContent( | CODE |
| LOW | desktop/tests/e2e/channels.spec.ts | 210 | async function expectMembersTriggerCount( | CODE |
| LOW | desktop/tests/e2e/channels.spec.ts | 220 | async function waitForMockLiveSubscription( | CODE |
| 1857 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | ARCHITECTURE.md | 220 | ### Step 0: Community Binding | COMMENT |
| LOW⚡ | ARCHITECTURE.md | 230 | ### Step 1: Semaphore Acquire | COMMENT |
| LOW⚡ | ARCHITECTURE.md | 234 | ### Step 2: NIP-42 Challenge | COMMENT |
| LOW⚡ | ARCHITECTURE.md | 238 | ### Step 3: Authentication | COMMENT |
| LOW | ARCHITECTURE.md | 249 | ### Step 4: Active Loops | COMMENT |
| LOW | ARCHITECTURE.md | 261 | ### Step 5: Cleanup | COMMENT |
| LOW | crates/buzz-db/src/store/relay_admin_actions.rs | 1489 | // Step 2: assign a unique token to each row via individual UPDATE statements. | COMMENT |
| LOW | crates/buzz-db/src/store/relay_admin_actions.rs | 1557 | // Step 1: find candidate IDs (SKIP LOCKED prevents double-claim across pods). | COMMENT |
| LOW | crates/buzz-db/src/store/relay_admin_actions.rs | 1576 | // Step 2: assign a unique token to each row via individual UPDATE statements. | COMMENT |
| LOW | crates/buzz-acp/src/pool.rs | 5576 | // Step 1: query our kind:7 reactions targeting this event. | COMMENT |
| LOW | crates/buzz-acp/src/pool.rs | 5616 | // Step 2: build and submit a signed kind:5 deletion for the reaction event. | COMMENT |
| LOW | crates/buzz-acp/src/acp.rs | 1108 | // Step 1: respond to any pending permission request with "cancelled", | COMMENT |
| LOW | crates/buzz-acp/src/acp.rs | 1123 | // Step 2: send session/cancel notification (no id) | COMMENT |
| LOW⚡ | crates/buzz-acp/src/relay.rs | 867 | // Step 2: Fetch metadata (kind:39000) for discovered channels. | COMMENT |
| LOW⚡ | crates/buzz-acp/src/relay.rs | 877 | // Step 3: Build the final subscribe set, skipping archived channels. | COMMENT |
| LOW | crates/buzz-acp/src/relay.rs | 831 | // Step 1: Find all channels where agent is a member (kind:39002 with #p tag). | COMMENT |
| LOW⚡ | crates/buzz-persona/src/pack.rs | 324 | // Step 0: reject absolute paths (Unix `/` prefix or Windows drive letters). | COMMENT |
| LOW⚡ | crates/buzz-persona/src/pack.rs | 333 | // Step 1: reject `..` components eagerly. | COMMENT |
| LOW⚡ | crates/buzz-persona/src/pack.rs | 343 | // Step 2: canonicalize (resolves symlinks). | COMMENT |
| LOW | crates/buzz-persona/src/pack.rs | 358 | // Step 3: must be inside pack_root. | COMMENT |
| LOW⚡ | crates/buzz-persona/src/validate.rs | 137 | /// Step 1: delegate all structural validation to `load_pack()`. If loading | COMMENT |
| LOW⚡ | crates/buzz-persona/src/validate.rs | 140 | /// Step 2: run advisory checks on the loaded pack. These inspect raw files | COMMENT |
| LOW⚡ | crates/buzz-persona/src/validate.rs | 146 | // Step 1: structural validation via the loader. | COMMENT |
| LOW⚡ | crates/buzz-persona/src/validate.rs | 155 | // Step 2: semantic checks on the loaded pack. | COMMENT |
| LOW⚡ | crates/buzz-persona/src/validate.rs | 158 | // Step 3: advisory checks on raw files. | COMMENT |
| LOW | crates/buzz-cli/src/commands/channels.rs | 38 | // Step 1: find channel IDs where we're a member (kind:39002) | COMMENT |
| LOW | crates/buzz-cli/src/commands/channels.rs | 56 | // Step 2: fetch kind:39000 metadata for those channels. | COMMENT |
| LOW | crates/buzz-test-client/tests/e2e_relay.rs | 1096 | // Step 1: Connect and publish kind:0 with a valid nip05 handle. | COMMENT |
| LOW | crates/buzz-test-client/tests/e2e_relay.rs | 1120 | // Step 2: Verify the kind:0 content was stored via POST /query. | COMMENT |
| LOW | crates/buzz-test-client/tests/e2e_relay.rs | 1154 | // Step 3: Verify NIP-05 resolves via /.well-known/nostr.json. | COMMENT |
| LOW | crates/buzz-test-client/tests/e2e_relay.rs | 1172 | // Step 4: Publish another kind:0 with an off-domain nip05 (should be cleared). | COMMENT |
| LOW | crates/buzz-test-client/tests/e2e_relay.rs | 1197 | // Step 5: Verify the handle was CLEARED — NIP-05 should no longer resolve | COMMENT |
| LOW⚡ | crates/buzz-test-client/tests/e2e_relay.rs | 3045 | // Step 1: strip the owner. | COMMENT |
| LOW⚡ | crates/buzz-test-client/tests/e2e_relay.rs | 3052 | // Step 2: attacker tries to make itself owner. | COMMENT |
| LOW⚡ | crates/buzz-test-client/tests/e2e_relay.rs | 3059 | // Step 3: ex-owner tries to restore itself. | COMMENT |
| LOW | crates/buzz-core/src/pairing/NIP-AB.md | 202 | ### Step 1: Source Subscribes | COMMENT |
| LOW | crates/buzz-core/src/pairing/NIP-AB.md | 210 | ### Step 2: Target Sends Offer | COMMENT |
| LOW | crates/buzz-core/src/pairing/NIP-AB.md | 250 | ### Step 3: SAS Verification | COMMENT |
| LOW | crates/buzz-core/src/pairing/NIP-AB.md | 320 | ### Step 4: Payload Transfer | COMMENT |
| LOW | crates/buzz-core/src/pairing/NIP-AB.md | 371 | ### Step 5: Completion | COMMENT |
| LOW | crates/buzz-pair-relay/src/lib.rs | 549 | // Step 1: build the NIP-01 commitment and hash it. | COMMENT |
| LOW⚡ | crates/buzz-pair-relay/src/lib.rs | 562 | // Step 2: verify hash matches claimed id. | COMMENT |
| LOW⚡ | crates/buzz-pair-relay/src/lib.rs | 568 | // Step 3: parse pubkey as x-only. | COMMENT |
| LOW⚡ | crates/buzz-pair-relay/src/lib.rs | 573 | // Step 4: parse sig. | COMMENT |
| LOW⚡ | crates/buzz-pair-relay/src/lib.rs | 577 | // Step 5: verify. | COMMENT |
| LOW⚡ | crates/buzz-auth/src/nip_fi/command.rs | 1273 | // Step 1: second command with jti_b → 503 (capacity full). | COMMENT |
| LOW⚡ | crates/buzz-auth/src/nip_fi/command.rs | 1276 | // Step 3: retry with the same jti_b → must succeed (jti was NOT burned). | COMMENT |
| LOW | crates/buzz-auth/src/nip_fi/command.rs | 499 | /// Step 7: record the jti and deny entry; cannot fail. | COMMENT |
| LOW⚡ | crates/buzz-auth/src/nip_fi/jwks/tests.rs | 1559 | // Step 1: warm cache with A1 JWKS (first scripted fetch at T0). | COMMENT |
| LOW⚡ | crates/buzz-auth/src/nip_fi/jwks/tests.rs | 1565 | // Step 2: build the ONE long-lived verifier. | COMMENT |
| LOW⚡ | crates/buzz-auth/src/nip_fi/jwks/tests.rs | 1588 | // Step 3: advance clock past A1's original hard deadline (no sleep). | COMMENT |
| LOW⚡ | crates/buzz-auth/src/nip_fi/jwks/tests.rs | 1591 | // Step 4: re-fetch through the SAME shared source. | COMMENT |
| LOW | crates/buzz-auth/src/nip_fi/jwks/tests.rs | 1607 | // Step 5: the SAME unchanged verifier reflects A2 keys. | COMMENT |
| LOW⚡ | crates/buzz-relay/src/nip_fi_http.rs | 434 | // Step 6: key pairing — assertion.asserted_key MUST equal proven NIP-98 key. | COMMENT |
| LOW⚡ | crates/buzz-relay/src/nip_fi_http.rs | 442 | // Step 7: deny-map check — (iss, pubkey) must not be in an active deny | COMMENT |
| LOW | crates/buzz-relay/src/nip_fi_http.rs | 344 | // Step 8: admit. | COMMENT |
| LOW | crates/buzz-relay/src/nip_fi_http.rs | 414 | // Step 3: NIP-98. Failure is a NIP-FI DenialClass, not a legacy error. | COMMENT |
| LOW⚡ | crates/buzz-relay/src/nip_fi_gate.rs | 188 | // Step 1: queue the denial frame (terminal delivery, no lock held). | COMMENT |
| LOW⚡ | crates/buzz-relay/src/nip_fi_gate.rs | 190 | // Step 2: cancel the socket immediately — never waits for a permit. | COMMENT |
| LOW⚡ | crates/buzz-relay/src/audio/handler.rs | 14109 | // Step 1: write Bob's bootstrap FIRST to ctrl_tx (as the handler does, | COMMENT |
| 53 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | crates/buzz-db/src/store/relay_admin_actions.rs | 1489 | // Step 2: assign a unique token to each row via individual UPDATE statements. | COMMENT |
| LOW | crates/buzz-db/src/store/relay_admin_actions.rs | 1557 | // Step 1: find candidate IDs (SKIP LOCKED prevents double-claim across pods). | COMMENT |
| LOW | crates/buzz-db/src/store/relay_admin_actions.rs | 1576 | // Step 2: assign a unique token to each row via individual UPDATE statements. | COMMENT |
| LOW | crates/buzz-acp/src/pool.rs | 5576 | // Step 1: query our kind:7 reactions targeting this event. | COMMENT |
| LOW | crates/buzz-acp/src/pool.rs | 5616 | // Step 2: build and submit a signed kind:5 deletion for the reaction event. | COMMENT |
| LOW | crates/buzz-acp/src/acp.rs | 1108 | // Step 1: respond to any pending permission request with "cancelled", | COMMENT |
| LOW | crates/buzz-acp/src/acp.rs | 1123 | // Step 2: send session/cancel notification (no id) | COMMENT |
| LOW⚡ | crates/buzz-acp/src/relay.rs | 867 | // Step 2: Fetch metadata (kind:39000) for discovered channels. | COMMENT |
| LOW⚡ | crates/buzz-acp/src/relay.rs | 877 | // Step 3: Build the final subscribe set, skipping archived channels. | COMMENT |
| LOW | crates/buzz-acp/src/relay.rs | 831 | // Step 1: Find all channels where agent is a member (kind:39002 with #p tag). | COMMENT |
| LOW⚡ | crates/buzz-persona/src/pack.rs | 324 | // Step 0: reject absolute paths (Unix `/` prefix or Windows drive letters). | COMMENT |
| LOW⚡ | crates/buzz-persona/src/pack.rs | 333 | // Step 1: reject `..` components eagerly. | COMMENT |
| LOW⚡ | crates/buzz-persona/src/pack.rs | 343 | // Step 2: canonicalize (resolves symlinks). | COMMENT |
| LOW | crates/buzz-persona/src/pack.rs | 358 | // Step 3: must be inside pack_root. | COMMENT |
| LOW⚡ | crates/buzz-persona/src/validate.rs | 137 | /// Step 1: delegate all structural validation to `load_pack()`. If loading | COMMENT |
| LOW⚡ | crates/buzz-persona/src/validate.rs | 140 | /// Step 2: run advisory checks on the loaded pack. These inspect raw files | COMMENT |
| LOW⚡ | crates/buzz-persona/src/validate.rs | 146 | // Step 1: structural validation via the loader. | COMMENT |
| LOW⚡ | crates/buzz-persona/src/validate.rs | 155 | // Step 2: semantic checks on the loaded pack. | COMMENT |
| LOW⚡ | crates/buzz-persona/src/validate.rs | 158 | // Step 3: advisory checks on raw files. | COMMENT |
| LOW | crates/buzz-cli/src/commands/channels.rs | 38 | // Step 1: find channel IDs where we're a member (kind:39002) | COMMENT |
| LOW | crates/buzz-cli/src/commands/channels.rs | 56 | // Step 2: fetch kind:39000 metadata for those channels. | COMMENT |
| LOW | crates/buzz-test-client/tests/e2e_relay.rs | 1096 | // Step 1: Connect and publish kind:0 with a valid nip05 handle. | COMMENT |
| LOW | crates/buzz-test-client/tests/e2e_relay.rs | 1120 | // Step 2: Verify the kind:0 content was stored via POST /query. | COMMENT |
| LOW | crates/buzz-test-client/tests/e2e_relay.rs | 1154 | // Step 3: Verify NIP-05 resolves via /.well-known/nostr.json. | COMMENT |
| LOW | crates/buzz-test-client/tests/e2e_relay.rs | 1172 | // Step 4: Publish another kind:0 with an off-domain nip05 (should be cleared). | COMMENT |
| LOW | crates/buzz-test-client/tests/e2e_relay.rs | 1197 | // Step 5: Verify the handle was CLEARED — NIP-05 should no longer resolve | COMMENT |
| LOW⚡ | crates/buzz-test-client/tests/e2e_relay.rs | 3045 | // Step 1: strip the owner. | COMMENT |
| LOW⚡ | crates/buzz-test-client/tests/e2e_relay.rs | 3052 | // Step 2: attacker tries to make itself owner. | COMMENT |
| LOW⚡ | crates/buzz-test-client/tests/e2e_relay.rs | 3059 | // Step 3: ex-owner tries to restore itself. | COMMENT |
| LOW | crates/buzz-pair-relay/src/lib.rs | 549 | // Step 1: build the NIP-01 commitment and hash it. | COMMENT |
| LOW⚡ | crates/buzz-pair-relay/src/lib.rs | 562 | // Step 2: verify hash matches claimed id. | COMMENT |
| LOW⚡ | crates/buzz-pair-relay/src/lib.rs | 568 | // Step 3: parse pubkey as x-only. | COMMENT |
| LOW⚡ | crates/buzz-pair-relay/src/lib.rs | 573 | // Step 4: parse sig. | COMMENT |
| LOW⚡ | crates/buzz-pair-relay/src/lib.rs | 577 | // Step 5: verify. | COMMENT |
| LOW⚡ | crates/buzz-auth/src/nip_fi/command.rs | 1273 | // Step 1: second command with jti_b → 503 (capacity full). | COMMENT |
| LOW⚡ | crates/buzz-auth/src/nip_fi/command.rs | 1274 | // Step 2: "expire" the first entry by using a future `now` that is | COMMENT |
| LOW⚡ | crates/buzz-auth/src/nip_fi/command.rs | 1276 | // Step 3: retry with the same jti_b → must succeed (jti was NOT burned). | COMMENT |
| LOW | crates/buzz-auth/src/nip_fi/command.rs | 499 | /// Step 7: record the jti and deny entry; cannot fail. | COMMENT |
| LOW⚡ | crates/buzz-auth/src/nip_fi/jwks/tests.rs | 1559 | // Step 1: warm cache with A1 JWKS (first scripted fetch at T0). | COMMENT |
| LOW⚡ | crates/buzz-auth/src/nip_fi/jwks/tests.rs | 1565 | // Step 2: build the ONE long-lived verifier. | COMMENT |
| LOW⚡ | crates/buzz-auth/src/nip_fi/jwks/tests.rs | 1588 | // Step 3: advance clock past A1's original hard deadline (no sleep). | COMMENT |
| LOW⚡ | crates/buzz-auth/src/nip_fi/jwks/tests.rs | 1591 | // Step 4: re-fetch through the SAME shared source. | COMMENT |
| LOW | crates/buzz-auth/src/nip_fi/jwks/tests.rs | 1607 | // Step 5: the SAME unchanged verifier reflects A2 keys. | COMMENT |
| LOW⚡ | crates/buzz-relay/src/nip_fi_http.rs | 434 | // Step 6: key pairing — assertion.asserted_key MUST equal proven NIP-98 key. | COMMENT |
| LOW⚡ | crates/buzz-relay/src/nip_fi_http.rs | 442 | // Step 7: deny-map check — (iss, pubkey) must not be in an active deny | COMMENT |
| LOW | crates/buzz-relay/src/nip_fi_http.rs | 344 | // Step 8: admit. | COMMENT |
| LOW | crates/buzz-relay/src/nip_fi_http.rs | 414 | // Step 3: NIP-98. Failure is a NIP-FI DenialClass, not a legacy error. | COMMENT |
| LOW⚡ | crates/buzz-relay/src/nip_fi_gate.rs | 188 | // Step 1: queue the denial frame (terminal delivery, no lock held). | COMMENT |
| LOW⚡ | crates/buzz-relay/src/nip_fi_gate.rs | 190 | // Step 2: cancel the socket immediately — never waits for a permit. | COMMENT |
| LOW⚡ | crates/buzz-relay/src/audio/handler.rs | 14109 | // Step 1: write Bob's bootstrap FIRST to ctrl_tx (as the handler does, | COMMENT |
| LOW⚡ | crates/buzz-relay/src/audio/handler.rs | 14115 | // Step 2: Carol's delta arrives concurrently (e.g. from read_owner_control | COMMENT |
| LOW⚡ | crates/buzz-relay/src/audio/handler.rs | 14122 | // Step 3: drain ctrl_rx and verify ordering. | COMMENT |
| LOW | crates/buzz-relay/src/audio/handler.rs | 5037 | // Step 1: spawn audio send_loop and yield so it parks in its select. | COMMENT |
| LOW | crates/buzz-relay/src/audio/handler.rs | 5049 | // Step 2: invoke the shared expiry constructor with an already-expired | COMMENT |
| LOW | crates/buzz-relay/src/audio/handler.rs | 5064 | // Step 3: await the writer and assert exact two-frame sequence. | COMMENT |
| LOW | crates/buzz-relay/src/api/bridge.rs | 4735 | // Step 1: unconditional first write — establishes head A. | COMMENT |
| LOW | crates/buzz-relay/src/api/bridge.rs | 4756 | // Step 2: write B on top of A — advances head so A is no longer current. | COMMENT |
| LOW | crates/buzz-relay/src/api/bridge.rs | 4780 | // Step 3: stale write C with the same `expected-revision: A` — A is no | COMMENT |
| LOW | crates/buzz-relay/src/api/admin/mod.rs | 6257 | // Step 1: claim DELETE action, advance to enforcing, acquire lease, | COMMENT |
| LOW | crates/buzz-relay/src/api/admin/mod.rs | 6331 | // Step 2: re-drive via recover_one — the actual action recovery worker | COMMENT |
| 43 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | docker-compose.harness.yml | 2 | # Isolated test-relay backing stack — GUI read-model overhaul harness (Dawn). | COMMENT |
| MEDIUM⚡ | docker-compose.harness.yml | 4 | # A SEPARATE Compose project (`buzz-harness`) so the shared :3000 relay and the | COMMENT |
| MEDIUM⚡ | docker-compose.harness.yml | 9 | # Bring up: docker compose -p buzz-harness -f docker-compose.harness.yml up -d | COMMENT |
| MEDIUM | crates/buzz-acp/tests/git_bootstrap.rs | 47 | # Stay alive until the harness is terminated during ACP initialization. | COMMENT |
| MEDIUM | crates/buzz-acp/src/acp.rs | 773 | #[allow(dead_code)] // Public API — callers outside the harness may use this. | COMMENT |
| MEDIUM | crates/buzz-acp/src/relay.rs | 989 | #[allow(dead_code)] // Public API — callers outside the harness may use this | COMMENT |
| MEDIUM | …buzz-mesh-smoke/examples/mesh_relay_lifecycle_smoke.rs | 29 | //! ## Scope: an independent protocol harness | COMMENT |
| MEDIUM | crates/buzz-conformance/Cargo.toml | 31 | # generator harness, not a production crate, and the property tests call | COMMENT |
| MEDIUM | crates/buzz-core/src/kind.rs | 479 | /// `"!shutdown"` and a `#p` tag mentioning the agent. The harness exits gracefully. | COMMENT |
| MEDIUM | crates/buzz-core/src/agent_turn_metric.rs | 309 | let json = r#"{"harness":"goose","timestamp":"2026-07-01T20:11:03Z"}"#; | CODE |
| MEDIUM | desktop/src-tauri/crates/buzz-terminal/tests/latency.rs | 31 | /// is no budget that makes the max arm robust to contention -- the tail it | COMMENT |
| MEDIUM | desktop/src-tauri/src/archive/metric_store_tests.rs | 19 | r#"{{"harness":"goose","model":"claude","channelId":null,"sessionId":"{session_id}","turnId":null,"turnSeq":{seq | CODE |
| MEDIUM | desktop/src-tauri/src/archive/metric_store_tests.rs | 95 | let json = r#"{"harness":"claude-code","model":"claude-sonnet","timestamp":"2026-07-01T20:11:03Z","turn":{"inputToke | CODE |
| MEDIUM⚡ | desktop/src-tauri/src/archive/metric_store_tests.rs | 110 | let json = r#"{"harness":"goose","timestamp":"not-a-timestamp"}"#; | CODE |
| MEDIUM⚡ | desktop/src-tauri/src/archive/metric_store_tests.rs | 118 | let json = r#"{"harness":"goose","timestamp":"2026-07-01T20:11:03Z","cumulative":{"inputTokens":1,"outputTokens":nul | CODE |
| MEDIUM⚡ | desktop/src-tauri/src/archive/metric_store_tests.rs | 126 | let json = r#"{"harness":"goose","timestamp":"2026-07-01T20:11:03Z","turn":{"inputTokens":5,"outputTokens":null,"tot | CODE |
| MEDIUM | desktop/src-tauri/src/archive/metric_store_tests.rs | 661 | let json = r#"{"harness":"goose","model":"claude","channelId":null,"sessionId":"s1","turnId":null,"turnSeq":1,"times | CODE |
| MEDIUM | desktop/src-tauri/src/archive/metric_store_tests.rs | 695 | let json = r#"{"harness":"goose","model":"claude","channelId":null,"sessionId":"s1","turnId":null,"turnSeq":1,"times | CODE |
| MEDIUM | desktop/src-tauri/src/archive/metric_store_tests.rs | 749 | let json = r#"{"harness":"buzz-agent","model":"claude-opus-4-5","channelId":null,"sessionId":"s1","turnId":null,"tur | CODE |
| MEDIUM | desktop/src-tauri/src/archive/store_migration_tests.rs | 56 | let raw_json = r#"{"harness":"goose","model":"claude","channelId":null,"sessionId":"s1","turnId":null,"turnSeq":1,"t | CODE |
| MEDIUM | desktop/src-tauri/src/archive/store_migration_tests.rs | 353 | let raw_json = r#"{"harness":"goose","model":"claude","channelId":null,"sessionId":"s1","turnId":null,"turnSeq": | CODE |
| MEDIUM | desktop/src-tauri/src/archive/mod_agent_metric_tests.rs | 379 | let plaintext = r#"{"harness":"test-harness","model":"test-model","sessionId":"sess-1","turnId":"turn-1","turnSeq":1 | CODE |
| MEDIUM | desktop/src-tauri/src/huddle/playout.rs | 248 | /// OR keeps the invariant robust against future config tuning. | COMMENT |
| MEDIUM | desktop/src-tauri/src/managed_agents/discovery/tests.rs | 1416 | r#"{"id":"fast-harness","label":"Fast","command":"fast-bin"}"#, | CODE |
| MEDIUM | …ks/harbor-buzz-orchestra/testbed/compose.benchmark.yml | 4 | # benchmark harness needs on the host: | COMMENT |
| MEDIUM | …bor-buzz-orchestra/tests/test_user_mention_verifier.py | 8 | # The Buzz-native tasks are a sibling dataset of this harness package. | COMMENT |
| MEDIUM | …tra/tests/test_create_channel_invite_users_verifier.py | 7 | # The Buzz-native tasks are a sibling dataset of this harness package. | COMMENT |
| MEDIUM | …sts/test_read_named_path_outside_workspace_verifier.py | 8 | # The Buzz-native tasks are a sibling dataset of this harness package. | COMMENT |
| MEDIUM | …-buzz-orchestra/tests/test_reply_to_thread_verifier.py | 9 | # The Buzz-native tasks are a sibling dataset of this harness package. | COMMENT |
| MEDIUM | …marks/harbor-buzz-orchestra/scripts/run_leaderboard.py | 38 | # Host-side: the harness speaks to the relay as the trial user via this CLI. | COMMENT |
| MEDIUM | …chestra/src/harbor_buzz_orchestra/container_runtime.py | 185 | # user prompt @mentioning the orchestrator. The harness never | COMMENT |
| MEDIUM | …chestra/src/harbor_buzz_orchestra/container_runtime.py | 235 | # A missing snapshot is a harness failure, not an agent failure: the | COMMENT |
| MEDIUM | …zz-orchestra/src/harbor_buzz_orchestra/provisioning.py | 58 | # identity and the harness run. ``relay_ws_url`` is the view from the | COMMENT |
| MEDIUM⚡ | scripts/ci-mesh-lifecycle-smoke.sh | 6 | # mesh lifecycle harness (crates/buzz-mesh-smoke/examples/mesh_relay_lifecycle_smoke.rs): | COMMENT |
| MEDIUM⚡ | scripts/ci-mesh-lifecycle-smoke.sh | 99 | # The harness kills its own children; sweep any stragglers from a hard fail. | COMMENT |
| MEDIUM⚡ | scripts/ci-mesh-lifecycle-smoke.sh | 104 | # ── Run the lifecycle harness ──────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | scripts/start-isolated-test-relay.sh | 3 | # start-isolated-test-relay.sh — GUI read-model overhaul test harness (Dawn) | COMMENT |
| MEDIUM⚡ | scripts/start-isolated-test-relay.sh | 8 | # `buzz-harness` Compose project (docker-compose.harness.yml); the relay runs | COMMENT |
| MEDIUM⚡ | scripts/start-isolated-test-relay.sh | 12 | # compose project : buzz-harness | COMMENT |
| MEDIUM⚡ | scripts/start-isolated-test-relay.sh | 24 | # docker compose -p buzz-harness -f docker-compose.harness.yml down -v | COMMENT |
| MEDIUM | scripts/start-isolated-test-relay.sh | 71 | # ── Backing services (scoped to buzz-harness only) ─────────────────────────── | COMMENT |
| MEDIUM | scripts/start-isolated-test-relay.sh | 93 | # This database belongs only to the buzz-harness Compose project. Reset it on | COMMENT |
| MEDIUM⚡ | scripts/build-sprig.sh | 3 | # harness, agent, and developer MCP. The archive exposes these command names: | COMMENT |
| MEDIUM⚡ | scripts/build-sprig.sh | 6 | # buzz-acp link to sprig (ACP harness and Git helper personalities) | COMMENT |
| MEDIUM | scripts/sprig-entrypoint.sh | 5 | # The harness must receive Kubernetes' termination signal directly. | COMMENT |
| MEDIUM | scripts/test-sprig-image.sh | 32 | # Exercise the image entrypoint, ACP harness, and both Git helper personalities | COMMENT |
| MEDIUM | .github/workflows/sprig.yml | 4 | # buzz-acp ACP harness (multicall Git helpers) that bridges Buzz events to the LLM agent | COMMENT |
| MEDIUM | .github/workflows/benchmark-harbor.yml | 37 | # they need the harness config passed explicitly to stay linted. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docs/formal/nip-rs-unread/mutation.py | 36 | CODE | |
| LOW | docs/formal/nip-rs-unread/mutation.py | 37 | CODE | |
| LOW | docs/formal/nip-rs-unread/mutation.py | 37 | CODE | |
| LOW | docs/formal/nip-rs-unread/mutation.py | 43 | CODE | |
| LOW | docs/formal/nip-rs-unread/mutation.py | 43 | CODE | |
| LOW | docs/formal/nip-rs-unread/exhaustive.py | 39 | CODE | |
| LOW | docs/formal/nip-pl/acceptance.py | 37 | CODE | |
| LOW | …hmarks/harbor-buzz-orchestra/testbed/tests/conftest.py | 3 | CODE | |
| LOW | …-buzz-orchestra/testbed/tests/test_provisioner_live.py | 10 | CODE | |
| LOW | …marks/harbor-buzz-orchestra/testbed/tests/test_keys.py | 3 | CODE | |
| LOW | …-buzz-orchestra/testbed/tests/test_provisioner_unit.py | 3 | CODE | |
| LOW | …-orchestra/testbed/src/harbor_buzz_testbed/__init__.py | 3 | CODE | |
| LOW | …-orchestra/testbed/src/harbor_buzz_testbed/__init__.py | 3 | CODE | |
| LOW | …-orchestra/testbed/src/harbor_buzz_testbed/__init__.py | 3 | CODE | |
| LOW | …-orchestra/testbed/src/harbor_buzz_testbed/__init__.py | 3 | CODE | |
| LOW | …buzz-orchestra/testbed/src/harbor_buzz_testbed/keys.py | 3 | CODE | |
| LOW | …-orchestra/testbed/src/harbor_buzz_testbed/buzz_cli.py | 3 | CODE | |
| LOW | …chestra/testbed/src/harbor_buzz_testbed/provisioner.py | 3 | CODE | |
| LOW | …orchestra/tests/test_expanded_buzz_native_verifiers.py | 3 | CODE | |
| LOW | benchmarks/harbor-buzz-orchestra/scripts/benchmark.py | 27 | CODE | |
| LOW | …marks/harbor-buzz-orchestra/scripts/run_leaderboard.py | 23 | CODE | |
| LOW | …r-buzz-orchestra/src/harbor_buzz_orchestra/manifest.py | 3 | CODE | |
| LOW | …chestra/src/harbor_buzz_orchestra/container_runtime.py | 11 | CODE | |
| LOW | …r-buzz-orchestra/src/harbor_buzz_orchestra/__init__.py | 3 | CODE | |
| LOW | …r-buzz-orchestra/src/harbor_buzz_orchestra/__init__.py | 4 | CODE | |
| LOW | …r-buzz-orchestra/src/harbor_buzz_orchestra/__init__.py | 4 | CODE | |
| LOW | …r-buzz-orchestra/src/harbor_buzz_orchestra/__init__.py | 4 | CODE | |
| LOW | …r-buzz-orchestra/src/harbor_buzz_orchestra/__init__.py | 9 | CODE | |
| LOW | …r-buzz-orchestra/src/harbor_buzz_orchestra/__init__.py | 9 | CODE | |
| LOW | …r-buzz-orchestra/src/harbor_buzz_orchestra/__init__.py | 10 | CODE | |
| LOW | …r-buzz-orchestra/src/harbor_buzz_orchestra/__init__.py | 10 | CODE | |
| LOW | …r-buzz-orchestra/src/harbor_buzz_orchestra/__init__.py | 10 | CODE | |
| LOW | …r-buzz-orchestra/src/harbor_buzz_orchestra/__init__.py | 10 | CODE | |
| LOW | …r-buzz-orchestra/src/harbor_buzz_orchestra/__init__.py | 16 | CODE | |
| LOW | …r-buzz-orchestra/src/harbor_buzz_orchestra/__init__.py | 16 | CODE | |
| LOW | …or-buzz-orchestra/src/harbor_buzz_orchestra/runtime.py | 3 | CODE | |
| LOW | …rbor-buzz-orchestra/src/harbor_buzz_orchestra/agent.py | 3 | CODE | |
| LOW | …z-orchestra/src/harbor_buzz_orchestra/task_fixtures.py | 3 | CODE | |
| LOW | …r-buzz-orchestra/src/harbor_buzz_orchestra/evidence.py | 3 | CODE | |
| LOW | …zz-orchestra/src/harbor_buzz_orchestra/provisioning.py | 3 | CODE | |
| LOW | …rks/buzz-dataset/cross-thread-requests/tests/verify.py | 4 | CODE | |
| LOW | …aset/read-named-path-outside-workspace/tests/verify.py | 4 | CODE | |
| LOW | …chmarks/buzz-dataset/multiline-message/tests/verify.py | 4 | CODE | |
| LOW | …rks/buzz-dataset/narrative-agent-names/tests/verify.py | 4 | CODE | |
| LOW | …nchmarks/buzz-dataset/memory-retrieval/tests/verify.py | 4 | CODE | |
| LOW | benchmarks/buzz-dataset/user-mention/tests/verify.py | 4 | CODE | |
| LOW | …zz-dataset/create-channel-invite-users/tests/verify.py | 4 | CODE | |
| LOW | …ks/buzz-dataset/ambiguous-user-mention/tests/verify.py | 4 | CODE | |
| LOW | …buzz-dataset/interleaved-agent-reports/tests/verify.py | 4 | CODE | |
| LOW | benchmarks/buzz-dataset/reply-to-thread/tests/verify.py | 4 | CODE | |
| LOW | scripts/desktop-release-cache-key.py | 4 | CODE | |
| LOW | scripts/check-postgres-test-discovery.py | 4 | CODE | |
| LOW | scripts/desktop_release.py | 4 | CODE | |
| LOW | scripts/desktop_release.py | 11 | CODE | |
| LOW | perf/test_relay_bus_scaling.py | 4 | CODE | |
| LOW | perf/relay_bus_scaling.py | 19 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | crates/buzz-acp/src/acp/system_prompt_tests.rs | 117 | // ── Goose-native steer scaffold (PR follow-up to #1160) ────────────── | COMMENT |
| MEDIUM | crates/buzz-mesh-smoke/examples/mesh_agent_e2e.rs | 12 | //! P4 agentic tool use — agent + buzz-dev-mcp writes a file on disk. | COMMENT |
| MEDIUM | crates/buzz-mesh-smoke/examples/mesh_agent_e2e.rs | 169 | // P4: agentic tool use via buzz-dev-mcp — write a real file inside the | COMMENT |
| MEDIUM | crates/buzz-agent/src/llm.rs | 690 | /// find a prior cache entry, and one agentic turn can append ~17 blocks at the | COMMENT |
| MEDIUM⚡ | deploy/local/build-and-deploy.sh | 35 | # ── 0. guardrails ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | desktop/src/features/settings/ui/harnessCatalogCopy.ts | 16 | // agentic coding tool" that lives in the terminal. | COMMENT |
| MEDIUM | docs/remote-agents.md | 1063 | # nest scaffolding, if DECISION A lands, goes here | COMMENT |
| MEDIUM | mobile/test/features/channels/message_content_test.dart | 54 | // home scaffold. Navigator-pushed routes (e.g. MediaVideoViewerPage) | COMMENT |
| MEDIUM⚡ | mobile/lib/shared/widgets/frosted_scaffold.dart | 20 | /// The primary content of the scaffold. Must handle its own top spacing | COMMENT |
| MEDIUM⚡ | mobile/lib/shared/widgets/frosted_scaffold.dart | 21 | /// using [frostedAppBarHeight] — the scaffold does NOT add automatic padding. | COMMENT |
| MEDIUM⚡ | mobile/lib/shared/widgets/frosted_scaffold.dart | 30 | /// Optional scaffold background, useful when a parent supplies a shared | COMMENT |
| MEDIUM | scripts/buzz-adopt-prod-agents.sh | 381 | # failure leaves no live agents/ scaffold behind. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | crates/buzz-acp/src/queue.rs | 4134 | q.push(make_queued(ch, "placeholder")); | CODE |
| LOW | crates/buzz-sdk/src/mentions.rs | 424 | assert!(extract_at_names("user@example.com").is_empty()); | CODE |
| LOW | crates/buzz-sdk/src/mentions.rs | 503 | let result = extract_at_mentions_with_known("user@example.com", &["example.com"]); | CODE |
| LOW | crates/buzz-sdk/src/broker/tests.rs | 2629 | "placeholder", | CODE |
| LOW | crates/buzz-sdk/src/broker/tests.rs | 2651 | "placeholder", | CODE |
| LOW | crates/buzz-sdk/src/broker/tests.rs | 2687 | "placeholder", | CODE |
| LOW | crates/buzz-sdk/src/broker/tests.rs | 2706 | "placeholder", | CODE |
| LOW | crates/buzz-sdk/src/broker/tests.rs | 2723 | "placeholder", | CODE |
| LOW | crates/buzz-cli/src/commands/patches.rs | 292 | "Jane Doe".to_string(), | CODE |
| LOW | crates/buzz-auth/src/nip_fi/command.rs | 637 | vec!["admin@example.com".into()], | CODE |
| LOW | crates/buzz-auth/src/nip_fi/command.rs | 652 | vec!["admin@example.com".into()], | CODE |
| LOW | crates/buzz-auth/src/nip_fi/command.rs | 667 | vec!["admin@example.com".into()], | CODE |
| LOW | crates/buzz-auth/src/nip_fi/command.rs | 678 | vec!["admin@example.com".into()], | CODE |
| LOW | crates/buzz-auth/src/nip_fi/command.rs | 700 | vec!["admin@example.com".into()], | CODE |
| LOW | crates/buzz-auth/src/nip_fi/command.rs | 713 | CommandIssuerPolicy::new(String::new(), 30, vec!["admin@example.com".into()], 1000); | CODE |
| LOW | …ktop/tests/e2e/global-agent-config-screenshots.spec.ts | 526 | "placeholder", | CODE |
| LOW | desktop/tests/e2e/agents.spec.ts | 1567 | await expect(recipientSearch).toHaveAttribute("placeholder", ""); | CODE |
| LOW | desktop/tests/e2e/channels.spec.ts | 1433 | const placeholder = await input.getAttribute("placeholder"); | CODE |
| LOW | desktop/tests/e2e/channels.spec.ts | 4748 | ).toHaveAttribute("placeholder", "Add people and agents"); | CODE |
| LOW | desktop/tests/e2e/channels.spec.ts | 4906 | ).toHaveAttribute("placeholder", "Add people and agents"); | CODE |
| LOW | desktop/tests/e2e/agent-numeric-tuning.spec.ts | 229 | ).toHaveAttribute("placeholder", "Inherit (16384)"); | CODE |
| LOW | desktop/tests/e2e/onboarding.spec.ts | 1317 | "placeholder", | CODE |
| LOW | desktop/tests/e2e/profile-backup-settings.spec.ts | 123 | "placeholder", | CODE |
| LOW | desktop/tests/e2e/invite-link-copy.spec.ts | 122 | "placeholder", | CODE |
| LOW | desktop/tests/e2e/workflows.spec.ts | 286 | "placeholder", | CODE |
| LOW | …ktop/src-tauri/src/managed_agents/agent_description.rs | 102 | "id": "placeholder", | CODE |
| LOW | desktop/src-tauri/src/commands/agent_config_tests.rs | 725 | ("OPENAI_COMPAT_API_KEY", "placeholder"), | CODE |
| LOW | desktop/src/features/messages/lib/mentionClipboard.ts | 352 | * `<span data-mention-pubkey … data-mention-label="Jane Doe">` on any copied | COMMENT |
| LOW | desktop/src/shared/lib/remarkMentions.ts | 6 | * (e.g. "John Doe") are matched longest-first to avoid partial matches. | COMMENT |
| LOW | …bile/test/features/profile/profile_edit_page_test.dart | 284 | 'placeholder': 'Display name', | CODE |
| LOW | mobile/ios/Runner/NativeProfileTextEditor.swift | 39 | let placeholder = arguments["placeholder"] as? String, | CODE |
| LOW | mobile/lib/features/channels/manage_channel_sheet.dart | 54 | 'placeholder': 'Channel name', | CODE |
| LOW | mobile/lib/shared/widgets/ios_text_editor.dart | 25 | 'placeholder': placeholder, | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …chestra/src/harbor_buzz_orchestra/container_runtime.py | 641 | except Exception: # noqa: S110, BLE001 — environment may already be gone | CODE |
| HIGH | …chestra/src/harbor_buzz_orchestra/container_runtime.py | 649 | except Exception: # noqa: S110, BLE001 — best effort; env may be torn down | CODE |
| HIGH | …chestra/src/harbor_buzz_orchestra/container_runtime.py | 716 | except OSError: | CODE |
| HIGH | perf/relay_bus_scaling.py | 271 | except OSError: | CODE |
| HIGH | perf/relay_bus_scaling.py | 275 | except OSError: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docs/formal/nip-rs-unread/mutation.py | 428 | CODE | |
| LOW | docs/formal/nip-rs-unread/model.py | 298 | CODE | |
| LOW | docs/formal/nip-rs-unread/model.py | 347 | CODE | |
| LOW | docs/formal/nip-rs-unread/exhaustive.py | 56 | CODE | |
| LOW | docs/formal/nip-rs-unread/exhaustive.py | 75 | CODE | |
| LOW | docs/formal/nip-rs-unread/exhaustive.py | 113 | CODE | |
| LOW | docs/formal/nip-rs-unread/exhaustive.py | 137 | CODE | |
| LOW | docs/formal/nip-rs-unread/exhaustive.py | 195 | CODE | |
| LOW | docs/formal/nip-rs-unread/exhaustive.py | 235 | CODE | |
| LOW | docs/formal/nip-rs-unread/exhaustive.py | 297 | CODE | |
| LOW | docs/formal/nip-rs-unread/exhaustive.py | 341 | CODE | |
| LOW | docs/formal/nip-rs-unread/exhaustive.py | 410 | CODE | |
| LOW | docs/formal/nip-rs-unread/exhaustive.py | 475 | CODE | |
| LOW | docs/formal/nip-rs-unread/exhaustive.py | 509 | CODE | |
| LOW | docs/formal/nip-rs-unread/exhaustive.py | 543 | CODE | |
| LOW | docs/formal/nip-rs-unread/exhaustive.py | 645 | CODE | |
| LOW | docs/formal/nip-rs-unread/exhaustive.py | 1009 | CODE | |
| LOW | docs/formal/nip-rs-unread/exhaustive.py | 1070 | CODE | |
| LOW | docs/formal/nip-rs-unread/exhaustive.py | 1188 | CODE | |
| LOW | docs/formal/nip-pl/mutation_test.py | 17 | CODE | |
| LOW | docs/formal/nip-pl/acceptance.py | 81 | CODE | |
| LOW | mobile/scripts/prepare-inter.py | 21 | CODE | |
| LOW | mobile/scripts/prepare-inter.py | 50 | CODE | |
| LOW | …chestra/src/harbor_buzz_orchestra/container_runtime.py | 586 | CODE | |
| LOW | scripts/generate-macos-icon.py | 59 | CODE | |
| LOW | scripts/check-postgres-test-discovery.py | 30 | CODE | |
| LOW | scripts/check-postgres-test-discovery.py | 206 | CODE | |
| LOW | scripts/check-postgres-test-discovery.py | 303 | CODE | |
| LOW | perf/relay_bus_scaling.py | 213 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | deploy/local/build-and-deploy.sh | 12 | # Usage: | COMMENT |
| LOW | …ks/harbor-buzz-orchestra/testbed/compose.benchmark.yml | 9 | # Usage: | COMMENT |
| LOW⚡ | scripts/ci-mesh-lifecycle-smoke.sh | 14 | # Usage: | COMMENT |
| LOW⚡ | scripts/start-isolated-test-relay.sh | 20 | # Usage: | COMMENT |
| LOW⚡ | scripts/run-tests.sh | 5 | # Usage: | COMMENT |
| LOW⚡ | scripts/start-relay-for-tests.sh | 9 | # Usage: | COMMENT |
| LOW | scripts/ci-apt-retry.sh | 22 | # Usage: | COMMENT |
| LOW | scripts/test-video-upload.sh | 9 | # Usage: | COMMENT |
| LOW | scripts/grab-emoji.sh | 7 | # Usage: | COMMENT |
| LOW⚡ | scripts/build-sprig.sh | 11 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …chestra/src/harbor_buzz_orchestra/container_runtime.py | 610 | f"kill -0 {agent.pid} 2>/dev/null || echo DEAD:{agent.credential.agent_id}" | CODE |
| HIGH⚡ | …chestra/src/harbor_buzz_orchestra/container_runtime.py | 635 | '&& kill -TERM "${d#/proc/}" 2>/dev/null; done; true' | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | deploy/charts/buzz/examples/ingress-cert-manager.yaml | 3 | # This file is BOTH: | COMMENT |
| MEDIUM | scripts/buzz-adopt-prod-agents.sh | 110 | # Create a mode-0600 staging file next to its final destination so the later | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …chestra/testbed/src/harbor_buzz_testbed/provisioner.py | 115 | except Exception as error: | CODE |
| LOW⚡ | …chestra/src/harbor_buzz_orchestra/container_runtime.py | 641 | except Exception: # noqa: S110, BLE001 — environment may already be gone | CODE |
| LOW⚡ | …chestra/src/harbor_buzz_orchestra/container_runtime.py | 649 | except Exception: # noqa: S110, BLE001 — best effort; env may be torn down | CODE |
| LOW | …chestra/src/harbor_buzz_orchestra/container_runtime.py | 707 | except Exception: # noqa: BLE001 — the caller fails the trial | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | crates/buzz-relay/src/handlers/side_effects.rs | 63 | /// # Return value | COMMENT |
| LOW | desktop/scripts/fix-appimage.sh | 11 | # Set APPIMAGETOOL_RUNTIME_FILE to a pre-downloaded AppImage type2 runtime to | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docs/formal/nip-pl/delivery.py | 25 | CODE | |
| LOW | …chestra/src/harbor_buzz_orchestra/container_runtime.py | 90 | CODE | |
| LOW | …rbor-buzz-orchestra/src/harbor_buzz_orchestra/agent.py | 24 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …-orchestra/testbed/src/harbor_buzz_testbed/__init__.py | 10 | __all__ = [ | CODE |
| LOW | …-orchestra/testbed/src/harbor_buzz_testbed/buzz_cli.py | 104 | def set_profile(self, name: str, about: str | None = None) -> None: | CODE |
| LOW | …r-buzz-orchestra/src/harbor_buzz_orchestra/__init__.py | 18 | __all__ = [ | CODE |