1.5

Adjusted Signal

1.5

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

24.3K

Stars

TypeScript

Language

3.3M

Lines of Code

5.5K

Files

4.3K

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 5.9/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 3998 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.6/100 · LOW

Are imports declared and package/API names verified? 114 finding(s).

Agent Over-Engineering Ratio 6.4/100 · LOW

Are wrappers, guards, and repeated structures necessary? 4037 finding(s).

PR Review Velocity Impact 7.3/100 · LOW

Which changes need focused human review? 4282 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 3HIGH 74MEDIUM 139LOW 4066

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 4282 distinct pattern matches across 17 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers3867 hits · 3842 pts

Severity	File	Line	Snippet	Context
LOW	evals/docs-shots/world.ts	105	async function createProductOperationsPolicy(	CODE
LOW	evals/docs-shots/shots/desktop.ts	36	async function openEmptyTeamPromptSession(surface: DesktopShotSurface): Promise<void> {	CODE
LOW	evals/docs-shots/shots/desktop.ts	113	async function scrollAdvancedSettingsIntoView(surface: DesktopShotSurface): Promise<void> {	CODE
LOW	evals/worlds/provider-limit-scope.ts	7	export function providerLimitScopeDefault(seed: Seed) { return limitScopeWorld(seed, true); }	CODE
LOW	evals/worlds/auto-router.ts	59	export async function autoRouterMissingKeyWorld(seed: Seed) {	CODE
LOW	evals/worlds/member-feature-enablement.ts	7	export async function memberFeatureEnablementWorld(seed: Seed) {	CODE
LOW	evals/worlds/desktop-signin-returns-to-task.ts	80	export async function desktopSignInReturnsToTask(seed: Seed, { place }: { place: Place }) {	CODE
LOW	evals/worlds/organization-automation-settings.ts	8	export async function organizationAutomationSettingsWorld(seed: Seed) {	CODE
LOW	evals/worlds/setup-sso-install-matrix.ts	48	export function canBootSetupSsoInstallMatrix(requirements: TestNeeds): boolean {	CODE
LOW	evals/worlds/setup-sso-install-matrix.ts	69	function hostAddressReachableFromDocker(): string {	CODE
LOW	evals/worlds/setup-sso-install-matrix.ts	249	export async function setupSsoProductSourceFingerprint(): Promise<string> {	CODE
LOW	evals/worlds/setup-sso-install-matrix.ts	773	export async function bootSetupSsoInstallMatrix(	CODE
LOW	evals/worlds/setup-sso-install-matrix.ts	849	export async function captureSetupSsoDesktopHandoff(browser: Awaited<ReturnType<typeof chrome>>): Promise<void> {	CODE
LOW	evals/worlds/setup-sso-install-matrix.ts	863	export async function exchangeSetupSsoDesktopHandoff(browser: Awaited<ReturnType<typeof chrome>>, webUrl: string) {	CODE
LOW	evals/worlds/setup-sso-install-matrix.ts	894	export async function installSetupSsoFetchFault(browser: Awaited<ReturnType<typeof chrome>>, pathname: string, kind: "ne	CODE
LOW	evals/worlds/setup-sso-install-matrix.ts	985	export async function observeSetupSsoNavigation(debuggerUrl: string \| undefined) {	CODE
LOW	evals/worlds/setup-sso-install-matrix.ts	1039	export function setupSsoInstallMatrixManifestPath(): string {	CODE
LOW	evals/worlds/invalid-opencode-config.ts	9	export async function invalidOpencodeConfigWorld(seed: Seed) {	CODE
LOW	evals/worlds/admin-feature-outcomes.ts	14	export async function adminFeatureOutcomesWorld(seed: Seed) {	CODE
LOW	evals/worlds/desktop-policies.ts	151	export async function defaultPolicyEditorAndMemberDesktop(seed: Seed) {	CODE
LOW	evals/worlds/agent-permissions.ts	30	async function agentPermissionsOrganization(seed: Seed, options: OrganizationOptions) {	CODE
LOW	evals/worlds/agent-permissions.ts	141	export async function agentPermissionsAdminView(seed: Seed) {	CODE
LOW	evals/worlds/agent-permissions.ts	170	export async function agentPermissionsUnconfigured(seed: Seed) {	CODE
LOW	evals/worlds/agent-permissions.ts	264	export function agentPermissionsDesktopUnconfigured(seed: Seed, { place }: { place: Place }) {	CODE
LOW	evals/worlds/agent-permissions.ts	411	export async function agentPermissionsTeamsList(seed: Seed) {	CODE
LOW	evals/worlds/automation-client.ts	8	export async function desktopAutomationOnDenMonitor(seed: Seed) {	CODE
LOW	evals/worlds/den-remember-last-organization.ts	20	export async function denRememberLastOrganization(seed: Seed) {	CODE
LOW	evals/worlds/last-turn-model-footer-resolved.ts	13	export async function lastTurnModelFooterResolved(seed: Seed) {	CODE
LOW	evals/worlds/released-enterprise-activated.ts	80	export async function observeRendererExceptions(surface: AttachedSurface) {	CODE
LOW	evals/worlds/released-enterprise-activated.ts	334	export async function releasedEnterpriseActivatedWorld(seed: Seed) {	CODE
LOW	evals/worlds/selected-skills.ts	20	export async function startProviderWitnessProxy(upstreamUrl: string) {	CODE
LOW	evals/worlds/browser-without-permission-prompts.ts	4	export async function browserWithoutPermissionPrompts(seed: Seed) {	CODE
LOW	evals/worlds/billing-not-configured.ts	7	export async function billingNotConfiguredWorld(seed: Seed) {	CODE
LOW	evals/worlds/activation-checklist.ts	13	export async function activationChecklistDesktop(seed: Seed) {	CODE
LOW	evals/worlds/first-run.ts	158	export async function sessionlessFirstSendWorld(seed: Seed, options: { engine?: EvalEngine } = {}) {	CODE
LOW	evals/worlds/first-run.ts	241	export async function mobileChatInteractionWorld(seed: Seed, options: { engine?: EvalEngine } = {}) {	CODE
LOW	evals/worlds/first-run.ts	245	export async function parentChildPermissionWorld(seed: Seed) {	CODE
LOW	evals/worlds/first-run.ts	349	export async function scopedPermissionRefreshWorld(seed: Seed) {	CODE
LOW	evals/worlds/chat.ts	421	export async function sessionProviderErrorRecovery(seed: Seed, options: { terminalRejection?: boolean; retiredSavedModel	CODE
LOW	evals/worlds/chat.ts	718	export function modelPickerWithOpenWorkModels(seed: Seed) {	CODE
LOW	evals/worlds/chat.ts	804	export function modelPickerDeploymentDisabledAuto(seed: Seed) {	CODE
LOW	evals/worlds/chat.ts	867	export async function modelPickerSavedUnavailable(seed: Seed) {	CODE
LOW	evals/worlds/chat.ts	993	async function startManualApprovalServer(approvalTimeoutMs: number) {	CODE
LOW	evals/worlds/chat.ts	1458	export async function sessionSubmitErrorIsolation(seed: Seed) {	CODE
LOW	evals/worlds/openwork-server-cli.ts	139	export async function bootManagedOpenworkServer(options: {	CODE
LOW	evals/worlds/den-service-readiness.ts	123	export function denServicesWithoutInfrastructure(seed: Seed) { return readinessWorld(seed, false); }	CODE
LOW	evals/worlds/den-service-readiness.ts	124	export function denServicesWithInfrastructure(seed: Seed) { return readinessWorld(seed, true); }	CODE
LOW	evals/worlds/plan-checkout-sets-tier.ts	16	export async function planCheckoutSetsTierWorld(seed: Seed, { place }: { place: Place }) {	CODE
LOW	evals/worlds/remote-session-helper-view.ts	173	export async function remoteSessionHelperViewWorld(seed: Seed) {	CODE
LOW	evals/worlds/remote-session-helper-view.ts	182	export async function remoteSessionFollowUpWorld(seed: Seed) {	CODE
LOW	evals/worlds/packaged-first-launch.ts	98	export async function observeRendererExceptions(debuggerUrl: string \| null \| undefined) {	CODE
LOW	evals/worlds/packaged-first-launch.ts	253	export async function packagedActivatedLaunchWorld(_seed: Seed) {	CODE
LOW	evals/worlds/den-sign-in-organization-delay.ts	7	export async function denSignInOrganizationDelay(seed: Seed) {	CODE
LOW	evals/worlds/admin-free-auto-conversions.ts	19	export async function adminFreeAutoConversionsWorld(seed: Seed, { place }: { place: Place }) {	CODE
LOW	evals/worlds/automatic-engine-force-policy.ts	61	export async function automaticEngineForcePolicy(seed: Seed, { place }: { place: Place }) {	CODE
LOW	evals/worlds/managed-provider-reconciliation.ts	14	export async function managedProviderReconciliation(seed: Seed) {	CODE
LOW	evals/worlds/free-auto-analytics-opt-out.ts	19	export async function freeAutoAnalyticsOptOutWorld(seed: Seed) {	CODE
LOW	evals/worlds/packaged-preactivation-updater.ts	109	export async function packagedPreactivationUpdaterWorld(_seed: Seed) {	CODE
LOW	evals/worlds/packaged-preactivation-updater.ts	114	export async function packagedActivatedUpdaterWorld(_seed: Seed) {	CODE
LOW	evals/worlds/engine-connectors-parity.ts	105	export async function engineConnectorNeedsSignIn(seed: Seed, context: { place: Place }) {	CODE
3807 more matches not shown…

Decorative Section Separators120 hits · 360 pts

Severity	File	Line	Snippet	Context
MEDIUM	infra/terraform/modules/openwork-aws-ecs/variables.tf	1	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/terraform/modules/openwork-aws-ecs/variables.tf	3	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/terraform/modules/openwork-aws-ecs/variables.tf	35	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/terraform/modules/openwork-aws-ecs/variables.tf	37	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/terraform/modules/openwork-aws-ecs/variables.tf	97	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/terraform/modules/openwork-aws-ecs/variables.tf	99	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/terraform/modules/openwork-aws-ecs/variables.tf	169	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/terraform/modules/openwork-aws-ecs/variables.tf	171	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/terraform/modules/openwork-aws-ecs/variables.tf	213	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/terraform/modules/openwork-aws-ecs/variables.tf	215	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/terraform/modules/openwork-aws-ecs/variables.tf	445	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/terraform/modules/openwork-aws-ecs/variables.tf	447	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/terraform/modules/openwork-aws-ecs/variables.tf	475	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/terraform/modules/openwork-aws-ecs/variables.tf	477	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/terraform/modules/openwork-aws-ecs/variables.tf	527	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/terraform/modules/openwork-aws-ecs/variables.tf	529	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/terraform/modules/openwork-self-host/variables.tf	1	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/terraform/modules/openwork-self-host/variables.tf	3	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/terraform/modules/openwork-self-host/variables.tf	52	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/terraform/modules/openwork-self-host/variables.tf	54	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/terraform/modules/openwork-self-host/variables.tf	116	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/terraform/modules/openwork-self-host/variables.tf	118	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/terraform/modules/openwork-self-host/variables.tf	174	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/terraform/modules/openwork-self-host/variables.tf	176	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/terraform/modules/openwork-self-host/variables.tf	251	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/terraform/modules/openwork-self-host/variables.tf	253	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/terraform/modules/openwork-self-host/variables.tf	273	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/terraform/modules/openwork-self-host/variables.tf	275	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…orm/modules/openwork-azure-container-apps/variables.tf	1	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…orm/modules/openwork-azure-container-apps/variables.tf	3	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…orm/modules/openwork-azure-container-apps/variables.tf	34	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…orm/modules/openwork-azure-container-apps/variables.tf	36	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…orm/modules/openwork-azure-container-apps/variables.tf	122	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…orm/modules/openwork-azure-container-apps/variables.tf	124	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…orm/modules/openwork-azure-container-apps/variables.tf	190	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…orm/modules/openwork-azure-container-apps/variables.tf	192	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…orm/modules/openwork-azure-container-apps/variables.tf	233	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…orm/modules/openwork-azure-container-apps/variables.tf	235	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…orm/modules/openwork-azure-container-apps/variables.tf	344	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…orm/modules/openwork-azure-container-apps/variables.tf	346	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…orm/modules/openwork-azure-container-apps/variables.tf	374	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…orm/modules/openwork-azure-container-apps/variables.tf	376	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…orm/modules/openwork-azure-container-apps/variables.tf	503	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…orm/modules/openwork-azure-container-apps/variables.tf	505	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…/terraform/modules/openwork-gcp-cloud-run/variables.tf	1	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…/terraform/modules/openwork-gcp-cloud-run/variables.tf	3	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…/terraform/modules/openwork-gcp-cloud-run/variables.tf	25	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…/terraform/modules/openwork-gcp-cloud-run/variables.tf	27	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…/terraform/modules/openwork-gcp-cloud-run/variables.tf	112	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…/terraform/modules/openwork-gcp-cloud-run/variables.tf	114	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…/terraform/modules/openwork-gcp-cloud-run/variables.tf	160	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…/terraform/modules/openwork-gcp-cloud-run/variables.tf	162	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…/terraform/modules/openwork-gcp-cloud-run/variables.tf	189	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…/terraform/modules/openwork-gcp-cloud-run/variables.tf	191	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…/terraform/modules/openwork-gcp-cloud-run/variables.tf	290	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…/terraform/modules/openwork-gcp-cloud-run/variables.tf	292	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…/terraform/modules/openwork-gcp-cloud-run/variables.tf	320	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…/terraform/modules/openwork-gcp-cloud-run/variables.tf	322	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…/terraform/modules/openwork-gcp-cloud-run/variables.tf	362	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…/terraform/modules/openwork-gcp-cloud-run/variables.tf	364	# ---------------------------------------------------------------------------	COMMENT
60 more matches not shown…

Cross-Language Confusion (JS/TS)57 hits · 305 pts

Severity	File	Line	Snippet	Context
HIGH	evals/worlds/workshop-agent.ts	186	print(json.dumps({'slides':len(slides),'text':text,'zipEntries':len(names)}))	CODE
HIGH	evals/packages/testkit/src/daytona-witness.ts	142	print(json.dumps(result))	CODE
HIGH⚡	evals/packages/hosts/src/provision.ts	88	elif member.islnk():	CODE
HIGH⚡	evals/packages/hosts/src/provision.ts	92	elif member.isdev() or member.isfifo():	CODE
HIGH⚡	evals/packages/hosts/src/provision.ts	101	print("OPENWORK_RELEASE_BINARY=" + str(binary))	CODE
HIGH	evals/packages/hosts/src/browser.ts	119	print(json.dumps({"opener": opener, "root": str(root), "log": str(log), "backup": backup}))`));	CODE
HIGH	evals/packages/hosts/src/daytona.ts	843	print("OPENWORK_REMOTE_PID=" + str(process.pid))	CODE
HIGH	ee/apps/landing/app/install.sh/route.ts	44	elif command -v wget >/dev/null 2>&1; then	CODE
HIGH⚡	ee/apps/headless-runner/scripts/session-cli.ts	88	print(rows.map((row) => z.object({ id: z.string(), title: z.string(), hot_bytes: z.number().nullable(), segments:	CODE
HIGH⚡	ee/apps/headless-runner/scripts/session-cli.ts	92	print(storage.inspect(needSession()))	CODE
HIGH⚡	ee/apps/headless-runner/scripts/session-cli.ts	96	print(results)	CODE
HIGH⚡	ee/apps/headless-runner/scripts/session-cli.ts	101	print({ sealed: await storage.sealAll(needSession()) })	CODE
HIGH⚡	ee/apps/headless-runner/scripts/session-cli.ts	104	print({ resealed: await storage.reseal(needSession()) })	CODE
HIGH	ee/apps/headless-runner/scripts/session-cli.ts	119	print({ deleted: await storage.deleteSession(id) })	CODE
HIGH	worlds/workshop-proof.ts	159	print(json.dumps({'slides':len(slides),'text':text,'zipEntries':len(names)}))`, pptx], { encoding: "utf8" }));	CODE
HIGH	worlds/workshop-pair-check.ts	199	print(json.dumps(out))`, path], { encoding: "utf8" }));	CODE
HIGH	worlds/workshop-pair-check.ts	366	print(json.dumps(out))`, pptxPath], { encoding: "utf8" }));	CODE
HIGH	worlds/lib/acme-web-daytona.ts	77	print("den-session", call("PUT", "/den-session", session)[0])	CODE
HIGH	worlds/lib/acme-web-daytona.ts	79	print("sync", status, body[:200])	CODE
HIGH⚡	packages/world/src/cli.ts	651	print(`Reaped ${report.reaped.length} leaked resources from ${JSON.stringify(stagedName)}.`);	CODE
HIGH⚡	packages/world/src/cli.ts	654	print(`Skipped ${entry.kind} ${entry.id}: ${reason}.`);	CODE
HIGH⚡	packages/world/src/cli.ts	657	print(`Retained ${report.retained.length} resources for ${JSON.stringify(stagedName)}; run pnpm world down ${name}${	CODE
HIGH⚡	packages/world/src/cli.ts	777	print(command.json ? JSON.stringify(info) : describeWorldText(info));	CODE
HIGH⚡	packages/world/src/cli.ts	780	print(messageText(error));	CODE
HIGH⚡	packages/world/src/cli.ts	786	print(JSON.stringify(await Promise.all(scripts.map(async (script) => {	CODE
HIGH⚡	packages/world/src/cli.ts	1255	print(color ? `${styleText(planSymbolColor(state.kind), label[0] ?? "")} ${label.slice(2)}` : label);	CODE
HIGH⚡	packages/world/src/cli.ts	1256	print(`receipt ${snapshotPath}`);	CODE
HIGH⚡	packages/world/src/cli.ts	1259	print(`requires ${requirements.map((result) => `${result.label} ${preflightSymbol(result)}`).join(" ")}`);	CODE
HIGH⚡	packages/world/src/cli.ts	1267	print(` ${symbol} ${result.label}: ${result.detail ?? "not ready"}${result.timedOut ? " (not blocking)" : ""}	CODE
HIGH⚡	packages/world/src/cli.ts	1327	print(`World ${JSON.stringify(stagedName)} has no receipt; reaped its ledger.`);	CODE
HIGH⚡	packages/world/src/cli.ts	1332	print(`World receipt ${JSON.stringify(stagedName)} does not exist.`);	CODE
HIGH⚡	packages/world/src/cli.ts	1336	print(`World ${JSON.stringify(stagedName)} teardown was forced (pid ${result.pid}).`);	CODE
HIGH⚡	packages/world/src/cli.ts	1338	print(`World ${JSON.stringify(stagedName)} torn down.`);	CODE
HIGH⚡	packages/world/src/cli.ts	1432	print(line);	CODE
HIGH⚡	packages/world/src/cli.ts	1442	print(`World receipt ${JSON.stringify(command.name)} does not exist.`);	CODE
HIGH⚡	packages/world/src/cli.ts	1445	print(`Removed receipt metadata for ${JSON.stringify(command.name)}. The script process was not stopped.`);	CODE
HIGH⚡	packages/world/src/cli.ts	1448	print(messageText(error));	CODE
HIGH	packages/world/src/cli.ts	612	print(line);	CODE
HIGH	packages/world/src/cli.ts	741	print(`Multiple staged world receipts match ${JSON.stringify(name)}:`);	CODE
HIGH	packages/world/src/cli.ts	797	print(await helpText(options));	CODE
HIGH	packages/world/src/cli.ts	898	print(`World ${JSON.stringify(stagedName)} is already running (pid ${state.snapshot.pid}); adopted.`);	CODE
HIGH	packages/world/src/cli.ts	905	print(`World ${JSON.stringify(stagedName)} is running but its ${reason}; run pnpm world down ${script.name}${sta	CODE
HIGH	packages/world/src/cli.ts	925	print(`Removed stale world receipt ${JSON.stringify(stagedName)} (pid ${state.snapshot.pid}); recreating.`);	CODE
HIGH	packages/world/src/cli.ts	1045	print(messageText(error));	CODE
HIGH	packages/world/src/cli.ts	1059	print(`World receipt ${JSON.stringify(receiptName(command.name, command.stage))} does not exist.`);	CODE
HIGH	packages/world/src/cli.ts	1065	print(`World receipt ${JSON.stringify(candidate.stagedName)} does not exist.`);	CODE
HIGH	packages/world/src/cli.ts	1118	print(messageText(error));	CODE
HIGH	packages/world/src/cli.ts	1145	print(line);	CODE
HIGH	packages/world/src/cli.ts	1165	print(JSON.stringify({	CODE
HIGH	packages/world/src/cli.ts	1176	print(messageText(error));	CODE
HIGH	packages/world/src/cli.ts	1215	print(JSON.stringify({	CODE
HIGH	packages/world/src/cli.ts	1278	print(messageText(error));	CODE
HIGH	packages/world/src/cli.ts	1301	print(`Multiple staged world receipts match ${JSON.stringify(command.name)}:`);	CODE
HIGH	packages/world/src/cli.ts	1315	print(`World receipt ${JSON.stringify(stagedName)} does not exist.`);	CODE
HIGH	packages/world/src/cli.ts	1351	print(messageText(error));	CODE
HIGH	packages/world/src/cli.ts	1403	print(JSON.stringify({	CODE
HIGH	packages/world/src/cli.ts	1418	print(`World scripts: ${worlds.map((world) => `${world.name} (${world.path}, script; ${supportedTargetDescription(wo	CODE

Empty Error Handlers16 hits · 80 pts

Severity	File	Line	Snippet	Context
HIGH	infra/managed-deployments/gcp/runner/runner.py	273	except Exception:	CODE
HIGH	infra/managed-deployments/aws/runner/runner.py	497	except Exception:	CODE
HIGH	infra/managed-deployments/aws/health/health_agent.py	92	except Exception:	CODE
HIGH	infra/managed-deployments/aws/health/health_agent.py	55	except Exception:	CODE
HIGH	ee/packages/headless-computer/scripts/desktop-bridge.py	104	except (OSError, ValueError, RuntimeError, http.client.HTTPException):	CODE
HIGH	ee/packages/headless-computer/scripts/desktop-bridge.py	119	except ProcessLookupError:	CODE
HIGH	ee/packages/headless-computer/scripts/desktop-bridge.py	121	except FileNotFoundError:	CODE
HIGH	ee/packages/headless-computer/scripts/vnc-stdio.py	41	except OSError:	CODE
HIGH	ee/packages/headless-computer/scripts/vnc-stdio.py	59	except ProcessLookupError: pass	CODE
HIGH	ee/packages/headless-computer/scripts/vnc-stdio.py	45	except OSError: pass	CODE
HIGH	ee/packages/headless-computer/scripts/vnc-stdio.py	63	except ProcessLookupError: pass	CODE
HIGH	…ges/headless-computer/src/scripting/openwork_office.py	234	except Exception:	CODE
HIGH	packages/computer-use/computer-x11-worker.py	39	except (ValueError, subprocess.SubprocessError): pass	CODE
HIGH	packages/computer-use/computer-x11-worker.py	401	except FileNotFoundError: pass	CODE
HIGH	packages/computer-use/computer-x11-worker.py	169	except Exception: pass	CODE
HIGH	packages/computer-use/computer-x11-worker.py	172	except Exception: pass	CODE

Over-Commented Block75 hits · 74 pts

Severity	File	Line	Snippet	Context
LOW	.spectral.yaml	1	# Spectral ruleset for the Den API OpenAPI document (packages/docs/openapi.json).	COMMENT
LOW	packaging/docker/docker-compose.den-dev.yml	1	# docker-compose.den-dev.yml — Den local testability stack	COMMENT
LOW	packaging/docker/docker-compose.den-dev.yml	21	# DEN_ORG_MODE — single_org or multi_org (default: single_org)	COMMENT
LOW	packaging/docker/den-dev-up.sh	1	#!/usr/bin/env bash	COMMENT
LOW	packaging/docker/docker-compose.dev.yml	1	# docker-compose.dev.yml — Dev testability stack (no custom Dockerfile)	COMMENT
LOW	packaging/docker/docker-compose.eval.yml	1	# OpenWork evaluation stack — pull-only, no repository clone or build:	COMMENT
LOW	packaging/helm/openwork-ee/values.yaml	401	failureThreshold: 12	COMMENT
LOW	…k-ee/examples/values.aws-load-balancer-http-smoke.yaml	1	# AWS EKS Auto Mode HTTP smoke-test values for a first OpenWork EE install when	COMMENT
LOW	…ng/helm/openwork-ee/examples/values.azure-ingress.yaml	1	# Azure AKS starter values for a first OpenWork EE self-host install.	COMMENT
LOW	…elm/openwork-ee/examples/values.aws-load-balancer.yaml	1	# AWS EKS Auto Mode starter values for a first OpenWork EE self-host install.	COMMENT
LOW	…ging/helm/openwork-ee/examples/values.gcp-ingress.yaml	1	# Google Cloud GKE starter values for a first OpenWork EE self-host install.	COMMENT
LOW	evals/scripts/check-freestyle-world.ts	1	// Freestyle world check: proves the e2e/preview world end to end, with timings.	COMMENT
LOW	evals/packages/hosts/src/provision.ts	1181	// DEN_*_PUBLIC_URL identity is unknown here, so RFC 9728 validating MCP	COMMENT
LOW	infra/terraform/modules/openwork-aws-ecs/headless.tf	1	# Headless runner and Workbot.	COMMENT
LOW	…s/headless-computer/scripts/fast-sandbox-guest-init.sh	1	#!/bin/sh	COMMENT
LOW	ee/apps/landing/next-env.d.ts	1	/// <reference types="next" />	COMMENT
LOW	ee/apps/landing/app/install.sh/route.ts	1	// GET /install.sh	COMMENT
LOW	ee/apps/landing/app/install.sh/route.ts	21	# OpenWork bootstrap installer.	COMMENT
LOW	ee/apps/den-web/next.config.js	1	const path = require("path");	COMMENT
LOW	ee/apps/workbot/src/client/index.html	41	#workbot-boot .name { display: flex; align-items: center; gap: 8px; font-size: 15px; font-weight: 600; line-height	COMMENT
LOW	ee/apps/den-api/scripts/start.sh	1	#!/bin/sh	COMMENT
LOW	ee/apps/den-api/src/mcp/token-lifetime.ts	21	// The first-party Cloud Control token is a bearer access token, not a rotating	COMMENT
LOW	ee/apps/den-api/src/mcp/index.ts	61	}	COMMENT
LOW	ee/apps/den-api/src/audit/domain/account.ts	1	import { env } from "../../env.js"	COMMENT
LOW	ee/apps/den-api/src/audit/routes/integrations.ts	1	// Integrations slice: capability sources (Google Workspace, Microsoft 365), connectors,	COMMENT
LOW	ee/apps/den-api/src/audit/routes/auth.ts	1	import type { AuditRouteClass, AuditRouteDeclaration, AuditRouteMethod } from "./types.js"	COMMENT
LOW	ee/apps/den-api/src/routes/org/core.ts	741	auditLogs: env.auditVisibilityEnabled,	COMMENT
LOW	…n-api/src/routes/org/plugin-system/github-discovery.ts	621	// const folderRoots = standaloneRoot ? inferredRoots : inferredRoots.filter((root) => root !== "")	COMMENT
LOW	ee/apps/gateway/src/auto-router/openai-responses.ts	1	// Translates an Auto request (OpenAI Chat Completions) to the OpenAI Responses	COMMENT
LOW	ee/apps/gateway/src/auto-router/bedrock.ts	1	// Translates an Auto request (OpenAI Chat Completions) to the Amazon Bedrock	COMMENT
LOW	ee/apps/gateway/src/auto-router/decide.ts	1	// Picks the model and thinking level for one Smart request.	COMMENT
LOW	worlds/mcp-apps-demo.ts	1	// Seed a ready-to-try App scenario into a running world and print a private test handoff.	COMMENT
LOW	.devcontainer/start-services.sh	1	#!/usr/bin/env bash	COMMENT
LOW	.devcontainer/test-server-on-daytona.sh	1	#!/usr/bin/env bash	COMMENT
LOW	.devcontainer/docker-compose.yml	1	# Full-stack dev environment for Daytona / Codespaces / devcontainers.	COMMENT
LOW	.devcontainer/test-on-daytona.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/revert-org-mcp-connections.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/dev-workbot.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/openwork-debug.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/openwork-debug.sh	21	#	COMMENT
LOW	scripts/openwork-debug.sh	381	# Ordered teardown. Safe to run when nothing is up; each step is idempotent.	COMMENT
LOW	scripts/evals/daytona-e2e-regression.sh	1	#!/usr/bin/env bash	COMMENT
LOW	packages/types/src/den/desktop-policies.ts	61	// Canonical desktop policy catalog.	COMMENT
LOW	…er-use/native/Sources/ComputerUse/Responsibility.swift	1	import Darwin	COMMENT
LOW	packages/computer-use/windows/ComputerUse.cs	1	// Windows computer use for OpenWork: the helper behind "This PC". The desktop's	COMMENT
LOW	.github/workflows/celld-runner-deploy.yml	1	name: Deploy runner to celld	COMMENT
LOW	.github/workflows/codeql.yml	1	name: CodeQL	COMMENT
LOW	.github/workflows/review-app-deploy.yml	1	name: Review app deploy	COMMENT
LOW	.github/workflows/prod-data-dry-run.yml	1	name: Dry run on a copy of production data	COMMENT
LOW	.github/workflows/prod-data-dry-run.yml	21	# - The branch (and its password) is deleted when the job ends, also when it	COMMENT
LOW	.github/workflows/contributor-pr-test.yml	1	name: Contributor PR checks	COMMENT
LOW	.github/workflows/alpha-macos-aarch64.yml	1	name: Alpha Channels (macOS arm64 + Windows x64)	COMMENT
LOW	.github/workflows/publish-opencode-plugin.yml	1	name: Publish OpenCode plugin	COMMENT
LOW	.github/workflows/celld-backup.yml	1	name: Back up the celld bucket	COMMENT
LOW	.github/workflows/contributor-warden.yml	1	name: Contributor Warden	COMMENT
LOW	.github/workflows/den-db-migrate.yml	1	name: Den DB Migrate	COMMENT
LOW	.github/workflows/revert-fastlane.yml	1	# Repository prerequisite: Settings → General → Pull Requests → "Allow	COMMENT
LOW	.github/workflows/revert-fastlane.yml	21	# (warden TBZ-HXQ) because this job holds a pull-request write token. The	COMMENT
LOW	.github/scripts/contributor-warden-sandbox.sh	1	#!/usr/bin/env bash	COMMENT
LOW	apps/app/src/react-app/infra/query-client.ts	21	// Transcript: the streamed UIMessage[] for a session that keeps running in	COMMENT
15 more matches not shown…

Fake / Example Data51 hits · 52 pts

Severity	File	Line	Snippet	Context
LOW	packaging/helm/openwork-ee/README.md	295	ownerEmails: "admin@example.com"	CODE
LOW	packaging/helm/openwork-ee/README.md	312	bootstrapAdminEmails: "admin@example.com"	CODE
LOW	packaging/helm/openwork-ee/README.md	1040	ownerEmails: "admin@example.com"	CODE
LOW	evals/worlds/history-restore-progress.ts	97	if (box.width > 0 && box.height > 0) return input.getAttribute("placeholder");	CODE
LOW	evals/packages/cdp/src/input.ts	397	\|\| (element.getAttribute("placeholder") ?? "").trim()	CODE
LOW	evals/packages/cdp/src/input.ts	421	if (target.placeholder !== undefined && (element.getAttribute("placeholder") ?? element.getAttribute("aria-placeho	CODE
LOW	evals/packages/testkit/src/verification.ts	134	keys(r, [], ["text", "role", "label", "placeholder", "testId", "nth"]);	CODE
LOW	evals/packages/testkit/src/verification.ts	135	if (!["text", "role", "label", "placeholder", "testId"].some(key => Object.hasOwn(r, key))) invalid();	CODE
LOW	…a/managed-deployments/contract/tests/inputs.tftest.hcl	4	owner_email = "admin@example.com"	CODE
LOW⚡	infra/managed-deployments/tests/test_gcp_runtime.py	31	"DOMAIN_NAME": "openwork.example.com", "DNS_ZONE_NAME": "zone", "OWNER_EMAIL": "admin@example.com",	CODE
LOW⚡	infra/managed-deployments/tests/test_gcp_runtime.py	46	return [{"account": "admin@example.com"}]	CODE
LOW⚡	infra/managed-deployments/tests/test_gcp_runtime.py	69	"GOOGLE_BACKEND_IMPERSONATE_SERVICE_ACCOUNT": "admin@example.com",	CODE
LOW⚡	infra/managed-deployments/tests/test_gcp_runtime.py	71	"GOOGLE_OAUTH_ACCESS_TOKEN": "private-token", "GOOGLE_IMPERSONATE_SERVICE_ACCOUNT": "admin@example.	CODE
LOW	infra/managed-deployments/tests/test_gcp_installer.py	31	"DOMAIN_NAME": "openwork.example.com", "DNS_ZONE_NAME": "zone", "OWNER_EMAIL": "admin@example.com",	CODE
LOW	infra/managed-deployments/tests/test_gcp_installer.py	215	return [{"account": "admin@example.com"}]	CODE
LOW	infra/managed-deployments/tests/test_aws_installer.py	493	owner_emails = ["admin@example.com"]	CODE
LOW	…managed-deployments/gcp/terraform/tests/gcp.tftest.hcl	15	owner_email = "admin@example.com"	CODE
LOW	…d-deployments/aws/terraform/tests/lifecycle.tftest.hcl	56	owner_emails = ["admin@example.com"]	CODE
LOW	…managed-deployments/aws/terraform/tests/tls.tftest.hcl	31	owner_emails = ["admin@example.com"]	CODE
LOW	…ed-deployments/aws/terraform/tests/contract.tftest.hcl	48	owner_email = "admin@example.com"	CODE
LOW	infra/terraform/modules/openwork-aws-ecs/README.md	104	owner_emails = ["admin@example.com"]	CODE
LOW	…modules/openwork-aws-ecs/tests/openwork_web.tftest.hcl	55	owner_emails = ["admin@example.com"]	CODE
LOW	…odules/openwork-aws-ecs/tests/load_balancer.tftest.hcl	54	owner_emails = ["admin@example.com"]	CODE
LOW	…/modules/openwork-aws-ecs/tests/ecs_cluster.tftest.hcl	51	owner_emails = ["admin@example.com"]	CODE
LOW	…aform/modules/openwork-aws-ecs/tests/agents.tftest.hcl	59	owner_emails = ["admin@example.com"]	CODE
LOW	…orm/modules/openwork-aws-ecs/tests/contract.tftest.hcl	45	owner_emails = ["admin@example.com"]	CODE
LOW	…s/openwork-aws-ecs/tests/negative/migration.tftest.hcl	42	owner_emails = ["admin@example.com"]	CODE
LOW	infra/terraform/modules/openwork-self-host/README.md	45	\| `owner_emails` \| `["admin@example.com"]` \|	CODE
LOW	infra/terraform/modules/openwork-self-host/README.md	61	owner_emails = ["admin@example.com"]	CODE
LOW	…raform/modules/openwork-azure-container-apps/README.md	72	owner_emails = ["admin@example.com"]	CODE
LOW	…penwork-azure-container-apps/tests/defaults.tftest.hcl	60	owner_emails = ["admin@example.com"]	CODE
LOW	…azure-container-apps/tests/failed-migration.tftest.hcl	38	owner_emails = ["admin@example.com"]	CODE
LOW	…fra/terraform/modules/openwork-gcp-cloud-run/README.md	59	owner_emails = ["admin@example.com"]	CODE
LOW	…/openwork-gcp-cloud-run/tests/load_balancer.tftest.hcl	32	owner_emails = ["admin@example.com"]	CODE
LOW	…ules/openwork-gcp-cloud-run/tests/cloud_run.tftest.hcl	32	owner_emails = ["admin@example.com"]	CODE
LOW	…ules/openwork-gcp-cloud-run/tests/cloud_run.tftest.hcl	79	DEN_SINGLE_ORG_OWNER_EMAILS = "admin@example.com"	CODE
LOW	…ules/openwork-gcp-cloud-run/tests/cloud_run.tftest.hcl	80	DEN_BOOTSTRAP_ADMIN_EMAILS = "admin@example.com"	CODE
LOW	…dules/openwork-gcp-cloud-run/tests/database.tftest.hcl	32	owner_emails = ["admin@example.com"]	CODE
LOW	ee/packages/den-db/scripts/admin-scale-benchmark.ts	308	await connection.query("INSERT INTO `admin_allowlist` (`id`,`email`,`note`,`created_at`,`updated_at`) VALUES ('aal_000	CODE
LOW	ee/packages/den-db/scripts/admin-scale-benchmark.ts	413	const viewer = { id: userId(0), email: "admin@example.com", name: "Scale Admin" }	CODE
LOW	ee/apps/landing/components/app-feedback-form.tsx	206	placeholder="Jane Doe"	CODE
LOW	ee/apps/den-web/components/den-admin-panel.tsx	915	viewer: { id: "user_admin_fixture", email: "admin@example.com", name: "Admin Fixture" },	CODE
LOW	ee/apps/den-web/components/den-admin-panel.tsx	916	admins: [{ id: "admin_fixture", email: "admin@example.com", note: "Eval fixture admin", createdAt: generatedAt }],	CODE
LOW	ee/apps/headless-runner/scripts/owner-cells-e2e.ts	83	response.end(`data: ${JSON.stringify({ choices: [{ delta: call ? { tool_calls: [call] } : { content: `Sealed answe	CODE
LOW	ee/apps/headless-runner/scripts/owner-cells-e2e.ts	83	response.end(`data: ${JSON.stringify({ choices: [{ delta: call ? { tool_calls: [call] } : { content: `Sealed answe	CODE
LOW	ee/apps/den-api/test/managed-deployments.test.ts	39	const input = { name: "Production", provider: "aws", domainName: "openwork.example.com", ownerEmail: "admin@example.co	CODE
LOW	ee/apps/den-api/test/managed-deployments.test.ts	48	const input = { name: "Production", provider: "aws", domainName: "openwork.example.com", ownerEmail: "admin@example.co	CODE
LOW	ee/apps/den-api/test/api/workbot-telemetry.api.test.ts	136	defaultModel: "requested-model-alias", defaultModelApiKey: "fake-key",	CODE
LOW	packages/mcp-apps/src/shared/bridge.tsx	46	if (!received \|\| !app) return <div className="placeholder" role="status" aria-label="Waiting for result" />	CODE
LOW	packages/email/emails/feedback.tsx	8	name: "Jane Doe",	CODE
LOW	apps/server/test/opencode-v2-local-auth.test.ts	151	assert.ok(!JSON.stringify(local).includes("opencode-oauth-dummy-key"));	CODE

Excessive Try-Catch Wrapping34 hits · 40 pts

Severity	File	Line	Snippet	Context
LOW	evals/packages/testkit/src/link.ts	309	except Exception:	CODE
LOW	infra/managed-deployments/gcp/runner/runner.py	60	except Exception:	CODE
LOW	infra/managed-deployments/gcp/runner/runner.py	273	except Exception:	CODE
LOW	infra/managed-deployments/gcp/runner/runner.py	308	except Exception:	CODE
LOW	infra/managed-deployments/gcp/health/health_agent.py	63	except Exception:	CODE
LOW	infra/managed-deployments/gcp/health/health_agent.py	79	except Exception:	CODE
MEDIUM	infra/managed-deployments/gcp/health/health_agent.py	58	def guarded(identifier, call):	CODE
LOW	infra/managed-deployments/aws/bootstrap/bootstrap.py	81	except Exception as error:	CODE
LOW	infra/managed-deployments/aws/bootstrap/bootstrap.py	142	except Exception:	CODE
LOW	infra/managed-deployments/aws/runner/runner.py	54	except Exception:	CODE
LOW	infra/managed-deployments/aws/runner/runner.py	497	except Exception:	CODE
LOW	infra/managed-deployments/aws/runner/runner.py	508	except Exception:	CODE
LOW	infra/managed-deployments/aws/runner/runner.py	531	except Exception as error:	CODE
LOW⚡	infra/managed-deployments/aws/health/health_agent.py	55	except Exception:	CODE
LOW⚡	infra/managed-deployments/aws/health/health_agent.py	60	except Exception:	CODE
LOW⚡	infra/managed-deployments/aws/health/health_agent.py	67	except Exception as error:	CODE
LOW	infra/managed-deployments/aws/health/health_agent.py	92	except Exception:	CODE
LOW	infra/managed-deployments/aws/health/health_agent.py	114	except Exception:	CODE
MEDIUM	infra/managed-deployments/aws/health/health_agent.py	64	def guarded(check_id, function):	CODE
MEDIUM	infra/managed-deployments/aws/health/health_agent.py	84	def running_version(ecs, cluster, services):	CODE
LOW	ee/packages/headless-computer/scripts/desktop-bridge.py	302	except Exception as error:	CODE
LOW	…ges/headless-computer/src/scripting/openwork_office.py	87	except Exception:	CODE
LOW	…ges/headless-computer/src/scripting/openwork_office.py	234	except Exception:	CODE
LOW	…ges/headless-computer/src/scripting/openwork_office.py	245	except Exception as error:	CODE
LOW	…es/headless-computer/src/scripting/openwork_blender.py	120	except Exception:	CODE
LOW	…es/headless-computer/src/scripting/openwork_blender.py	147	except Exception:	CODE
LOW	…es/headless-computer/src/scripting/openwork_blender.py	262	except Exception:	CODE
LOW⚡	packages/computer-use/computer-x11-worker.py	164	except Exception as error:	CODE
LOW⚡	packages/computer-use/computer-x11-worker.py	169	except Exception: pass	CODE
LOW⚡	packages/computer-use/computer-x11-worker.py	172	except Exception: pass	CODE
LOW	packages/computer-use/computer-x11-worker.py	232	except Exception: return {"elements": [], "capability": "unavailable"}	CODE
LOW	packages/computer-use/computer-x11-worker.py	269	except Exception:	CODE
LOW	packages/computer-use/computer-x11-worker.py	376	except Exception as error:	CODE
LOW	…esktop/electron/computer-scripting/openwork_blender.py	57	except Exception:	CODE

Hallucination Indicators3 hits · 30 pts

Severity	File	Line	Snippet	Context
CRITICAL	…app/(den)/dashboard/_components/automations-screen.tsx	113	<p className="mt-1 line-clamp-2 text-[12px] text-gray-400">{item.revision.action?.kind === "saved_	CODE
CRITICAL	…ges/enterprise-mcp-client/src/enterprise-mcp-client.ts	659	await input.connection.authorization.persistence.authorizations.invalidate({	CODE
CRITICAL	…-app/domains/settings/pages/advanced-view-sections.tsx	452	value={`${props.cloudMcpHealth.tools.direct.trace.endpoint ?? "unknown endpoint"} · ${props.cloudMcpHe	CODE

Self-Referential Comments8 hits · 24 pts

Severity	File	Line	Snippet	Context
MEDIUM	…/managed-deployments/gcp/terraform/.terraform.lock.hcl	1	# This file is maintained automatically by "terraform init".	COMMENT
MEDIUM	infra/managed-deployments/gcp/runner/runner.py	86	# This file is inside the bundle whose SHA-256 install.py checked before	COMMENT
MEDIUM	…/managed-deployments/aws/terraform/.terraform.lock.hcl	1	# This file is maintained automatically by "terraform init".	COMMENT
MEDIUM	…ure-container-apps/examples/complete/opentofu.lock.hcl	1	# This file is maintained automatically by "tofu init".	COMMENT
MEDIUM	…e-container-apps/examples/complete/.terraform.lock.hcl	1	# This file is maintained automatically by "terraform init".	COMMENT
MEDIUM	…rk-gcp-cloud-run/examples/complete/.terraform.lock.hcl	1	# This file is maintained automatically by "terraform init".	COMMENT
MEDIUM	.devcontainer/setup-daytona-secrets-volume.sh	4	# Create the reusable Daytona secrets volume once. If a local env file is	COMMENT
MEDIUM	.github/workflows/release-macos-aarch64.yml	213	# Create the tag ref via REST as the diff-warden app (a v* tag	COMMENT

Deep Nesting26 hits · 22 pts

Severity	File	Line	Context
LOW	infra/managed-deployments/tests/test_gcp_runtime.py	104	CODE
LOW	infra/managed-deployments/tests/test_gcp_runtime.py	203	CODE
LOW	infra/managed-deployments/tests/test_gcp_runtime.py	253	CODE
LOW	infra/managed-deployments/tests/test_gcp_runtime.py	380	CODE
LOW	infra/managed-deployments/tests/test_gcp_runtime.py	391	CODE
LOW	infra/managed-deployments/tests/test_gcp_installer.py	198	CODE
LOW	infra/managed-deployments/tests/test_aws_installer.py	231	CODE
LOW	infra/managed-deployments/tests/test_aws_installer.py	382	CODE
LOW	infra/managed-deployments/tests/test_aws_adoption.py	95	CODE
LOW	infra/managed-deployments/tests/test_aws_adoption.py	136	CODE
LOW	infra/managed-deployments/gcp/runner/install.py	132	CODE
LOW	infra/managed-deployments/aws/runner/runner.py	39	CODE
LOW	infra/managed-deployments/aws/runner/runner.py	275	CODE
LOW	infra/managed-deployments/aws/health/health_agent.py	36	CODE
LOW	ee/packages/headless-computer/scripts/desktop-bridge.py	90	CODE
LOW	ee/packages/headless-computer/scripts/vnc-stdio.py	11	CODE
LOW	…ckages/headless-computer/scripts/app-scripting.test.py	77	CODE
LOW	…ckages/headless-computer/scripts/app-scripting.test.py	118	CODE
LOW	…ges/headless-computer/src/scripting/openwork_office.py	124	CODE
LOW	…es/headless-computer/src/scripting/openwork_blender.py	62	CODE
LOW	…es/headless-computer/src/scripting/openwork_blender.py	89	CODE
LOW	…es/headless-computer/src/scripting/openwork_blender.py	202	CODE
LOW	packages/computer-use/computer-x11-worker.py	69	CODE
LOW	packages/computer-use/computer-x11-worker.py	221	CODE
LOW	packages/computer-use/computer-x11-worker.py	344	CODE
LOW	…esktop/electron/computer-scripting/openwork_blender.py	75	CODE

Modern AI Meta-Vocabulary5 hits · 13 pts

Severity	File	Line	Snippet	Context
MEDIUM	evals/verification-dictionary.md	244	- [agentic-qe-framework-v3](https://github.com/sreevsr/agentic-qe-framework-v3):	CODE
MEDIUM	infra/managed-deployments/gcp/runner/runner.py	170	# object serializes the whole orchestration; no expiration or auto-stealing.	COMMENT
MEDIUM	docs/alchemy-effect-testkit-migration.md	446	### Phase 2: local Den orchestration (5-8 engineer-days)	COMMENT
MEDIUM	docs/quality/ui-guardrails.md	1	# UI guardrails	COMMENT
MEDIUM	packages/codemode/README.md	232	The instructions are structured markdown, ordered so the workflow sits at the top and the catalog at the bottom: a `## W	CODE

Structural Annotation Overuse6 hits · 9 pts

Severity	File	Line	Snippet	Context
LOW	ee/apps/landing/public/auth.md	12	## Step 1: Discover	COMMENT
LOW	ee/apps/landing/public/auth.md	70	## Step 2: Pick a method	COMMENT
LOW	ee/apps/landing/public/auth.md	117	## Step 3: Register	COMMENT
LOW	ee/apps/landing/public/auth.md	153	## Step 4: Claim ceremony	COMMENT
LOW	ee/apps/landing/public/auth.md	200	## Step 5: Exchange the assertion	COMMENT
LOW	ee/apps/landing/public/auth.md	215	## Step 6: Use the access_token	COMMENT

AI Slop Vocabulary3 hits · 9 pts

Severity	File	Line	Snippet	Context
MEDIUM	.devcontainer/test-server-on-daytona.sh	254	# Caller-supplied Den env (base64 KEY=VALUE lines from the eval harness); the	COMMENT
MEDIUM	.devcontainer/start-daytona-server.sh	17	# Per-test Den env from the eval harness (base64 KEY=VALUE lines, one per	COMMENT
MEDIUM	.github/workflows/ci-tests.yml	419	# harness change (build-inputs.mjs "desktop-package"). Dev pushes run it for	COMMENT

Cross-Language Confusion1 hit · 8 pts

Severity	File	Line	Snippet	Context
HIGH	infra/managed-deployments/gcp/health/health_agent.py	101	# explicit null, bool, string, float and out-of-range values stay invalid.	COMMENT

Example Usage Blocks5 hits · 8 pts

Severity	File	Line	Snippet	Context
LOW	.devcontainer/stop-daytona-recording.sh	7	# Usage:	COMMENT
LOW	.devcontainer/test-server-on-daytona.sh	6	# Usage:	COMMENT
LOW	.devcontainer/setup-daytona-secrets-volume.sh	7	# Usage:	COMMENT
LOW	.devcontainer/test-on-daytona.sh	6	# Usage:	COMMENT
LOW	scripts/revert-org-mcp-connections.sh	17	# Usage:	COMMENT

Overly Generic Function Names3 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	evals/packages/labs/src/mock-google-server.ts	725	async function handleRequest(state: MockGoogleState, request: IncomingMessage, response: ServerResponse): Promise<void>	CODE
LOW	evals/packages/labs/src/idp.ts	811	async function handleRequest(state: MockIdpState, certificate: string, request: IncomingMessage, response: ServerRespons	CODE
LOW	…/src/react-app/shell/control/use-ui-control-mailbox.ts	20	async function handleRequest(item: OpenworkUiControlRequest, api: OpenworkControlAPI): Promise<unknown> {	CODE

Unused Imports2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	packages/computer-use/computer-x11-worker.py	11		CODE
LOW	packages/computer-use/computer-x11-worker.py	12		CODE

different-ai/openwork

Open-Source Code Quality, Security and Technical Debt Review