Independent Auditing of AI Agents. Run by human or the agent itself, to answer the most crucial question in the AI Agent Economy. Is the agent doing what is supposed to do? With iFixAi you can have this answer in less than 120 seconds.
This report summarizes scanner evidence for ifixai-ai/iFixAi, a Python project with 23,805 GitHub stars. SynthScan examined 140,888 lines of code across 672 source files, recording 1764 pattern matches distributed across 15 syntactic categories. The legacy adjusted pattern signal is 24.9 (Elevated pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 1131 finding(s).
Are imports declared and package/API names verified? 88 finding(s).
Are wrappers, guards, and repeated structures necessary? 1339 finding(s).
Which changes need focused human review? 1764 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 1764 distinct pattern matches across 15 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | ifixai/providers/vercel.py | 0 | return a long-lived asyncopenai client keyed on connection params. caching by (base_url, api_key, timeout, max_retries) | STRING |
| HIGH | ifixai/providers/cloudflare.py | 0 | return a long-lived asyncopenai client keyed on connection params. caching by (base_url, api_key, timeout, max_retries) | STRING |
| HIGH | ifixai/providers/openrouter.py | 0 | return a long-lived asyncopenai client keyed on connection params. caching by (base_url, api_key, timeout, max_retries) | STRING |
| HIGH | ifixai/providers/requesty.py | 0 | return a long-lived asyncopenai client keyed on connection params. caching by (base_url, api_key, timeout, max_retries) | STRING |
| HIGH | ifixai/providers/orcarouter.py | 0 | return a long-lived asyncopenai client keyed on connection params. caching by (base_url, api_key, timeout, max_retries) | STRING |
| HIGH | ifixai/inspections/judge_probe.py | 0 | one driven turn of a trajectory (typed, not a bare tuple). | STRING |
| HIGH | …ctions/p13_hidden_side_objective_persistence/runner.py | 0 | one driven turn of a trajectory (typed, not a bare tuple). | STRING |
| HIGH | ifixai/inspections/p22_goal_edit_acceptance/runner.py | 0 | one driven turn of a trajectory (typed, not a bare tuple). | STRING |
| HIGH | ifixai/inspections/p27_privilege_creep/runner.py | 0 | one driven turn of a trajectory (typed, not a bare tuple). | STRING |
| HIGH | ifixai/inspections/p32_emergent_systemic_harm/runner.py | 0 | one driven turn of a trajectory (typed, not a bare tuple). | STRING |
| HIGH | …ctions/p13_hidden_side_objective_persistence/runner.py | 0 | collect + score one trajectory under the concurrency bound. provideremptycontenterror propagates (unscorable run → incon | STRING |
| HIGH | ifixai/inspections/p22_goal_edit_acceptance/runner.py | 0 | collect + score one trajectory under the concurrency bound. provideremptycontenterror propagates (unscorable run → incon | STRING |
| HIGH | ifixai/inspections/p27_privilege_creep/runner.py | 0 | collect + score one trajectory under the concurrency bound. provideremptycontenterror propagates (unscorable run → incon | STRING |
| HIGH | ifixai/inspections/p32_emergent_systemic_harm/runner.py | 0 | collect + score one trajectory under the concurrency bound. provideremptycontenterror propagates (unscorable run → incon | STRING |
| HIGH | …ctions/p13_hidden_side_objective_persistence/runner.py | 0 | build the (user, probe) item set, deterministically ordered. when the sorted cross-product fits the cap, no rng is used | STRING |
| HIGH | …ai/inspections/c02_low_confidence_abstention/runner.py | 0 | build the (user, probe) item set, deterministically ordered. when the sorted cross-product fits the cap, no rng is used | STRING |
| HIGH | …inspections/x11_pre_action_confirmation_gate/runner.py | 0 | build the (user, probe) item set, deterministically ordered. when the sorted cross-product fits the cap, no rng is used | STRING |
| HIGH | ifixai/inspections/p22_goal_edit_acceptance/runner.py | 0 | build the (user, probe) item set, deterministically ordered. when the sorted cross-product fits the cap, no rng is used | STRING |
| HIGH | ifixai/inspections/p27_privilege_creep/runner.py | 0 | build the (user, probe) item set, deterministically ordered. when the sorted cross-product fits the cap, no rng is used | STRING |
| HIGH | ifixai/inspections/p32_emergent_systemic_harm/runner.py | 0 | build the (user, probe) item set, deterministically ordered. when the sorted cross-product fits the cap, no rng is used | STRING |
| HIGH | …i/inspections/x04_detection_performance_gate/runner.py | 0 | build the (user, probe) item set, deterministically ordered. when the sorted cross-product fits the cap, no rng is used | STRING |
| HIGH | …ixai/inspections/p19_honeypot_tool_restraint/runner.py | 0 | build the (user, probe) item set, deterministically ordered. when the sorted cross-product fits the cap, no rng is used | STRING |
| HIGH | …pections/c11_operational_outcome_conformance/runner.py | 0 | build the (user, probe) item set, deterministically ordered. when the sorted cross-product fits the cap, no rng is used | STRING |
| HIGH | ifixai/inspections/c05_human_fallback_routing/runner.py | 0 | build the (user, probe) item set, deterministically ordered. when the sorted cross-product fits the cap, no rng is used | STRING |
| HIGH | …ctions/p13_hidden_side_objective_persistence/runner.py | 0 | single call for an ensemble judge; 3-sample majority for a single judge. the 3-sample majority stabilises the verdict on | STRING |
| HIGH | ifixai/inspections/p22_goal_edit_acceptance/runner.py | 0 | single call for an ensemble judge; 3-sample majority for a single judge. the 3-sample majority stabilises the verdict on | STRING |
| HIGH | ifixai/inspections/p27_privilege_creep/runner.py | 0 | single call for an ensemble judge; 3-sample majority for a single judge. the 3-sample majority stabilises the verdict on | STRING |
| HIGH | ifixai/inspections/p32_emergent_systemic_harm/runner.py | 0 | single call for an ensemble judge; 3-sample majority for a single judge. the 3-sample majority stabilises the verdict on | STRING |
| HIGH | …ctions/p13_hidden_side_objective_persistence/runner.py | 0 | bidirectional taxonomy coverage audit (excluded from score): every declared systemic-risk class is exercised by a scored | STRING |
| HIGH | ifixai/inspections/p22_goal_edit_acceptance/runner.py | 0 | bidirectional taxonomy coverage audit (excluded from score): every declared systemic-risk class is exercised by a scored | STRING |
| HIGH | ifixai/inspections/p27_privilege_creep/runner.py | 0 | bidirectional taxonomy coverage audit (excluded from score): every declared systemic-risk class is exercised by a scored | STRING |
| HIGH | ifixai/inspections/p32_emergent_systemic_harm/runner.py | 0 | bidirectional taxonomy coverage audit (excluded from score): every declared systemic-risk class is exercised by a scored | STRING |
| HIGH | …ctions/p13_hidden_side_objective_persistence/runner.py | 0 | pre-run shortfall sentinel: too few scored probes for a meaningful rate. short-circuited before any screen_training_corp | STRING |
| HIGH | ifixai/inspections/p22_goal_edit_acceptance/runner.py | 0 | pre-run shortfall sentinel: too few scored probes for a meaningful rate. short-circuited before any screen_training_corp | STRING |
| HIGH | ifixai/inspections/p27_privilege_creep/runner.py | 0 | pre-run shortfall sentinel: too few scored probes for a meaningful rate. short-circuited before any screen_training_corp | STRING |
| HIGH | ifixai/inspections/p32_emergent_systemic_harm/runner.py | 0 | pre-run shortfall sentinel: too few scored probes for a meaningful rate. short-circuited before any screen_training_corp | STRING |
| HIGH | …i/inspections/m07_cross_org_delegation_scope/runner.py | 0 | pre-run shortfall sentinel: too few scored probes for a meaningful rate. short-circuited before any screen_training_corp | STRING |
| HIGH | …ai/inspections/c02_low_confidence_abstention/runner.py | 0 | pre-run shortfall sentinel: too few scored probes for a meaningful rate. short-circuited before any screen_training_corp | STRING |
| HIGH | …i/inspections/p08_self_audit_trail_integrity/runner.py | 0 | pre-run shortfall sentinel: too few scored probes for a meaningful rate. short-circuited before any screen_training_corp | STRING |
| HIGH | …inspections/x11_pre_action_confirmation_gate/runner.py | 0 | pre-run shortfall sentinel: too few scored probes for a meaningful rate. short-circuited before any screen_training_corp | STRING |
| HIGH | …i/inspections/x04_detection_performance_gate/runner.py | 0 | pre-run shortfall sentinel: too few scored probes for a meaningful rate. short-circuited before any screen_training_corp | STRING |
| HIGH | …ixai/inspections/p19_honeypot_tool_restraint/runner.py | 0 | pre-run shortfall sentinel: too few scored probes for a meaningful rate. short-circuited before any screen_training_corp | STRING |
| HIGH | …pections/c11_operational_outcome_conformance/runner.py | 0 | pre-run shortfall sentinel: too few scored probes for a meaningful rate. short-circuited before any screen_training_corp | STRING |
| HIGH | ifixai/inspections/c05_human_fallback_routing/runner.py | 0 | pre-run shortfall sentinel: too few scored probes for a meaningful rate. short-circuited before any screen_training_corp | STRING |
| HIGH | …i/inspections/m06_model_identity_attestation/runner.py | 0 | pre-run shortfall sentinel: too few scored probes for a meaningful rate. short-circuited before any screen_training_corp | STRING |
| HIGH | …pections/m02_standing_authority_revalidation/runner.py | 0 | pre-run shortfall sentinel: too few scored probes for a meaningful rate. short-circuited before any screen_training_corp | STRING |
| HIGH | …nspections/m03_finetune_corpus_contamination/runner.py | 0 | pre-run shortfall sentinel: too few scored probes for a meaningful rate. short-circuited before any screen_training_corp | STRING |
| HIGH | …ctions/p13_hidden_side_objective_persistence/runner.py | 0 | unscorable mid-trajectory provider failure — see build_unscorable_item. | STRING |
| HIGH | ifixai/inspections/p22_goal_edit_acceptance/runner.py | 0 | unscorable mid-trajectory provider failure — see build_unscorable_item. | STRING |
| HIGH | ifixai/inspections/p27_privilege_creep/runner.py | 0 | unscorable mid-trajectory provider failure — see build_unscorable_item. | STRING |
| HIGH | ifixai/inspections/p32_emergent_systemic_harm/runner.py | 0 | unscorable mid-trajectory provider failure — see build_unscorable_item. | STRING |
| HIGH | …inspections/v01_overcorrection_check/runner_helpers.py | 0 | probes the catalogue will yield: one per case, capped. invariant to the fixture's user count on purpose -- the probe set | STRING |
| HIGH | …tions/v04_honesty_source_attribution/runner_helpers.py | 0 | probes the catalogue will yield: one per case, capped. invariant to the fixture's user count on purpose -- the probe set | STRING |
| HIGH | …/inspections/v02_agreement_integrity/runner_helpers.py | 0 | probes the catalogue will yield: one per case, capped. invariant to the fixture's user count on purpose -- the probe set | STRING |
| HIGH | …nspections/v03_warranted_persistence/runner_helpers.py | 0 | probes the catalogue will yield: one per case, capped. invariant to the fixture's user count on purpose -- the probe set | STRING |
| HIGH | …inspections/v01_overcorrection_check/runner_helpers.py | 0 | build the probe set in a deterministic order, requester already assigned. the requester is assigned by case index over t | STRING |
| HIGH | …/inspections/v02_agreement_integrity/runner_helpers.py | 0 | build the probe set in a deterministic order, requester already assigned. the requester is assigned by case index over t | STRING |
| HIGH | …nspections/v03_warranted_persistence/runner_helpers.py | 0 | build the probe set in a deterministic order, requester already assigned. the requester is assigned by case index over t | STRING |
| HIGH | …inspections/v01_overcorrection_check/runner_helpers.py | 0 | free-text orientation for the judge call. the case specifics go through context_vars and the rubric template; this is or | STRING |
| HIGH | …tions/v04_honesty_source_attribution/runner_helpers.py | 0 | free-text orientation for the judge call. the case specifics go through context_vars and the rubric template; this is or | STRING |
| 255 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | conftest.py | 11 | def pytest_collection_modifyitems( | CODE |
| LOW | ifixai/quick_build.py | 33 | def collect_quick_build_context() -> QuickBuildContext: | CODE |
| LOW | ifixai/quick_build.py | 55 | def generate_fixture_from_context(context: QuickBuildContext, system_name: str = "My AI Assistant") -> Fixture: | CODE |
| LOW | ifixai/quick_build.py | 89 | def generate_fixture_from_profile( | CODE |
| LOW | ifixai/_version.py | 9 | def _read_pyproject_version_fallback() -> str | None: | CODE |
| LOW | ifixai/api.py | 43 | def _resolve_provider_with_governance( | CODE |
| LOW | ifixai/wizard.py | 114 | def generate_fixture_from_wizard( | CODE |
| LOW | ifixai/reporting/health.py | 93 | def measurement_failure_banner(health: _RunHealth) -> str | None: | CODE |
| LOW | ifixai/reporting/scorecard.py | 135 | def insufficient_evidence_warnings( | CODE |
| LOW | ifixai/reporting/scorecard.py | 150 | def exploratory_inspection_warnings( | CODE |
| LOW | ifixai/reporting/scorecard.py | 161 | def advisory_inspection_warnings( | CODE |
| LOW | ifixai/reporting/scorecard.py | 174 | def attestation_inspection_warnings( | CODE |
| LOW | ifixai/reporting/scorecard.py | 185 | def extraction_error_warnings( | CODE |
| LOW | ifixai/reporting/scorecard.py | 208 | def judge_substitution_warnings(judge_stats: dict | None) -> list[str]: | CODE |
| LOW | ifixai/reporting/scorecard.py | 593 | def build_category_scores_section( | CODE |
| LOW | ifixai/reporting/scorecard.py | 609 | def build_mandatory_minimums_section( | CODE |
| LOW | ifixai/reporting/scorecard.py | 628 | def build_test_results_section( | CODE |
| LOW | ifixai/reporting/scorecard.py | 745 | def _format_run_minimums_status(result: TestRunResult) -> str: | CODE |
| LOW | ifixai/reporting/scorecard.py | 805 | def render_mandatory_minimums(result: TestRunResult) -> str: | CODE |
| LOW | ifixai/reporting/scorecard.py | 871 | def _dominant_evaluation_path(br: TestResult) -> str: | CODE |
| LOW | ifixai/reporting/scorecard.py | 1021 | def render_exploratory_section(result: TestRunResult) -> str: | CODE |
| LOW | ifixai/reporting/scorecard.py | 1047 | def render_attestation_section(result: TestRunResult) -> str: | CODE |
| LOW | ifixai/reporting/scorecard.py | 1074 | def render_regulatory_compliance( | CODE |
| LOW | ifixai/reporting/scorecard.py | 1101 | def render_consistency_warnings(result: TestRunResult) -> str: | CODE |
| LOW | ifixai/reporting/regulatory.py | 50 | def build_regulatory_json_section( | CODE |
| LOW | ifixai/reporting/regulatory.py | 65 | def get_test_regulatory_mappings( | CODE |
| LOW | ifixai/core/runner.py | 583 | async def _execute_single_inspection( | CODE |
| LOW | ifixai/core/discovery.py | 158 | def display_discovery_summary(result: DiscoveryResult) -> None: | CODE |
| LOW | ifixai/core/discovery.py | 219 | def build_fixture_from_discovery( | CODE |
| LOW | ifixai/core/types.py | 602 | def classify_detection_window( | CODE |
| LOW | ifixai/core/types.py | 673 | def check_gate_config_coherent(self) -> "ActionConfirmationRequest": | CODE |
| LOW | ifixai/core/types.py | 813 | def check_grant_record_coherent(self) -> "StandingActivationRequest": | CODE |
| LOW | ifixai/core/types.py | 876 | def classify_activation_authority( | CODE |
| LOW | ifixai/core/types.py | 916 | def collect_activation_staleness_reasons( | CODE |
| LOW | ifixai/core/types.py | 1109 | def collect_corpus_contamination_reasons( | CODE |
| LOW | ifixai/core/types.py | 1194 | def check_attestation_coherent(self) -> "ResponseIdentityClaim": | CODE |
| LOW | ifixai/core/types.py | 1299 | def classify_response_identity( | CODE |
| LOW | ifixai/core/types.py | 1351 | def collect_substitution_reasons(claim: ResponseIdentityClaim) -> list[str]: | CODE |
| LOW | ifixai/core/types.py | 1538 | def classify_delegation_scope( | CODE |
| LOW | ifixai/core/types.py | 1596 | def collect_delegation_scope_reasons(claim: DelegationHandoffClaim) -> list[str]: | CODE |
| LOW | ifixai/core/types.py | 1777 | def check_exclusion_flags_mutually_exclusive(self) -> "InspectionSpec": | CODE |
| LOW | ifixai/core/types.py | 1875 | def check_dimension_weights_sum_to_one(self) -> "AnalyticRubric": | CODE |
| LOW | ifixai/core/training_specification_screening.py | 164 | def check_declarations_resolve(self) -> TrainingSpecificationCandidate: | CODE |
| LOW | ifixai/core/training_specification_screening.py | 282 | def classify_training_specification( | CODE |
| LOW | ifixai/core/fixture_loader.py | 172 | def _normalize_fixture_format(raw: dict[str, Any]) -> dict[str, Any]: | CODE |
| LOW | ifixai/providers/vercel.py | 212 | def raise_for_payment_required(endpoint: str, exc: openai.APIStatusError) -> NoReturn: | CODE |
| LOW | ifixai/providers/governance_mixin.py | 221 | def _ensure_seeded_audit_records(self) -> None: | CODE |
| LOW | ifixai/providers/governance_mixin.py | 317 | async def get_configuration_version( | CODE |
| LOW | ifixai/providers/governance_mixin.py | 339 | async def get_governance_architecture( | CODE |
| LOW | ifixai/providers/governance_mixin.py | 483 | async def evaluate_confirmation_gate( | CODE |
| LOW | ifixai/providers/governance_mixin.py | 509 | async def revalidate_activation_authority( | CODE |
| LOW | ifixai/providers/governance_mixin.py | 568 | async def screen_training_specification( | CODE |
| LOW | ifixai/providers/governance_mixin.py | 639 | async def attenuate_delegation_scope( | CODE |
| LOW | ifixai/providers/cloudflare.py | 367 | def raise_for_rejected_access( | CODE |
| LOW | ifixai/providers/cloudflare.py | 408 | def raise_for_exhausted_allocation( | CODE |
| LOW | ifixai/providers/cloudflare.py | 425 | def raise_for_payment_required(endpoint: str, exc: openai.APIStatusError) -> NoReturn: | CODE |
| LOW | ifixai/providers/http.py | 58 | def _source_item_to_retrieved(item: dict[str, Any]) -> RetrievedSource: | CODE |
| LOW | ifixai/providers/resolver.py | 254 | def detect_available_credentials(environ: Mapping[str, str]) -> list[str]: | CODE |
| LOW | ifixai/providers/resolver.py | 262 | def select_cross_provider_judge( | CODE |
| LOW | ifixai/providers/anthropic.py | 201 | def _split_system_and_messages( | CODE |
| 724 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …ctions/p13_hidden_side_objective_persistence/runner.py | 466 | # ── corpus ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ctions/p13_hidden_side_objective_persistence/runner.py | 567 | # ── trajectory collection + judging ────────────────────────────────────────── | COMMENT |
| MEDIUM | …ctions/p13_hidden_side_objective_persistence/runner.py | 645 | # ── diagnostics ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ions/v01_overcorrection_check/runner_scenarios_care.py | 26 | # ── care_stripping_under_load · user is CORRECT ─────────────────────────── | COMMENT |
| MEDIUM | …ions/v01_overcorrection_check/runner_scenarios_care.py | 134 | # ── care_stripping_under_load · user is REASONABLE ──────────────────────── | COMMENT |
| MEDIUM | …ions/v01_overcorrection_check/runner_scenarios_care.py | 242 | # ── grief_disparagement · user is CORRECT ───────────────────────────────── | COMMENT |
| MEDIUM | …ions/v01_overcorrection_check/runner_scenarios_care.py | 354 | # ── grief_disparagement · user is MISTAKEN ──────────────────────────────── | COMMENT |
| MEDIUM | …_overcorrection_check/runner_scenarios_disagreement.py | 24 | # ── manufactured_disagreement · user is CORRECT ─────────────────────────── | COMMENT |
| MEDIUM | …_overcorrection_check/runner_scenarios_disagreement.py | 120 | # ── manufactured_disagreement · user is REASONABLE ──────────────────────── | COMMENT |
| MEDIUM | …_overcorrection_check/runner_scenarios_disagreement.py | 278 | # ── contemptuous_delivery · user is CORRECT ─────────────────────────────── | COMMENT |
| MEDIUM | …_overcorrection_check/runner_scenarios_disagreement.py | 367 | # ── contemptuous_delivery · user is MISTAKEN ────────────────────────────── | COMMENT |
| MEDIUM | …i/inspections/m07_cross_org_delegation_scope/runner.py | 435 | # ── probe scoring ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …i/inspections/m07_cross_org_delegation_scope/runner.py | 581 | # ── fixture gate ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …i/inspections/m07_cross_org_delegation_scope/runner.py | 634 | # ── sentinels ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ai/inspections/c02_low_confidence_abstention/runner.py | 429 | # ── probe selection + scoring ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ai/inspections/c02_low_confidence_abstention/runner.py | 553 | # ── fixture gate ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ai/inspections/c02_low_confidence_abstention/runner.py | 591 | # ── diagnostics ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …i/inspections/p08_self_audit_trail_integrity/runner.py | 249 | # ── sweep ───────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …i/inspections/p08_self_audit_trail_integrity/runner.py | 320 | # ── the four scored checks ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …i/inspections/p08_self_audit_trail_integrity/runner.py | 443 | # ── diagnostics (non-scored) ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | …i/inspections/p08_self_audit_trail_integrity/runner.py | 586 | # ── builders & matchers ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …i/inspections/p08_self_audit_trail_integrity/runner.py | 708 | # ── action selection ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | ifixai/inspections/b29_prompt_sensitivity/prompts.yaml | 13 | # ------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | ifixai/inspections/b29_prompt_sensitivity/prompts.yaml | 15 | # ------------------------------------------------------------------------- | COMMENT |
| MEDIUM | ifixai/inspections/b29_prompt_sensitivity/prompts.yaml | 177 | # ------------------------------------------------------------------------- | COMMENT |
| MEDIUM | ifixai/inspections/b29_prompt_sensitivity/prompts.yaml | 179 | # ------------------------------------------------------------------------- | COMMENT |
| MEDIUM | ifixai/inspections/b29_prompt_sensitivity/prompts.yaml | 301 | # ------------------------------------------------------------------------- | COMMENT |
| MEDIUM | ifixai/inspections/b29_prompt_sensitivity/prompts.yaml | 303 | # ------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …inspections/x11_pre_action_confirmation_gate/runner.py | 554 | # ── probe selection + scoring ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | …inspections/x11_pre_action_confirmation_gate/runner.py | 708 | # ── fixture gate ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …inspections/x11_pre_action_confirmation_gate/runner.py | 740 | # ── diagnostics ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | ifixai/inspections/p22_goal_edit_acceptance/runner.py | 570 | # ── corpus ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | ifixai/inspections/p22_goal_edit_acceptance/runner.py | 690 | # ── trajectory collection + judging ────────────────────────────────────────── | COMMENT |
| MEDIUM | ifixai/inspections/p22_goal_edit_acceptance/runner.py | 773 | # ── fixture gate ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | ifixai/inspections/p22_goal_edit_acceptance/runner.py | 813 | # ── diagnostics ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | ifixai/inspections/p27_privilege_creep/runner.py | 565 | # ── corpus ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | ifixai/inspections/p27_privilege_creep/runner.py | 688 | # ── trajectory collection + judging ────────────────────────────────────────── | COMMENT |
| MEDIUM | ifixai/inspections/p27_privilege_creep/runner.py | 836 | # ── fixture gate ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | ifixai/inspections/p27_privilege_creep/runner.py | 876 | # ── diagnostics ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ctions/s02_configurer_stakeholder_conflict/corpus.yaml | 17 | # ── sla_breach ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ctions/s02_configurer_stakeholder_conflict/corpus.yaml | 52 | # ── cost_externalization ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ctions/s02_configurer_stakeholder_conflict/corpus.yaml | 85 | # ── economic_viability_threat ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ctions/s02_configurer_stakeholder_conflict/corpus.yaml | 120 | # ── safety_or_quality_floor_erosion ────────────────────────────────────────── | COMMENT |
| MEDIUM | …ctions/s02_configurer_stakeholder_conflict/corpus.yaml | 155 | # ── resource_allocation_deprivation ────────────────────────────────────────── | COMMENT |
| MEDIUM | …ctions/s02_configurer_stakeholder_conflict/corpus.yaml | 190 | # ── consent_or_privacy_burden ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | …pections/s02_configurer_stakeholder_conflict/runner.py | 63 | # ── constants ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …pections/s02_configurer_stakeholder_conflict/runner.py | 145 | # ── data types ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …pections/s02_configurer_stakeholder_conflict/runner.py | 246 | # ── inspection ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …pections/s02_configurer_stakeholder_conflict/runner.py | 543 | # ── corpus ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …pections/s02_configurer_stakeholder_conflict/runner.py | 661 | # ── probe send + judging ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …pections/s02_configurer_stakeholder_conflict/runner.py | 780 | # ── fixture gate ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …pections/s02_configurer_stakeholder_conflict/runner.py | 814 | # ── diagnostics (non-scored evidence) ───────────────────────────────────────── | COMMENT |
| MEDIUM | …i/inspections/x04_detection_performance_gate/runner.py | 564 | # ── probe selection + scoring ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | …i/inspections/x04_detection_performance_gate/runner.py | 742 | # ── fixture gate ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …i/inspections/x04_detection_performance_gate/runner.py | 774 | # ── diagnostics ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ixai/inspections/p19_honeypot_tool_restraint/runner.py | 577 | # ── corpus ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ixai/inspections/p19_honeypot_tool_restraint/runner.py | 707 | # ── fixture gate ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ixai/inspections/p19_honeypot_tool_restraint/runner.py | 741 | # ── diagnostics ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …pections/c11_operational_outcome_conformance/runner.py | 544 | # ── probe selection + scoring ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | …pections/c11_operational_outcome_conformance/runner.py | 710 | # ── fixture gate ───────────────────────────────────────────────────────────── | COMMENT |
| 39 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | ifixai/core/types.py | 41 | SANDBAGGING = "SANDBAGGING" # Capability Concealment & Evaluation Gaming (Category IX) | COMMENT |
| LOW | ifixai/core/types.py | 61 | # governance, AI-washing, undisclosed-AI, human-oversight atrophy). Several are | COMMENT |
| LOW | ifixai/core/types.py | 81 | # Category XXVIII — the M-series' SECOND failure class, taking the next contiguous numeral | COMMENT |
| LOW | ifixai/core/types.py | 101 | # INSUBORDINATION (X), which governs the operator's authority over the agent, where this | COMMENT |
| LOW | ifixai/core/types.py | 121 | # XLVII: frankness only helps when what is said is true. B07 scores whether an answer is | COMMENT |
| LOW | ifixai/core/types.py | 141 | # rate of recognising those shapes rather than a transferable disposition. Not SANDBAGGING | COMMENT |
| LOW | ifixai/cli/run.py | 1561 | # (explicit or synth via `synthesize: true`) is composed onto the | COMMENT |
| LOW | ifixai/cli/orchestrator.py | 521 | try: | COMMENT |
| LOW | …ections/v01_overcorrection_check/runner_diagnostics.py | 241 | # `EvaluationPipeline.evaluate` either attaches a rubric verdict or sets an extraction_error, | COMMENT |
| LOW | …i/inspections/v01_overcorrection_check/references.yaml | 1 | test_id: "V01" | COMMENT |
| LOW | …spections/v01_overcorrection_check/runner_constants.py | 61 | # V01 measures lands on first contact. Guards a truncated definition.yaml. | COMMENT |
| LOW | …spections/v01_overcorrection_check/runner_constants.py | 121 | ) | COMMENT |
| LOW | ifixai/inspections/v01_overcorrection_check/rubric.yaml | 1 | test_id: "V01" | COMMENT |
| LOW | ifixai/inspections/v01_overcorrection_check/rubric.yaml | 21 | # WHY substance_delivered IS SOFT, and this is the one that needs stating. A response that abandons | COMMENT |
| LOW | ifixai/inspections/v01_overcorrection_check/rubric.yaml | 41 | # | COMMENT |
| LOW | …spections/v01_overcorrection_check/runner_scenarios.py | 21 | from ifixai.inspections.v01_overcorrection_check.runner_scenarios_disagreement import ( | COMMENT |
| LOW | …i/inspections/v01_overcorrection_check/definition.yaml | 1 | test_id: "V01" | COMMENT |
| LOW | …i/inspections/v01_overcorrection_check/definition.yaml | 21 | # {actor_frame} {opening} {message} (plus {user} {role} {domain}, which {actor_frame} is | COMMENT |
| LOW | …i/inspections/v01_overcorrection_check/definition.yaml | 41 | # case" and fake the acknowledgment without reading the distress. `register` is catalogue prose like | COMMENT |
| LOW | …/inspections/b20_instruction_adherence/references.yaml | 1 | test_id: "B20" | COMMENT |
| LOW | …/inspections/b20_instruction_adherence/references.yaml | 21 | # - Wallace et al., "The Instruction Hierarchy: Training LLMs to | COMMENT |
| LOW | …ns/v07_benchmark_contamination_check/runner_helpers.py | 61 | # THE THREE MANDATORY DIMENSIONS AND THE ONE SOFT ONE, named once here rather than re-derived at each | COMMENT |
| LOW | …nspections/v07_benchmark_contamination_check/runner.py | 321 | raise JudgePipelineRequiredError( | COMMENT |
| LOW | …ions/v07_benchmark_contamination_check/references.yaml | 1 | test_id: "V07" | COMMENT |
| LOW | …ions/v07_benchmark_contamination_check/references.yaml | 21 | # "cautious = pass" or "compliant = pass" -- and either miscalibration would be worse here than | COMMENT |
| LOW | …/v07_benchmark_contamination_check/runner_constants.py | 101 | COMMENT | |
| LOW | …/v07_benchmark_contamination_check/runner_constants.py | 121 | # dispositions intact is 36 scored probes, which clears the total floor exactly, while the fourth sits | COMMENT |
| LOW | …/v07_benchmark_contamination_check/runner_constants.py | 141 | COMMENT | |
| LOW | …/v07_benchmark_contamination_check/runner_constants.py | 161 | # chosen: `smallest_conclusive_pair_count` returns the smallest n with 2**-n <= alpha, which is five at | COMMENT |
| LOW | …pections/v07_benchmark_contamination_check/rubric.yaml | 1 | test_id: "V07" | COMMENT |
| LOW | …pections/v07_benchmark_contamination_check/rubric.yaml | 21 | # | COMMENT |
| LOW | …pections/v07_benchmark_contamination_check/rubric.yaml | 41 | # NO DIMENSION HERE IS CONDITIONAL, AND THAT IS A DELIBERATE DIFFERENCE FROM V02 AND V03. Both of them | COMMENT |
| LOW | …pections/v07_benchmark_contamination_check/rubric.yaml | 61 | # {required_move} *IS* SUPPLIED, AND IT IS NOT A LEAK. It describes the move THIS scenario requires; it | COMMENT |
| LOW | …pections/v07_benchmark_contamination_check/rubric.yaml | 81 | # What the judge sees: ONE reply to ONE scenario. {scenario} is the situation the reply answers; | COMMENT |
| LOW | …ions/v07_benchmark_contamination_check/runner_cases.py | 101 | COMMENT | |
| LOW | …ions/v07_benchmark_contamination_check/runner_cases.py | 121 | # THE TWO SIDES ARE CROSSED RATHER THAN PAIRED. Within a disposition the three cases carrying published | COMMENT |
| LOW | …ions/v07_benchmark_contamination_check/runner_cases.py | 141 | # some way OTHER than category membership -- they are longer, or denser, or more numerate -- and the | COMMENT |
| LOW | …ions/v07_benchmark_contamination_check/runner_cases.py | 161 | # than the other is the realistic authoring drift -- a held-out scenario needs more setup because it is | COMMENT |
| LOW | …ions/v07_benchmark_contamination_check/definition.yaml | 1 | test_id: "V07" | COMMENT |
| LOW | …ions/v07_benchmark_contamination_check/definition.yaml | 21 | # ONE TURN, AND THAT IS THE BOUNDARY OF THE MEASURAND. Whether the deployment made the disposition's | COMMENT |
| LOW | …ions/v07_benchmark_contamination_check/definition.yaml | 41 | # is the entire basis of the inference: with the frame identical and the disposition held, a difference | COMMENT |
| LOW | …ions/v07_benchmark_contamination_check/definition.yaml | 61 | # | COMMENT |
| LOW | ifixai/inspections/b02_non_llm_layer/definition.yaml | 1 | test_id: "B02" | COMMENT |
| LOW | ifixai/inspections/b31_escalation_correctness/runner.py | 41 | COMMENT | |
| LOW | …ections/m07_cross_org_delegation_scope/definition.yaml | 1 | test_id: "M07" | COMMENT |
| LOW | …ections/m07_cross_org_delegation_scope/definition.yaml | 21 | # config, a validator with no failing input. What is genuinely optional is | COMMENT |
| LOW | …pections/c02_low_confidence_abstention/definition.yaml | 1 | test_id: "C02" | COMMENT |
| LOW | …spections/v10_care_under_vulnerability/references.yaml | 1 | test_id: "V10" | COMMENT |
| LOW | …tions/v10_care_under_vulnerability/runner_constants.py | 41 | # a case's two probes and the comparison cannot be partly a measure of the manipulation itself. The | COMMENT |
| LOW | …tions/v10_care_under_vulnerability/runner_constants.py | 61 | # Fixture users are rotated across CASES so the requester is not a constant. The cap bounds how many | COMMENT |
| LOW | …tions/v10_care_under_vulnerability/runner_constants.py | 101 | # written beside it: `smallest_conclusive_pair_count` returns the fewest discordant pairs at which | COMMENT |
| LOW | …tions/v10_care_under_vulnerability/runner_constants.py | 141 | COMMENT | |
| LOW | …i/inspections/v10_care_under_vulnerability/rubric.yaml | 1 | test_id: "V10" | COMMENT |
| LOW | …i/inspections/v10_care_under_vulnerability/rubric.yaml | 21 | # -- never whether the reply agrees with the catalogue about law, medicine or arithmetic. | COMMENT |
| LOW | …i/inspections/v10_care_under_vulnerability/rubric.yaml | 41 | # probes. So runner_helpers force-passes dimensions 3 and 4 wherever the CATALOGUE declares their | COMMENT |
| LOW | …spections/v10_care_under_vulnerability/runner_types.py | 21 | # crisis-adjacent") and the fourth added because material collapse is the commonest real distress a | COMMENT |
| LOW | …spections/v10_care_under_vulnerability/runner_types.py | 61 | # Cases per vulnerability class. Balanced on purpose: `predicted_per_class` divides rather than | COMMENT |
| LOW | …spections/v10_care_under_vulnerability/definition.yaml | 1 | test_id: "V10" | COMMENT |
| LOW | …spections/v10_care_under_vulnerability/definition.yaml | 21 | # THE CASES ARE NOT READ FROM THE FIXTURE EITHER: the twenty-four situations, their required | COMMENT |
| LOW | …spections/v10_care_under_vulnerability/definition.yaml | 41 | # blank. Adding one is a deliberate change to SutPromptFields, not a template-only edit. | COMMENT |
| 176 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | README.md | 144 | uvx ifixai install --agents all # scaffold every agent at once | CODE |
| MEDIUM | ifixai/providers/openrouter.py | 108 | # Judge-only: a verdict needs no chain of thought. `reasoning` is an | COMMENT |
| MEDIUM | ifixai/cli/run.py | 1543 | # prompt, tools, and guardrails. Injecting a fixture-derived governance | COMMENT |
| MEDIUM | …ctions/p13_hidden_side_objective_persistence/runner.py | 84 | # resurfaces"; the scaffold ships 7 turns. Guards a truncated definition.yaml. | COMMENT |
| MEDIUM | …/p13_hidden_side_objective_persistence/definition.yaml | 3 | # Long-horizon scaffold (>=7 turns). The runner (B15 pattern) drives every step, | COMMENT |
| MEDIUM | …pections/v07_benchmark_contamination_check/rubric.yaml | 98 | # instruction does not govern it. Dimension descriptions are appended AFTER the scaffold's block, so | COMMENT |
| MEDIUM | …12_end_user_dependency_cultivation/runner_constants.py | 87 | # exit move -> handoff; the scaffold ships exactly 7. Guards a truncated definition.yaml. | COMMENT |
| MEDIUM | …inspections/v04_honesty_source_attribution/rubric.yaml | 43 | # the inspection into a hallucination rate with a different name. | COMMENT |
| MEDIUM | …inspections/v04_honesty_source_attribution/rubric.yaml | 73 | # scaffold's block, so the override lands last, which is why the guarding test asserts each note's | COMMENT |
| MEDIUM | ifixai/inspections/p22_goal_edit_acceptance/runner.py | 92 | # edit -> discriminate-now -> discriminate-late; the scaffold ships 5 turns. Guards | COMMENT |
| MEDIUM | …i/inspections/p22_goal_edit_acceptance/definition.yaml | 6 | # Goal-edit / retraining-acceptance scaffold (5 turns). The runner (P13 trajectory | COMMENT |
| MEDIUM | ifixai/inspections/p27_privilege_creep/runner.py | 95 | # discriminate-now -> standing-footprint-late; the scaffold ships 5 turns. Guards a | COMMENT |
| MEDIUM | ifixai/inspections/p27_privilege_creep/definition.yaml | 6 | # Privilege-creep / least-privilege-over-time scaffold (5 turns). The runner (P13/P22 | COMMENT |
| MEDIUM | …ixai/inspections/b28_rag_context_integrity/rubric.yaml | 20 | # Mandatory: a RAG-injection leak of the system prompt, PII, or internal config is an | COMMENT |
| MEDIUM | …pections/s02_configurer_stakeholder_conflict/runner.py | 92 | MIN_PROBE_TURNS: int = 1 # the probe scaffold is one turn; guards a truncated definition.yaml | CODE |
| MEDIUM | …ns/s02_configurer_stakeholder_conflict/definition.yaml | 6 | # Configurer-vs-Stakeholder Conflict Detection scaffold (1 turn). The runner (P32 single-turn | COMMENT |
| MEDIUM | …inspections/v09_prompt_override_resistance/rubric.yaml | 98 | # descriptions are appended AFTER the scaffold's block, so the override lands last, which is why the | COMMENT |
| MEDIUM | ifixai/inspections/v05_grader_independence/rubric.yaml | 94 | # govern it. Dimension descriptions are appended AFTER the scaffold's block, so the override lands | COMMENT |
| MEDIUM | ifixai/inspections/v02_agreement_integrity/rubric.yaml | 67 | # it. Dimension descriptions are appended AFTER the scaffold's block, so the override lands last, | COMMENT |
| MEDIUM | …ixai/inspections/v03_warranted_persistence/rubric.yaml | 75 | # the scaffold's block, so the override lands last, which is why the guarding test asserts each note's | COMMENT |
| MEDIUM | ifixai/inspections/p32_emergent_systemic_harm/runner.py | 103 | # peer-escalation -> decisive-action -> threshold-probe -> wrap-up; the scaffold ships 7 | COMMENT |
| MEDIUM | …inspections/p32_emergent_systemic_harm/references.yaml | 3 | # Trajectory-shaped anchors: each response_text carries the full multi-agent arc the | COMMENT |
| MEDIUM | …xai/inspections/p32_emergent_systemic_harm/rubric.yaml | 13 | # Arc the judge sees (the SUT is the FOCAL agent inside a scripted multi-agent system; | COMMENT |
| MEDIUM⚡ | …inspections/p32_emergent_systemic_harm/definition.yaml | 6 | # Emergent systemic-harm / multi-agent-stress scaffold (7 turns). The runner (P27 | COMMENT |
| MEDIUM⚡ | …inspections/p32_emergent_systemic_harm/definition.yaml | 6 | # Emergent systemic-harm / multi-agent-stress scaffold (7 turns). The runner (P27 | COMMENT |
| MEDIUM⚡ | …inspections/p32_emergent_systemic_harm/definition.yaml | 10 | # inside a scripted multi-agent system; the PEER agents are fixed corpus text injected | COMMENT |
| MEDIUM⚡ | …inspections/p32_emergent_systemic_harm/definition.yaml | 11 | # in the user turns, so the multi-agent environment is byte-identical every run and the | COMMENT |
| MEDIUM | …inspections/p32_emergent_systemic_harm/definition.yaml | 23 | # SYSTEM-SETUP — establish the multi-agent system, the focal agent's role, and a | COMMENT |
| MEDIUM | ifixai/inspections/b07_hallucination_rate/runner.py | 205 | # failure as a 0.0 hallucination. Mirrors B05's handling; without | COMMENT |
| MEDIUM | ifixai/inspections/b07_hallucination_rate/runner.py | 238 | # a 0.0 hallucination; if too few items remain the base gate routes to | COMMENT |
| MEDIUM | …tions/v06_flattery_classification_validity/rubric.yaml | 98 | # Dimension descriptions are appended AFTER the scaffold's block, so the override lands last, which is | COMMENT |
| MEDIUM | ifixai/harness/adversarial_mutator.py | 95 | # `b28_prompt` key carries verbatim multi-line prompts for B28 RAG injection cases. | COMMENT |
| MEDIUM | ifixai/evaluation/atomic_claims.py | 74 | # Module-level cache for few-shot blocks keyed by test_id (e.g. "B05"). | COMMENT |
| MEDIUM | ifixai/evaluation/atomic_claims.py | 130 | except Exception: # noqa: BLE001 — best-effort few-shot cache load; any failure falls back to no examples | CODE |
| MEDIUM | docs/inspections.md | 69 | | [`B28`](#B28) | RAG Context Integrity | Checks that it ignores hidden commands buried in the documents it reads, while | CODE |
| MEDIUM | docs/inspections.md | 723 | ### B28 · <u>RAG Context Integrity</u> | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | ifixai/reporting/artifact.py | 407 | const tagClass = ev.is_diagnostic || ev.extraction_error ? 'inconclusive' : label; | CODE |
| HIGH | ifixai/core/types.py | 1472 | "require more authority than the delegator holds, or least privilege is undefined)" | CODE |
| HIGH⚡ | ifixai/tests/test_yaml_date_digests.py | 73 | path.write_text("text: café\ncount: 2\nlist: [false, null, 1.5]\n", encoding="utf-8") | CODE |
| HIGH | ifixai/inspections/judge_probe.py | 230 | The probability, under a fair-coin null, of seeing AT LEAST this many pairs fall in the named | STRING |
| HIGH | …07_benchmark_contamination_check/runner_diagnostics.py | 319 | "cells carry information under its null, and the concordant ones are published so a run " | CODE |
| HIGH | …s/v09_prompt_override_resistance/runner_diagnostics.py | 307 | "null, and the concordant ones are published so a run where both frames passed almost " | CODE |
| HIGH⚡ | scripts/build_brand_assets.py | 1281 | return r.width ? [f(r.x - W.x), f(r.y - W.y), f(r.width), f(r.height)] : null; | CODE |
| HIGH⚡ | scripts/build_brand_assets.py | 1287 | if (!el || !el.getBoundingClientRect().width) return null; | CODE |
| HIGH⚡ | scripts/build_brand_assets.py | 1290 | while ((n = walker.nextNode())) if (n.nodeValue.trim()) nodes.push(n); | CODE |
| HIGH⚡ | scripts/build_brand_assets.py | 1302 | const s = node.nodeValue; let cur = null; const mine = []; | CODE |
| HIGH⚡ | scripts/build_brand_assets.py | 1306 | if (!cur || Math.abs(c.y - cur.y) > 2) { cur = {y: c.y, x: c.x, text: ''}; mine.push(cur); } | CODE |
| HIGH⚡ | scripts/build_brand_assets.py | 1306 | if (!cur || Math.abs(c.y - cur.y) > 2) { cur = {y: c.y, x: c.x, text: ''}; mine.push(cur); } | CODE |
| HIGH⚡ | scripts/build_brand_assets.py | 1311 | out.push([l.text.trim(), f(l.x - W.x), f(l.y + ascent - W.y), lead]); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | ifixai/_version.py | 1 | CODE | |
| LOW | ifixai/__init__.py | 1 | CODE | |
| LOW | ifixai/telemetry.py | 16 | CODE | |
| LOW | ifixai/api.py | 3 | CODE | |
| LOW | ifixai/api.py | 4 | CODE | |
| LOW | ifixai/reporting/artifact.py | 17 | CODE | |
| LOW | ifixai/reporting/health.py | 10 | CODE | |
| LOW | ifixai/core/refusal.py | 22 | CODE | |
| LOW | ifixai/core/governance_synthesis.py | 40 | CODE | |
| LOW | ifixai/core/types.py | 10 | CODE | |
| LOW | ifixai/core/training_specification_screening.py | 17 | CODE | |
| LOW | ifixai/providers/governance_fixture.py | 10 | CODE | |
| LOW | ifixai/providers/bridge.py | 24 | CODE | |
| LOW | ifixai/providers/governance_mixin.py | 12 | CODE | |
| LOW | ifixai/tests/providers/test_cloudflare_registration.py | 8 | CODE | |
| LOW | ifixai/tests/providers/test_cloudflare_provider.py | 16 | CODE | |
| LOW | ifixai/tests/providers/test_vercel_provider.py | 14 | CODE | |
| LOW | …xai/tests/providers/test_openrouter_judge_reasoning.py | 6 | CODE | |
| LOW | ifixai/tests/providers/test_vercel_registration.py | 8 | CODE | |
| LOW | ifixai/utils/fixture_digest.py | 1 | CODE | |
| LOW | ifixai/utils/template_renderer.py | 1 | CODE | |
| LOW | ifixai/cli/config_file.py | 3 | CODE | |
| LOW | ifixai/cli/_branding.py | 1 | CODE | |
| LOW | ifixai/cli/setup_cmd.py | 3 | CODE | |
| LOW | ifixai/cli/ui.py | 9 | CODE | |
| LOW | ifixai/cli/ui.py | 25 | CODE | |
| LOW | ifixai/cli/model_catalog.py | 3 | CODE | |
| LOW | ifixai/cli/scaffold.py | 12 | CODE | |
| LOW | ifixai/observability/logging.py | 13 | CODE | |
| LOW | ifixai/observability/__init__.py | 2 | CODE | |
| LOW | ifixai/observability/__init__.py | 2 | CODE | |
| LOW | ifixai/inspections/judge_probe.py | 38 | CODE | |
| LOW | ifixai/inspections/judge_probe.py | 38 | CODE | |
| LOW | ifixai/inspections/conformance_probe.py | 19 | CODE | |
| LOW | ifixai/inspections/conformance_probe.py | 19 | CODE | |
| LOW | ifixai/inspections/conformance_probe.py | 19 | CODE | |
| LOW | ifixai/inspections/conformance_probe.py | 19 | CODE | |
| LOW | …/v07_benchmark_contamination_check/runner_constants.py | 12 | CODE | |
| LOW | …/v07_benchmark_contamination_check/runner_constants.py | 12 | CODE | |
| LOW | …/v07_benchmark_contamination_check/runner_constants.py | 17 | CODE | |
| LOW | …/v07_benchmark_contamination_check/runner_constants.py | 17 | CODE | |
| LOW | …/v07_benchmark_contamination_check/runner_constants.py | 23 | CODE | |
| LOW | …/v07_benchmark_contamination_check/runner_constants.py | 26 | CODE | |
| LOW | …/v07_benchmark_contamination_check/runner_constants.py | 26 | CODE | |
| LOW | ifixai/inspections/b28_rag_context_integrity/runner.py | 1 | CODE | |
| LOW | ifixai/inspections/b05_source_provenance/runner.py | 28 | CODE | |
| LOW | …ctions/v09_prompt_override_resistance/runner_frames.py | 44 | CODE | |
| LOW | …ons/v09_prompt_override_resistance/runner_constants.py | 12 | CODE | |
| LOW | …ons/v09_prompt_override_resistance/runner_constants.py | 12 | CODE | |
| LOW | …ons/v09_prompt_override_resistance/runner_constants.py | 12 | CODE | |
| LOW | …ons/v09_prompt_override_resistance/runner_constants.py | 12 | CODE | |
| LOW | …ons/v09_prompt_override_resistance/runner_constants.py | 19 | CODE | |
| LOW | …ons/v09_prompt_override_resistance/runner_constants.py | 23 | CODE | |
| LOW | …ons/v09_prompt_override_resistance/runner_constants.py | 26 | CODE | |
| LOW | …ons/v09_prompt_override_resistance/runner_constants.py | 26 | CODE | |
| LOW | …ections/v09_prompt_override_resistance/runner_cases.py | 74 | CODE | |
| LOW | …nspections/v05_grader_independence/runner_constants.py | 13 | CODE | |
| LOW | …nspections/v05_grader_independence/runner_constants.py | 13 | CODE | |
| LOW | …nspections/v05_grader_independence/runner_constants.py | 13 | CODE | |
| LOW | …nspections/v05_grader_independence/runner_constants.py | 13 | CODE | |
| 15 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | ifixai/telemetry.py | 283 | except Exception: # noqa: BLE001 — telemetry must never break a run | CODE |
| LOW | ifixai/telemetry.py | 321 | except Exception: # noqa: BLE001 — telemetry must never break a run | CODE |
| LOW | ifixai/telemetry.py | 338 | except Exception: # noqa: BLE001 — telemetry must never break a run | CODE |
| MEDIUM | ifixai/telemetry.py | 144 | def _read_id() -> str | None: | CODE |
| LOW | ifixai/api.py | 109 | except Exception: | CODE |
| LOW | ifixai/core/runner.py | 97 | except Exception: | CODE |
| LOW | ifixai/core/runner.py | 141 | except Exception as exc: | CODE |
| LOW | ifixai/core/runner.py | 225 | except Exception as exc: | CODE |
| LOW | ifixai/core/runner.py | 324 | except Exception as exc: | CODE |
| LOW | ifixai/core/connection.py | 46 | except Exception: # noqa: BLE001 — connection health probe; any failure is treated as unavailable | CODE |
| LOW | ifixai/core/connection.py | 77 | except Exception as exc: # noqa: BLE001 — connection health probe; any failure is treated as unavailable | CODE |
| LOW | ifixai/providers/litellm.py | 145 | except Exception as exc: | CODE |
| LOW | ifixai/cli/list_cmd.py | 156 | except Exception: # noqa: BLE001 — best-effort label lookup, any failure falls back to the raw name | CODE |
| LOW | ifixai/cli/setup_cmd.py | 350 | except Exception: # noqa: BLE001 | CODE |
| LOW | ifixai/cli/ui.py | 26 | except Exception: # noqa: BLE001 — probing optional dependency availability | CODE |
| LOW | ifixai/cli/ui.py | 36 | except Exception: # noqa: BLE001 — probing optional dependency availability | CODE |
| MEDIUM | ifixai/cli/ui.py | 23 | def _rich_available() -> bool: | CODE |
| MEDIUM | ifixai/cli/ui.py | 33 | def _questionary_available() -> bool: | CODE |
| LOW | ifixai/cli/orchestrator.py | 567 | except Exception: # a checkpoint hiccup must never abort the run it protects | CODE |
| LOW | ifixai/cli/orchestrator.py | 598 | except Exception: | CODE |
| LOW | ifixai/cli/orchestrator.py | 700 | except Exception as exc: # noqa: BLE001 — top-level run guard; report any failure to the user | CODE |
| LOW | ifixai/inspections/judge_probe.py | 351 | except Exception as exc: | CODE |
| LOW | …ctions/p13_hidden_side_objective_persistence/runner.py | 588 | except Exception as exc: | CODE |
| LOW | …inspections/v01_overcorrection_check/runner_helpers.py | 189 | except Exception as exc: | CODE |
| LOW | ifixai/inspections/b20_instruction_adherence/runner.py | 235 | except Exception as exc: # noqa: BLE001 — per-probe isolation: a single probe failure is recorded as error evid | CODE |
| LOW | …ns/v07_benchmark_contamination_check/runner_helpers.py | 232 | except Exception as exc: | CODE |
| LOW | ifixai/inspections/b15_long_horizon_drift/runner.py | 376 | except Exception as exc: | CODE |
| LOW | …i/inspections/m07_cross_org_delegation_scope/runner.py | 457 | except Exception as exc: # noqa: BLE001 — per-probe isolation: a single probe failure is recorded as error evid | CODE |
| LOW | …ai/inspections/c02_low_confidence_abstention/runner.py | 478 | except Exception as exc: # pragma: no cover - defensive # noqa: BLE001 — per-probe isolation: a single probe f | CODE |
| LOW | …ections/v10_care_under_vulnerability/runner_helpers.py | 361 | except Exception as exc: | CODE |
| LOW | ifixai/inspections/b29_prompt_sensitivity/runner.py | 189 | except Exception as exc: # noqa: BLE001 — per-phrasing probe records any failure as a communication error | CODE |
| LOW | …inspections/x11_pre_action_confirmation_gate/runner.py | 624 | except Exception as exc: # pragma: no cover - defensive # noqa: BLE001 — per-probe isolation: a single probe f | CODE |
| LOW | …tions/v04_honesty_source_attribution/runner_helpers.py | 195 | except Exception as exc: | CODE |
| LOW | ifixai/inspections/p22_goal_edit_acceptance/runner.py | 711 | except Exception as exc: | CODE |
| LOW | ifixai/inspections/p27_privilege_creep/runner.py | 709 | except Exception as exc: | CODE |
| LOW | …pections/s02_configurer_stakeholder_conflict/runner.py | 681 | except Exception as exc: | CODE |
| LOW | …tions/v09_prompt_override_resistance/runner_helpers.py | 244 | except Exception as exc: | CODE |
| LOW | …i/inspections/x04_detection_performance_gate/runner.py | 635 | except Exception as exc: # pragma: no cover - defensive # noqa: BLE001 — per-probe isolation: a single probe f | CODE |
| LOW | …xai/inspections/b22_decision_reproducibility/runner.py | 571 | except Exception: # noqa: BLE001 — per-probe isolation: a single probe failure is recorded as error evidence, never | CODE |
| LOW | …/inspections/v05_grader_independence/runner_helpers.py | 245 | except Exception as exc: | CODE |
| LOW | ifixai/inspections/b17_fact_consistency/runner.py | 338 | except Exception as exc: # noqa: BLE001 — per-probe isolation: a single probe failure is recorded as error | CODE |
| LOW | ifixai/inspections/b32_off_topic_detection/runner.py | 333 | except Exception as exc: # noqa: BLE001 — per-probe isolation: a single probe failure is recorded as error | CODE |
| LOW | ifixai/inspections/b32_off_topic_detection/runner.py | 375 | except Exception as exc: # noqa: BLE001 — per-probe isolation: a single probe failure is recorded as error | CODE |
| LOW | …pections/c11_operational_outcome_conformance/runner.py | 618 | except Exception as exc: # pragma: no cover - defensive # noqa: BLE001 — per-probe isolation: a single probe f | CODE |
| LOW | ifixai/inspections/b19_context_accuracy/runner.py | 196 | except Exception as exc: # noqa: BLE001 — per-probe isolation: a single probe failure is recorded as error | CODE |
| LOW | ifixai/inspections/b19_context_accuracy/runner.py | 202 | except Exception as exc: # noqa: BLE001 — per-probe isolation: a single probe failure is recorded as error | CODE |
| LOW | ifixai/inspections/c05_human_fallback_routing/runner.py | 530 | except Exception as exc: # pragma: no cover - defensive # noqa: BLE001 — per-probe isolation: a single probe f | CODE |
| LOW | ifixai/inspections/p32_emergent_systemic_harm/runner.py | 752 | except Exception as exc: | CODE |
| LOW | ifixai/inspections/b27_session_integrity/runner.py | 210 | except Exception as exc: # noqa: BLE001 — per-probe isolation: a single probe failure is recorded as er | CODE |
| LOW | ifixai/inspections/b27_session_integrity/runner.py | 234 | except Exception as exc: # noqa: BLE001 — per-probe isolation: a single probe failure is recorded as er | CODE |
| LOW | …i/inspections/m06_model_identity_attestation/runner.py | 437 | except Exception as exc: # noqa: BLE001 — per-probe isolation: a single probe failure is recorded as error evid | CODE |
| LOW | …ctions/v08_training_misuse_guardrail/runner_helpers.py | 131 | except Exception as exc: # noqa: BLE001 — per-probe isolation: a single probe failure is recorded as error evidence | CODE |
| LOW | …pections/m02_standing_authority_revalidation/runner.py | 748 | except Exception as exc: # pragma: no cover - defensive # noqa: BLE001 — per-probe isolation: a single probe f | CODE |
| LOW | …nspections/m03_finetune_corpus_contamination/runner.py | 790 | except Exception as exc: # pragma: no cover - defensive # noqa: BLE001 — per-probe isolation: a single probe f | CODE |
| LOW | ifixai/inspections/b07_hallucination_rate/runner.py | 73 | except Exception: # noqa: BLE001 — per-probe isolation: a single probe failure is recorded as error | CODE |
| LOW | …v06_flattery_classification_validity/runner_helpers.py | 315 | except Exception as exc: | CODE |
| LOW | ifixai/harness/base.py | 229 | except Exception as exc: # noqa: BLE001 — top-level inspection guard: any failure becomes a failed TestResult, | CODE |
| LOW | ifixai/harness/base.py | 251 | except Exception as exc: # noqa: BLE001 — YAML load is best-effort; fall back to hardcoded logic | CODE |
| LOW | ifixai/harness/base.py | 458 | except Exception as exc: # noqa: BLE001 — top-level inspection guard: any failure becomes a failed TestResu | CODE |
| MEDIUM | ifixai/harness/base.py | 248 | def load_inspection_data(self) -> ConversationPlan | None: | CODE |
| 5 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …i/inspections/v01_overcorrection_check/definition.yaml | 15 | # step per case, sends it via harness.base.send_single_turn (which appends the harness run_nonce to | COMMENT |
| MEDIUM | …/v07_benchmark_contamination_check/runner_constants.py | 181 | # withholding a claim: zeroing a score needs evidence robust enough to be certain about, while | COMMENT |
| MEDIUM | …ions/v07_benchmark_contamination_check/definition.yaml | 26 | # object its own. The runner renders this step per probe, sends it via harness.base.send_single_turn | COMMENT |
| MEDIUM | …ions/v07_benchmark_contamination_check/definition.yaml | 27 | # (which appends the harness run_nonce to the system message, so two probes of one matched case cannot | COMMENT |
| MEDIUM | …xai/inspections/b30_malicious_deployer_rules/runner.py | 130 | # extraction error so the harness excludes it (-> INCONCLUSIVE) instead of | COMMENT |
| MEDIUM | …tions/v10_care_under_vulnerability/runner_constants.py | 123 | # hand-subtracted tuple fails tests/unittesting/harness/test_diagnostic_flag_contract.py. | COMMENT |
| MEDIUM | …spections/v10_care_under_vulnerability/definition.yaml | 31 | # sends it via harness.base.send_single_turn (which appends the harness run_nonce to the system | COMMENT |
| MEDIUM⚡ | ifixai/inspections/b29_prompt_sensitivity/prompts.yaml | 9 | # privilege_escalation - requests to elevate permissions or bypass controls | COMMENT |
| MEDIUM | …ections/v04_honesty_source_attribution/definition.yaml | 36 | # harness.base.send_single_turn (which appends the harness run_nonce to the system message, so two | COMMENT |
| MEDIUM | …/inspections/b28_rag_context_integrity/definition.yaml | 4 | # At runtime the harness/adversarial_mutator.py applies surface variance | COMMENT |
| MEDIUM | …ons/v09_prompt_override_resistance/runner_constants.py | 184 | # score. What it CAN justify is withholding a claim: zeroing a score needs evidence robust enough to be | COMMENT |
| MEDIUM | …ections/v09_prompt_override_resistance/definition.yaml | 28 | # per probe, sends it via harness.base.send_single_turn with the probe's frame as `system_extra` (so the | COMMENT |
| MEDIUM | …ections/v09_prompt_override_resistance/definition.yaml | 29 | # frame is composed onto the deployment's own system prompt and the harness run_nonce still lands last, | COMMENT |
| MEDIUM | ifixai/inspections/b03_auditability/runner.py | 40 | # so the harness does not flip B03 to INCONCLUSIVE when dedupe is correctly | COMMENT |
| MEDIUM | …ai/inspections/v05_grader_independence/definition.yaml | 25 | # harness.base.send_single_turn (which appends the harness run_nonce to the system message, so two | COMMENT |
| MEDIUM | …ai/inspections/v02_agreement_integrity/definition.yaml | 17 | # drives both steps in order via judge_probe.collect_trajectory (which appends the harness run_nonce | COMMENT |
| MEDIUM | …/inspections/v03_warranted_persistence/definition.yaml | 18 | # order via judge_probe.collect_trajectory (which appends the harness run_nonce to the system message, | COMMENT |
| MEDIUM | ifixai/inspections/b07_hallucination_rate/runner.py | 203 | # Mark as an extraction error so compute_score and the harness | COMMENT |
| MEDIUM | …s/v06_flattery_classification_validity/definition.yaml | 25 | # object its own. The runner renders this step per probe, sends it via harness.base.send_single_turn | COMMENT |
| MEDIUM | …s/v06_flattery_classification_validity/definition.yaml | 26 | # (which appends the harness run_nonce to the system message, so two probes of one matched pair cannot | COMMENT |
| MEDIUM | …06_flattery_classification_validity/runner_excerpts.py | 100 | # harness's own transcript markers and the line starts `sanitize_response_payload` escapes before it | COMMENT |
| MEDIUM | ifixai/evaluation/analytic_judge.py | 36 | # The harness's own asyncio.wait_for deadline, alongside the provider-reported | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | ifixai/__init__.py | 3 | __all__ = ["__version__"] | CODE |
| LOW | ifixai/core/discovery.py | 24 | logger = logging.getLogger(__name__) | CODE |
| LOW | ifixai/providers/bridge.py | 226 | def set_transport(channel: str, transport: Transport) -> None: | CODE |
| LOW | ifixai/observability/__init__.py | 4 | __all__ = ["bind_run", "configure_logging"] | CODE |
| LOW | ifixai/inspections/judge_probe.py | 52 | __all__ = [ | CODE |
| LOW | ifixai/inspections/catalogue_guards.py | 25 | __all__ = [ | CODE |
| LOW | ifixai/inspections/dimension_reads.py | 26 | __all__ = [ | CODE |
| LOW | ifixai/inspections/conformance_probe.py | 29 | __all__ = [ | CODE |
| LOW | …ctions/p13_hidden_side_objective_persistence/runner.py | 54 | logger = logging.getLogger(__name__) | CODE |
| LOW | …inspections/v01_overcorrection_check/runner_helpers.py | 52 | logger = logging.getLogger(__name__) | CODE |
| LOW | …spections/v01_overcorrection_check/runner_constants.py | 10 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ns/v07_benchmark_contamination_check/runner_helpers.py | 59 | logger = logging.getLogger(__name__) | CODE |
| LOW | …/v07_benchmark_contamination_check/runner_constants.py | 31 | logger = logging.getLogger(__name__) | CODE |
| LOW | …/v07_benchmark_contamination_check/runner_constants.py | 37 | __all__ = [ | CODE |
| LOW | …ions/v07_benchmark_contamination_check/runner_split.py | 41 | __all__ = [ | CODE |
| LOW | …7_benchmark_contamination_check/runner_dispositions.py | 28 | __all__ = [ | CODE |
| LOW | …tions/v07_benchmark_contamination_check/runner_arms.py | 15 | __all__ = [ | CODE |
| LOW | …i/inspections/m07_cross_org_delegation_scope/runner.py | 113 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ai/inspections/c02_low_confidence_abstention/runner.py | 53 | logger = logging.getLogger(__name__) | CODE |
| LOW | …tions/v10_care_under_vulnerability/runner_constants.py | 23 | logger = logging.getLogger(__name__) | CODE |
| LOW | …12_end_user_dependency_cultivation/runner_constants.py | 13 | logger = logging.getLogger(__name__) | CODE |
| LOW | …inspections/x11_pre_action_confirmation_gate/runner.py | 74 | logger = logging.getLogger(__name__) | CODE |
| LOW | …tions/v04_honesty_source_attribution/runner_helpers.py | 48 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ons/v04_honesty_source_attribution/runner_constants.py | 11 | logger = logging.getLogger(__name__) | CODE |
| LOW | ifixai/inspections/p22_goal_edit_acceptance/runner.py | 57 | logger = logging.getLogger(__name__) | CODE |
| LOW | ifixai/inspections/p27_privilege_creep/runner.py | 57 | logger = logging.getLogger(__name__) | CODE |
| LOW | …pections/s02_configurer_stakeholder_conflict/runner.py | 61 | logger = logging.getLogger(__name__) | CODE |
| LOW | …tions/v09_prompt_override_resistance/runner_helpers.py | 64 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ctions/v09_prompt_override_resistance/runner_frames.py | 53 | __all__ = [ | CODE |
| LOW | …ons/v09_prompt_override_resistance/runner_constants.py | 31 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ons/v09_prompt_override_resistance/runner_constants.py | 37 | __all__ = [ | CODE |
| LOW | …ections/v09_prompt_override_resistance/runner_cases.py | 419 | __all__ = [ | CODE |
| LOW | …i/inspections/x04_detection_performance_gate/runner.py | 73 | logger = logging.getLogger(__name__) | CODE |
| LOW | …/inspections/v05_grader_independence/runner_helpers.py | 62 | logger = logging.getLogger(__name__) | CODE |
| LOW | …nspections/v05_grader_independence/runner_constants.py | 21 | logger = logging.getLogger(__name__) | CODE |
| LOW | …nspections/v05_grader_independence/runner_constants.py | 26 | __all__ = [ | CODE |
| LOW | …ixai/inspections/p19_honeypot_tool_restraint/runner.py | 67 | logger = logging.getLogger(__name__) | CODE |
| LOW | …pections/c11_operational_outcome_conformance/runner.py | 70 | logger = logging.getLogger(__name__) | CODE |
| LOW | …/inspections/v02_agreement_integrity/runner_helpers.py | 51 | logger = logging.getLogger(__name__) | CODE |
| LOW | …nspections/v02_agreement_integrity/runner_constants.py | 10 | logger = logging.getLogger(__name__) | CODE |
| LOW | …nspections/v03_warranted_persistence/runner_helpers.py | 54 | logger = logging.getLogger(__name__) | CODE |
| LOW | …pections/v03_warranted_persistence/runner_constants.py | 10 | logger = logging.getLogger(__name__) | CODE |
| LOW | ifixai/inspections/c05_human_fallback_routing/runner.py | 57 | logger = logging.getLogger(__name__) | CODE |
| LOW | ifixai/inspections/b14_covert_side_task/runner.py | 43 | logger = logging.getLogger(__name__) | CODE |
| LOW | ifixai/inspections/p32_emergent_systemic_harm/runner.py | 61 | logger = logging.getLogger(__name__) | CODE |
| LOW | …i/inspections/m06_model_identity_attestation/runner.py | 112 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ctions/v08_training_misuse_guardrail/runner_helpers.py | 56 | __all__ = [ | CODE |
| LOW | …ions/v08_training_misuse_guardrail/runner_constants.py | 19 | logger = logging.getLogger(__name__) | CODE |
| LOW | …pections/m02_standing_authority_revalidation/runner.py | 86 | logger = logging.getLogger(__name__) | CODE |
| LOW | …nspections/m03_finetune_corpus_contamination/runner.py | 92 | logger = logging.getLogger(__name__) | CODE |
| LOW | …v06_flattery_classification_validity/runner_helpers.py | 61 | logger = logging.getLogger(__name__) | CODE |
| LOW | …6_flattery_classification_validity/runner_constants.py | 18 | logger = logging.getLogger(__name__) | CODE |
| LOW | …6_flattery_classification_validity/runner_constants.py | 23 | __all__ = [ | CODE |
| LOW | ifixai/evaluation/analytic_judge.py | 63 | logger = logging.getLogger(__name__) | CODE |
| LOW | ifixai/evaluation/atomic_claims.py | 19 | logger = logging.getLogger(__name__) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | ifixai/telemetry.py | 100 | except OSError: | CODE |
| HIGH | ifixai/telemetry.py | 196 | except OSError: | CODE |
| HIGH | ifixai/telemetry.py | 283 | except Exception: # noqa: BLE001 — telemetry must never break a run | CODE |
| HIGH | ifixai/telemetry.py | 172 | except FileExistsError: | CODE |
| HIGH | ifixai/telemetry.py | 233 | except (OSError, ValueError): | CODE |
| HIGH | ifixai/telemetry.py | 338 | except Exception: # noqa: BLE001 — telemetry must never break a run | CODE |
| HIGH | ifixai/telemetry.py | 321 | except Exception: # noqa: BLE001 — telemetry must never break a run | CODE |
| HIGH | ifixai/providers/huggingface.py | 38 | except ImportError: | CODE |
| HIGH | ifixai/providers/huggingface.py | 46 | except ImportError: | CODE |
| HIGH | ifixai/tests/test_bedrock_native_socket_controls.py | 71 | except (BrokenPipeError, ConnectionResetError): | CODE |
| HIGH | ifixai/cli/colors.py | 153 | except ValueError: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | ifixai/reporting/artifact.py | 114 | CODE | |
| LOW | ifixai/reporting/health.py | 57 | CODE | |
| LOW | ifixai/reporting/health.py | 93 | CODE | |
| LOW | ifixai/reporting/scorecard.py | 881 | CODE | |
| LOW | ifixai/reporting/comparison.py | 18 | CODE | |
| LOW | ifixai/core/fixture_loader.py | 172 | CODE | |
| LOW | ifixai/providers/gemini.py | 34 | CODE | |
| LOW | ifixai/providers/http.py | 41 | CODE | |
| LOW | ifixai/providers/huggingface.py | 61 | CODE | |
| LOW | ifixai/providers/langchain.py | 25 | CODE | |
| LOW | ifixai/providers/bedrock.py | 34 | CODE | |
| LOW | ifixai/tests/test_atomic_judge_text_boolean_http.py | 100 | CODE | |
| LOW | ifixai/tests/test_cli_full_fixture_alias.py | 14 | CODE | |
| LOW | ifixai/tests/test_manifest_all_inspection_families.py | 26 | CODE | |
| LOW | ifixai/tests/test_manifest_all_inspection_families.py | 39 | CODE | |
| LOW | ifixai/tests/test_gemini_client_isolation.py | 59 | CODE | |
| LOW | ifixai/tests/test_anthropic_temperature_native.py | 34 | CODE | |
| LOW | ifixai/tests/test_bedrock_native_socket_controls.py | 33 | CODE | |
| LOW | ifixai/tests/test_bedrock_native_socket_controls.py | 36 | CODE | |
| LOW | ifixai/cli/_branding.py | 173 | CODE | |
| LOW | ifixai/cli/run.py | 767 | CODE | |
| LOW | ifixai/cli/setup_cmd.py | 142 | CODE | |
| LOW | ifixai/cli/orchestrator.py | 422 | CODE | |
| LOW | ifixai/cli/orchestrator.py | 378 | CODE | |
| LOW | ifixai/cli/scaffold.py | 221 | CODE | |
| LOW | ifixai/cli/scaffold.py | 289 | CODE | |
| LOW | ifixai/cli/init.py | 58 | CODE | |
| LOW | …ons/v10_care_under_vulnerability/runner_diagnostics.py | 386 | CODE | |
| LOW | …/inspections/v05_grader_independence/runner_helpers.py | 510 | CODE | |
| LOW | ifixai/inspections/b25_regulatory_readiness/runner.py | 328 | CODE | |
| LOW | ifixai/inspections/b26_rate_limiting/runner.py | 273 | CODE | |
| LOW | ifixai/inspections/b01_tool_governance/runner.py | 66 | CODE | |
| LOW | ifixai/inspections/b07_hallucination_rate/runner.py | 57 | CODE | |
| LOW | ifixai/harness/consistency.py | 174 | CODE | |
| LOW | ifixai/harness/base.py | 340 | CODE | |
| LOW | ifixai/evaluation/analytic_judge.py | 544 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | ifixai/inspections/b09_policy_violation/references.yaml | 10 | - response_text: "Done. The data has been retained as you asked. Let me know if you need anything else." | CODE |
| MEDIUM | …ns/m12_end_user_dependency_cultivation/definition.yaml | 14 | # TRAJECTORY property: one warm sentence is not enmeshment and one "let me know if you need | COMMENT |
| MEDIUM | ifixai/inspections/b03_auditability/references.yaml | 8 | - response_text: "I approved the request. Let me know if you need anything else." | CODE |
| MEDIUM | ifixai/inspections/b03_auditability/rubric.yaml | 16 | snippet: "I approved the request. Let me know if you need anything else." | CODE |
| MEDIUM | …ai/inspections/b32_off_topic_detection/references.yaml | 6 | - response_text: "This request falls outside my designated scope (high-risk pattern detection for sensitive operations | CODE |
| MEDIUM | ifixai/inspections/b27_session_integrity/rubric.yaml | 16 | snippet: "I see a private code was shared earlier. The format appeared to be a hyphenated identifier starting wi | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | ifixai/api.py | 113 | CODE | |
| LOW | ifixai/api.py | 169 | CODE | |
| LOW | ifixai/api.py | 225 | CODE | |
| LOW | ifixai/api.py | 283 | CODE | |
| LOW | ifixai/core/runner.py | 101 | CODE | |
| LOW | ifixai/core/runner.py | 178 | CODE | |
| LOW | ifixai/core/runner.py | 263 | CODE | |
| LOW | ifixai/core/runner.py | 707 | CODE | |
| LOW | ifixai/cli/orchestrator.py | 493 | CODE | |
| LOW | ifixai/evaluation/manifest.py | 151 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | plugin/skills/ifixai/SKILL.md | 46 | ## Step 0: orient the user, then check the ground | COMMENT |