gadievron/raptor

Pattern Findings

The scanner identified 86107 distinct pattern matches across 25 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers56364 hits · 51265 pts

Severity	File	Line	Snippet	Context
LOW	conftest.py	187	def _apply_platform_emulation(config):	CODE
LOW	conftest.py	280	def _ambient_git_config_escape(request):	CODE
LOW	conftest.py	414	def _raptor_logger_propagates():	CODE
LOW	conftest.py	467	def cc_spawn_machinery_enabled(monkeypatch):	CODE
LOW	conftest.py	483	def _sessions_registry_in_tmp(monkeypatch):	CODE
LOW	conftest.py	538	def _projects_registry_in_tmp(monkeypatch):	CODE
LOW	conftest.py	632	def pytest_collection_modifyitems(config, items):	CODE
LOW	conftest.py	755	def _validate_wall_budget_marker(item) -> None:	CODE
LOW	conftest.py	784	def pytest_runtest_makereport(item, call):	CODE
LOW	conftest.py	970	def _git_config_drift_summary(terminalreporter):	CODE
LOW	conftest.py	1056	def _sweep_dead_session_scratch(config) -> None:	CODE
LOW	raptor.py	110	def _extract_and_strip_max_cost_usd(args: list) -> tuple[float \| None, list]:	CODE
LOW	raptor.py	190	def _extract_and_strip_project(args: list) -> tuple[str \| None, list]:	CODE
LOW	raptor.py	328	def _extract_agentic_log_level(args: list) -> str \| None:	CODE
LOW	raptor.py	556	def _resolve_target_for_command(command: str, args: list,	CODE
LOW	raptor.py	1043	def _announce_env_direct_downgrade(	CODE
LOW	raptor.py	1495	def _refuse_archive_analyze_target(args: list) -> str \| None:	CODE
LOW	raptor_agentic.py	118	def _reanalyze_sarif_selection(	CODE
LOW	raptor_agentic.py	158	def _count_dropped_suppressions(path: Path) -> int:	CODE
LOW	raptor_agentic.py	213	def _run_validation_phase_checked(	CODE
LOW	raptor_agentic.py	238	def _fail_or_warn_missing_analysis(out_dir: Path, rc: int,	CODE
LOW	raptor_agentic.py	266	def _warn_analysis_rc_with_report(rc: int) -> None:	CODE
LOW	raptor_agentic.py	285	def _print_codeql_stderr_tail(codeql_stderr: str) -> None:	CODE
LOW	raptor_agentic.py	310	def _collect_child_pass_costs(prepass_result, postpass_result,	CODE
LOW	raptor_agentic.py	357	def _materialise_threat_model_phase(	CODE
LOW	raptor_agentic.py	634	def _write_threat_model_candidate_sarif(context_map: dict, sarif_path: Path) -> int:	CODE
LOW	raptor_agentic.py	732	def _print_threat_model_phase(summary: dict) -> None:	CODE
LOW	raptor_agentic.py	1027	def _prepare_fuzz_crashes_for_validate(	CODE
LOW	raptor_agentic.py	1109	def _candidate_replay_binaries(binary_path: Path) -> list[str]:	CODE
LOW	raptor_agentic.py	1298	def _crash_context_to_validate_finding(context, replay: list[dict] \| None = None) -> dict:	CODE
LOW	raptor_agentic.py	1337	def _run_fuzz_validation_smoke(findings_path: Path, target: Path, out_dir: Path) -> dict:	CODE
LOW	raptor_agentic.py	1473	def _build_fuzz_phase_summary(fuzzing_result: dict \| None, fuzz_out: Path \| None) -> dict:	CODE
LOW	raptor_agentic.py	1538	def _should_run_mechanical_sca(sca_agent, deep_sca_requested: bool) -> bool:	CODE
LOW	raptor_agentic.py	1551	def _persist_redacted_sca_stderr(stderr: str, output_dir: Path) -> str:	CODE
LOW	raptor_agentic.py	1567	def _build_completion_manifest(orch_meta, import_result, import_sarif_files,	CODE
LOW	raptor_agentic.py	1625	def _build_audit_postpass_cmd(	CODE
LOW	raptor_agentic.py	5722	def _build_audit_report_section(audit_phase, validate_dir=None):	CODE
LOW	raptor_agentic.py	5817	def _estimate_review_residual(out_dir: Path) -> tuple \| None:	CODE
LOW	raptor_agentic.py	5857	def _build_threat_model_report_section(summary):	CODE
LOW	raptor_agentic.py	5900	def _build_aggregation_report_section(aggregation):	CODE
LOW	raptor_agentic.py	5960	def _build_dataflow_validation_report_section(dv):	CODE
LOW	raptor_fuzzing.py	116	def _orchestrator_ignored_flags(	STRING
LOW	raptor_fuzzing.py	151	def _exploitability_from_deep_analysis(level: object) -> str \| None:	STRING
LOW	core/dataflow/evidence_collector.py	42	def collect_sanitizer_evidence(	CODE
LOW	core/dataflow/evidence_collector.py	99	def _describe_pool_completeness(*, file_count: int, truncated: bool) -> str:	CODE
LOW	core/dataflow/extension_pack.py	890	def rows_from_candidate_validators(	CODE
LOW	core/dataflow/smt_barrier.py	631	def _try_charset_sub_validator(	CODE
LOW	core/dataflow/smt_barrier.py	738	def extract_validator_from_line(	CODE
LOW	core/dataflow/smt_barrier.py	974	def _line_in_try_body_with_catching_handler(	CODE
LOW	core/dataflow/smt_barrier.py	1034	def _validator_block_exits_on_failure(	CODE
LOW	core/dataflow/smt_barrier.py	1255	def _lexical_validator_in_branch(	CODE
LOW	core/dataflow/smt_barrier.py	1490	def _variable_reassigned_between(	CODE
LOW	core/dataflow/smt_barrier.py	1596	def _rebound_in_loop_containing_sink(	CODE
LOW	core/dataflow/smt_barrier.py	1767	def _record_value_bound_audit(finding, result) -> None:	CODE
LOW	core/dataflow/smt_barrier.py	2019	def _lexical_validator_dominates(	CODE
LOW	core/dataflow/smt_barrier.py	2143	def _crosses_function_boundary(	CODE
LOW	core/dataflow/smt_barrier.py	2232	def _is_sanitizing_binding_node(	CODE
LOW	core/dataflow/smt_barrier.py	2245	def _class_body_escaping_bindings(	CODE
LOW	core/dataflow/smt_barrier.py	2295	def _nested_scope_escaping_rebinds(scope_root: ast.AST) -> frozenset:	CODE
LOW	core/dataflow/smt_barrier.py	2332	def _sanitizer_tails_for_spec_kind(kind: str) -> frozenset \| None:	CODE
56304 more matches not shown…

Decorative Section Separators11908 hits · 42436 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	conftest.py	1206	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	conftest.py	1216	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	conftest.py	142	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	conftest.py	144	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	conftest.py	225	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	conftest.py	228	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	conftest.py	300	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	conftest.py	302	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	conftest.py	385	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	conftest.py	387	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	conftest.py	577	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	conftest.py	579	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	conftest.py	601	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	conftest.py	603	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	conftest.py	934	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	conftest.py	950	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	conftest.py	994	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	conftest.py	1019	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	raptor_agentic.py	3869	# ========================================================================	COMMENT
MEDIUM⚡	raptor_agentic.py	3871	# ========================================================================	COMMENT
MEDIUM⚡	raptor_agentic.py	3987	# ========================================================================	COMMENT
MEDIUM⚡	raptor_agentic.py	3989	# ========================================================================	COMMENT
MEDIUM⚡	raptor_agentic.py	4401	# ========================================================================	COMMENT
MEDIUM⚡	raptor_agentic.py	4403	# ========================================================================	COMMENT
MEDIUM⚡	raptor_agentic.py	4478	# ========================================================================	COMMENT
MEDIUM⚡	raptor_agentic.py	4480	# ========================================================================	COMMENT
MEDIUM⚡	raptor_agentic.py	4489	# ========================================================================	COMMENT
MEDIUM⚡	raptor_agentic.py	4491	# ========================================================================	COMMENT
MEDIUM⚡	raptor_agentic.py	4774	# ========================================================================	COMMENT
MEDIUM⚡	raptor_agentic.py	4781	# ========================================================================	COMMENT
MEDIUM⚡	raptor_agentic.py	4866	# ========================================================================	COMMENT
MEDIUM⚡	raptor_agentic.py	4868	# ========================================================================	COMMENT
MEDIUM	raptor_agentic.py	1585	# ============================================================================	COMMENT
MEDIUM	raptor_agentic.py	1587	# ============================================================================	COMMENT
MEDIUM	raptor_agentic.py	4208	# ========================================================================	COMMENT
MEDIUM	raptor_agentic.py	4210	# ========================================================================	COMMENT
MEDIUM	raptor_agentic.py	4352	# ========================================================================	COMMENT
MEDIUM	raptor_agentic.py	4354	# ========================================================================	COMMENT
MEDIUM	raptor_agentic.py	4680	# ========================================================================	COMMENT
MEDIUM	raptor_agentic.py	4682	# ========================================================================	COMMENT
MEDIUM	raptor_agentic.py	4817	# ========================================================================	COMMENT
MEDIUM	raptor_agentic.py	4821	# ========================================================================	COMMENT
MEDIUM	raptor_agentic.py	4983	# ========================================================================	COMMENT
MEDIUM	raptor_agentic.py	4985	# ========================================================================	COMMENT
MEDIUM⚡	raptor_agentic.py	3226	# ========================================================================	STRING
MEDIUM⚡	raptor_agentic.py	3228	# ========================================================================	STRING
MEDIUM⚡	raptor_agentic.py	3237	# ========================================================================	STRING
MEDIUM⚡	raptor_agentic.py	3239	# ========================================================================	STRING
MEDIUM⚡	raptor_agentic.py	3253	# ========================================================================	STRING
MEDIUM⚡	raptor_agentic.py	3259	# ========================================================================	STRING
MEDIUM⚡	raptor_agentic.py	3368	# ========================================================================	STRING
MEDIUM⚡	raptor_agentic.py	3376	# ========================================================================	STRING
MEDIUM	raptor_agentic.py	2724	# ------------------------------------------------------------------	STRING
MEDIUM	raptor_agentic.py	2729	# ------------------------------------------------------------------	STRING
MEDIUM	raptor_agentic.py	3154	# ========================================================================	STRING
MEDIUM	raptor_agentic.py	3156	# ========================================================================	STRING
MEDIUM⚡	raptor_fuzzing.py	659	# ========================================================================	STRING
MEDIUM⚡	raptor_fuzzing.py	661	# ========================================================================	STRING
MEDIUM⚡	raptor_fuzzing.py	1066	# ========================================================================	STRING
MEDIUM⚡	raptor_fuzzing.py	1068	# ========================================================================	STRING
11848 more matches not shown…

Unused Imports5460 hits · 4798 pts

Severity	File	Line	Context
LOW	raptor.py	63	CODE
LOW	core/dataflow/validator.py	14	CODE
LOW	core/dataflow/known_safe_calls.py	30	CODE
LOW	core/dataflow/finding.py	18	CODE
LOW	core/dataflow/run_corpus.py	13	CODE
LOW	core/dataflow/injection_prescreen.py	44	CODE
LOW	core/dataflow/extension_pack.py	54	CODE
LOW	core/dataflow/smt_barrier.py	66	CODE
LOW	core/dataflow/barrier_synth.py	22	CODE
LOW	core/dataflow/finding_diff.py	19	CODE
LOW	core/dataflow/corpus_metrics.py	12	CODE
LOW	core/dataflow/cvefix_bridge.py	24	CODE
LOW	core/dataflow/sanitizer_cut_parity_report.py	29	CODE
LOW	core/dataflow/trust_corpus_report.py	32	CODE
LOW	core/dataflow/ghsa_harvester.py	23	CODE
LOW	core/dataflow/owasp_corpus_generator.py	22	CODE
LOW	core/dataflow/cvefix_corpus_generator.py	34	CODE
LOW	core/dataflow/cvefix_corpus_generator.py	48	CODE
LOW	core/dataflow/cvefix_pipeline.py	18	CODE
LOW	core/dataflow/__init__.py	14	CODE
LOW	core/dataflow/__init__.py	14	CODE
LOW	core/dataflow/__init__.py	14	CODE
LOW	core/dataflow/__init__.py	15	CODE
LOW	core/dataflow/__init__.py	15	CODE
LOW	core/dataflow/__init__.py	15	CODE
LOW	core/dataflow/__init__.py	15	CODE
LOW	core/dataflow/__init__.py	15	CODE
LOW	core/dataflow/__init__.py	15	CODE
LOW	core/dataflow/__init__.py	15	CODE
LOW	core/dataflow/__init__.py	15	CODE
LOW	core/dataflow/__init__.py	15	CODE
LOW	core/dataflow/__init__.py	15	CODE
LOW	core/dataflow/__init__.py	15	CODE
LOW	core/dataflow/sanitizer_evidence.py	36	CODE
LOW	core/dataflow/trust_report.py	16	CODE
LOW	core/dataflow/cvefix_loader.py	19	CODE
LOW	core/dataflow/sanitizer_catalog.py	27	CODE
LOW	core/dataflow/structural_validator.py	21	CODE
LOW	core/dataflow/llm_bridge.py	25	CODE
LOW	core/dataflow/codeql_augmented_run.py	39	CODE
LOW	core/dataflow/label.py	15	CODE
LOW	core/dataflow/llm_extractor.py	22	CODE
LOW	core/dataflow/corpus_sources.py	20	CODE
LOW	core/dataflow/cvefix_walk.py	20	CODE
LOW	core/dataflow/_schema_checks.py	10	CODE
LOW	core/dataflow/_schema_checks.py	12	CODE
LOW	core/dataflow/_schema_checks.py	15	CODE
LOW	core/dataflow/sanitizer_cut_config.py	39	CODE
LOW	core/dataflow/parser_pack_harvest.py	44	CODE
LOW	core/dataflow/tier1_llm.py	41	CODE
LOW	core/dataflow/path_annotator.py	39	CODE
LOW	core/dataflow/sanitizer_cut_parity.py	33	CODE
LOW	core/dataflow/tests/test_sanitizer_cut_parity_report.py	2	CODE
LOW	core/dataflow/tests/test_codeql_augmented_run.py	8	CODE
LOW	core/dataflow/tests/test_sanitizer_catalog.py	21	CODE
LOW	core/dataflow/tests/test_trust_corpus_report.py	3	CODE
LOW	core/dataflow/tests/test_sarif_cap_parity.py	11	CODE
LOW	core/dataflow/tests/test_barrier_synth.py	3	CODE
LOW	core/dataflow/tests/test_lexical_removal_switch.py	24	CODE
LOW	core/dataflow/tests/test_label.py	3	CODE
5400 more matches not shown…

Empty Error Handlers907 hits · 4485 pts

Severity	File	Line	Snippet	Context
HIGH	conftest.py	1119	except (OSError, ValueError):	CODE
HIGH	conftest.py	1133	except OSError:	CODE
HIGH	raptor.py	256	except Exception: # noqa: BLE001	CODE
HIGH	raptor.py	446	except OSError:	CODE
HIGH	raptor.py	1533	except Exception: # noqa: BLE001 — the hint is best-effort decoration	CODE
HIGH	raptor_agentic.py	102	except OSError:	CODE
HIGH	raptor_agentic.py	1650	except Exception: # noqa: BLE001 — child falls back to its own layers	CODE
HIGH	raptor_agentic.py	4686	except ImportError:	CODE
HIGH	raptor_agentic.py	1434	except (OSError, ValueError):	CODE
HIGH	raptor_agentic.py	918	except OSError:	CODE
HIGH	raptor_agentic.py	3747	except subprocess.TimeoutExpired:	CODE
HIGH	raptor_fuzzing.py	1014	except OSError:	CODE
HIGH	raptor_openant.py	312	except (ValueError, OSError, TypeError):	CODE
HIGH	raptor_openant.py	333	except (ValueError, OSError):	CODE
HIGH	raptor_openant.py	369	except Exception: # noqa: BLE001 — the 130 contract and the	CODE
HIGH	core/dataflow/cvefix_walk.py	435	except OSError:	CODE
HIGH	core/dataflow/sanitizer_cut_parity.py	243	except OSError: # pragma: no cover	CODE
HIGH	core/sarif/parser.py	621	except OSError:	CODE
HIGH	core/sarif/import_normalizer.py	70	except ImportError:	CODE
HIGH	core/sarif/import_normalizer.py	497	except OSError:	CODE
HIGH	core/witness/store.py	374	except OSError:	CODE
HIGH	core/witness/matching.py	336	except OSError:	CODE
HIGH	core/witness/provenance.py	287	except OSError:	CODE
HIGH	core/llm/detection.py	250	except (RuntimeError, OSError):	CODE
HIGH	core/llm/cc_proxy_hosts.py	196	except ImportError:	CODE
HIGH	core/llm/client.py	815	except AttributeError:	CODE
HIGH	core/llm/client.py	822	except AttributeError:	CODE
HIGH	core/llm/client.py	845	except AttributeError:	CODE
HIGH	core/llm/client.py	852	except AttributeError:	CODE
HIGH	core/llm/client.py	379	except AttributeError:	CODE
HIGH	core/llm/client.py	385	except AttributeError:	CODE
HIGH	core/llm/client.py	2771	except (TypeError, ValueError):	CODE
HIGH	core/llm/providers.py	5198	except json.JSONDecodeError:	CODE
HIGH	core/llm/providers.py	5206	except (ValueError, json.JSONDecodeError):	CODE
HIGH	core/llm/providers.py	2903	except (TypeError, ValueError):	CODE
HIGH	core/llm/providers.py	4249	except (ImportError, TypeError):	CODE
HIGH	core/llm/providers.py	3163	except (TypeError, ValueError):	CODE
HIGH	core/llm/model_data.py	482	except (OSError, ValueError):	CODE
HIGH	core/llm/http_pool.py	1189	except BaseException: # noqa: BLE001 — a finalizer must never raise	CODE
HIGH	core/llm/bedrock_preflight.py	236	except OSError:	CODE
HIGH	core/llm/throttle.py	251	except RuntimeError:	CODE
HIGH	core/llm/throttle.py	411	except ValueError:	CODE
HIGH	core/llm/cc_adapter.py	1142	except json.JSONDecodeError:	CODE
HIGH	core/llm/cc_adapter.py	1180	except (ValueError, json.JSONDecodeError):	CODE
HIGH	core/llm/cc_adapter.py	1235	except json.JSONDecodeError:	CODE
HIGH	core/llm/cc_adapter.py	1249	except (json.JSONDecodeError, AttributeError):	CODE
HIGH	core/llm/cc_adapter.py	1170	except (json.JSONDecodeError, IndexError):	CODE
HIGH	core/llm/cc_adapter.py	1599	except (BrokenPipeError, OSError):	CODE
HIGH	core/llm/cc_adapter.py	1682	except BlockingIOError:	CODE
HIGH	core/llm/dispatcher/auth.py	720	except (OSError, botocore.exceptions.BotoCoreError):	CODE
HIGH	core/llm/dispatcher/server.py	1284	except Exception: # noqa: BLE001 — normalization is best-effort	CODE
HIGH	core/llm/dispatcher/server.py	1289	except Exception: # noqa: BLE001	CODE
HIGH	core/llm/dispatcher/server.py	2445	except FileNotFoundError:	CODE
HIGH	core/llm/dispatcher/server.py	2512	except OSError:	CODE
HIGH	core/llm/dispatcher/server.py	2715	except OSError:	CODE
HIGH	core/llm/dispatcher/server.py	2746	except (BrokenPipeError, ConnectionResetError):	CODE
HIGH	core/llm/dispatcher/server.py	2758	except (BrokenPipeError, ConnectionResetError):	CODE
HIGH	core/llm/dispatcher/server.py	2833	except OSError:	CODE
HIGH	core/llm/dispatcher/server.py	1556	except OSError:	CODE
HIGH	core/llm/dispatcher/server.py	1560	except OSError:	CODE
847 more matches not shown…

Cross-Language Confusion555 hits · 3233 pts

Severity	File	Line	Snippet	Context
HIGH	raptor_agentic.py	468	# sibling B. A standalone (pin-null) run keeps only run-local	COMMENT
HIGH	raptor_fuzzing.py	466	"Allowlist matches ExploitValidator: address, undefined, "	STRING
HIGH	core/dataflow/tests/test_injection_prescreen.py	815	" q = a / 1; if (opts.paranoid && c / 2 > 0) {\n"	CODE
HIGH⚡	core/dataflow/tests/test_smt_barrier.py	3608	" q = a / 1; if (opts.paranoid && c / 2 > 0) {\n"	CODE
HIGH⚡	core/dataflow/tests/test_smt_barrier.py	3622	" q = a / 1; if (opts.paranoid && c / 2 > 0)\n"	CODE
HIGH	core/dataflow/tests/test_smt_barrier.py	942	" if (!/^[A-Za-z0-9]+$/.test(name)) return null;\n" # line 2	CODE
HIGH	core/dataflow/tests/test_smt_barrier.py	952	"+ if (!/^[A-Za-z0-9]+$/.test(name)) return null;\n"	CODE
HIGH	core/dataflow/tests/test_smt_barrier.py	3779	"if (!/^[a-z0-9]+$/.test(name)) { return null; }",	CODE
HIGH	core/dataflow/scripts/handlabel_seed.py	302	rationale="@PathVariable userId (line 43) flows into UserProfile construction (line 51). The auth check on line	CODE
HIGH	core/sarif/parser.py	1163	# finding can carry `{"snippet": null}` or `{"message": null}`	COMMENT
HIGH	core/llm/dispatcher/_usage_scan_child.py	24	JSON ``{"model": str\|null, "input_tokens": int, "output_tokens": int,	STRING
HIGH	core/llm/dispatcher/_usage_scan_child.py	36	stage and exception when ready is false (stderr is /dev/null, so the	STRING
HIGH	core/llm/dispatcher/_usage_scan_child.py	47	/dev/null) and the socketpair fd, which is then pinned to fd 3.	STRING
HIGH⚡	core/llm/dispatcher/tests/test_stream_stall_watchdog.py	256	# accepts it, downstream behaviour undefined; inf passes the	COMMENT
HIGH⚡	core/llm/tests/test_quota_detection.py	218	"'tokens', 'param': null, 'code': 'rate_limit_exceeded'}}"	CODE
HIGH	core/analysis/value_set_java.py	305	if (x.equals("a")) { y = "v1"; }	STRING
HIGH	core/analysis/value_set_java.py	306	else if (x.equals("b")) { y = "v2"; }	STRING
HIGH	core/analysis/sanitizer_cut.py	1213	key reads as null, which carries no caller taint). List reads are	STRING
HIGH	core/analysis/peer_groups.py	1321	def jsonEsc(v: String): String = v.replace("\\\\", "\\\\\\\\").replace("\\"", "\\\\\\"").replace("\\r", "").replace("\\n	CODE
HIGH	core/analysis/binary_oracle.py	1272	"address": null},	STRING
HIGH	core/analysis/const_fold_java.py	931	model (a folded non-null constant is never null);	STRING
HIGH	core/analysis/java_collection_index.py	633	return REFUSE # never-written key: null, not const	CODE
HIGH	core/analysis/cfg_builder_cpp.py	30	``a && escape(x)`` is independently attributable) is documented	STRING
HIGH	core/analysis/cfg_builder_java.py	668	``if (flag && (y = x) != null)`` writes ``y``; a payload with	STRING
HIGH	core/analysis/sanitizer_cut_precision.py	391	# (the ubiquitous ``while ((line = read()) != null)`` idiom's	COMMENT
HIGH⚡	core/analysis/sanitizer_cut_precision.py	1310	'if (param.length() > 3) { bar = param; }',	CODE
HIGH⚡	core/analysis/sanitizer_cut_precision.py	1320	'if (mode == null) { bar = param; }',	CODE
HIGH⚡	core/analysis/sanitizer_cut_precision.py	1329	'if (param.equals("a")) { bar = "v1"; }',	CODE
HIGH⚡	core/analysis/sanitizer_cut_precision.py	1330	'else if (param.equals("b")) { bar = "v2"; }',	CODE
HIGH⚡	core/analysis/sanitizer_cut_precision.py	1340	'if (param.equals("a")) { bar = "v1"; }',	CODE
HIGH⚡	core/analysis/sanitizer_cut_precision.py	1350	'if (param.equals("a")) { bar = "v1"; }',	CODE
HIGH⚡	core/analysis/sanitizer_cut_precision.py	2517	'String bar = null;',	CODE
HIGH⚡	core/analysis/sanitizer_cut_precision.py	2518	'if (param.length() > 3) { bar = "safe"; }',	CODE
HIGH⚡	core/analysis/sanitizer_cut_precision.py	2526	'String bar = null;',	CODE
HIGH⚡	core/analysis/sanitizer_cut_precision.py	2527	'if (param.length() > 3) { bar = "safe"; }',	CODE
HIGH⚡	core/analysis/sanitizer_cut_precision.py	2528	'if (param.length() > 5) { bar = param; }',	CODE
HIGH	core/analysis/sanitizer_cut_precision.py	344	" if (x.length() > 3) { y = Encode.forHtml(x); }\n"	CODE
HIGH	core/analysis/sanitizer_cut_precision.py	353	" if (x.length() > 3) { y = Encode.forHtml(x); }\n"	CODE
HIGH	core/analysis/sanitizer_cut_precision.py	396	" if (flag && (y = x) != null) { }\n"	CODE
HIGH	core/analysis/sanitizer_cut_precision.py	572	" if (s.length() > 3) { return Encode.forHtml(s); }\n"	CODE
HIGH	core/analysis/sanitizer_cut_precision.py	603	"{ return s.toString(); }\n",	CODE
HIGH	core/analysis/sanitizer_cut_precision.py	1361	'if (param.equals("a")) { bar = "v1"; }',	CODE
HIGH	core/analysis/sanitizer_cut_precision.py	2305	'if (param.length() > 2) {',	CODE
HIGH	core/analysis/sanitizer_cut_precision.py	2392	'if (param.length() > 2) { s = "a"; } else { s = "b"; }',	CODE
HIGH	core/analysis/sanitizer_cut_precision.py	2406	'if (param.length() > 2) {',	CODE
HIGH	core/analysis/sanitizer_cut_precision.py	2407	' data = null;',	CODE
HIGH	core/analysis/sanitizer_cut_precision.py	2418	'if (param.length() > 2) { data = "ls"; }',	CODE
HIGH	core/analysis/sanitizer_cut_precision.py	2430	" if (flag) { d = null; } else { d = \"foo\"; }\n"	CODE
HIGH	core/analysis/sanitizer_cut_precision.py	2448	'if (param.length() > 2) { data = System.getenv("HOME"); }',	CODE
HIGH	core/analysis/sanitizer_cut_precision.py	2464	'if (param.length() > 2) '	CODE
HIGH	core/analysis/sanitizer_cut_precision.py	2477	" if (flag) { d = null; } else { d = \"<b>x</b>\"; }\n"	CODE
HIGH	core/analysis/sanitizer_cut_precision.py	2495	" if (flag) { d = null; } else { d = \"plain\"; }\n"	CODE
HIGH	core/analysis/sanitizer_cut_precision.py	2550	+ ' if (x.length() > 3) { q = "A"; }\n'	CODE
HIGH	core/analysis/sanitizer_cut_precision.py	2563	+ ' if (x.length() > 3) { q = x; }\n'	CODE
HIGH	core/analysis/sanitizer_cut_precision.py	2631	" java.sql.Connection getC() { return null; }\n"	CODE
HIGH	core/analysis/sanitizer_cut_precision.py	2924	'if (param.length() > 3) { bar = "safe"; }',	CODE
HIGH	core/analysis/sanitizer_cut_precision.py	2933	'if (param.length() > 3) { bar = "safe"; }',	CODE
HIGH	core/analysis/sanitizer_cut_precision.py	3463	+ " if (x != null) {\n"	CODE
HIGH	core/analysis/sanitizer_cut_precision.py	3473	+ " int k = x.length() % 2;\n"	CODE
HIGH	core/analysis/taint_multi_lang.py	123	_JAVA_NULL_CHECK = re.compile(r"if\s\(\s(\w+)\s(?:==\snull\|!=\s*null)")	CODE
495 more matches not shown…

Over-Commented Block3277 hits · 2496 pts

Severity	File	Line	Snippet	Context
LOW	conftest.py	41	# Same class of sidecar, same rule: the per-model reliability ledger	COMMENT
LOW	conftest.py	61	# developer's login shell exports. ``setdefault`` is a no-op when the	COMMENT
LOW	conftest.py	81		COMMENT
LOW	conftest.py	101	# claudecode transport, and any test that reaches a real dispatch —	COMMENT
LOW	conftest.py	121	# anonymous metrics) unless suppressed; tests that shell out to a real	COMMENT
LOW	conftest.py	141		COMMENT
LOW	conftest.py	161	# Linux tmp layout against ``tmp_path``-derived paths fail here	COMMENT
LOW	conftest.py	201	tmp_root = Path(_tempfile.gettempdir())	COMMENT
LOW	conftest.py	221	basetemp.parent.mkdir(parents=True, exist_ok=True)	COMMENT
LOW	conftest.py	241	# GIT_DIR, ...) cannot change test outcomes, and a stray	COMMENT
LOW	conftest.py	301	# System-tmp containment	COMMENT
LOW	conftest.py	321	# one ``raptor-pytest-*`` dir per pytest process (one per xdist	COMMENT
LOW	conftest.py	361	# (``pymp-*`` — the forkserver socket lives there) under	COMMENT
LOW	conftest.py	381	else:	COMMENT
LOW	conftest.py	421		COMMENT
LOW	conftest.py	481		COMMENT
LOW	conftest.py	501	monkeypatch.setattr(_sessions, "SESSIONS_DIR", unique / "sessions.d")	COMMENT
LOW	conftest.py	581	# Preventive backstop for the "a default-tier test is slow because it	COMMENT
LOW	conftest.py	601	# ---------------------------------------------------------------------------	COMMENT
LOW	conftest.py	721	# it to the nightly tier) is not an option — whose honest schedule	COMMENT
LOW	conftest.py	1001	# every later suite in the same process — observed as sandbox proxy	COMMENT
LOW	conftest.py	1201	for nodeid, phase, dur in sorted(	COMMENT
LOW	pytest.ini	1	[pytest]	COMMENT
LOW	pytest.ini	41	# Ensure each package's source root is importable without requiring an	COMMENT
LOW	requirements.txt	1	# RAPTOR Framework Requirements	COMMENT
LOW	requirements.txt	21	# raptor's install set, which is exactly what we want	COMMENT
LOW	requirements.txt	41	# HTTP/2 for the pooled LLM transports: only read when the operator opts in	COMMENT
LOW	requirements.txt	61	# tree-sitter-lua==0.5.0	COMMENT
LOW	requirements.txt	81	# so the agent imports defusedxml.ElementTree when available; pinning here	COMMENT
LOW	requirements.txt	101	# ELF metadata (core/symbolic load_binary fallback when angr absent).	COMMENT
LOW	requirements.txt	121	# Optional: Ghidra bridge (packages/ghidra — in-process analysis via	COMMENT
LOW	requirements.txt	141		COMMENT
LOW	raptor.py	401	if canonical.exists():	COMMENT
LOW	raptor.py	561	caller must print and fail on BEFORE creating a run directory —	COMMENT
LOW	raptor.py	641		COMMENT
LOW	raptor.py	721	# /understand → /validate reuse) must not strip that dir's	COMMENT
LOW	raptor.py	781	# declared --max-cost-usd, compare the scorecard estimate	COMMENT
LOW	raptor.py	801	# Re-inject --max-cost-usd for downstream runtime enforcement.	COMMENT
LOW	raptor.py	1201	check=False,	COMMENT
LOW	raptor.py	1221	from core.run.metadata import cancel_run	COMMENT
LOW	raptor.py	1841	For more information, visit: https://github.com/gadievron/raptor	COMMENT
LOW	raptor_agentic.py	821	)	COMMENT
LOW	raptor_agentic.py	881	process = subprocess.Popen(	COMMENT
LOW	raptor_agentic.py	901	# a SIGKILLed/OOM-killed orchestrator strands the child	COMMENT
LOW	raptor_agentic.py	921		COMMENT
LOW	raptor_agentic.py	961	# ``RaptorConfig.DEFAULT_TIMEOUT`` may itself be ``None``	COMMENT
LOW	raptor_agentic.py	1001	# Bounded thread join after kill so we don't hang on the	COMMENT
LOW	raptor_agentic.py	1241	"stderr": str(stderr_path),	COMMENT
LOW	raptor_agentic.py	2861	# state; the per-run --sandbox-floor flag wins in both directions	COMMENT
LOW	raptor_agentic.py	2921	import tempfile	COMMENT
LOW	raptor_agentic.py	3081	if _sc is not None:	COMMENT
LOW	raptor_agentic.py	3221	print("Mitigation analysis module not available")	COMMENT
LOW	raptor_agentic.py	3501	# this, `python raptor.py agentic --audit` would set audit mode in	COMMENT
LOW	raptor_agentic.py	3561	# F102 comment below.	COMMENT
LOW	raptor_agentic.py	3581	# Disable-consent extension: the scanner child re-runs the	COMMENT
LOW	raptor_agentic.py	3621	# directly OR wraps it in a temp shell script when	COMMENT
LOW	raptor_agentic.py	3641	codeql_cmd.extend(["--build-command", args.build_command])	COMMENT
LOW	raptor_agentic.py	3701	"Semgrep child did not drain after kill; "	COMMENT
LOW	raptor_agentic.py	4561	# producer ever wrote the file and the child never accepted	COMMENT
LOW	raptor_agentic.py	5241	print(f" ⚠️ Self-contradictory: {contradictions} (review recommended)")	COMMENT
3217 more matches not shown…

Excessive Try-Catch Wrapping2662 hits · 2394 pts

Severity	File	Line	Snippet	Context
LOW⚡	raptor.py	857	except Exception as e: # noqa: BLE001	CODE
LOW⚡	raptor.py	875	except Exception as e: # noqa: BLE001	CODE
LOW⚡	raptor.py	898	except Exception:	CODE
LOW	raptor.py	247	except Exception: # noqa: BLE001	CODE
LOW	raptor.py	256	except Exception: # noqa: BLE001	CODE
LOW	raptor.py	298	except Exception: # noqa: BLE001	CODE
LOW	raptor.py	415	except Exception as e: # noqa: BLE001	CODE
LOW	raptor.py	762	except Exception as e: # noqa: BLE001	CODE
LOW	raptor.py	981	except Exception as _pf_exc: # noqa: BLE001 — advisory only	CODE
LOW	raptor.py	993	except Exception as exc: # noqa: BLE001	CODE
LOW	raptor.py	1227	except Exception as e: # noqa: BLE001	CODE
LOW	raptor.py	1338	except Exception as e: # noqa: BLE001	CODE
LOW	raptor.py	1397	except Exception as exc: # noqa: BLE001	CODE
LOW	raptor.py	1533	except Exception: # noqa: BLE001 — the hint is best-effort decoration	CODE
LOW	raptor.py	1991	except Exception as e: # noqa: BLE001	CODE
LOW⚡	raptor_agentic.py	3978	except Exception as e: # noqa: BLE001	CODE
LOW⚡	raptor_agentic.py	4396	except Exception as e:	CODE
LOW⚡	raptor_agentic.py	4764	except Exception: # noqa: BLE001 — journaling is best-effort	CODE
LOW⚡	raptor_agentic.py	5677	except Exception: # noqa: BLE001 — a digest failure must not fail the pipeline	CODE
LOW⚡	raptor_agentic.py	5686	except Exception as e: # noqa: BLE001	CODE
LOW	raptor_agentic.py	229	except Exception as e:	CODE
LOW	raptor_agentic.py	433	except Exception as e: # noqa: BLE001	CODE
LOW	raptor_agentic.py	437	except Exception as e: # noqa: BLE001	CODE
LOW	raptor_agentic.py	494	except Exception: # noqa: BLE001	CODE
LOW	raptor_agentic.py	539	except Exception as e: # noqa: BLE001	CODE
LOW	raptor_agentic.py	566	except Exception as e: # noqa: BLE001	CODE
LOW	raptor_agentic.py	580	except Exception as e: # noqa: BLE001	CODE
LOW	raptor_agentic.py	810	except Exception as exc: # noqa: BLE001	CODE
LOW	raptor_agentic.py	861	except Exception as exc: # noqa: BLE001	CODE
LOW	raptor_agentic.py	1006	except Exception as e: # noqa: BLE001	CODE
LOW	raptor_agentic.py	1372	except Exception as e: # noqa: BLE001	CODE
LOW	raptor_agentic.py	1650	except Exception: # noqa: BLE001 — child falls back to its own layers	CODE
LOW	raptor_agentic.py	1832	except Exception: # noqa: BLE001 — marker is best-effort	CODE
LOW	raptor_agentic.py	1887	except Exception as e:	CODE
LOW	raptor_agentic.py	3411	except Exception:	CODE
LOW	raptor_agentic.py	3417	except Exception:	CODE
LOW	raptor_agentic.py	3449	except Exception:	CODE
LOW	raptor_agentic.py	3730	except Exception as e: # noqa: BLE001	CODE
LOW	raptor_agentic.py	3917	except Exception as e: # noqa: BLE001	CODE
LOW	raptor_agentic.py	3967	except Exception:	CODE
LOW	raptor_agentic.py	4075	except Exception as _cov_exc: # noqa: BLE001 — overlay is additive; the failure outcome stands	CODE
LOW	raptor_agentic.py	4167	except Exception:	CODE
LOW	raptor_agentic.py	4187	except Exception as _cov_exc: # noqa: BLE001 — overlay is additive; the scan result stands	CODE
LOW	raptor_agentic.py	4197	except Exception as e:	CODE
LOW	raptor_agentic.py	4233	except Exception as e:	CODE
LOW	raptor_agentic.py	5100	except Exception as e: # noqa: BLE001	CODE
LOW	raptor_agentic.py	5114	except Exception as e:	CODE
LOW	raptor_agentic.py	5645	except Exception:	CODE
LOW	raptor_agentic.py	5664	except Exception as e: # noqa: BLE001	CODE
LOW	raptor_agentic.py	5851	except Exception: # noqa: BLE001 — nudge is best-effort	CODE
LOW	raptor_agentic.py	6118	except Exception: # noqa: BLE001 — hostile/broken __str__	CODE
LOW⚡	raptor_agentic.py	3222	except Exception as e: # noqa: BLE001	STRING
LOW⚡	raptor_agentic.py	3250	except Exception as e: # noqa: BLE001	STRING
LOW⚡	raptor_agentic.py	3355	except Exception as e: # noqa: BLE001	STRING
LOW⚡	raptor_agentic.py	3361	except Exception as e: # noqa: BLE001	STRING
LOW	raptor_agentic.py	2839	except Exception as _e: # noqa: BLE001 — hard error passes through	STRING
LOW	raptor_agentic.py	3053	except Exception as e: # noqa: BLE001	STRING
LOW	raptor_agentic.py	3094	except Exception as e: # noqa: BLE001	STRING
LOW	raptor_agentic.py	3274	except Exception: # noqa: BLE001 — bridge miss = run the map	STRING
LOW	raptor_agentic.py	3314	except Exception as e: # noqa: BLE001	STRING
2602 more matches not shown…

Deep Nesting2207 hits · 1667 pts

Severity	File	Line	Context
LOW	conftest.py	1094	CODE
LOW	raptor.py	81	CODE
LOW	raptor.py	618	CODE
LOW	raptor_agentic.py	357	CODE
LOW	raptor_agentic.py	1162	CODE
LOW	raptor_agentic.py	1763	CODE
LOW	raptor_agentic.py	2688	CODE
LOW	raptor_fuzzing.py	205	CODE
LOW	raptor_codeql.py	85	CODE
LOW	raptor_openant.py	316	CODE
LOW	raptor_openant.py	407	CODE
LOW	raptor_openant.py	1134	CODE
LOW	core/dataflow/injection_prescreen.py	171	CODE
LOW	core/dataflow/injection_prescreen.py	378	CODE
LOW	core/dataflow/extension_pack.py	238	CODE
LOW	core/dataflow/extension_pack.py	724	CODE
LOW	core/dataflow/smt_barrier.py	868	CODE
LOW	core/dataflow/smt_barrier.py	1095	CODE
LOW	core/dataflow/smt_barrier.py	1178	CODE
LOW	core/dataflow/smt_barrier.py	1255	CODE
LOW	core/dataflow/smt_barrier.py	1537	CODE
LOW	core/dataflow/smt_barrier.py	1989	CODE
LOW	core/dataflow/smt_barrier.py	2295	CODE
LOW	core/dataflow/smt_barrier.py	2420	CODE
LOW	core/dataflow/smt_barrier.py	2604	CODE
LOW	core/dataflow/smt_barrier.py	2847	CODE
LOW	core/dataflow/smt_barrier.py	1117	CODE
LOW	core/dataflow/barrier_synth.py	495	CODE
LOW	core/dataflow/corpus_metrics.py	67	CODE
LOW	core/dataflow/cvefix_bridge.py	345	CODE
LOW	core/dataflow/cvefix_bridge.py	417	CODE
LOW	core/dataflow/trust_corpus_report.py	141	CODE
LOW	core/dataflow/trust_report.py	64	CODE
LOW	core/dataflow/structural_validator.py	428	CODE
LOW	core/dataflow/structural_validator.py	511	CODE
LOW	core/dataflow/cvefix_walk.py	400	CODE
LOW	core/dataflow/parser_pack_harvest.py	437	CODE
LOW	core/dataflow/tier1_llm.py	256	CODE
LOW	core/dataflow/tier1_llm.py	391	CODE
LOW	core/dataflow/sanitizer_cut_parity.py	253	CODE
LOW	core/dataflow/sanitizer_cut_parity.py	414	CODE
LOW	core/schema_constants/tests/test_cwe_map_unique.py	25	CODE
LOW	core/reporting/findings.py	90	CODE
LOW	core/reporting/scan_coverage.py	53	CODE
LOW	core/artifacts/provenance.py	133	CODE
LOW	core/artifacts/provenance.py	203	CODE
LOW	core/artifacts/provenance.py	321	CODE
LOW	core/artifacts/provenance.py	349	CODE
LOW	core/sarif/parser.py	78	CODE
LOW	core/sarif/parser.py	170	CODE
LOW	core/sarif/parser.py	312	CODE
LOW	core/sarif/parser.py	436	CODE
LOW	core/sarif/parser.py	742	CODE
LOW	core/sarif/parser.py	1064	CODE
LOW	core/sarif/import_normalizer.py	139	CODE
LOW	core/sarif/import_normalizer.py	264	CODE
LOW	core/witness/discovery.py	51	CODE
LOW	core/witness/discovery.py	115	CODE
LOW	core/witness/provenance.py	715	CODE
LOW	core/llm/prompt_budget.py	99	CODE
2147 more matches not shown…

Modern Structural Boilerplate1383 hits · 1370 pts

Severity	File	Line	Snippet	Context
LOW	core/__init__.py	84	__all__ = [	CODE
LOW	core/dataflow/sanitizer_cut_parity_report.py	231	__all__ = [	CODE
LOW	core/dataflow/cvefix_corpus_generator.py	56	logger = logging.getLogger(__name__)	CODE
LOW	core/dataflow/__init__.py	29	__all__ = [	CODE
LOW	core/dataflow/cvefix_loader.py	32	logger = logging.getLogger(__name__)	CODE
LOW	core/dataflow/sanitizer_catalog.py	329	__all__ = [	CODE
LOW	core/dataflow/structural_validator.py	45	logger = logging.getLogger(__name__)	CODE
LOW	core/dataflow/llm_bridge.py	46	logger = logging.getLogger(__name__)	CODE
LOW	core/dataflow/sanitizer_cut_config.py	372	__all__ = [	CODE
LOW	core/dataflow/sanitizer_cut_parity.py	617	__all__ = [	CODE
LOW	core/dataflow/adapters/taint_native.py	153	__all__ = [	CODE
LOW	core/reporting/witnesses.py	31	logger = logging.getLogger(__name__)	CODE
LOW	core/reporting/__init__.py	33	__all__ = [	CODE
LOW	core/reporting/scan_coverage.py	165	__all__ = [	CODE
LOW	core/staleness/__init__.py	45	__all__ = [	CODE
LOW	core/artifacts/context_map_budget.py	45	logger = logging.getLogger(__name__)	CODE
LOW	core/artifacts/context_map_budget.py	404	__all__ = [	CODE
LOW	core/witness/store.py	50	logger = logging.getLogger(__name__)	CODE
LOW	core/witness/discovery.py	31	logger = logging.getLogger(__name__)	CODE
LOW	core/witness/__init__.py	51	__all__ = [	CODE
LOW	core/witness/matching.py	87	logger = logging.getLogger(__name__)	CODE
LOW	core/witness/provenance.py	971	__all__ = [	CODE
LOW	core/llm/prompt_budget.py	32	logger = logging.getLogger(__name__)	STRING
LOW	core/llm/semantic_entropy.py	233	__all__ = ["divergence", "pairwise_distance"]	STRING
LOW	core/llm/egress.py	93	logger = logging.getLogger(__name__)	CODE
LOW	core/llm/egress.py	567	__all__ = [	CODE
LOW	core/llm/cc_proxy_hosts.py	57	logger = logging.getLogger(__name__)	CODE
LOW	core/llm/config.py	715	def set_operator_primary_override(model: Optional['ModelConfig']) -> None:	CODE
LOW	core/llm/models_config_perm.py	38	logger = logging.getLogger(__name__)	CODE
LOW	core/llm/models_config_perm.py	149	__all__ = [	CODE
LOW	core/llm/transcript.py	122	logger = logging.getLogger(__name__)	CODE
LOW	core/llm/transcript.py	124	__all__ = [	CODE
LOW	core/llm/log_quiet.py	90	__all__ = ["quiet_noisy_loggers"]	CODE
LOW	core/llm/task_types.py	83	__all__ = ["FAST_TIER_TASKS", "TaskType"]	CODE
LOW	core/llm/breaker.py	44	logger = logging.getLogger(__name__)	CODE
LOW	core/llm/breaker.py	456	def set_degradation_breaker(breaker: DegradedModeBreaker \| None) -> None:	CODE
LOW	core/llm/instructor_reask.py	39	logger = logging.getLogger(__name__)	CODE
LOW	core/llm/concurrency.py	23	logger = logging.getLogger(__name__)	CODE
LOW	core/llm/session_fallback.py	56	logger = logging.getLogger(__name__)	CODE
LOW	core/llm/session_fallback.py	201	__all__ = [	CODE
LOW	core/llm/__init__.py	37	__all__ = [	CODE
LOW	core/llm/telemetry.py	36	logger = logging.getLogger(__name__)	CODE
LOW	core/llm/telemetry.py	320	def set_sink(sink: TelemetrySink \| None) -> None:	CODE
LOW	core/llm/factory.py	22	logger = logging.getLogger(__name__)	CODE
LOW	core/llm/factory.py	24	__all__ = ["get_client"]	CODE
LOW	core/llm/structured_call.py	273	__all__ = [	CODE
LOW	core/llm/cc_probe.py	35	logger = logging.getLogger(__name__)	CODE
LOW	core/llm/cache_integrity.py	223	__all__ = [	CODE
LOW	core/llm/coerce.py	200	__all__ = [	CODE
LOW	core/llm/http_pool.py	99	logger = logging.getLogger(__name__)	CODE
LOW	core/llm/http_pool.py	1347	__all__ = [	CODE
LOW	core/llm/ranking.py	85	logger = logging.getLogger(__name__)	CODE
LOW	core/llm/ranking.py	604	__all__ = [	CODE
LOW	core/llm/cost.py	67	__all__ = ["sanitize_cost", "sanitize_iterations"]	CODE
LOW	core/llm/bedrock_preflight.py	40	logger = logging.getLogger(__name__)	CODE
LOW	core/llm/bedrock_prefixes.py	151	__all__ = [	CODE
LOW	core/llm/throttle.py	50	logger = logging.getLogger(__name__)	CODE
LOW	core/llm/throttle.py	228	def _set_event_threadsafe(self) -> None:	CODE
LOW	core/llm/cc_adapter.py	34	logger = logging.getLogger(__name__)	CODE
LOW	core/llm/tool_use/__init__.py	46	__all__ = [	CODE
1323 more matches not shown…

Modern AI Meta-Vocabulary398 hits · 1237 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	conftest.py	1209	# A test session whose source tree is edited WHILE it runs (multi-agent	COMMENT
MEDIUM⚡	raptor.py	847	# /scan writes codeql_*.sarif at the top level; /agentic writes it	COMMENT
MEDIUM⚡	raptor.py	866	# Print a coverage summary at the end of /agentic (after complete_run,	COMMENT
MEDIUM⚡	raptor.py	868	# /scan and /validate print their own; this closes the agentic gap.	COMMENT
MEDIUM⚡	raptor.py	879	# /agentic does NOT ingest its findings into the graph yet —	COMMENT
MEDIUM⚡	raptor.py	880	# this lane is skipped for command=="agentic" and raptor_agentic.py	COMMENT
MEDIUM⚡	raptor.py	908	# Read by the subprocess mode handlers (codeql/agentic) to re-inject the	COMMENT
MEDIUM⚡	raptor.py	915	# codeql/agentic children so their own resolution sees it.	COMMENT
MEDIUM	raptor.py	740	# mode itself, or scan/agentic with ``--codeql`` /	COMMENT
MEDIUM	raptor.py	741	# ``--codeql-only``. Plain /agentic (no --codeql) doesn't reach	COMMENT
MEDIUM	raptor.py	1208	# next /scan or /agentic invocation saw a stale	COMMENT
MEDIUM	raptor.py	1435	# Enable CodeQL by default for comprehensive agentic mode	COMMENT
MEDIUM	raptor.py	1450	# agentic child parses them to resolve the cc_trust + codeql_trust	COMMENT
MEDIUM	raptor.py	1850	# SUBPROCESS mode handlers (codeql/agentic) can't rely on that flag —	COMMENT
MEDIUM	raptor.py	1859	# codeql/agentic handlers re-inject it for their children.	COMMENT
MEDIUM	raptor.py	1947	# ``agentic`` shouldn't force the operator to read the	COMMENT
MEDIUM⚡	raptor_agentic.py	4875	# Coverage nudge: /agentic reviews what the scanners flag; make the	COMMENT
MEDIUM⚡	raptor_agentic.py	5696	#: Cap on gap-audit finding rows inlined into the agentic report —	COMMENT
MEDIUM	raptor_agentic.py	510	# concurrent writer (a second /agentic run, an operator	COMMENT
MEDIUM	raptor_agentic.py	1660	# The agentic run completes AFTER this subprocess, so its	COMMENT
MEDIUM	raptor_agentic.py	1783	# Child phase of the agentic run: thread its project pin so	COMMENT
MEDIUM	raptor_agentic.py	1798	# Reuse the agentic checklist — same target, same parser;	COMMENT
MEDIUM	raptor_agentic.py	3501	# this, `python raptor.py agentic --audit` would set audit mode in	COMMENT
MEDIUM	raptor_agentic.py	3502	# the agentic process but the actual sandbox-using subprocesses	COMMENT
MEDIUM	raptor_agentic.py	3710	# Surface the timeout in the agentic-run summary even when	COMMENT
MEDIUM	raptor_agentic.py	3835	# exited non-zero. Pre-fix the agentic wrapper threw away	COMMENT
MEDIUM	raptor_agentic.py	4038	# here left /agentic output with no record of which	COMMENT
MEDIUM	raptor_agentic.py	4753	# kind-aware consumers (audit prior claims, agentic-labelled	COMMENT
MEDIUM	raptor_agentic.py	5126	# Build findings funnel from orchestration results	COMMENT
MEDIUM	raptor_agentic.py	5163	# Post-process orchestration results: compute CVSS, infer CWE, fix severity	COMMENT
MEDIUM	raptor_agentic.py	5349	# Headline cost = orchestration spend + the opt-in pass	COMMENT
MEDIUM⚡	raptor_agentic.py	3256	# bridge tier-2/3) AND enriches the agentic checklist with priority	STRING
MEDIUM⚡	raptor_agentic.py	3370	# Marks dead-code functions priority=low in the agentic checklist using	STRING
MEDIUM⚡	raptor_agentic.py	3372	# the agentic LLM analysis prompt reads priority/priority_reason and	STRING
MEDIUM	raptor_agentic.py	2249	# agentic-specific mitigation-analysis use). The downstream code	STRING
MEDIUM	raptor_agentic.py	2906	# two concurrent agentic runs destroyed each other's live clone	STRING
MEDIUM	raptor_codeql.py	525	# pass per finding (filter + summarise), while agentic does the	STRING
MEDIUM	raptor_codeql.py	529	# ``--max-findings 20`` to agentic explicitly.	STRING
MEDIUM	raptor_codeql.py	564	# /agentic + /fuzz: entry-point CLI flag mutates the named	STRING
MEDIUM⚡	raptor_openant.py	795	# consume, and the /agentic lane saves it uncapped — a capped	COMMENT
MEDIUM	core/dataflow/smt_barrier.py	1857	# /agentic run mid-flight.	COMMENT
MEDIUM	core/dataflow/cvefix_bridge.py	121	# test scaffolding crowds out the real validator code with noise.	COMMENT
MEDIUM	core/dataflow/cvefix_bridge.py	391	# proposer hallucinates plausible-looking guards on shapes	COMMENT
MEDIUM	core/dataflow/cvefix_bridge.py	574	# so it's the diagnostic material for improving the proposer's few-shot.	COMMENT
MEDIUM	core/dataflow/sanitizer_cut_parity.py	394	Review #3 on PR #794: the parity log is append-only, and agentic	STRING
MEDIUM	core/reporting/findings.py	349	# Reasoning / analysis (from agentic or validate)	COMMENT
MEDIUM	core/reporting/__init__.py	34	# Layer 1 — domain-agnostic report scaffolding	COMMENT
MEDIUM	core/reporting/formatting.py	103	# Check for error first (agentic)	COMMENT
MEDIUM	core/reporting/formatting.py	107	# Boolean fields (agentic pipeline) are the actual verdict — check first.	COMMENT
MEDIUM	core/reporting/formatting.py	152	# ruling was issued (agentic pipeline, mid-pipeline states).	COMMENT
MEDIUM⚡	core/reporting/tests/test_formatting.py	164	# The agentic→validate bridge wraps string rulings into dicts;	COMMENT
MEDIUM⚡	core/reporting/tests/test_formatting.py	182	# object); an agentic-imported is_true_positive=True must not	COMMENT
MEDIUM	core/sarif/import_normalizer.py	339	# SARIF must not wedge /agentic --sarif for hours. Trade-off, both	COMMENT
MEDIUM	core/sarif/import_normalizer.py	591	# to the operator terminal by the /agentic import	COMMENT
MEDIUM	core/sarif/tests/test_import_normalizer.py	638	# the operator terminal by /agentic --sarif: a URI carrying	COMMENT
MEDIUM	core/witness/discovery.py	40	"autonomous/witnesses", # /agentic's AutonomousSecurityAgentV2	CODE
MEDIUM	core/witness/types.py	66	# /agentic or /crash-analysis (future PR) executed their	COMMENT
MEDIUM	core/llm/detection.py	976	# (Phase 4 orchestration in raptor_agentic.py, the ``--prep-only``	COMMENT
MEDIUM	core/llm/task_types.py	64	# Multi-turn tool-using orchestrators (cve-diff, agentic). Routes	COMMENT
MEDIUM	core/llm/client.py	1670	# than any current consumer needs — even agentic at 1k	COMMENT
338 more matches not shown…

AI Slop Vocabulary338 hits · 1050 pts

Severity	File	Line	Snippet	Context
MEDIUM	raptor.py	1435	# Enable CodeQL by default for comprehensive agentic mode	COMMENT
MEDIUM	raptor_agentic.py	3635	# behaviour is more nuanced.	COMMENT
MEDIUM	raptor_agentic.py	2945	# harness's scratch sweep, tmpfiles reaping)...	STRING
MEDIUM⚡	raptor_fuzzing.py	664	# Engine selection and the atheris / cargo-fuzz harness flags	STRING
MEDIUM	core/llm/client.py	2963	# test harness make_test_client, and any future factory that	COMMENT
MEDIUM	core/llm/providers.py	4679	# The claude-code harness reports the model it used in the	COMMENT
MEDIUM	core/llm/dispatcher/tests/conftest.py	79	# only in the test harness.	COMMENT
MEDIUM⚡	core/llm/tests/test_scorecard_default_isolation.py	51	# fingerprint; the table-driven strip harness enforces the actual	COMMENT
MEDIUM⚡	core/llm/tests/test_resource_governor.py	108	# Clients built via __new__ (test harness) have no _run_start.	COMMENT
LOW	core/llm/multi_model/tests/test_pipelines.py	164	# Here we just return a dict summarising what we'd send.	COMMENT
MEDIUM	core/llm/scorecard/audit.py	261	# the fallback keeps the walk robust if that ever widens	COMMENT
MEDIUM	core/llm/scorecard/scorecard.py	220	# verdict achieved (post-confirm-k, post-harness-side-channel	COMMENT
MEDIUM	core/llm/scorecard/scorecard.py	289	# writer of ``audit:<CWE>`` cells (the corpus harness is offline).	COMMENT
MEDIUM⚡	core/llm/scorecard/tests/test_validate_feedback.py	23	# The offline corpus harness referenced this constant before it	COMMENT
MEDIUM⚡	core/llm/scorecard/tests/test_validate_feedback.py	24	# existed; its AttributeError was swallowed by the harness's	COMMENT
MEDIUM	core/llm/scorecard/tests/test_validate_feedback.py	176	# harness recorded against EventType.CORPUS_GROUND_TRUTH,	COMMENT
MEDIUM	core/analysis/_reach_cache.py	110	# pin installed AFTER this module is imported (test harness, sandboxed	COMMENT
MEDIUM⚡	core/analysis/binary_oracle_autodetect.py	43	# harness) so an existing operator build isn't overridden by a leftover	COMMENT
MEDIUM⚡	core/analysis/binary_oracle_autodetect.py	44	# harness cache.	COMMENT
MEDIUM	core/analysis/binary_oracle_precision.py	487	# Late import: the registry is the only thing the harness depends on	COMMENT
MEDIUM	core/analysis/binary_oracle_precision.py	488	# for driver lookup; pulling it lazily lets the harness module stay	COMMENT
MEDIUM⚡	core/analysis/tests/test_reachability.py	1011	# ``attributes`` field predates this feature), so Tier-1 dispatch is robust.	COMMENT
MEDIUM	core/analysis/tests/test_binary_oracle_cli.py	93	# Opt-out is comprehensive: even project-persisted binaries	COMMENT
MEDIUM⚡	core/analysis/tests/test_binary_oracle_precision.py	35	# nightly harness smoke). The skipif guards below make a missing	COMMENT
MEDIUM⚡	core/analysis/tests/test_binary_oracle_precision.py	511	# ``mode`` is the harness cross-tab style — liveness-based, used by	COMMENT
MEDIUM	core/config/__init__.py	255	# (dropped: false) so the recall harness's warm scorer can measure	COMMENT
MEDIUM	core/config/__init__.py	679	# packages/fuzzing/env_hygiene.py; the strip regression harness is	COMMENT
MEDIUM⚡	core/security/prompt_envelope_audit.py	128	# fuzzing harness generator (target headers → compiled+executed	COMMENT
MEDIUM⚡	core/security/prompt_envelope_audit.py	129	# harness source; enveloped via build_prompt + CONSERVATIVE)	COMMENT
MEDIUM⚡	core/security/tests/test_log_sanitisation.py	157	# text an operator (or a harness LLM) will read. U+FFFF (Cn)	COMMENT
MEDIUM⚡	core/security/tests/test_codeql_trust_self_worktree.py	78	# user-namespace harness), so real second-uid fixtures are unavailable	COMMENT
MEDIUM	core/labeled_attempts/types.py	110	# Candidate tried to side-channel the harness — modify the target	COMMENT
MEDIUM⚡	core/labeled_attempts/retrieval.py	89	# the run's goal. Fuzz-harness-class output —	COMMENT
MEDIUM	core/recall/tests/test_sarif_chunking.py	50	# big one); the harness must still see the big tool's findings.	COMMENT
MEDIUM	core/function_taxonomy/__init__.py	246	# elevate privilege, escape namespace isolation, or load kernel	COMMENT
MEDIUM	core/function_taxonomy/__init__.py	660	"LLVMFuzzerTestOneInput", # libFuzzer harness convention	CODE
MEDIUM	core/annotations/provenance.py	613	# beside a well-formed tty value) must demote, not elevate.	COMMENT
MEDIUM	core/annotations/tests/test_provenance.py	964	# documented harness seam: production cannot reach a granting	COMMENT
MEDIUM⚡	core/annotations/tests/test_cli.py	623	# command harness; here, just ensure the explicit-base path works.	COMMENT
LOW⚡	core/audit/condition_extraction_python.py	202	# Early-return guard pattern: if-body is just return/raise,	COMMENT
MEDIUM	core/audit/dynamic_sweep.py	271	# Harness code (and the harness binary compiled from it) is	COMMENT
MEDIUM	core/audit/dynamic_sweep.py	408	# Same containment rationale as the C harness (see _run_c_harness).	COMMENT
MEDIUM	core/audit/dynamic_sweep.py	466	# crash evidence. An in-harness Python exception is what	COMMENT
MEDIUM	core/audit/dynamic_sweep.py	468	# target function (the harness imports and calls it) raises at	COMMENT
MEDIUM	core/audit/dynamic_sweep.py	806	# parent's waitpid. The harness runs as the init process of the	COMMENT
MEDIUM	core/audit/binary_verification.py	175	# ``core/audit/dynamic_sweep.py`` (harness compile + sanitiser run,	COMMENT
MEDIUM	core/audit/compile_probe.py	72	# Limits — consistent with the compiler-sweep harness's probe class.	COMMENT
MEDIUM	core/audit/findings_export.py	354	# harness overflow must not export indistinguishable from a	COMMENT
MEDIUM⚡	core/audit/sentinel_collapse.py	129	# is more comprehensive (covers None, True, False, "", 0 in addition to	COMMENT
MEDIUM	core/audit/cwe_dispatch.py	625	# channel (census-driven invariant harness + lead legs,	COMMENT
MEDIUM⚡	core/audit/protocol_state.py	686	# ── leg 3: census-driven multi-site invariant harness ───────────────	COMMENT
MEDIUM	core/audit/protocol_state.py	1238	# ── standing pre-pass (leads only + receipted-invariant harness) ────	COMMENT
MEDIUM	core/audit/priority.py	94	# Non-production tree demotion (vendored-compat / test-harness files,	COMMENT
MEDIUM	core/audit/priority.py	103	# compat-shim / regress-harness findings keep drowning the production	COMMENT
LOW	core/audit/lifetime_witness.py	986	# ANY position, not just call shape: a parenthesized or	COMMENT
MEDIUM	core/audit/sweep.py	2151	# Invariant-preservation harness (core.audit.invariant_smt): a sat	COMMENT
MEDIUM	core/audit/calibrated_merge.py	70	# The two audit:<CWE> producers: the offline corpus harness and	COMMENT
MEDIUM	core/audit/report.py	759	# test-harness findings follow under labeled subsections with	COMMENT
MEDIUM	core/audit/report.py	760	# counts (grouped, never dropped: a harness overflow is still a	COMMENT
MEDIUM	core/audit/report.py	1983	# vulnerabilities a comparison harness later confirmed).	COMMENT
278 more matches not shown…

Cross-File Repetition152 hits · 760 pts

Severity	File	Line	Snippet	Context
HIGH	core/sarif/tests/test_import_normalizer.py	0	let caplog see records from the 'raptor' logger. raptorlogger sets propagate=false on logging.getlogger('raptor'), so re	STRING
HIGH	core/llm/tests/test_turn_consumed_gate.py	0	let caplog see records from the 'raptor' logger. raptorlogger sets propagate=false on logging.getlogger('raptor'), so re	STRING
HIGH	core/llm/tests/test_raptor_config_schema_guard.py	0	let caplog see records from the 'raptor' logger. raptorlogger sets propagate=false on logging.getlogger('raptor'), so re	STRING
HIGH	core/llm/tests/test_anthropic_retry_visibility.py	0	let caplog see records from the 'raptor' logger. raptorlogger sets propagate=false on logging.getlogger('raptor'), so re	STRING
HIGH	core/llm/scorecard/tests/test_scorecard.py	0	let caplog see records from the 'raptor' logger. raptorlogger sets propagate=false on logging.getlogger('raptor'), so re	STRING
HIGH	core/project/tests/test_machine_project_expiry.py	0	let caplog see records from the 'raptor' logger. raptorlogger sets propagate=false on logging.getlogger('raptor'), so re	STRING
HIGH	core/project/tests/test_findings_size_gate.py	0	let caplog see records from the 'raptor' logger. raptorlogger sets propagate=false on logging.getlogger('raptor'), so re	STRING
HIGH	core/engagement/tests/test_ledger.py	0	let caplog see records from the 'raptor' logger. raptorlogger sets propagate=false on logging.getlogger('raptor'), so re	STRING
HIGH	core/inventory/tests/test_checklist_frame_mac.py	0	let caplog see records from the 'raptor' logger. raptorlogger sets propagate=false on logging.getlogger('raptor'), so re	STRING
HIGH	…re/orchestration/tests/test_frida_validation_bridge.py	0	let caplog see records from the 'raptor' logger. raptorlogger sets propagate=false on logging.getlogger('raptor'), so re	STRING
HIGH	packages/fuzzing/tests/test_binary_only_mode.py	0	let caplog see records from the 'raptor' logger. raptorlogger sets propagate=false on logging.getlogger('raptor'), so re	STRING
HIGH	packages/fuzzing/tests/test_afl_runner.py	0	let caplog see records from the 'raptor' logger. raptorlogger sets propagate=false on logging.getlogger('raptor'), so re	STRING
HIGH	packages/fuzzing/tests/test_libfuzzer_runner.py	0	let caplog see records from the 'raptor' logger. raptorlogger sets propagate=false on logging.getlogger('raptor'), so re	STRING
HIGH	…ckages/llm_analysis/tests/test_logger_excerpt_scrub.py	0	let caplog see records from the 'raptor' logger. raptorlogger sets propagate=false on logging.getlogger('raptor'), so re	STRING
HIGH	…lm_analysis/tests/test_load_attack_path_log_excerpt.py	0	let caplog see records from the 'raptor' logger. raptorlogger sets propagate=false on logging.getlogger('raptor'), so re	STRING
HIGH	packages/codeql/tests/test_language_detector.py	0	let caplog see records from the 'raptor' logger. raptorlogger sets propagate=false on logging.getlogger('raptor'), so re	STRING
HIGH	packages/codeql/tests/test_buildless_mode.py	0	let caplog see records from the 'raptor' logger. raptorlogger sets propagate=false on logging.getlogger('raptor'), so re	STRING
HIGH	packages/codeql/tests/test_database_manager.py	0	let caplog see records from the 'raptor' logger. raptorlogger sets propagate=false on logging.getlogger('raptor'), so re	STRING
HIGH	packages/codeql/tests/test_abstained_verdicts.py	0	let caplog see records from the 'raptor' logger. raptorlogger sets propagate=false on logging.getlogger('raptor'), so re	STRING
HIGH	core/witness/provenance.py	0	read an existing key with the shared fd-fstat discipline (:func:`core.security.mac_key.read_existing_key`): refuse symli	STRING
HIGH	core/llm/cache_integrity.py	0	read an existing key with the shared fd-fstat discipline (:func:`core.security.mac_key.read_existing_key`): refuse symli	STRING
HIGH	core/llm/scorecard/integrity.py	0	read an existing key with the shared fd-fstat discipline (:func:`core.security.mac_key.read_existing_key`): refuse symli	STRING
HIGH	core/iris/integrity.py	0	read an existing key with the shared fd-fstat discipline (:func:`core.security.mac_key.read_existing_key`): refuse symli	STRING
HIGH	core/inventory/checklist_mac.py	0	read an existing key with the shared fd-fstat discipline (:func:`core.security.mac_key.read_existing_key`): refuse symli	STRING
HIGH	core/witness/provenance.py	0	whether this install can mint/verify claim tokens at all.	STRING
HIGH	core/iris/integrity.py	0	whether this install can mint/verify claim tokens at all.	STRING
HIGH	core/understand_graph/integrity.py	0	whether this install can mint/verify claim tokens at all.	STRING
HIGH	core/inventory/checklist_frame_mac.py	0	whether this install can mint/verify claim tokens at all.	STRING
HIGH	core/inventory/checklist_mac.py	0	whether this install can mint/verify claim tokens at all.	STRING
HIGH	core/witness/tests/test_provenance.py	0	a key file that stays short is genuinely suspect: the loop runs out of retries, warns once, and refuses (none).	STRING
HIGH	core/llm/tests/test_cache_integrity_key_race.py	0	a key file that stays short is genuinely suspect: the loop runs out of retries, warns once, and refuses (none).	STRING
HIGH	core/llm/scorecard/tests/test_integrity.py	0	a key file that stays short is genuinely suspect: the loop runs out of retries, warns once, and refuses (none).	STRING
HIGH	core/iris/tests/test_store_integrity.py	0	a key file that stays short is genuinely suspect: the loop runs out of retries, warns once, and refuses (none).	STRING
HIGH	core/llm/cache_integrity.py	0	return data with a fresh integrity token attached (in place; returned for chaining). when no usable key exists the tok	STRING
HIGH	core/llm/scorecard/integrity.py	0	return data with a fresh integrity token attached (in place; returned for chaining). when no usable key exists the tok	STRING
HIGH	core/iris/integrity.py	0	return data with a fresh integrity token attached (in place; returned for chaining). when no usable key exists the tok	STRING
HIGH	core/project/tests/test_report.py	0	user registries stay out of the real home: the root-conftest layer doing this is stripped from release extracts (conftes	STRING
HIGH	core/project/tests/test_clean.py	0	user registries stay out of the real home: the root-conftest layer doing this is stripped from release extracts (conftes	STRING
HIGH	core/project/tests/test_project.py	0	user registries stay out of the real home: the root-conftest layer doing this is stripped from release extracts (conftes	STRING
HIGH	core/project/tests/test_cli.py	0	user registries stay out of the real home: the root-conftest layer doing this is stripped from release extracts (conftes	STRING
HIGH	core/audit/tests/test_guess_target_corroboration.py	0	user registries stay out of the real home: the root-conftest layer doing this is stripped from release extracts (conftes	STRING
HIGH	core/audit/tests/test_resume_substrate.py	0	user registries stay out of the real home: the root-conftest layer doing this is stripped from release extracts (conftes	STRING
HIGH	core/sandbox/tests/test_triage.py	0	user registries stay out of the real home: the root-conftest layer doing this is stripped from release extracts (conftes	STRING
HIGH	core/sandbox/tests/test_e2e_sandbox.py	0	user registries stay out of the real home: the root-conftest layer doing this is stripped from release extracts (conftes	STRING
HIGH	core/sandbox/tests/test_summary.py	0	user registries stay out of the real home: the root-conftest layer doing this is stripped from release extracts (conftes	STRING
HIGH	core/run/tests/test_provenance.py	0	user registries stay out of the real home: the root-conftest layer doing this is stripped from release extracts (conftes	STRING
HIGH	core/run/tests/test_run_ownership.py	0	user registries stay out of the real home: the root-conftest layer doing this is stripped from release extracts (conftes	STRING
HIGH	core/run/tests/test_worker_liveness.py	0	user registries stay out of the real home: the root-conftest layer doing this is stripped from release extracts (conftes	STRING
HIGH	core/run/tests/test_tmp_reaper.py	0	user registries stay out of the real home: the root-conftest layer doing this is stripped from release extracts (conftes	STRING
HIGH	core/run/tests/test_findings_stamp.py	0	user registries stay out of the real home: the root-conftest layer doing this is stripped from release extracts (conftes	STRING
HIGH	core/run/tests/test_metadata.py	0	user registries stay out of the real home: the root-conftest layer doing this is stripped from release extracts (conftes	STRING
HIGH	core/run/tests/test_run_contention.py	0	user registries stay out of the real home: the root-conftest layer doing this is stripped from release extracts (conftes	STRING
HIGH	core/run/tests/test_hook_finalize_precedence.py	0	user registries stay out of the real home: the root-conftest layer doing this is stripped from release extracts (conftes	STRING
HIGH	core/run/tests/test_agentic_entrypoint_hardening.py	0	user registries stay out of the real home: the root-conftest layer doing this is stripped from release extracts (conftes	STRING
HIGH	core/run/tests/test_resume.py	0	user registries stay out of the real home: the root-conftest layer doing this is stripped from release extracts (conftes	STRING
HIGH	core/run/tests/test_interrupt_resume.py	0	user registries stay out of the real home: the root-conftest layer doing this is stripped from release extracts (conftes	STRING
HIGH	…ges/code_understanding/tests/test_understand_resume.py	0	user registries stay out of the real home: the root-conftest layer doing this is stripped from release extracts (conftes	STRING
HIGH	core/understand_graph/integrity.py	0	read the key, lazily creating it (0700 dir, 0600 file, o_excl) if absent — the shared hardened discipline in :func:`core	STRING
HIGH	core/inventory/checklist_frame_mac.py	0	read the key, lazily creating it (0700 dir, 0600 file, o_excl) if absent — the shared hardened discipline in :func:`core	STRING
HIGH	core/inventory/checklist_mac.py	0	read the key, lazily creating it (0700 dir, 0600 file, o_excl) if absent — the shared hardened discipline in :func:`core	STRING
92 more matches not shown…

Hallucination Indicators19 hits · 200 pts

Severity	File	Line	Snippet	Context
CRITICAL	…7_codeql_java-command-line-injection_d47f527b566d.json	61	"snippet": "org.apache.commons.codec.binary.Base64.decodeBase64(",	CODE
CRITICAL⚡	core/analysis/tests/test_reachability.py	903	"org.springframework.web.bind.annotation.GetMapping(\"/x\")"	CODE
CRITICAL	packages/cve_diff/tests/unit/test_stage_assertions.py	10	from cve_diff.core.exceptions import AnalysisError	CODE
CRITICAL	packages/cve_diff/tests/unit/test_pipeline_sage.py	117	from cve_diff.core.exceptions import AnalysisError	CODE
CRITICAL	packages/cve_diff/tests/unit/test_acquisition_layers.py	27	from cve_diff.core.exceptions import AcquisitionError	CODE
CRITICAL	packages/cve_diff/tests/unit/test_commit_resolver.py	8	from cve_diff.core.exceptions import IdenticalCommitsError	CODE
CRITICAL	packages/cve_diff/tests/unit/infra/test_scorecard.py	119	from cve_diff.core.exceptions import AnalysisError	CODE
CRITICAL	packages/cve_diff/tests/unit/infra/test_scorecard.py	142	from cve_diff.core.exceptions import AcquisitionError	CODE
CRITICAL	…es/cve_diff/tests/unit/diffing/test_extract_via_api.py	6	from cve_diff.core.exceptions import AnalysisError	CODE
CRITICAL⚡	…diff/tests/unit/diffing/test_extract_via_gitlab_api.py	20	from cve_diff.core.exceptions import AnalysisError	CODE
CRITICAL	packages/cve_diff/tests/unit/cli/test_main.py	21	from cve_diff.core.exceptions import IdenticalCommitsError	CODE
CRITICAL	packages/cve_diff/tests/unit/cli/test_main.py	385	from cve_diff.core.exceptions import DiscoveryError	CODE
CRITICAL	…es/cve_diff/cve_diff/diffing/extract_via_gitlab_api.py	31	from cve_diff.core.exceptions import AnalysisError	CODE
CRITICAL	packages/cve_diff/cve_diff/diffing/commit_resolver.py	27	from cve_diff.core.exceptions import IdenticalCommitsError	CODE
CRITICAL	packages/cve_diff/cve_diff/diffing/extractor.py	16	from cve_diff.core.exceptions import AnalysisError	CODE
CRITICAL	packages/cve_diff/cve_diff/diffing/extract_via_api.py	30	from cve_diff.core.exceptions import AnalysisError	CODE
CRITICAL	…ages/cve_diff/cve_diff/diffing/extraction_agreement.py	26	from cve_diff.core.exceptions import AnalysisError	CODE
CRITICAL	packages/cve_diff/cve_diff/acquisition/layers.py	43	from cve_diff.core.exceptions import AcquisitionError	CODE
CRITICAL	packages/cve_diff/cve_diff/cli/bench.py	35	from cve_diff.core.exceptions import CveDiffError	CODE

Structural Annotation Overuse86 hits · 151 pts

Severity	File	Line	Snippet	Context
LOW⚡	core/sarif/tests/test_import_e2e.py	232	# Step 1: parse	COMMENT
LOW⚡	core/sarif/tests/test_import_e2e.py	239	# Step 2: dedup (no dupes expected)	COMMENT
LOW⚡	core/sarif/tests/test_import_e2e.py	243	# Step 3: normalize	COMMENT
LOW	core/llm/egress.py	497	# Step 1: bring up / extend the in-process proxy. MUST happen	COMMENT
LOW⚡	core/llm/egress.py	510	# Step 2: only mutate env on the first call. Subsequent	COMMENT
LOW⚡	core/llm/egress.py	516	# Step 3: point HTTPS_PROXY at our in-process proxy so httpx-based	COMMENT
LOW	core/llm/egress.py	541	# Step 4: ensure local-loop hosts (Ollama, vLLM-localhost,	COMMENT
LOW	core/llm/config.py	850	# Step 1: preferred providers via env var (consumer's explicit	COMMENT
LOW	core/llm/config.py	867	# Step 2: operator's thinking-model config (file-based; covers	COMMENT
LOW	core/llm/config.py	922	# Step 3: default-order autodetect via env vars. Skip providers	COMMENT
LOW	core/llm/multi_model/calibrated_aggregation.py	208	# Step 1: split findings into D–S-eligible vs vote-fallback.	COMMENT
LOW	core/llm/multi_model/calibrated_aggregation.py	225	# Step 2: run D–S across all eligible records, partitioned by class.	COMMENT
LOW	core/llm/multi_model/calibrated_aggregation.py	274	# Step 3: vote fallback for everything else.	COMMENT
LOW⚡	core/security/tests/test_envelope_probe.py	328	# Step 1: probe each model	COMMENT
LOW⚡	core/security/tests/test_envelope_probe.py	342	# Step 2: select profile based on cached result	COMMENT
LOW⚡	core/security/tests/test_envelope_probe.py	346	# Step 3: verify passthrough prompt is simpler	COMMENT
LOW	core/audit/compile_probe.py	494	# Step 1: baseline — the file must compile standalone.	COMMENT
LOW	core/audit/compile_probe.py	512	# Step 2: tautology — the expression must be a compile-time	COMMENT
LOW	core/audit/compile_probe.py	528	# Step 3: the claim. Steps 1-2 green means failure here can	COMMENT
LOW⚡	core/sandbox/landlock.py	199	# Step 2: Functional self-test in a child process. Must run in a	COMMENT
LOW	core/sandbox/landlock.py	182	# Step 1: ABI probe — landlock_create_ruleset(NULL, 0, version=1).	COMMENT
LOW⚡	core/sandbox/_spawn.py	2836	# Step 5: tell parent we're ready for newuidmap.	COMMENT
LOW⚡	core/sandbox/_spawn.py	2840	# Step 7: wait for parent 'go' signal — parent has run	COMMENT
LOW⚡	core/sandbox/_spawn.py	3170	# Step 11: fresh /proc.	COMMENT
LOW⚡	core/sandbox/_spawn.py	3311	# Step 12: Landlock. AFTER the fresh-proc mount (see	COMMENT
LOW⚡	core/sandbox/_spawn.py	3320	# Step 13: seccomp (ships the unix-scope notify fd to	COMMENT
LOW	core/sandbox/_spawn.py	2748	# Step 3: create namespaces. Leaves us as "nobody" in the	COMMENT
LOW	core/sandbox/_spawn.py	2983	# Step 9: mount-ns pivot_root if target/output supplied.	COMMENT
LOW	core/sandbox/_spawn.py	3111	# Step 10: pid-ns via a second fork. NEWPID only takes	COMMENT
LOW	core/sandbox/_spawn.py	3772	# Step 4: wait for child to signal "unshare done, ready for newuidmap".	COMMENT
LOW	core/sandbox/_spawn.py	3883	# Step 6: newuidmap / newgidmap.	COMMENT
LOW	core/sandbox/_spawn.py	4285	# Step 8: tell child to proceed.	COMMENT
LOW	core/sandbox/_spawn.py	4383	# Step 15: collect output and wait. Everything from here down runs	COMMENT
LOW⚡	core/trajectories/test_store.py	358	# Step 0: initial user prompt	COMMENT
LOW⚡	core/trajectories/test_store.py	362	# Step 1: assistant's find_symbol call	COMMENT
LOW⚡	core/trajectories/test_store.py	366	# Step 2: tool result	COMMENT
LOW⚡	core/trajectories/test_store.py	369	# Step 3: terminal submission	COMMENT
LOW	.claude/commands/create-skill.md	24	### Step 1: Capture Successful Approach	COMMENT
LOW	.claude/commands/create-skill.md	36	### Step 2: Define Skill Parameters	COMMENT
LOW⚡	.claude/commands/create-skill.md	49	### Step 3: Extract Reusable Patterns	COMMENT
LOW⚡	.claude/commands/create-skill.md	57	### Step 4: Validate Token Budget	COMMENT
LOW⚡	.claude/commands/create-skill.md	65	### Step 5: Create Skill File	COMMENT
LOW	.claude/commands/create-skill.md	106	### Step 6: Test Auto-Loading	COMMENT
LOW	.claude/commands/audit.md	70	### Step 0: Choose execution mode	COMMENT
LOW	.claude/commands/audit.md	82	### Step 1: Resolve output directory	COMMENT
LOW	.claude/commands/audit.md	92	### Step 2: Context map	COMMENT
LOW	.claude/commands/audit.md	104	### Step 3: Run the orchestrator	COMMENT
LOW	.claude/commands/audit.md	116	### Step 4: Surface results	COMMENT
LOW⚡	.claude/skills/oss-forensics/github-archive/SKILL.md	308	# Step 1: dry-run estimate (validates the query, scans nothing)	COMMENT
LOW⚡	.claude/skills/oss-forensics/github-archive/SKILL.md	311	# Step 2: check the printed estimated_cost_usd against your budget	COMMENT
LOW⚡	.claude/skills/oss-forensics/github-archive/SKILL.md	314	# Step 3: execute with a bytes-billed safety cap — the job FAILS	COMMENT
LOW⚡	.claude/skills/crash-analysis/function-tracing/SKILL.md	43	### Step 1: Add to Build	COMMENT
LOW⚡	.claude/skills/crash-analysis/function-tracing/SKILL.md	50	### Step 2: Build Target (sandboxed — the build scripts are untrusted)	COMMENT
LOW⚡	.claude/skills/crash-analysis/function-tracing/SKILL.md	55	### Step 3: Run (sandboxed; the rpath resolves libtrace.so — no loader variable)	COMMENT
LOW⚡	.claude/skills/crash-analysis/function-tracing/SKILL.md	61	### Step 4: Convert to Perfetto (sandboxed — the log bytes came from the untrusted target, and the converter is native c	COMMENT
LOW	.claude/skills/audit/review.md	13	### Step 1: Understand	COMMENT
LOW	.claude/skills/audit/review.md	22	### Step 2: Hypothesize	COMMENT
LOW	.claude/skills/audit/review.md	37	### Step 3: Generate mechanical tests	COMMENT
LOW	.claude/skills/audit/review.md	84	### Step 4: Evaluate	COMMENT
LOW	.claude/skills/audit/review.md	90	### Step 5: Record the verdict	COMMENT
26 more matches not shown…

Docstring Block Structure25 hits · 125 pts

Severity	File	Line	Snippet	Context
HIGH	core/dataflow/codeql_augmented_run.py	136	Run ``codeql database analyze`` once. Args: db_path: Path to the CodeQL DB directory. queries: One	STRING
HIGH	core/llm/providers.py	1490	Convert dict schema or Pydantic model to Pydantic model class. Supports hybrid approach: - If already Pyda	STRING
HIGH	core/llm/multi_model/dispatch.py	86	Run a task across N models in parallel and merge results. Args: task: Callable that takes one model and ret	STRING
HIGH	core/llm/multi_model/prompt_helpers.py	39	Wrap prior-model output for safe inclusion in a downstream prompt. Args: content: The model's output. Strin	STRING
HIGH	core/project/export.py	223	Zip a project output directory, skipping symlinks. Args: project_output_dir: The project's output directory	STRING
HIGH	core/project/export.py	683	Import a zipped project. Validates the zip, extracts output data to output_base/<name>/, and registers the proj	STRING
HIGH	core/audit/strategy.py	386	Select review strategies for a function. Always includes ``general``. Additional strategies are added based on	STRING
HIGH	core/sandbox/calibrate.py	382	Run a fresh calibration probe and cache the result. Args: bin_path: path to the binary to probe. Resolved v	STRING
HIGH	core/inventory/lookup.py	142	Find the function containing a given file:line in the checklist. Args: checklist: Inventory dict from build	STRING
HIGH	core/run/output.py	264	Resolve the output directory for a command run. Priority: 1. explicit_out (from --out argument) — used as-is, n	STRING
HIGH	core/git/clone.py	1044	Run ``git ls-remote --heads --tags`` against ``url``. Read-only operation that returns the refs the remote advertis	STRING
HIGH	…ills/oss-forensics/github-evidence-kit/src/__init__.py	86	Load a previously serialized evidence object from JSON. Args: data: Dictionary from JSON deserializati	STRING
HIGH	packages/sca/discovery.py	277	Walk repo finding manifests + lockfiles. Args: repo: project root (absolute or relative; resolved before wa	STRING
HIGH	packages/autonomous/dialogue.py	323	Ask the LLM a strategic question about fuzzing. Examples: - "Should I continue fuzzing or stop	STRING
HIGH	packages/ghidra/headless.py	258	Create a Ghidra project by importing a raw binary. Runs ``analyzeHeadless -import`` with full auto-analysis into	STRING
HIGH	packages/ghidra/headless.py	386	Export a Ghidra project to RAPTOR's JSON format. Runs ``analyzeHeadless`` with the Java export script against the	STRING
HIGH	packages/ghidra/headless.py	510	Apply RAPTOR enrichments back to a Ghidra project. Copies the original project to output_gpr and runs ``analy	STRING
HIGH	packages/ghidra/parser.py	29	Parse a Ghidra export JSON file into an REDatabase. Args: path: Path to the JSON file produced by the expor	STRING
HIGH	packages/exploit_feasibility/smt_verbs.py	254	Check whether an arithmetic op can wrap given the visible guards. Use this when the source shows arithmetic that *l	STRING
HIGH	packages/exploit_feasibility/smt_verbs.py	415	Check whether an array index can fall outside its buffer. Use this when the source shows ``arr[index]`` (or ``memcp	STRING
HIGH	packages/exploit_feasibility/smt_verbs.py	507	Check whether a pointer can be NULL when dereferenced. Use this when the source dereferences a pointer that has pri	STRING
HIGH	packages/exploit_feasibility/smt_verbs.py	582	Check CWE-680: integer overflow leading to buffer overflow. The canonical pattern: size_t alloc_size = count	STRING
HIGH	packages/exploit_feasibility/smt_verbs.py	691	Check whether a negative value can bypass a comparison guard. The canonical CWE-839 pattern: if (msg_qbytes	STRING
HIGH	packages/exploit_feasibility/under_mitigations.py	297	Rebuild ``target_source`` under each profile, run ``witness_bytes`` against each, return the per-profile outcome	STRING
HIGH	packages/exploit_feasibility/smt_encoding.py	146	Can a forbidden byte survive the emitter's transfer unescaped? Args: transfer: The emitter's per-character	STRING

Verbosity Indicators56 hits · 99 pts

Severity	File	Line	Snippet	Context
LOW⚡	core/sarif/tests/test_import_e2e.py	232	# Step 1: parse	COMMENT
LOW⚡	core/sarif/tests/test_import_e2e.py	239	# Step 2: dedup (no dupes expected)	COMMENT
LOW⚡	core/sarif/tests/test_import_e2e.py	243	# Step 3: normalize	COMMENT
LOW	core/llm/egress.py	497	# Step 1: bring up / extend the in-process proxy. MUST happen	COMMENT
LOW⚡	core/llm/egress.py	510	# Step 2: only mutate env on the first call. Subsequent	COMMENT
LOW⚡	core/llm/egress.py	516	# Step 3: point HTTPS_PROXY at our in-process proxy so httpx-based	COMMENT
LOW	core/llm/egress.py	541	# Step 4: ensure local-loop hosts (Ollama, vLLM-localhost,	COMMENT
LOW	core/llm/config.py	850	# Step 1: preferred providers via env var (consumer's explicit	COMMENT
LOW	core/llm/config.py	867	# Step 2: operator's thinking-model config (file-based; covers	COMMENT
LOW	core/llm/config.py	922	# Step 3: default-order autodetect via env vars. Skip providers	COMMENT
LOW	core/llm/multi_model/calibrated_aggregation.py	208	# Step 1: split findings into D–S-eligible vs vote-fallback.	COMMENT
LOW	core/llm/multi_model/calibrated_aggregation.py	225	# Step 2: run D–S across all eligible records, partitioned by class.	COMMENT
LOW	core/llm/multi_model/calibrated_aggregation.py	274	# Step 3: vote fallback for everything else.	COMMENT
LOW⚡	core/security/tests/test_envelope_probe.py	328	# Step 1: probe each model	COMMENT
LOW⚡	core/security/tests/test_envelope_probe.py	342	# Step 2: select profile based on cached result	COMMENT
LOW⚡	core/security/tests/test_envelope_probe.py	346	# Step 3: verify passthrough prompt is simpler	COMMENT
LOW	core/audit/compile_probe.py	494	# Step 1: baseline — the file must compile standalone.	COMMENT
LOW	core/audit/compile_probe.py	512	# Step 2: tautology — the expression must be a compile-time	COMMENT
LOW	core/audit/compile_probe.py	528	# Step 3: the claim. Steps 1-2 green means failure here can	COMMENT
LOW⚡	core/sandbox/landlock.py	199	# Step 2: Functional self-test in a child process. Must run in a	COMMENT
LOW	core/sandbox/landlock.py	182	# Step 1: ABI probe — landlock_create_ruleset(NULL, 0, version=1).	COMMENT
LOW⚡	core/sandbox/_spawn.py	2836	# Step 5: tell parent we're ready for newuidmap.	COMMENT
LOW⚡	core/sandbox/_spawn.py	2840	# Step 7: wait for parent 'go' signal — parent has run	COMMENT
LOW⚡	core/sandbox/_spawn.py	3170	# Step 11: fresh /proc.	COMMENT
LOW⚡	core/sandbox/_spawn.py	3311	# Step 12: Landlock. AFTER the fresh-proc mount (see	COMMENT
LOW⚡	core/sandbox/_spawn.py	3320	# Step 13: seccomp (ships the unix-scope notify fd to	COMMENT
LOW	core/sandbox/_spawn.py	2748	# Step 3: create namespaces. Leaves us as "nobody" in the	COMMENT
LOW	core/sandbox/_spawn.py	2983	# Step 9: mount-ns pivot_root if target/output supplied.	COMMENT
LOW	core/sandbox/_spawn.py	3111	# Step 10: pid-ns via a second fork. NEWPID only takes	COMMENT
LOW	core/sandbox/_spawn.py	3772	# Step 4: wait for child to signal "unshare done, ready for newuidmap".	COMMENT
LOW	core/sandbox/_spawn.py	3883	# Step 6: newuidmap / newgidmap.	COMMENT
LOW	core/sandbox/_spawn.py	4285	# Step 8: tell child to proceed.	COMMENT
LOW	core/sandbox/_spawn.py	4383	# Step 15: collect output and wait. Everything from here down runs	COMMENT
LOW⚡	core/trajectories/test_store.py	358	# Step 0: initial user prompt	COMMENT
LOW⚡	core/trajectories/test_store.py	362	# Step 1: assistant's find_symbol call	COMMENT
LOW⚡	core/trajectories/test_store.py	366	# Step 2: tool result	COMMENT
LOW⚡	core/trajectories/test_store.py	369	# Step 3: terminal submission	COMMENT
LOW⚡	packages/binary_analysis/tests/test_blamed_lines.py	19	### Step 1: Allocation	COMMENT
LOW⚡	packages/binary_analysis/tests/test_blamed_lines.py	22	### Step 2: Overwrite	COMMENT
LOW⚡	packages/binary_analysis/tests/test_blamed_lines.py	25	### Step 3: Crash (repeat of step 1 file)	COMMENT
LOW⚡	packages/binary_analysis/tests/test_blamed_lines.py	28	### Step 4: Helper	COMMENT
LOW⚡	packages/binary_analysis/tests/test_blamed_lines.py	289	"discussion here.\n\n### Step 5: Conclusion\n"	CODE
LOW⚡	packages/exploitation/bootstrap.py	161	# Step 2: Pick the best matching run	COMMENT
LOW⚡	packages/exploitation/bootstrap.py	168	# Step 3: Validate schema	COMMENT
LOW⚡	packages/exploitation/bootstrap.py	177	# Step 4: Extract matching findings	COMMENT
LOW⚡	packages/exploitation/bootstrap.py	188	# Step 5: Check source freshness	COMMENT
LOW⚡	packages/exploitation/bootstrap.py	195	# Step 6: Check for feasibility data	COMMENT
LOW⚡	packages/exploitation/bootstrap.py	201	# Step 7: Determine status	COMMENT
LOW	packages/exploitation/bootstrap.py	150	# Step 1: Find validation runs	COMMENT
LOW⚡	…ges/code_understanding/dispatch/hunt_cocci_dispatch.py	436	# Step 1: translate the pattern into a cocci rule via 1 LLM call.	COMMENT
LOW⚡	…ges/code_understanding/dispatch/hunt_cocci_dispatch.py	483	# Step 2: write the rule to a temp file and hand it to spatch.	COMMENT
LOW⚡	packages/llm_analysis/intent_match.py	579	# Step 1: describe what the exploit does. Prompt CONSTRUCTION is	COMMENT
LOW⚡	packages/llm_analysis/intent_match.py	633	# Step 2: judge whether description matches finding. Same	COMMENT
LOW⚡	packages/llm_analysis/dataflow_validation.py	2102	# Step 1: full-path suffix match on a component boundary (preferred)	COMMENT
LOW⚡	packages/llm_analysis/dataflow_validation.py	2106	# Step 2: basename fallback (deliberate trade-off — see caller)	COMMENT
LOW	packages/codeql/autonomous_analyzer.py	731	# Step 1: cheap-tier prefilter. Asks a small model "is this	COMMENT

AI Structural Patterns118 hits · 80 pts

Severity	File	Line	Context
LOW	core/dataflow/barrier_synth.py	737	CODE
LOW	core/dataflow/cvefix_bridge.py	417	CODE
LOW	core/dataflow/cvefix_bridge.py	602	CODE
LOW	core/dataflow/cvefix_walk.py	534	CODE
LOW	core/llm/ranking.py	491	CODE
LOW	core/llm/tool_use/loop.py	207	CODE
LOW	core/llm/cwe_strategies/picker.py	234	CODE
LOW	core/llm/scorecard/scorecard.py	644	CODE
LOW	core/analysis/peer_groups.py	227	CODE
LOW	core/analysis/summaries.py	315	CODE
LOW	core/analysis/tests/test_value_set_java.py	169	CODE
LOW	core/evidence/__init__.py	806	CODE
LOW	core/taint/tests/test_emission.py	140	CODE
LOW	core/taint/tests/test_emission.py	153	CODE
LOW	core/taint/tests/test_emission_hostile.py	82	CODE
LOW	core/iris/refine.py	95	CODE
LOW	core/labeled_attempts/test_retrieval.py	54	CODE
LOW	core/recall/tests/test_flip_gate.py	22	CODE
LOW	core/engagement/supervise.py	786	CODE
LOW	core/container/containers.py	269	CODE
LOW	core/audit/prefilter.py	426	CODE
LOW	core/audit/strategy.py	368	CODE
LOW	core/audit/strategy.py	514	CODE
LOW	core/audit/priority.py	120	CODE
LOW	core/audit/llm_review.py	1261	CODE
LOW	core/audit/triage.py	131	CODE
LOW	core/audit/triage.py	404	CODE
LOW	core/audit/environment.py	561	CODE
LOW	core/audit/sweep.py	4743	CODE
LOW	core/audit/gaps.py	187	CODE
LOW	core/audit/gaps.py	2330	CODE
LOW	core/audit/gaps.py	2842	CODE
LOW	core/audit/gaps.py	3000	CODE
LOW	core/audit/gaps.py	3727	CODE
LOW	core/audit/consistency_prepass.py	363	CODE
LOW	core/audit/decompiler_sanitise.py	109	CODE
LOW	core/audit/refutation.py	2270	CODE
LOW	core/audit/executor.py	248	CODE
LOW	core/audit/executor.py	593	CODE
LOW	core/audit/executor.py	669	CODE
LOW	core/audit/executor.py	1525	CODE
LOW	core/audit/executor.py	1580	CODE
LOW	core/audit/corpus/run_corpus.py	917	CODE
LOW	core/audit/corpus/run_corpus.py	1439	CODE
LOW	core/audit/corpus/run_corpus.py	2741	CODE
LOW	core/audit/corpus/tests/test_rule_eval.py	44	CODE
LOW	core/audit/corpus/tests/test_run_corpus.py	2438	CODE
LOW	core/audit/tests/test_findings.py	259	CODE
LOW	core/audit/tests/test_decomp_sweep.py	452	CODE
LOW	core/sandbox/mount_ns.py	1127	CODE
LOW	core/sandbox/telemetry_mac.py	562	CODE
LOW	core/sandbox/seatbelt_audit.py	505	CODE
LOW	core/sandbox/proxy.py	1606	CODE
LOW	core/sandbox/seatbelt.py	238	CODE
LOW	core/sandbox/_landlock_audit.py	420	CODE
LOW	core/sandbox/observe.py	322	CODE
LOW	core/sandbox/context.py	1387	CODE
LOW	core/sandbox/context.py	8765	CODE
LOW	core/sandbox/context.py	10010	CODE
LOW	core/sandbox/_spawn.py	1455	CODE
58 more matches not shown…

Redundant / Tautological Comments53 hits · 70 pts

Severity	File	Line	Snippet	Context
LOW⚡	raptor_agentic.py	3864	# Check if we have any findings from source-code scanners.	COMMENT
LOW	raptor_agentic.py	4511	# Check if validation produced enriched findings	COMMENT
LOW	raptor_codeql.py	190	# Check if we should do autonomous analysis	COMMENT
LOW	core/llm/detection.py	405	# Check if any keys need attention	COMMENT
LOW	core/llm/detection.py	875	# Check if model has a key	COMMENT
LOW	core/llm/config.py	1413	# Check if any model has a role set	COMMENT
LOW	core/llm/client.py	3544	# Check if last error was quota-related	COMMENT
LOW	core/llm/providers.py	1515	# Check if already a Pydantic model class	COMMENT
LOW	core/license/detector.py	758	# Read the file ONCE — classify_text AND extract refs	COMMENT
LOW	core/audit/dispatch_completeness.py	126	# Check if at least one value looks callable: a bare Name, an	COMMENT
LOW	core/audit/ts_extract.py	1275	# Check if enclosing function signals truncation	COMMENT
LOW	core/audit/attacker_synthesis.py	577	# Check if the overall chain matches a known high-impact combination.	COMMENT
LOW⚡	core/audit/condition_extraction_python.py	190	# Check if target is in the if-body	COMMENT
LOW⚡	core/audit/condition_extraction_python.py	196	# Check if target is in the else-body	COMMENT
LOW	core/audit/condition_adequacy.py	418	# Check if present guards are all irrelevant	COMMENT
LOW	core/audit/pattern_completeness.py	206	# Check if ANY synonym is also handled in this file.	COMMENT
LOW	core/audit/pattern_completeness.py	272	# Check if the sibling is handled ANYWHERE in this file.	COMMENT
LOW	core/audit/pattern_completeness.py	296	# Check if sibling is ALSO in an exclusion context.	COMMENT
LOW⚡	core/audit/condition_extraction.py	480	# Check if this is a statement-type node that could be consequence	COMMENT
LOW⚡	core/audit/condition_extraction.py	490	# Check if sink is in consequence	COMMENT
LOW⚡	core/audit/condition_extraction.py	495	# Check if sink is in alternative	COMMENT
LOW⚡	core/audit/condition_extraction.py	505	# Check if consequence is just an exit or contains only exits	COMMENT
LOW	core/audit/condition_extraction.py	642	# Check if its body is exit-only (guard clause pattern)	COMMENT
LOW	core/audit/refutation.py	1195	# Check if any known-bounded function appears in the hypothesis.	COMMENT
LOW	core/http/tests/test_egress_backend.py	111	# Set no_proxy to its most aggressive form before constructing.	COMMENT
LOW	packages/binary_analysis/crash_analyser.py	1419	# Check if binary has stack canaries via symbol table (not objdump -d	COMMENT
LOW	packages/binary_analysis/crash_analyser.py	1532	# Check if address is in typical memory regions	COMMENT
LOW	packages/fuzzing/afl_runner.py	726	# Check if we're on macOS	COMMENT
LOW	packages/fuzzing/afl_runner.py	1172	# Check if all instances are still running	COMMENT
LOW	packages/fuzzing/afl_runner.py	340	if not self.binary.stat().st_mode & 0o111: # Check if executable	CODE
LOW	packages/web/checks/cache.py	161	# Check if the response contains profile/account data	COMMENT
LOW	packages/web/checks/tls.py	19	# Check if HTTP version redirects	COMMENT
LOW	packages/sca/transitive.py	213	# Check if this entry is itself a workspace root with a lockfile	COMMENT
LOW	packages/codeql/database_manager.py	802	# Check if database is valid	COMMENT
LOW	packages/codeql/dataflow_validator.py	595	# Check if this is a path-problem (dataflow)	COMMENT
LOW	packages/autonomous/dialogue.py	706	# Check if we've seen this pattern before	COMMENT
LOW	packages/autonomous/goal_planner.py	207	# Check if crash type matches goal	COMMENT
LOW	packages/autonomous/goal_planner.py	214	# Check if crash is in target code area	COMMENT
LOW	packages/exploit_feasibility/strategies.py	542	# Check if disabled via boot param	COMMENT
LOW	packages/exploit_feasibility/graph.py	338	# Check if goal reached	COMMENT
LOW	packages/exploit_feasibility/graph.py	344	# Check if we can reach the goal with current capabilities	COMMENT
LOW	packages/exploit_feasibility/analyzer.py	255	# Check if blocked by RELRO	COMMENT
LOW	packages/exploit_feasibility/analyzer.py	2143	# Check if PT_GNU_STACK is actually present	STRING
LOW	packages/exploit_feasibility/analyzer.py	2290	# Check if RWE (read-write-execute) - means NX disabled	STRING
LOW	packages/exploit_feasibility/analyzer.py	4258	# Check if size is on this line (old format) or next line (new format)	STRING
LOW	packages/exploit_feasibility/analyzer.py	4908	# Check if stack pivot is possible based on ROP gadgets	STRING
LOW	packages/exploit_feasibility/api.py	75	# Check if it's a web vulnerability	COMMENT
LOW	packages/exploit_feasibility/api.py	2204	# Check if format string write is actually available (verified %n working)	COMMENT
LOW	packages/exploit_feasibility/api.py	2492	# Check if write_count supports necessary multi-writes	COMMENT
LOW	packages/exploit_feasibility/api.py	2602	# Check if we can actually build ROP	COMMENT
LOW	packages/exploitability_validation/orchestrator.py	560	# Check if we should skip remaining stages	COMMENT
LOW	packages/exploitability_validation/orchestrator.py	1217	# Check if we have any "not_disproven" findings that need Stage B	COMMENT
LOW	packages/exploitability_validation/orchestrator.py	1652	# Check if any findings need feasibility analysis.	COMMENT

Self-Referential Comments19 hits · 68 pts

Severity	File	Line	Snippet	Context
MEDIUM	core/llm/tests/test_llm_callbacks.py	93	# Create a mock AuthenticationError	COMMENT
MEDIUM⚡	core/hash/tests/test_hash.py	102	# Create a small file	COMMENT
MEDIUM⚡	core/hash/tests/test_hash.py	107	# Create a large file (simulate by setting very small limit)	COMMENT
MEDIUM⚡	core/hash/tests/test_hash.py	170	# Create a file that will be skipped	COMMENT
MEDIUM	core/security/_dangerous_env_strip.sh	17	# This file is SOURCED, not executed. It declares the canonical set of	COMMENT
MEDIUM	core/project/tests/test_add.py	98	# Create a subdirectory with just the runs	COMMENT
MEDIUM	core/sandbox/tests/test_spawn_mount_ns.py	469	# Create the overlay source file in our temp dir.	COMMENT
MEDIUM	core/sandbox/tests/test_sandbox_attack_scenarios.py	738	# Create a real dir with a secret file, a symlink to it.	COMMENT
MEDIUM⚡	core/sandbox/tests/test_e2e_sandbox.py	249	# Create a symlink inside output pointing outside every grant	COMMENT
MEDIUM	core/sandbox/tests/test_observe_profile.py	562	# Create the real (would-be-spoofed) data somewhere else.	COMMENT
MEDIUM	core/inventory/tests/test_shared_checklist.py	214	# Create the project JSON and .active symlink in the	COMMENT
MEDIUM	core/inventory/tests/test_shared_checklist.py	298	# Create a symlink (not a real file) — should be skipped	COMMENT
MEDIUM⚡	core/orchestration/tests/test_understand_bridge.py	1930	# Create a target dir so on-disk hashing works	COMMENT
MEDIUM⚡	packages/sca/tests/test_verify.py	262	# Create a node_modules dir we don't want copied (would be huge in real life).	COMMENT
MEDIUM	packages/openant/tests/test_phase1b_integration.py	151	# Create a minimal SARIF file	COMMENT
MEDIUM⚡	packages/exploit_feasibility/analyzer.py	192	# This module provides FeasibilityReport and FeasibilityAnalyzer classes.	COMMENT
MEDIUM⚡	…ges/exploitability_validation/tests/test_validation.py	1677	# Create a minimal SARIF file	STRING
MEDIUM⚡	.github/tests/test_release_workflow.sh	307	# Create an off-main tag	COMMENT
MEDIUM	.github/tests/test_ci_controls_docs.py	526	# Creating a workflow_dispatch event is the actions scope's	COMMENT

Fake / Example Data48 hits · 50 pts

Severity	File	Line	Snippet	Context
LOW	core/dataflow/tests/test_barrier_synth.py	282	monkeypatch.setenv("ANTHROPIC_API_KEY", "test-fake-key")	CODE
LOW	core/llm/dispatcher/tests/test_lifecycle.py	29	creds._keys = {"anthropic": "fake-key", "openai": None, "gemini": None}	CODE
LOW	…re/llm/dispatcher/tests/test_inproc_scratch_cleanup.py	36	creds._keys = {"anthropic": "fake-key", "openai": None, "gemini": None}	CODE
LOW⚡	core/llm/tests/test_pinned_model.py	62	monkeypatch.setenv("ANTHROPIC_API_KEY", "test-fake-key")	CODE
LOW⚡	core/llm/tests/test_pinned_model.py	72	monkeypatch.setenv("ANTHROPIC_API_KEY", "test-fake-key")	CODE
LOW⚡	core/llm/tests/test_pinned_model.py	84	monkeypatch.setenv(v, "test-fake-key")	CODE
LOW⚡	core/llm/tests/test_pinned_model.py	141	monkeypatch.setenv("ANTHROPIC_API_KEY", "test-fake-key")	CODE
LOW⚡	core/llm/tests/test_pinned_model.py	157	monkeypatch.setenv("ANTHROPIC_API_KEY", "test-fake-key")	CODE
LOW⚡	core/llm/tests/test_pinned_model.py	229	"api_key": "test-fake-key"},	CODE
LOW	core/llm/tests/test_pinned_model.py	177	api_key="test-fake-key", max_tokens=max_tokens,	CODE
LOW	core/llm/tests/test_pinned_model.py	240	assert cfg.primary_model.api_key == "test-fake-key"	CODE
LOW	core/llm/tests/test_instructor_refusal.py	74	api_key="dummy-key-for-tests",	CODE
LOW	core/llm/tests/test_bedrock_live_features.py	337	("Lorem ipsum dolor sit amet, consectetur adipiscing elit, "	CODE
LOW	core/llm/tests/test_bedrock_live_features.py	337	("Lorem ipsum dolor sit amet, consectetur adipiscing elit, "	CODE
LOW	core/recall/tests/test_cvefix_manifest.py	53	env = ["-c", "user.email=t@example.org", "-c", "user.name=t"]	STRING
LOW	core/recall/tests/test_cvefix_manifest.py	191	env = ["-c", "user.email=t@example.org", "-c", "user.name=t"]	STRING
LOW	core/recall/tests/test_cvefix_manifest.py	209	env = ["-c", "user.email=t@example.org", "-c", "user.name=t"]	STRING
LOW	core/recall/tests/test_cvefix_manifest.py	265	env = ["-c", "user.email=t@example.org", "-c", "user.name=t"]	STRING
LOW	core/recall/tests/test_pinned_clone.py	28	env = ["-c", "user.email=t@example.org", "-c", "user.name=t"]	CODE
LOW	core/recall/tests/test_juliet_manifest.py	447	["git", "-C", str(clone), "-c", "user.email=t@example.org",	CODE
LOW	core/recall/tests/test_juliet_manifest.py	89	["git", "-C", str(clone), "-c", "user.email=t@example.org",	STRING
LOW	core/recall/tests/test_juliet_manifest.py	198	["git", "-C", str(clone), "-c", "user.email=t@example.org",	STRING
LOW	core/recall/tests/test_juliet_manifest.py	365	["git", "-C", str(clone), "-c", "user.email=t@example.org",	STRING
LOW⚡	core/audit/tests/test_e2e_block_sink.py	156	ctx = {"source": "placeholder"}	CODE
LOW⚡	core/audit/tests/test_e2e_block_sink.py	173	ctx = {"source": "placeholder"}	CODE
LOW⚡	core/audit/tests/test_e2e_block_sink.py	190	ctx = {"source": "placeholder"}	CODE
LOW⚡	core/audit/tests/test_e2e_block_sink.py	219	ctx = {"source": "placeholder"}	CODE
LOW	core/audit/tests/test_e2e_block_sink.py	398	ctx = {"source": "placeholder"}	CODE
LOW⚡	core/run/tests/test_provenance.py	909	return_value={"name": "Jane Doe", "handle": "@jane"}):	CODE
LOW⚡	core/run/tests/test_provenance.py	911	self.assertEqual(m["who"], {"name": "Jane Doe", "handle": "@jane"})	CODE
LOW⚡	core/run/tests/test_identity.py	21	p = self._write(d, {"name": "Jane Doe", "handle": "@jane",	CODE
LOW⚡	core/run/tests/test_identity.py	25	{"name": "Jane Doe", "handle": "@jane", "url": "https://x"})	CODE
LOW	…s/github-evidence-kit/tests/test_gharchive_recovery.py	240	"author": {"name": "n", "email": "e@example.org"}},	CODE
LOW⚡	…thub-evidence-kit/tests/test_url_canonical_identity.py	140	author={"name": "a", "email": "a@example.org",	CODE
LOW⚡	…thub-evidence-kit/tests/test_url_canonical_identity.py	142	committer={"name": "a", "email": "a@example.org",	CODE
LOW	…ges/code_understanding/tests/test_understand_resume.py	70	api_key="fake-key-for-test",	CODE
LOW	…ode_understanding/tests/test_libexec_trajectory_e2e.py	114	api_key="fake-key-for-test",	CODE
LOW⚡	…ckages/code_understanding/tests/dispatch/test_tools.py	562	(d / "x.c").write_text("placeholder")	CODE
LOW	packages/sca/llm/tests/test_registry_view.py	30	{"name": "alice", "email": "alice@example.org"},	CODE
LOW	packages/sca/llm/tests/test_registry_view.py	45	"maintainers": [{"name": "alice", "email": "alice@example.org"}],	CODE
LOW	packages/sca/llm/tests/test_registry_view.py	52	{"name": "alice", "email": "alice@example.org"},	CODE
LOW	packages/sca/llm/tests/test_registry_view.py	67	"author_email": "alice@example.org",	CODE
LOW⚡	packages/sca/llm/tests/test_registry_view.py	206	{"name": "alice", "email": "alice@example.org"},	CODE
LOW⚡	packages/sca/llm/tests/test_registry_view.py	223	{"name": "b", "email": "b@example.org"},	CODE
LOW	…kages/sca/supply_chain/tests/test_registry_metadata.py	421	assert lbf[0].evidence["sole_maintainer"] == "Acme Corp", (	CODE
LOW	…kages/sca/supply_chain/tests/test_registry_metadata.py	1181	{"name": "real-person", "email": "p@example.org"},	CODE
LOW⚡	packages/cve_env/tests/unit/test_dockerfile_hygiene.py	109	text = 'FROM alpine:3.19\nLABEL maintainer="user@example.com"\n'	CODE
LOW	.github/tests/test_release_workflow.sh	86	git config user.email "test@test.com"	CODE

Overly Generic Function Names61 hits · 50 pts

Severity	File	Line	Snippet	Context
LOW	core/dataflow/tests/test_injection_prescreen.py	746	" def helper():\n"	CODE
LOW	core/dataflow/tests/test_smt_barrier.py	566	"def helper(x):\n"	CODE
LOW	core/dataflow/tests/test_smt_barrier.py	1069	" def helper():\n"	CODE
LOW	…ema_constants/tests/test_validate_schema_cache_type.py	108	def helper():	CODE
LOW	core/llm/http_pool.py	1306	def handle_request(self, request: httpx.Request) -> httpx.Response:	CODE
LOW	core/llm/tests/test_http_pool.py	1495	def handle_request(self, request):	CODE
LOW⚡	core/analysis/tests/test_interproc.py	227	"def helper(a, b):\n"	CODE
LOW⚡	core/analysis/tests/test_interproc.py	242	"def helper(a, b):\n"	CODE
LOW⚡	core/analysis/tests/test_interproc.py	379	"def helper(a, b):\n"	CODE
LOW	core/analysis/tests/test_interproc.py	646	"def helper(a, *rest, key=''):\n"	CODE
LOW	core/analysis/tests/test_interproc.py	660	"def helper(a, *rest, key=''):\n"	CODE
LOW	core/analysis/tests/test_interproc.py	698	"def helper(a='', *rest):\n"	CODE
LOW⚡	core/analysis/tests/test_reachability_closure.py	298	"def helper():\n"	CODE
LOW⚡	core/analysis/tests/test_reachability.py	395	"def helper(): pass\n"	CODE
LOW⚡	core/analysis/tests/test_reachability.py	1184	"from mymod import *\ndef helper():\n pass\nhelper()\n",	CODE
LOW⚡	core/analysis/tests/test_reachability.py	1213	"def helper():\n return 1\ndef entry():\n helper()\n",	CODE
LOW⚡	core/analysis/tests/test_reachability.py	1222	"def helper():\n return 1\ndef entry():\n helper()\n",	CODE
LOW	core/analysis/tests/test_reachability.py	429	"def helper(): pass\n"	CODE
LOW⚡	core/analysis/tests/test_package_callgraph.py	605	_record_for("pkg/utils.py", "def helper():\n return 'real'\n"),	CODE
LOW⚡	core/analysis/tests/test_package_callgraph.py	610	" def helper():\n"	CODE
LOW⚡	core/analysis/tests/test_package_callgraph.py	633	"def helper():\n return 'module'\n"	CODE
LOW⚡	core/analysis/tests/test_package_callgraph.py	635	" def helper():\n"	CODE
LOW⚡	core/analysis/tests/test_package_callgraph.py	650	" def helper():\n"	CODE
LOW⚡	core/analysis/tests/test_python_module_callgraph.py	92	"def helper(x): return x\n"	CODE
LOW⚡	core/analysis/tests/test_python_module_callgraph.py	99	"def helper(): pass\n"	CODE
LOW⚡	core/analysis/tests/test_python_module_callgraph.py	263	" def helper(): pass\n"	CODE
LOW	core/analysis/tests/test_taint_multi_lang.py	125	function handleRequest(userInput, res) {	CODE
LOW⚡	core/analysis/tests/test_reachability_adjacency.py	157	"def helper():\n"	CODE
LOW⚡	core/analysis/tests/test_reachability_adjacency.py	338	"def helper():\n"	CODE
LOW⚡	core/analysis/tests/test_reachability_adjacency.py	384	"def helper():\n"	CODE
LOW⚡	core/analysis/tests/test_reachability_adjacency.py	441	"def helper():\n" # line 1	CODE
LOW⚡	core/analysis/tests/test_reachability_adjacency.py	442	" def helper():\n" # line 2 — nested redefinition	CODE
LOW⚡	core/analysis/tests/test_reachability_adjacency.py	940	"def helper():\n"	CODE
LOW⚡	core/analysis/tests/test_reachability_adjacency.py	1118	"def helper():\n"	CODE
LOW	core/analysis/tests/test_reachability_adjacency.py	1376	"def helper(x):\n"	CODE
LOW⚡	core/analysis/tests/test_reachability_evidence.py	58	"def helper():\n"	CODE
LOW	core/analysis/tests/test_sanitizer_cut_value_bound.py	769	" def helper():\n"	CODE
LOW⚡	core/analysis/tests/test_taint_summaries.py	204	"def helper(s):\n"	CODE
LOW⚡	core/analysis/tests/test_taint_summaries.py	430	"def helper(v):\n"	CODE
LOW	core/analysis/tests/test_taint_summaries.py	238	"def helper(a, b):\n"	CODE
LOW	core/analysis/tests/test_taint_summaries.py	819	"def helper(a, *rest, key=''):\n"	CODE
LOW	core/taint/tests/test_engine.py	696	" def helper(self, x):\n"	CODE
LOW	core/taint/tests/test_summaries.py	149	def helper(x):	CODE
LOW	core/audit/tests/test_test_discovery.py	109	source = "def helper():\n pass\n"	CODE
LOW	core/audit/tests/test_findings_attribution.py	280	"def helper():\n"	CODE
LOW⚡	core/inventory/tests/test_inventory.py	396	(src / "utils.py").write_text("def helper(x):\n return x\n")	CODE
LOW	core/inventory/tests/test_inventory.py	244	code = "function handleRequest(req, res) {\n}\n"	CODE
LOW	core/inventory/tests/test_inventory.py	325	def test_function(self):	CODE
LOW	core/inventory/tests/test_extractors.py	95	code = "def helper(): pass"	CODE
LOW	core/orchestration/tests/test_reachability_prepass.py	387	"def helper(): pass\n"	CODE
LOW	core/orchestration/tests/test_context_map_callgraph.py	176	"def helper():\n"	CODE
LOW	…orchestration/tests/test_agentic_passes_integration.py	66	"def handle_request(req):\n return req.body\n"	CODE
LOW	…re/orchestration/tests/test_reachability_enrichment.py	612	"def helper(cmd):\n"	CODE
LOW	…ts/test_validation_helper_inventory_mismatch_stderr.py	51	def helper():	CODE
LOW	core/run/tests/test_validation_helper_parts_fid_gate.py	58	def helper():	CODE
LOW	core/run/tests/test_validation_helper_parts.py	37	def helper():	CODE
LOW	packages/binary_analysis/tests/test_gdb_injection.py	438	(repo / "lib" / "utils.py").write_text("def helper():\n pass\n")	CODE
LOW⚡	…kages/sca/reachability/tests/test_host_reachability.py	83	"def helper():\n" # line 1	CODE
LOW	…tability_validation/tests/test_witness_helper_floor.py	41	def helper():	CODE
LOW	…loitability_validation/tests/test_stage_e_env_build.py	37	def helper():	CODE
1 more matches not shown…

Synthetic Comment Markers2 hits · 16 pts

Severity	File	Line	Snippet	Context
HIGH	core/audit/tests/test_vendored_detector.py	48	" * This code was generated with the following revisions:\n"	CODE
HIGH⚡	packages/joern/tests/test_heap_ledger.py	88	# granted as requested, not raised to it.	COMMENT

Slop Phrases6 hits · 12 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	core/llm/tool_use/tests/test_fallback.py	234	"Let me know if you need anything else."	CODE
MEDIUM⚡	core/json/tests/test_tolerant.py	675	+ self._ARRAY + "\n\nLet me know if you need more.")	CODE
LOW⚡	packages/sca/parsers/tests/test_inline_installs.py	863	"# don't forget to pip install requests before running\n",	CODE
LOW⚡	packages/sca/parsers/tests/test_inline_installs.py	863	"# don't forget to pip install requests before running\n",	CODE
MEDIUM⚡	packages/cve_env/tests/unit/test_refusals.py	345	"I'm unable to comply with this.",	CODE
MEDIUM	packages/cve_env/tests/unit/test_refusals.py	35	"I'm unable to comply with this.",	CODE

Example Usage Blocks2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	core/progress/__init__.py	526	# Example usage:	COMMENT
LOW	core/sandbox/scripts/feature-matrix/run-matrix.sh	9	# Usage:	COMMENT

Dead Code1 hit · 2 pts

Severity	File	Line	Snippet	Context
MEDIUM	core/llm/dispatcher/tests/test_upstream_stale_retry.py	441		CODE

Maintenance and Governance Review

Risk Review · v3

What These Metrics Mean

Pattern-Signal History

Severity Breakdown

Directory Score Breakdown

Pattern Findings