Pattern Findings

The scanner identified 11966 distinct pattern matches across 17 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers7936 hits · 7409 pts

Severity	File	Line	Snippet	Context
LOW	exp/conftest.py	27	def isolate_provider_auth_store(	CODE
LOW	exp/optimize/simulation/evolution_test.py	19	def test_selected_edit_is_retrievable_and_rejected_edit_is_research_only(	CODE
LOW	exp/optimize/simulation/library_test.py	9	def test_net_gain_cannot_hide_a_protected_regression() -> None:	CODE
LOW	exp/optimize/simulation/library_test.py	43	def test_improvement_on_assessed_new_logs_selects_child() -> None:	CODE
LOW	exp/optimize/simulation/library_test.py	70	def test_protected_cases_cannot_be_exposed_as_training(same_lineage: bool) -> None:	CODE
LOW	exp/optimize/simulation/library_test.py	94	def test_unchanged_knowledge_cannot_gain_acceptance_from_generation_noise() -> None:	CODE
LOW	exp/optimize/model/sft/run_manifest.py	80	def automatic_sft_acceptance_path(store: ProjectStore) -> Path:	CODE
LOW	exp/optimize/model/sft/run_manifest.py	92	def initialize_automatic_sft_acceptance(	CODE
LOW	exp/optimize/model/sft/run_manifest.py	172	def load_automatic_sft_acceptance(	CODE
LOW	exp/optimize/model/sft/run_manifest.py	215	def require_automatic_sft_acceptance_binding(	CODE
LOW	exp/optimize/model/sft/run_manifest.py	275	def load_automatic_sft_acceptance_selection(	CODE
LOW	exp/optimize/model/sft/run_manifest.py	311	def write_automatic_sft_acceptance_selection_unlocked(	CODE
LOW	exp/optimize/model/sft/run_manifest.py	354	def initialize_tinker_sft_run(	CODE
LOW	exp/optimize/model/sft/run_manifest.py	731	def _validate_automatic_acceptance(	CODE
LOW	exp/optimize/model/sft/run_manifest.py	806	def _require_safe_automatic_acceptance_path(store: ProjectStore, path: Path) -> None:	CODE
LOW	exp/optimize/model/sft/runtime_source_test.py	108	def test_completed_multiplicity_is_retained_without_quality_filter(	CODE
LOW	exp/optimize/model/sft/runtime_source_test.py	194	def test_request_history_and_completed_tool_action_are_preserved(tmp_path: Path) -> None:	CODE
LOW	exp/optimize/model/sft/runtime_source_test.py	244	def test_identical_rows_across_lineages_share_one_partition_component(tmp_path: Path) -> None:	CODE
LOW	exp/optimize/model/sft/runtime_source_test.py	283	def test_runtime_dataset_replay_is_exact_and_overlapping_snapshots_are_rejected(	CODE
LOW	exp/optimize/model/sft/runtime_source_test.py	331	def test_generated_or_non_snapshot_artifact_cannot_enter_runtime_sft(tmp_path: Path) -> None:	CODE
LOW	exp/optimize/model/sft/provider_resources.py	11	def validate_provider_resource_id(value: str, *, label: str) -> str:	CODE
LOW	exp/optimize/model/sft/training_contracts.py	78	def conservative_training_step_cost(	CODE
LOW	exp/optimize/model/sft/training_contracts.py	195	def _require_exact_dataset_and_spec_bindings(self) -> TinkerSFTRunManifest:	CODE
LOW	exp/optimize/model/sft/training_contracts.py	333	def _require_exact_dataset_binding(self) -> TinkerSFTModelArtifact:	CODE
LOW	exp/optimize/model/sft/training_contracts.py	378	def _require_exact_terminal_inputs(self) -> TinkerSFTResult:	CODE
LOW	exp/optimize/model/sft/training_runtime.py	136	def _validate_rendered_datums(	CODE
LOW	exp/optimize/model/sft/training_runtime.py	178	def _require_budget_can_continue(	CODE
LOW	exp/optimize/model/sft/rendering.py	48	def context_target_fingerprint(	CODE
LOW	exp/optimize/model/sft/rendering.py	55	def canonical_partitioned_rows_jsonl(rows: Sequence[PartitionedSFTExample]) -> bytes:	CODE
LOW	exp/optimize/model/sft/automatic.py	110	def prepare_runtime_sft_model_optimization(	CODE
LOW	exp/optimize/model/sft/automatic.py	204	def require_completed_runtime_interactions(store: ProjectStore) -> None:	CODE
LOW	exp/optimize/model/sft/automatic.py	216	def accept_runtime_sft_model_optimization(	CODE
LOW	exp/optimize/model/sft/automatic.py	346	def _require_preparation_matches_latest(	CODE
LOW	exp/optimize/model/sft/automatic.py	387	def _load_selected_acceptance(	CODE
LOW	exp/optimize/model/sft/automatic.py	424	def _require_terminal_registered_acceptance(	CODE
LOW	exp/optimize/model/sft/automatic.py	457	def _load_selected_run_manifest(	CODE
LOW	exp/optimize/model/sft/automatic.py	490	def _require_current_acceptance_binding(	CODE
LOW	exp/optimize/model/sft/automatic.py	531	def _completed_runtime_events(	CODE
LOW	exp/optimize/model/sft/automatic.py	562	def _optional_bootstrap_config(	CODE
LOW	exp/optimize/model/sft/automatic.py	663	def _accepted_run_needs_resume(	CODE
LOW	exp/optimize/model/sft/automatic.py	707	def _materialize_appended_prefix(	CODE
LOW	exp/optimize/model/sft/tinker_test.py	96	def test_messages_preserve_complete_target_action_and_tool_context() -> None:	CODE
LOW	exp/optimize/model/sft/tinker_test.py	142	def test_messages_canonicalize_provider_tool_argument_formatting() -> None:	CODE
LOW	exp/optimize/model/sft/tinker_test.py	233	def test_datum_fixture_is_shifted_cross_entropy_with_only_target_tokens_and_weights() -> None:	CODE
LOW	exp/optimize/model/sft/tinker_test.py	269	def load_state_with_optimizer(self, path: str) -> _Future[None]:	CODE
LOW	exp/optimize/model/sft/tinker_test.py	287	def create_lora_training_client(	CODE
LOW	exp/optimize/model/sft/tinker_test.py	295	def test_backend_restores_before_renderer_setup_with_an_injected_local_service(	CODE
LOW	exp/optimize/model/sft/tinker_test.py	330	def test_context_truncation_retains_the_complete_two_token_target() -> None:	CODE
LOW	exp/optimize/model/sft/tinker_test.py	349	def test_backend_cost_bound_uses_explicit_price_and_maximum_tokens() -> None:	CODE
LOW	exp/optimize/model/sft/tinker_test.py	361	def test_datum_limit_rejects_instead_of_truncating_the_two_token_target() -> None:	CODE
LOW	exp/optimize/model/sft/automatic_test.py	122	def test_first_runtime_prefix_needs_no_bootstrap_dataset_or_config(tmp_path: Path) -> None:	CODE
LOW	exp/optimize/model/sft/automatic_test.py	165	def test_automatic_runtime_sft_schedules_every_lineage_and_retains_duplicates(	CODE
LOW	exp/optimize/model/sft/automatic_test.py	235	def test_unchanged_prefix_reuses_snapshot_dataset_config_and_pointer_bytes(	CODE
LOW	exp/optimize/model/sft/automatic_test.py	269	def test_appended_interaction_creates_new_graph_without_mutating_old_artifacts(	CODE
LOW	exp/optimize/model/sft/automatic_test.py	331	def test_run_acceptance_rejects_an_advanced_journal_before_manifest_write(	CODE
LOW	exp/optimize/model/sft/automatic_test.py	409	def initialize_while_writer_waits(args, *kwargs): # noqa: ANN002, ANN003, ANN202	CODE
LOW	exp/optimize/model/sft/automatic_test.py	456	def test_crash_before_acceptance_pointer_leaves_orphan_inert_and_reconsents(	CODE
LOW	exp/optimize/model/sft/automatic_test.py	670	def test_automatic_acceptance_pointer_rejects_broken_and_live_symlinks_before_write(	CODE
LOW	exp/optimize/model/sft/automatic_test.py	711	def test_automatic_acceptance_pointer_rolls_back_if_commit_is_interrupted(	CODE
LOW	exp/optimize/model/sft/automatic_test.py	742	def test_empty_or_incomplete_journal_fails_without_materializing_runtime_artifacts(	CODE
7876 more matches not shown…

Docstring Block Structure984 hits · 4920 pts

Severity	File	Line	Snippet	Context
HIGH	exp/__init__.py	307	Resolve one supported package-root service on first access. Args: name: Package attribute requested by Pyth	STRING
HIGH	exp/optimize/model/sft/run_manifest.py	110	Persist or verify automatic consent bound to an exact selected W12/W13 graph. Args: store: Project receivin	STRING
HIGH	exp/optimize/model/sft/run_manifest.py	176	Load one immutable acceptance artifact with exact manifest and canonical-byte checks. Args: store: Project	STRING
HIGH	exp/optimize/model/sft/run_manifest.py	278	Read the selected automatic acceptance without acquiring its external coordination lock. Callers that mutate the po	STRING
HIGH	exp/optimize/model/sft/run_manifest.py	317	CAS-select one immutable acceptance while the caller owns the coordination lock. Args: store: Project recei	STRING
HIGH	exp/optimize/model/sft/run_manifest.py	363	Durably accept one verified W12 dataset without composing a trainer backend. Args: store: Project store own	STRING
HIGH	exp/optimize/model/sft/run_manifest.py	401	Load an accepted W13 run manifest without creating local state. Args: store: Project store owning the immut	STRING
HIGH	exp/optimize/model/sft/run_manifest.py	439	Load one recursively verified W12 dataset and its exact manifest input. Args: store: Project store owning t	STRING
HIGH	exp/optimize/model/sft/run_manifest.py	503	Load an exact run manifest or create it once from verified immutable inputs. Args: dataset: Recursively ver	STRING
HIGH	exp/optimize/model/sft/provider_resources.py	12	Reject URLs, credentials, and secret-like material before artifact persistence. Args: value: Provider-retur	STRING
HIGH	exp/optimize/model/sft/training_contracts.py	62	Reject nonfinite prices, caps, and learning rates. Args: value: Optional numeric setting validated	STRING
HIGH	exp/optimize/model/sft/training_contracts.py	81	Bound one logical training step from explicit price and maximum token settings. Args: spec: Frozen settings	STRING
HIGH	exp/optimize/model/sft/training_contracts.py	117	Reject nonfinite backend loss or gradient observations. Args: value: Optional backend metric valida	STRING
HIGH	exp/optimize/model/sft/training_contracts.py	247	Reject nonfinite persisted loss or gradient observations. Args: value: Optional metric validated by	STRING
HIGH	exp/optimize/model/sft/automatic.py	117	Seal completed routed interactions and select their deterministic W12 and config. A latest config supplies previous	STRING
HIGH	exp/optimize/model/sft/automatic.py	223	Atomically bind the current journal prefix to one durable local W13 run. The exact prepared prefix is checked under	STRING
HIGH	exp/optimize/model/sft/automatic.py	350	Recursively require one preparation to equal the selected immutable graph. Args: store: Project containing	STRING
HIGH	exp/optimize/model/sft/automatic.py	391	Load the selected receipt and verify its prior chain and pointer bindings. Args: store: Project owning the	STRING
HIGH	exp/optimize/model/sft/automatic.py	463	Load the exact generic W13 manifest required by a selected automatic receipt. Args: store: Project owning t	STRING
HIGH	exp/optimize/model/sft/automatic.py	534	Return a valid journal containing at least one completed routed interaction. Args: journal: Project journal	STRING
HIGH	exp/optimize/model/sft/automatic.py	588	Reuse an unchanged selected prefix or require a strict append-only continuation. Args: store: Project conta	STRING
HIGH	exp/optimize/model/sft/automatic.py	669	Return whether a durably accepted W13 run still lacks catalog registration. A registered alias is the existing dura	STRING
HIGH	exp/optimize/model/sft/automatic.py	716	Persist a new full journal prefix, W12 dataset, config, and latest pointer. Args: store: Project receiving	STRING
HIGH	exp/optimize/model/sft/tinker.py	116	Create a managed LoRA client and restore a durable state before rendering any datum. Args: spec: Fr	STRING
HIGH	exp/optimize/model/sft/tinker.py	172	Render every complete target action into a cross-entropy datum in W12 row order. Only the final assistant messa	STRING
HIGH	exp/optimize/model/sft/tinker.py	230	Run exactly one managed cross-entropy forward-backward and Adam update. Args: datums: Datums produc	STRING
HIGH	exp/optimize/model/sft/tinker.py	284	Convert one immutable W12 example into a complete cookbook supervised conversation. The task is explicit initial co	STRING
HIGH	exp/optimize/model/sft/builder.py	90	Build one deterministic SFT dataset from accepted production and teacher evidence. Args: store: One project	STRING
HIGH	exp/optimize/model/sft/builder.py	282	Persist one dataset as immutable manifest metadata plus canonical JSONL example rows. Args: store: Project-	STRING
HIGH	exp/optimize/model/sft/builder.py	326	Load only a verified, previously frozen SFT dataset artifact. Args: store: Project-local immutable artifact	STRING
HIGH	exp/optimize/model/sft/builder.py	375	Reload and rebuild one accepted dataset from its persisted W12 evidence chain. Args: store: Project-local s	STRING
HIGH	exp/optimize/model/sft/sources.py	94	Hydrate one accepted production source from its immutable acceptance artifact. Args: store: Project store t	STRING
HIGH	exp/optimize/model/sft/sources.py	164	Hydrate one accepted teacher source from its immutable acceptance artifact. Args: store: Project store that	STRING
HIGH	exp/optimize/model/sft/training_test.py	66	Render deterministic datum identities and supervised-token counts. Args: examples: Frozen W12 examp	STRING
HIGH	exp/optimize/model/sft/training_test.py	83	Record one batch and return deterministic metrics or an injected failure. Args: datums: Rendered ex	STRING
HIGH	exp/optimize/model/sft/training_test.py	177	Return the configured batch bound or an injected planning failure. Args: spec: Frozen training sett	STRING
HIGH	exp/optimize/model/sft/composition.py	241	Create immutable W14M intent from one already-persisted and verified W12 dataset. This is intentionally separate fr	STRING
HIGH	exp/optimize/model/sft/composition.py	305	Persist W14M intent and optionally establish the bootstrap project binding. Args: store: Project store that	STRING
HIGH	exp/optimize/model/sft/composition.py	349	Load one digest-verified immutable W14M config artifact. Args: store: Project store that owns the config ar	STRING
HIGH	exp/optimize/model/sft/composition.py	390	Perform all read-only checks before a caller can consent to managed SFT dispatch. The preflight validates the persi	STRING
HIGH	exp/optimize/model/sft/composition.py	471	Run only W13 Tinker SFT, then register a recursively verified opaque sampling handle. Args: store: Project	STRING
HIGH	exp/optimize/model/sft/selection.py	78	Load and recursively verify the latest coordination pointer when present. Args: store: Project whose pointe	STRING
HIGH	exp/optimize/model/sft/selection.py	116	Return the latest verified config input or the project's bootstrap binding. Args: store: Project containing	STRING
HIGH	exp/optimize/model/sft/selection.py	169	Atomically advance the verified latest pointer with compare-and-swap semantics. Args: store: Project receiv	STRING
HIGH	exp/optimize/model/sft/selection.py	278	Return and verify the optional project-bound bootstrap config input. Args: store: Project that may contain	STRING
HIGH	exp/optimize/model/sft/selection.py	301	Return a verified manifest after checking its exact input and domain type. Args: store: Project containing	STRING
HIGH	exp/optimize/model/sft/selection.py	339	Derive the immutable-dataset-specific catalog alias from its selected prefix. Args: prefix: Persisted user-	STRING
HIGH	exp/optimize/model/sft/runtime_source.py	44	Resolve every completed routed interaction without applying a quality filter. Args: store: Project store co	STRING
HIGH	exp/optimize/model/sft/runtime_source.py	93	Convert one completed logical interaction into one eligible assistant target. Args: snapshot: Exact immutab	STRING
HIGH	exp/optimize/model/sft/runtime_source.py	211	Convert exact request-visible messages into canonical SFT context. Args: messages: Ordered visible messages	STRING
HIGH	exp/optimize/model/sft/runtime_source.py	254	Recover one unambiguous assistant action from request history. Args: message: Request-visible assistant mes	STRING
HIGH	exp/optimize/model/sft/training.py	111	Train a managed LoRA from frozen W12 examples with append-only local provenance. Args: store: Project store	STRING
HIGH	exp/optimize/evaluation/simulation.py	44	Load an exactly completed simulation set or run the simulator to a final one. A completed prior run replays without	STRING
HIGH	exp/optimize/evaluation/learned_memory.py	95	Pin the build's learned memory at its latest version, or None when nothing was learned. Args: project: Proj	STRING
HIGH	exp/optimize/evaluation/learned_memory.py	138	Bind the pinned version read-only, after checking it still matches the simulator. Args: project: Project ow	STRING
HIGH	exp/optimize/evaluation/service.py	87	Run fresh paired worker evaluations against a completed simulation project. Args: project: Project with imm	STRING
HIGH	exp/optimize/evaluation/retrieval_binding.py	33	Find the configured alias that embeds queries for a simulator's retrieval index. Credential-free: compares static c	STRING
HIGH	exp/optimize/evaluation/retrieval_binding.py	79	Resolve the registered embedder and meter its query calls in the evaluation budget. Args: registry: Evaluat	STRING
HIGH	exp/optimize/evaluation/usage_estimate.py	291	Size one authored scenario from its declared inputs, without source traces. The episode is one answering turn, prec	STRING
HIGH	exp/optimize/evaluation/held_out_fidelity.py	73	Select held-out traces deterministically. Held-out tasks are taken in task-ID order; each replays its first source	STRING
924 more matches not shown…

Unused Imports2046 hits · 1788 pts

Severity	File	Line	Context
LOW	conftest.py	3	CODE
LOW	exp/conftest.py	3	CODE
LOW	exp/__init__.py	3	CODE
LOW	exp/__init__.py	9	CODE
LOW	exp/__init__.py	10	CODE
LOW	exp/__init__.py	13	CODE
LOW	exp/__init__.py	14	CODE
LOW	exp/__init__.py	15	CODE
LOW	exp/__init__.py	16	CODE
LOW	exp/__init__.py	17	CODE
LOW	exp/__init__.py	18	CODE
LOW	exp/__init__.py	19	CODE
LOW	exp/__init__.py	20	CODE
LOW	exp/__init__.py	21	CODE
LOW	exp/__init__.py	22	CODE
LOW	exp/__init__.py	23	CODE
LOW	exp/__init__.py	24	CODE
LOW	exp/__init__.py	25	CODE
LOW	exp/__init__.py	26	CODE
LOW	exp/__init__.py	27	CODE
LOW	exp/__init__.py	28	CODE
LOW	exp/__init__.py	29	CODE
LOW	exp/__init__.py	30	CODE
LOW	exp/__init__.py	31	CODE
LOW	exp/__init__.py	32	CODE
LOW	exp/__init__.py	33	CODE
LOW	exp/__init__.py	34	CODE
LOW	exp/__init__.py	35	CODE
LOW	exp/__init__.py	36	CODE
LOW	exp/__init__.py	39	CODE
LOW	exp/__init__.py	40	CODE
LOW	exp/__init__.py	41	CODE
LOW	exp/__init__.py	42	CODE
LOW	exp/__init__.py	43	CODE
LOW	exp/__init__.py	44	CODE
LOW	exp/__init__.py	45	CODE
LOW	exp/__init__.py	48	CODE
LOW	exp/__init__.py	49	CODE
LOW	exp/__init__.py	50	CODE
LOW	exp/__init__.py	51	CODE
LOW	exp/__init__.py	54	CODE
LOW	exp/__init__.py	55	CODE
LOW	exp/__init__.py	56	CODE
LOW	exp/__init__.py	57	CODE
LOW	exp/__init__.py	58	CODE
LOW	exp/__init__.py	61	CODE
LOW	exp/__init__.py	64	CODE
LOW	exp/__init__.py	67	CODE
LOW	exp/__init__.py	68	CODE
LOW	exp/__init__.py	69	CODE
LOW	exp/__init__.py	70	CODE
LOW	exp/__init__.py	73	CODE
LOW	exp/__init__.py	76	CODE
LOW	exp/__init__.py	79	CODE
LOW	exp/__init__.py	82	CODE
LOW	exp/__init__.py	85	CODE
LOW	exp/__init__.py	86	CODE
LOW	exp/__init__.py	87	CODE
LOW	exp/__init__.py	88	CODE
LOW	exp/__init__.py	89	CODE
1986 more matches not shown…

Deep Nesting317 hits · 298 pts

Severity	File	Line	Context
LOW	.claude/skills/video-create/scripts/analyze_ref.py	85	CODE
LOW	exp/conftest.py	189	CODE
LOW	exp/conftest.py	133	CODE
LOW	exp/optimize/simulation/library.py	73	CODE
LOW	exp/optimize/model/sft/training_runtime.py	97	CODE
LOW	exp/optimize/model/sft/automatic.py	110	CODE
LOW	exp/optimize/model/sft/automatic.py	216	CODE
LOW	exp/optimize/model/sft/tinker.py	283	CODE
LOW	exp/optimize/model/sft/contracts.py	72	CODE
LOW	exp/optimize/model/sft/composition.py	901	CODE
LOW	exp/optimize/model/sft/training.py	348	CODE
LOW	exp/optimize/evaluation/simulation_test.py	445	CODE
LOW	exp/optimize/evaluation/judging_spend.py	11	CODE
LOW	exp/optimize/evaluation/judge.py	46	CODE
LOW	exp/optimize/evaluation/trace_learning.py	497	CODE
LOW	exp/optimize/evaluation/runs.py	146	CODE
LOW	exp/optimize/evaluation/runs.py	258	CODE
LOW	exp/optimize/router/judgment_budget.py	487	CODE
LOW	exp/optimize/router/judgment_budget.py	634	CODE
LOW	exp/optimize/router/judgment_dispatch.py	12	CODE
LOW	exp/optimize/router/hosted_verification.py	575	CODE
LOW	exp/optimize/router/judging/protocol.py	300	CODE
LOW	exp/optimize/router/judging/contracts.py	749	CODE
LOW	exp/optimize/router/fit/report.py	364	CODE
LOW	exp/runtime/capture/local_backend.py	195	CODE
LOW	exp/runtime/capture/local_backend.py	245	CODE
LOW	exp/runtime/capture/transports_test.py	66	CODE
LOW	exp/runtime/capture/transports_test.py	110	CODE
LOW	exp/runtime/capture/transports_test.py	71	CODE
LOW	exp/runtime/capture/transports_test.py	115	CODE
LOW	exp/runtime/capture/watchdog.py	50	CODE
LOW	exp/runtime/capture/upload.py	233	CODE
LOW	exp/runtime/capture/upload.py	332	CODE
LOW	exp/runtime/capture/upload.py	400	CODE
LOW	exp/runtime/capture/upload.py	423	CODE
LOW	exp/runtime/capture/proxy.py	167	CODE
LOW	exp/runtime/capture/proxy.py	540	CODE
LOW	exp/runtime/capture/redirector.py	54	CODE
LOW	exp/runtime/capture/redirector.py	82	CODE
LOW	exp/runtime/capture/redirector.py	127	CODE
LOW	exp/runtime/capture/proxy_test.py	977	CODE
LOW	exp/runtime/capture/proxy_test.py	982	CODE
LOW	exp/runtime/capture/normalization.py	312	CODE
LOW	exp/runtime/capture/normalization.py	330	CODE
LOW	exp/runtime/capture/certificates_test.py	259	CODE
LOW	exp/runtime/anthropic_protocol/media_blocks.py	407	CODE
LOW	exp/runtime/anthropic_protocol/wire_validation.py	123	CODE
LOW	exp/runtime/anthropic_protocol/requests.py	713	CODE
LOW	exp/runtime/environments/local_test.py	52	CODE
LOW	exp/runtime/environments/harbor.py	341	CODE
LOW	exp/runtime/environments/local.py	223	CODE
LOW	exp/runtime/environments/local.py	639	CODE
LOW	exp/runtime/environments/local.py	809	CODE
LOW	exp/runtime/environments/local.py	948	CODE
LOW	exp/runtime/environments/local.py	975	CODE
LOW	exp/runtime/agents/pi.py	508	CODE
LOW	exp/runtime/agents/pi.py	560	CODE
LOW	exp/runtime/agents/pi.py	758	CODE
LOW	exp/runtime/agents/chat.py	42	CODE
LOW	exp/runtime/models/budget.py	210	CODE
257 more matches not shown…

Empty Error Handlers58 hits · 290 pts

Severity	File	Line	Snippet	Context
HIGH	exp/optimize/evaluation/simulation_test.py	163	except ProviderPricingUnavailableError:	CODE
HIGH	exp/optimize/evaluation/spending.py	178	except ValueError:	CODE
HIGH	exp/runtime/capture/local_backend.py	89	except FileExistsError:	CODE
HIGH	exp/runtime/capture/watchdog.py	192	except (BrokenPipeError, ConnectionResetError):	CODE
HIGH	exp/runtime/capture/upload.py	345	except Exception: # noqa: BLE001 - Preserve the count until output recovers.	CODE
HIGH	exp/runtime/capture/health.py	98	except ProcessLookupError:	CODE
HIGH	exp/runtime/capture/proxy.py	413	except Exception: # noqa: BLE001	CODE
HIGH	exp/runtime/capture/redirector.py	158	except (asyncio.CancelledError, OSError):	CODE
HIGH	exp/runtime/capture/redirector.py	143	except OSError:	CODE
HIGH	exp/runtime/capture/transports.py	105	except OSError:	CODE
HIGH	exp/runtime/gateway/native_server.py	248	except KeyboardInterrupt:	CODE
HIGH	exp/runtime/gateway/native_bridge.py	933	except Exception: # noqa: BLE001 - the owner's admission records this failure.	CODE
HIGH	exp/runtime/gateway/rate_limit_headers.py	157	except ValueError:	CODE
HIGH	exp/runtime/gateway/latency_measure.py	609	except httpx.HTTPError:	CODE
HIGH	exp/runtime/gateway/snapshot_file_test.py	139	except OSError:	CODE
HIGH	exp/runtime/gateway/native_explicit_cache.py	520	except ValueError:	CODE
HIGH	exp/runtime/gateway/guardrails/bounded.py	246	except RuntimeError:	CODE
HIGH	exp/runtime/gateway/guardrails/bounded.py	162	except RuntimeError:	CODE
HIGH	exp/runtime/gateway/guardrails/enforcement.py	334	except Exception: # noqa: BLE001 - optional preparation cannot reject serving.	CODE
HIGH	exp/runtime/gateway/guardrails/bounded_test.py	1264	except OSError:	CODE
HIGH	exp/runtime/gateway/guardrails/observation_test.py	435	except ClassifierTimeoutError:	CODE
HIGH	exp/runtime/gateway/guardrails/observation_test.py	527	except RuntimeError:	CODE
HIGH	exp/runtime/gateway/tests/native_videos_test.py	336	except (httpx.HTTPError, ValueError, KeyError, TypeError):	CODE
HIGH	exp/runtime/gateway/tests/native_gemini_usage_test.py	369	except TimeoutError:	CODE
HIGH	…/runtime/gateway/tests/native_stability_images_test.py	283	except httpx.HTTPError:	CODE
HIGH	exp/runtime/gateway/tests/native_decisions_test.py	270	except (BrokenPipeError, ConnectionResetError):	CODE
HIGH	exp/runtime/gateway/tests/native_decisions_test.py	467	except (httpx.HTTPError, ValueError, KeyError, TypeError):	CODE
HIGH	…runtime/gateway/tests/native_engine_disconnect_test.py	513	except (httpx.HTTPError, ValueError, KeyError, TypeError):	CODE
HIGH	exp/runtime/gateway/tests/native_images_test.py	228	except (httpx.HTTPError, ValueError, KeyError, TypeError):	CODE
HIGH	exp/runtime/gateway/tests/native_elevenlabs_test.py	263	except (httpx.HTTPError, ValueError, KeyError, TypeError):	CODE
HIGH	exp/runtime/gateway/tests/native_truncation_test.py	231	except httpx.HTTPError:	CODE
HIGH	exp/runtime/gateway/tests/native_waterfall_test.py	247	except OSError:	CODE
HIGH	exp/runtime/gateway/tests/native_waterfall_test.py	494	except (httpx.HTTPError, ValueError, KeyError, TypeError):	CODE
HIGH	…/runtime/gateway/tests/native_openai_decisions_test.py	354	except (httpx.HTTPError, ValueError, KeyError, TypeError):	CODE
HIGH	…untime/gateway/tests/parallel_input_guardrails_test.py	347	except (BrokenPipeError, ConnectionResetError):	CODE
HIGH	…untime/gateway/tests/guardrail_project_routing_test.py	126	except NativeBridgeError:	CODE
HIGH	exp/runtime/gateway/tests/mandatory_guardrails_test.py	175	except (BrokenPipeError, ConnectionResetError):	CODE
HIGH	…/runtime/gateway/tests/native_bridge_lifecycle_test.py	312	except httpx.HTTPError:	CODE
HIGH	exp/runtime/gateway/tests/native_messages_test.py	1134	except (httpx.HTTPError, ValueError, KeyError, TypeError):	CODE
HIGH	exp/runtime/gateway/tests/native_messages_test.py	1262	except (httpx.HTTPError, ValueError, KeyError, TypeError):	CODE
HIGH	…untime/gateway/tests/classification_guardrails_test.py	88	except (BrokenPipeError, ConnectionResetError):	CODE
HIGH	exp/runtime/gateway/tests/native_model_stages_test.py	378	except httpx.HTTPError:	CODE
HIGH	exp/runtime/gateway/tests/native_embeddings_test.py	203	except (httpx.HTTPError, ValueError, KeyError, TypeError):	CODE
HIGH	exp/runtime/gateway/tests/native_audio_test.py	329	except (httpx.HTTPError, ValueError, KeyError, TypeError):	CODE
HIGH	exp/runtime/gateway/tests/native_spill_soak_test.py	252	except (httpx.HTTPError, ValueError, KeyError, TypeError):	CODE
HIGH	exp/runtime/gateway/tests/native_azure_images_test.py	240	except (httpx.HTTPError, ValueError, KeyError, TypeError):	CODE
HIGH	exp/runtime/gateway/tests/launch_test.py	688	except httpx.HTTPError:	CODE
HIGH	exp/runtime/gateway/sqlite/migrations.py	904	except FileExistsError:	CODE
HIGH	exp/tests/release_test.py	581	except subprocess.TimeoutExpired:	CODE
HIGH	exp/tests/release_test.py	1235	except BrokenPipeError:	CODE
HIGH	exp/simulation/actor_test.py	132	except ValidationError:	CODE
HIGH	exp/cli/capture/approval.py	56	except ProcessLookupError:	CODE
HIGH	exp/cli/capture/approval.py	60	except (OSError, TimeoutError):	CODE
HIGH	exp/common/traces/sqlite.py	180	except FileExistsError:	CODE
HIGH	exp/common/project/store.py	256	except ArtifactAlreadyExistsError:	CODE
HIGH	exp/common/project/store.py	307	except ArtifactAlreadyExistsError:	CODE
HIGH	exp/common/project/database.py	57	except FileExistsError:	CODE
HIGH	exp/common/project/artifact_files.py	80	except FileExistsError:	CODE

Cross-File Repetition55 hits · 275 pts

Severity	File	Snippet	Context
HIGH	exp/runtime/anthropic_protocol/media_blocks.py	strict private wire model rejecting unknown nested fields.	STRING
HIGH	exp/runtime/openai_protocol/cache_control.py	strict private wire model rejecting unknown nested fields.	STRING
HIGH	exp/runtime/openai_protocol/prompt_cache_controls.py	strict private wire model rejecting unknown nested fields.	STRING
HIGH	exp/runtime/models/providers/videos_test.py	a base64 prefix of an mp4 ``ftyp`` box, enough for a carrier fixture.	STRING
HIGH	exp/runtime/models/providers/streaming_requests_test.py	a base64 prefix of an mp4 ``ftyp`` box, enough for a carrier fixture.	STRING
HIGH	exp/runtime/openai_protocol/requests_test.py	a base64 prefix of an mp4 ``ftyp`` box, enough for a carrier fixture.	STRING
HIGH	exp/common/models/content_test.py	a base64 prefix of an mp4 ``ftyp`` box, enough for a carrier fixture.	STRING
HIGH	exp/runtime/models/providers/audios_test.py	a 44-byte wav header with an empty data chunk, base64 encoded.	STRING
HIGH	exp/runtime/models/providers/streaming_requests_test.py	a 44-byte wav header with an empty data chunk, base64 encoded.	STRING
HIGH	exp/runtime/openai_protocol/requests_test.py	a 44-byte wav header with an empty data chunk, base64 encoded.	STRING
HIGH	exp/common/models/content_test.py	a 44-byte wav header with an empty data chunk, base64 encoded.	STRING
HIGH	exp/runtime/gateway/management.py	select snapshot_ref, catalog_sha256 from catalog_snapshot_refs where organization_id = ? and snapshot_ref = ? and catalo	STRING
HIGH	exp/runtime/gateway/sqlite/alias_activation.py	select snapshot_ref, catalog_sha256 from catalog_snapshot_refs where organization_id = ? and snapshot_ref = ? and catalo	STRING
HIGH	exp/runtime/gateway/sqlite/platform.py	select snapshot_ref, catalog_sha256 from catalog_snapshot_refs where organization_id = ? and snapshot_ref = ? and catalo	STRING
HIGH	exp/runtime/gateway/tests/native_videos_test.py	collect the driver's announced ports from its stdout.	STRING
HIGH	exp/runtime/gateway/tests/native_elevenlabs_test.py	collect the driver's announced ports from its stdout.	STRING
HIGH	exp/runtime/gateway/tests/native_audio_test.py	collect the driver's announced ports from its stdout.	STRING
HIGH	exp/runtime/gateway/tests/native_videos_test.py	build an official openai client pointed at the served engine.	STRING
HIGH	exp/runtime/gateway/tests/native_elevenlabs_test.py	build an official openai client pointed at the served engine.	STRING
HIGH	exp/runtime/gateway/tests/native_audio_test.py	build an official openai client pointed at the served engine.	STRING
HIGH	…p/runtime/gateway/tests/native_signed_dispatch_test.py	suppress request logs so test output cannot retain payload context.	STRING
HIGH	…runtime/gateway/tests/native_engine_disconnect_test.py	suppress request logs so test output cannot retain payload context.	STRING
HIGH	exp/runtime/gateway/tests/native_waterfall_test.py	suppress request logs so test output cannot retain payload context.	STRING
HIGH	exp/runtime/gateway/tests/native_metrics_test.py	suppress request logs so test output cannot retain payload context.	STRING
HIGH	…/runtime/gateway/tests/native_bridge_lifecycle_test.py	suppress request logs so test output cannot retain payload context.	STRING
HIGH	exp/runtime/gateway/tests/native_messages_test.py	suppress request logs so test output cannot retain payload context.	STRING
HIGH	exp/runtime/gateway/tests/native_spill_soak_test.py	suppress request logs so test output cannot retain payload context.	STRING
HIGH	exp/runtime/gateway/tests/launch_test.py	suppress request logs so test output cannot retain payload context.	STRING
HIGH	…runtime/gateway/tests/native_engine_disconnect_test.py	encode one openai-compatible streamed content delta.	STRING
HIGH	exp/runtime/gateway/tests/native_waterfall_test.py	encode one openai-compatible streamed content delta.	STRING
HIGH	exp/runtime/gateway/tests/native_messages_test.py	encode one openai-compatible streamed content delta.	STRING
HIGH	…runtime/gateway/tests/native_engine_disconnect_test.py	one live native serving subprocess and its access facts.	STRING
HIGH	exp/runtime/gateway/tests/native_waterfall_test.py	one live native serving subprocess and its access facts.	STRING
HIGH	…/runtime/gateway/tests/native_bridge_lifecycle_test.py	one live native serving subprocess and its access facts.	STRING
HIGH	exp/runtime/gateway/tests/native_messages_test.py	one live native serving subprocess and its access facts.	STRING
HIGH	exp/runtime/gateway/tests/native_spill_soak_test.py	one live native serving subprocess and its access facts.	STRING
HIGH	…runtime/gateway/tests/native_engine_disconnect_test.py	record every port announcement the driver prints on stdout.	STRING
HIGH	exp/runtime/gateway/tests/native_waterfall_test.py	record every port announcement the driver prints on stdout.	STRING
HIGH	…/runtime/gateway/tests/native_bridge_lifecycle_test.py	record every port announcement the driver prints on stdout.	STRING
HIGH	exp/runtime/gateway/tests/native_messages_test.py	record every port announcement the driver prints on stdout.	STRING
HIGH	exp/runtime/gateway/tests/native_embeddings_test.py	record every port announcement the driver prints on stdout.	STRING
HIGH	exp/runtime/gateway/tests/native_spill_soak_test.py	record every port announcement the driver prints on stdout.	STRING
HIGH	exp/runtime/gateway/tests/native_images_test.py	a provider 400 reaches the caller as a 400 naming the rejected field.	STRING
HIGH	exp/runtime/gateway/tests/native_embeddings_test.py	a provider 400 reaches the caller as a 400 naming the rejected field.	STRING
HIGH	exp/runtime/gateway/tests/native_audio_test.py	a provider 400 reaches the caller as a 400 naming the rejected field.	STRING
HIGH	exp/runtime/gateway/tests/native_truncation_test.py	import json import os import socket import sys from pathlib import path from exp.runtime.gateway.lifecycle import load_g	STRING
HIGH	exp/runtime/gateway/tests/native_waterfall_test.py	import json import os import socket import sys from pathlib import path from exp.runtime.gateway.lifecycle import load_g	STRING
HIGH	…/runtime/gateway/tests/native_bridge_lifecycle_test.py	import json import os import socket import sys from pathlib import path from exp.runtime.gateway.lifecycle import load_g	STRING
HIGH	exp/runtime/gateway/tests/native_messages_test.py	import json import os import socket import sys from pathlib import path from exp.runtime.gateway.lifecycle import load_g	STRING
HIGH	exp/runtime/gateway/sqlite/setup_authority.py	insert into virtual_keys ( key_id, organization_id, identity_id, prefix, fingerprint_version, fingerprint_sha256, create	STRING
HIGH	exp/runtime/gateway/sqlite/store.py	insert into virtual_keys ( key_id, organization_id, identity_id, prefix, fingerprint_version, fingerprint_sha256, create	STRING
HIGH	exp/runtime/gateway/sqlite/migrations_test.py	insert into virtual_keys ( key_id, organization_id, identity_id, prefix, fingerprint_version, fingerprint_sha256, create	STRING
HIGH	exp/simulation/mining/deduplicate.py	return a bounded dot product for pre-normalized vectors.	STRING
HIGH	exp/simulation/mining/coverage.py	return a bounded dot product for pre-normalized vectors.	STRING
HIGH	exp/simulation/mining/select.py	return a bounded dot product for pre-normalized vectors.	STRING

Cross-Language Confusion33 hits · 184 pts

Severity	File	Line	Snippet	Context
HIGH	exp/runtime/models/providers/openai_compatible_test.py	1125	r'{"a":[true,false,null, -12.34e+5, {"\u00e9":"x\n\u0000"}]}',	CODE
HIGH	exp/runtime/models/providers/dialect_dispatch_test.py	170	"""A tool without a description omits the field instead of sending null, on every dialect.	STRING
HIGH	exp/runtime/models/providers/chatgpt_subscription.py	297	# A refresh answer may omit (or null) the refresh token when it is not rotated; the	COMMENT
HIGH	exp/runtime/models/providers/wire_messages.py	732	reasoning block (an absent field or an explicit null) is backfilled with	STRING
HIGH	exp/runtime/openai_protocol/wire_models.py	390	# returns (an exposed rung's length-cut thinking turn: content null,	COMMENT
HIGH	exp/runtime/gateway/native_bridge.py	810	# Absent (not null) on failover-only pools: their admission is byte-identical.	COMMENT
HIGH⚡	exp/runtime/gateway/native_bridge_test.py	6832	tail = ',"logprobs":null,"finish_reason":null,"matched_stop":null}],"usage":null}'	CODE
HIGH⚡	exp/runtime/gateway/native_bridge_test.py	6833	tool = '{"id":null,"index":0,"type":"function","function":{"name":null,"arguments":%s}}'	CODE
HIGH⚡	exp/runtime/gateway/native_bridge_test.py	6835	'{"reasoning_content":null,"role":"assistant","content":""}',	CODE
HIGH⚡	exp/runtime/gateway/native_bridge_test.py	6836	'{"role":null,"content":"\\n\\n","reasoning_content":null,"tool_calls":null}',	CODE
HIGH⚡	exp/runtime/gateway/native_bridge_test.py	6837	'{"role":null,"content":null,"reasoning_content":null,"tool_calls":[{"id":"call_redacted",'	CODE
HIGH⚡	exp/runtime/gateway/native_bridge_test.py	6839	'{"role":null,"content":null,"reasoning_content":null,"tool_calls":['	CODE
HIGH⚡	exp/runtime/gateway/native_bridge_test.py	6842	'{"role":null,"content":null,"reasoning_content":null,"tool_calls":['	CODE
HIGH⚡	exp/runtime/gateway/native_bridge_test.py	6849	'"model":"DeepSeek-V4-Flash","choices":[{"index":0,"delta":{"reasoning_content":null},'	CODE
HIGH⚡	exp/runtime/gateway/native_bridge_test.py	6850	'"logprobs":null,"finish_reason":"tool_calls","matched_stop":1}]}\n\n'	CODE
HIGH	exp/runtime/gateway/rate_limit_headers.py	357	any, else anything (absent, null, wrong shape).	STRING
HIGH	exp/runtime/gateway/reasoning_carrier.py	539	an integer, leaving strings, booleans, null, and fractional numbers untouched. Above	STRING
HIGH⚡	exp/runtime/gateway/decisions_contracts_test.py	172	"""Score levels cannot be null, boolean, or numeric scalar descriptions."""	STRING
HIGH	exp/runtime/gateway/tests/native_dialect_parity_test.py	159	b'"id":"msg_fixture","type":"message","role":"assistant","content":[],"stop_reason":null,'	CODE
HIGH	exp/runtime/gateway/tests/native_dialect_parity_test.py	160	b'"stop_sequence":null,"stop_details":null,"usage":{"input_tokens":663,'	CODE
HIGH	exp/runtime/gateway/tests/native_dialect_parity_test.py	176	b'"stop_sequence":null,"stop_details":null},"usage":{"input_tokens":663,'	CODE
HIGH⚡	exp/runtime/gateway/tests/native_dialect_parity_test.py	218	b'"id":"msg_fixture","type":"message","role":"assistant","content":[],"stop_reason":null,'	CODE
HIGH⚡	exp/runtime/gateway/tests/native_dialect_parity_test.py	219	b'"stop_sequence":null,"stop_details":null,"usage":{"input_tokens":550,'	CODE
HIGH⚡	exp/runtime/gateway/tests/native_dialect_parity_test.py	229	b'"stop_sequence":null,"stop_details":null},"usage":{"input_tokens":550,'	CODE
HIGH	exp/runtime/gateway/tests/native_dialect_parity_test.py	281	b'"id":"msg_fixture","type":"message","role":"assistant","content":[],"stop_reason":null,'	CODE
HIGH	exp/runtime/gateway/tests/native_dialect_parity_test.py	282	b'"stop_sequence":null,"stop_details":null,"usage":{"input_tokens":2230,'	CODE
HIGH	exp/runtime/gateway/tests/native_dialect_parity_test.py	316	b'"stop_sequence":null,"stop_details":null},"usage":{"input_tokens":12284,'	CODE
HIGH	exp/simulation/engines/text/prompt.py	91	"optional":null},"encoding":"json","is_error":false}],"effect":{"kind":"edits",	CODE
HIGH	exp/simulation/engines/text/prompt.py	92	"edits":[{"op":"set","path":["records","a"],"value":{"id":"a","optional":null}}]},	CODE
HIGH	exp/common/traces/ingest/json_archive_test.py	16	'{"duplicate":1,"duplicate":2,"values":[null,true,false,-0.2,123456789012345678901234567890,"☃"]}',	CODE
HIGH	exp/common/traces/ingest/trace_extensions.py	101	not text, or an explicit null, or when spans disagree.	STRING
HIGH	exp/common/traces/ingest/otel_genai.py	276	VendorTraceFormatError: The value is null, which OTLP cannot represent.	STRING
HIGH	exp/common/judging/judgment_test.py	81	"""A required score may omit rationale, store null, or keep an arbitrarily long string."""	STRING

Excessive Try-Catch Wrapping179 hits · 182 pts

Severity	File	Line	Snippet	Context
LOW	exp/optimize/model/sft/composition.py	813	except Exception as exc:	CODE
LOW	exp/optimize/evaluation/fidelity_memory.py	217	except Exception as error: # noqa: BLE001 - durable report must not be undone.	CODE
LOW	exp/optimize/router/hosted.py	324	except Exception as exc: # noqa: BLE001 - preserve safe build ambiguity evidence	CODE
LOW	exp/optimize/router/hosted.py	565	except Exception: # noqa: BLE001 - provider text must not cross durable boundaries	CODE
LOW	exp/optimize/router/hosted.py	706	except Exception as exc: # noqa: BLE001 - convert provider failures to safe ledger evidence	CODE
LOW	exp/runtime/capture/upload.py	345	except Exception: # noqa: BLE001 - Preserve the count until output recovers.	CODE
LOW	exp/runtime/capture/upload.py	356	except Exception: # noqa: BLE001 - Diagnostics must never drop a captured request.	CODE
LOW	exp/runtime/capture/proxy.py	413	except Exception: # noqa: BLE001	CODE
LOW	exp/runtime/capture/proxy.py	742	except Exception: # noqa: BLE001	CODE
LOW	exp/runtime/capture/redirector.py	73	except Exception as exc: # noqa: BLE001 - Attempt all owned cleanup before reporting failure.	CODE
LOW	exp/runtime/capture/redirector.py	146	except Exception as exc: # noqa: BLE001 - Close every owned writer first.	CODE
LOW	exp/runtime/capture/redirector.py	160	except Exception as exc: # noqa: BLE001 - Native closure must still be attempted.	CODE
LOW	exp/runtime/environments/harbor.py	393	except Exception as error: # noqa: BLE001 - customer environment failures are evidence	CODE
LOW	exp/runtime/environments/local.py	212	except Exception as exc: # noqa: BLE001 - surfaced synchronously during cleanup	CODE
LOW	exp/runtime/environments/local.py	658	except Exception as error: # noqa: BLE001 - retained as cleanup evidence	CODE
LOW	exp/runtime/environments/local.py	829	except Exception as exc: # noqa: BLE001 - re-raised after the monitor is joined	CODE
LOW	exp/runtime/environments/local.py	840	except Exception as exc: # noqa: BLE001 - combined with termination evidence	CODE
LOW	exp/runtime/environments/local.py	845	except Exception as exc: # noqa: BLE001 - combined with termination evidence	CODE
LOW	exp/runtime/agents/pi.py	340	except Exception: # noqa: BLE001 - bridge failures must not expose episode payloads	CODE
LOW	exp/runtime/agents/factory.py	138	except Exception as exc:	CODE
LOW	exp/runtime/agents/factory.py	161	except Exception as exc:	CODE
LOW	exp/runtime/agents/lifecycle.py	62	except Exception as exc: # noqa: BLE001 - environment allocation is episode evidence	CODE
LOW	exp/runtime/agents/lifecycle.py	78	except Exception as exc: # noqa: BLE001 - every lifecycle failure becomes episode evidence	CODE
LOW	exp/runtime/agents/lifecycle.py	113	except Exception as exc: # noqa: BLE001 - customer adapter failures are episode evidence	CODE
LOW	exp/runtime/agents/lifecycle.py	212	except Exception as exc: # noqa: BLE001 - tool boundary failures become episode evidence	CODE
LOW	exp/runtime/models/structured_completion.py	133	except Exception as error: # noqa: BLE001 - only output checks run after return.	CODE
LOW	exp/runtime/models/providers/admitted_transport.py	93	except Exception as error: # noqa: BLE001 - preserve ambiguity without retrying.	CODE
LOW	exp/runtime/models/providers/transport.py	594	except Exception as exc:	CODE
LOW	exp/runtime/models/providers/async_transport.py	539	except Exception as exc: # noqa: BLE001 - the injected classifier owns retry policy.	CODE
LOW	exp/runtime/models/providers/bedrock.py	709	except Exception as exc:	CODE
LOW	exp/runtime/gateway/native_dispatch.py	93	except Exception as exc: # noqa: BLE001 - the boundary sanitizes every failure.	CODE
LOW	exp/runtime/gateway/native_count_tokens.py	71	except Exception as exc: # noqa: BLE001 - boundary sanitizes every failure.	CODE
LOW	exp/runtime/gateway/native_decode_boundary.py	39	except Exception as exc: # noqa: BLE001 - logged and sanitized by the boundary.	CODE
LOW	exp/runtime/gateway/native_decisions.py	149	except Exception as exc: # noqa: BLE001 - sanitize the authority boundary.	CODE
LOW⚡	exp/runtime/gateway/native_decisions.py	175	except Exception as exc: # noqa: BLE001 - sanitize the authority boundary.	CODE
LOW⚡	exp/runtime/gateway/native_decisions.py	180	except Exception as exc: # noqa: BLE001 - sanitize the authority boundary.	CODE
LOW⚡	exp/runtime/gateway/native_decisions.py	186	except Exception as exc: # noqa: BLE001 - close every accepted failure.	CODE
LOW	exp/runtime/gateway/native_bridge.py	331	except Exception as exc: # noqa: BLE001 - boundary sanitizes every failure.	CODE
LOW	exp/runtime/gateway/native_bridge.py	359	except Exception as exc: # noqa: BLE001 - one public shape prevents an oracle.	CODE
LOW	exp/runtime/gateway/native_bridge.py	391	except Exception as exc: # noqa: BLE001 - one public shape prevents an oracle.	CODE
LOW	exp/runtime/gateway/native_bridge.py	430	except Exception as exc: # noqa: BLE001 - boundary sanitizes every failure.	CODE
LOW	exp/runtime/gateway/native_bridge.py	544	except Exception as exc: # noqa: BLE001 - raised after route packaging below.	CODE
LOW	exp/runtime/gateway/native_bridge.py	549	except Exception: # noqa: BLE001 - hosted policy fails closed.	CODE
LOW	exp/runtime/gateway/native_bridge.py	695	except Exception as exc: # noqa: BLE001 - boundary sanitizes every failure.	CODE
LOW	exp/runtime/gateway/native_bridge.py	925	except Exception as exc: # noqa: BLE001 - boundary sanitizes every failure.	CODE
LOW	exp/runtime/gateway/native_bridge.py	933	except Exception: # noqa: BLE001 - the owner's admission records this failure.	CODE
LOW	exp/runtime/gateway/native_bridge.py	964	except Exception as exc: # noqa: BLE001 - boundary sanitizes every failure.	CODE
LOW	exp/runtime/gateway/native_recovery.py	143	except Exception: # noqa: BLE001 - optional observation cannot fail admission or settlement.	CODE
LOW	exp/runtime/gateway/native_recovery.py	164	except Exception: # noqa: BLE001 - optional observer cannot undo a reservation.	CODE
LOW	exp/runtime/gateway/native_recovery.py	274	except Exception: # noqa: BLE001 - optional observation cannot fail durable settlement.	CODE
LOW	exp/runtime/gateway/native_request_settlement.py	110	except Exception: # noqa: BLE001 - failed ownership must survive any ledger fault.	CODE
LOW	exp/runtime/gateway/native_request_settlement.py	129	except Exception: # noqa: BLE001 - retain until the durable writer recovers.	CODE
LOW	exp/runtime/gateway/group_commit.py	100	except Exception: # noqa: BLE001 - the write failure is read below.	CODE
LOW	exp/runtime/gateway/group_commit.py	381	except Exception: # noqa: BLE001 - every blocked caller receives the closed error.	CODE
LOW	exp/runtime/gateway/group_commit.py	411	except Exception as exc: # noqa: BLE001 - isolate each preflight failure.	CODE
LOW	exp/runtime/gateway/group_commit.py	417	except Exception as exc: # noqa: BLE001 - blocked callers receive the failure.	CODE
LOW	exp/runtime/gateway/group_commit.py	480	except Exception as exc: # noqa: BLE001 - the caller re-raises its own failure.	CODE
LOW	exp/runtime/gateway/native_accounting.py	653	except Exception as exc: # noqa: BLE001 - boundary sanitizes every failure.	CODE
LOW	exp/runtime/gateway/native_accounting.py	797	except Exception as exc: # noqa: BLE001 - the data plane retries.	CODE
LOW	exp/runtime/gateway/native_accounting.py	897	except Exception as exc: # noqa: BLE001 - the data plane retries.	CODE
119 more matches not shown…

Over-Commented Block150 hits · 150 pts

Severity	File	Line	Snippet	Context
LOW	pyproject.toml	121	# Test modules are fixtures and assertions rather than public package APIs. Production modules	COMMENT
LOW	.gitlab/ci/gate.yml	121	# One worker per CPU: the small runner has two, and oversubscribing it	COMMENT
LOW	exp/runtime/anthropic_protocol/manifest.py	101	# Conscious rejections, each with a recorded reason:	COMMENT
LOW	exp/runtime/models/providers/protocol.py	181	"""Return per-request headers covering the exact body bytes."""	COMMENT
LOW	exp/runtime/models/providers/openai_compatible.py	641	self._reasoning_output_exposed and self._hunyuan_reasoning_route_sha256 is not None	COMMENT
LOW	exp/runtime/models/providers/vertex.py	61	_MODEL_PATH_PREFIX = "publishers/google/models/"	COMMENT
LOW	exp/runtime/models/providers/streaming_requests.py	521	# uncached (~10x on input for a large system prompt).	COMMENT
LOW	exp/runtime/models/providers/streaming_requests.py	701	# origin, which requires the field on tool-call history whether or not	COMMENT
LOW	exp/runtime/models/providers/messages_payloads.py	81	# but never put an OpenAI-shaped field on the Anthropic wire.	COMMENT
LOW	exp/runtime/models/providers/messages_payloads.py	281	if request.context_management is not None:	COMMENT
LOW	exp/runtime/models/providers/messages_payloads.py	301	payload["cache_control"] = request.provider_cache_control	COMMENT
LOW	exp/runtime/models/providers/capability_policy.py	641	# reject some other control, so candidates are tried in nearness order	COMMENT
LOW	exp/runtime/models/providers/generation_route_compat.py	101	if _carries_exposed_reasoning(profile, request):	COMMENT
LOW	exp/runtime/models/providers/wire_messages.py	601	block.get("type") == "text" and not str(block.get("text", "")).strip() for block in blocks	COMMENT
LOW	exp/runtime/openai_protocol/manifest.py	81	_field("presence_penalty", CompatibilityDisposition.CONDITIONALLY_SUPPORTED, "penalties"),	COMMENT
LOW	exp/runtime/openai_protocol/manifest.py	101	_field("metadata", CompatibilityDisposition.METADATA_ONLY),	COMMENT
LOW	exp/runtime/openai_protocol/manifest.py	121	# Pre-answer web search. OpenAI's ``web_search_options`` and the	COMMENT
LOW	exp/runtime/openai_protocol/manifest.py	221	),	COMMENT
LOW	exp/runtime/openai_protocol/requests.py	701	if folded.plaintext is not None:	COMMENT
LOW	exp/runtime/gateway/native_metrics_text_test.py	121	# HELP exp_gateway_admission_lead_rungs_skipped_total Fallbacks served for a dead lead rung.	COMMENT
LOW	exp/runtime/gateway/native_metrics_text_test.py	141	exp_gateway_rung_fresh_session_spills_total 1	COMMENT
LOW	exp/runtime/gateway/native_metrics_text_test.py	161	# TYPE exp_gateway_observation_recording_dropped_total counter	COMMENT
LOW	exp/runtime/gateway/native_execution.py	221	# card only on a depth that emits the tier. Empty on tier-less surfaces.	COMMENT
LOW	exp/runtime/gateway/lane_saturation.py	41	from exp.runtime.gateway.stream_contracts import GatewayFailure, GatewayFailureClass	COMMENT
LOW	exp/runtime/gateway/native_rung_policy.py	101	# A host class cap on a self-hosted rung (class_throttles); None elsewhere.	COMMENT
LOW	exp/runtime/gateway/rung_admission.py	61		COMMENT
LOW	exp/runtime/gateway/rung_admission.py	341	# the upper half of the bound and skip fair share; while any is	COMMENT
LOW	exp/runtime/gateway/native/src/audio_elevenlabs.rs	1	//! ElevenLabs transcription answers rendered onto the OpenAI audio wire.	COMMENT
LOW	exp/runtime/gateway/native/src/bridge.rs	1	//! Calls into the Python control plane (`NativeControlPlane`).	COMMENT
LOW	exp/runtime/gateway/native/src/bridge.rs	221	/// The worker holds one interpreter attachment for its whole life and only	COMMENT
LOW	exp/runtime/gateway/native/src/rate_limit_headers.rs	1	//! Allowlisted provider rate-limit response headers for settlement.	COMMENT
LOW	exp/runtime/gateway/native/src/stream_errors.rs	1	//! Classify provider-declared failures from their raw code and message.	COMMENT
LOW	exp/runtime/gateway/native/src/events.rs	1	//! Provider-neutral stream events, the Rust mirror of `GatewayEvent`.	COMMENT
LOW	exp/runtime/gateway/native/src/events.rs	21	//! reasoning count above the output total is impossible under subset	COMMENT
LOW	exp/runtime/gateway/native/src/events.rs	61	/// Observed one-hour subset; absent when no complete TTL breakdown exists.	COMMENT
LOW	exp/runtime/gateway/native/src/events.rs	81	/// only, never serialized.	COMMENT
LOW	exp/runtime/gateway/native/src/events.rs	361	/// text block (`citations_delta`), carried as compact JSON text.	COMMENT
LOW	exp/runtime/gateway/native/src/events.rs	781	use item_metadata::add_provider_item_metadata;	COMMENT
LOW	exp/runtime/gateway/native/src/events.rs	861	/// Scan of `raw_arguments` for dialects that accumulate through	COMMENT
LOW	exp/runtime/gateway/native/src/settlement.rs	161	"first_token_at": first_token_at.map(system_time_to_rfc3339),	COMMENT
LOW	exp/runtime/gateway/native/src/settlement.rs	261	/// re-delivers this decided settlement instead of a cancellation, so a	COMMENT
LOW	exp/runtime/gateway/native/src/error_envelope.rs	1	//! One reader for the error envelopes the OpenAI-compatible family answers.	COMMENT
LOW	exp/runtime/gateway/native/src/error_envelope.rs	21	//! \| Azure API Management \| `{statusCode, message}` \|	COMMENT
LOW	exp/runtime/gateway/native/src/error_envelope.rs	41	/// The `error` OBJECT when the envelope has one (aggregator metadata such	COMMENT
LOW	exp/runtime/gateway/native/src/lib.rs	201	/// `metrics_json`, `metrics_text`, `readiness`, and	COMMENT
LOW	exp/runtime/gateway/native/src/output_pacing.rs	1	//! Host-authored output pacing: a streamed answer released no faster than a rate.	COMMENT
LOW	exp/runtime/gateway/native/src/permit_queue.rs	1	//! Class-ordered worker admission permits with aging, off unless configured.	COMMENT
LOW	exp/runtime/gateway/native/src/param_attribution.rs	1	//! Provider-rejected parameter attribution for sanitized 400s.	COMMENT
LOW	exp/runtime/gateway/native/src/param_attribution.rs	141	/// them than the gateway's generic wording. Only the dialect's documented	COMMENT
LOW	exp/runtime/gateway/native/src/param_attribution.rs	261	}	COMMENT
LOW	exp/runtime/gateway/native/src/param_attribution.rs	321	cut	COMMENT
LOW	exp/runtime/gateway/native/src/tool_search.rs	1	//! Gateway-executed tool search: the data-plane half of the feature.	COMMENT
LOW	exp/runtime/gateway/native/src/route_responses_ws.rs	1	//! WebSocket transport for the OpenAI Responses surface: the GET	COMMENT
LOW	exp/runtime/gateway/native/src/server.rs	61	#[serde(default = "default_connect_timeout_seconds")]	COMMENT
LOW	exp/runtime/gateway/native/src/server.rs	81	pub time_to_first_token_seconds: f64,	COMMENT
LOW	exp/runtime/gateway/native/src/server.rs	181	pub(crate) permits: Arc<Semaphore>,	COMMENT
LOW	exp/runtime/gateway/native/src/server.rs	201	pub(crate) pre_first_byte_max: Option<Duration>,	COMMENT
LOW	exp/runtime/gateway/native/src/logprobs.rs	161	}	COMMENT
LOW	exp/runtime/gateway/native/src/replay_repair.rs	1	//! The one repair the waterfall performs on a caller's replayed input.	COMMENT
LOW	exp/runtime/gateway/native/src/replay_repair.rs	21	//! the request's bearer is the front's ephemeral exchanged token in a hosted	COMMENT
90 more matches not shown…

Modern Structural Boilerplate71 hits · 70 pts

Severity	File	Line	Snippet	Context
LOW	exp/optimize/model/sft/__init__.py	82	__all__ = [	CODE
LOW	exp/optimize/evaluation/simulation.py	24	logger = logging.getLogger(__name__)	CODE
LOW	exp/optimize/evaluation/runs.py	43	logger = logging.getLogger(__name__)	CODE
LOW	exp/optimize/router/judgment_budget.py	40	logger = logging.getLogger(__name__)	CODE
LOW	exp/optimize/router/composition.py	72	logger = logging.getLogger(__name__)	CODE
LOW	exp/optimize/router/fit/optimizer.py	56	logger = logging.getLogger(__name__)	CODE
LOW	exp/optimize/router/automatic/service.py	70	logger = logging.getLogger(__name__)	CODE
LOW	exp/runtime/capture/redirector_test.py	36	def set_intercept(self, spec: str) -> None:	CODE
LOW	exp/runtime/capture/watchdog.py	16	logger = logging.getLogger(__name__)	CODE
LOW	exp/runtime/capture/upload.py	23	logger = logging.getLogger(__name__)	CODE
LOW	exp/runtime/capture/proxy.py	37	logger = logging.getLogger(__name__)	CODE
LOW	exp/runtime/anthropic_protocol/__init__.py	12	__all__ = [	CODE
LOW	exp/runtime/environments/sandbox_ledger.py	34	logger = logging.getLogger(__name__)	CODE
LOW	exp/runtime/environments/__init__.py	29	__all__ = [	CODE
LOW	exp/runtime/agents/__init__.py	39	__all__ = [	CODE
LOW	exp/runtime/models/__init__.py	12	__all__ = [	CODE
LOW	exp/runtime/models/providers/subscription_tokens.py	31	logger = logging.getLogger(__name__)	CODE
LOW	exp/runtime/models/providers/__init__.py	43	__all__ = [	CODE
LOW	exp/runtime/models/providers/chatgpt_subscription.py	43	logger = logging.getLogger(__name__)	CODE
LOW	exp/runtime/models/providers/bedrock.py	126	def set_config_variable(self, logical_name: str, value: object) -> None:	CODE
LOW	exp/runtime/models/providers/bedrock.py	141	def set_config_provider(self, logical_name: str, provider: object) -> None:	CODE
LOW	exp/runtime/openai_protocol/__init__.py	12	__all__ = [	CODE
LOW	exp/runtime/sessions/store.py	39	logger = logging.getLogger(__name__)	CODE
LOW	exp/runtime/sessions/store.py	828	def _set_status(connection: sqlite3.Connection, key: tuple[str, str], status: str) -> None:	CODE
LOW	exp/runtime/gateway/__init__.py	92	__all__ = [	CODE
LOW	exp/runtime/gateway/native_bridge_test.py	4714	def _settle_one_completed_chat(control: NativeControlPlane, raw_key: str) -> None:	CODE
LOW	exp/runtime/gateway/platform.py	839	__all__ = [	CODE
LOW	exp/runtime/gateway/budgets.py	37	__all__ = ["MAXIMUM_NANO_USD"]	CODE
LOW	exp/runtime/gateway/video/engine.py	415	def _settle_unsent(self, job: VideoJob, failure: GatewayFailure, *, finalize: bool) -> None:	CODE
LOW	exp/runtime/gateway/video/engine.py	425	def _settle_unknown(self, job: VideoJob, failure: GatewayFailure) -> None:	CODE
LOW	exp/runtime/gateway/guardrails/__init__.py	50	__all__ = [	CODE
LOW	exp/runtime/gateway/ingest/__init__.py	6	__all__ = ["ingest_gateway_capture", "load_gateway_capture"]	CODE
LOW	exp/runtime/gateway/sqlite/__init__.py	5	__all__ = ["SQLiteGatewayStore"]	CODE
LOW	exp/runtime/gateway/sqlite/platform.py	931	__all__ = ["SQLiteGatewayPlatform"]	CODE
LOW	exp/runtime/gateway/batch/__init__.py	40	__all__ = [	CODE
LOW	exp/runtime/gateway/batch/engine.py	633	async def _settle(self, job: BatchJob) -> None:	CODE
LOW	exp/runtime/router/__init__.py	61	__all__ = [	CODE
LOW	exp/simulation/__init__.py	24	__all__ = [	CODE
LOW	exp/simulation/specs/__init__.py	17	__all__ = [	CODE
LOW	exp/simulation/world_model/__init__.py	63	__all__ = [	CODE
LOW	exp/simulation/retrieval/__init__.py	65	__all__ = [	CODE
LOW	exp/simulation/engines/sandbox_recording.py	400	def _set_limit(self, reason: StopReason, failure: StructuredFailure) -> None:	CODE
LOW	exp/simulation/engines/__init__.py	8	__all__ = [	CODE
LOW	exp/simulation/engines/sandbox.py	911	__all__ = [	CODE
LOW	exp/simulation/engines/text/leases_test.py	481	def update_owned_lease() -> None:	CODE
LOW	exp/simulation/engines/text/leases.py	34	logger = logging.getLogger(__name__)	CODE
LOW	exp/simulation/engines/text/recording.py	84	logger = logging.getLogger(__name__)	CODE
LOW	exp/simulation/engines/text/__init__.py	18	__all__ = [	CODE
LOW	exp/simulation/orchestration/__init__.py	9	__all__ = ["SimulationModeUnsupportedError", "Simulator", "require_implemented_mode"]	CODE
LOW	exp/simulation/reconstruction/__init__.py	12	__all__ = [	CODE
LOW	exp/cli/__init__.py	5	__all__ = ["app", "main"]	CODE
LOW	exp/cli/gateway/home.py	214	def _setup_from_menu(console: Console, *, root: Path, port: int) -> None:	CODE
LOW	exp/cli/gateway/provider.py	41	logger = logging.getLogger(__name__)	CODE
LOW	exp/cli/gateway/app.py	494	def _settle_emitted_key_output(output: Path) -> None:	CODE
LOW	exp/common/traces/__init__.py	6	__all__ = [	CODE
LOW	exp/common/traces/ingest/__init__.py	38	__all__ = [	CODE
LOW	exp/common/traces/ingest/posthog.py	10	__all__ = [	CODE
LOW	exp/common/tasks/__init__.py	6	__all__ = [	CODE
LOW	exp/common/core/files.py	30	logger = logging.getLogger(__name__)	CODE
LOW	exp/common/evaluations/__init__.py	28	__all__ = [	CODE
11 more matches not shown…

AI Structural Patterns71 hits · 65 pts

Severity	File	Line	Context
LOW	exp/runtime/models/registry.py	180	CODE
LOW	exp/runtime/models/registry_test.py	277	CODE
LOW	exp/runtime/models/providers/gemini_requests.py	92	CODE
LOW	exp/runtime/models/providers/openai_payloads.py	102	CODE
LOW	exp/runtime/models/providers/openai_payloads.py	326	CODE
LOW	exp/runtime/models/providers/azure.py	218	CODE
LOW	exp/runtime/models/providers/azure.py	338	CODE
LOW	exp/runtime/models/providers/openai_compatible.py	89	CODE
LOW	exp/runtime/models/providers/openai_compatible.py	528	CODE
LOW	exp/runtime/models/providers/gemini.py	108	CODE
LOW	exp/runtime/models/providers/vertex.py	250	CODE
LOW	exp/runtime/models/providers/vertex.py	409	CODE
LOW	exp/runtime/models/providers/vertex.py	606	CODE
LOW	exp/runtime/models/providers/openai.py	243	CODE
LOW	exp/runtime/models/providers/bedrock_requests.py	45	CODE
LOW	exp/runtime/models/providers/bedrock_requests.py	102	CODE
LOW	exp/runtime/models/providers/anthropic.py	231	CODE
LOW	exp/runtime/models/providers/bedrock.py	371	CODE
LOW	exp/runtime/gateway/native_attempt_pricing_test.py	109	CODE
LOW	exp/runtime/gateway/native_server.py	97	CODE
LOW	exp/runtime/gateway/native_bridge.py	184	CODE
LOW	exp/runtime/gateway/native_execution.py	435	CODE
LOW	exp/runtime/gateway/native_execution.py	846	CODE
LOW	exp/runtime/gateway/rung_admission_test.py	17	CODE
LOW	exp/runtime/gateway/ledger.py	276	CODE
LOW	exp/runtime/gateway/ledger.py	334	CODE
LOW	exp/runtime/gateway/ledger.py	525	CODE
LOW	exp/runtime/gateway/ledger.py	580	CODE
LOW	exp/runtime/gateway/group_commit.py	206	CODE
LOW	exp/runtime/gateway/group_commit.py	266	CODE
LOW	exp/runtime/gateway/group_commit.py	629	CODE
LOW	exp/runtime/gateway/group_commit.py	685	CODE
LOW	exp/runtime/gateway/native_accounting_test.py	1600	CODE
LOW	exp/runtime/gateway/native_accounting_test.py	211	CODE
LOW	exp/runtime/gateway/native_accounting_test.py	255	CODE
LOW	exp/runtime/gateway/native_accounting_test.py	4406	CODE
LOW	exp/runtime/gateway/native_accounting_test.py	4559	CODE
LOW	exp/runtime/gateway/native_accounting_test.py	2788	CODE
LOW	exp/runtime/gateway/rung_admission.py	254	CODE
LOW	exp/runtime/gateway/native_components.py	40	CODE
LOW	exp/runtime/gateway/native_components.py	59	CODE
LOW	exp/runtime/gateway/budget_continuation_test.py	53	CODE
LOW	exp/runtime/gateway/lifecycle_test.py	1094	CODE
LOW	exp/runtime/gateway/group_commit_test.py	1086	CODE
LOW	exp/runtime/gateway/group_commit_test.py	1151	CODE
LOW	exp/simulation/comparison_test.py	185	CODE
LOW	exp/simulation/world_model/grounded_session.py	256	CODE
LOW	exp/simulation/world_model/construction.py	72	CODE
LOW	exp/simulation/world_model/session_research.py	132	CODE
LOW	exp/simulation/engines/text/recording_test.py	247	CODE
LOW	exp/simulation/engines/text/simulator.py	119	CODE
LOW	exp/cli/app.py	50	CODE
LOW	exp/cli/optimize/model.py	71	CODE
LOW	exp/cli/optimize/router.py	48	CODE
LOW	exp/cli/config/app.py	118	CODE
LOW	exp/cli/judge/app.py	91	CODE
LOW	exp/cli/judge/app.py	155	CODE
LOW	exp/cli/evaluation/flow.py	48	CODE
LOW	exp/cli/evaluation/app.py	34	CODE
LOW	exp/cli/gateway/alias.py	316	CODE
11 more matches not shown…

Fake / Example Data54 hits · 51 pts

Severity	File	Line	Snippet	Context
LOW	exp/optimize/evaluation/simulation_test.py	658	api_key="fake-key",	CODE
LOW	exp/optimize/router/evaluation/spend_test.py	297	api_key="fake-key",	CODE
LOW⚡	exp/runtime/models/providers/openai_compatible_test.py	631	api_key="fake-key",	CODE
LOW⚡	exp/runtime/models/providers/openai_compatible_test.py	648	api_key="fake-key",	CODE
LOW⚡	exp/runtime/models/providers/openai_compatible_test.py	664	api_key="fake-key",	CODE
LOW⚡	exp/runtime/models/providers/openai_compatible_test.py	670	api_key="fake-key",	CODE
LOW⚡	exp/runtime/models/providers/openai_compatible_test.py	676	api_key="fake-key",	CODE
LOW⚡	exp/runtime/models/providers/openai_compatible_test.py	686	api_key="fake-key",	CODE
LOW⚡	exp/runtime/models/providers/openai_compatible_test.py	703	api_key="fake-key",	CODE
LOW⚡	exp/runtime/models/providers/openai_compatible_test.py	722	api_key="fake-key",	CODE
LOW⚡	exp/runtime/models/providers/openai_compatible_test.py	737	api_key="fake-key",	CODE
LOW⚡	exp/runtime/models/providers/openai_compatible_test.py	784	api_key="fake-key",	CODE
LOW⚡	exp/runtime/models/providers/openai_compatible_test.py	791	api_key="fake-key",	CODE
LOW⚡	exp/runtime/models/providers/openai_compatible_test.py	813	api_key="fake-key",	CODE
LOW⚡	exp/runtime/models/providers/openai_compatible_test.py	830	api_key="fake-key",	CODE
LOW⚡	exp/runtime/models/providers/openai_compatible_test.py	842	api_key="fake-key",	CODE
LOW⚡	exp/runtime/models/providers/openai_compatible_test.py	860	api_key="fake-key",	CODE
LOW⚡	exp/runtime/models/providers/openai_compatible_test.py	866	api_key="fake-key",	CODE
LOW⚡	exp/runtime/models/providers/openai_compatible_test.py	917	api_key="fake-key",	CODE
LOW⚡	exp/runtime/models/providers/openai_compatible_test.py	922	model=_snapshot(), base_url="https://gateway.xplabs.ai/qwen/v1", api_key="fake-key"	CODE
LOW	exp/runtime/models/providers/openai_compatible_test.py	206	api_key="fake-key",	CODE
LOW	exp/runtime/models/providers/openai_compatible_test.py	227	assert transport.requests[0][1]["Authorization"] == "Bearer fake-key"	CODE
LOW	exp/runtime/models/providers/openai_compatible_test.py	247	api_key="fake-key",	CODE
LOW	exp/runtime/models/providers/openai_compatible_test.py	456	api_key="fake-key",	CODE
LOW	exp/runtime/models/providers/openai_compatible_test.py	534	api_key="fake-key",	CODE
LOW	exp/runtime/models/providers/openai_compatible_test.py	593	api_key="fake-key",	CODE
LOW	exp/runtime/models/providers/openai_compatible_test.py	887	api_key="fake-key",	CODE
LOW	exp/runtime/models/providers/openai_compatible_test.py	1020	api_key="fake-key",	CODE
LOW⚡	exp/runtime/models/providers/vertex_test.py	230	api_key='{"placeholder": true}',	CODE
LOW⚡	exp/runtime/models/providers/vertex_test.py	680	api_key='{"placeholder": true}',	CODE
LOW⚡	exp/runtime/models/providers/vertex_test.py	692	api_key='{"placeholder": true}',	CODE
LOW	exp/runtime/models/providers/vertex_test.py	94	api_key='{"placeholder": true}',	CODE
LOW	exp/runtime/models/providers/vertex_test.py	143	api_key='{"placeholder": true}',	CODE
LOW	exp/runtime/models/providers/vertex_test.py	171	api_key='{"placeholder": true}',	CODE
LOW	exp/runtime/models/providers/vertex_test.py	194	api_key='{"placeholder": true}',	CODE
LOW	exp/runtime/models/providers/vertex_test.py	245	api_key='{"placeholder": true}',	CODE
LOW	exp/runtime/models/providers/vertex_test.py	444	api_key='{"placeholder": true}',	CODE
LOW	exp/runtime/models/providers/vertex_test.py	467	api_key='{"placeholder": true}',	CODE
LOW	exp/runtime/models/providers/vertex_test.py	487	api_key='{"placeholder": true}',	CODE
LOW	exp/runtime/models/providers/vertex_test.py	578	api_key='{"placeholder": true}',	CODE
LOW	exp/runtime/models/providers/vertex_test.py	600	api_key='{"placeholder": true}',	CODE
LOW	exp/runtime/models/providers/vertex_test.py	631	api_key='{"placeholder": true}',	CODE
LOW	exp/runtime/models/providers/vertex_test.py	775	api_key='{"placeholder": true}',	CODE
LOW⚡	…untime/models/providers/tests/vertex_anthropic_test.py	67	api_key='{"placeholder": true}',	CODE
LOW	…untime/models/providers/tests/vertex_anthropic_test.py	94	api_key='{"placeholder": true}',	CODE
LOW	…untime/models/providers/tests/vertex_anthropic_test.py	115	api_key='{"placeholder": true}',	CODE
LOW	…untime/models/providers/tests/vertex_anthropic_test.py	193	api_key='{"placeholder": true}',	CODE
LOW	exp/runtime/gateway/guardrails/regex_test.py	94	("alice@example.com and bob@example.org", "[REDACTED] and [REDACTED]"),	CODE
LOW	exp/runtime/gateway/guardrails/deterministic_test.py	264	"alice@example.com and bob@example.org",	CODE
LOW	exp/runtime/gateway/tests/native_guardrails_test.py	124	body["input"] = "Contact bob@example.org"	CODE
LOW	exp/runtime/gateway/tests/native_guardrails_test.py	127	body["messages"] = [{"role": "user", "content": "Contact bob@example.org"}]	CODE
LOW	exp/runtime/gateway/tests/native_guardrails_test.py	148	assert provider_inputs and "bob@example.org" not in provider_inputs[0]	CODE
LOW	exp/runtime/gateway/tests/native_audio_test.py	423	@pytest.mark.parametrize("placeholder", [0xFFFFFFFF, 0])	CODE
LOW	exp/runtime/router/journal_test.py	558	raw_key = "sk-this-is-a-fake-key-material-123456789"	CODE

Magic Placeholder Names4 hits · 22 pts

Severity	File	Line	Snippet	Context
HIGH	exp/runtime/gateway/lifecycle.py	746	keys = " ".join(f"{name}=YOUR_API_KEY" for name in sorted(missing_credential_variables))	CODE
HIGH⚡	exp/runtime/gateway/lifecycle_test.py	281	match=r"coding.TEST_PROVIDER_KEY.run 'TEST_PROVIDER_KEY=YOUR_API_KEY exp'",	CODE
HIGH	exp/cli/gateway/serve_test.py	478	"'OPENAI_API_KEY=YOUR_API_KEY exp'"	CODE
HIGH	exp/cli/gateway/serve_test.py	520	assert "run 'OPENAI_API_KEY=YOUR_API_KEY exp'" in str(failure.value)	CODE

Modern AI Meta-Vocabulary5 hits · 15 pts

Severity	File	Line	Snippet	Context
MEDIUM	docs/reference/immutable-real-trace-rag.md	1	# Immutable real-trace RAG contract	COMMENT
MEDIUM	docs/reference/gateway-classification-guardrails.md	1	# Classification guardrails	COMMENT
MEDIUM	docs/reference/gateway-guardrails.md	1	# Gateway guardrails	COMMENT
MEDIUM	exp/runtime/gateway/native/src/events.rs	762	// (guardrails, retention); only the public encoders name the sequence.	COMMENT
MEDIUM	exp/runtime/gateway/native/src/admission.rs	207	/// whole request: guardrails judge content, not reasoning, so display copy	COMMENT

Slop Phrases1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	exp/common/models/structured_test.py	47	content = '```json\n{"a": 1}\n```\nLet me know if you need anything else.'	CODE

Dead Code1 hit · 2 pts

Severity	File	Line	Snippet	Context
MEDIUM	exp/simulation/engines/text/leases_test.py	420		CODE

Structural Annotation Overuse1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	.claude/skills/ready-for-merge/SKILL.md	115	## Step 4: Report results and merge only with human approval	COMMENT

experientiallabs/experiential

Open-Source Code Quality, Security and Technical Debt Review

Risk Review · Payload v1

What These Metrics Mean

Pattern-Signal History

Severity Breakdown

Directory Score Breakdown

Pattern Findings