PostgreSQL in-database durable execution
This report summarizes scanner evidence for microsoft/pg_durable, a Rust project with 2,832 GitHub stars. SynthScan examined 105,253 lines of code across 319 source files, recording 333 pattern matches distributed across 16 syntactic categories. The legacy adjusted pattern signal is 4.9 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 271 finding(s).
Are imports declared and package/API names verified? 4 finding(s).
Are wrappers, guards, and repeated structures necessary? 158 finding(s).
Which changes need focused human review? 333 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 333 distinct pattern matches across 16 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .devcontainer/onCreateCommand.sh | 62 | # ── Build pg_durable ──────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | examples/azure-http-domains/scripts/common.sh | 18 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | examples/azure-http-domains/scripts/common.sh | 20 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | examples/azure-http-domains/scripts/common.sh | 27 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | examples/azure-http-domains/scripts/common.sh | 29 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/azure-http-domains/scripts/common.sh | 56 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/azure-http-domains/scripts/common.sh | 58 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/azure-http-domains/scripts/common.sh | 78 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/azure-http-domains/scripts/common.sh | 80 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/azure-http-domains/scripts/common.sh | 98 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/azure-http-domains/scripts/common.sh | 100 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/run-pgspot.sh | 65 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/test-all-local.sh | 74 | # ── 1. Unit Tests ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/test-all-local.sh | 90 | # ── 2. E2E Tests ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/test-all-local.sh | 106 | # ── 3. pg_regress Tests ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/test-all-local.sh | 134 | # ── Summary ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/test-shutdown.sh | 92 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/test-shutdown.sh | 94 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/test-shutdown.sh | 182 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/test-shutdown.sh | 184 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/test-shutdown.sh | 204 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/test-shutdown.sh | 206 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/test-shutdown.sh | 232 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/test-shutdown.sh | 234 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/test-shutdown.sh | 264 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/test-shutdown.sh | 266 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/test-shutdown.sh | 295 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/test-shutdown.sh | 297 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/test-coverage.sh | 133 | # ── Step 1: Clean previous coverage data ────────────────────────────── | COMMENT |
| MEDIUM | scripts/test-coverage.sh | 139 | # ── Step 2: Build extension with coverage instrumentation ───────────── | COMMENT |
| MEDIUM | scripts/test-coverage.sh | 174 | # ── Step 2b (optional): Run pgrx unit tests ────────────────────────── | COMMENT |
| MEDIUM | scripts/test-coverage.sh | 202 | # ── Step N: Run E2E tests ───────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/test-coverage.sh | 240 | # ── Final step: Merge and report ────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/test-epoch-race.sh | 89 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/test-epoch-race.sh | 91 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/test-epoch-race.sh | 217 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/test-epoch-race.sh | 219 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/test-epoch-race.sh | 237 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/test-epoch-race.sh | 239 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/test-epoch-race.sh | 344 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/test-epoch-race.sh | 346 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/test-upgrade.sh | 233 | # ============================================================================ | COMMENT |
| MEDIUM | scripts/test-upgrade.sh | 235 | # ============================================================================ | COMMENT |
| MEDIUM | scripts/test-upgrade.sh | 343 | # ============================================================================ | COMMENT |
| MEDIUM | scripts/test-upgrade.sh | 345 | # ============================================================================ | COMMENT |
| MEDIUM | scripts/test-upgrade.sh | 491 | # ============================================================================ | COMMENT |
| MEDIUM | scripts/test-upgrade.sh | 493 | # ============================================================================ | COMMENT |
| MEDIUM | scripts/test-upgrade.sh | 736 | # ============================================================================ | COMMENT |
| MEDIUM | scripts/test-upgrade.sh | 738 | # ============================================================================ | COMMENT |
| MEDIUM | scripts/test-upgrade.sh | 809 | # ============================================================================ | COMMENT |
| MEDIUM | scripts/test-upgrade.sh | 811 | # ============================================================================ | COMMENT |
| MEDIUM | scripts/test-upgrade.sh | 1136 | # ============================================================================ | COMMENT |
| MEDIUM | scripts/test-upgrade.sh | 1138 | # ============================================================================ | COMMENT |
| MEDIUM | scripts/test-upgrade.sh | 1384 | # ============================================================================ | COMMENT |
| MEDIUM | scripts/test-upgrade.sh | 1386 | # ============================================================================ | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/test_docker_runner.py | 85 | def test_fixed_image_skips_every_local_special_phase(self): | STRING |
| LOW⚡ | tests/test_docker_runner.py | 104 | def test_sql_failure_is_reported_and_next_test_runs(self): | STRING |
| LOW⚡ | tests/test_docker_runner.py | 113 | def test_failure_marker_wins_over_pass_marker(self): | STRING |
| LOW⚡ | tests/test_docker_runner.py | 121 | def test_readiness_timeout_does_not_run_tests(self): | STRING |
| LOW⚡ | tests/test_docker_runner.py | 128 | def test_success_exit_without_completion_marker_fails(self): | STRING |
| LOW⚡ | tests/test_docker_runner.py | 138 | def test_copy_failure_does_not_run_missing_tests(self): | STRING |
| LOW⚡ | tests/test_docker_runner.py | 144 | def test_version_failure_is_reported_before_tests(self): | STRING |
| LOW⚡ | tests/test_docker_runner.py | 151 | def test_isolated_container_and_image_overrides(self): | STRING |
| LOW | tests/e2e/shapes/test_runner.py | 71 | def test_fixed_corpus_family_and_order_totals(self): | CODE |
| LOW | tests/e2e/shapes/test_runner.py | 86 | def test_loads_expectations_without_recomputing_them(self): | CODE |
| LOW | tests/e2e/shapes/test_runner.py | 92 | def test_corpus_uses_qualified_helper_for_every_marker(self): | CODE |
| LOW | tests/e2e/shapes/test_runner.py | 109 | def test_wrapper_defines_invoker_helper_before_start(self): | CODE |
| LOW | tests/e2e/shapes/test_runner.py | 119 | def test_invalid_manifest_structure(self): | CODE |
| LOW | tests/e2e/shapes/test_runner.py | 142 | def test_duplicate_ids_and_json_keys(self): | CODE |
| LOW | tests/e2e/shapes/test_runner.py | 175 | def test_rejects_unknown_assertions_and_invalid_order(self): | CODE |
| LOW | tests/e2e/shapes/test_runner.py | 189 | def test_invalid_semantic_fields(self): | CODE |
| LOW | tests/e2e/shapes/test_runner.py | 212 | def test_invalid_relation_fields_and_counts(self): | CODE |
| LOW | tests/e2e/shapes/test_runner.py | 229 | def test_required_fields_nonfinite_json_and_duplicate_family_ids(self): | CODE |
| LOW | tests/e2e/shapes/test_runner.py | 255 | def test_json_null_result_is_not_an_absent_result(self): | CODE |
| LOW | tests/e2e/shapes/test_runner.py | 264 | def test_check_all_families_does_not_write_and_invalid_case_writes_nothing(self): | CODE |
| LOW | tests/e2e/shapes/test_runner.py | 279 | def test_shared_fixture_and_fail_closed_order(self): | CODE |
| LOW | tests/e2e/shapes/test_runner.py | 296 | def test_semantic_rendering_cleanup_exact_values_and_error(self): | CODE |
| LOW | tests/e2e/shapes/test_runner.py | 320 | def test_semantic_release_signal_validation_and_emission(self): | CODE |
| LOW | tests/e2e/shapes/test_runner.py | 352 | def test_relation_rendering_and_deterministic_all_family_cli(self): | CODE |
| LOW | tests/e2e/shapes/test_runner.py | 383 | def test_dollar_delimiters_and_assertion_order_are_deterministic(self): | CODE |
| LOW | tests/e2e/shapes/test_runner.py | 401 | def test_wrapper_checks_completion_zero_counts_and_unknown_paths(self): | CODE |
| LOW | tests/e2e/shapes/test_runner.py | 414 | def test_empty_expected_map_rejects_any_trace(self): | CODE |
| LOW | tests/e2e/shapes/test_runner.py | 419 | def test_cli_prepares_repeatable_wrappers_without_changing_manifest(self): | CODE |
| LOW | tests/e2e/shapes/test_runner.py | 434 | def test_cli_check_does_not_write_files(self): | CODE |
| LOW | tests/e2e/shapes/test_runner.py | 443 | def test_cli_reports_input_and_output_errors(self): | CODE |
| LOW | tests/e2e/shapes/test_runner.py | 513 | def test_live_exact_observations(self): | CODE |
| LOW | tests/e2e/shapes/test_runner.py | 543 | def test_live_result_and_failed_semantic_cleanup(self): | CODE |
| LOW | tests/e2e/shapes/test_runner.py | 571 | def test_live_snapshot_and_quoted_variable_values(self): | STRING |
| LOW | tests/e2e/shapes/test_runner.py | 584 | def test_live_snapshot_signal_gate_and_timeout(self): | STRING |
| LOW | tests/e2e/shapes/test_runner.py | 607 | def test_live_release_deadline_fails_without_another_wait(self): | STRING |
| LOW | tests/e2e/shapes/test_runner.py | 628 | def test_live_relations_nonvacuous_and_multiset(self): | STRING |
| LOW | tests/e2e/shapes/test_runner.py | 724 | def test_live_helper_ordinals_and_activity_result(self): | STRING |
| LOW⚡ | benchmarks/test_run.py | 27 | def test_latency_units_and_nearest_rank_percentiles(self): | CODE |
| LOW⚡ | benchmarks/test_run.py | 36 | def test_failed_and_incomplete_runs_are_not_successful_samples(self): | CODE |
| LOW⚡ | benchmarks/test_run.py | 42 | def test_missing_throughput_is_not_reported_as_zero(self): | CODE |
| LOW⚡ | benchmarks/test_run.py | 47 | def test_multiple_client_logs(self): | CODE |
| LOW⚡ | benchmarks/test_run.py | 53 | def test_pgbench_output_is_not_read_as_a_transaction_log(self): | CODE |
| LOW⚡ | benchmarks/test_run.py | 64 | def test_nonzero_exit_is_not_a_successful_measurement(self): | CODE |
| LOW⚡ | benchmarks/test_run.py | 71 | def test_process_deadline_retains_partial_output(self): | CODE |
| LOW⚡ | benchmarks/test_run.py | 77 | def test_http_request_mismatch_is_not_a_successful_measurement(self): | CODE |
| LOW⚡ | benchmarks/test_run.py | 94 | def test_warmup_can_be_disabled(self): | CODE |
| LOW⚡ | benchmarks/test_run.py | 97 | def test_invalid_sizes_and_counts_are_rejected(self): | CODE |
| LOW⚡ | benchmarks/test_run.py | 102 | def test_duplicate_concurrency_levels_cannot_overwrite_logs(self): | CODE |
| LOW⚡ | benchmarks/test_run.py | 184 | def test_interruption_cleans_up_and_records_failure(self): | CODE |
| LOW⚡ | benchmarks/test_run.py | 193 | def test_report_retains_psql_diagnostics(self): | CODE |
| LOW⚡ | benchmarks/test_run.py | 200 | def test_cancel_checks_returned_failures_and_remaining_instances(self): | CODE |
| LOW⚡ | benchmarks/test_run.py | 209 | def test_successful_cancellation_checks_only_this_runs_instances(self): | CODE |
| LOW⚡ | benchmarks/test_run.py | 216 | def test_sigterm_records_run_identity_and_runs_cleanup(self): | CODE |
| LOW | benchmarks/test_run.py | 138 | def test_output_creation_does_not_mark_clean_source_dirty(self): | CODE |
| LOW | benchmarks/test_run.py | 143 | def test_untracked_source_is_dirty_even_when_git_hides_untracked_files(self): | CODE |
| LOW | benchmarks/test_run.py | 162 | def test_cleanup_failure_marks_results_failed(self): | CODE |
| LOW | benchmarks/test_run.py | 171 | def test_cancellation_failure_still_removes_schema(self): | CODE |
| LOW | benchmarks/test_run.py | 268 | def test_keepalive_drains_request_bodies(self): | STRING |
| LOW | benchmarks/test_run.py | 283 | def test_concurrent_requests_are_not_serialized_by_the_fixture(self): | STRING |
| LOW | benchmarks/test_run.py | 289 | def test_shutdown_closes_keepalive_connections_and_joins_handlers(self): | STRING |
| 40 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | examples/audio-roundtrip/scripts/provision_azure.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | examples/audio-roundtrip/scripts/live_smoke_check.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/run-pgspot.sh | 1 | #!/bin/bash | COMMENT |
| LOW | scripts/run-pgspot.sh | 21 | COMMENT | |
| LOW | scripts/run-pgspot.sh | 41 | # pg_durable's DSL intentionally exposes unqualified custom operators (for | COMMENT |
| LOW | scripts/test-all-local.sh | 1 | #!/bin/bash | COMMENT |
| LOW | scripts/deploy-acr.sh | 1 | #!/bin/bash | COMMENT |
| LOW | scripts/test-e2e-docker.sh | 1 | #!/bin/bash | COMMENT |
| LOW | scripts/test-shutdown.sh | 1 | #!/bin/bash | COMMENT |
| LOW | scripts/test-coverage.sh | 1 | #!/bin/bash | COMMENT |
| LOW | scripts/test-coverage.sh | 21 | # Examples: | COMMENT |
| LOW | scripts/test-unit.sh | 1 | #!/bin/bash | COMMENT |
| LOW | scripts/pg-stop.sh | 1 | #!/bin/bash | COMMENT |
| LOW | scripts/test-e2e-local.sh | 1 | #!/bin/bash | COMMENT |
| LOW | scripts/test-e2e-local.sh | 21 | # Examples: | COMMENT |
| LOW | scripts/test-e2e-local.sh | 541 | exit 1 | COMMENT |
| LOW | scripts/test-epoch-race.sh | 1 | #!/bin/bash | COMMENT |
| LOW | scripts/measure-memory.sh | 1 | #!/bin/bash | COMMENT |
| LOW | scripts/pgspot-gate.sh | 1 | #!/bin/bash | COMMENT |
| LOW | scripts/test-upgrade.sh | 1 | #!/bin/bash | COMMENT |
| LOW | .github/dependabot.yml | 1 | # Dependabot configuration for weekly dependency updates. | COMMENT |
| LOW | .github/workflows/docker.yml | 1 | name: Docker CI | COMMENT |
| LOW | prompts/pg_durable-release.md | 261 | # DROP the auto "## What's Changed" PR dump: it just re-lists the PRs the | COMMENT |
| LOW | src/types.rs | 361 | Ok(conn) | COMMENT |
| LOW | src/types.rs | 1141 | /// handle SQL escaping in the original query if needed. | COMMENT |
| LOW | src/types.rs | 1181 | substitute_all_with_options(query, results, vars, sys_vars, false) | COMMENT |
| LOW | src/types.rs | 1481 | pub vars: std::collections::HashMap<String, String>, | COMMENT |
| LOW | src/types.rs | 1501 | /// | COMMENT |
| LOW | src/monitoring.rs | 41 | const MAX_CURSOR_LEN: usize = 512; | COMMENT |
| LOW | src/monitoring.rs | 141 | /// worker-credentialed sqlx connection — the same trust boundary the per-instance | COMMENT |
| LOW | src/monitoring.rs | 381 | } | COMMENT |
| LOW | src/monitoring.rs | 581 | // them from duroxide over a worker-credentialed connection (see | COMMENT |
| LOW | src/client.rs | 341 | /// The graph is persisted and enqueued on a *separate* PostgreSQL session, so | COMMENT |
| LOW | src/lib.rs | 41 | pub static ENABLE_SUPERUSER_INSTANCES: GucSetting<bool> = GucSetting::<bool>::new(false); | COMMENT |
| LOW | src/lib.rs | 2541 | // | COMMENT |
| LOW | src/worker.rs | 1821 | /// since been replaced — so connections are drained before the pool is closed. In | COMMENT |
| LOW | src/worker.rs | 1901 | .filter(|id| !is_sub_orchestration(id) && !present.contains(id)) | COMMENT |
| LOW | src/dsl.rs | 41 | format!( | COMMENT |
| LOW | src/dsl.rs | 281 | /// execution time inside the orchestration (see `execute_wait_schedule_node`), | COMMENT |
| LOW | src/dsl.rs | 321 | /// ```sql | COMMENT |
| LOW | src/dsl.rs | 361 | pub fn loop_with_policy( | COMMENT |
| LOW | src/dsl.rs | 601 | /// Creates an HTTP request node. | COMMENT |
| LOW | src/dsl.rs | 701 | node_type: "HTTP".to_string(), | COMMENT |
| LOW | src/dsl.rs | 721 | /// # Arguments | COMMENT |
| LOW | src/dsl.rs | 841 | // Signals | COMMENT |
| LOW | src/dsl.rs | 921 | Ok(_) => "OK".to_string(), | COMMENT |
| LOW | src/dsl.rs | 1061 | ); | COMMENT |
| LOW | src/dsl.rs | 1141 | )); | COMMENT |
| LOW | src/dsl.rs | 1161 | /// | COMMENT |
| LOW | src/dsl.rs | 1201 | /// Schemas from before `transaction_mode` existed declare `df.start(text, text, | COMMENT |
| LOW | src/dsl.rs | 1521 | COMMENT | |
| LOW | src/dsl.rs | 1621 | /// terminal state, returning its final status as plain text | COMMENT |
| LOW | src/dsl.rs | 1641 | /// | COMMENT |
| LOW | src/explain.rs | 41 | self.status.as_deref() | COMMENT |
| LOW | src/redact.rs | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | src/ssrf.rs | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | src/ssrf.rs | 281 | } | COMMENT |
| LOW | src/ssrf.rs | 301 | /// Validate the scheme of a canonically parsed URL against the startup | COMMENT |
| LOW | src/orchestrations/mod.rs | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | src/orchestrations/execute_function_graph.rs | 41 | /// Node id at the root of the *current* orchestration's node tree: `graph.root_node_id` | COMMENT |
| 24 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | USER_GUIDE.md | 3350 | #### Step 1: Check Status | COMMENT |
| LOW⚡ | USER_GUIDE.md | 3359 | #### Step 2: Check the Overall Result | COMMENT |
| LOW⚡ | USER_GUIDE.md | 3367 | #### Step 3: Visualize the Execution Tree | COMMENT |
| LOW | USER_GUIDE.md | 3384 | #### Step 4: Inspect Individual Nodes | COMMENT |
| LOW | USER_GUIDE.md | 3404 | #### Step 5: Trace Variable Flow | COMMENT |
| LOW | docs/spec-pg-regress.md | 327 | ### Step 1: Add df.await_instance() | COMMENT |
| LOW | docs/spec-pg-regress.md | 343 | ### Step 2: Create pg_regress Directory Structure | COMMENT |
| LOW | docs/spec-pg-regress.md | 350 | ### Step 3: PGXS Configuration in Root Makefile | COMMENT |
| LOW⚡ | docs/spec-pg-regress.md | 368 | ### Step 4: Convert Phase 1 Tests | COMMENT |
| LOW⚡ | docs/spec-pg-regress.md | 375 | ### Step 5: Update Documentation | COMMENT |
| LOW⚡ | docs/spec-pg-regress.md | 381 | ### Step 6: Add CI Integration | COMMENT |
| LOW | docs/bgw-applies-migrations.md | 81 | #### Step 5: readiness record via `duroxide._worker_ready` | COMMENT |
| LOW | docs/proposal-management-api.md | 362 | // Step 1: Validate preconditions | COMMENT |
| LOW | docs/proposal-management-api.md | 396 | // Step 2: Delete from df.* tables FIRST (source of truth) | COMMENT |
| LOW | docs/proposal-management-api.md | 406 | // Step 3: Delete from duroxide (if this fails, background sync will clean up) | COMMENT |
| LOW | docs/proposal-management-api.md | 488 | // Step 1: Check if running | COMMENT |
| LOW | docs/proposal-management-api.md | 495 | // Step 2: Try graceful cancel | COMMENT |
| LOW | docs/proposal-management-api.md | 515 | // Step 3: Check if still running, force delete if needed | COMMENT |
| LOW | docs/proposal-management-api.md | 530 | // Step 4: Restart the orchestration | COMMENT |
| LOW | scripts/test-upgrade.sh | 753 | # Step 1: Upgrade path — create at previous version, upgrade to current | COMMENT |
| LOW | scripts/test-upgrade.sh | 765 | # Step 2: Fresh install at current version | COMMENT |
| LOW | scripts/test-upgrade.sh | 1154 | # Step 1: Install previous version and create test data | COMMENT |
| LOW | scripts/test-upgrade.sh | 1168 | # Step 2: Upgrade | COMMENT |
| LOW | scripts/test-upgrade.sh | 1179 | # Step 3: Verify pre-upgrade data is still accessible under the new schema | COMMENT |
| LOW | prompts/pg_durable-release.md | 61 | ## Step 0: Open the tracking issue and decide the cut line | COMMENT |
| LOW | prompts/pg_durable-release.md | 99 | ## Step 1: Is the CHANGELOG up to date? (do this first) | COMMENT |
| LOW | prompts/pg_durable-release.md | 137 | ## Step 2: Version & upgrade-script sanity | COMMENT |
| LOW | prompts/pg_durable-release.md | 159 | ## Step 3: Confirm CI is green on the release commit | COMMENT |
| LOW | prompts/pg_durable-release.md | 186 | ## Step 4: Tag the release (builds the draft Release) | COMMENT |
| LOW | prompts/pg_durable-release.md | 223 | ## Step 5: Fill release notes and publish | COMMENT |
| LOW | prompts/pg_durable-release.md | 327 | ## Step 6: Confirm GHCR images | COMMENT |
| LOW | prompts/pg_durable-release.md | 438 | ## Step 7: Open the next development cycle | COMMENT |
| LOW | prompts/pg_durable-check-upstream-fixes.md | 9 | ### Step 1: Review Active Blockers | COMMENT |
| LOW | prompts/pg_durable-check-upstream-fixes.md | 13 | ### Step 2: Check Issue Status | COMMENT |
| LOW | prompts/pg_durable-check-upstream-fixes.md | 24 | ### Step 3: Check if Fix is in a Release | COMMENT |
| LOW | prompts/pg_durable-check-upstream-fixes.md | 38 | ### Step 4: Review Release Notes | COMMENT |
| LOW | prompts/pg_durable-check-upstream-fixes.md | 47 | ### Step 5: Update Dependency | COMMENT |
| LOW | prompts/pg_durable-check-upstream-fixes.md | 71 | ### Step 6: Remove Workarounds | COMMENT |
| LOW | prompts/pg_durable-check-upstream-fixes.md | 84 | ### Step 7: Update Tracking Documents | COMMENT |
| LOW | prompts/pg_durable-check-upstream-fixes.md | 95 | ### Step 8: Commit Changes | COMMENT |
| LOW | prompts/pg_durable-update-docs-tests.md | 6 | ## Step 1: Scan Changes and Propose Tests | COMMENT |
| LOW | prompts/pg_durable-update-docs-tests.md | 24 | ## Step 2: Documentation Hierarchy | COMMENT |
| LOW | prompts/pg_durable-update-docs-tests.md | 57 | ## Step 3: E2E Test Updates | COMMENT |
| LOW | prompts/pg_durable-update-docs-tests.md | 126 | ## Step 4: Ensure USER_GUIDE Examples Have E2E Coverage | COMMENT |
| LOW | prompts/pg_durable-update-docs-tests.md | 211 | ## Step 5: Validation Checklist | COMMENT |
| LOW | prompts/pg_durable-update-docs-tests.md | 280 | ## Step 6: Final Validation | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | USER_GUIDE.md | 3045 | # Duroxide provider pool: orchestration state + LISTEN/NOTIFY | COMMENT |
| MEDIUM | docs/http_problems.md | 25 | | 4 | [Malformed node config panics the orchestration](#4-malformed-node-config-panics-the-orchestration) | both | 🟡 Med | CODE |
| MEDIUM | docs/http_problems.md | 275 | ## 4. Malformed node config panics the orchestration | COMMENT |
| MEDIUM | docs/ARCHITECTURE.md | 17 | 4. [Phase 2: Orchestration Execution](#phase-2-orchestration-execution) | CODE |
| MEDIUM | docs/design-azure-functions.md | 23 | - [Agentic Workflows](#6-agentic-workflows) | CODE |
| MEDIUM | docs/design-azure-functions.md | 290 | ### 1. RAG Pipeline | COMMENT |
| MEDIUM | docs/loop_rework_problems.md | 28 | | 9 | [Signals inherit the sub-orchestration startup race](#9-signals-inherit-the-sub-orchestration-startup-race) | non- | CODE |
| MEDIUM | docs/loop_rework_problems.md | 280 | ## 9. Signals inherit the sub-orchestration startup race | COMMENT |
| MEDIUM | docs/loop_rework_problems.md | 292 | Fix #154 at the engine/sub-orchestration boundary or add a durable signal inbox | CODE |
| MEDIUM | docs/pg_durable_spec.md | 317 | #### RAG Query Pipeline | COMMENT |
| MEDIUM | docs/pg_durable_spec.md | 665 | ### 1. RAG Pipeline: Chunking and Embedding | COMMENT |
| MEDIUM | docs/upgrade-testing.md | 592 | #### Loop and sub-orchestration replay compatibility | COMMENT |
| MEDIUM | docs/upgrade-testing.md | 645 | - **In-flight orchestration compatibility (#129 — breaking for in-flight work):** Adding `instance_id` to the `update-no | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | tests/e2e/run.sh | 52 | # Check if PostgreSQL is accepting connections | COMMENT |
| LOW⚡ | tests/e2e/run.sh | 54 | # Check if durable extension is available | COMMENT |
| LOW⚡ | tests/e2e/run.sh | 56 | # Check if background worker has fully started (after init restart) | COMMENT |
| LOW | scripts/deploy-acr.sh | 83 | # Check if local image exists | COMMENT |
| LOW | scripts/measure-memory.sh | 52 | # Check if PostgreSQL is running | COMMENT |
| LOW | scripts/measure-memory.sh | 196 | # Check if worker still exists | COMMENT |
| LOW | .github/workflows/prebuild.yml | 33 | # Check if required files exist | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/e2e/shapes/runner.py | 114 | CODE | |
| LOW | tests/e2e/shapes/runner.py | 473 | CODE | |
| LOW | tests/e2e/shapes/test_runner.py | 696 | CODE | |
| LOW | benchmarks/run.py | 163 | CODE | |
| LOW | benchmarks/test_run.py | 162 | CODE | |
| LOW | benchmarks/test_run.py | 171 | CODE | |
| LOW | benchmarks/test_run.py | 184 | CODE | |
| LOW | scripts/upgrade_lifecycle.py | 260 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | docker-entrypoint-initdb.d/01-init-pg-durable.sh | 7 | # Create the extension in the default database | COMMENT |
| MEDIUM | scripts/pg-common.sh | 154 | # Create the target database if it doesn't exist (e.g. contrib_regression for pg_regress) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | scripts/test-upgrade.sh | 123 | # that is <= the target version. This lets the harness install a version | COMMENT |
| MEDIUM | src/types.rs | 1969 | /// generic JSON parse so it is robust to serialized field ordering. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/test-upgrade.sh | 753 | # Step 1: Upgrade path — create at previous version, upgrade to current | COMMENT |
| LOW | scripts/test-upgrade.sh | 765 | # Step 2: Fresh install at current version | COMMENT |
| LOW | scripts/test-upgrade.sh | 1154 | # Step 1: Install previous version and create test data | COMMENT |
| LOW | scripts/test-upgrade.sh | 1168 | # Step 2: Upgrade | COMMENT |
| LOW | scripts/test-upgrade.sh | 1179 | # Step 3: Verify pre-upgrade data is still accessible under the new schema | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | benchmarks/http_server.py | 112 | except OSError: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | scripts/test_upgrade_lifecycle.py | 31 | result = '{"rows":[{"value":null}],"row_count":1}' | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | examples/azure-http-domains/scripts/provision.sh | 7 | # Usage: | COMMENT |
| LOW | examples/azure-http-domains/scripts/run-test.sh | 7 | # Usage: | COMMENT |
| LOW | examples/azure-http-domains/scripts/cleanup.sh | 7 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docs/pg_durable_spec.md | 131 | durable.func('send_email', '{"to": "user@example.com"}') | CODE |
| LOW | docs/pg_durable_spec.md | 133 | ~> durable.func('send_reminder', '{"to": "user@example.com"}') | CODE |
| LOW | src/ssrf.rs | 803 | "user@example.com", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …es/azure-functions/function-app/chunk_text/__init__.py | 54 | except Exception: | CODE |
| LOW | …es/azure-functions/function-app/chunk_text/__init__.py | 127 | except Exception as exc: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/e2e/http_origin_server.py | 22 | def handle_request(self): | CODE |