Repository Analysis

unicity-astrid/astrid

Astrid is a portable, capability-secure operating system for composable software.

5.6 Low AI signal View on GitHub

Analysis Overview

This report presents the forensic synthetic code analysis of unicity-astrid/astrid, a Rust project with 10,273 GitHub stars. SynthScan v2.0 examined 466,929 lines of code across 1311 source files, recording 2021 pattern matches distributed across 14 syntactic categories. The overall adjusted score of 5.6 places this repository in the Low AI signal band.

The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).

5.6
Adjusted Score
5.6
Raw Score
100%
Time Factor
2026-08-28
Last Push
10.3K
Stars
Rust
Language
466.9K
Lines of Code
1.3K
Files
2.0K
Pattern Hits
2026-08-29
Scan Date
0.00
HC Hit Rate

What These Metrics Mean

Adjusted Score
Primary synthetic code indicator. Raw score normalised per 1,000 lines of code and multiplied by the temporal discount factor. This is the definitive comparative metric — use it to rank repositories by AI authorship density.
Raw Score
The unmodified sum of all severity-weighted, context-multiplied pattern match scores before temporal discounting. Reflects the absolute signal strength independent of when the repository was last active.
Time Factor
The temporal discount multiplier (0–100%) applied to the raw score. Repositories last updated before ChatGPT's launch (Nov 2022) receive a 5% factor. Full signal is only assigned to repositories active in the post-adoption era (Jan 2024+).
Pattern Hits
Total count of individual pattern matches across all files and categories. A high hit count with a low score may indicate a very large codebase with isolated AI snippets; a low count with a high score indicates dense, concentrated AI signatures.
HC Hit Rate
High+Critical pattern hits per file, averaged across the repository. This orthogonal signal catches repositories where a few files are densely packed with high-severity AI tells — a strong indicator even when the normalised score appears moderate due to codebase size.
Lines of Code / Files
Total lines and files analysed. The scanner examines 94 file extensions. These denominators are used to normalise the score, enabling fair comparison between repositories of vastly different sizes.

Score History

This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.

Severity Breakdown

Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.

CRITICAL 0HIGH 1MEDIUM 321LOW 1699

Directory Score Breakdown

This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.

Pattern Findings

The scanner identified 2021 distinct pattern matches across 14 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.

Over-Commented Block1429 hits · 1358 pts
SeverityFileLineSnippetContext
LOWCargo.toml81# `astrid-gateway` (and `astrid-integration-tests` for the gatewayCOMMENT
LOWCargo.toml161metrics = "0.24"COMMENT
LOWCargo.toml181# contention.COMMENT
LOWCargo.toml221thiserror = "2.0"COMMENT
LOWcrates/astrid-capsule-types/src/memory_ledger.rs1//! Shared per-principal peak-memory accounting ledger.COMMENT
LOWcrates/astrid-capsule-types/src/memory_ledger.rs21//! linear memory a *prior* leaseholder allocated. The peak is thus an upperCOMMENT
LOWcrates/astrid-capsule-types/src/memory_ledger.rs41COMMENT
LOWcrates/astrid-capsule-types/src/memory_ledger.rs81 // strictly above it. Evicting a bigger user to record a smaller oneCOMMENT
LOWcrates/astrid-capsule-types/src/limits.rs1//! Host-derived runtime concurrency limits for the WASM capsule engine.COMMENT
LOWcrates/astrid-capsule-types/src/limits.rs41/// concurrency ceiling for a capsule's interceptor invocations).COMMENT
LOWcrates/astrid-capsule-types/src/limits.rs61/// Maximum redirect hops the host follows by default, and the caller ceiling aCOMMENT
LOWcrates/astrid-capsule-types/src/limits.rs81#[must_use]COMMENT
LOWcrates/astrid-capsule-types/src/limits.rs101pub fn host_io_concurrency_default() -> usize {COMMENT
LOWcrates/astrid-capsule-types/src/limits.rs141}COMMENT
LOWcrates/astrid-capsule-types/src/limits.rs201}COMMENT
LOWcrates/astrid-capsule-types/src/limits.rs221/// caller sets no corresponding `*-ms`. An explicit caller value OVERRIDES theCOMMENT
LOWcrates/astrid-capsule-types/src/limits.rs241 /// `connect-ms` (a default, not a ceiling). Host const default: 30s.COMMENT
LOWcrates/astrid-capsule-types/src/limits.rs361COMMENT
LOWcrates/astrid-capsule-types/src/fuel_ledger.rs1//! Shared per-principal CPU accounting ledger.COMMENT
LOWcrates/astrid-capsule-types/src/fuel_ledger.rs21//! ledger had to become cross-capsule first). The run-loop CPU bound remainsCOMMENT
LOWcrates/astrid-capsule-types/src/fuel_ledger.rs41use std::time::Duration;COMMENT
LOWcrates/astrid-capsule-types/src/fuel_ledger.rs81pub struct FuelLedger {COMMENT
LOWcrates/astrid-capsule-types/src/fuel_ledger.rs121 Some(v.saturating_add(fuel))COMMENT
LOWcrates/astrid-capsule-types/src/fuel_ledger.rs141 }COMMENT
LOWcrates/astrid-capsule-types/src/fuel_ledger.rs161COMMENT
LOWcrates/astrid-capsule-types/src/fuel_ledger.rs181/// interceptor consults *before* admitting a call. [`record`](COMMENT
LOWcrates/astrid-capsule-types/src/fuel_ledger.rs201/// stale, so a flood of ephemeral sub-agent principals cannot grow it withoutCOMMENT
LOWcrates/astrid-capsule-types/src/fuel_ledger.rs281 /// - a *cold* principal with no window yet — first call is always admitted,COMMENT
LOWcrates/astrid-capsule-types/src/fuel_ledger.rs301 // entry creation is `record`'s job, on the post-hoc feed.COMMENT
LOWcrates/astrid-capsule-types/src/fuel_ledger.rs441 /// Lazily drop principals whose window has gone stale, bounding map growth.COMMENT
LOW…es/astrid-capsule-types/src/capability_presentation.rs1//! Human-facing presentation for capsule capability grants.COMMENT
LOWcrates/astrid-capsule-types/src/manifest/mod.rs21///COMMENT
LOWcrates/astrid-capsule-types/src/manifest/mod.rs41 #[serde(default, deserialize_with = "deserialize_imports_map")]COMMENT
LOWcrates/astrid-capsule-types/src/manifest/mod.rs61 /// Same shape as `publishes`. An entry with a `handler = "..."` field (andCOMMENT
LOWcrates/astrid-capsule-types/src/manifest/mod.rs81 #[serde(default, rename = "context_file")]COMMENT
LOWcrates/astrid-capsule-types/src/manifest/mod.rs161 /// carries a `handler` binds that topic to a `#[astrid::interceptor]`COMMENT
LOWcrates/astrid-capsule-types/src/manifest/mod.rs201 D: serde::Deserializer<'de>,COMMENT
LOWcrates/astrid-capsule-types/src/manifest/mod.rs341 /// Optional description of the capsule.COMMENT
LOWcrates/astrid-capsule-types/src/manifest/mod.rs381 /// Unique identifier for this component within the capsule.COMMENT
LOWcrates/astrid-capsule-types/src/manifest/mod.rs401///COMMENT
LOWcrates/astrid-capsule-types/src/manifest/mod.rs421 pub description: Option<String>,COMMENT
LOWcrates/astrid-capsule-types/src/manifest/mod.rs441 /// sibling `enum_values` field; the kebab `options-from` form isCOMMENT
LOWcrates/astrid-capsule-types/src/manifest/mod.rs461 /// `Shared` and pull host-wide values into its sandbox. The kernelCOMMENT
LOWcrates/astrid-capsule-types/src/manifest/mod.rs481/// Template placeholders use `{key}` syntax, where `key` is the name ofCOMMENT
LOWcrates/astrid-capsule-types/src/manifest/mod.rs501 /// resolves to a non-empty value after trimming.COMMENT
LOWcrates/astrid-capsule-types/src/manifest/mod.rs521COMMENT
LOWcrates/astrid-capsule-types/src/manifest/mod.rs541 /// through. The fail-closed default — appropriate for anything anCOMMENT
LOWcrates/astrid-capsule-types/src/manifest/mod.rs581 /// Path to the declarative command TOML (if static).COMMENT
LOWcrates/astrid-capsule-types/src/manifest/mod.rs601COMMENT
LOWcrates/astrid-capsule-types/src/manifest/mod.rs621/// This type has no manifest or runtime semantics. It remains public only soCOMMENT
LOWcrates/astrid-capsule-types/src/manifest/mod.rs641 pub platform: String,COMMENT
LOWcrates/astrid-capsule-types/src/manifest/mod.rs661 /// `[subscribe]` entry's `handler` (must match anCOMMENT
LOW…ates/astrid-capsule-types/src/manifest/capabilities.rs1//! The `[capabilities]` block — what a capsule asks for from the OS.COMMENT
LOW…ates/astrid-capsule-types/src/manifest/capabilities.rs21 /// is present for future cross-capsule KV request declarations.COMMENT
LOW…ates/astrid-capsule-types/src/manifest/capabilities.rs41 /// child, so persistence is an additional operator-reviewed opt-in on topCOMMENT
LOW…ates/astrid-capsule-types/src/manifest/capabilities.rs61 /// literal DNS name or `*` (universal — see security review noteCOMMENT
LOW…ates/astrid-capsule-types/src/manifest/capabilities.rs81 ///COMMENT
LOW…ates/astrid-capsule-types/src/manifest/capabilities.rs101COMMENT
LOW…ates/astrid-capsule-types/src/manifest/capabilities.rs161COMMENT
LOWcrates/astrid-capsule-types/src/manifest/topics.rs1//! Cargo-shaped `[publish]` / `[subscribe]` tables.COMMENT
1369 more matches not shown…
Decorative Section Separators288 hits · 846 pts
SeverityFileLineSnippetContext
MEDIUMcrates/astrid-capsule-types/src/fuel_ledger.rs564 // ── FuelRateLimiter (PR2: the deny side) ─────────────────────────────COMMENT
MEDIUMcrates/astrid-capabilities/src/policy.rs666 // ── Device-scope attenuation ──────────────────────────────────────────COMMENT
MEDIUMcrates/astrid-gateway/tests/router.rs896// ── Device-scoped bearer: key_id extraction + per-key revocation ──────COMMENT
MEDIUMcrates/astrid-gateway/src/routes/distribution.rs118// ── parsing helpers ────────────────────────────────────────────────COMMENT
MEDIUMcrates/astrid-gateway/src/routes/principals.rs340// ── /api/sys/capabilities ────────────────────────────────────────COMMENT
MEDIUMcrates/astrid-gateway/src/routes/principals.rs431// ── Device management ────────────────────────────────────────────COMMENT
MEDIUMcrates/astrid-gateway/src/routes/principals.rs549// ── Helpers ──────────────────────────────────────────────────────COMMENT
MEDIUMcrates/astrid-gateway/src/routes/env.rs244// ── helpers ──────────────────────────────────────────────────────COMMENT
MEDIUMcrates/astrid-gateway/src/routes/capsules.rs521// ── helpers (kernel client error mapping) ────────────────────────COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml48# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml50# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml13# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml15# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml68# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml70# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml96# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml98# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml142# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml144# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml157# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml159# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml179# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml181# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml214# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml216# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml240# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml242# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml254# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml256# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml290# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml292# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml308# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml310# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml338# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml340# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml359# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml361# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml384# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml386# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml416# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml418# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml436# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml438# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml451# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml453# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml477# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml479# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml503# ============================================================================COMMENT
MEDIUMcrates/astrid-config/src/defaults.toml505# ============================================================================COMMENT
MEDIUM…integration-tests/tests/management_api_admin_topics.rs39// ── Fixtures ──────────────────────────────────────────────────────────COMMENT
MEDIUM…integration-tests/tests/management_api_admin_topics.rs135// ── Full cross-tenant matrix ─────────────────────────────────────────COMMENT
MEDIUM…integration-tests/tests/management_api_admin_topics.rs198// ── Self-scope resolves from target principal ────────────────────────COMMENT
MEDIUM…integration-tests/tests/management_api_admin_topics.rs223// ── Agent built-in caps explicitly list self-admin entries ──────────COMMENT
MEDIUM…integration-tests/tests/management_api_admin_topics.rs244// ── Audit method labels ──────────────────────────────────────────────COMMENT
MEDIUM…integration-tests/tests/management_api_admin_topics.rs284// ── Wire-format round trips ─────────────────────────────────────────COMMENT
MEDIUM…integration-tests/tests/management_api_admin_topics.rs383// ── ArcSwap hot-reload viewed from outside the kernel crate ─────────COMMENT
MEDIUM…integration-tests/tests/management_api_admin_topics.rs466// ── Built-in group write protection ─────────────────────────────────COMMENT
MEDIUMcrates/astrid-integration-tests/tests/gateway_e2e.rs574 // ── Kernel boot artefacts on disk ───────────────────────────COMMENT
MEDIUMcrates/astrid-integration-tests/tests/gateway_e2e.rs588 // ── Gateway state shares the same home ──────────────────────COMMENT
MEDIUMcrates/astrid-integration-tests/tests/gateway_e2e.rs621 // ── Unauthenticated routes against the live state ────────────COMMENT
228 more matches not shown…
Hyper-Verbose Identifiers194 hits · 229 pts
SeverityFileLineSnippetContext
LOWscripts/test_oci_arm64_container_contract.py37 def test_uses_arch_specific_digest_pinned_ubuntu_base(self) -> None:CODE
LOWscripts/test_oci_arm64_container_contract.py45 def test_is_non_root_distro_neutral_and_exposes_no_ports(self) -> None:CODE
LOWscripts/test_oci_arm64_container_contract.py51 def test_reuses_the_reviewed_entrypoint_contract(self) -> None:CODE
LOWscripts/test_oci_arm64_container_contract.py81 def test_derived_images_alias_and_cleanup_the_bound_local_base(self) -> None:CODE
LOWscripts/test_oci_arm64_container_contract.py93 def test_restricted_runtime_is_rootless_read_only_and_unprivileged(self) -> None:CODE
LOWscripts/test_oci_arm64_container_contract.py101 def test_real_daemon_readiness_and_authenticated_status_are_required(self) -> None:CODE
LOWscripts/test_oci_arm64_container_contract.py106 def test_entrypoint_stages_and_reauthenticates_signed_distro(self) -> None:CODE
LOWscripts/test_oci_arm64_container_contract.py116 def test_foreground_daemon_allowlist_cannot_enable_ephemeral_mode(self) -> None:CODE
LOWscripts/test_oci_arm64_container_contract.py182 def test_scan_sbom_and_per_export_blob_evidence_are_required(self) -> None:CODE
LOWscripts/test_oci_arm64_container_contract.py255 def test_path_filters_and_test_lane_include_shared_binding_contract(self) -> None:CODE
LOWscripts/test_oci_arm64_container_contract.py260 def test_oidc_signing_requires_manual_protected_main_and_environment(self) -> None:CODE
LOWscripts/test_oci_arm64_container_contract.py271 def test_workflow_never_invokes_registry_publication_tools(self) -> None:CODE
LOWscripts/test_oci_arm64_container_contract.py288 def test_workflow_never_uses_mutable_or_canonical_image_tags(self) -> None:CODE
LOWscripts/test_oci_arm64_container_contract.py301 def test_workflow_cannot_enable_emulation_or_multi_platform_builds(self) -> None:CODE
LOWscripts/test_macos_release_packaging.py51 def test_package_is_deterministic_and_validates(self) -> None:CODE
LOWscripts/test_macos_release_packaging.py65 def test_packaging_rejects_redirects(self) -> None:CODE
LOWscripts/test_macos_release_packaging.py77 def test_packaging_rejects_output_inside_the_release_root(self) -> None:CODE
LOWscripts/test_macos_release_packaging.py86 def test_validation_rejects_noncanonical_modes(self) -> None:CODE
LOWscripts/test_macos_release_packaging.py105 def test_validation_requires_every_common_executable(self) -> None:CODE
LOWscripts/test_musl_release_manifest.py71 def test_round_trip_is_deterministic_and_bound_to_legacy_release(self) -> None:CODE
LOWscripts/test_musl_release_manifest.py80 def test_accepts_exactly_the_two_supported_musl_targets(self) -> None:CODE
LOWscripts/test_musl_release_manifest.py88 def test_rejects_missing_duplicate_and_unexpected_targets(self) -> None:CODE
LOWscripts/test_musl_release_manifest.py104 def test_rejects_every_release_identity_mismatch(self) -> None:CODE
LOWscripts/test_musl_release_manifest.py123 def test_rejects_a_different_legacy_manifest_digest_or_asset(self) -> None:CODE
LOWscripts/test_musl_release_manifest.py134 def test_rejects_partial_combined_checksums(self) -> None:CODE
LOWscripts/test_musl_release_manifest.py140 def test_validate_command_requires_and_checks_the_legacy_manifest(self) -> None:CODE
LOWscripts/runatal_v1_volume.py61def physically_valid_record_at(data, offset):CODE
LOWscripts/runatal_v1_volume.py97def has_physically_valid_record_after(data, start):CODE
LOWscripts/runatal_v1_volume.py106def volume_metadata_mutations(payload):CODE
LOWscripts/runatal_v1_reader.py304def validate_content_boundary(left_object, left, right_prefix, profile, memo):CODE
LOWscripts/runatal_v1_reader.py395def verify_content_summary_vectors():CODE
LOWscripts/runatal_v1_reader.py523def validate_derivation_invocation(record):CODE
LOWscripts/runatal_v1_reader.py566def validate_derivation_evidence(record):CODE
LOWscripts/test_changelog.py34 def test_code_without_fragment_fails(self):STRING
LOWscripts/test_changelog.py43 def test_code_with_fragment_passes(self):STRING
LOWscripts/test_changelog.py53 def test_skip_label_passes_without_fragment(self):STRING
LOWscripts/test_changelog.py63 def test_docs_only_passes_without_fragment(self):STRING
LOWscripts/test_changelog.py73 def test_cargo_lock_requires_fragment(self):STRING
LOWscripts/test_changelog.py77 def test_invalid_fragment_name_fails(self):STRING
LOWscripts/test_changelog.py86 def test_changelog_md_edit_is_not_enough_for_code(self):STRING
LOWscripts/test_changelog.py94 def test_code_plus_changelog_and_fragment_still_fails(self):STRING
LOWscripts/test_changelog.py103 def test_release_skip_allows_changelog_and_cargo(self):STRING
LOWscripts/test_changelog.py114 def test_empty_fragment_body_fails(self):STRING
LOWscripts/test_changelog.py129 def test_entry_wraps_prose_as_bullet(self):STRING
LOWscripts/test_changelog.py135 def test_roll_moves_unreleased_and_fragments_without_touching_history(self):STRING
LOWscripts/test_changelog.py153 def test_notes_match_awk_style_section_body(self):STRING
LOWscripts/test_changelog.py162 def test_roll_command_deletes_fragments(self):STRING
LOWscripts/test_changelog.py191 def test_notes_require_rolled_fails_on_pending_fragment(self):STRING
LOWscripts/test_validate_release_archive.py38 def test_linux_and_windows_inventories_validate(self) -> None:CODE
LOWscripts/test_validate_release_archive.py48 def test_missing_provider_is_rejected(self) -> None:CODE
LOWscripts/test_validate_release_archive.py60 def test_redirecting_member_is_rejected(self) -> None:CODE
LOWscripts/test_windows_release_manifest.py64 def test_round_trip_is_deterministic_and_bound_to_legacy_release(self) -> None:CODE
LOWscripts/test_windows_release_manifest.py73 def test_shared_python_rust_schema_fixture_is_accepted(self) -> None:CODE
LOWscripts/test_windows_release_manifest.py79 def test_accepts_only_the_windows_target(self) -> None:CODE
LOWscripts/test_windows_release_manifest.py87 def test_rejects_missing_duplicate_and_unexpected_targets(self) -> None:CODE
LOWscripts/test_windows_release_manifest.py103 def test_rejects_release_identity_and_legacy_binding_mismatches(self) -> None:CODE
LOWscripts/test_windows_release_manifest.py122 def test_rejects_partial_seven_archive_checksums(self) -> None:CODE
LOWscripts/test_channel_metadata.py92 def test_round_trip_is_deterministic(self) -> None:CODE
LOWscripts/test_channel_metadata.py104 def test_all_three_channels_are_accepted(self) -> None:CODE
LOWscripts/test_channel_metadata.py109 def test_stable_rejects_prerelease_version(self) -> None:CODE
134 more matches not shown…
Modern AI Meta-Vocabulary18 hits · 50 pts
SeverityFileLineSnippetContext
MEDIUMCHANGELOG.md1278- **Capsule access is now per-principal, enforced kernel-side at dispatch — closing the gap where the capsule tool surfaCODE
MEDIUMCHANGELOG.md1343- **`astrid capsule new <name>` scaffolds a complete, first-try-compiling tool capsule — with a toolchain preflight and CODE
MEDIUMCHANGELOG.md1409- **Per-capsule WASM instance pool: principals' interceptors now run concurrently instead of serialising through one `StCODE
MEDIUMCHANGELOG.md1539- **Per-capsule WASM instance pool: principals' interceptors now run concurrently instead of serialising through one `StCODE
MEDIUMCHANGELOG.md1618- **Per-domain WIT review fixups (PR #752).** A multi-agent review surfaced fixes addressed in-branch before merge:CODE
MEDIUMREADME.md221astrid capsule new my-capsule # scaffold Capsule.toml, Cargo.toml, src/lib.rs, .cargo/config.tomlCODE
MEDIUMcrates/astrid-config/src/defaults.toml54# Maximum context window size in tokens (soft limit for summarization)COMMENT
MEDIUMcrates/astrid-cli/src/commands/capsule/new.rs1//! `astrid capsule new <name>` — scaffold a complete, first-try-compilingCOMMENT
MEDIUMcrates/astrid-cli/src/commands/capsule/new.rs112/// Every check is fail-FRIENDLY: nothing here aborts the scaffold. A capsuleCOMMENT
MEDIUMcrates/astrid-cli/src/commands/capsule/new.rs130 // the caller scaffold).COMMENT
MEDIUMcrates/astrid-cli/src/commands/capsule/new.rs358/// Print the friendly next-steps message after a successful scaffold.COMMENT
MEDIUMcrates/astrid-capsule/src/engine/wasm/mod.rs3592 // cross-principal race that #813 collapsed the orchestration cliffCOMMENT
MEDIUMcrates/astrid-capsule/src/engine/wasm/pool.rs6//! `astrid#813` orchestration cliff (one LLM turn every ~3s, invariant toCOMMENT
MEDIUMcrates/astrid-mcp/src/registry.rs5//! The runtime's agentic loop uses the registry instead of knowing aboutCOMMENT
MEDIUM…es/astrid-kernel/src/principal_home_migration/tests.rs28 // source root. Normal v2 boot must not scaffold `home/` at all.COMMENT
MEDIUMdocs/config.md61# context_window = 200000 # Optional: override provider's context window sizeCOMMENT
MEDIUMdocs/astrid-tensor-logic-composition.md624### 9.2 Why scaffold nowCOMMENT
MEDIUMdocs/metrics.md292### 4.3 Capsule lifecycle & WASM sandbox (`astrid-capsule`, `astrid-capsule-install`, kernel orchestration)COMMENT
AI Slop Vocabulary14 hits · 42 pts
SeverityFileLineSnippetContext
MEDIUMCargo.toml168# Oracle-only dependency for the pre-release chunker evidence harness. PersistentCOMMENT
MEDIUMcrates/astrid-cli/src/commands/daemon_control.rs26//! The identity check is also robust to an in-place upgrade replacing theCOMMENT
MEDIUMcrates/astrid-capsule/src/engine/wasm/mod.rs133/// upward, there is no robust primitive for "contains a repo below", and theCOMMENT
MEDIUMcrates/astrid-capsule/src/engine/wasm/mod.rs6275 /// the trap's `Display` string — robust across wasmtime point releases andCOMMENT
MEDIUMscripts/e2e/runtime-harness.sh346 # the harness's published/runtime IDs remain `astrid-capsule-*`. Prefer theCOMMENT
MEDIUMscripts/e2e/runtime-multi-home-smoke.sh107 # Match the primary harness' non-interactive declared-config install soCOMMENT
MEDIUMscripts/e2e/runtime-multi-home-smoke.sh139 # the harness-owned process so cleanup cannot leave an untracked second home.COMMENT
MEDIUM.github/workflows/runtime-e2e.yml65 # Runtime budget: the harness has bounded daemon startup, curl/SSE, fake LLM,COMMENT
MEDIUM.github/workflows/runtime-e2e.yml98 # Install it up front so the runtime harness cannot trigger anCOMMENT
MEDIUMe2e/first-party-capsule-scenarios.toml8# family. status = "covered" means the current runtime harness executes it.COMMENT
MEDIUMe2e/capability-scenarios.toml7# - status = "covered": the current runtime harness asserts allow/deny behaviorCOMMENT
MEDIUMe2e/cli-scenarios.toml8# status = "covered" means the current runtime harness executes an assertion forCOMMENT
MEDIUMe2e/http-scenarios.toml8# status = "covered" means the current runtime harness executes an assertion forCOMMENT
MEDIUMe2e/runtime-scenario-specs.toml6# evidence the harness must assert. Drift tests reject mappings to scenariosCOMMENT
Unused Imports41 hits · 40 pts
SeverityFileLineSnippetContext
LOWscripts/test_oci_arm64_container_contract.py4CODE
LOWscripts/check_static_elf.py4CODE
LOWscripts/nightly_version.py4CODE
LOWscripts/test_macos_release_packaging.py3CODE
LOWscripts/package_release_archive.py4CODE
LOWscripts/test_musl_release_manifest.py3CODE
LOWscripts/test_validate_release_archive.py3CODE
LOWscripts/test_windows_release_manifest.py3CODE
LOWscripts/test_channel_metadata.py3CODE
LOWscripts/test_crate_publication.py3CODE
LOWscripts/check_dco.py4CODE
LOWscripts/test_release_draft_recovery.py3CODE
LOWscripts/validate_macos_release.py4CODE
LOWscripts/release_manifest.py4CODE
LOWscripts/oci_export_binding.py4CODE
LOWscripts/test_check_glibc.py3CODE
LOWscripts/runatal_v1_physical.py11CODE
LOWscripts/runatal_v1_physical.py11CODE
LOWscripts/runatal_v1_physical.py11CODE
LOWscripts/changelog.py4CODE
LOWscripts/channel_publication.py4CODE
LOWscripts/test_release_publication.py3CODE
LOWscripts/create_oci_test_shuttle.py4CODE
LOWscripts/test_nightly_version.py3CODE
LOWscripts/test_oci_export_binding.py4CODE
LOWscripts/test_release_manifest.py3CODE
LOWscripts/oci_release.py4CODE
LOWscripts/crate_publication.py4CODE
LOWscripts/release_publication.py4CODE
LOWscripts/check_glibc.py4CODE
LOWscripts/test_check_static_elf.py3CODE
LOWscripts/test_channel_publication.py3CODE
LOWscripts/musl_release_manifest.py4CODE
LOWscripts/validate_release_archive.py4CODE
LOWscripts/windows_release_manifest.py4CODE
LOWscripts/release_draft_recovery.py4CODE
LOWscripts/test_oci_container_contract.py4CODE
LOWscripts/test_oci_release.py4CODE
LOWscripts/channel_metadata.py4CODE
LOWscripts/e2e/check-first-party-capsule-commands.py4CODE
LOWscripts/e2e/fake-openai-compat.py15CODE
Deep Nesting23 hits · 23 pts
SeverityFileLineSnippetContext
LOWscripts/test_macos_release_packaging.py86CODE
LOWscripts/package_release_archive.py42CODE
LOWscripts/runatal_v1_volume.py135CODE
LOWscripts/runatal_v1_reader.py482CODE
LOWscripts/runatal_v1_reader.py523CODE
LOWscripts/runatal_v1_reader.py566CODE
LOWscripts/runatal_v1_reader.py609CODE
LOWscripts/runatal_v1_reader.py837CODE
LOWscripts/release_manifest.py202CODE
LOWscripts/release_manifest.py377CODE
LOWscripts/runatal_v1_sketch.py124CODE
LOWscripts/runatal_v1_kv.py137CODE
LOWscripts/runatal_v1_kv.py237CODE
LOWscripts/runatal_v1_physical.py246CODE
LOWscripts/runatal_v1_physical.py294CODE
LOWscripts/runatal_v1_physical.py365CODE
LOWscripts/runatal_v1_physical.py450CODE
LOWscripts/runatal_v1_physical.py670CODE
LOWscripts/test_release_publication.py136CODE
LOWscripts/test_release_publication.py160CODE
LOWscripts/create_oci_test_shuttle.py34CODE
LOWscripts/musl_release_manifest.py116CODE
LOWscripts/channel_metadata.py356CODE
Structural Annotation Overuse5 hits · 9 pts
SeverityFileLineSnippetContext
LOWcrates/astrid-capsule/src/security/mod.rs124 /// NOTE: This method currently takes no socket path argument because theCOMMENT
LOWcrates/astrid-approval/src/manager.rs217 // Step 1: Check if an existing allowance covers this action (atomic find + consume).COMMENT
LOWcrates/astrid-approval/src/manager.rs230 // Step 2: No allowance — we need user approvalCOMMENT
LOWcrates/astrid-approval/src/manager.rs233 // Step 3: Check if handler is availableCOMMENT
LOWcrates/astrid-approval/src/manager.rs252 // Step 4: Send request to handler with timeoutCOMMENT
Verbosity Indicators4 hits · 8 pts
SeverityFileLineSnippetContext
LOWcrates/astrid-approval/src/manager.rs217 // Step 1: Check if an existing allowance covers this action (atomic find + consume).COMMENT
LOWcrates/astrid-approval/src/manager.rs230 // Step 2: No allowance — we need user approvalCOMMENT
LOWcrates/astrid-approval/src/manager.rs233 // Step 3: Check if handler is availableCOMMENT
LOWcrates/astrid-approval/src/manager.rs252 // Step 4: Send request to handler with timeoutCOMMENT
Cross-Language Confusion1 hit · 5 pts
SeverityFileLineSnippetContext
HIGHscripts/e2e/fake-openai-compat.py175 b'"delta":{"content":"still "},"finish_reason":null}]}\n\n'CODE
Self-Referential Comments1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMcontainer/amd64/test.sh87# Create a test-only local alias from the verified digest for the two derivedCOMMENT
TODO Padding1 hit · 2 pts
SeverityFileLineSnippetContext
LOWcrates/astrid-hooks/src/handler/agent.rs16/// TODO: implement real agent handler. For now, it returns a stub response.COMMENT
Fake / Example Data1 hit · 1 pts
SeverityFileLineSnippetContext
LOWcrates/astrid-gateway/src/routes/env.rs454 .get("placeholder")CODE
Excessive Try-Catch Wrapping1 hit · 1 pts
SeverityFileLineSnippetContext
LOWe2e/concurrency.sh51 except Exception as e: # noqa: BLE001 - reported, not raisedCODE