3.7

Adjusted Signal

3.7

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

8.1K

Stars

Swift

Language

1.2M

Lines of Code

3.9K

Files

4.3K

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 16.0/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 4147 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.3/100 · LOW

Are imports declared and package/API names verified? 77 finding(s).

Agent Over-Engineering Ratio 0.7/100 · LOW

Are wrappers, guards, and repeated structures necessary? 79 finding(s).

PR Review Velocity Impact 17.5/100 · LOW

Which changes need focused human review? 4288 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 10MEDIUM 208LOW 4070

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 4288 distinct pattern matches across 16 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block3914 hits · 3750 pts

Severity	File	Line	Snippet	Context
LOW	App/osaurus/osaurusApp.swift	1	//	COMMENT
LOW	App/osaurus/AppIntents/OsaurusIntents.swift	1	//	COMMENT
LOW	docs/plugins/EXAMPLE_TELEGRAM.md	301		COMMENT
LOW	docs/examples/osaurus-config.sample.yaml	1	# Osaurus declarative configuration — annotated sample.	COMMENT
LOW	docs/examples/osaurus-bundle-example/install.sh	1	#!/bin/bash	COMMENT
LOW	scripts/swap-balloon.sh	1	#!/bin/bash	COMMENT
LOW	scripts/benchmark/run_bench.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/evals/applescript-capability-lab.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/evals/applescript-capability-lab.sh	21	# EvalRemoteProviderBootstrap); it is never written to disk, the report, or this	COMMENT
LOW	scripts/evals/applescript-capability-lab.sh	41	# VARIANTS newline-separated "name\|prompt\|literal\|verify\|desktop" rows	COMMENT
LOW	scripts/evals/triage-loop.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/evals/prepare-evals-env.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/evals/contribute.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/evals/optimization-loop.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/evals/optimization-loop.sh	21	# configured local model (a bare shortcut like "qwen3-4b" does	COMMENT
LOW	scripts/evals/optimization-loop.sh	41	# reports/history.jsonl (the append-only trend log), so the	COMMENT
LOW	scripts/evals/optimization-loop.sh	61	# e.g. a CPU-bound spin that never yields). Default 2700	COMMENT
LOW	scripts/evals/optimization-loop.sh	81	# OSAURUS_EVALS_DISK_L2_CAP_GB still wins). Artifacts carry	COMMENT
LOW	scripts/evals/optimization-loop.sh	121	# on macOS via Homebrew; Linux/CI has `timeout`). Empty when neither exists,	COMMENT
LOW	scripts/evals/optimization-loop.sh	141	# lanes (spawn, computer_use-on-scripted-world, image) vary with	COMMENT
LOW	scripts/evals/optimization-loop.sh	221	# (plan.json, baseline.json, candidate-*.json, pareto.{json,md}) under	COMMENT
LOW	scripts/release/install_cli_symlink.sh	1	#!/bin/bash	COMMENT
LOW	scripts/release/upload_full_dmg_hf.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/i18n/lint-allowlist.txt	1	# Substrings to ignore in lint-swift-literals.sh output.	COMMENT
LOW	scripts/live-proof/probe-host-memory-freshness.c	1	#include <mach/mach.h>	COMMENT
LOW	scripts/live-proof/probe-mcp-templates.sh	1	#!/usr/bin/env bash	COMMENT
LOW	Packages/OsaurusPluginTestKit/Package.swift	1	// swift-tools-version: 6.2	COMMENT
LOW	…/OsaurusPluginTestKitTests/OsrHostAPILayoutTests.swift	1	//	COMMENT
LOW	…/OsaurusPluginTestKitTests/OsrHostAPILayoutTests.swift	21	#expect(MemoryLayout<OsrHostAPI>.stride == 200)	COMMENT
LOW	…ginTestKit/Sources/OsaurusPluginTestKit/MockHost.swift	1	//	COMMENT
LOW	…ginTestKit/Sources/OsaurusPluginTestKit/MockHost.swift	21	/// Captures and replays host-API interactions a plugin made during a	COMMENT
LOW	…ginTestKit/Sources/OsaurusPluginTestKit/MockHost.swift	41	/// the real host's behavior when a key is missing. Default returns	COMMENT
LOW	…ginTestKit/Sources/OsaurusPluginTestKit/MockHost.swift	61	/// default to mimic the "no agent context" frame (init / background	COMMENT
LOW	…usPluginTestKit/Sources/OsaurusPluginTestKit/ABI.swift	1	//	COMMENT
LOW	…urusCLI/Tests/OsaurusCLITests/MCPToolFilterTests.swift	21		COMMENT
LOW	…/OsaurusCLITests/MCPCommandSchemaConversionTests.swift	1	//	COMMENT
LOW	…sCLI/Tests/OsaurusCLITests/ManifestValidateTests.swift	1	//	COMMENT
LOW	…LI/Sources/OsaurusCLICore/Commands/MCPToolFilter.swift	1	//	COMMENT
LOW	…saurusCLI/Sources/OsaurusCLICore/Commands/Config.swift	1	//	COMMENT
LOW	…OsaurusCLI/Sources/OsaurusCLICore/Commands/Bench.swift	1	//	COMMENT
LOW	…OsaurusCLI/Sources/OsaurusCLICore/Commands/Bench.swift	161	/// needed, which is also what makes this sweep possible over HTTP.	COMMENT
LOW	…I/Sources/OsaurusCLICore/Commands/Tools/ToolsDev.swift	1	//	COMMENT
LOW	…saurusCLICore/Commands/Manifest/ManifestValidate.swift	1	//	COMMENT
LOW	…ces/OsaurusCLICore/Commands/Import/ImportCommand.swift	1	//	COMMENT
LOW	…Sources/OsaurusCLICore/Services/ServerSupervisor.swift	1	//	COMMENT
LOW	Packages/OsaurusEvals/README.md	121	# Repeat every case 3× (same warm process) and report the merged majority	COMMENT
LOW	Packages/OsaurusEvals/Package.swift	1	// swift-tools-version: 6.2	COMMENT
LOW	…saurusEvalsKitTests/ScreenContextCaptureLabTests.swift	21	#expect(summary.workingApp == "Safari")	COMMENT
LOW	…saurusEvalsKitTests/ScreenContextCaptureLabTests.swift	81	let sanitized = candidate.fixture	COMMENT
LOW	…saurusEvalsKitTests/ScreenContextCaptureLabTests.swift	101	#expect(sanitized.activeWindow?.app == "Synthetic App 1")	COMMENT
LOW	…s/Tests/OsaurusEvalsKitTests/BrowserUseEvalTests.swift	1	//	COMMENT
LOW	…s/OsaurusEvalsKitTests/ComputerUseScorecardTests.swift	21		COMMENT
LOW	…rusEvalsKitTests/CapabilitySearchFloorDriftTests.swift	1	//	COMMENT
LOW	…usEvalsKitTests/AgentLoopCacheProofCampaignTests.swift	61	}	COMMENT
LOW	…usEvalsKitTests/AgentLoopCacheProofCampaignTests.swift	141	#expect(expectation.systemPromptsPerSession?.count == 3)	COMMENT
LOW	…urusEvalsKitTests/AgentLoopRejectionFixtureTests.swift	21	#expect(expect.maxToolCalls == 1)	COMMENT
LOW	…ts/OsaurusEvalsKitTests/EvalCatalogManifestTests.swift	1	//	COMMENT
LOW	…Evals/Tests/OsaurusEvalsKitTests/EvalMatrixTests.swift	381	EvalReport(modelId: "m", startedAt: "2026-06-19T00:00:00Z", cases: [merged])	COMMENT
LOW	…Evals/Tests/OsaurusEvalsKitTests/EvalMatrixTests.swift	501	#expect(col.agentLoopDiagnostics?.rowsWithExitTelemetry == 2)	COMMENT
LOW	…Evals/Tests/OsaurusEvalsKitTests/EvalMatrixTests.swift	521	#expect(col.mtpTotals?.acceptedDraftTokens == 27)	COMMENT
3854 more matches not shown…

AI Slop Vocabulary115 hits · 312 pts

Severity	File	Line	Snippet	Context
MEDIUM	scripts/evals/applescript-capability-lab.sh	4	# Osaurus AppleScript capability lab — the harness-variant sweep.	COMMENT
MEDIUM	scripts/evals/applescript-capability-lab.sh	9	# full potential" loop. The model is the constant; the harness is the variable.	COMMENT
MEDIUM	scripts/evals/applescript-capability-lab.sh	126	# harness-nominal is just keepCurrent (often the remote judge), while the real	COMMENT
MEDIUM	scripts/evals/applescript_capability_scoreboard.py	88	# when the harness's nominal `--model` is `auto`/keepCurrent and resolves to	COMMENT
MEDIUM	scripts/evals/optimization-loop.sh	12	# It is NOT an agent orchestrator: it's a robust test driver. Local-model	COMMENT
MEDIUM	scripts/evals/optimization-loop.sh	134	# `read -ra` is the robust, SC2206-clean way to split the space-separated	COMMENT
MEDIUM	…ts/live-proof/run-post1266-family-cache-tool-matrix.py	71	# block. This is a harness cap only; production/API defaults stay model-owned.	COMMENT
MEDIUM	…ts/live-proof/run-post1266-family-cache-tool-matrix.py	75	# harness tests visible-answer behavior instead of clipping a correct decode.	COMMENT
MEDIUM	scripts/live-proof/assert-eval-floors-makefile-sync.sh	45	# otherwise the derived lane expands to a suite path the harness cannot run.	COMMENT
MEDIUM	…Evals/Tests/OsaurusEvalsKitTests/EvalMatrixTests.swift	270	#expect(Set(matrix.models.compactMap(\.harness)) == ["osaurus", "pi"])	COMMENT
MEDIUM	…ls/Sources/OsaurusEvalsKit/EvalRunnerAppleScript.swift	454	/// whether the SCRIPT accomplishes the task, robust to script variety.	COMMENT
MEDIUM	…/OsaurusEvals/Sources/OsaurusEvalsKit/EvalRunner.swift	2185	/// string) makes the assertion robust to whitespace and key order; the	COMMENT
MEDIUM	…es/OsaurusEvals/Sources/OsaurusEvalsKit/EvalCase.swift	2177	/// key→substring pair — robust to whitespace and key order because	COMMENT
MEDIUM	…es/OsaurusEvals/Sources/OsaurusEvalsKit/EvalCase.swift	3420	/// accomplishes the task (robust to script variety, unlike string	COMMENT
MEDIUM	…/OsaurusCore/AppleScript/AppleScriptModelCatalog.swift	89	/// seamless default for on-device AppleScript automation) plus a lighter	COMMENT
MEDIUM	…ckages/OsaurusCore/Networking/RelayTunnelManager.swift	852	// lowercased key) so detection is robust to mixed-case content	COMMENT
MEDIUM	…re/Tests/Configuration/ConfigHarnessRuntimeTests.swift	207	#expect(stored.runtime == .harness(runtime.id))	COMMENT
MEDIUM	…re/Tests/Configuration/ConfigHarnessRuntimeTests.swift	252	#expect(created.message?.contains("harness runtime `Spotlight`") == true, "\(created)")	COMMENT
MEDIUM	…rusCore/Tests/MCPOAuth/MCPOAuthCanonicalURLTests.swift	6	// These rules are the single highest-leverage gotcha in MCP OAuth — drift	COMMENT
MEDIUM	…s/OsaurusCore/Tests/Chat/ClarifyPromptStateTests.swift	54	// makes the contract robust against any caller that forgets.	COMMENT
MEDIUM	…OsaurusCore/Tests/Networking/MCPHTTPHandlerTests.swift	340	#expect(!body.contains(#""ok":true"#), "\(tool) must not run with a harness token")	COMMENT
MEDIUM	…ts/Plugin/AgentManagerLifecycleNotificationTests.swift	71	// bounded wait to keep the test robust against future async	COMMENT
MEDIUM⚡	…s/AgentChannel/AgentChannelProactivePublishTests.swift	416	#expect(harness.sendCount == 0)	STRING
MEDIUM⚡	…s/AgentChannel/AgentChannelProactivePublishTests.swift	417	let intent = try #require(try harness.store.outboundIntent(id: intentId))	STRING
MEDIUM⚡	…s/AgentChannel/AgentChannelProactivePublishTests.swift	426	#expect(harness.sendCount == 1)	STRING
MEDIUM	…s/AgentChannel/AgentChannelProactivePublishTests.swift	321	#expect(harness.sendCount == 0)	STRING
MEDIUM	…s/AgentChannel/AgentChannelProactivePublishTests.swift	344	#expect(harness.sendCount == 0)	STRING
MEDIUM	…s/AgentChannel/AgentChannelProactivePublishTests.swift	388	#expect(harness.sendCount == 0)	STRING
MEDIUM	…s/AgentChannel/AgentChannelProactivePublishTests.swift	399	#expect(harness.sendCount == 0)	STRING
MEDIUM	…s/AgentChannel/AgentChannelProactivePublishTests.swift	400	let intent = try #require(try harness.store.outboundIntent(id: intentId))	STRING
MEDIUM	…s/AgentChannel/AgentChannelProactivePublishTests.swift	438	#expect(harness.lastSentContent == "hello world")	STRING
MEDIUM	…s/AgentChannel/AgentChannelProactivePublishTests.swift	439	let intent = try #require(try harness.store.outboundIntent(id: intentId))	STRING
MEDIUM	…s/AgentChannel/AgentChannelProactivePublishTests.swift	450	#expect(harness.sendCount == 0)	STRING
MEDIUM	…s/AgentChannel/AgentChannelProactivePublishTests.swift	469	#expect(harness.sendCount == 0)	STRING
MEDIUM	…s/AgentChannel/AgentChannelProactivePublishTests.swift	486	#expect(harness.sendCount == 1)	STRING
MEDIUM	…s/AgentChannel/AgentChannelProactivePublishTests.swift	514	#expect(harness.sendCount == 2)	STRING
MEDIUM	…s/AgentChannel/AgentChannelProactivePublishTests.swift	561	#expect(harness.sendCount == 1)	STRING
MEDIUM	…s/AgentChannel/AgentChannelProactivePublishTests.swift	585	#expect(harness.sendCount == 0)	STRING
MEDIUM	…s/AgentChannel/AgentChannelProactivePublishTests.swift	586	let intent = try #require(try harness.store.outboundIntent(id: intentId))	STRING
MEDIUM	…s/AgentChannel/AgentChannelProactivePublishTests.swift	605	#expect(harness.sendCount == 1)	STRING
MEDIUM	…s/AgentChannel/AgentChannelProactivePublishTests.swift	610	#expect(harness.sendCount == 1)	STRING
MEDIUM	…s/AgentChannel/AgentChannelProactivePublishTests.swift	642	let pendingIntent = try #require(try harness.store.outboundIntent(id: pendingId))	STRING
MEDIUM	…s/AgentChannel/AgentChannelProactivePublishTests.swift	643	let draftIntent = try #require(try harness.store.outboundIntent(id: draftId))	STRING
MEDIUM⚡	…sts/AgentChannel/AgentChannelWebhookIngressTests.swift	210	#expect(await harness.activity.recent(connectionId: Self.connectionId).isEmpty)	COMMENT
MEDIUM⚡	…sts/AgentChannel/AgentChannelWebhookIngressTests.swift	212	#expect(harness.relay.all.isEmpty)	COMMENT
MEDIUM⚡	…sts/AgentChannel/AgentChannelWebhookIngressTests.swift	211	try #expect(harness.store.recentAuditEvents(connectionId: Self.connectionId, limit: 10).isEmpty)	CODE
MEDIUM	…sts/AgentChannel/AgentChannelWebhookIngressTests.swift	223	#expect(harness.relay.all.isEmpty)	COMMENT
MEDIUM	…sts/AgentChannel/AgentChannelWebhookIngressTests.swift	249	#expect(await harness.ingress.ownerConnectionId(taskId: expected.sessionId) == Self.connectionId)	COMMENT
MEDIUM	…sts/AgentChannel/AgentChannelWebhookIngressTests.swift	317	#expect(harness.relay.all.count == 2)	COMMENT
MEDIUM	…sts/AgentChannel/AgentChannelWebhookIngressTests.swift	336	#expect(harness.relay.all.isEmpty)	COMMENT
MEDIUM	…sts/AgentChannel/AgentChannelWebhookIngressTests.swift	372	#expect(harness.relay.all.isEmpty)	COMMENT
MEDIUM	…sts/AgentChannel/AgentChannelWebhookIngressTests.swift	393	#expect(harness.relay.all.isEmpty)	COMMENT
MEDIUM	…sts/AgentChannel/AgentChannelWebhookIngressTests.swift	454	#expect(harness.relay.all.isEmpty)	COMMENT
MEDIUM	…sts/AgentChannel/AgentChannelWebhookIngressTests.swift	497	#expect(harness.relay.all.count == 1)	COMMENT
MEDIUM	…sts/AgentChannel/AgentChannelWebhookIngressTests.swift	688	#expect(harness.relay.all.count == 1)	COMMENT
MEDIUM	…sts/AgentChannel/AgentChannelWebhookIngressTests.swift	718	#expect(harness.relay.all.isEmpty)	COMMENT
MEDIUM	…sts/AgentChannel/AgentChannelWebhookIngressTests.swift	719	#expect(await harness.activity.recent(connectionId: Self.connectionId).isEmpty)	COMMENT
MEDIUM	…sts/AgentChannel/AgentChannelWebhookIngressTests.swift	769	#expect(harness.relay.all.isEmpty)	COMMENT
MEDIUM	…sts/AgentChannel/AgentChannelWebhookIngressTests.swift	782	#expect(harness.relay.all.isEmpty)	COMMENT
MEDIUM	…sts/AgentChannel/AgentChannelWebhookIngressTests.swift	463	let contact = try #require(await harness.pending.pending(connectionId: Self.connectionId).first)	CODE
55 more matches not shown…

Modern AI Meta-Vocabulary49 hits · 128 pts

Severity	File	Line	Snippet	Context
MEDIUM	docs/ALLOSAURUS_0.2_48GB_JANGHT_2026-10-17.md	37	## SSD prompt cache (agentic / terminal tool loops)	COMMENT
MEDIUM	docs/AGENT_LOOP.md	286	### Proof lane: end-to-end agentic evals	COMMENT
MEDIUM	docs/examples/osaurus-config.sample.yaml	68	mode: manual # auto = RAG-picked, manual = only `enabled`	CODE
MEDIUM	…saurusCLI/Tests/OsaurusCLITests/ToolsCreateTests.swift	5	// Tests for plugin scaffold generation (ToolsCreate).	COMMENT
MEDIUM	…urces/OsaurusCLICore/Commands/Tools/ToolsInstall.swift	170	// `osaurus tools install .` fall back to the scaffold's lightweight	COMMENT
MEDIUM	…ources/OsaurusCLICore/Commands/Tools/ToolsCreate.swift	5	// Command to scaffold a new plugin project with Swift or Rust template code.	COMMENT
MEDIUM	…vals/Sources/OsaurusEvalsKit/EvalRunnerAgentLoop.swift	5	// Runner for the `agent_loop` domain: end-to-end agentic evals that	COMMENT
MEDIUM	…vals/Sources/OsaurusEvalsKit/EvalRunnerAgentLoop.swift	145	// capability mismatch, not an agentic-quality result). Surface it as	COMMENT
MEDIUM	Packages/OsaurusCore/Tools/ToolRegistry.swift	2656	/// - if mode is agentic at all (folder OR sandbox) → exclude any	COMMENT
MEDIUM	Packages/OsaurusCore/Networking/HTTPHandler.swift	12666	?? #"{"error":"Unsupported embedding model"}"#	STRING
MEDIUM	Packages/OsaurusCore/Folder/WorkspaceWriteSafety.swift	5	// Shared guardrails for host-folder write tools.	COMMENT
MEDIUM	Packages/OsaurusCore/Managers/Model/ModelManager.swift	1238	// Poolside's `model_type=laguna` — agentic-coding 33B/3B-active MoE,	COMMENT
MEDIUM	…ages/OsaurusCore/Tests/Chat/AgentLoopBudgetTests.swift	286	/// scaffold, diverging from the stored KV prefix and forcing a full	COMMENT
MEDIUM	…/Tests/Chat/DefaultAgentSystemPromptBuilderTests.swift	431	// Compact keeps the full tool surface + scope guardrails (read tools,	COMMENT
MEDIUM	…ges/OsaurusCore/Tests/Storage/AgentDatabaseTests.swift	573	// MARK: - Forbidden SQL guardrails	STRING
MEDIUM	…s/AgentDelegation/AgentDelegationDispatcherTests.swift	5	// Model-free guardrails for TRUE agent delegation: the dispatcher's	COMMENT
MEDIUM	…Core/Tests/Service/CoreModelServiceFallbackTests.swift	128	/// One-shot scaffold that:	COMMENT
MEDIUM	…ages/OsaurusCore/Tests/Tool/OsaurusHelpToolTests.swift	209	argumentsJSON: #"{"action": "find", "query": "context window"}"#)	STRING
MEDIUM	…ckages/OsaurusCore/Models/Configuration/MLXModel.swift	881	/// Chain-of-thought / agentic — Nemotron-3 et al.	COMMENT
MEDIUM	…es/OsaurusCore/Models/Configuration/ModelOptions.swift	547	/// intended for coding and agentic work. There is no "off": the template	COMMENT
MEDIUM	…es/OsaurusCore/Models/Configuration/ModelOptions.swift	830	/// `none`/`high` (with `high` recommended for agentic/code use); `max` is not	COMMENT
MEDIUM	…es/OsaurusCore/Models/Configuration/ModelOptions.swift	929	/// Poolside Laguna (`model_type=laguna`) — agentic-coding 33B/3B-active MoE	COMMENT
MEDIUM	Packages/OsaurusCore/Models/Plugin/ExternalPlugin.swift	731	/// queue so that long-running operations (e.g. agentic inference) in one	COMMENT
MEDIUM	…OsaurusCore/Models/Template/TemplateRequirements.swift	239	/// Built-in tools tool and agentic nodes call (MCP and plugin tools are	COMMENT
MEDIUM	Packages/OsaurusCore/Storage/AgentDatabase.swift	1661	/// or saved views. Reuses the same guardrails as `defineView`.	STRING
MEDIUM	Packages/OsaurusCore/Views/Settings/SearchView.swift	1341	/// Two-phase connect sheet following the provider edit-sheet scaffold:	COMMENT
MEDIUM	Packages/OsaurusCore/Views/Settings/SearchView.swift	1726	/// Paste-a-JSON-definition editor following the sheet scaffold. The definition	COMMENT
MEDIUM	…sCore/Views/Settings/AgentChannelAddChannelSheet.swift	60	/// lives deep inside the setup scaffold, and a plain assignment from its	COMMENT
MEDIUM	…Views/Settings/AgentChannelCustomConnectionSheet.swift	21	/// ids used by the setup scaffold rail and by validation findings.	COMMENT
MEDIUM	…re/Views/Settings/AgentChannelSettingsComponents.swift	6	// the configuration sheet scaffold, secret rows, and status banners.	COMMENT
MEDIUM	…es/OsaurusCore/Views/Settings/Shared/SettingsKit.swift	8	// toggle) with the page scaffold, generic rows, the collapsed "Advanced"	COMMENT
MEDIUM	…es/OsaurusCore/Views/Settings/Shared/SettingsKit.swift	177	/// Standard scaffold for a Management tab: a header (usually one of the	COMMENT
MEDIUM	Packages/OsaurusCore/Views/Chat/ChatView.swift	4439	// right away, even mid-run: an agentic turn can bill several times before	COMMENT
MEDIUM	…ckages/OsaurusCore/Views/WhatsNew/WhatsNewModels.swift	240	/// as v0.5 in 0.24.4. Two pages: what the family is (agentic tool use	COMMENT
MEDIUM	…ews/Onboarding/DesignSystem/OnboardingComponents.swift	8	// cards, chips, badge, checkbox row, and the shared dialog scaffold. All	COMMENT
MEDIUM	…ews/Onboarding/DesignSystem/OnboardingComponents.swift	432	// MARK: - Dialog scaffold	COMMENT
MEDIUM	…/OsaurusCore/Services/Context/AgentLoopEvaluator.swift	720	// `capabilities_load`), which is not the surface these agentic	COMMENT
MEDIUM	…ckages/OsaurusCore/Services/Chat/ResolvedToolset.swift	70	/// tools but skip this text so a "hi" turn does not pay the full agentic	COMMENT
MEDIUM	Packages/OsaurusCore/Services/Chat/AgentToolLoop.swift	1027	/// tool-call turn then re-renders WITHOUT the `<think>…</think>` scaffold	COMMENT
MEDIUM	…/OsaurusCore/Services/Chat/SystemPromptTemplates.swift	848	/// guardrails.	STRING
MEDIUM	…/OsaurusCore/Services/Chat/SystemPromptTemplates.swift	860	/// (`prefersCompactPrompt`). Same scope-creep guardrails, folded.	STRING
MEDIUM	…es/OsaurusCore/Services/Chat/ModelFamilyGuidance.swift	29	// agentic addendum would.	COMMENT
MEDIUM	…es/OsaurusCore/Services/Chat/ModelFamilyGuidance.swift	274	/// frontier Gemini doing multi-step agentic work.	STRING
MEDIUM	…es/OsaurusCore/Services/Chat/ModelFamilyGuidance.swift	313	/// Compact Gemma variant for `.small` windows: the same guardrails,	STRING
MEDIUM	…s/OsaurusCore/Services/Chat/SystemPromptComposer.swift	1239	// is not the bloated universal "agentic workflow" addendum we avoid.	COMMENT
MEDIUM	…ces/Plugin/ClaudeMarketplaceImportabilityCatalog.swift	109	/// install-time guardrails. This is intentionally catalog-backed: opening	COMMENT
MEDIUM	…ckages/OsaurusCore/Services/Plugin/PluginHostAPI.swift	859	/// Fully prepared inference state ready for the agentic loop.	COMMENT
MEDIUM	…sCore/Services/ModelRuntime/ImageGenerationTypes.swift	108	/// `true` when the bundle is a complete, loadable scaffold.	COMMENT
MEDIUM	…saurusCore/Services/ModelRuntime/MLXBatchAdapter.swift	1505	// three — and `xhigh` is the one intended for coding and agentic work.	STRING

Decorative Section Separators34 hits · 106 pts

Severity	File	Line	Snippet	Context
MEDIUM	scripts/evals/applescript-capability-lab.sh	106	# ── Build ────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	scripts/evals/applescript-capability-lab.sh	141	# ── Sweep ────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	scripts/evals/applescript-capability-lab.sh	181	# ── Scoreboard ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	scripts/evals/applescript-capability-lab.sh	187	# ── Record committed snapshot + history (opt-in: RECORD=1) ─────────────────	COMMENT
MEDIUM	scripts/evals/prepare-evals-env.sh	31	# ── 1. Build the eval binary so its .build dir exists for the copy ───────	COMMENT
MEDIUM	scripts/evals/prepare-evals-env.sh	46	# ── 2. Colocate the MLX metallib ─────────────────────────────────────────	COMMENT
MEDIUM	scripts/evals/prepare-evals-env.sh	112	# ── 3. Ensure the capability_search embedder ─────────────────────────────	COMMENT
MEDIUM	scripts/evals/contribute.sh	114	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	scripts/evals/contribute.sh	118	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	scripts/evals/optimization-loop.sh	180	# ── 1. Prep + build ──────────────────────────────────────────────────────	COMMENT
MEDIUM	scripts/evals/optimization-loop.sh	215	# ── Context-optimization mode (CTX_OPTIMIZE=1) ───────────────────────────	COMMENT
MEDIUM	scripts/evals/optimization-loop.sh	466	# ── 2. Deterministic suites (once) ───────────────────────────────────────	COMMENT
MEDIUM	scripts/evals/optimization-loop.sh	474	# ── 2b. Judge calibration (once) ─────────────────────────────────────────	COMMENT
MEDIUM	scripts/evals/optimization-loop.sh	489	# ── 3. LLM suites (per model) ────────────────────────────────────────────	COMMENT
MEDIUM	scripts/evals/optimization-loop.sh	536	# ── 4. Scoreboard (cross-model matrix) ───────────────────────────────────	COMMENT
MEDIUM	scripts/evals/optimization-loop.sh	542	# ── 4b. Record committed snapshot + history (opt-in: RECORD=1) ───────────	COMMENT
MEDIUM	scripts/evals/optimization-loop.sh	559	# ── 5. Diff vs baseline (optional gate) ──────────────────────────────────	COMMENT
MEDIUM	scripts/evals/optimization-loop.sh	579	# ── 6. latest symlink + summary ──────────────────────────────────────────	COMMENT
MEDIUM	…/Sources/OsaurusEvalsKit/EvalRunnerPromptSurface.swift	31	// ── Profile validation lane ─────────────────────────────────	COMMENT
MEDIUM	…/Sources/OsaurusEvalsKit/EvalRunnerPromptSurface.swift	87	// ── Census fixtures ─────────────────────────────────────────	COMMENT
MEDIUM	…/Sources/OsaurusEvalsKit/EvalRunnerPromptSurface.swift	188	// ── Structural pins ─────────────────────────────────────────	COMMENT
MEDIUM	…/Sources/OsaurusEvalsKit/EvalRunnerPromptSurface.swift	220	// ── Budget pins ─────────────────────────────────────────────	COMMENT
MEDIUM	…/Sources/OsaurusEvalsKit/EvalRunnerPromptSurface.swift	243	// ── Selection + determinism pins ────────────────────────────	COMMENT
MEDIUM	…/Sources/OsaurusEvalsKit/EvalRunnerPromptSurface.swift	279	// ── Census summary (always, pass or fail) ───────────────────	COMMENT
MEDIUM	…Evals/Sources/OsaurusEvalsCLI/ContextOptimizeCLI.swift	106	// ── Finalists-only lane (`--finalist-profile`) ──────────────	COMMENT
MEDIUM	…Evals/Sources/OsaurusEvalsCLI/ContextOptimizeCLI.swift	132	// ── Stage 1–3: deterministic search plan ────────────────────	COMMENT
MEDIUM	…Evals/Sources/OsaurusEvalsCLI/ContextOptimizeCLI.swift	159	// ── Stage 4: sequential warm quality runs ───────────────────	COMMENT
MEDIUM	…Evals/Sources/OsaurusEvalsCLI/ContextOptimizeCLI.swift	232	// ── Stage 5: Pareto artifact ────────────────────────────────	COMMENT
MEDIUM	…Evals/Sources/OsaurusEvalsCLI/ContextOptimizeCLI.swift	252	// ── Stage 6: finalist reruns + STRICT promotion gate ────────	COMMENT
MEDIUM⚡	…urusCore/Views/Settings/ServerSettingsTabContent.swift	7	// ┌──────────────┬──────────────────────────────────────────┐	COMMENT
MEDIUM⚡	…urusCore/Views/Settings/ServerSettingsTabContent.swift	12	// ├──────────────┴──────────────────────────────────────────┤	COMMENT
MEDIUM⚡	…urusCore/Views/Settings/ServerSettingsTabContent.swift	14	// └─────────────────────────────────────────────────────────┘	COMMENT
MEDIUM	…s/OsaurusCore/Services/Chat/SystemPromptComposer.swift	1163	// ── Statics ──────────────────────────────────────────────────	COMMENT
MEDIUM	…s/OsaurusCore/Services/Chat/SystemPromptComposer.swift	1678	// ── Dynamics ─────────────────────────────────────────────────	COMMENT

Fake / Example Data52 hits · 56 pts

Severity	File	Line	Snippet	Context
LOW	docs/MOBILE_PROTOCOL.md	1750	"placeholder":"[PERSON_1]"}]}]}	CODE
LOW⚡	…usEvals/Suites/ComputerUseLoop/web-form-proof-lab.json	19	"placeholder": "Team name",	CODE
LOW⚡	…usEvals/Suites/ComputerUseLoop/web-form-proof-lab.json	27	"placeholder": "Email",	CODE
LOW⚡	…usEvals/Suites/ComputerUseLoop/web-form-proof-lab.json	35	"placeholder": "Why access is needed",	CODE
LOW	…urusEvals/Suites/ComputerUseLoop/compose-and-send.json	14	{ "id": "message", "role": "textfield", "label": "Message", "value": "", "placeholder": "Type a message", "edita	CODE
LOW	…aurusEvals/Suites/ComputerUseLoop/type-into-field.json	13	{ "id": "title", "role": "textfield", "label": "Title", "value": "", "placeholder": "Title", "editable": true },	CODE
LOW	…aurusEvals/Suites/ComputerUseLoop/type-into-field.json	14	{ "id": "body", "role": "textview", "label": "Body", "value": "", "placeholder": "Note", "editable": true }	CODE
LOW	…urusEvals/Suites/ComputerUseLoop/press-key-submit.json	13	{ "id": "search", "role": "textfield", "label": "Search", "value": "", "placeholder": "Search the web", "editabl	CODE
LOW	…usEvals/Suites/ComputerUseLoop/impossible-give-up.json	13	{ "id": "message", "role": "textfield", "label": "Message", "value": "", "placeholder": "Type a message", "edita	CODE
LOW	…aurusEvals/Suites/ComputerUseLoop/reveal-then-set.json	14	{ "id": "proxyhost", "role": "textfield", "label": "Proxy Host", "value": "", "placeholder": "host", "editable":	CODE
LOW	…als/Suites/ComputerUseLoop/return-submit-verified.json	13	{ "id": "search", "role": "textfield", "label": "Search", "value": "", "placeholder": "Search the web", "editabl	CODE
LOW	…s/OsaurusEvals/Suites/DefaultAgent/model-download.json	6	"notes": "Models are a desired-state list of repo ids: listing one that isn't installed starts the download. The repo	CODE
LOW	…OsaurusEvals/Suites/DefaultAgent/plugin-uninstall.json	6	"notes": "Uninstall in the declarative model is prune over the installed-plugins list, and nothing is installed in the	CODE
LOW	…s/OsaurusEvals/Suites/DefaultAgent/plugin-install.json	6	"notes": "Plugins are a desired-state list of registry ids: listing one that isn't installed installs it. The id is a	CODE
LOW	…OsaurusEvals/Suites/BrowserUse/stale-ref-recovery.json	26	{ "id": "color", "type": "input", "text": "Favorite color", "placeholder": "e.g. red" },	CODE
LOW	Packages/OsaurusEvals/Suites/BrowserUse/form-fill.json	18	{ "id": "name", "type": "input", "text": "Name", "placeholder": "Your name" },	CODE
LOW	Packages/OsaurusEvals/Suites/BrowserUse/form-fill.json	19	{ "id": "email", "type": "input", "text": "Email", "placeholder": "you@example.com" },	CODE
LOW	…/OsaurusEvals/Suites/Subagent/cu-scripted-give-up.json	14	{ "id": "message", "role": "textfield", "label": "Message", "value": "", "placeholder": "Type a message", "edita	CODE
LOW	…vals/Sources/OsaurusEvalsKit/FixtureBrowserWorld.swift	394	if let placeholder = element.placeholder { info["placeholder"] = placeholder }	CODE
LOW	Packages/OsaurusCore/Folder/RedactionTools.swift	51	"placeholder": .object(["type": .string("string")]),	CODE
LOW	Packages/OsaurusCore/Folder/RedactionTools.swift	227	"placeholder": .object(["type": .string("string")]),	CODE
LOW	Packages/OsaurusCore/Folder/RedactionToolSupport.swift	74	placeholderLabel: entry["placeholder"] as? String	CODE
LOW	…rusCore/Tests/Configuration/ConfigSecretRefTests.swift	392	stdio.env = ["GITHUB_TOKEN": "placeholder", "LOG_LEVEL": "info"]	CODE
LOW	…aurusCore/Tests/Skill/ClaudePluginInstallerTests.swift	317	/// as a "placeholder" flag and drop the value.	STRING
LOW	…saurusCore/Tests/Chat/ChatSessionCompactionTests.swift	136	let filler = String(repeating: "lorem ipsum ", count: max(1, charsPerTurn / 12))	CODE
LOW	…rusCore/Tests/Chat/ContextCompactionServiceTests.swift	266	private var hugeText: String { String(repeating: "lorem ipsum dolor sit ", count: 1_500) }	CODE
LOW	…Core/Tests/Chat/PrivacyHighlightAccumulatorTests.swift	37	["original": $0.0, "placeholder": $0.1]	CODE
LOW	…ages/OsaurusCore/Tests/Folder/FileEditBatchTests.swift	113	{"old_string":"555-0100","new_string":"[REDACTED PHONE]"}	CODE
LOW	…ges/OsaurusCore/Tests/Folder/RedactionToolsTests.swift	101	"custom_rules":[{"name":"money","pattern":"\\\\$[0-9.,]+[MK]?","placeholder":"NUMBERS"}]}	CODE
LOW	…ges/OsaurusCore/Tests/Folder/RedactionToolsTests.swift	178	"custom_rules":[{"name":"money","pattern":"\\\\$[0-9.,]+[MK]?","placeholder":"NUMBERS"}]}	CODE
LOW	…ges/OsaurusCore/Tests/Folder/RedactionToolsTests.swift	199	"custom_rules":[{"name":"money","pattern":"\\\\$[0-9.,]+[MK]?","placeholder":"[REDACTED NUMBERS]"}]}	CODE
LOW	Packages/OsaurusCore/Tests/Plugin/PluginTests.swift	616	"placeholder": "sk-...",	CODE
LOW	…ckages/OsaurusCore/Tests/Harness/PiRPCCodecTests.swift	185	#"{"type":"extension_ui_request","id":"i1","method":"input","title":"Name","placeholder":"type"}"#,	COMMENT
LOW	…es/OsaurusCore/Tests/Browser/BrowserSupportTests.swift	102	"placeholder": "Enter email", "name": "email",	CODE
LOW	…es/OsaurusCore/Tests/Browser/BrowserSupportTests.swift	108	"placeholder": "Password", "name": "password",	CODE
LOW	…kages/OsaurusCore/Tests/Tool/AgentLoopToolsTests.swift	287	#expect(result.contains("too short") \|\| result.contains("placeholder"))	STRING
LOW	…kages/OsaurusCore/Tests/Tool/AgentLoopToolsTests.swift	298	result.contains("placeholder") \|\| result.contains("too short"),	STRING
LOW	Packages/OsaurusCore/Utils/MockChatData.swift	61	"Lorem ipsum dolor sit amet, consectetur adipiscing elit. Pellentesque habitant morbi tristique senectus	CODE
LOW	Packages/OsaurusCore/Utils/MockChatData.swift	61	"Lorem ipsum dolor sit amet, consectetur adipiscing elit. Pellentesque habitant morbi tristique senectus	CODE
LOW	…rusCore/Models/Configuration/SettingsSearchIndex.swift	1627	"custom rules", "add rule", "regex", "pattern", "placeholder", "codename", "customer id",	CODE
LOW	…kages/OsaurusCore/Browser/Runtime/BrowserSupport.swift	259	if let placeholder = element["placeholder"] as? String, !placeholder.isEmpty {	CODE
LOW	…/OsaurusCore/Views/Chat/RedactionHoverController.swift	254	/// reads as fake-data for an email — drop the capsule treatment	COMMENT
LOW⚡	Packages/OsaurusCore/Views/Chat/ChatView.swift	5940	// Longer thinking pass (lorem ipsum) so the thinking block can be	COMMENT
LOW⚡	Packages/OsaurusCore/Views/Chat/ChatView.swift	5943	Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod \	CODE
LOW⚡	Packages/OsaurusCore/Views/Chat/ChatView.swift	5943	Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod \	CODE
LOW	Packages/OsaurusCore/Views/Chat/ChatView.swift	1183	let placeholder = pair["placeholder"],	CODE
LOW	…s/OsaurusCore/Services/Chat/ChatToolChoicePolicy.swift	105	/// a "[redacted..." placeholder or the word "placeholder".	COMMENT
LOW	…s/OsaurusCore/Services/Chat/ChatToolChoicePolicy.swift	116	let redactionSignals = ["[redacted", "placeholder"]	CODE
LOW	…ckages/OsaurusCore/Services/Harness/PiRPCAdapter.swift	258	kind = .input(placeholder: root["placeholder"] as? String)	CODE
LOW	…aurusCore/Services/Documents/DocumentEditService.swift	310	if let type = PPTXEditor.placeholderType(shape) { entry["placeholder"] = type }	CODE
LOW	…rusCore/PrivacyFilter/Core/PrivacyFilterPipeline.swift	795	"placeholder": entity.placeholder.token,	CODE
LOW	…e/PrivacyFilter/Store/PrivacyFilterConfiguration.swift	433	/// substring the user typed) and `"placeholder"` (the token	COMMENT

Synthetic Comment Markers5 hits · 38 pts

Severity	File	Line	Snippet	Context
HIGH	…ges/OsaurusCore/Tests/Chat/ChatTitleServiceTests.swift	5	// Pin the sanitizer contract for AI-generated chat titles. `sanitize` is a	COMMENT
HIGH	…ckages/OsaurusCore/Models/Chat/ChatConfiguration.swift	135	/// Master switch for AI-generated follow-up questions after a completed	COMMENT
HIGH	…ages/OsaurusCore/Views/Settings/ChatSettingsView.swift	35	/// AI-generated chat titles from the first completed exchange. Default	COMMENT
HIGH	…ages/OsaurusCore/Views/Settings/ChatSettingsView.swift	38	/// Master switch for AI-generated follow-up questions after a completed	COMMENT
HIGH	Packages/OsaurusCore/Views/Chat/ChatView.swift	456	/// One-shot latch for the AI-generated title. Set when a generation is	COMMENT

Excessive Try-Catch Wrapping25 hits · 33 pts

Severity	File	Line	Snippet	Context
MEDIUM	scripts/benchmark/ingest_locomo.py	160	print(f"Error: {data_path} not found")	CODE
LOW	scripts/benchmark/benchmark_models.py	34	except Exception as exc: # pragma: no cover	CODE
LOW	scripts/benchmark/benchmark_models.py	209	except Exception:	CODE
LOW	scripts/benchmark/benchmark_models.py	227	except Exception as exc: # pragma: no cover	CODE
LOW	scripts/benchmark/benchmark_models.py	424	except Exception as exc:	CODE
LOW	scripts/evals/triage-loop.sh	47	except Exception:	CODE
LOW	scripts/evals/triage-loop.sh	65	except Exception:	CODE
LOW	scripts/evals/computer-use-evidence.sh	171	except Exception:	CODE
MEDIUM	scripts/evals/computer-use-evidence.sh	168	def git(args):	CODE
LOW	scripts/i18n/fill-zh-hans.py	55	except Exception as exc: # noqa: BLE001	CODE
LOW	scripts/live-proof/classify-runtime-proof-summary.py	65	except Exception as exc: # noqa: BLE001 - artifact parser should preserve error text	CODE
LOW	scripts/live-proof/run-local-family-chat-tool-proof.py	128	except Exception as exc: # cache stats may be gated in some app modes	CODE
LOW	scripts/live-proof/run-local-family-chat-tool-proof.py	221	except Exception as exc:	CODE
LOW	scripts/live-proof/run-local-family-chat-tool-proof.py	234	except Exception as exc:	CODE
LOW	scripts/live-proof/run-local-family-chat-tool-proof.py	240	except Exception as exc:	CODE
LOW	…ts/live-proof/run-post1266-family-cache-tool-matrix.py	180	except Exception as exc: # noqa: BLE001 - artifact should preserve parser failure	CODE
LOW	…ts/live-proof/run-post1266-family-cache-tool-matrix.py	450	except Exception as exc: # noqa: BLE001 - row artifact should preserve runtime failure	CODE
LOW	scripts/live-proof/probe-mcp-templates.sh	82	except Exception as e:	CODE
LOW	scripts/live-proof/run-family-runtime-chat-matrix.sh	178	except Exception as exc:	CODE
MEDIUM	Packages/OsaurusCore/Models/Chat/ResponseWriters.swift	438	print("Error encoding SSE chunk: \(error)")	CODE
MEDIUM	Packages/OsaurusCore/Models/Chat/ResponseWriters.swift	1266	print("Error encoding Anthropic SSE event: \(error)")	CODE
MEDIUM	Packages/OsaurusCore/Models/Chat/ResponseWriters.swift	1785	print("Error encoding Open Responses SSE event: \(error)")	CODE
MEDIUM	…ges/OsaurusCore/Services/SystemPermissionService.swift	470	print("Error requesting contacts permission: \(error)")	CODE
MEDIUM	…ges/OsaurusCore/Services/SystemPermissionService.swift	495	print("Error requesting calendar permission: \(error)")	CODE
MEDIUM	…ges/OsaurusCore/Services/SystemPermissionService.swift	520	print("Error requesting reminders permission: \(error)")	CODE

Unused Imports25 hits · 25 pts

Severity	File	Line	Context
LOW	…8-30-inference-activity-ownership/run_disconnect_ab.py	4	CODE
LOW	scripts/benchmark/benchmark_models.py	20	CODE
LOW	…evals/assert-computer-use-web-form-evidence-privacy.py	4	CODE
LOW	…s/claude-marketplace/generate-importability-catalog.py	23	CODE
LOW	…s/claude-marketplace/generate-importability-catalog.py	27	CODE
LOW	scripts/release/generate_acknowledgements.py	16	CODE
LOW	scripts/release/generate_acknowledgements.py	18	CODE
LOW	scripts/i18n/check-swift-catalog-keys.py	4	CODE
LOW	scripts/i18n/xcstrings_util.py	3	CODE
LOW	scripts/i18n/merge-locale.py	4	CODE
LOW	scripts/i18n/prune-catalog.py	8	CODE
LOW	scripts/i18n/fill-zh-hans.py	7	CODE
LOW	scripts/i18n/leaderboard.py	29	CODE
LOW	scripts/i18n/export-untranslated.py	13	CODE
LOW	scripts/i18n/lint-swift-literals.py	4	CODE
LOW	scripts/i18n/apply-ko.py	18	CODE
LOW	scripts/i18n/check-localizations.py	4	CODE
LOW	scripts/live-proof/run-local-vl-media-cache-proof.py	9	CODE
LOW	scripts/live-proof/classify-runtime-proof-summary.py	12	CODE
LOW	scripts/live-proof/run-local-family-chat-tool-proof.py	9	CODE
LOW	scripts/live-proof/run-local-family-chat-tool-proof.py	16	CODE
LOW	…ts/live-proof/run-post1266-family-cache-tool-matrix.py	10	CODE
LOW	…e-proof/run-local-family-multiturn-tool-cache-proof.py	10	CODE
LOW	…ipts/live-proof/test-classify-runtime-proof-summary.py	2	CODE
LOW	scripts/live-proof/render-runtime-proof-matrix.py	9	CODE

Cross-File Repetition5 hits · 25 pts

Severity	File	Snippet	Context
HIGH	…re/Tests/Chat/ChatWindowStateWorkspaceAgentTests.swift	{"id": "\(id)", "name": "\(name)", "role": "\(role)", "source": "subscription", "active": true, "members_active": 2, "ag	STRING
HIGH	…e/Tests/Networking/HTTPSharedAgentExclusionTests.swift	{"id": "\(id)", "name": "\(name)", "role": "\(role)", "source": "subscription", "active": true, "members_active": 2, "ag	STRING
HIGH	…saurusCore/Tests/Router/SharedAgentIdentityTests.swift	{"id": "\(id)", "name": "\(name)", "role": "\(role)", "source": "subscription", "active": true, "members_active": 2, "ag	STRING
HIGH	…aurusCore/Tests/Router/WorkspaceRosterStoreTests.swift	{"id": "\(id)", "name": "\(name)", "role": "\(role)", "source": "subscription", "active": true, "members_active": 2, "ag	STRING
HIGH	…saurusCore/Tests/Router/SharedAgentSurfacesTests.swift	{"id": "\(id)", "name": "\(name)", "role": "\(role)", "source": "subscription", "active": true, "members_active": 2, "ag	STRING

Structural Annotation Overuse16 hits · 16 pts

Severity	File	Line	Snippet	Context
LOW	docs/plugins/QUICKSTART.md	21	## Step 1: Scaffold	COMMENT
LOW	docs/plugins/QUICKSTART.md	37	## Step 2: Build and run with hot reload	COMMENT
LOW	docs/plugins/QUICKSTART.md	52	## Step 3: Try the plugin	COMMENT
LOW	docs/plugins/QUICKSTART.md	60	## Step 4: Make a change	COMMENT
LOW	…ources/OsaurusCLICore/Commands/Tools/ToolsCreate.swift	1039	### Step 1: Declare Routes in Manifest	STRING
LOW	…ources/OsaurusCLICore/Commands/Tools/ToolsCreate.swift	1064	### Step 2: Handle in handle_route()	STRING
LOW	…ources/OsaurusCLICore/Commands/Tools/ToolsCreate.swift	1395	### Step 1: Define the Tool Structure	STRING
LOW	…ources/OsaurusCLICore/Commands/Tools/ToolsCreate.swift	1445	### Step 2: Add Tool to PluginContext	STRING
LOW	…ources/OsaurusCLICore/Commands/Tools/ToolsCreate.swift	1463	### Step 3: Register in Manifest	STRING
LOW	…ources/OsaurusCLICore/Commands/Tools/ToolsCreate.swift	1490	### Step 4: Handle in invoke()	STRING
LOW	…ources/OsaurusCLICore/Commands/Tools/ToolsCreate.swift	1533	### Step 1: Declare Secrets in Manifest	STRING
LOW	…ources/OsaurusCLICore/Commands/Tools/ToolsCreate.swift	1555	### Step 2: Access Secrets in Your Tool	STRING
LOW	Packages/OsaurusCore/Identity/SecureChannel.swift	197	/// Step 1: mint the client's ephemeral key and hello message.	COMMENT
LOW	…aurusCore/Tests/Skill/ClaudePluginInstallerTests.swift	934	### Step 1: Understand the Target	COMMENT
LOW	…rusCore/Tests/Chat/ChatWindowStateAgentSyncTests.swift	374	// Step 4: user clicks the seeded conversation in the sidebar.	COMMENT
LOW	…rusCore/Tests/Chat/ChatWindowStateAgentSyncTests.swift	400	// Step 5: user clicks "New Chat".	COMMENT

Deep Nesting15 hits · 15 pts

Severity	File	Line	Context
LOW	…8-30-inference-activity-ownership/run_disconnect_ab.py	42	CODE
LOW	scripts/benchmark/ingest_locomo.py	68	CODE
LOW	scripts/benchmark/benchmark_models.py	104	CODE
LOW	scripts/benchmark/benchmark_models.py	395	CODE
LOW	scripts/evals/plan-installed-vision.py	39	CODE
LOW	…s/claude-marketplace/generate-importability-catalog.py	169	CODE
LOW	scripts/diagnostics/vision-bundle-evidence.py	14	CODE
LOW	scripts/i18n/check-swift-catalog-keys.py	44	CODE
LOW	scripts/i18n/check-swift-catalog-keys.py	89	CODE
LOW	scripts/i18n/check-swift-catalog-keys.py	147	CODE
LOW	scripts/i18n/leaderboard.py	148	CODE
LOW	scripts/i18n/leaderboard.py	247	CODE
LOW	scripts/i18n/lint-swift-literals.py	87	CODE
LOW	scripts/i18n/apply-ko.py	85	CODE
LOW	…e-proof/run-local-family-multiturn-tool-cache-proof.py	139	CODE

Hyper-Verbose Identifiers15 hits · 14 pts

Severity	File	Line	Snippet	Context
LOW	docs/SHARED_CONFIGURATION_GUIDE.md	189	async function discoverLatestRunningInstance() {	CODE
LOW⚡	scripts/evals/tests/test_vision_matrix_driver.py	51	def test_default_runs_all_and_retains_results_on_macos_bash(self):	STRING
LOW⚡	scripts/evals/tests/test_vision_matrix_driver.py	57	def test_representative_does_not_qualify_unexecuted_alias(self):	STRING
LOW⚡	scripts/evals/tests/test_vision_matrix_driver.py	63	def test_missing_failed_and_skipped_reports_cannot_pass(self):	STRING
LOW⚡	scripts/evals/tests/test_vision_matrix_driver.py	70	def test_empty_admission_inventory_cannot_pass(self):	STRING
LOW⚡	scripts/evals/tests/test_vision_matrix_driver.py	74	def test_header_audit_failure_cannot_silently_omit_an_admitted_bundle(self):	STRING
LOW	scripts/ci/test_core_test_products.py	27	def test_round_trip_preserves_contents_executable_and_framework_link(self):	CODE
LOW	scripts/ci/test_core_test_products.py	40	def test_rejects_different_source_before_extracting(self):	CODE
LOW	scripts/release/generate_acknowledgements.py	104	def generate_acknowledgements(dependencies: Dict[str, Dict]) -> List[Dict]:	CODE
LOW	scripts/i18n/check-swift-catalog-keys.py	89	def parse_swift_string_from_marker(line: str, marker: str, start: int) -> tuple[str, int] \| None:	CODE
LOW	…ts/live-proof/run-post1266-family-cache-tool-matrix.py	252	def cache_boundaries_for_topology(family: str, delta: dict[str, int], topology: dict[str, Any]) -> list[str]:	CODE
LOW	…e-proof/run-local-family-multiturn-tool-cache-proof.py	130	def current_health_model_matches(health: dict[str, Any], model: str) -> bool:	CODE
LOW	…ipts/live-proof/test-classify-runtime-proof-summary.py	111	def test_missing_token_rate_is_partial() -> None:	CODE
LOW	…ipts/live-proof/test-classify-runtime-proof-summary.py	133	def test_vl_row_without_media_payload_is_not_proven() -> None:	CODE
LOW	…ipts/live-proof/test-classify-runtime-proof-summary.py	152	def test_unreadable_row_is_unproven() -> None:	CODE

Verbosity Indicators12 hits · 10 pts

Severity	File	Line	Snippet	Context
LOW	…ources/OsaurusCLICore/Commands/Tools/ToolsCreate.swift	1039	### Step 1: Declare Routes in Manifest	STRING
LOW	…ources/OsaurusCLICore/Commands/Tools/ToolsCreate.swift	1064	### Step 2: Handle in handle_route()	STRING
LOW	…ources/OsaurusCLICore/Commands/Tools/ToolsCreate.swift	1395	### Step 1: Define the Tool Structure	STRING
LOW	…ources/OsaurusCLICore/Commands/Tools/ToolsCreate.swift	1445	### Step 2: Add Tool to PluginContext	STRING
LOW	…ources/OsaurusCLICore/Commands/Tools/ToolsCreate.swift	1463	### Step 3: Register in Manifest	STRING
LOW	…ources/OsaurusCLICore/Commands/Tools/ToolsCreate.swift	1490	### Step 4: Handle in invoke()	STRING
LOW	…ources/OsaurusCLICore/Commands/Tools/ToolsCreate.swift	1533	### Step 1: Declare Secrets in Manifest	STRING
LOW	…ources/OsaurusCLICore/Commands/Tools/ToolsCreate.swift	1555	### Step 2: Access Secrets in Your Tool	STRING
LOW	Packages/OsaurusCore/Identity/SecureChannel.swift	197	/// Step 1: mint the client's ephemeral key and hello message.	COMMENT
LOW	…aurusCore/Tests/Skill/ClaudePluginInstallerTests.swift	934	### Step 1: Understand the Target	COMMENT
LOW	…rusCore/Tests/Chat/ChatWindowStateAgentSyncTests.swift	374	// Step 4: user clicks the seeded conversation in the sidebar.	COMMENT
LOW	…rusCore/Tests/Chat/ChatWindowStateAgentSyncTests.swift	400	// Step 5: user clicks "New Chat".	COMMENT

Self-Referential Comments2 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM	docs/examples/osaurus-config.sample.yaml	20	# This file is pinned by ConfigSampleDocumentTests: it must decode and	COMMENT
MEDIUM	scripts/openai_compat_report.sh	169	# Define a simple function tool	COMMENT

Example Usage Blocks3 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW	scripts/evals/triage-loop.sh	7	# Usage:	COMMENT
LOW	scripts/evals/contribute.sh	13	# Usage:	COMMENT
LOW	scripts/release/install_cli_symlink.sh	9	# Usage:	COMMENT

Slop Phrases1 hit · 2 pts

Severity	File	Line	Snippet	Context
MEDIUM	…e/Tests/Service/CapabilityClaimsJudgeParserTests.swift	40	Let me know if you need more detail.	CODE

osaurus-ai/osaurus

Open-Source Code Quality, Security and Technical Debt Review