Run any process, on your machine or in an AI agent's environment, as if it were a pod in your Kubernetes cluster: real env vars, DNS, network, traffic.
This report presents the forensic synthetic code analysis of metalbear-co/mirrord, a Rust project with 5,216 GitHub stars. SynthScan v2.0 examined 206,777 lines of code across 1012 source files, recording 836 pattern matches distributed across 14 syntactic categories. The overall adjusted score of 5.5 places this repository in the Low AI signal band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 836 distinct pattern matches across 14 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | mirrord/progress/src/messages.rs | 21 | COMMENT | |
| LOW | mirrord/config/derive/README.md | 21 | ```rust | COMMENT |
| LOW | mirrord/config/derive/src/config/field.rs | 41 | COMMENT | |
| LOW | mirrord/config/derive/src/config/field.rs | 61 | /// pub test: <OtherConfig as crate::config::FromMirrordConfig>::Generator | COMMENT |
| LOW | mirrord/config/derive/src/config/field.rs | 121 | /// ```rust | COMMENT |
| LOW | mirrord/config/src/internal_proxy.rs | 21 | /// This is seldom used, but if you get `ConnectionRefused` errors, you might | COMMENT |
| LOW | mirrord/config/src/internal_proxy.rs | 41 | /// on process execution, delaying the layer startup and connection to proxy. | COMMENT |
| LOW | mirrord/config/src/internal_proxy.rs | 61 | /// { | COMMENT |
| LOW | mirrord/config/src/internal_proxy.rs | 81 | /// } | COMMENT |
| LOW | mirrord/config/src/internal_proxy.rs | 101 | #[config(default = 30)] | COMMENT |
| LOW | mirrord/config/src/internal_proxy.rs | 121 | /// 3. Otherwise, it will be treated as a path to the log file. | COMMENT |
| LOW | mirrord/config/src/internal_proxy.rs | 141 | /// | COMMENT |
| LOW | mirrord/config/src/feature.rs | 21 | pub mod fs; | COMMENT |
| LOW | mirrord/config/src/feature.rs | 41 | /// "exclude": "DATABASE_PASSWORD;SECRET_ENV", | COMMENT |
| LOW | mirrord/config/src/feature.rs | 61 | /// "ignore_ports": [9999, 10000] | COMMENT |
| LOW | mirrord/config/src/feature.rs | 81 | #[cfg_attr(test, config(derive = "PartialEq, Eq"))] | COMMENT |
| LOW | mirrord/config/src/feature.rs | 101 | /// | COMMENT |
| LOW | mirrord/config/src/feature.rs | 121 | pub split_queues: SplitQueuesConfig, | COMMENT |
| LOW | mirrord/config/src/ci.rs | 1 | use std::path::PathBuf; | COMMENT |
| LOW | mirrord/config/src/external_proxy.rs | 21 | /// | COMMENT |
| LOW | mirrord/config/src/external_proxy.rs | 41 | pub tls_enable: bool, | COMMENT |
| LOW | mirrord/config/src/external_proxy.rs | 61 | /// | COMMENT |
| LOW | mirrord/config/src/external_proxy.rs | 81 | /// The value should follow the RUST_LOG convention (i.e `mirrord=trace`). | COMMENT |
| LOW | mirrord/config/src/external_proxy.rs | 101 | COMMENT | |
| LOW | mirrord/config/src/experimental.rs | 21 | COMMENT | |
| LOW | mirrord/config/src/experimental.rs | 41 | COMMENT | |
| LOW | mirrord/config/src/experimental.rs | 61 | /// ### _experimental_ idle_local_http_connection_timeout {#experimental-idle_local_http_connection_timeout} | COMMENT |
| LOW | mirrord/config/src/experimental.rs | 81 | /// Disables any system wide proxy configuration for affecting the running application. | COMMENT |
| LOW | mirrord/config/src/experimental.rs | 101 | /// | COMMENT |
| LOW | mirrord/config/src/experimental.rs | 121 | default = true, | COMMENT |
| LOW | mirrord/config/src/experimental.rs | 141 | nested, | COMMENT |
| LOW | mirrord/config/src/experimental.rs | 161 | )] | COMMENT |
| LOW | mirrord/config/src/experimental.rs | 201 | } | COMMENT |
| LOW | mirrord/config/src/experimental.rs | 221 | pub transmit_delay: u64, | COMMENT |
| LOW | mirrord/config/src/lib.rs | 81 | /// mirrord allows for a high degree of customization when it comes to which features you want to | COMMENT |
| LOW | mirrord/config/src/lib.rs | 101 | /// | COMMENT |
| LOW | mirrord/config/src/lib.rs | 121 | /// "network": true | COMMENT |
| LOW | mirrord/config/src/lib.rs | 141 | /// "json_log": false, | COMMENT |
| LOW | mirrord/config/src/lib.rs | 161 | /// "LOCAL_BEAR": "panda" | COMMENT |
| LOW | mirrord/config/src/lib.rs | 181 | /// "ignore_ports": [9999, 10000] | COMMENT |
| LOW | mirrord/config/src/lib.rs | 201 | /// } | COMMENT |
| LOW | mirrord/config/src/lib.rs | 221 | /// If not provided, mirrord will use value from the kubeconfig. | COMMENT |
| LOW | mirrord/config/src/lib.rs | 241 | /// ## skip_build_tools {#root-skip_build_tools} | COMMENT |
| LOW | mirrord/config/src/lib.rs | 261 | /// It's similar to [`skip_processes`](#root-skip_processes), except that here it also skips | COMMENT |
| LOW | mirrord/config/src/lib.rs | 281 | COMMENT | |
| LOW | mirrord/config/src/lib.rs | 301 | COMMENT | |
| LOW | mirrord/config/src/lib.rs | 321 | pub profile: Option<String>, | COMMENT |
| LOW | mirrord/config/src/lib.rs | 341 | /// patched. | COMMENT |
| LOW | mirrord/config/src/lib.rs | 361 | /// ## container {#root-container} | COMMENT |
| LOW | mirrord/config/src/lib.rs | 381 | /// | COMMENT |
| LOW | mirrord/config/src/lib.rs | 401 | /// doing any network requests. This is useful when the system sets a proxy | COMMENT |
| LOW | mirrord/config/src/lib.rs | 421 | /// When specified, the given value will replace the default list rather than | COMMENT |
| LOW | mirrord/config/src/lib.rs | 441 | /// `mirrord-session={{ key }}` in `feature.network.incoming.http_filter`. | COMMENT |
| LOW | mirrord/config/src/lib.rs | 461 | /// 3. Config file: `{ "key": "my-key" }` | COMMENT |
| LOW | mirrord/config/src/lib.rs | 481 | /// See [OTel docs](https://opentelemetry.io/docs/specs/otel/context/env-carriers/#environment-variable-names) | COMMENT |
| LOW | mirrord/config/src/lib.rs | 541 | config.apply_magic(); | COMMENT |
| LOW | mirrord/config/src/lib.rs | 641 | /// | COMMENT |
| LOW | mirrord/config/src/lib.rs | 1201 | /// To solve this, we resolve the key *before* parsing the full config: | COMMENT |
| LOW | mirrord/config/src/lib.rs | 1761 | COMMENT | |
| LOW | mirrord/config/src/lib.rs | 2281 | match prev_user { | COMMENT |
| 687 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL⚡ | mirrord/config/src/lib.rs | 2132 | assert!(cfg.feature.network.dns.filter.is_none()); | CODE |
| CRITICAL⚡ | mirrord/config/src/lib.rs | 2142 | let filter = cfg.feature.network.dns.filter.as_ref().unwrap(); | CODE |
| CRITICAL⚡ | mirrord/config/src/lib.rs | 2151 | let filter = cfg.feature.network.dns.filter.as_ref().unwrap(); | CODE |
| CRITICAL | mirrord/config/src/lib.rs | 562 | if self.feature.network.dns.enabled.not() { | CODE |
| CRITICAL | mirrord/config/src/lib.rs | 565 | let Some(outgoing) = self.feature.network.outgoing.filter.as_ref() else { | CODE |
| CRITICAL | mirrord/config/src/lib.rs | 813 | if !self.feature.network.incoming.ignore_ports.is_empty() | CODE |
| CRITICAL | mirrord/config/src/lib.rs | 814 | && self.feature.network.incoming.ports.is_some() | CODE |
| CRITICAL | mirrord/config/src/lib.rs | 1096 | && !self.feature.network.incoming.http_filter.is_filter_set() | CODE |
| CRITICAL | mirrord/config/src/lib.rs | 2010 | let filter = cfg.feature.network.dns.filter.as_ref().unwrap(); | CODE |
| CRITICAL | mirrord/config/src/lib.rs | 2028 | let filter = cfg.feature.network.dns.filter.as_ref().unwrap(); | CODE |
| CRITICAL | mirrord/config/src/lib.rs | 2043 | assert!(cfg.feature.network.dns.filter.is_none()); | CODE |
| CRITICAL | mirrord/config/src/lib.rs | 2055 | let filter = cfg.feature.network.dns.filter.as_ref().unwrap(); | CODE |
| CRITICAL | mirrord/config/src/lib.rs | 2073 | let filter = cfg.feature.network.dns.filter.as_ref().unwrap(); | CODE |
| CRITICAL | mirrord/config/src/lib.rs | 2086 | let filter = cfg.feature.network.dns.filter.as_ref().unwrap(); | CODE |
| CRITICAL | mirrord/config/src/lib.rs | 2099 | let filter = cfg.feature.network.dns.filter.as_ref().unwrap(); | CODE |
| CRITICAL | mirrord/config/src/lib.rs | 2117 | let filter = cfg.feature.network.dns.filter.as_ref().unwrap(); | CODE |
| CRITICAL | mirrord/cli/src/connection.rs | 436 | config.feature.network.incoming.http_filter.is_filter_set(), | CODE |
| CRITICAL | mirrord/operator/src/client.rs | 491 | self.operator.spec.license.expire_at.days_until_expiration() | CODE |
| CRITICAL | mirrord/operator/src/client.rs | 502 | let is_trial = self.operator.spec.license.name.contains("(Trial)"); | CODE |
| CRITICAL | mirrord/operator/src/client.rs | 554 | self.operator.spec.license.organization.as_str() | CODE |
| CRITICAL | mirrord/operator/src/client.rs | 1202 | let Some(fingerprint) = self.operator.spec.license.fingerprint.clone() else { | CODE |
| CRITICAL | mirrord/operator/src/client.rs | 1208 | let subscription_id = self.operator.spec.license.subscription_id.clone(); | CODE |
| CRITICAL | mirrord/operator/src/client.rs | 1826 | operator_license_fingerprint: self.operator.spec.license.fingerprint.clone(), | CODE |
| CRITICAL | mirrord/operator/src/client/connect_params.rs | 233 | on_concurrent_steal: config.feature.network.incoming.on_concurrent_steal.into(), | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | mirrord/cli/src/external_proxy.rs | 5 | //! ┌────────────────┐ | COMMENT |
| MEDIUM⚡ | mirrord/cli/src/external_proxy.rs | 7 | //! └─────┬────▲─────┘ | COMMENT |
| MEDIUM⚡ | mirrord/cli/src/external_proxy.rs | 10 | //! ┌─────▼────┴─────┐ | COMMENT |
| MEDIUM⚡ | mirrord/cli/src/external_proxy.rs | 12 | //! └─────┬────▲─────┘ | COMMENT |
| MEDIUM⚡ | mirrord/cli/src/external_proxy.rs | 15 | //! ┌─────▼────┴─────┐◄──────┐ | COMMENT |
| MEDIUM⚡ | mirrord/cli/src/external_proxy.rs | 17 | //! └──┬─────────────┴──┐ │ | COMMENT |
| MEDIUM⚡ | mirrord/cli/src/external_proxy.rs | 19 | //! └────────────────┘ | COMMENT |
| MEDIUM | .github/workflows/ci.yaml | 56 | # ── plan ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .github/workflows/ci.yaml | 185 | # ── checks (no build deps) ───────────────────────────────────────── | COMMENT |
| MEDIUM | .github/workflows/ci.yaml | 216 | # ── builds ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .github/workflows/ci.yaml | 237 | # ── tests ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .github/workflows/ci.yaml | 295 | # ── external calls ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .github/workflows/ci.yaml | 312 | # ── gate ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .github/workflows/releases-test.yaml | 13 | # ============================================================ | COMMENT |
| MEDIUM | .github/workflows/releases-test.yaml | 15 | # ============================================================ | COMMENT |
| MEDIUM | .github/workflows/releases-test.yaml | 185 | # ============================================================ | COMMENT |
| MEDIUM | .github/workflows/releases-test.yaml | 187 | # ============================================================ | COMMENT |
| MEDIUM | .github/workflows/releases-test.yaml | 418 | # ============================================================ | COMMENT |
| MEDIUM | .github/workflows/releases-test.yaml | 420 | # ============================================================ | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | mirrord/config/src/experimental.rs | 114 | /// Essentially your application has to assume that it might be | COMMENT |
| MEDIUM | mirrord/layer-win/src/process/environment.rs | 3 | //! This module provides safe, robust parsing of Windows environment blocks | COMMENT |
| MEDIUM | mirrord/intproxy/src/failover_strategy.rs | 20 | /// Essentially send an error message to every layer that: | COMMENT |
| MEDIUM | mirrord/layer/src/go/linux_x64.rs | 896 | /// Essentially, a thin compatibility layer between the Go runtime code and the rest of our | COMMENT |
| MEDIUM | mirrord/layer/src/go/linux_x64.rs | 1087 | /// Essentially, a thin compatibility layer between our assembly glue and C ABI. | COMMENT |
| MEDIUM | packages/monitor/src/analytics.ts | 29 | // linked_flag, url_trigger) makes this robust to future project-config changes too. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/bash-e2e/file.sh | 5 | validation_text="Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et | CODE |
| LOW | tests/bash-e2e/file.sh | 5 | validation_text="Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et | CODE |
| LOW | tests/python-e2e/app_flask.py | 17 | TEXT = "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore ma | CODE |
| LOW | tests/python-e2e/app_flask.py | 17 | TEXT = "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore ma | CODE |
| LOW | tests/python-e2e/ops.py | 5 | TEXT = "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore ma | CODE |
| LOW | tests/python-e2e/ops.py | 5 | TEXT = "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore ma | CODE |
| LOW | tests/python-e2e/ops.py | 29 | Seeks character by character in a file with Lorem Ipsum text in "/tmp" and verifies the concatenation of the tex | STRING |
| LOW | tests/python-e2e/files_ro.py | 7 | TEXT = "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore ma | CODE |
| LOW | tests/python-e2e/files_ro.py | 7 | TEXT = "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore ma | CODE |
| LOW⚡ | tests/python-e2e/files_unlink.py | 7 | TEXT = "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore ma | CODE |
| LOW⚡ | tests/python-e2e/files_unlink.py | 7 | TEXT = "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore ma | CODE |
| LOW | tests/src/utils.rs | 31 | const TEXT: &str = "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore | CODE |
| LOW | tests/src/utils.rs | 31 | const TEXT: &str = "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | CODE_REVIEW.md | 50 | A note about AI: information and explanations about the new code can be generated by AI. This does not mean the author | CODE |
| HIGH | mirrord/operator/src/crd/queue_split.rs | 35 | /// Queue filters as requested in the user's mirrord config. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | mirrord/layer-win/src/lib.rs | 117 | /// # Return value | COMMENT |
| LOW | mirrord/layer-win/src/lib.rs | 145 | /// # Return value | COMMENT |
| LOW | mirrord/layer-win/src/lib.rs | 163 | /// # Return value | COMMENT |
| LOW | mirrord/layer-win/src/lib.rs | 173 | /// # Return value | COMMENT |
| LOW | scripts/win_wsl_setup_ci_env.sh | 27 | # Check if running on WSL | COMMENT |
| LOW | scripts/setup_ci_env_wsl.sh | 27 | # Check if running on WSL | COMMENT |
| LOW | .github/workflows/release.yaml | 1156 | # Display output | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/python-e2e/ops.py | 91 | def test_statfs_and_fstatvfs_sucess(self): | CODE |
| LOW⚡ | tests/python-e2e/files_unlink.py | 11 | def test_unlink_remote_readwrite(self): | CODE |
| LOW | tests/python-e2e/files_unlink.py | 30 | # def test_unlinkat_remote_readwrite(self): | COMMENT |
| LOW | tests/python-e2e/hostname.py | 5 | def test_contains_hostname_echo(self): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | mirrord/macros/src/lib.rs | 20 | /// ### Example usage | COMMENT |
| LOW | scripts/install.sh | 9 | # Usage: | COMMENT |
| LOW | scripts/release.sh | 7 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | xtask/src/tasks/release.rs | 68 | // Step 1: Prepare the merged UI frontend assets required by rust-embed. | COMMENT |
| LOW⚡ | xtask/src/tasks/release.rs | 74 | // Step 2: Build layer and CLI based on platform | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | xtask/src/tasks/release.rs | 68 | // Step 1: Prepare the merged UI frontend assets required by rust-embed. | COMMENT |
| LOW⚡ | xtask/src/tasks/release.rs | 74 | // Step 2: Build layer and CLI based on platform | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | mirrord-schema.json | 2853 | "description": "Filter configuration for the HTTP traffic stealer feature.\n\nAllows the user to set a filter (reg | CODE |
| MEDIUM | mirrord-schema.json | 3747 | "description": "Tunnel outgoing network operations through mirrord.\n\nSee the outgoing [reference](https://metalb | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | mirrord/layer-tests/tests/apps/app_fastapi.py | 31 | def handle_request(method: HttpMethod): | CODE |
| LOW | mirrord/layer-tests/tests/apps/app_flask.py | 41 | def handle_request(method: HttpMethod): | CODE |
| LOW | mirrord/layer-tests/tests/apps/shared_sockets.py | 23 | def handle_request(method: HttpMethod): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/python-e2e/files_ro.py | 3 | CODE | |
| LOW | tests/python-e2e/files_ro.py | 4 | CODE |