Repository Analysis

metalbear-co/mirrord

Run any process, on your machine or in an AI agent's environment, as if it were a pod in your Kubernetes cluster: real env vars, DNS, network, traffic.

5.4 Low AI signal View on GitHub

Analysis Overview

This report presents the forensic synthetic code analysis of metalbear-co/mirrord, a Rust project with 5,281 GitHub stars. SynthScan v2.0 examined 237,403 lines of code across 1129 source files, recording 970 pattern matches distributed across 14 syntactic categories. The overall adjusted score of 5.4 places this repository in the Low AI signal band.

The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).

5.4
Adjusted Score
5.4
Raw Score
100%
Time Factor
2026-08-28
Last Push
5.3K
Stars
Rust
Language
237.4K
Lines of Code
1.1K
Files
970
Pattern Hits
2026-08-29
Scan Date
0.02
HC Hit Rate

What These Metrics Mean

Adjusted Score
Primary synthetic code indicator. Raw score normalised per 1,000 lines of code and multiplied by the temporal discount factor. This is the definitive comparative metric — use it to rank repositories by AI authorship density.
Raw Score
The unmodified sum of all severity-weighted, context-multiplied pattern match scores before temporal discounting. Reflects the absolute signal strength independent of when the repository was last active.
Time Factor
The temporal discount multiplier (0–100%) applied to the raw score. Repositories last updated before ChatGPT's launch (Nov 2022) receive a 5% factor. Full signal is only assigned to repositories active in the post-adoption era (Jan 2024+).
Pattern Hits
Total count of individual pattern matches across all files and categories. A high hit count with a low score may indicate a very large codebase with isolated AI snippets; a low count with a high score indicates dense, concentrated AI signatures.
HC Hit Rate
High+Critical pattern hits per file, averaged across the repository. This orthogonal signal catches repositories where a few files are densely packed with high-severity AI tells — a strong indicator even when the normalised score appears moderate due to codebase size.
Lines of Code / Files
Total lines and files analysed. The scanner examines 94 file extensions. These denominators are used to normalise the score, enabling fair comparison between repositories of vastly different sizes.

Score History

This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.

Severity Breakdown

Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.

CRITICAL 25HIGH 2MEDIUM 29LOW 914

Directory Score Breakdown

This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.

Pattern Findings

The scanner identified 970 distinct pattern matches across 14 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.

Over-Commented Block875 hits · 852 pts
SeverityFileLineSnippetContext
LOWmirrord/utils-win/examples/preview_scenarios.rs1//! Preview each crash-dialog scenario without a real crash.COMMENT
LOWmirrord/utils-win/src/lib.rs1//! Windows-only utilities shared across mirrord.COMMENT
LOWmirrord/utils-win/src/fixed_buf.rs1//! A fixed-capacity, allocation-free [`core::fmt::Write`] sink.COMMENT
LOWmirrord/utils-win/src/modules.rs121 pub name: String,COMMENT
LOWmirrord/utils-win/src/modules.rs221}COMMENT
LOWmirrord/utils-win/src/modules.rs281 ///COMMENT
LOWmirrord/utils-win/src/modules.rs321 self.entries.len()COMMENT
LOWmirrord/utils-win/src/modules.rs521COMMENT
LOWmirrord/utils-win/src/process.rs41///COMMENT
LOWmirrord/utils-win/src/process.rs81/// Looks up a process's liveness and image name.COMMENT
LOWmirrord/utils-win/src/diagnostics/handle.rs41 ///COMMENT
LOWmirrord/utils-win/src/diagnostics/crash.rs1//! In-process crash handler.COMMENT
LOWmirrord/utils-win/src/diagnostics/crash.rs21//! already fatal and recovery is impossible. The other severe codes are left to the filter; it alsoCOMMENT
LOWmirrord/utils-win/src/diagnostics/crash.rs121COMMENT
LOWmirrord/utils-win/src/diagnostics/crash.rs141///COMMENT
LOWmirrord/utils-win/src/diagnostics/crash.rs161 ///COMMENT
LOWmirrord/utils-win/src/diagnostics/crash.rs261COMMENT
LOWmirrord/utils-win/src/diagnostics/monitor.rs1//! Out-of-process crash-dump monitor.COMMENT
LOWmirrord/utils-win/src/diagnostics/monitor.rs61/// Upper bound on a registration message, to guard the reader.COMMENT
LOWmirrord/utils-win/src/diagnostics/dialog.rs1//! The native crash dialog — SA-MP-inspired, tuned for Windows 11.COMMENT
LOWmirrord/utils-win/src/diagnostics/dialog.rs221}COMMENT
LOWmirrord/utils-win/src/diagnostics/dialog.rs481 );COMMENT
LOWmirrord/utils-win/src/diagnostics/dialog.rs641///COMMENT
LOWmirrord/utils-win/src/diagnostics/report.rs1//! The crash report.COMMENT
LOWmirrord/utils-win/src/diagnostics/report.rs101COMMENT
LOWmirrord/utils-win/src/diagnostics/report.rs121/// `0xC00000FD`, divide-by-zero `0xC0000094` — whose top nibble `C` = `1100b` is severity 11 withCOMMENT
LOWmirrord/utils-win/src/diagnostics/report.rs161 /// The layer failed to initialize before the process could run under mirrord.COMMENT
LOWmirrord/utils-win/src/diagnostics/report.rs201 /// A module inventory of the crashing process, when it could be enumerated.COMMENT
LOWmirrord/utils-win/src/diagnostics/report.rs221 pub stem: String,COMMENT
LOWmirrord/utils-win/src/diagnostics/report.rs241/// This incident's report text — and its module inventory, when there is one — are written as looseCOMMENT
LOWmirrord/utils-win/src/diagnostics/report.rs361 .filter(|node| node.parent_pid == report.root_pid || !known.contains(&node.parent_pid))COMMENT
LOWmirrord/utils-win/src/diagnostics/report.rs441/// Whether a code is a native CPU/OS fault mirrord owns.COMMENT
LOWmirrord/utils-win/src/diagnostics/report.rs641/// The archive is the one thing to attach: for each incident its report, crash record, moduleCOMMENT
LOWmirrord/utils-win/src/diagnostics/dump.rs21 | MiniDumpWithUnloadedModulesCOMMENT
LOWmirrord/utils-win/src/diagnostics/monitor/channel.rs41/// named section and agree on the `#[repr(C)]` [`CrashInfo`] layout, `view.as_ptr() as *mutCOMMENT
LOWmirrord/utils-win/src/diagnostics/monitor/channel.rs81 }COMMENT
LOWmirrord/utils-win/src/diagnostics/monitor/channel.rs121 }COMMENT
LOWmirrord/utils-win/src/diagnostics/monitor/server.rs61 /// Whether `dump_directory` is a session temp dir to remove on a clean exit.COMMENT
LOWmirrord/utils-win/src/diagnostics/monitor/server.rs81 /// The session stamp the session archive file name is built from.COMMENT
LOWmirrord/utils-win/src/diagnostics/monitor/server.rs301 /// The layer signalled a clean shutdown — a normal close at any exit code.COMMENT
LOWmirrord/utils-win/src/diagnostics/monitor/server.rs621///COMMENT
LOWmirrord/utils-win/src/diagnostics/dialog/theme.rs81COMMENT
LOWmirrord/utils-win/src/diagnostics/dialog/theme.rs121/// Scales a color's brightness.COMMENT
LOWmirrord/utils-win/src/diagnostics/dialog/theme.rs141pub(super) const SUBTITLE_FONT_NAME: &str = "Segoe UI Variable Text";COMMENT
LOWmirrord/utils-win/src/diagnostics/dialog/state.rs1//! The dialog's input and per-window state.COMMENT
LOWmirrord/progress/src/messages.rs21COMMENT
LOWmirrord/config/derive/README.md21```rustCOMMENT
LOWmirrord/config/derive/src/config/field.rs41COMMENT
LOWmirrord/config/derive/src/config/field.rs61 /// pub test: <OtherConfig as crate::config::FromMirrordConfig>::GeneratorCOMMENT
LOWmirrord/config/derive/src/config/field.rs121 /// ```rustCOMMENT
LOWmirrord/config/src/internal_proxy.rs21/// This is seldom used, but if you get `ConnectionRefused` errors, you mightCOMMENT
LOWmirrord/config/src/internal_proxy.rs41 /// on process execution, delaying the layer startup and connection to proxy.COMMENT
LOWmirrord/config/src/internal_proxy.rs61 /// {COMMENT
LOWmirrord/config/src/internal_proxy.rs81 /// }COMMENT
LOWmirrord/config/src/internal_proxy.rs101 #[config(default = 30)]COMMENT
LOWmirrord/config/src/internal_proxy.rs121 /// 3. Otherwise, it will be treated as a path to the log file.COMMENT
LOWmirrord/config/src/internal_proxy.rs141 ///COMMENT
LOWmirrord/config/src/feature.rs21pub mod fs;COMMENT
LOWmirrord/config/src/feature.rs41/// "exclude": "DATABASE_PASSWORD;SECRET_ENV",COMMENT
LOWmirrord/config/src/feature.rs61/// "ignore_ports": [9999, 10000]COMMENT
815 more matches not shown…
Hallucination Indicators25 hits · 265 pts
SeverityFileLineSnippetContext
CRITICALmirrord/config/src/lib.rs2377 assert!(cfg.feature.network.dns.filter.is_none());CODE
CRITICALmirrord/config/src/lib.rs2387 let filter = cfg.feature.network.dns.filter.as_ref().unwrap();CODE
CRITICALmirrord/config/src/lib.rs2396 let filter = cfg.feature.network.dns.filter.as_ref().unwrap();CODE
CRITICALmirrord/config/src/lib.rs678 if self.feature.network.dns.enabled.not() {CODE
CRITICALmirrord/config/src/lib.rs681 let Some(outgoing) = self.feature.network.outgoing.filter.as_ref() else {CODE
CRITICALmirrord/config/src/lib.rs959 if !self.feature.network.incoming.ignore_ports.is_empty()CODE
CRITICALmirrord/config/src/lib.rs960 && self.feature.network.incoming.ports.is_some()CODE
CRITICALmirrord/config/src/lib.rs1237 && !self.feature.network.incoming.http_filter.is_filter_set()CODE
CRITICALmirrord/config/src/lib.rs2255 let filter = cfg.feature.network.dns.filter.as_ref().unwrap();CODE
CRITICALmirrord/config/src/lib.rs2273 let filter = cfg.feature.network.dns.filter.as_ref().unwrap();CODE
CRITICALmirrord/config/src/lib.rs2288 assert!(cfg.feature.network.dns.filter.is_none());CODE
CRITICALmirrord/config/src/lib.rs2300 let filter = cfg.feature.network.dns.filter.as_ref().unwrap();CODE
CRITICALmirrord/config/src/lib.rs2318 let filter = cfg.feature.network.dns.filter.as_ref().unwrap();CODE
CRITICALmirrord/config/src/lib.rs2331 let filter = cfg.feature.network.dns.filter.as_ref().unwrap();CODE
CRITICALmirrord/config/src/lib.rs2344 let filter = cfg.feature.network.dns.filter.as_ref().unwrap();CODE
CRITICALmirrord/config/src/lib.rs2362 let filter = cfg.feature.network.dns.filter.as_ref().unwrap();CODE
CRITICALmirrord/cli/src/connection.rs437 config.feature.network.incoming.http_filter.is_filter_set(),CODE
CRITICALmirrord/kube/src/resolved.rs179 target.representative.resource.metadata.namespace.as_deref()CODE
CRITICALmirrord/operator/src/client.rs505 self.operator.spec.license.expire_at.days_until_expiration()CODE
CRITICALmirrord/operator/src/client.rs516 let is_trial = self.operator.spec.license.name.contains("(Trial)");CODE
CRITICALmirrord/operator/src/client.rs568 self.operator.spec.license.organization.as_str()CODE
CRITICALmirrord/operator/src/client.rs1276 let Some(fingerprint) = self.operator.spec.license.fingerprint.clone() else {CODE
CRITICALmirrord/operator/src/client.rs1282 let subscription_id = self.operator.spec.license.subscription_id.clone();CODE
CRITICALmirrord/operator/src/client.rs1960 operator_license_fingerprint: self.operator.spec.license.fingerprint.clone(),CODE
CRITICALmirrord/operator/src/client/connect_params.rs263 on_concurrent_steal: config.feature.network.incoming.on_concurrent_steal.into(),CODE
Decorative Section Separators21 hits · 74 pts
SeverityFileLineSnippetContext
MEDIUMmirrord/utils-win/src/diagnostics/report.rs110/// ┌─────┬───┬───┬────────────────┬────────────────────────┐COMMENT
MEDIUMmirrord/utils-win/src/diagnostics/report.rs112/// └──┬──┴─┬─┴─┬─┴───────┬────────┴───────────┬────────────┘COMMENT
MEDIUMmirrord/cli/src/external_proxy.rs5//! ┌────────────────┐COMMENT
MEDIUMmirrord/cli/src/external_proxy.rs7//! └─────┬────▲─────┘COMMENT
MEDIUMmirrord/cli/src/external_proxy.rs10//! ┌─────▼────┴─────┐COMMENT
MEDIUMmirrord/cli/src/external_proxy.rs12//! └─────┬────▲─────┘COMMENT
MEDIUMmirrord/cli/src/external_proxy.rs15//! ┌─────▼────┴─────┐◄──────┐COMMENT
MEDIUMmirrord/cli/src/external_proxy.rs17//! └──┬─────────────┴──┐ │COMMENT
MEDIUMmirrord/cli/src/external_proxy.rs19//! └────────────────┘COMMENT
MEDIUM.github/workflows/ci.yaml58 # ── plan ────────────────────────────────────────────────────────────COMMENT
MEDIUM.github/workflows/ci.yaml260 # ── checks (no build deps) ─────────────────────────────────────────COMMENT
MEDIUM.github/workflows/ci.yaml309 # ── builds ──────────────────────────────────────────────────────────COMMENT
MEDIUM.github/workflows/ci.yaml341 # ── tests ───────────────────────────────────────────────────────────COMMENT
MEDIUM.github/workflows/ci.yaml414 # ── external calls ──────────────────────────────────────────────────COMMENT
MEDIUM.github/workflows/ci.yaml431 # ── gate ────────────────────────────────────────────────────────────COMMENT
MEDIUM.github/workflows/releases-test.yaml13 # ============================================================COMMENT
MEDIUM.github/workflows/releases-test.yaml15 # ============================================================COMMENT
MEDIUM.github/workflows/releases-test.yaml185 # ============================================================COMMENT
MEDIUM.github/workflows/releases-test.yaml187 # ============================================================COMMENT
MEDIUM.github/workflows/releases-test.yaml434 # ============================================================COMMENT
MEDIUM.github/workflows/releases-test.yaml436 # ============================================================COMMENT
AI Slop Vocabulary7 hits · 19 pts
SeverityFileLineSnippetContext
LOWmirrord-schema.json4 "description": "mirrord allows for a high degree of customization when it comes to which features you want to\nenable,CODE
MEDIUMmirrord/config/src/experimental.rs114 /// Essentially your application has to assume that it might beCOMMENT
MEDIUMmirrord/layer-win/src/process/environment.rs3//! This module provides safe, robust parsing of Windows environment blocksCOMMENT
MEDIUMmirrord/intproxy/src/failover_strategy.rs37/// Essentially send an error message to every layer that:COMMENT
MEDIUMmirrord/layer/src/go/linux_x64.rs896 /// Essentially, a thin compatibility layer between the Go runtime code and the rest of ourCOMMENT
MEDIUMmirrord/layer/src/go/linux_x64.rs1087 /// Essentially, a thin compatibility layer between our assembly glue and C ABI.COMMENT
MEDIUMpackages/monitor/src/analytics.ts38 // linked_flag, url_trigger) makes this robust to future project-config changes too.COMMENT
Fake / Example Data13 hits · 14 pts
SeverityFileLineSnippetContext
LOWtests/bash-e2e/file.sh5validation_text="Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et CODE
LOWtests/bash-e2e/file.sh5validation_text="Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et CODE
LOWtests/python-e2e/app_flask.py17TEXT = "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore maCODE
LOWtests/python-e2e/app_flask.py17TEXT = "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore maCODE
LOWtests/python-e2e/ops.py5TEXT = "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore maCODE
LOWtests/python-e2e/ops.py5TEXT = "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore maCODE
LOWtests/python-e2e/ops.py29 Seeks character by character in a file with Lorem Ipsum text in "/tmp" and verifies the concatenation of the texSTRING
LOWtests/python-e2e/files_ro.py7TEXT = "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore maCODE
LOWtests/python-e2e/files_ro.py7TEXT = "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore maCODE
LOWtests/python-e2e/files_unlink.py7TEXT = "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore maCODE
LOWtests/python-e2e/files_unlink.py7TEXT = "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore maCODE
LOWtests/src/utils.rs31const TEXT: &str = "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore CODE
LOWtests/src/utils.rs31const TEXT: &str = "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore CODE
Synthetic Comment Markers2 hits · 12 pts
SeverityFileLineSnippetContext
HIGHCODE_REVIEW.md50A note about AI: information and explanations about the new code can be generated by AI. This does not mean the authorCODE
HIGHmirrord/operator/src/crd/queue_split.rs35 /// Queue filters as requested in the user's mirrord config.COMMENT
Redundant / Tautological Comments8 hits · 12 pts
SeverityFileLineSnippetContext
LOWmirrord/layer-win/src/lib.rs120/// # Return valueCOMMENT
LOWmirrord/layer-win/src/lib.rs155/// # Return valueCOMMENT
LOWmirrord/layer-win/src/lib.rs180/// # Return valueCOMMENT
LOWmirrord/layer-win/src/lib.rs192/// # Return valueCOMMENT
LOWscripts/win_wsl_setup_ci_env.sh27# Check if running on WSLCOMMENT
LOWscripts/setup_ci_env_wsl.sh27# Check if running on WSLCOMMENT
LOW.github/workflows/release.yaml1359 # Display outputCOMMENT
LOW.github/scripts/prune-artifacts.sh13# Set DRY_RUN to list what would go without deleting it.COMMENT
Hyper-Verbose Identifiers4 hits · 5 pts
SeverityFileLineSnippetContext
LOWtests/python-e2e/ops.py91 def test_statfs_and_fstatvfs_sucess(self):CODE
LOWtests/python-e2e/files_unlink.py11 def test_unlink_remote_readwrite(self):CODE
LOWtests/python-e2e/files_unlink.py30 # def test_unlinkat_remote_readwrite(self):COMMENT
LOWtests/python-e2e/hostname.py5 def test_contains_hostname_echo(self):CODE
Example Usage Blocks3 hits · 4 pts
SeverityFileLineSnippetContext
LOWmirrord/macros/src/lib.rs20/// ### Example usageCOMMENT
LOWscripts/install.sh9# Usage:COMMENT
LOWscripts/release.sh7# Usage:COMMENT
Verbosity Indicators2 hits · 4 pts
SeverityFileLineSnippetContext
LOWxtask/src/tasks/release.rs68 // Step 1: Prepare the merged UI frontend assets required by rust-embed.COMMENT
LOWxtask/src/tasks/release.rs74 // Step 2: Build layer and CLI based on platformCOMMENT
Structural Annotation Overuse2 hits · 4 pts
SeverityFileLineSnippetContext
LOWxtask/src/tasks/release.rs68 // Step 1: Prepare the merged UI frontend assets required by rust-embed.COMMENT
LOWxtask/src/tasks/release.rs74 // Step 2: Build layer and CLI based on platformCOMMENT
Slop Phrases2 hits · 4 pts
SeverityFileLineSnippetContext
MEDIUMmirrord-schema.json3349 "description": "Filter configuration for the HTTP traffic stealer feature.\n\nAllows the user to set a filter (regCODE
MEDIUMmirrord-schema.json4391 "description": "Tunnel outgoing network operations through mirrord.\n\nSee the outgoing [reference](https://metalbCODE
Overly Generic Function Names3 hits · 3 pts
SeverityFileLineSnippetContext
LOWmirrord/layer-tests/tests/apps/app_fastapi.py31def handle_request(method: HttpMethod):CODE
LOWmirrord/layer-tests/tests/apps/app_flask.py41def handle_request(method: HttpMethod):CODE
LOWmirrord/layer-tests/tests/apps/shared_sockets.py23def handle_request(method: HttpMethod):CODE
Unused Imports3 hits · 3 pts
SeverityFileLineSnippetContext
LOWtests/python-e2e/files_ro.py3CODE
LOWtests/python-e2e/files_ro.py4CODE
LOW.github/actions/next-release-version/version.py17CODE