1.9

Adjusted Signal

1.9

Raw Pattern Score

100%

Time Factor

2026-10-30

Last Push

4.8K

Stars

Rust

Language

680.2K

Lines of Code

2.2K

Files

1.1K

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 7.0/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 1008 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.6/100 · LOW

Are imports declared and package/API names verified? 10 finding(s).

Agent Over-Engineering Ratio 5.9/100 · LOW

Are wrappers, guards, and repeated structures necessary? 776 finding(s).

PR Review Velocity Impact 9.5/100 · LOW

Which changes need focused human review? 1091 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 5HIGH 7MEDIUM 91LOW 988

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 1091 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers703 hits · 630 pts

Severity	File	Line	Snippet	Context
LOW	crates/execution/tests/javascript_v8.rs	5566	async function assertDestroyedLoopbackDoesNotConnect() {	CODE
LOW	crates/execution/tests/javascript_v8.rs	5622	async function assertAcceptWakesCoalesce() {	CODE
LOW	crates/execution/tests/wasm_host_net_errno_contract.rs	45	"function writeHostNetBytesToGuestIovs(",	CODE
LOW	crates/execution/tests/wasm_host_net_errno_contract.rs	46	"function readHostNetSocketToGuestIovs(",	CODE
LOW	crates/execution/tests/wasm_host_net_errno_contract.rs	57	"function readHostNetSocketToGuestIovs(",	CODE
LOW	crates/execution/tests/wasm_host_net_errno_contract.rs	58	"function writeHostNetSocketFromGuestIovs(",	CODE
LOW	crates/execution/tests/wasm_host_net_errno_contract.rs	77	"function writeHostNetSocketFromGuestIovs(",	CODE
LOW	crates/execution/src/node_import_cache.rs	564	function pruneProjectedSourceFiles() {	CODE
LOW	crates/execution/src/node_import_cache.rs	602	function loadProjectedPackageSource(url, filePath, format) {	CODE
LOW	crates/execution/src/node_import_cache.rs	864	function replaceBuiltinImportSpecifier(source, specifier, replacement) {	CODE
LOW	crates/execution/src/node_import_cache.rs	872	function replaceBuiltinDynamicImportSpecifier(source, specifier, replacement) {	CODE
LOW	crates/execution/src/node_import_cache.rs	1191	function validateModuleFormatEntry(entry) {	CODE
LOW	crates/execution/src/node_import_cache.rs	1218	function validateProjectedSourceEntry(entry, filePath, format) {	CODE
LOW	crates/execution/src/node_import_cache.rs	1363	function barePackageJsonCandidates(parentURL, packageName) {	CODE
LOW	crates/execution/src/node_import_cache.rs	1429	function isExplicitFileLikeSpecifier(specifier) {	CODE
LOW	crates/execution/src/node_import_cache.rs	1524	function translateContextParentUrl(context) {	CODE
LOW	crates/execution/src/node_import_cache.rs	1547	function translateResolvedUrlToGuest(url) {	CODE
LOW	crates/execution/src/node_import_cache.rs	1556	function translateResolvedUrlToHost(url) {	CODE
LOW	crates/execution/src/node_import_cache.rs	1700	function guestInternalPathFromHostPath(hostPath) {	CODE
LOW	crates/execution/src/node_import_cache.rs	1723	function guestVisiblePathFromHostPath(hostPath) {	CODE
LOW	crates/execution/src/node_import_cache.rs	1748	function translatePathStringToGuest(value) {	CODE
LOW	crates/execution/src/node_import_cache.rs	1774	function buildHostToGuestTextReplacements() {	CODE
LOW	crates/execution/src/node_import_cache.rs	1836	function translateTextTokenToGuest(token) {	CODE
LOW	crates/execution/src/node_import_cache.rs	1961	function isInternalImportCachePath(filePath) {	CODE
LOW	crates/execution/src/node_import_cache.rs	1986	function parseJsonArrayLikeObjects(value) {	CODE
LOW	crates/execution/src/node_import_cache.rs	3652	function createNotImplementedError(feature) {{\n\	CODE
LOW	crates/execution/src/javascript.rs	6290	function isStringOneByteRepresentation(value) {	CODE
LOW	crates/execution/src/javascript.rs	6300	function setHeapSnapshotNearHeapLimit() {	CODE
LOW	crates/execution/src/javascript.rs	6396	function createVmNotImplementedError(feature) {	CODE
LOW	crates/execution/src/javascript.rs	6534	r#"function createNotImplementedError(feature) {	CODE
LOW	crates/native-sidecar/tests/builtin_conformance.rs	1379	async function pauseThenOnDataThenResume() {	CODE
LOW	crates/native-sidecar/tests/builtin_conformance.rs	1420	async function multiplePauseResumeCycles() {	CODE
LOW	scripts/publish/src/ci/bin.ts	81	async function cargoPublishWithRateLimitRetry(	CODE
LOW	scripts/publish/src/ci/bin.ts	106	function parseCratesIoRateLimitRetry(output: string): Date \| undefined {	CODE
LOW	scripts/publish/src/lib/context.ts	225	export function writeContextToGithubOutput(ctx: PublishContext): void {	CODE
LOW	packages/core/tests/pty-line-discipline.nightly.test.ts	122	function materializePtyProbePackage(): string {	CODE
LOW	…ages/core/tests/native-sidecar-process.nightly.test.ts	72	function createJavaScriptVmOptions(options: JavaScriptVmConfigOptions = {}) {	CODE
LOW	…sts/native-sidecar-process-permissions.nightly.test.ts	32	function createJavaScriptVmOptions(options: JavaScriptVmConfigOptions = {}) {	CODE
LOW	packages/core/tests/mount.test.ts	31	function createRecordingFilesystem(): {	CODE
LOW	packages/core/tests/vim-provides.nightly.test.ts	91	function materializeLocalEditorsPackage(withProvides: boolean): {	CODE
LOW	packages/core/tests/exec-timeout.test.ts	9	function processThatExitsWhenKilled(): {	CODE
LOW	packages/core/tests/fs-native-parity.nightly.test.ts	113	function ensureWorkspaceSidecarBuilt(): void {	CODE
LOW	packages/core/tests/fs-native-parity.nightly.test.ts	132	function materializeFsProbePackage(): string {	CODE
LOW	packages/core/tests/pty-protocol.nightly.test.ts	61	function materializePtyProbePackage(): string {	CODE
LOW	packages/core/tests/pty-protocol.nightly.test.ts	76	function ensureWorkspaceSidecarBuilt(): void {	CODE
LOW	packages/core/tests/browserbase-e2e.test.ts	137	async function assertDirectGuestEgressIsDenied() {	CODE
LOW	packages/core/tests/duckdb-package.nightly.test.ts	48	function cSysrootPackageSkipReason(	CODE
LOW	…ages/core/tests/child-process-detached.nightly.test.ts	331	function registerPiShapedShellBackendTests(): void {	CODE
LOW	packages/core/tests/helpers/registry-commands.ts	166	export function cSysrootPackageSkipReason(	CODE
LOW	packages/core/tests/helpers/rich-media.ts	33	export function requestContainsExactPngToolResult(request: unknown): boolean {	CODE
LOW	packages/core/src/filesystem-snapshot.ts	93	export async function snapshotVirtualFilesystem(	CODE
LOW	packages/core/src/agentos-package.ts	57	export function readAgentosPackageManifest(	CODE
LOW	packages/core/src/agentos-package.ts	76	export function tryReadAgentosPackageManifest(	CODE
LOW	packages/core/src/agentos-package.ts	92	function validateAgentosPackageManifest(	CODE
LOW	packages/core/src/sandbox.ts	160	function getSerializableClientConfig(	CODE
LOW	packages/core/src/sandbox.ts	209	export function createSandboxHostFunctions(	CODE
LOW	packages/core/src/sandbox.ts	374	function assertNoLegacySandboxOptions(input: AgentOsSandboxInput): void {	CODE
LOW	packages/core/src/agent-os.ts	96	async function waitForTrackedExitPromises(	CODE
LOW	packages/core/src/agent-os.ts	781	function packageResolverWireOptions(	CODE
LOW	packages/core/src/agent-os.ts	917	function getHostDirMountPluginConfig(	CODE
643 more matches not shown…

Over-Commented Block261 hits · 256 pts

Severity	File	Line	Snippet	Context
LOW	crates/vm-config/src/lib.rs	21	/// public `NodeRuntime.create(...)` option changes the generated VM config.	COMMENT
LOW	crates/vm-config/src/lib.rs	41	#[ts(optional)]	COMMENT
LOW	crates/vm-config/src/lib.rs	321	pub gid: Option<u32>,	COMMENT
LOW	crates/vm-config/src/lib.rs	501	#[derive(Debug, Clone, PartialEq, Eq, Default, Serialize, Deserialize, TS)]	COMMENT
LOW	crates/vm-config/src/lib.rs	561	#[default]	COMMENT
LOW	crates/vm-config/src/lib.rs	721	pub kind: RootFilesystemEntryKind,	COMMENT
LOW	crates/vm-config/src/lib.rs	901	#[serde(default, skip_serializing_if = "Option::is_none")]	COMMENT
LOW	crates/vm-config/src/lib.rs	921	#[ts(optional)]	COMMENT
LOW	crates/vm-config/src/lib.rs	941	#[serde(default, skip_serializing_if = "Option::is_none")]	COMMENT
LOW	crates/vfs/src/posix/mount_table.rs	1761		COMMENT
LOW	crates/vfs/src/posix/tar_fs.rs	21	const MAX_TAR_SYMLINKS: usize = 40;	COMMENT
LOW	crates/vfs/src/package_format/pack.rs	1	//! Canonical `.aospkg` packer: source `package.tar` → `header + vbare manifest	COMMENT
LOW	crates/vfs/src/package_format/generated.rs	1	// Generated package container surface produced by `vbare_compiler`.	COMMENT
LOW	crates/sidecar-client/src/transport.rs	1	//! `SidecarTransport`: spawns a native sidecar binary and speaks the existing framed	COMMENT
LOW	crates/sidecar-client/src/transport.rs	41	/// Product clients can pass an explicit binary path to [`SidecarTransport::spawn`].	COMMENT
LOW	crates/sidecar-client/src/transport.rs	81	/// Pending host-initiated requests, keyed by positive `RequestId`.	COMMENT
LOW	crates/v8-runtime/src/timeout.rs	1	// Execution budget enforcement via process-owned runtime tasks.	COMMENT
LOW	crates/v8-runtime/src/timeout.rs	41	///	COMMENT
LOW	crates/v8-runtime/src/timeout.rs	161	/// A guest that mostly awaits/idles accrues little CPU time and is NOT killed.	COMMENT
LOW	crates/v8-runtime/src/bridge.rs	1121	/// Evict every `node:vm` context slot held by the current isolate thread and	COMMENT
LOW	crates/v8-runtime/src/bridge.rs	1141	/// Mirrors the per-session ownership of [`PendingPromises`] (created fresh per	COMMENT
LOW	crates/v8-runtime/src/bridge.rs	2101	// a prior session that reused this isolate thread. Sweep them here so a new	COMMENT
LOW	crates/v8-runtime/src/session.rs	1001	command_capacity: usize,	COMMENT
LOW	crates/v8-runtime/src/session.rs	2281	&runtime,	COMMENT
LOW	crates/v8-runtime/src/session.rs	2321	let mut last_globals_payload: Option<Vec<u8>> = None;	COMMENT
LOW	crates/v8-runtime/src/session.rs	3361	/// Reset every pending promise-resolver `v8::Global` handle held by `pending`.	COMMENT
LOW	crates/v8-runtime/src/session.rs	3381	///	COMMENT
LOW	crates/v8-runtime/src/session.rs	4781	.expect("failed dispatch must complete and rearm the wake for session reuse");	COMMENT
LOW	crates/v8-runtime/src/stream.rs	1	// Async event dispatch for child process and HTTP server streams	COMMENT
LOW	crates/v8-runtime/src/native_heap.rs	1	//! Native heap maintenance for memory freed by V8 and other C/C++ code.	COMMENT
LOW	crates/v8-runtime/src/ipc_binary.rs	1	// Binary header IPC framing — custom wire format for all message types.	COMMENT
LOW	crates/v8-runtime/src/execution.rs	901	obj.set(scope, key.into(), val.into());	COMMENT
LOW	crates/v8-runtime/src/execution.rs	921	/// `openat2(RESOLVE_BENEATH)` confinement).	COMMENT
LOW	crates/v8-runtime/src/snapshot.rs	81	const SNAPSHOT_USERLAND_PREP: &str = r#"	COMMENT
LOW	crates/v8-runtime/src/snapshot.rs	201	/// context — with all bridge infrastructure set up — is snapshotted.	COMMENT
LOW	crates/v8-runtime/src/snapshot.rs	1921	// DEFERS to the bridge's live getter post-restore instead of freezing a static	COMMENT
LOW	crates/v8-runtime/src/host_call.rs	1041	/// and pending-call tracking. Used by V8 FunctionTemplate callbacks to	COMMENT
LOW	crates/v8-runtime/src/isolate.rs	161	/// Executor and maintenance threads may descend from fixed host workers that	COMMENT
LOW	crates/v8-runtime/src/isolate.rs	201	/// guest with no configured `heap_limit_mb` must NOT be able to grow the heap until	COMMENT
LOW	crates/v8-runtime/src/isolate.rs	241	current_heap_limit	COMMENT
LOW	crates/v8-runtime/src/isolate.rs	421		COMMENT
LOW	crates/sidecar-protocol/src/protocol.rs	3401	pub cols: Option<u16>,	COMMENT
LOW	crates/sidecar-protocol/src/protocol.rs	3421	/// process.exec_fd_image_commit route. Generic guest process.exec requests	COMMENT
LOW	crates/sidecar-protocol/src/protocol.rs	3441	pub spawn_search_path: Option<String>,	COMMENT
LOW	crates/sidecar-protocol/src/protocol.rs	3461	/// by sidecar-owned socket descriptions rather than kernel fd-table slots.	COMMENT
LOW	crates/sidecar-protocol/src/generated_protocol.rs	1	// Generated protocol surface produced by `vbare_compiler` (see `build.rs`).	COMMENT
LOW	crates/bridge/src/queue_tracker.rs	1	//! Centralized bounded-queue usage tracker.	COMMENT
LOW	crates/execution/build.rs	1	use std::env;	COMMENT
LOW	…tes/execution/tests/wasi_path_open_read_not_blocked.rs	1	//! Regression test for issue #1:	COMMENT
LOW	crates/execution/tests/javascript_v8.rs	4741	// Regression: when the host briefly stops draining the V8 -> host event channel	COMMENT
LOW	crates/execution/tests/javascript_v8.rs	4841	);	COMMENT
LOW	crates/execution/tests/javascript_v8.rs	6701	}	COMMENT
LOW	crates/execution/tests/javascript_v8.rs	6981	(unexpected hang)"	COMMENT
LOW	crates/execution/tests/javascript_v8.rs	7141	);	COMMENT
LOW	crates/execution/tests/javascript_v8.rs	7161	javascript_execution_refreshes_process_cwd_between_reused_context_executions();	COMMENT
LOW	crates/execution/tests/javascript_v8.rs	7241	js_runtime_browser_loads_cjs_npm_package();	COMMENT
LOW	crates/execution/tests/wasm.rs	2921		COMMENT
LOW	crates/execution/src/v8_ipc.rs	1	//! Binary IPC framing for communication with the agentos-v8 runtime process.	COMMENT
LOW	crates/execution/src/javascript.rs	441	/// the BARE wire); `None` selects the engine default. See the env-vs-wire rule	COMMENT
LOW	crates/execution/src/javascript.rs	461	/// execution must supply `limits.reactor.workQuantum` here.	COMMENT
201 more matches not shown…

Decorative Section Separators56 hits · 177 pts

Severity	File	Line	Snippet	Context
MEDIUM	crates/client/src/cron.rs	1288	// ── Security: AOSCLIENT-P1-cron-exec (N-007 untrusted cron CronAction::Exec) ─────────────────	COMMENT
MEDIUM	crates/client/src/cron.rs	1370	// ── Security: AOSCLIENT-P2-cron-cap (N-008 cron job-limit flooding) ──────────────────────────	COMMENT
MEDIUM	crates/client/src/net.rs	520	// ── Security: AOSCLIENT-P3-fetch (N-010 guest-server VmFetch response) ───────────────────────	COMMENT
MEDIUM	crates/client/src/command_line.rs	159	// ── Security: AOSCLIENT-P2-cmdline (N-009 guest exec line) ───────────────────────────────────	COMMENT
MEDIUM	examples/embedded/vm.ts	11	// ── Filesystem ────────────────────────────────────────────────────	COMMENT
MEDIUM	examples/embedded/vm.ts	34	// ── Processes ─────────────────────────────────────────────────────	COMMENT
MEDIUM	examples/embedded/vm.ts	61	// ── Retained language contexts ───────────────────────────────────	COMMENT
MEDIUM	examples/embedded/vm.ts	78	// ── Networking ────────────────────────────────────────────────────	COMMENT
MEDIUM	examples/embedded/vm.ts	94	// ── Cron jobs ─────────────────────────────────────────────────────	COMMENT
MEDIUM	scripts/benchmarks/bench-utils.ts	16	// ── Shared bench sidecar + cold-run snapshot ───────────────────────	COMMENT
MEDIUM	scripts/benchmarks/bench-utils.ts	72	// ── Workload abstraction ────────────────────────────────────────────	COMMENT
MEDIUM	scripts/benchmarks/bench-utils.ts	115	// ── VM creation helpers ─────────────────────────────────────────────	COMMENT
MEDIUM	scripts/benchmarks/bench-utils.ts	129	// ── Stats and formatting ────────────────────────────────────────────	COMMENT
MEDIUM	packages/core/tests/wasm-commands.nightly.test.ts	43	// ── coreutils: shell ──────────────────────────────────────────────	COMMENT
MEDIUM	packages/core/tests/wasm-commands.nightly.test.ts	124	// ── coreutils: file operations ────────────────────────────────────	COMMENT
MEDIUM	packages/core/tests/wasm-commands.nightly.test.ts	324	// ── grep ──────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/core/tests/wasm-commands.nightly.test.ts	387	// ── sed ───────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/core/tests/wasm-commands.nightly.test.ts	419	// ── gawk ──────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/core/tests/wasm-commands.nightly.test.ts	452	// ── findutils ─────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/core/tests/wasm-commands.nightly.test.ts	486	// ── diffutils ─────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/core/tests/wasm-commands.nightly.test.ts	507	// ── tar ───────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/core/tests/wasm-commands.nightly.test.ts	535	// ── gzip ──────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/core/tests/wasm-commands.nightly.test.ts	562	// ── jq ────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/core/tests/wasm-commands.nightly.test.ts	599	// ── ripgrep ───────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/core/tests/wasm-commands.nightly.test.ts	626	// ── fd ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/core/tests/wasm-commands.nightly.test.ts	643	// ── tree ──────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/core/tests/wasm-commands.nightly.test.ts	660	// ── yq ────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/core/tests/wasm-commands.nightly.test.ts	672	// ── curl (requires C build) ───────────────────────────────────────	COMMENT
MEDIUM	packages/core/tests/wasm-commands.nightly.test.ts	880	// ── file permissions (Bug 1 regression tests) ──────────────────────	COMMENT
MEDIUM	packages/core/tests/wasm-commands.nightly.test.ts	927	// ── exit codes (Bug 5 regression tests) ─────────────────────────	COMMENT
MEDIUM	packages/core/tests/wasm-commands.nightly.test.ts	960	// ── complex pipelines ─────────────────────────────────────────────	COMMENT
MEDIUM	packages/core/src/packages.ts	3	// ── Software Descriptor Types ────────────────────────────────────────	COMMENT
MEDIUM	packages/core/src/packages.ts	41	// ── defineSoftware ───────────────────────────────────────────────────	COMMENT
MEDIUM	packages/core/src/agent-os.ts	5870	// ── Cron ────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/agentos-toolchain/src/aospkg.ts	374	// ── minimal tar reader ────────────────────────────────────────────────	COMMENT
MEDIUM	toolchain/conformance/libc-test-conformance.test.ts	46	// ── Paths ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	toolchain/conformance/libc-test-conformance.test.ts	57	// ── Skip guard ─────────────────────────────────────────────────────────	COMMENT
MEDIUM	toolchain/conformance/libc-test-conformance.test.ts	65	// ── Test discovery ─────────────────────────────────────────────────────	COMMENT
MEDIUM	toolchain/conformance/libc-test-conformance.test.ts	81	// ── Native binary runner ───────────────────────────────────────────────	COMMENT
MEDIUM	toolchain/conformance/libc-test-conformance.test.ts	105	// ── Flat symlink directory for command resolution ──────────────────────	COMMENT
MEDIUM⚡	toolchain/conformance/libc-test-conformance.test.ts	121	// ── Exclusion map ──────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	toolchain/conformance/libc-test-conformance.test.ts	125	// ── Group by suite ─────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	toolchain/conformance/libc-test-conformance.test.ts	134	// ── Result tracking ────────────────────────────────────────────────────	COMMENT
MEDIUM	toolchain/conformance/libc-test-conformance.test.ts	151	// ── Report generation ──────────────────────────────────────────────────	COMMENT
MEDIUM	toolchain/conformance/libc-test-conformance.test.ts	246	// ── Test suite ─────────────────────────────────────────────────────────	COMMENT
MEDIUM	toolchain/conformance/os-test-conformance.test.ts	43	// ── Paths ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	toolchain/conformance/os-test-conformance.test.ts	56	// ── Skip guard ─────────────────────────────────────────────────────────	COMMENT
MEDIUM	toolchain/conformance/os-test-conformance.test.ts	64	// ── Test discovery ─────────────────────────────────────────────────────	COMMENT
MEDIUM	toolchain/conformance/os-test-conformance.test.ts	80	// ── Native binary runner ───────────────────────────────────────────────	COMMENT
MEDIUM	toolchain/conformance/os-test-conformance.test.ts	104	// ── VFS population from native build ──────────────────────────────────	COMMENT
MEDIUM	toolchain/conformance/os-test-conformance.test.ts	178	// ── Flat symlink directory for command resolution ──────────────────────	COMMENT
MEDIUM⚡	toolchain/conformance/os-test-conformance.test.ts	198	// ── Exclusion map ──────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	toolchain/conformance/os-test-conformance.test.ts	202	// ── Group by suite ─────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	toolchain/conformance/os-test-conformance.test.ts	211	// ── Result tracking ────────────────────────────────────────────────────	COMMENT
MEDIUM	toolchain/conformance/os-test-conformance.test.ts	226	// ── Report generation ──────────────────────────────────────────────────	COMMENT
MEDIUM	toolchain/conformance/os-test-conformance.test.ts	330	// ── Test suite ─────────────────────────────────────────────────────────	COMMENT

AI Slop Vocabulary25 hits · 58 pts

Severity	File	Line	Snippet	Context
MEDIUM	crates/execution/tests/javascript_v8.rs	1311	#[allow(dead_code)] // quarantined: see the live-stdin/tty harness note above	COMMENT
MEDIUM	crates/execution/tests/javascript_v8.rs	1358	#[allow(dead_code)] // quarantined: see the live-stdin/tty harness note above	COMMENT
MEDIUM	crates/execution/tests/javascript_v8.rs	1406	#[allow(dead_code)] // quarantined: see the live-stdin/tty harness note above	COMMENT
MEDIUM	crates/execution/tests/javascript_v8.rs	1579	#[allow(dead_code)] // quarantined: see the live-stdin/tty harness note above	COMMENT
MEDIUM	crates/execution/tests/javascript_v8.rs	4132	#[allow(dead_code)] // quarantined: see the live-stdin/tty harness note above	COMMENT
MEDIUM	crates/native-baseline/Cargo.toml	8	# Native floor for the differential perf harness. std-only on purpose: this is the	COMMENT
MEDIUM	crates/native-sidecar/tests/fetch_via_undici.rs	58	// common case, but robust to a fresh socket per request) and serve keep-alive	COMMENT
MEDIUM	packages/playground/frontend/runtime-harness.js	3	const statusElement = document.querySelector("#harness-status");	CODE
MEDIUM	…untime-benchmarks/src/focused/wasi-ls-scaling.bench.ts	220	// Keep benchmark collection robust if a debug line is malformed.	COMMENT
MEDIUM	…untime-browser/tests/browser/converged-runtime.spec.ts	12	await expect(page.locator("#harness-status")).toHaveText("ready");	CODE
MEDIUM	…untime-browser/tests/browser/converged-runtime.spec.ts	31	await expect(page.locator("#harness-status")).toHaveText("ready");	CODE
MEDIUM	…untime-browser/tests/browser/converged-runtime.spec.ts	50	await expect(page.locator("#harness-status")).toHaveText("ready");	CODE
MEDIUM	…untime-browser/tests/browser/converged-runtime.spec.ts	69	await expect(page.locator("#harness-status")).toHaveText("ready");	CODE
MEDIUM	…untime-browser/tests/browser/converged-sidecar.spec.ts	12	await expect(page.locator("#harness-status")).toHaveText("ready");	CODE
MEDIUM	…untime-browser/tests/browser/converged-sidecar.spec.ts	36	await expect(page.locator("#harness-status")).toHaveText("ready");	CODE
MEDIUM	…untime-browser/tests/browser/converged-sidecar.spec.ts	54	await expect(page.locator("#harness-status")).toHaveText("ready");	CODE
MEDIUM	…untime-browser/tests/browser/converged-sidecar.spec.ts	71	await expect(page.locator("#harness-status")).toHaveText("ready");	CODE
MEDIUM	…untime-browser/tests/browser/converged-sidecar.spec.ts	89	await expect(page.locator("#harness-status")).toHaveText("ready");	CODE
MEDIUM	…untime-browser/tests/browser/converged-sidecar.spec.ts	106	await expect(page.locator("#harness-status")).toHaveText("ready");	CODE
MEDIUM	…untime-browser/tests/browser/converged-sidecar.spec.ts	124	await expect(page.locator("#harness-status")).toHaveText("ready");	CODE
MEDIUM	packages/runtime-browser/tests/browser/harness.ts	120	await expect(page.locator("#harness-status")).toHaveText("ready");	CODE
MEDIUM	…me-browser/tests/browser/converged-conformance.spec.ts	17	await expect(page.locator("#harness-status")).toHaveText("ready");	CODE
MEDIUM	…me-browser/tests/browser/converged-conformance.spec.ts	45	await expect(page.locator("#harness-status")).toHaveText("ready");	CODE
MEDIUM	…me-browser/tests/browser/converged-conformance.spec.ts	70	await expect(page.locator("#harness-status")).toHaveText("ready");	CODE
MEDIUM	…me-browser/tests/browser/converged-conformance.spec.ts	99	await expect(page.locator("#harness-status")).toHaveText("ready");	CODE

Hallucination Indicators5 hits · 50 pts

Severity	File	Line	Snippet	Context
CRITICAL	crates/runtime/src/metrics.rs	513	current_size: self.inner.readiness.size.current.load(ORDERING),	CODE
CRITICAL	crates/runtime/src/metrics.rs	514	size_high_water: self.inner.readiness.size.high_water.load(ORDERING),	CODE
CRITICAL	crates/native-sidecar/src/execution/child_process.rs	2953	let max_service_claims = self.config.runtime.protocol.max_process_events.max(1);	CODE
CRITICAL	crates/native-sidecar/src/execution/child_process.rs	3821	self.config.runtime.protocol.max_process_events.max(1),	CODE
CRITICAL	crates/native-sidecar/src/execution/process_events.rs	636	let transfer_limit = self.config.runtime.protocol.max_process_events.max(1);	CODE

Cross-Language Confusion (JS/TS)5 hits · 25 pts

Severity	File	Line	Snippet	Context
HIGH	examples/quickstart/python/index.ts	25	print((workspace / "answer.json").read_text())	CODE
HIGH	examples/quickstart/python/index.ts	26	print(child.stdout)	CODE
HIGH	examples/embedded/host-functions-python.ts	36	print(json.loads(completed.stdout)["result"])	CODE
HIGH	examples/python-sdk-overview/src/platform.ts	12	print(Path("/workspace/data.txt").read_text())	CODE
HIGH	examples/python-sdk-overview/src/platform.ts	34	print(urllib.request.urlopen("https://example.com").status)	CODE

Modern AI Meta-Vocabulary8 hits · 22 pts

Severity	File	Line	Snippet	Context
MEDIUM	crates/AGENTS.md	115	- **If a shared `src/` module carries helper code that only those included test harnesses use, gate the helper types/fun	CODE
MEDIUM	crates/CLAUDE.md	115	- **If a shared `src/` module carries helper code that only those included test harnesses use, gate the helper types/fun	CODE
MEDIUM	crates/native-sidecar-browser/src/lib.rs	5	//! Browser-side sidecar scaffold for the agentos runtime migration.	COMMENT
MEDIUM	crates/execution/src/lib.rs	3	//! Native execution plane scaffold for the agentos runtime migration.	COMMENT
MEDIUM	crates/native-sidecar-core/src/root_fs.rs	133	// Preserve that scaffold when the CA is the only explicit layer.	COMMENT
MEDIUM	crates/client/tests/scaffold.rs	1	//! Integration test scaffold for `agentos-client`.	COMMENT
MEDIUM	crates/native-sidecar/src/vm.rs	121	// filesystem snapshot); scaffold it here so it exists even when the	COMMENT
MEDIUM	crates/native-sidecar/src/lib.rs	3	//! Native sidecar scaffold that composes the kernel and execution crates.	COMMENT

Excessive Try-Catch Wrapping15 hits · 16 pts

Severity	File	Line	Snippet	Context
MEDIUM	crates/execution/src/node_import_cache.rs	4183	def capture(action):	CODE
LOW	crates/execution/src/node_import_cache.rs	4187	except Exception as error:	CODE
LOW	crates/native-sidecar/tests/python.rs	1108	except Exception as error:	CODE
LOW	crates/native-sidecar/tests/python.rs	2112	except Exception as error:	CODE
LOW	crates/native-sidecar/tests/python.rs	3130	except Exception as error:	CODE
LOW	crates/native-sidecar/tests/python.rs	3265	except Exception as error:	CODE
MEDIUM	crates/native-sidecar/tests/python.rs	1104	def capture(action):	CODE
LOW	crates/native-sidecar/src/plugins/sandbox_agent.rs	1319	except Exception as exc:	CODE
LOW	crates/native-sidecar/src/plugins/sandbox_agent.rs	1343	except Exception as exc:	CODE
LOW	crates/native-sidecar/src/plugins/sandbox_agent.rs	1366	except Exception as exc:	CODE
LOW	crates/native-sidecar/src/plugins/sandbox_agent.rs	1390	except Exception as exc:	CODE
LOW	crates/native-sidecar/src/plugins/sandbox_agent.rs	1414	except Exception as exc:	CODE
LOW	crates/native-sidecar/src/plugins/sandbox_agent.rs	1438	except Exception as exc:	CODE
LOW	crates/native-sidecar/src/plugins/sandbox_agent.rs	1462	except Exception as exc:	CODE
LOW	crates/native-sidecar/src/plugins/sandbox_agent.rs	1486	except Exception as exc:	CODE

Empty Error Handlers2 hits · 10 pts

Severity	File	Line	Snippet	Context
HIGH	packages/core/tests/helpers/native-vim-ref.py	31	except OSError:	CODE
HIGH	packages/core/tests/helpers/native-vim-ref.py	64	except OSError:	CODE

Example Usage Blocks5 hits · 8 pts

Severity	File	Line	Snippet	Context
LOW	scripts/ralph/ralph-docker.sh	7	# Usage:	COMMENT
LOW	toolchain/scripts/patch-std.sh	8	# Usage:	COMMENT
LOW	toolchain/scripts/test-gnu.sh	9	# Usage:	COMMENT
LOW	toolchain/scripts/patch-vendor.sh	8	# Usage:	COMMENT
LOW	toolchain/scripts/patch-wasi-libc.sh	8	# Usage:	COMMENT

Verbosity Indicators3 hits · 6 pts

Severity	File	Line	Snippet	Context
LOW	crates/native-sidecar/tests/projection_bench.rs	404	// Step 1: read the .aospkg header + chunk1 manifest (commands included).	COMMENT
LOW⚡	crates/native-sidecar/tests/projection_bench.rs	418	// Step 2: build the granular leaf mounts (+ collision check).	COMMENT
LOW⚡	crates/native-sidecar/tests/projection_bench.rs	424	// Step 3: open the tar mount — decode the precomputed chunk2 index and	COMMENT

Structural Annotation Overuse3 hits · 6 pts

Severity	File	Line	Snippet	Context
LOW	crates/native-sidecar/tests/projection_bench.rs	404	// Step 1: read the .aospkg header + chunk1 manifest (commands included).	COMMENT
LOW⚡	crates/native-sidecar/tests/projection_bench.rs	418	// Step 2: build the granular leaf mounts (+ collision check).	COMMENT
LOW⚡	crates/native-sidecar/tests/projection_bench.rs	424	// Step 3: open the tar mount — decode the precomputed chunk2 index and	COMMENT

rivet-dev/agentos

Open-Source Code Quality, Security and Technical Debt Review