Home / unicity-aos / aos-ce
AI Slop Code RIsk Monitor

unicity-aos/aos-ce

AOS Community Edition: the open agent operating system.

6.1 Moderate pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for unicity-aos/aos-ce, a Rust project with 8,462 GitHub stars. SynthScan examined 111,832 lines of code across 534 source files, recording 521 pattern matches distributed across 12 syntactic categories. The legacy adjusted pattern signal is 6.1 (Moderate pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

6.1
Adjusted Signal
6.1
Raw Pattern Score
100%
Time Factor
2026-10-09
Last Push
8.5K
Stars
Rust
Language
111.8K
Lines of Code
534
Files
521
Pattern Hits
2026-10-12
Scan Date
0.00
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 19.4/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 437 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.6/100 · LOW

Are imports declared and package/API names verified? 29 finding(s).

Agent Over-Engineering Ratio 16.2/100 · LOW

Are wrappers, guards, and repeated structures necessary? 240 finding(s).

PR Review Velocity Impact 25.1/100 · MEDIUM

Which changes need focused human review? 521 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 1HIGH 0MEDIUM 59LOW 461

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 521 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers185 hits · 227 pts
SeverityFileLineSnippetContext
LOWscripts/test_musl_release_metadata.py79 def test_runtime_rc_has_exact_tag_and_metadata_assets(self) -> None:CODE
LOWscripts/test_musl_release_metadata.py92 def test_unready_pin_is_admitted_but_require_ready_rejects_it(self) -> None:CODE
LOW⚡scripts/test_musl_release_metadata.py132 def test_composes_exact_archives_and_base_digest(self) -> None:CODE
LOW⚡scripts/test_musl_release_metadata.py140 def test_refuses_unready_runtime(self) -> None:CODE
LOW⚡scripts/test_musl_release_metadata.py145 def test_refuses_different_runtime_source(self) -> None:CODE
LOW⚡scripts/test_musl_release_metadata.py150 def test_refuses_missing_archive(self) -> None:CODE
LOW⚡scripts/test_musl_release_metadata.py155 def test_refuses_changed_archive(self) -> None:CODE
LOW⚡scripts/test_musl_release_metadata.py160 def test_refuses_missing_checksum(self) -> None:CODE
LOW⚡scripts/test_musl_release_metadata.py166 def test_rejects_unknown_keys(self) -> None:CODE
LOW⚡scripts/test_musl_release_metadata.py172 def test_rejects_tag_version_mismatch(self) -> None:CODE
LOW⚡scripts/test_musl_release_metadata.py178 def test_rejects_malformed_digests(self) -> None:CODE
LOW⚡scripts/test_musl_release_metadata.py189 def test_rejects_non_empty_musl_fields_when_unready(self) -> None:CODE
LOW⚡scripts/test_musl_release_metadata.py195 def test_rejects_empty_musl_fields_when_ready(self) -> None:CODE
LOW⚡scripts/test_musl_release_metadata.py203 def test_round_trip_binds_exactly_two_targets_to_legacy_release(self) -> None:CODE
LOWscripts/test_musl_release_metadata.py220 def test_rejects_missing_unknown_and_duplicate_target_data(self) -> None:CODE
LOWscripts/test_musl_release_metadata.py241 def test_rejects_legacy_identity_mismatch(self) -> None:CODE
LOWscripts/test_musl_release_metadata.py252 def test_rejects_legacy_digest_mismatch(self) -> None:CODE
LOWscripts/test_musl_release_metadata.py262 def test_rejects_runtime_identity_and_unknown_keys(self) -> None:CODE
LOWscripts/test_musl_release_metadata.py273 def test_checked_in_pin_is_ready_and_false_fixture_fails_closed(self) -> None:CODE
LOWscripts/capsule_release.py209def _reject_duplicate_json_keys(pairs: list[tuple[str, object]]) -> dict[str, object]:CODE
LOW⚡scripts/test_channel_transaction.py62 def test_round_trip_preserves_exact_signed_pair(self) -> None:CODE
LOW⚡scripts/test_channel_transaction.py68 def test_cross_channel_reuse_is_rejected(self) -> None:CODE
LOW⚡scripts/test_channel_transaction.py73 def test_cross_generation_reuse_is_rejected(self) -> None:CODE
LOW⚡scripts/test_channel_transaction.py78 def test_unknown_transaction_field_is_rejected(self) -> None:CODE
LOWscripts/test_channel_transaction.py94 def test_symlink_input_is_rejected(self) -> None:CODE
LOWscripts/test_runtime_filesystem_contract.py9 def test_public_installer_membership_agrees_with_composer(self):CODE
LOW⚡scripts/test_runtime_filesystem_contract.py25 def test_before_filesystem_support(self):CODE
LOW⚡scripts/test_runtime_filesystem_contract.py30 def test_floor_and_future_releases(self):CODE
LOW⚡scripts/test_runtime_filesystem_contract.py35 def test_invalid_identity_does_not_select_optional_support(self):CODE
LOWscripts/validate-release-contract.py68def validate_runtime_dependencies(cargo: dict[str, Any], lock: dict[str, Any],CODE
LOWscripts/validate-release-contract.py144def validate_distro_runtime_version(source: str, runtime_version: str) -> None:CODE
LOWscripts/validate-release-contract.py157def validate_release_readiness(CODE
LOWscripts/test_oracle_hook_inventory_safety.py10 def test_marker_must_be_the_parsed_distro_identity(self):CODE
LOWscripts/test_oracle_hook_inventory_safety.py21 def test_malformed_distro_is_not_an_initialization_permission(self):CODE
LOWscripts/test_oracle_hook_inventory_safety.py28 def test_relative_binaries_are_bound_before_runtime_cwd_changes(self):CODE
LOWscripts/runtime_filesystem_contract.py7def requires_native_filesystem(version: str) -> bool:CODE
LOWscripts/release_metadata.py88def release_workflow_identity(version: str, tag: str) -> str:CODE
LOWscripts/release_metadata.py551 def run_validate_channel_release(args: argparse.Namespace) -> None:CODE
LOWscripts/test_package_macos_filesystem.py52 def test_preserves_every_member_and_mode(self):STRING
LOWscripts/test_package_macos_filesystem.py69 def test_missing_required_app(self):STRING
LOWscripts/test_package_macos_filesystem.py77 def test_existing_destination_validation_failure_stops_install(self):STRING
LOWscripts/test_package_macos_filesystem.py93 def test_rejects_missing_signature_and_links(self):STRING
LOW⚡scripts/test_check_glibc.py13 def test_extracts_unique_required_versions(self) -> None:CODE
LOW⚡scripts/test_check_glibc.py23 def test_ignores_similar_non_glibc_symbols(self) -> None:CODE
LOW⚡scripts/test_check_glibc.py29 def test_rejects_malformed_ceiling(self) -> None:CODE
LOW⚡scripts/test_check_glibc.py34 def test_check_binary_enforces_ceiling_and_reports_readelf_errors(self) -> None:CODE
LOW⚡scripts/test_capsule_release.py220 def test_rejects_unexpected_member(self) -> None:CODE
LOW⚡scripts/test_capsule_release.py223 def test_rejects_missing_provenance(self) -> None:CODE
LOW⚡scripts/test_capsule_release.py226 def test_rejects_missing_wit_tree(self) -> None:CODE
LOW⚡scripts/test_capsule_release.py229 def test_rejects_missing_wit_capsule(self) -> None:CODE
LOW⚡scripts/test_capsule_release.py232 def test_rejects_missing_contracts_wit(self) -> None:CODE
LOW⚡scripts/test_capsule_release.py235 def test_rejects_provenance_directory(self) -> None:CODE
LOW⚡scripts/test_capsule_release.py238 def test_rejects_non_json_provenance(self) -> None:CODE
LOW⚡scripts/test_capsule_release.py241 def test_rejects_wrong_provenance_schema(self) -> None:CODE
LOW⚡scripts/test_capsule_release.py244 def test_rejects_wrong_provenance_algorithm(self) -> None:CODE
LOW⚡scripts/test_capsule_release.py247 def test_rejects_wrong_provenance_digest(self) -> None:CODE
LOW⚡scripts/test_capsule_release.py250 def test_rejects_extra_provenance_key(self) -> None:CODE
LOW⚡scripts/test_capsule_release.py256 def test_rejects_wrong_embedded_identity(self) -> None:CODE
LOW⚡scripts/test_capsule_release.py259 def test_rejects_changed_capabilities(self) -> None:CODE
LOW⚡scripts/test_capsule_release.py262 def test_rejects_missing_component(self) -> None:CODE
125 more matches not shown…
Over-Commented Block234 hits · 225 pts
SeverityFileLineSnippetContext
LOW…nicity-aos-bootstrap/src/legacy_private_permissions.rs1//! Compatibility repair for private roots created by pre-2026.9 AOS.COMMENT
LOWcrates/unicity-aos-bootstrap/src/lib.rs221 }COMMENT
LOWcrates/unicity-aos-bootstrap/src/lib.rs301 pub fn migrate_runtime_from(&self, source: impl AsRef<Path>) -> io::Result<MigrationOutcome> {COMMENT
LOWcrates/unicity-aos-bootstrap/src/lib.rs421COMMENT
LOWcrates/unicity-aos-bootstrap/src/lib.rs461 self.ensure_runtime_available()?;COMMENT
LOWcrates/unicity-aos-bootstrap/src/lib.rs501COMMENT
LOWcrates/aos-mcp-broker/src/hook_gate.rs1//! Native-tool `before_tool_call` verdict responder — aos-mcp as aCOMMENT
LOWcrates/aos-mcp-broker/src/hook_gate.rs21//! `{ skip: bool, reason? }`. Per [`astrid_capsule_hook_bridge`]'sCOMMENT
LOWcrates/aos-mcp-broker/src/hook_gate.rs41use astrid_sdk::prelude::*;COMMENT
LOWcrates/aos-mcp-broker/src/hook_gate.rs61 payload: Value,COMMENT
LOWcrates/aos-mcp-broker/src/cache.rs21/// CAS retry budget for cache updates. The cache is contended by theCOMMENT
LOWcrates/aos-mcp-broker/src/cache.rs41 /// Kernel-stamped identity of the live capsule instance that advertisedCOMMENT
LOWcrates/aos-mcp-broker/src/cache.rs221/// The event-driven merge path ([`upsert`], via `collect_tool_descriptors`)COMMENT
LOWcrates/aos-mcp-broker/src/policy.rs1//! Per-principal policy decision point (PDP) for supervised `claude -p`COMMENT
LOWcrates/aos-mcp-broker/src/policy.rs21//! platform fails open. So it is defence-in-depth on top of the host sandboxCOMMENT
LOWcrates/aos-mcp-broker/src/policy.rs41//! BEST-EFFORT, not a guarantee. They match the RAW argument value; theCOMMENT
LOWcrates/aos-mcp-broker/src/policy.rs61COMMENT
LOWcrates/aos-mcp-broker/src/policy.rs81/// What a matched rule does. v1 is deny/allow only — `ask` is deliberatelyCOMMENT
LOWcrates/aos-mcp-broker/src/policy.rs101 /// RFC-6901 JSON pointer into the tool `arguments` object (e.g.COMMENT
LOWcrates/aos-mcp-broker/src/policy.rs141COMMENT
LOWcrates/aos-mcp-broker/src/policy.rs241 p += 1;COMMENT
LOWcrates/aos-mcp-broker/src/execute.rs1//! Tool execute core — `tool.v1.execute.<name>` fan-out andCOMMENT
LOWcrates/aos-mcp-broker/src/execute.rs21//! retired — the registered `aos mcp serve` MCP server is where theCOMMENT
LOWcrates/aos-mcp-broker/src/execute.rs41/// arrives or the timeout budget closes.COMMENT
LOWcrates/aos-mcp-broker/src/execute.rs61/// [`crate::approval::handle_mcp_ingress_respond`]. SeeCOMMENT
LOWcrates/aos-mcp-broker/src/execute.rs81/// than this TTL (or a clock-unavailable / future stamp) is treated as staleCOMMENT
LOWcrates/aos-mcp-broker/src/execute.rs101 /// The tool produced a result within the window: `(content, is_error)`.COMMENT
LOWcrates/aos-mcp-broker/src/execute.rs121COMMENT
LOWcrates/aos-mcp-broker/src/execute.rs201 // arrives, an approval surfaces, or the window closes. Each `recv` isCOMMENT
LOWcrates/aos-mcp-broker/src/execute.rs261 DispatchOutcome::Failed(format!(COMMENT
LOWcrates/aos-mcp-broker/src/execute.rs281/// [`DispatchOutcome::Failed`].COMMENT
LOWcrates/aos-mcp-broker/src/execute.rs381/// Record that the broker has surfaced an `ingress_approval_required` promptCOMMENT
LOWcrates/aos-mcp-broker/src/execute.rs401 log::warn(format!(COMMENT
LOWcrates/aos-mcp-broker/src/execute.rs461 return None;COMMENT
LOWcrates/aos-mcp-broker/src/execute.rs521/// Returns whether a grant-consent prompt is already outstanding forCOMMENT
LOWcrates/aos-mcp-broker/src/execute.rs561 falseCOMMENT
LOWcrates/aos-mcp-broker/src/execute.rs621 }COMMENT
LOWcrates/aos-mcp-broker/src/execute.rs641/// naturally per-(principal, source_id) — consent granted under oneCOMMENT
LOWcrates/aos-mcp-broker/src/execute.rs661/// admission on `source_id`, not trust marker.COMMENT
LOWcrates/aos-mcp-broker/src/discovery.rs1//! Tool descriptor discovery and the `astrid.v1.tools.list` publish path.COMMENT
LOWcrates/aos-mcp-broker/src/discovery.rs41/// fan-out against WASM instantiation + kernel broadcast latency, and theCOMMENT
LOWcrates/aos-mcp-broker/src/discovery.rs61/// regardless of provider behaviour.COMMENT
LOWcrates/aos-mcp-broker/src/discovery.rs81}COMMENT
LOWcrates/aos-mcp-broker/src/discovery.rs121}COMMENT
LOWcrates/aos-mcp-broker/src/discovery.rs221COMMENT
LOWcrates/aos-mcp-broker/src/discovery.rs261 }COMMENT
LOWcrates/aos-mcp-broker/src/discovery.rs441/// the SDK `tool_describe` macro arm) and the wrapped Custom envelopeCOMMENT
LOWcrates/aos-mcp-broker/src/broker.rs1//! Broker front door — the sanitized `astrid.v1.*` MCP surface.COMMENT
LOWcrates/aos-mcp-broker/src/broker.rs21//! verbatim. So:COMMENT
LOWcrates/aos-mcp-broker/src/broker.rs41//! ## Confused-deputy gate (state-mutating calls)COMMENT
LOWcrates/aos-mcp-broker/src/broker.rs61use serde_json::{Value, json};COMMENT
LOWcrates/aos-mcp-broker/src/broker.rs81/// pre-validate the name against the server's `tools/list`, so anCOMMENT
LOWcrates/aos-mcp-broker/src/broker.rs101/// the `--disallowedTools` deny-list; this gate adds dynamic, argument-levelCOMMENT
LOWcrates/aos-mcp-broker/src/broker.rs121 req_id: String,COMMENT
LOWcrates/aos-mcp-broker/src/broker.rs221 return Ok(());COMMENT
LOWcrates/aos-mcp-broker/src/broker.rs261 // (the originating capsule UUID, NOT a guest-settable body field) to beCOMMENT
LOWcrates/aos-mcp-broker/src/broker.rs321 req.nameCOMMENT
LOWcrates/aos-mcp-broker/src/broker.rs701/// No host calls — fully unit-testable.COMMENT
LOWcrates/aos-mcp-broker/src/broker.rs741///COMMENT
LOWcrates/aos-mcp-broker/src/broker.rs801 principalCOMMENT
174 more matches not shown…
Decorative Section Separators54 hits · 168 pts
SeverityFileLineSnippetContext
MEDIUMcapsules/capsule-openai/src/models.rs46 // ── GPT-5.5 series (June 2026, current frontier) ─────────────COMMENT
MEDIUMcapsules/capsule-openai/src/models.rs67 // ── GPT-5.4 series (March 2026) ──────────────────────────────COMMENT
MEDIUMcapsules/capsule-openai/src/models.rs98 // ── GPT-5.3 series ───────────────────────────────────────────COMMENT
MEDIUMcapsules/capsule-openai/src/models.rs129 // ── GPT-5.2 series (December 2025) ───────────────────────────COMMENT
MEDIUMcapsules/capsule-openai/src/models.rs150 // ── GPT-4.1 series (April 2025, still available) ─────────────COMMENT
MEDIUMcapsules/capsule-openai/src/models.rs181 // ── o-series reasoning models ────────────────────────────────COMMENT
MEDIUMcapsules/capsule-openai/src/models.rs212 // ── GPT-4o series (legacy, still available) ──────────────────COMMENT
MEDIUMcapsules/capsule-context-engine/src/lib.rs37// ── IPC payload types ───────────────────────────────────────────────COMMENT
MEDIUMcapsules/capsule-context-engine/src/lib.rs139// ── Configuration ───────────────────────────────────────────────────COMMENT
MEDIUMcapsules/capsule-context-engine/src/lib.rs221// ── Constants ───────────────────────────────────────────────────────COMMENT
MEDIUMcapsules/capsule-context-engine/src/lib.rs249// ── Main entry point ────────────────────────────────────────────────COMMENT
MEDIUMcapsules/capsule-context-engine/src/lib.rs315// ── Envelope dispatch ───────────────────────────────────────────────COMMENT
MEDIUMcapsules/capsule-context-engine/src/lib.rs358// ── Compact handler ─────────────────────────────────────────────────COMMENT
MEDIUMcapsules/capsule-context-engine/src/lib.rs447// ── Estimate handler ────────────────────────────────────────────────COMMENT
MEDIUMcapsules/capsule-context-engine/src/lib.rs468// ── Interceptor hook firing via IPC ─────────────────────────────────COMMENT
MEDIUMcapsules/capsule-context-engine/src/tests.rs30// ── Merge semantics unit tests ──────────────────────────────────────COMMENT
MEDIUMcapsules/capsule-context-engine/src/tests.rs105// ── Token estimation tests ──────────────────────────────────────────COMMENT
MEDIUMcapsules/capsule-context-engine/src/tests.rs132// ── Hook response deserialization tests ──────────────────────────────COMMENT
MEDIUMcapsules/capsule-context-engine/src/tests.rs192// ── Payload serialization round-trip tests ──────────────────────────COMMENT
MEDIUMcapsules/capsule-context-engine/src/tests.rs276// ── parse_hook_responses tests ──────────────────────────────────────COMMENT
MEDIUMcapsules/capsule-context-engine/src/tests.rs343// ── target_tokens clamping test ─────────────────────────────────────COMMENT
MEDIUMcapsules/capsule-context-engine/src/tests.rs391// ── Topic filtering tests ───────────────────────────────────────────COMMENT
MEDIUMcapsules/capsule-context-engine/src/tests.rs428// ── hook_recv_timeout (before-compaction fan-out window) ────────────────COMMENT
MEDIUMcapsules/capsule-prompt-builder/src/tests.rs492// ── Response topic isolation tests ────────────────────────────COMMENT
MEDIUMcapsules/capsule-prompt-builder/src/tests.rs505// ── BeforePromptBuildPayload tests ────────────────────────────COMMENT
MEDIUMcapsules/capsule-prompt-builder/src/tests.rs547// ── AfterPromptBuildPayload tests ─────────────────────────────COMMENT
MEDIUMcapsules/capsule-prompt-builder/src/tests.rs562// ── has_any_field edge cases ──────────────────────────────────COMMENT
MEDIUMcapsules/capsule-users/src/store.rs89 // ── key construction ────────────────────────────────────────────COMMENT
MEDIUMcapsules/capsule-users/src/store.rs143 // ── validation ──────────────────────────────────────────────────COMMENT
MEDIUMcapsules/capsule-users/src/store.rs197 // ── user operations ────────────────────────────────────────────COMMENT
MEDIUMcapsules/capsule-users/src/store.rs273 // ── link operations ────────────────────────────────────────────COMMENT
MEDIUMcapsules/capsule-users/src/store.rs504 // ── context overlay operations ─────────────────────────────────COMMENT
MEDIUMcapsules/capsule-users/src/store_tests.rs17// ── User CRUD ───────────────────────────────────────────────────COMMENT
MEDIUMcapsules/capsule-users/src/store_tests.rs47// ── set_display_name ────────────────────────────────────────────COMMENT
MEDIUMcapsules/capsule-users/src/store_tests.rs85// ── set_public_key ──────────────────────────────────────────────COMMENT
MEDIUMcapsules/capsule-users/src/store_tests.rs105// ── Link with platform_instance ─────────────────────────────────COMMENT
MEDIUMcapsules/capsule-users/src/store_tests.rs248// ── Context-aware resolve (layering) ────────────────────────────COMMENT
MEDIUMcapsules/capsule-users/src/store_tests.rs329// ── Context overlay CRUD ────────────────────────────────────────COMMENT
MEDIUMcapsules/capsule-users/src/store_tests.rs401// ── Cascade semantics ───────────────────────────────────────────COMMENT
MEDIUMcapsules/capsule-users/src/store_tests.rs500// ── list_links ──────────────────────────────────────────────────COMMENT
MEDIUMcapsules/capsule-users/src/store_tests.rs537// ── Pagination on list_users ────────────────────────────────────COMMENT
MEDIUMcapsules/capsule-users/src/store_tests.rs586// ── Pagination on list_context_for_user ─────────────────────────COMMENT
MEDIUMcapsules/capsule-users/src/store_tests.rs617// ── list_context_in_context ─────────────────────────────────────COMMENT
MEDIUMcapsules/capsule-users/src/store_tests.rs654// ── KV key construction security ────────────────────────────────COMMENT
MEDIUMdistros/community/unicity-ce/Distro.toml38# ---------------------------------------------------------------------------COMMENT
MEDIUMdistros/community/unicity-ce/Distro.toml40# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡distros/community/unicity-ce/Distro.toml60# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡distros/community/unicity-ce/Distro.toml62# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡distros/community/unicity-ce/Distro.toml71# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡distros/community/unicity-ce/Distro.toml73# ---------------------------------------------------------------------------COMMENT
MEDIUMdistros/community/unicity-ce/Distro.toml125# ---------------------------------------------------------------------------COMMENT
MEDIUMdistros/community/unicity-ce/Distro.toml127# ---------------------------------------------------------------------------COMMENT
MEDIUMdistros/community/unicity-ce/Distro.toml154# ---------------------------------------------------------------------------COMMENT
MEDIUMdistros/community/unicity-ce/Distro.toml156# ---------------------------------------------------------------------------COMMENT
Unused Imports26 hits · 24 pts
SeverityFileLineSnippetContext
LOWscripts/test_musl_release_metadata.py4CODE
LOWscripts/check_static_elf.py4CODE
LOWscripts/nightly_version.py4CODE
LOWscripts/validate-runtime-archive.py4CODE
LOWscripts/capsule_release.py4CODE
LOWscripts/capsule_release.py7CODE
LOWscripts/test_channel_transaction.py4CODE
LOWscripts/validate-runtime-command-surface.py4CODE
LOWscripts/validate-release-contract.py4CODE
LOWscripts/channel_transaction.py4CODE
LOWscripts/release_metadata.py10CODE
LOWscripts/test_capsule_release.py3CODE
LOWscripts/test_runtime_command_surface.py4CODE
LOWscripts/test_validate_runtime_archive.py3CODE
LOWscripts/channel_publication.py4CODE
LOWscripts/test_release_publication.py3CODE
LOWscripts/create-astrid-094-fixture.py4CODE
LOWscripts/test_nightly_version.py3CODE
LOWscripts/test_release_metadata.py4CODE
LOWscripts/release_publication.py4CODE
LOWscripts/check_glibc.py4CODE
LOWscripts/test_create_astrid_094_fixture.py4CODE
LOWscripts/test_check_static_elf.py3CODE
LOWscripts/test_channel_publication.py3CODE
LOWscripts/musl_release_metadata.py4CODE
LOWscripts/test_validate_release_contract.py4CODE
Hallucination Indicators1 hit · 10 pts
SeverityFileLineSnippetContext
CRITICALapps/adaptive-shell/src/fixtures.rs1617 let root_name = fixture.surface.root.accessibility.name.as_str();CODE
Modern AI Meta-Vocabulary3 hits · 9 pts
SeverityFileLineSnippetContext
MEDIUM…capsule-system/src/skills/capsule-development/SKILL.md17## Start from the supported scaffoldCOMMENT
MEDIUMcapsules/capsule-openai/Capsule.toml38# context_window = { type = "integer", request = "Override context window (tokens)", placeholder = "128000" }COMMENT
MEDIUMcapsules/capsule-forge/src/lib.rs10//! scaffold a compiling skeleton, map an intent to manifest capabilities,COMMENT
Deep Nesting9 hits · 8 pts
SeverityFileLineSnippetContext
LOWscripts/test_capsule_release.py66CODE
LOWscripts/test_capsule_release.py85CODE
LOWscripts/test_installer_timestamps.py17CODE
LOWscripts/test_release_publication.py53CODE
LOWscripts/test_release_publication.py188CODE
LOWscripts/test_oracle_hook_inventory_runtime.py27CODE
LOWscripts/test_musl_release_workflow.py22CODE
LOWscripts/test_musl_release_workflow.py60CODE
LOWscripts/test_musl_release_workflow.py134CODE
AI Slop Vocabulary2 hits · 6 pts
SeverityFileLineSnippetContext
MEDIUMcapsules/capsule-mcp/Capsule.toml37# evadable) — the robust shapes are allowlist-style eq/prefix. SeeCOMMENT
MEDIUMscripts/test-packaged-linux-volume.sh362# untrusted manifest or synthesizing a grant set in the harness.COMMENT
Verbosity Indicators2 hits · 3 pts
SeverityFileLineSnippetContext
LOWcapsules/capsule-prompt-builder/src/lib.rs305 // Step 2: Determine the base system prompt (override or original).COMMENT
LOWcapsules/capsule-prompt-builder/src/lib.rs317 // Step 1: Build user context prefix.COMMENT
Structural Annotation Overuse2 hits · 3 pts
SeverityFileLineSnippetContext
LOWcapsules/capsule-prompt-builder/src/lib.rs305 // Step 2: Determine the base system prompt (override or original).COMMENT
LOWcapsules/capsule-prompt-builder/src/lib.rs317 // Step 1: Build user context prefix.COMMENT
Fake / Example Data2 hits · 2 pts
SeverityFileLineSnippetContext
LOWcapsules/capsule-surface-model/src/components.rs223 "placeholder",CODE
LOWapps/adaptive-shell/src/components.rs299 "placeholder",CODE
Excessive Try-Catch Wrapping1 hit · 1 pts
SeverityFileLineSnippetContext
LOW.github/workflows/channel-expiry-check.yml34 except Exception as error:CODE