Declare your digital independence
This report summarizes scanner evidence for freenet/freenet-core, a Rust project with 3,106 GitHub stars. SynthScan examined 733,428 lines of code across 805 source files, recording 7299 pattern matches distributed across 16 syntactic categories. The legacy adjusted pattern signal is 9.9 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 6777 finding(s).
Are imports declared and package/API names verified? 27 finding(s).
Are wrappers, guards, and repeated structures necessary? 502 finding(s).
Which changes need focused human review? 7299 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 7299 distinct pattern matches across 16 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Cargo.toml | 121 | # WASM | COMMENT |
| LOW | Cargo.toml | 181 | wry = { version = "0.57", default-features = false, features = ["os-webview"] } | COMMENT |
| LOW | Cargo.toml | 201 | # - `OutboundDelegateMsg::UnsubscribeContractRequest` — a delegate asking to | COMMENT |
| LOW | Cargo.toml | 221 | # first making `origin_contract` attestable. | COMMENT |
| LOW | Cargo.toml | 241 | # (fdev, riverctl, River UI, the test harness) explicitly pins native. | COMMENT |
| LOW | Cargo.toml | 261 | # (`secrets_dir/node_kek`, 0o600) or systemd credentials | COMMENT |
| LOW | Cargo.toml | 281 | # codegen-units = 1 | COMMENT |
| LOW | deny.toml | 1 | # cargo-deny configuration for freenet-core. | COMMENT |
| LOW | .config/nextest.toml | 1 | [profile.ci] | COMMENT |
| LOW | .config/nextest.toml | 41 | # Ping integration tests have internal timeouts of 360-600s with sequential | COMMENT |
| LOW | .config/nextest.toml | 61 | COMMENT | |
| LOW | .config/nextest.toml | 81 | # exactly the flake-laundering the repo's flaky-tests rule forbids. It also boots | COMMENT |
| LOW | .config/nextest.toml | 101 | # wait out the rollback machinery's own 60s commit window, which is a hard-coded | COMMENT |
| LOW | crates/replay-harness/tests/scenarios_pin.rs | 1 | //! Pin every scenario against every controller. Adding a new | COMMENT |
| LOW | crates/replay-harness/tests/scenarios_pin.rs | 21 | use replay_harness::{Controller, RateDecision, Replayer}; | COMMENT |
| LOW | crates/replay-harness/tests/scenarios_pin.rs | 41 | // reference path (which says "do NOT fire") is exactly the signal | COMMENT |
| LOW | crates/replay-harness/src/rolling.rs | 1 | //! Per-peer rolling RTT statistics with a baseline window and a recent window. | COMMENT |
| LOW | crates/replay-harness/src/rolling.rs | 21 | COMMENT | |
| LOW | crates/replay-harness/src/lib.rs | 1 | //! Offline replay harness for shadow-RTT controllers. | COMMENT |
| LOW | crates/replay-harness/src/scenarios.rs | 1 | //! Synthetic scenarios — programmatic RTT-sample streams that pin specific | COMMENT |
| LOW | crates/replay-harness/src/replayer.rs | 201 | /// | COMMENT |
| LOW | crates/replay-harness/src/main.rs | 21 | COMMENT | |
| LOW | crates/replay-harness/src/scenarios/churning_peers.rs | 1 | //! `churning_peers` — peers join and leave every 30 s; RTTs stay healthy. | COMMENT |
| LOW | …rness/src/scenarios/reference_diverges_from_overlay.rs | 1 | //! `reference_diverges_from_overlay` — overlay inflates, reference stays flat. | COMMENT |
| LOW | …tes/replay-harness/src/scenarios/single_packet_loss.rs | 1 | //! `single_packet_loss` — one peer's RTT spikes transiently, then returns. | COMMENT |
| LOW | …play-harness/src/scenarios/reference_tracks_overlay.rs | 1 | //! `reference_tracks_overlay` — overlay and reference inflate together. | COMMENT |
| LOW | …tes/replay-harness/src/scenarios/slow_routing_drift.rs | 1 | //! `slow_routing_drift` — the baseline genuinely drifts upward over 30 min. | COMMENT |
| LOW | …ates/replay-harness/src/scenarios/idle_steady_state.rs | 1 | //! `idle_steady_state` — 5 peers, each anchored by a fast t=0 sample, | COMMENT |
| LOW | …s/replay-harness/src/scenarios/correlated_inflation.rs | 1 | //! `correlated_inflation` — every peer's RTT rises together. | COMMENT |
| LOW | crates/replay-harness/src/scenarios/cold_start.rs | 1 | //! `cold_start` — brand-new peers on a slow path, no baseline history. | COMMENT |
| LOW | crates/replay-harness/src/controllers/rfc_draft.rs | 1 | //! `RfcDraft` — the algorithm sketched in [#4074][issue]. | COMMENT |
| LOW | crates/replay-harness/src/controllers/ledbat.rs | 1 | //! `LedbatPlusPlus` — a stripped-down LEDBAT++ to reproduce the death spiral. | COMMENT |
| LOW | crates/replay-harness/src/controllers/ledbat.rs | 21 | //! runs slow-start, and has a richer gain schedule. We keep only what is needed | COMMENT |
| LOW | crates/core/Cargo.toml | 141 | tracing-subscriber = { workspace = true, features = ["json"], optional = true } | COMMENT |
| LOW | crates/core/Cargo.toml | 201 | muda = { workspace = true } | COMMENT |
| LOW | crates/core/Cargo.toml | 321 | # These lints move runtime failure classes to compile-time errors. | COMMENT |
| LOW | crates/core/Cargo.toml | 341 | # same statement. If the discarded value is `#[must_use]` AND `Copy` (e.g. a | COMMENT |
| LOW | crates/core/build.rs | 141 | .output() | COMMENT |
| LOW | crates/core/build.rs | 181 | // reproducible-builds convention and nixpkgs' stdenv exports it, so honour | COMMENT |
| LOW | crates/core/proptest-regressions/router.txt | 1 | # Seeds for failure cases proptest has generated in the past. It is | COMMENT |
| LOW | crates/core/proptest-regressions/transport/ledbat.txt | 1 | # Seeds for failure cases proptest has generated in the past. It is | COMMENT |
| LOW | crates/core/tests/origin_attestation_scope.rs | 1 | //! Live end-to-end verification of the connection-scope gate on attested | COMMENT |
| LOW | crates/core/tests/origin_attestation_scope.rs | 21 | //! Exercised with a real TCP forwarder listening off-loopback and dialing | COMMENT |
| LOW | crates/core/tests/origin_attestation_scope.rs | 81 | COMMENT | |
| LOW | crates/core/tests/host_clock_warning_ci_coverage.rs | 1 | //! Recurrence guard: the host-clock deprecation warning stays under test in CI. | COMMENT |
| LOW | crates/core/tests/post_update_probation_commit.rs | 1 | //! End-to-end guard for the post-update probation lifecycle (#5232, #4073). | COMMENT |
| LOW | crates/core/tests/post_update_probation_commit.rs | 21 | //! (`#[freenet_test]`, `SimNetwork`) can reach it either. | COMMENT |
| LOW | crates/core/tests/post_update_probation_commit.rs | 41 | //! three stops landing inside the window, before anything could commit. (What | COMMENT |
| LOW | crates/core/tests/post_update_probation_commit.rs | 61 | COMMENT | |
| LOW | crates/core/tests/post_update_probation_commit.rs | 81 | const COMMIT_HEALTHY_UPTIME_SECS: u64 = 60; | COMMENT |
| LOW | crates/core/tests/post_update_probation_commit.rs | 101 | /// Deliberately not the leading "post-update probation passed" phrase: the | COMMENT |
| LOW | crates/core/tests/post_update_probation_commit.rs | 181 | COMMENT | |
| LOW | crates/core/tests/post_update_probation_commit.rs | 381 | COMMENT | |
| LOW | crates/core/tests/post_update_probation_commit.rs | 401 | /// Deliberately narrow: any other early exit (a rejected flag, an unparseable | COMMENT |
| LOW | crates/core/tests/post_update_probation_commit.rs | 541 | ); | COMMENT |
| LOW | crates/core/tests/post_update_probation_commit.rs | 601 | COMMENT | |
| LOW | crates/core/tests/hosted_mode_import.rs | 1 | //! Live end-to-end integration test for the secrets IMPORT endpoint | COMMENT |
| LOW | crates/core/tests/graceful_shutdown_exit_code.rs | 1 | //! A graceful shutdown must make the `freenet` PROCESS exit 0 (#5227). | COMMENT |
| LOW | crates/core/tests/graceful_shutdown_exit_code.rs | 21 | //! | COMMENT |
| LOW | crates/core/tests/graceful_shutdown_exit_code.rs | 41 | #![cfg(unix)] | COMMENT |
| 6198 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | crates/core/Cargo.toml | 318 | # ============================================================================== | COMMENT |
| MEDIUM | crates/core/Cargo.toml | 323 | # ============================================================================== | COMMENT |
| MEDIUM | crates/core/tests/simulation_integration.rs | 9401 | // ── absent ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/core/tests/simulation_integration.rs | 9464 | // ── evidence ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/core/tests/simulation_integration.rs | 11718 | // ── Phase 1: Convergence (30 virtual minutes, no faults) ────────────────── | COMMENT |
| MEDIUM | crates/core/tests/simulation_integration.rs | 11764 | // ── Phase 2: Fault injection (5 virtual minutes, 20% message loss) ──────── | COMMENT |
| MEDIUM | crates/core/tests/simulation_integration.rs | 11810 | // ── Phase 3: Recovery (25 virtual minutes, faults cleared) ──────────────── | COMMENT |
| MEDIUM | crates/core/src/message.rs | 1210 | // ── Compile-time invariant checks ────────────────────────────────────── | COMMENT |
| MEDIUM | crates/core/src/router.rs | 10044 | // ── Per-peer dashboard data (peer page) ───────────────────────────────── | COMMENT |
| MEDIUM | crates/core/src/node.rs | 8644 | // ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/core/src/node.rs | 8651 | // ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/core/src/node.rs | 8965 | // ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/core/src/node.rs | 8978 | // ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/core/src/node.rs | 9101 | // ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/core/src/node.rs | 9105 | // ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/core/src/node.rs | 9159 | // ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/core/src/node.rs | 9163 | // ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/core/src/node.rs | 9291 | // ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/core/src/node.rs | 9299 | // ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/core/src/node.rs | 9381 | // ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/core/src/node.rs | 9387 | // ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/core/src/node.rs | 10628 | // ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/core/src/node.rs | 10633 | // ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/core/src/node.rs | 11044 | // ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/core/src/node.rs | 11052 | // ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/core/src/node.rs | 11127 | // ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/core/src/node.rs | 11146 | // ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/core/src/contract/fair_queue.rs | 1377 | // ── Priority tiering (#4534) ────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/core/src/contract/fair_queue.rs | 1377 | // ── Priority tiering (#4534) ────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | crates/core/src/contract/delegate_park.rs | 76 | //! ├─ handle_contract_event ─────────► dispatch_delegate_request ─┐ | COMMENT |
| MEDIUM⚡ | crates/core/src/contract/delegate_park.rs | 77 | //! ├─ handle_delegate_notification ────────────────────────────────┤ | COMMENT |
| MEDIUM⚡ | crates/core/src/contract/delegate_park.rs | 78 | //! └─ handle_delegate_resume ──┬───────────────────────────────────┤ | COMMENT |
| MEDIUM⚡ | crates/core/src/contract/delegate_park.rs | 79 | //! ├─► dispatch_delegate_request ──────┤ | COMMENT |
| MEDIUM⚡ | crates/core/src/contract/delegate_park.rs | 80 | //! └─► run_queued_notification ────────┘ | COMMENT |
| MEDIUM⚡ | crates/core/src/contract/delegate_park.rs | 82 | //! handle_delegate_with_contract_requests ◄─────┘ | COMMENT |
| MEDIUM | crates/core/src/contract/executor.rs | 3164 | // ── is_wasm_timeout predicate (#4861) ───────────────────────────── | COMMENT |
| MEDIUM | crates/core/src/contract/executor.rs | 3164 | // ── is_wasm_timeout predicate (#4861) ───────────────────────────── | COMMENT |
| MEDIUM | crates/core/src/contract/executor.rs | 3618 | // ── ContractQueueFull predicate (issue #4251) ───────────────────── | COMMENT |
| MEDIUM | crates/core/src/contract/executor.rs | 3618 | // ── ContractQueueFull predicate (issue #4251) ───────────────────── | COMMENT |
| MEDIUM⚡ | crates/core/src/transport/ledbat/state.rs | 40 | /// ┌─────────────┐ | COMMENT |
| MEDIUM⚡ | crates/core/src/transport/ledbat/state.rs | 41 | /// │ SlowStart │─────────────────────────────────────────────────┐ | COMMENT |
| MEDIUM⚡ | crates/core/src/transport/ledbat/state.rs | 42 | /// └──────┬──────┘ │ | COMMENT |
| MEDIUM⚡ | crates/core/src/transport/ledbat/state.rs | 45 | /// ┌────────────────────────┐ (first time only) │ | COMMENT |
| MEDIUM⚡ | crates/core/src/transport/ledbat/state.rs | 46 | /// │ WaitingForSlowdown │◄─────────────────────┐ │ | COMMENT |
| MEDIUM⚡ | crates/core/src/transport/ledbat/state.rs | 47 | /// └──────────┬─────────────┘ │ │ | COMMENT |
| MEDIUM⚡ | crates/core/src/transport/ledbat/state.rs | 50 | /// ┌──────────────┐◄───────────────────────────────│───────────────│───┐ | COMMENT |
| MEDIUM⚡ | crates/core/src/transport/ledbat/state.rs | 52 | /// └──────┬───────┘ transitions on next ACK) │ │ │ | COMMENT |
| MEDIUM⚡ | crates/core/src/transport/ledbat/state.rs | 55 | /// ┌──────────┐ │ │ │ | COMMENT |
| MEDIUM⚡ | crates/core/src/transport/ledbat/state.rs | 57 | /// └────┬─────┘ │ │ │ | COMMENT |
| MEDIUM⚡ | crates/core/src/transport/ledbat/state.rs | 60 | /// ┌────────────┐ │ │ │ | COMMENT |
| MEDIUM⚡ | crates/core/src/transport/ledbat/state.rs | 62 | /// └─────┬──────┘ │ │ │ | COMMENT |
| MEDIUM⚡ | crates/core/src/transport/ledbat/state.rs | 65 | /// ┌──────────────────────┐ │ │ │ | COMMENT |
| MEDIUM⚡ | crates/core/src/transport/ledbat/state.rs | 66 | /// │ CongestionAvoidance │────────────────────────┴───────────────┘ │ | COMMENT |
| MEDIUM⚡ | crates/core/src/transport/ledbat/state.rs | 67 | /// └──────────┬───────────┘◄───────────────────────────────────────────┘ | COMMENT |
| MEDIUM⚡ | crates/core/src/transport/ledbat/state.rs | 69 | /// └────────────────────────────────────────────────────────┘ | COMMENT |
| MEDIUM⚡ | crates/core/src/transport/bbr/state.rs | 16 | /// ┌────────────────┐ | COMMENT |
| MEDIUM⚡ | crates/core/src/transport/bbr/state.rs | 19 | /// └───────┬────────┘ | COMMENT |
| MEDIUM⚡ | crates/core/src/transport/bbr/state.rs | 22 | /// ┌────────────────┐ | COMMENT |
| MEDIUM⚡ | crates/core/src/transport/bbr/state.rs | 25 | /// └───────┬────────┘ | COMMENT |
| MEDIUM⚡ | crates/core/src/transport/bbr/state.rs | 28 | /// ┌────────────────┐ | COMMENT |
| 434 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | Cargo.toml | 241 | # (fdev, riverctl, River UI, the test harness) explicitly pins native. | COMMENT |
| MEDIUM | .config/nextest.toml | 83 | # needs more headroom than the 240s default; without this the harness SIGKILLs it | COMMENT |
| MEDIUM | …tes/replay-harness/src/scenarios/single_packet_loss.rs | 20 | //! (a robust controller ignores a single-connection transient); LEDBAT's | COMMENT |
| MEDIUM | …es/replay-harness/src/scenarios/single_peer_outlier.rs | 5 | //! median across peers to be robust against this case. A sane controller | COMMENT |
| MEDIUM | crates/core/Cargo.toml | 280 | # Manual throughput benchmarks (test harness, no criterion, ~3 sec) | COMMENT |
| MEDIUM | crates/core/tests/simulation_integration.rs | 562 | /// for robust coverage. Fails if any operation type has zero occurrences. | COMMENT |
| MEDIUM | crates/core/tests/simulation_integration.rs | 3781 | /// ## Fan-out width vs. the harness bootstrap ceiling (why N=8/16, not 40-80) | COMMENT |
| MEDIUM | crates/core/tests/simulation_integration.rs | 3836 | /// `notification_channel_pending` per the letter of #4233, the harness would | COMMENT |
| MEDIUM | crates/core/tests/simulation_integration.rs | 8263 | // Asserting > 6 (bootstrap floor + at least one probe per node) is robust | COMMENT |
| MEDIUM | crates/core/tests/simulation_integration.rs | 14174 | // using the merged #4657 sim-harness: `enable_hosting_time_control` (a | COMMENT |
| MEDIUM | crates/core/tests/simulation_integration.rs | 14654 | // copies made greedy single-path routing robust because a copy was almost | COMMENT |
| MEDIUM | crates/core/tests/simulation_integration.rs | 17300 | #[ignore = "heavy larger-ring validation (6 × 48-peer sim runs); harness-limited, run manually: \ | COMMENT |
| MEDIUM | crates/core/tests/simulation_integration.rs | 17675 | // the mesh — robust participation so all N are real co-host targets. | COMMENT |
| MEDIUM | crates/core/tests/simulation_integration.rs | 9011 | 7, // max_connections — 7 ensures robust GET routing across topology variations | CODE |
| MEDIUM | crates/core/src/message.rs | 612 | /// it is deliberately left unpinned: the R4b instrument is robust either way | COMMENT |
| MEDIUM | crates/core/src/test_utils.rs | 1543 | /// OFF by default (#4968), so the harness must opt in explicitly for these | COMMENT |
| MEDIUM | crates/core/src/governance.rs | 14 | //! producing log-space cost/benefit ratios, compute a robust threshold | COMMENT |
| MEDIUM | crates/core/src/governance.rs | 63 | /// statistical guidance), 5% top-trim (robust-statistics convention). | COMMENT |
| MEDIUM | crates/core/src/deadlock_detection.rs | 189 | /// caller's own cycle by thread id, so it is robust to any other deadlock | COMMENT |
| MEDIUM⚡ | crates/core/src/node.rs | 605 | // the `#[freenet_test]` harness, and that all of them get a temp data | COMMENT |
| MEDIUM⚡ | crates/core/src/node.rs | 614 | // - an explicit `tempfile` data dir — the `#[freenet_test]` harness | COMMENT |
| MEDIUM⚡ | crates/core/src/node.rs | 620 | // also the `#[freenet_test]` harness. | COMMENT |
| MEDIUM | crates/core/src/contract.rs | 6688 | /// scan over our own source is more robust than runtime-subscriber | COMMENT |
| MEDIUM | crates/core/src/contract.rs | 9206 | // PutResponse, not a specific Ok/Err, so the test is robust to the | COMMENT |
| MEDIUM | crates/core/src/operations.rs | 1340 | // This is robust against renaming/moving the next function. | COMMENT |
| LOW | crates/core/src/tracing/tracer.rs | 877 | /// ## Why not just call [`set_logger`] here | COMMENT |
| MEDIUM | crates/core/src/contract/storages/redb.rs | 1172 | // This is more robust than string matching on error messages | COMMENT |
| MEDIUM | crates/core/src/contract/executor/runtime.rs | 1518 | /// `.claude/rules/bug-prevention-patterns.md` (cheaper and more robust | COMMENT |
| MEDIUM | crates/core/src/transport/shadow_iface_tx.rs | 250 | /// the window mean per-second rate under its original name; `*_p50` (robust | COMMENT |
| MEDIUM | crates/core/src/transport/shadow_demand.rs | 193 | /// stay robust against other tests touching these monotonic statics. | COMMENT |
| MEDIUM | crates/core/src/transport/shadow_demand.rs | 382 | /// distribution — `p50` is a more robust central-tendency signal than `mean` | COMMENT |
| MEDIUM | crates/core/src/transport/shadow_demand.rs | 489 | /// the class ever pushed in a second), `*_p50` (robust central tendency for a | COMMENT |
| MEDIUM | crates/core/src/transport/shadow_demand.rs | 611 | // Delta-based so this is robust to other tests touching the same | COMMENT |
| MEDIUM | crates/core/src/transport/peer_connection.rs | 3272 | /// upper bound well below the payload size — both robust under | COMMENT |
| MEDIUM | crates/core/src/transport/shadow_stats.rs | 20 | //! is a more robust central-tendency signal than `mean` for the bursty, | COMMENT |
| MEDIUM | crates/core/src/transport/reference_ping.rs | 749 | // robust test is to monkey-patch... we don't have that. | COMMENT |
| MEDIUM | crates/core/src/transport/rolling_rtt_stats.rs | 12 | //! "current" RTT estimate, robust to a few outlier samples. | COMMENT |
| MEDIUM | crates/core/src/transport/rolling_rtt_stats.rs | 167 | // "median RTT over last 10 s" wording and is robust to a | COMMENT |
| MEDIUM | crates/core/src/transport/ledbat/controller.rs | 3447 | /// - Very high RTT: GAIN should be 1.0 (aggressive to utilize bandwidth) | COMMENT |
| MEDIUM | crates/core/src/transport/bbr/controller.rs | 671 | // During Startup, ensure cwnd is large enough to utilize the minimum pacing rate. | COMMENT |
| MEDIUM | crates/core/src/bin/commands/service/linux.rs | 448 | # fallback; this makes the intent explicit and robust. | COMMENT |
| MEDIUM | crates/core/src/bin/commands/service/linux.rs | 1008 | /// comment containing a bracketed name is ignored), so this is robust to | COMMENT |
| MEDIUM | crates/core/src/server/client_api.rs | 1799 | /// the `#[freenet_test]` harness setting `webapp_cache_dir` (pinned in | COMMENT |
| MEDIUM | crates/core/src/server/home_page/estimator.rs | 502 | // reading the peer page gives (robust to the heavy tails of latency and | COMMENT |
| MEDIUM | crates/core/src/operations/route_attempt.rs | 799 | #[allow(clippy::large_enum_variant)] // test harness; one value per attempt | COMMENT |
| MEDIUM | crates/core/src/operations/update/op_ctx_task.rs | 5126 | // (fmt-robust: match the field identifier, which survives | COMMENT |
| MEDIUM | crates/core/src/operations/subscribe/tests.rs | 195 | // brace-counted approach is the most robust against helper | COMMENT |
| MEDIUM | crates/core/src/client_events/user_op_rate_limit.rs | 181 | // "Essentially full" AND holding at least one whole token. Within one | COMMENT |
| MEDIUM | crates/core/src/ring/interest.rs | 1282 | // Bytes differ. Trust the contract's semantic verdict when present (robust | COMMENT |
| MEDIUM | crates/core/src/ring/contract_ban_list.rs | 1204 | // keeps this gate-ordering check robust against legitimate | COMMENT |
| MEDIUM | crates/core/src/wasm_runtime/engine/wasmtime_engine.rs | 207 | /// # Why this is robust against the runtime flavor (issue #4441 fix-up) | COMMENT |
| MEDIUM | crates/core/src/wasm_runtime/engine/wasmtime_engine.rs | 207 | /// # Why this is robust against the runtime flavor (issue #4441 fix-up) | COMMENT |
| MEDIUM | crates/core/src/node/op_state_manager.rs | 4852 | // — disconnect cleanup must remain robust when the event loop | COMMENT |
| MEDIUM | crates/core/src/node/op_state_manager.rs | 5125 | // remain robust during shutdown races. | COMMENT |
| MEDIUM | crates/core/src/node/network_bridge/p2p_protoc.rs | 5942 | /// robust and unambiguous. | COMMENT |
| MEDIUM | crates/core/src/router/hierarchical.rs | 161 | //! - the #5655 synthetic bake-off condition holds VACUOUSLY. That harness | COMMENT |
| MEDIUM | crates/core/src/router/hierarchical.rs | 394 | /// Note where the leverage actually is, because an earlier version of this | COMMENT |
| MEDIUM | crates/core/src/router/golden_replay.rs | 32 | //! #5702, the harness reproduces the `d9fa29522` files exactly, and on | COMMENT |
| MEDIUM | crates/core/src/router/hierarchical/tests.rs | 2530 | // exact float distance is not a robust way to find an event. | COMMENT |
| MEDIUM | crates/core/src/router/hierarchical/tests.rs | 3170 | // an exact float distance is not a robust way to find an event. | COMMENT |
| 44 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | crates/core/tests/simulation_integration.rs | 2185 | // Step 1: Gateway puts contract with initial state and subscribes | COMMENT |
| LOW⚡ | crates/core/tests/simulation_integration.rs | 2194 | // Step 2: Node 1 subscribes - will receive full state from gateway | COMMENT |
| LOW⚡ | crates/core/tests/simulation_integration.rs | 2199 | // Step 3: Node 2 subscribes - will receive full state from gateway | COMMENT |
| LOW⚡ | crates/core/tests/simulation_integration.rs | 2204 | // Step 4: Node 3 subscribes - will receive full state from gateway | COMMENT |
| LOW⚡ | crates/core/tests/simulation_integration.rs | 2209 | // Step 5: Gateway updates - broadcasts to all subscribers | COMMENT |
| LOW⚡ | crates/core/tests/simulation_integration.rs | 2219 | // Step 6: Node 1 updates - broadcasts to subscribers | COMMENT |
| LOW⚡ | crates/core/tests/simulation_integration.rs | 2227 | // Step 7: Node 2 updates - broadcasts to subscribers | COMMENT |
| LOW⚡ | crates/core/tests/simulation_integration.rs | 3150 | // Step 1: Gateway puts contract with v1 | COMMENT |
| LOW⚡ | crates/core/tests/simulation_integration.rs | 3159 | // Step 2: Node 1 subscribes - receives v1 | COMMENT |
| LOW⚡ | crates/core/tests/simulation_integration.rs | 3164 | // Step 3: Node 1 updates to v5 - creates version divergence | COMMENT |
| LOW⚡ | crates/core/tests/simulation_integration.rs | 3172 | // Step 4: Node 2 subscribes | COMMENT |
| LOW⚡ | crates/core/tests/simulation_integration.rs | 3177 | // Step 5: Gateway updates to v10 - broadcasts to subscribers | COMMENT |
| LOW⚡ | crates/core/tests/operations.rs | 2405 | // Step 1: pre-register a token → contract-id in the node's attested_contracts map. | COMMENT |
| LOW⚡ | crates/core/tests/operations.rs | 2412 | // Step 2: compile / load the delegate WASM | COMMENT |
| LOW⚡ | crates/core/tests/operations.rs | 2417 | // Step 3: connect via WebSocket carrying the Bearer token. | COMMENT |
| LOW | crates/core/tests/operations.rs | 2429 | // Step 4: register the delegate | COMMENT |
| LOW | crates/core/tests/operations.rs | 2452 | // Step 5: send an ApplicationMessage that causes the delegate to echo back | COMMENT |
| LOW | crates/core/tests/operations.rs | 2468 | // Step 6: verify the delegate received the correct attested bytes | COMMENT |
| LOW | crates/core/tests/operations.rs | 2964 | // Step 1: Peer-a puts the contract with initial state | COMMENT |
| LOW | crates/core/tests/operations.rs | 2995 | // Step 2: Gateway gets the contract (this caches it on gateway) | COMMENT |
| LOW | crates/core/tests/operations.rs | 3026 | // Step 3: Peer-a updates the contract with new state | COMMENT |
| LOW | crates/core/tests/operations.rs | 3078 | // Step 4: Verify gateway received the update by polling GET | COMMENT |
| LOW | crates/core/tests/operations.rs | 3217 | // Step 1: PUT with subscribe=false (like River room creation) | COMMENT |
| LOW | crates/core/tests/operations.rs | 3245 | // Step 2: IMMEDIATELY Subscribe (don't wait for propagation to gateway) | COMMENT |
| LOW | crates/core/tests/operations.rs | 3473 | // Step 1: Peer-a puts the contract with initial state | COMMENT |
| LOW | crates/core/tests/operations.rs | 3504 | // Step 2: Gateway gets the contract (this caches it on gateway) | COMMENT |
| LOW | crates/core/tests/operations.rs | 3535 | // Step 3: Gateway subscribes to the contract | COMMENT |
| LOW | crates/core/tests/operations.rs | 3568 | // Step 4: Peer-a PUTs an updated version of the contract | COMMENT |
| LOW | crates/core/tests/operations.rs | 3620 | // Step 5: Gateway should receive an UPDATE notification because it's subscribed | COMMENT |
| LOW | crates/core/tests/operations.rs | 3806 | // Step 1: Register the delegate | COMMENT |
| LOW | crates/core/tests/operations.rs | 3830 | // Step 2: PUT contract via delegate | COMMENT |
| LOW | crates/core/tests/operations.rs | 3897 | // Step 3: Verify contract state via direct GET | COMMENT |
| LOW | crates/core/tests/operations.rs | 3925 | // Step 4: UPDATE contract via delegate (add a task) | COMMENT |
| LOW | crates/core/tests/operations.rs | 3998 | // Step 5: Verify updated state via direct GET | COMMENT |
| LOW | crates/core/tests/operations.rs | 4066 | // Step 1: PUT contract directly so state exists in the store | COMMENT |
| LOW | crates/core/tests/operations.rs | 4090 | // Step 2: Register delegate | COMMENT |
| LOW | crates/core/tests/operations.rs | 4114 | // Step 3: GET contract via delegate | COMMENT |
| LOW⚡ | crates/core/benches/transport/level0.rs | 249 | // Step 1: Serialize | COMMENT |
| LOW⚡ | crates/core/benches/transport/level0.rs | 253 | // Step 2: Encrypt in place | COMMENT |
| LOW⚡ | crates/core/src/governance.rs | 228 | // Step 3: median of trimmed sample. | COMMENT |
| LOW⚡ | crates/core/src/governance.rs | 231 | // Step 4: MAD — median of |x − median|. Compute deviations, sort, | COMMENT |
| LOW⚡ | crates/core/src/governance.rs | 252 | // Step 5: threshold = median + k × (σ-scaled MAD), clamped at | COMMENT |
| LOW⚡ | crates/core/src/governance.rs | 262 | // Step 6: flag everyone whose ratio strictly exceeds the threshold. | COMMENT |
| LOW | crates/core/src/governance.rs | 172 | // Step 1: extract ratios, dropping any non-finite values | COMMENT |
| LOW | crates/core/src/governance.rs | 201 | // Step 2: trim the top tail BEFORE computing the statistic so the | COMMENT |
| LOW | crates/core/src/topology.rs | 403 | // Step 1: Collect data | COMMENT |
| LOW | crates/core/src/topology.rs | 428 | // Step 2: Process data | COMMENT |
| LOW | crates/core/src/contract/governance.rs | 2038 | // Step 1: build a distribution with one Borderline contract. | COMMENT |
| LOW | crates/core/src/contract/governance.rs | 2061 | // Step 2: force the MAD detector to collapse | COMMENT |
| LOW⚡ | …contract/executor/pool_tests/wasm_conformance_tests.rs | 318 | // Step 1: Summarize on both | COMMENT |
| LOW⚡ | …contract/executor/pool_tests/wasm_conformance_tests.rs | 325 | // Step 2: Get delta from summary on both | COMMENT |
| LOW⚡ | …contract/executor/pool_tests/wasm_conformance_tests.rs | 332 | // Step 3: Apply delta as update on both | COMMENT |
| LOW⚡ | crates/core/src/transport/connection_handler.rs | 4378 | // Step 2: Simulate peer disconnect by dropping the connection | COMMENT |
| LOW⚡ | crates/core/src/transport/connection_handler.rs | 4387 | // Step 3: Create a new peer at a DIFFERENT port (simulating restart with new ephemeral port) | COMMENT |
| LOW⚡ | crates/core/src/transport/connection_handler.rs | 4686 | // Step 2: Simulate gateway restart by dropping Gateway A | COMMENT |
| LOW⚡ | crates/core/src/transport/connection_handler.rs | 4694 | // Step 3: Create Gateway B with NEW identity (Y) at the SAME address | COMMENT |
| LOW⚡ | crates/core/src/transport/connection_handler.rs | 4813 | // Step 2: Simulate peer restart by dropping everything related to peer A | COMMENT |
| LOW⚡ | crates/core/src/transport/connection_handler.rs | 4822 | // Step 3: Create peer B with NEW identity (Y) at the SAME address | COMMENT |
| LOW | crates/core/src/transport/connection_handler.rs | 4410 | // Step 4: Peer B connects to gateway - this should work on first attempt | COMMENT |
| LOW | crates/core/src/transport/connection_handler.rs | 4495 | // Step 1: Peer A connects to gateway | COMMENT |
| 117 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | crates/core/tests/simulation_integration.rs | 2185 | // Step 1: Gateway puts contract with initial state and subscribes | COMMENT |
| LOW⚡ | crates/core/tests/simulation_integration.rs | 2194 | // Step 2: Node 1 subscribes - will receive full state from gateway | COMMENT |
| LOW⚡ | crates/core/tests/simulation_integration.rs | 2199 | // Step 3: Node 2 subscribes - will receive full state from gateway | COMMENT |
| LOW⚡ | crates/core/tests/simulation_integration.rs | 2204 | // Step 4: Node 3 subscribes - will receive full state from gateway | COMMENT |
| LOW⚡ | crates/core/tests/simulation_integration.rs | 2209 | // Step 5: Gateway updates - broadcasts to all subscribers | COMMENT |
| LOW⚡ | crates/core/tests/simulation_integration.rs | 2219 | // Step 6: Node 1 updates - broadcasts to subscribers | COMMENT |
| LOW⚡ | crates/core/tests/simulation_integration.rs | 2227 | // Step 7: Node 2 updates - broadcasts to subscribers | COMMENT |
| LOW⚡ | crates/core/tests/simulation_integration.rs | 3150 | // Step 1: Gateway puts contract with v1 | COMMENT |
| LOW⚡ | crates/core/tests/simulation_integration.rs | 3159 | // Step 2: Node 1 subscribes - receives v1 | COMMENT |
| LOW⚡ | crates/core/tests/simulation_integration.rs | 3164 | // Step 3: Node 1 updates to v5 - creates version divergence | COMMENT |
| LOW⚡ | crates/core/tests/simulation_integration.rs | 3172 | // Step 4: Node 2 subscribes | COMMENT |
| LOW⚡ | crates/core/tests/simulation_integration.rs | 3177 | // Step 5: Gateway updates to v10 - broadcasts to subscribers | COMMENT |
| LOW⚡ | crates/core/tests/operations.rs | 2405 | // Step 1: pre-register a token → contract-id in the node's attested_contracts map. | COMMENT |
| LOW⚡ | crates/core/tests/operations.rs | 2412 | // Step 2: compile / load the delegate WASM | COMMENT |
| LOW⚡ | crates/core/tests/operations.rs | 2417 | // Step 3: connect via WebSocket carrying the Bearer token. | COMMENT |
| LOW | crates/core/tests/operations.rs | 2429 | // Step 4: register the delegate | COMMENT |
| LOW | crates/core/tests/operations.rs | 2452 | // Step 5: send an ApplicationMessage that causes the delegate to echo back | COMMENT |
| LOW | crates/core/tests/operations.rs | 2468 | // Step 6: verify the delegate received the correct attested bytes | COMMENT |
| LOW | crates/core/tests/operations.rs | 2964 | // Step 1: Peer-a puts the contract with initial state | COMMENT |
| LOW | crates/core/tests/operations.rs | 2995 | // Step 2: Gateway gets the contract (this caches it on gateway) | COMMENT |
| LOW | crates/core/tests/operations.rs | 3026 | // Step 3: Peer-a updates the contract with new state | COMMENT |
| LOW | crates/core/tests/operations.rs | 3078 | // Step 4: Verify gateway received the update by polling GET | COMMENT |
| LOW | crates/core/tests/operations.rs | 3217 | // Step 1: PUT with subscribe=false (like River room creation) | COMMENT |
| LOW | crates/core/tests/operations.rs | 3245 | // Step 2: IMMEDIATELY Subscribe (don't wait for propagation to gateway) | COMMENT |
| LOW | crates/core/tests/operations.rs | 3473 | // Step 1: Peer-a puts the contract with initial state | COMMENT |
| LOW | crates/core/tests/operations.rs | 3504 | // Step 2: Gateway gets the contract (this caches it on gateway) | COMMENT |
| LOW | crates/core/tests/operations.rs | 3535 | // Step 3: Gateway subscribes to the contract | COMMENT |
| LOW | crates/core/tests/operations.rs | 3568 | // Step 4: Peer-a PUTs an updated version of the contract | COMMENT |
| LOW | crates/core/tests/operations.rs | 3620 | // Step 5: Gateway should receive an UPDATE notification because it's subscribed | COMMENT |
| LOW | crates/core/tests/operations.rs | 3806 | // Step 1: Register the delegate | COMMENT |
| LOW | crates/core/tests/operations.rs | 3830 | // Step 2: PUT contract via delegate | COMMENT |
| LOW | crates/core/tests/operations.rs | 3897 | // Step 3: Verify contract state via direct GET | COMMENT |
| LOW | crates/core/tests/operations.rs | 3925 | // Step 4: UPDATE contract via delegate (add a task) | COMMENT |
| LOW | crates/core/tests/operations.rs | 3998 | // Step 5: Verify updated state via direct GET | COMMENT |
| LOW | crates/core/tests/operations.rs | 4066 | // Step 1: PUT contract directly so state exists in the store | COMMENT |
| LOW | crates/core/tests/operations.rs | 4090 | // Step 2: Register delegate | COMMENT |
| LOW | crates/core/tests/operations.rs | 4114 | // Step 3: GET contract via delegate | COMMENT |
| LOW⚡ | crates/core/benches/transport/level0.rs | 249 | // Step 1: Serialize | COMMENT |
| LOW⚡ | crates/core/benches/transport/level0.rs | 253 | // Step 2: Encrypt in place | COMMENT |
| LOW⚡ | crates/core/src/governance.rs | 228 | // Step 3: median of trimmed sample. | COMMENT |
| LOW⚡ | crates/core/src/governance.rs | 231 | // Step 4: MAD — median of |x − median|. Compute deviations, sort, | COMMENT |
| LOW⚡ | crates/core/src/governance.rs | 252 | // Step 5: threshold = median + k × (σ-scaled MAD), clamped at | COMMENT |
| LOW⚡ | crates/core/src/governance.rs | 262 | // Step 6: flag everyone whose ratio strictly exceeds the threshold. | COMMENT |
| LOW | crates/core/src/governance.rs | 172 | // Step 1: extract ratios, dropping any non-finite values | COMMENT |
| LOW | crates/core/src/governance.rs | 201 | // Step 2: trim the top tail BEFORE computing the statistic so the | COMMENT |
| LOW | crates/core/src/topology.rs | 403 | // Step 1: Collect data | COMMENT |
| LOW | crates/core/src/topology.rs | 428 | // Step 2: Process data | COMMENT |
| LOW | crates/core/src/contract/governance.rs | 2038 | // Step 1: build a distribution with one Borderline contract. | COMMENT |
| LOW | crates/core/src/contract/governance.rs | 2061 | // Step 2: force the MAD detector to collapse | COMMENT |
| LOW⚡ | …contract/executor/pool_tests/wasm_conformance_tests.rs | 318 | // Step 1: Summarize on both | COMMENT |
| LOW⚡ | …contract/executor/pool_tests/wasm_conformance_tests.rs | 325 | // Step 2: Get delta from summary on both | COMMENT |
| LOW⚡ | …contract/executor/pool_tests/wasm_conformance_tests.rs | 332 | // Step 3: Apply delta as update on both | COMMENT |
| LOW⚡ | crates/core/src/transport/connection_handler.rs | 4378 | // Step 2: Simulate peer disconnect by dropping the connection | COMMENT |
| LOW⚡ | crates/core/src/transport/connection_handler.rs | 4387 | // Step 3: Create a new peer at a DIFFERENT port (simulating restart with new ephemeral port) | COMMENT |
| LOW⚡ | crates/core/src/transport/connection_handler.rs | 4686 | // Step 2: Simulate gateway restart by dropping Gateway A | COMMENT |
| LOW⚡ | crates/core/src/transport/connection_handler.rs | 4694 | // Step 3: Create Gateway B with NEW identity (Y) at the SAME address | COMMENT |
| LOW⚡ | crates/core/src/transport/connection_handler.rs | 4813 | // Step 2: Simulate peer restart by dropping everything related to peer A | COMMENT |
| LOW⚡ | crates/core/src/transport/connection_handler.rs | 4822 | // Step 3: Create peer B with NEW identity (Y) at the SAME address | COMMENT |
| LOW | crates/core/src/transport/connection_handler.rs | 4410 | // Step 4: Peer B connects to gateway - this should work on first attempt | COMMENT |
| LOW | crates/core/src/transport/connection_handler.rs | 4495 | // Step 1: Peer A connects to gateway | COMMENT |
| 111 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …es/core/src/contract/executor/runtime/executor_impl.rs | 2537 | /// # Return value | COMMENT |
| LOW | crates/core/src/bin/commands/service/macos.rs | 389 | # Check if this looks like a port-already-in-use failure. | COMMENT |
| LOW | docker/freenet-gateway/freenet-gateway-startup.sh | 5 | # Check if required environment variables are set | COMMENT |
| LOW | docker/freenet-gateway/generate-keypair.sh | 9 | # Check if the keypair already exists | COMMENT |
| LOW | scripts/run_benchmarks.sh | 70 | # Check if running in VM | COMMENT |
| LOW | scripts/run_benchmarks.sh | 89 | # Check if at max | COMMENT |
| LOW | scripts/pre-commit-clippy.sh | 50 | # Check if this package is in the workspace or standalone | COMMENT |
| LOW | scripts/install.sh | 141 | # Check if a command exists | COMMENT |
| LOW | scripts/install.sh | 224 | # Check if directory is in PATH | COMMENT |
| LOW | scripts/install.sh | 807 | # Check if freenet is already installed and running | COMMENT |
| LOW | scripts/install.sh | 809 | # Check if freenet is running | COMMENT |
| LOW | scripts/validate-worktree.sh | 10 | # Check if we're in the main worktree directory | COMMENT |
| LOW | scripts/init-gateway.sh | 5 | # Check if required parameters are provided | COMMENT |
| LOW | scripts/update-remote-gws.sh | 261 | # Check if timeout command exists | COMMENT |
| LOW | scripts/release.sh | 350 | # Check if a step is completed | COMMENT |
| LOW | scripts/release.sh | 596 | # Check if we're on main branch | COMMENT |
| LOW | scripts/release.sh | 611 | # Check if we're up to date with origin | COMMENT |
| LOW | scripts/release.sh | 621 | # Check if main branch CI is green (required before skipping tests on release PR) | COMMENT |
| LOW | scripts/release.sh | 716 | # Check if version is already updated in Cargo.toml | COMMENT |
| LOW | scripts/release.sh | 822 | # Check if a release PR for this version already exists or was merged | COMMENT |
| LOW | scripts/release.sh | 864 | # Check if there are any changes to commit | COMMENT |
| LOW | scripts/release.sh | 869 | # Check if we're already on main | COMMENT |
| LOW | scripts/release.sh | 1190 | # Check if freenet is already published | COMMENT |
| LOW | scripts/release.sh | 1207 | # Check if fdev is already published | COMMENT |
| LOW | scripts/release.sh | 1244 | # Check if release already exists | COMMENT |
| LOW | scripts/release.sh | 1258 | # Check if tag already exists | COMMENT |
| LOW | scripts/release.sh | 1266 | # Check if tag exists on remote | COMMENT |
| LOW | scripts/release.sh | 1529 | # Check if all required binaries are already available | COMMENT |
| LOW | scripts/release.sh | 1696 | # Check if matrix-commander is available | COMMENT |
| LOW | scripts/release.sh | 1740 | # Check if river repo is available (we use cargo run, not installed binary) | COMMENT |
| LOW | scripts/release.sh | 1747 | # Check if Freenet node is running (required for riverctl) | COMMENT |
| LOW | scripts/release.sh | 1760 | # Check if we have the room in local storage with signing key | COMMENT |
| LOW | scripts/deploy-to-gateways.sh | 197 | # Check if artifact is older than 12 hours | COMMENT |
| LOW | scripts/deploy-to-gateways.sh | 282 | # Check if binary exists | COMMENT |
| LOW | scripts/deploy-to-gateways.sh | 420 | # Check if all succeeded | COMMENT |
| LOW | scripts/deploy-local-gateway.sh | 111 | # Check if running with sufficient privileges | COMMENT |
| LOW | scripts/deploy-local-gateway.sh | 263 | # Check if unit file exists by querying systemctl directly | COMMENT |
| LOW | scripts/deploy-local-gateway.sh | 311 | # Check if unit file exists by querying systemctl directly. | COMMENT |
| LOW | .github/scripts/check_banned_patterns.py | 664 | # Read file content from HEAD (not working tree) so the analysis reflects | COMMENT |
| LOW | .github/scripts/pt_sync.py | 34 | # Check if there is already a comment containing a Pivotal Tracker story URL | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | scripts/park_mutation_campaign.py | 482 | " unresolved_contract_ops.push((id, kind, context));\n" | CODE |
| HIGH | scripts/park_mutation_campaign.py | 496 | " None => unresolved_contract_ops.push((id, kind, context)),\n" | CODE |
| HIGH | .github/scripts/check_merge_group_concurrency.py | 86 | f"github.event.merge_group.head_sha || github.run_id }}}}" | CODE |
| HIGH | .github/scripts/check_merge_group_concurrency.py | 126 | group: claude-pr-review-${{ github.event.pull_request.number || github.event.merge_group.head_sha || github.run_id }} | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …t/executor/pool_tests/non_idempotent_detector_tests.rs | 39 | fn fake_key() -> ContractKey { | CODE |
| LOW | …t/executor/pool_tests/non_idempotent_detector_tests.rs | 50 | let key = fake_key(); | CODE |
| LOW | …t/executor/pool_tests/non_idempotent_detector_tests.rs | 76 | let key = fake_key(); | CODE |
| LOW | …t/executor/pool_tests/non_idempotent_detector_tests.rs | 256 | let key = fake_key(); | CODE |
| LOW | crates/core/src/operations/put/op_ctx_task.rs | 4848 | fn dummy_key() -> ContractKey { | CODE |
| LOW | crates/core/src/operations/put/op_ctx_task.rs | 5673 | let key = dummy_key(); | CODE |
| LOW | crates/core/src/operations/put/op_ctx_task.rs | 5685 | let key = dummy_key(); | CODE |
| LOW | crates/core/src/operations/put/op_ctx_task.rs | 5710 | let key = dummy_key(); | CODE |
| LOW | crates/core/src/operations/put/op_ctx_task.rs | 5816 | let key = dummy_key(); | CODE |
| LOW | crates/core/src/operations/get/op_ctx_task.rs | 5056 | fn dummy_key() -> ContractKey { | CODE |
| LOW | crates/core/src/operations/get/op_ctx_task.rs | 5233 | let key = dummy_key(); | CODE |
| LOW | crates/core/src/operations/get/op_ctx_task.rs | 5264 | let key = dummy_key(); | CODE |
| LOW | crates/core/src/operations/get/op_ctx_task.rs | 5296 | let key = dummy_key(); | CODE |
| LOW | crates/core/src/operations/get/op_ctx_task.rs | 5309 | let key = dummy_key(); | CODE |
| LOW | crates/core/src/operations/get/op_ctx_task.rs | 5327 | let key = dummy_key(); | CODE |
| LOW | crates/core/src/operations/get/op_ctx_task.rs | 5354 | let key = dummy_key(); | CODE |
| LOW | crates/core/src/operations/get/op_ctx_task.rs | 5375 | let key = dummy_key(); | CODE |
| LOW | crates/core/src/operations/get/op_ctx_task.rs | 6840 | let key = dummy_key(); | CODE |
| LOW | scripts/release_rollback_test.sh | 122 | echo "placeholder" > "$REPO/crates/fdev/README.md" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docker/test-runner/run.sh | 6 | # Usage: | COMMENT |
| LOW | scripts/run_benchmarks.sh | 4 | # Usage: | COMMENT |
| LOW | scripts/static-checks.sh | 6 | # Usage: | COMMENT |
| LOW | scripts/docker-test.sh | 4 | # Usage: | COMMENT |
| LOW | scripts/gateway-auto-update.sh | 14 | # Usage: | COMMENT |
| LOW | scripts/release-agent/install.sh | 8 | # Usage: | COMMENT |
| LOW | scripts/release-agent/verify-version-decision.sh | 78 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | crates/core/src/governance.rs | 34 | //! ## Sanity guardrails | COMMENT |
| MEDIUM | crates/core/src/governance.rs | 34 | //! ## Sanity guardrails | COMMENT |
| MEDIUM | docs/design/contract-hardening.md | 109 | ### Sanity guardrails (also principled) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | crates/core/src/server/path_handlers.rs | 8023 | // this test. (The `function installNotifyClickListener() {` definition | COMMENT |
| LOW | crates/core/src/server/path_handlers.rs | 8016 | SHELL_BRIDGE_JS.contains("function installNotifyClickListener("), | CODE |
| LOW | crates/core/src/server/errors.rs | 430 | page.contains("function connectingRecoveryDecision("), | CODE |
| LOW | …s/core/src/server/path_handlers/assets/shell_bridge.js | 726 | function installNotifyClickListener() { | CODE |
| LOW | …s/core/src/server/path_handlers/assets/shell_bridge.js | 747 | function ensureNotifyServiceWorker() { | CODE |
| LOW | crates/core/src/server/errors/assets/connecting.html | 85 | function connectingRecoveryDecision(search, atTop, now) { | CODE |
| LOW | .github/scripts/check_blocking_sends.py | 147 | def strip_comments_and_strings(line: str) -> str: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/parse_bench_output.py | 97 | CODE | |
| LOW | .github/scripts/check_banned_patterns.py | 163 | CODE | |
| LOW | .github/scripts/check_banned_patterns.py | 269 | CODE | |
| LOW | .github/scripts/check_blocking_sends.py | 147 | CODE | |
| LOW | .github/scripts/check_blocking_sends.py | 197 | CODE | |
| LOW | .github/scripts/check_blocking_sends.py | 286 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | scripts/update-remote-gws.sh | 172 | # Create a truly random directory name using timestamp and random number | COMMENT |
| MEDIUM | .github/scripts/pt_sync.py | 54 | # Create a new story in the Pivotal Tracker project | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .github/scripts/check_required_check_path_filters.py | 62 | CODE | |
| LOW | .github/scripts/check_banned_patterns.py | 79 | CODE | |
| LOW | .github/scripts/check_blocking_sends.py | 62 | CODE | |
| LOW | .github/scripts/check_merge_group_concurrency.py | 33 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | crates/core/tests/node_diagnostics_uptime.rs | 4 | //! `// TODO: implement actual uptime tracking`, so every `freenet service | COMMENT |
| LOW | crates/core/src/node/network_bridge/p2p_protoc.rs | 5862 | /// #5223: the field was `uptime_seconds: 0, // TODO: implement actual | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | scripts/parse_bench_output.py | 330 | print(f"Error: File '{input_file}' not found", file=sys.stderr) | CODE |