2.7

Adjusted Signal

2.7

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

5.5K

Stars

Language

860.1K

Lines of Code

8.1K

Files

2.3K

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 11.2/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 2195 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.8/100 · LOW

Are imports declared and package/API names verified? 49 finding(s).

Agent Over-Engineering Ratio 2.3/100 · LOW

Are wrappers, guards, and repeated structures necessary? 286 finding(s).

PR Review Velocity Impact 13.6/100 · LOW

Which changes need focused human review? 2293 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 10HIGH 1MEDIUM 64LOW 2218

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 2293 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block1780 hits · 1480 pts

Severity	File	Line	Snippet	Context
LOW	cmd/dev/github/setup.go	1	package github	COMMENT
LOW	tools/generate-rpc-clients/main.go	1	// generate-rpc-clients generates simplified client wrappers for Connect RPC service interfaces.	COMMENT
LOW	tools/pricing/pricing.go	1	// Package pricing declares the Unkey Stripe billing catalog as typed Go data.	COMMENT
LOW	tools/pricing/pricing.go	21	//	COMMENT
LOW	tools/pricing/cmd/pricing/main.go	1	// Command pricing reconciles the Unkey Stripe billing catalog (declared in the	COMMENT
LOW	tools/pricing/internal/stripeenv/client.go	21	// (`{"api_key":"..."}`). Override with STRIPE_SECRET_ID.	COMMENT
LOW	contributing/quality/documentation.md	121	// SetTimeout updates the request timeout duration for all future requests.	COMMENT
LOW	contributing/quality/documentation.md	221	//	COMMENT
LOW	contributing/quality/documentation.md	241	// // Rate limited - reject request	COMMENT
LOW	contributing/quality/documentation.md	361	//	COMMENT
LOW	web/internal/encryption/tsconfig.json	1	{	COMMENT
LOW	web/internal/encryption/tsconfig.json	21	// "noLib": true, /* Disable including any library files, including the default l	COMMENT
LOW	web/internal/encryption/tsconfig.json	41	/* Emit */	COMMENT
LOW	web/internal/encryption/tsconfig.json	61	// "noEmitOnError": true, /* Disable emitting files if any type checking errors are repor	COMMENT
LOW	web/internal/encryption/tsconfig.json	81	// "noUnusedLocals": true, /* Enable error reporting when local variables aren't read. */	COMMENT
LOW	web/internal/clickhouse/src/resources.ts	121	// ─── Hybrid timeseries (MV for cold tail + raw for live bucket) ───────	COMMENT
LOW	web/internal/clickhouse/src/resources.ts	181	windowStartMs: windowStartSec * 1000,	COMMENT
LOW	web/internal/clickhouse/src/resources.ts	261	rawAgg: "sum(container_value) / {bucketSeconds: UInt32}",	COMMENT
LOW	web/internal/clickhouse/src/resources.ts	301	AND ts >= {tMs: Int64}	COMMENT
LOW	web/internal/clickhouse/src/instance-events.ts	21	// Optional time bounds. Logs viewer passes a tight range; the events	COMMENT
LOW	web/internal/hash/tsconfig.json	1	{	COMMENT
LOW	web/internal/hash/tsconfig.json	21	// "noLib": true, /* Disable including any library files, including the default l	COMMENT
LOW	web/internal/hash/tsconfig.json	41	/* Emit */	COMMENT
LOW	web/internal/hash/tsconfig.json	61	// "noEmitOnError": true, /* Disable emitting files if any type checking errors are repor	COMMENT
LOW	web/internal/hash/tsconfig.json	81	// "noUnusedLocals": true, /* Enable error reporting when local variables aren't read. */	COMMENT
LOW	web/internal/encoding/tsconfig.json	1	{	COMMENT
LOW	web/internal/encoding/tsconfig.json	21	// "noLib": true, /* Disable including any library files, including the default l	COMMENT
LOW	web/internal/encoding/tsconfig.json	41	/* Emit */	COMMENT
LOW	web/internal/encoding/tsconfig.json	61	// "noEmitOnError": true, /* Disable emitting files if any type checking errors are repor	COMMENT
LOW	web/internal/encoding/tsconfig.json	81	// "noUnusedLocals": true, /* Enable error reporting when local variables aren't read. */	COMMENT
LOW	web/internal/db/src/schema/acme_users.ts	21		COMMENT
LOW	web/internal/db/src/schema/deployments.ts	141	// What surface triggered this deployment.	COMMENT
LOW	web/internal/db/src/schema/frontline_routes.ts	21	.notNull()	COMMENT
LOW	web/internal/db/src/schema/instances.ts	21	// pod-watch reports. Stored as JSON so adding a new state kind (e.g.	COMMENT
LOW	web/internal/db/src/schema/clickhouse_outbox.ts	1	import { bigint, index, json, mysqlTable, varchar } from "drizzle-orm/mysql-core";	COMMENT
LOW	web/internal/db/src/schema/clickhouse_outbox.ts	21	// producer (`audit_log.`, `customer.audit_log.`, `key_lifecycle.*`)	COMMENT
LOW	web/internal/db/src/schema/limits.ts	101	}).notNull(),	COMMENT
LOW	web/internal/db/src/schema/limits.ts	121	// Caps how much memory one build machine can use.	COMMENT
LOW	web/internal/keys/tsconfig.json	1	{	COMMENT
LOW	web/internal/keys/tsconfig.json	21	// "noLib": true, /* Disable including any library files, including the default l	COMMENT
LOW	web/internal/keys/tsconfig.json	41	/* Emit */	COMMENT
LOW	web/internal/keys/tsconfig.json	61	// "noEmitOnError": true, /* Disable emitting files if any type checking errors are repor	COMMENT
LOW	web/internal/keys/tsconfig.json	81	// "noUnusedLocals": true, /* Enable error reporting when local variables aren't read. */	COMMENT
LOW	web/internal/error/tsconfig.json	1	{	COMMENT
LOW	web/internal/error/tsconfig.json	21	// "noLib": true, /* Disable including any library files, including the default l	COMMENT
LOW	web/internal/error/tsconfig.json	41	/* Emit */	COMMENT
LOW	web/internal/error/tsconfig.json	61	// "noEmitOnError": true, /* Disable emitting files if any type checking errors are repor	COMMENT
LOW	web/internal/error/tsconfig.json	81	// "noUnusedLocals": true, /* Enable error reporting when local variables aren't read. */	COMMENT
LOW	…g]/settings/billing/components/deploy-product-card.tsx	121	// matching the invoice. Falls back to the plan fee before the query resolves,	COMMENT
LOW	…g]/settings/billing/components/deploy-product-card.tsx	161		COMMENT
LOW	web/apps/dashboard/components/charts/chart-domain.ts	1	// When the caller opts into contraction and non-zero data covers less than	COMMENT
LOW	web/apps/dashboard/components/charts/chart-domain.ts	21	spanMs: number;	COMMENT
LOW	web/apps/dashboard/components/virtual-table/types.ts	101	export type SeparatorItem = {	COMMENT
LOW	web/apps/dashboard/hooks/use-paginated-list-query.ts	21	} as const;	COMMENT
LOW	web/apps/dashboard/hooks/use-paginated-list-query.ts	81	// Extra identity for values `prefetch` closes over but `queryParams` omits	COMMENT
LOW	web/apps/dashboard/hooks/use-paginated-list-query.ts	321	// Extra identity for values `useListQuery`/`prefetch` capture from their	COMMENT
LOW	…rs/deploy/metrics/legacy/environment-requests-query.ts	41	// bucket interval, and grid its request chart should read. It is the single	COMMENT
LOW	…c/routers/deploy/metrics/legacy/get-app-rps-metrics.ts	1	import { clickhouse } from "@/lib/clickhouse";	COMMENT
LOW	…s/dashboard/lib/trpc/routers/stripe/subscribeDeploy.ts	201	// "flexible", which itemizes prorations differently); see the same	COMMENT
LOW	web/apps/dashboard/lib/schemas/env-var.ts	21	// Values are encrypted before storage and the ciphertext lands in	COMMENT
1720 more matches not shown…

Hyper-Verbose Identifiers237 hits · 240 pts

Severity	File	Line	Snippet	Context
LOW	…al/ui/src/components/date-time/components/calendar.tsx	10	function CustomMonthCaptionComponent({ calendarMonth }: { calendarMonth: { date: Date } }) {	CODE
LOW⚡	web/internal/clickhouse/src/frontline.ts	351	export function getDeploymentRpsTimeseries(ch: Querier) {	CODE
LOW⚡	web/internal/clickhouse/src/frontline.ts	391	export function getDeploymentLatencyWithTimeseries(ch: Querier) {	CODE
LOW	web/internal/clickhouse/src/ratelimits.ts	164	function getRatelimitLogsTimeseriesWhereClause(	CODE
LOW	web/internal/clickhouse/src/ratelimits.ts	248	function createBatchTimeseriesQuery(interval: TimeInterval) {	CODE
LOW	web/internal/clickhouse/src/ratelimits.ts	279	function createBatchTimeseriesQuerier(interval: TimeInterval) {	CODE
LOW	web/internal/clickhouse/src/ratelimits.ts	556	export function getRatelimitLogEnrichment(ch: Querier) {	CODE
LOW	web/internal/clickhouse/src/ratelimits.ts	946	function createLatencyTimeseriesQuery(interval: TimeInterval, whereClause: string) {	CODE
LOW	web/internal/clickhouse/src/ratelimits.ts	988	function getRatelimitLatencyTimeseriesWhereClause(params: RatelimitLatencyTimeseriesParams): {	CODE
LOW	web/internal/clickhouse/src/ratelimits.ts	1017	function createLatencyTimeseriesQuerier(interval: TimeInterval) {	CODE
LOW	web/internal/clickhouse/src/success.ts	7	export function getActiveWorkspacesPerMonth(ch: Querier) {	CODE
LOW	web/internal/clickhouse/src/audit-logs.ts	162	export function getLatestAuditLogByTarget(ch: Querier) {	CODE
LOW	web/internal/clickhouse/src/verifications.ts	13	export function getGatewayRequestVerification(ch: Querier) {	CODE
LOW	web/internal/clickhouse/src/verifications.ts	557	function createVerificationTimeseriesQuery(interval: TimeInterval, whereClause: string) {	CODE
LOW	web/internal/clickhouse/src/verifications.ts	596	function getVerificationTimeseriesWhereClause(	CODE
LOW	web/internal/clickhouse/src/verifications.ts	689	function createVerificationTimeseriesQuerier(interval: TimeInterval) {	CODE
LOW	web/internal/clickhouse/src/verifications.ts	780	async function batchVerificationTimeseries(	CODE
LOW	web/internal/clickhouse/src/verifications.ts	830	function mergeVerificationTimeseriesResults(	CODE
LOW	web/internal/clickhouse/src/verifications.ts	953	function createIdentityTimeseriesQuery(interval: TimeInterval, whereClause: string) {	CODE
LOW	web/internal/clickhouse/src/verifications.ts	992	function getIdentityTimeseriesWhereClause(	CODE
LOW	web/internal/clickhouse/src/verifications.ts	1069	function createIdentityTimeseriesQuerier(interval: TimeInterval) {	CODE
LOW	web/internal/clickhouse/src/logdrains.ts	76	export function getRecentLogdrainDeliveries(ch: Querier) {	CODE
LOW	web/internal/clickhouse/src/app-metrics/resources.ts	305	export function getAppResourcesByInstance(ch: Querier) {	CODE
LOW	web/internal/clickhouse/src/keys/active_keys.ts	145	function createActiveKeysTimeseriesQuery(interval: TimeInterval, whereClause: string) {	CODE
LOW	web/internal/clickhouse/src/keys/active_keys.ts	185	function getActiveKeysTimeseriesWhereClause(	CODE
LOW	web/internal/clickhouse/src/keys/active_keys.ts	250	function createActiveKeysTimeseriesQuerier(interval: TimeInterval) {	CODE
LOW	web/internal/workos-widgets/src/index.tsx	113	function WorkOsMutationErrorListener({	CODE
LOW	web/internal/schema/src/auditlog.ts	17	export function isDashboardAuditLogBucket(bucket: string): bucket is DashboardAuditLogBucket {	CODE
LOW	web/internal/db/src/errors.ts	73	export function isTooManyConnectionsError(err: unknown): boolean {	CODE
LOW	web/internal/api/src/types/unrecognized.ts	15	export function startCountingUnrecognized() {	CODE
LOW	…/internal/api/src/models/operations/portalrerollkey.ts	25	export function portalRerollKeySecurityToJSON(	CODE
LOW	…internal/api/src/models/operations/rootkeyslistkeys.ts	29	export function rootKeysListKeysResponseFromJSON(	CODE
LOW	…els/operations/environmentslistenvironmentvariables.ts	32	export function environmentsListEnvironmentVariablesResponseFromJSON(	CODE
LOW	web/internal/api/src/models/operations/appslistapps.ts	29	export function appsListAppsResponseFromJSON(	CODE
LOW	…internal/api/src/models/operations/cliexchangetoken.ts	33	export function cliExchangeTokenResponseResultFromJSON(	CODE
LOW	…internal/api/src/models/operations/cliexchangetoken.ts	61	export function cliExchangeTokenResponseFromJSON(	CODE
LOW	…al/api/src/models/operations/portalgetverifications.ts	25	export function portalGetVerificationsSecurityToJSON(	CODE
LOW	…ternal/api/src/models/operations/portalexchangecode.ts	32	export function portalExchangeCodeResponseFromJSON(	CODE
LOW	web/internal/api/src/models/operations/apislistkeys.ts	29	export function apisListKeysResponseFromJSON(	CODE
LOW	…al/api/src/models/operations/ratelimitlistoverrides.ts	29	export function ratelimitListOverridesResponseFromJSON(	CODE
LOW	…rnal/api/src/models/operations/permissionslistroles.ts	29	export function permissionsListRolesResponseFromJSON(	CODE
LOW	…b/internal/api/src/models/operations/portallistkeys.ts	34	export function portalListKeysSecurityToJSON(	CODE
LOW	…b/internal/api/src/models/operations/portallistkeys.ts	55	export function portalListKeysResponseFromJSON(	CODE
LOW	…rnal/api/src/models/operations/projectslistprojects.ts	29	export function projectsListProjectsResponseFromJSON(	CODE
LOW	…ternal/api/src/models/operations/portallistsessions.ts	29	export function portalListSessionsResponseFromJSON(	CODE
LOW	…ernal/api/src/models/operations/portalcreatesession.ts	32	export function portalCreateSessionResponseFromJSON(	CODE
LOW	…pi/src/models/operations/permissionslistpermissions.ts	29	export function permissionsListPermissionsResponseFromJSON(	CODE
LOW	…ernal/api/src/models/operations/logslistapirequests.ts	29	export function logsListApiRequestsResponseFromJSON(	CODE
LOW	…l/api/src/models/operations/ratelimitlistnamespaces.ts	29	export function ratelimitListNamespacesResponseFromJSON(	CODE
LOW	…ternal/api/src/models/operations/domainslistdomains.ts	29	export function domainsListDomainsResponseFromJSON(	CODE
LOW	…/api/src/models/operations/identitieslistidentities.ts	29	export function identitiesListIdentitiesResponseFromJSON(	CODE
LOW	…pi/src/models/operations/deploymentslistdeployments.ts	29	export function deploymentsListDeploymentsResponseFromJSON(	CODE
LOW	…/api/src/models/operations/deploymentslistbuildlogs.ts	29	export function deploymentsListBuildLogsResponseFromJSON(	CODE
LOW	…al/api/src/models/components/deploymenttriggeractor.ts	69	export function deploymentTriggerActorFromJSON(	CODE
LOW	…ernal/api/src/models/components/deploymentsourceoci.ts	31	export function deploymentSourceOCIToJSON(	CODE
LOW	…nternal/api/src/models/components/deploymenttrigger.ts	67	export function deploymentTriggerFromJSON(	CODE
LOW	…pi/src/models/components/deploymentsourcedeployment.ts	34	export function deploymentSourceDeploymentToJSON(	CODE
LOW	…ernal/api/src/models/components/bearertokenlocation.ts	31	export function bearerTokenLocationToJSON(	CODE
LOW	…ernal/api/src/models/components/bearertokenlocation.ts	38	export function bearerTokenLocationFromJSON(	CODE
LOW	…al/api/src/models/components/keysverifykeyratelimit.ts	46	export function keysVerifyKeyRatelimitToJSON(	CODE
177 more matches not shown…

Decorative Section Separators49 hits · 168 pts

Severity	File	Line	Snippet	Context
MEDIUM	tools/pricing/internal/reconcile/reconcile.go	99	// ── Plans ────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	tools/pricing/internal/reconcile/reconcile.go	143	// ── Meters + metered prices ──────────────────────────────────────────────────	COMMENT
MEDIUM	tools/pricing/internal/reconcile/reconcile.go	198	// ── API products ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	tools/pricing/internal/reconcile/reconcile.go	254	// ── Webhooks ─────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	tools/pricing/internal/reconcile/reconcile.go	311	// ── Orphan detection ─────────────────────────────────────────────────────────	COMMENT
MEDIUM	tools/pricing/internal/reconcile/reconcile.go	363	// ── helpers ──────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	tools/pricing/internal/reconcile/stripe.go	22	// ── Snapshot ─────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	tools/pricing/internal/reconcile/stripe.go	110	// ── Queries (in-memory, against the snapshot) ────────────────────────────────	COMMENT
MEDIUM	tools/pricing/internal/reconcile/stripe.go	152	// ── Writes ───────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	web/internal/clickhouse/src/frontline.ts	81	// ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	web/internal/clickhouse/src/frontline.ts	83	// ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	web/internal/clickhouse/src/frontline.ts	240	// ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	web/internal/clickhouse/src/frontline.ts	242	// ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	web/internal/clickhouse/src/frontline.ts	280	// ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	web/internal/clickhouse/src/frontline.ts	282	// ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	web/internal/clickhouse/src/frontline.ts	344	// ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	web/internal/clickhouse/src/frontline.ts	346	// ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	web/internal/clickhouse/src/frontline.ts	381	// ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	web/internal/clickhouse/src/frontline.ts	383	// ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	web/internal/clickhouse/src/resources.ts	4	// ─── Time window config ────────────────────────────────────────────────	COMMENT
MEDIUM	web/internal/clickhouse/src/resources.ts	121	// ─── Hybrid timeseries (MV for cold tail + raw for live bucket) ───────	COMMENT
MEDIUM	web/internal/clickhouse/src/resources.ts	187	// ─── Metric registry ──────────────────────────────────────────────────	COMMENT
MEDIUM	web/internal/clickhouse/src/resources.ts	364	// ─── Current Resource Summary (latest window from raw FINAL view) ─────	COMMENT
MEDIUM	web/internal/match/src/types.ts	12	// ── Narrowing ───────────────────────────────────────────────────────────────	COMMENT
MEDIUM	web/internal/match/src/types.ts	77	// ── Exhaustiveness subtraction ───────────────────────────────────────────────	COMMENT
MEDIUM	…lay/node-details-panel/components/resource-metrics.tsx	88	// ─── main ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…lay/node-details-panel/components/resource-metrics.tsx	268	// ─── formatting ───────────────────────────────────────────────────────	COMMENT
MEDIUM	…lay/node-details-panel/components/resource-metrics.tsx	270	// ─── display ──────────────────────────────────────────────────────────	COMMENT
MEDIUM	…ps/dashboard/lib/collections/deploy/policies.schema.ts	12	// ── Limits ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…ps/dashboard/lib/collections/deploy/policies.schema.ts	49	// ── String match (protojson oneof: exact \| prefix \| regex) ──────────────	COMMENT
MEDIUM	…ps/dashboard/lib/collections/deploy/policies.schema.ts	110	// ── Key location (protojson oneof: bearer \| header \| queryParam) ────────	COMMENT
MEDIUM	…ps/dashboard/lib/collections/deploy/policies.schema.ts	132	// ── Common policy fields ────────────────────────────────────────────────	COMMENT
MEDIUM	…ps/dashboard/lib/collections/deploy/policies.schema.ts	141	// ── KeyAuth policy ──────────────────────────────────────────────────────	COMMENT
MEDIUM	…ps/dashboard/lib/collections/deploy/policies.schema.ts	184	// ── RateLimit policy ───────────────────────────────────────────────────	COMMENT
MEDIUM	…ps/dashboard/lib/collections/deploy/policies.schema.ts	226	// ── Firewall policy ─────────────────────────────────────────────────────	COMMENT
MEDIUM	…ps/dashboard/lib/collections/deploy/policies.schema.ts	250	// ── OpenAPI Validation policy ──────────────────────────────────────────	COMMENT
MEDIUM	…ps/dashboard/lib/collections/deploy/policies.schema.ts	261	// ── Logging policy ──────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	svc/heimdall/internal/network/bpf/network_helpers.h	17	// ─── primitive types ──────────────────────────────────────────────────	COMMENT
MEDIUM⚡	svc/heimdall/internal/network/bpf/network_helpers.h	27	// ─── BPF program section macro ────────────────────────────────────────	COMMENT
MEDIUM⚡	svc/heimdall/internal/network/bpf/network_helpers.h	32	// ─── BPF map definition macros (libbpf-style) ─────────────────────────	COMMENT
MEDIUM⚡	svc/heimdall/internal/network/bpf/network_helpers.h	40	// ─── BPF map type constants ───────────────────────────────────────────	COMMENT
MEDIUM⚡	svc/heimdall/internal/network/bpf/network_helpers.h	47	// ─── BPF map flags ────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	svc/heimdall/internal/network/bpf/network_helpers.h	51	// ─── libbpf-style map pinning ────────────────────────────────────────	COMMENT
MEDIUM⚡	svc/heimdall/internal/network/bpf/network_helpers.h	61	// ─── tc action codes ──────────────────────────────────────────────────	COMMENT
MEDIUM	svc/heimdall/internal/network/bpf/network_helpers.h	78	// ─── BPF helper function numbers + declarations ───────────────────────	COMMENT
MEDIUM	svc/heimdall/internal/network/bpf/network_helpers.h	85	// ─── Endian conversion ────────────────────────────────────────────────	COMMENT
MEDIUM⚡	svc/heimdall/internal/network/bpf/network_helpers.h	98	// ─── Ethernet protocol constants ─────────────────────────────────────	COMMENT
MEDIUM⚡	svc/heimdall/internal/network/bpf/network_helpers.h	105	// ─── Compiler hint ────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	svc/heimdall/internal/network/bpf/network_helpers.h	111	// ─── Kernel struct subsets ────────────────────────────────────────────	COMMENT

Structural Annotation Overuse61 hits · 110 pts

Severity	File	Line	Snippet	Context
LOW	cmd/dev/github/README.md	15	### Step 1: Create the GitHub App	COMMENT
LOW⚡	cmd/dev/github/README.md	28	### Step 2: Start the dev environment	COMMENT
LOW⚡	cmd/dev/github/README.md	36	### Step 3: Seed the database	COMMENT
LOW⚡	cmd/dev/github/README.md	42	### Step 4: Trigger a deployment	COMMENT
LOW⚡	internal/services/ratelimit/db/generate.go	5	// Step 1: remove stale *_generated.go files so renamed or deleted queries	COMMENT
LOW⚡	internal/services/ratelimit/db/generate.go	9	// Step 2: build the shared sqlc bulk-insert plugin used by sqlc.json.	COMMENT
LOW⚡	internal/services/ratelimit/db/generate.go	12	// Step 3: run sqlc, which reads sqlc.json, parses queries/, and emits	COMMENT
LOW⚡	internal/services/ratelimit/db/generate.go	16	// Step 4: delete deleteme.go because database.go already provides the	COMMENT
LOW⚡	internal/services/keys/db/generate.go	5	// Step 1: remove stale *_generated.go files so renamed or deleted queries	COMMENT
LOW⚡	internal/services/keys/db/generate.go	9	// Step 2: run sqlc, which reads sqlc.json, parses queries/, and emits	COMMENT
LOW⚡	internal/services/keys/db/generate.go	13	// Step 3: delete deleteme.go because database.go already provides the	COMMENT
LOW⚡	.claude/skills/gen-api-cli/SKILL.md	35	## Step 1: Use the pinned SDK	COMMENT
LOW⚡	.claude/skills/gen-api-cli/SKILL.md	39	## Step 2: Read the inputs	COMMENT
LOW⚡	.claude/skills/gen-api-cli/SKILL.md	45	## Step 3: Group endpoints	COMMENT
LOW	.claude/skills/gen-api-cli/SKILL.md	68	## Step 4: Directory structure	COMMENT
LOW	.claude/skills/gen-api-cli/SKILL.md	379	## Step 5: Generate documentation	COMMENT
LOW	.claude/skills/gen-api-cli/SKILL.md	410	## Step 6: Write tests	COMMENT
LOW	.claude/skills/gen-api-cli/SKILL.md	492	## Step 7: Verify	COMMENT
LOW⚡	svc/frontline/internal/db/generate.go	5	// Step 1: remove stale *_generated.go files so renamed or deleted queries	COMMENT
LOW⚡	svc/frontline/internal/db/generate.go	9	// Step 2: run sqlc, which reads sqlc.json, parses queries/, and emits	COMMENT
LOW⚡	svc/frontline/internal/db/generate.go	13	// Step 3: delete deleteme.go because database.go already provides the	COMMENT
LOW	…c/ctrl/worker/certificate/process_challenge_handler.go	71	// Step 1: Resolve domain	COMMENT
LOW	…c/ctrl/worker/certificate/process_challenge_handler.go	100	// Step 2: Claim the challenge	COMMENT
LOW	…c/ctrl/worker/certificate/process_challenge_handler.go	119	// Step 3: Obtain certificate via DNS-01 challenge	COMMENT
LOW⚡	…c/ctrl/worker/certificate/process_challenge_handler.go	189	// Step 5: Persist certificate to DB	COMMENT
LOW⚡	…c/ctrl/worker/certificate/process_challenge_handler.go	197	// Step 6: Mark challenge as verified	COMMENT
LOW	svc/ctrl/worker/customdomain/verify_handler.go	117	// Step 1: Try CNAME verification. This works for subdomains with a real CNAME record.	COMMENT
LOW	svc/ctrl/worker/customdomain/verify_handler.go	128	// Step 2: Check if TXT verification is needed.	COMMENT
LOW	svc/api/integration/cluster/cache/e2e_test.go	40	// Step 1: Populate cache on all nodes by making API calls	COMMENT
LOW⚡	svc/api/integration/cluster/cache/e2e_test.go	58	// Step 2: Delete API from first node (this should trigger distributed invalidation)	COMMENT
LOW⚡	svc/api/integration/cluster/cache/e2e_test.go	67	// Step 3: Verify cache invalidation propagates to all nodes within 5 seconds	COMMENT
LOW	svc/api/integration/cluster/cache/e2e_test.go	125	// Step 4: Verify all nodes consistently return 404 for the deleted API	COMMENT
LOW	svc/api/integration/multi_node_ratelimiting/run.go	32	// Step 1: Set up test resources	COMMENT
LOW	svc/api/integration/multi_node_ratelimiting/run.go	61	// Step 2: Calculate test parameters	COMMENT
LOW	svc/api/integration/multi_node_ratelimiting/run.go	82	// Step 3: Calculate expected limits	COMMENT
LOW	svc/api/integration/multi_node_ratelimiting/run.go	117	// Step 4: Run the load test	COMMENT
LOW	svc/api/integration/multi_node_ratelimiting/run.go	159	// Step 5: Verify results	COMMENT
LOW	svc/api/integration/multi_node_ratelimiting/run.go	180	// Step 6: Verify ClickHouse Ratelimit data	COMMENT
LOW	svc/api/integration/multi_node_ratelimiting/run.go	216	// Step 6: Verify Clickhouse Metrics Data	COMMENT
LOW	svc/api/integration/multi_node_usagelimiting/run.go	31	// Step 1: Set up test resources	COMMENT
LOW	svc/api/integration/multi_node_usagelimiting/run.go	58	// Step 2: Calculate test parameters	COMMENT
LOW	svc/api/integration/multi_node_usagelimiting/run.go	83	// Step 3: Calculate expected limits	COMMENT
LOW	svc/api/integration/multi_node_usagelimiting/run.go	96	// Step 4: Run the load test	COMMENT
LOW	svc/api/integration/multi_node_usagelimiting/run.go	134	// Step 5: Verify results	COMMENT
LOW	svc/api/integration/multi_node_usagelimiting/run.go	159	// Step 6: Verify ClickHouse Verification data	COMMENT
LOW	svc/api/integration/multi_node_usagelimiting/run.go	196	// Step 7: Verify Clickhouse Metrics Data	COMMENT
LOW	…ion/multi_node_usagelimiting/accuracy/accuracy_test.go	121	// Step 1: Set up test resources	COMMENT
LOW	…ion/multi_node_usagelimiting/accuracy/accuracy_test.go	137	// Step 2: Run concurrent load test	COMMENT
LOW	…ion/multi_node_usagelimiting/accuracy/accuracy_test.go	212	// Step 3: Verify accuracy	COMMENT
LOW	…ion/multi_node_usagelimiting/accuracy/accuracy_test.go	257	// Step 4: Verify final state in database with polling-based wait	COMMENT
LOW⚡	svc/api/openapi/generate_bundle.go	41	// Step 1: Preprocess paths to inline external references	COMMENT
LOW⚡	svc/api/openapi/generate_bundle.go	48	// Step 2: Configure libopenapi for bundling	COMMENT
LOW	svc/api/openapi/generate_bundle.go	69	// Step 3: Bundle all references into a single document	COMMENT
LOW	svc/api/routes/v2_keys_update_key/three_state_test.go	606	// Step 1: Add credits with refill	COMMENT
LOW	svc/api/routes/v2_keys_update_key/three_state_test.go	621	// Step 2: Clear refill only	COMMENT
LOW	svc/api/routes/v2_keys_update_key/three_state_test.go	637	// Step 3: Add back refill without changing remaining	COMMENT
LOW	svc/api/routes/v2_keys_update_key/three_state_test.go	657	// Step 4: Clear everything	COMMENT
LOW	…c/api/routes/v2_identities_delete_identity/200_test.go	247	// Step 1: Create initial identity with "Advanced" tier ratelimit (300k/month)	COMMENT
LOW⚡	…c/api/routes/v2_identities_delete_identity/200_test.go	264	// Step 2: Delete old identity (tier downgrade starts)	COMMENT
LOW⚡	…c/api/routes/v2_identities_delete_identity/200_test.go	269	// Step 3: Create new identity with "Starter" tier ratelimit (20k/month)	COMMENT
1 more matches not shown…

Hallucination Indicators10 hits · 100 pts

Severity	File	Line	Snippet	Context
CRITICAL	…olicies/components/policy-form/rule/regex-generate.tsx	19	const generateRegex = trpc.deploy.environmentSettings.policies.generateRegex.useMutation({	CODE
CRITICAL	…onents/charts/line-chart/hooks/use-fetch-timeseries.ts	60	trpc.ratelimit.overview.logs.queryRatelimitLatencyTimeseries.useQuery(queryParams, {	CODE
CRITICAL	…rt-role/components/assign-key/hooks/use-search-keys.ts	15	const { data, isLoading, error } = trpc.authorization.roles.keys.search.useQuery(	CODE
CRITICAL	…ert-role/components/assign-key/hooks/use-fetch-keys.ts	11	trpc.authorization.roles.keys.query.useInfiniteQuery(	CODE
CRITICAL	…view-table/hooks/use-ratelimits-overview-list-query.ts	110	const { data, isLoading, isFetching } = trpc.ratelimit.overview.logs.query.useQuery(	CODE
CRITICAL	…view-table/hooks/use-ratelimits-overview-list-query.ts	127	utils.ratelimit.overview.logs.query.prefetch(params, PAGINATED_LIST_PREFETCH_OPTIONS),	CODE
CRITICAL	…onents/actions/keys-table-action.popover.constants.tsx	53	trpcUtils.authorization.roles.keys.query.prefetchInfinite({	CODE
CRITICAL	svc/krane/internal/deployment/workload_test.go	188	require.Equal(t, "100%", desired.Spec.Strategy.RollingUpdate.MaxSurge.String())	CODE
CRITICAL	svc/krane/internal/deployment/workload_test.go	189	require.Equal(t, 0, desired.Spec.Strategy.RollingUpdate.MaxUnavailable.IntValue())	CODE
CRITICAL	svc/krane/internal/deployment/workload_test.go	212	require.Equal(t, "1", d.Spec.Strategy.RollingUpdate.MaxSurge.String())	CODE

Verbosity Indicators50 hits · 88 pts

Severity	File	Line	Snippet	Context
LOW⚡	internal/services/ratelimit/db/generate.go	5	// Step 1: remove stale *_generated.go files so renamed or deleted queries	COMMENT
LOW⚡	internal/services/ratelimit/db/generate.go	9	// Step 2: build the shared sqlc bulk-insert plugin used by sqlc.json.	COMMENT
LOW⚡	internal/services/ratelimit/db/generate.go	12	// Step 3: run sqlc, which reads sqlc.json, parses queries/, and emits	COMMENT
LOW⚡	internal/services/ratelimit/db/generate.go	16	// Step 4: delete deleteme.go because database.go already provides the	COMMENT
LOW⚡	internal/services/keys/db/generate.go	5	// Step 1: remove stale *_generated.go files so renamed or deleted queries	COMMENT
LOW⚡	internal/services/keys/db/generate.go	9	// Step 2: run sqlc, which reads sqlc.json, parses queries/, and emits	COMMENT
LOW⚡	internal/services/keys/db/generate.go	13	// Step 3: delete deleteme.go because database.go already provides the	COMMENT
LOW⚡	svc/frontline/internal/db/generate.go	5	// Step 1: remove stale *_generated.go files so renamed or deleted queries	COMMENT
LOW⚡	svc/frontline/internal/db/generate.go	9	// Step 2: run sqlc, which reads sqlc.json, parses queries/, and emits	COMMENT
LOW⚡	svc/frontline/internal/db/generate.go	13	// Step 3: delete deleteme.go because database.go already provides the	COMMENT
LOW	…c/ctrl/worker/certificate/process_challenge_handler.go	71	// Step 1: Resolve domain	COMMENT
LOW	…c/ctrl/worker/certificate/process_challenge_handler.go	100	// Step 2: Claim the challenge	COMMENT
LOW	…c/ctrl/worker/certificate/process_challenge_handler.go	119	// Step 3: Obtain certificate via DNS-01 challenge	COMMENT
LOW⚡	…c/ctrl/worker/certificate/process_challenge_handler.go	189	// Step 5: Persist certificate to DB	COMMENT
LOW⚡	…c/ctrl/worker/certificate/process_challenge_handler.go	197	// Step 6: Mark challenge as verified	COMMENT
LOW	svc/ctrl/worker/customdomain/verify_handler.go	117	// Step 1: Try CNAME verification. This works for subdomains with a real CNAME record.	COMMENT
LOW	svc/ctrl/worker/customdomain/verify_handler.go	128	// Step 2: Check if TXT verification is needed.	COMMENT
LOW	svc/api/integration/cluster/cache/e2e_test.go	40	// Step 1: Populate cache on all nodes by making API calls	COMMENT
LOW⚡	svc/api/integration/cluster/cache/e2e_test.go	58	// Step 2: Delete API from first node (this should trigger distributed invalidation)	COMMENT
LOW⚡	svc/api/integration/cluster/cache/e2e_test.go	67	// Step 3: Verify cache invalidation propagates to all nodes within 5 seconds	COMMENT
LOW	svc/api/integration/cluster/cache/e2e_test.go	125	// Step 4: Verify all nodes consistently return 404 for the deleted API	COMMENT
LOW	svc/api/integration/multi_node_ratelimiting/run.go	32	// Step 1: Set up test resources	COMMENT
LOW	svc/api/integration/multi_node_ratelimiting/run.go	61	// Step 2: Calculate test parameters	COMMENT
LOW	svc/api/integration/multi_node_ratelimiting/run.go	82	// Step 3: Calculate expected limits	COMMENT
LOW	svc/api/integration/multi_node_ratelimiting/run.go	117	// Step 4: Run the load test	COMMENT
LOW	svc/api/integration/multi_node_ratelimiting/run.go	159	// Step 5: Verify results	COMMENT
LOW	svc/api/integration/multi_node_ratelimiting/run.go	180	// Step 6: Verify ClickHouse Ratelimit data	COMMENT
LOW	svc/api/integration/multi_node_ratelimiting/run.go	216	// Step 6: Verify Clickhouse Metrics Data	COMMENT
LOW	svc/api/integration/multi_node_usagelimiting/run.go	31	// Step 1: Set up test resources	COMMENT
LOW	svc/api/integration/multi_node_usagelimiting/run.go	58	// Step 2: Calculate test parameters	COMMENT
LOW	svc/api/integration/multi_node_usagelimiting/run.go	83	// Step 3: Calculate expected limits	COMMENT
LOW	svc/api/integration/multi_node_usagelimiting/run.go	96	// Step 4: Run the load test	COMMENT
LOW	svc/api/integration/multi_node_usagelimiting/run.go	134	// Step 5: Verify results	COMMENT
LOW	svc/api/integration/multi_node_usagelimiting/run.go	159	// Step 6: Verify ClickHouse Verification data	COMMENT
LOW	svc/api/integration/multi_node_usagelimiting/run.go	196	// Step 7: Verify Clickhouse Metrics Data	COMMENT
LOW	…ion/multi_node_usagelimiting/accuracy/accuracy_test.go	121	// Step 1: Set up test resources	COMMENT
LOW	…ion/multi_node_usagelimiting/accuracy/accuracy_test.go	137	// Step 2: Run concurrent load test	COMMENT
LOW	…ion/multi_node_usagelimiting/accuracy/accuracy_test.go	212	// Step 3: Verify accuracy	COMMENT
LOW	…ion/multi_node_usagelimiting/accuracy/accuracy_test.go	257	// Step 4: Verify final state in database with polling-based wait	COMMENT
LOW⚡	svc/api/openapi/generate_bundle.go	41	// Step 1: Preprocess paths to inline external references	COMMENT
LOW⚡	svc/api/openapi/generate_bundle.go	48	// Step 2: Configure libopenapi for bundling	COMMENT
LOW	svc/api/openapi/generate_bundle.go	69	// Step 3: Bundle all references into a single document	COMMENT
LOW	svc/api/routes/v2_keys_update_key/three_state_test.go	606	// Step 1: Add credits with refill	COMMENT
LOW	svc/api/routes/v2_keys_update_key/three_state_test.go	621	// Step 2: Clear refill only	COMMENT
LOW	svc/api/routes/v2_keys_update_key/three_state_test.go	637	// Step 3: Add back refill without changing remaining	COMMENT
LOW	svc/api/routes/v2_keys_update_key/three_state_test.go	657	// Step 4: Clear everything	COMMENT
LOW	…c/api/routes/v2_identities_delete_identity/200_test.go	247	// Step 1: Create initial identity with "Advanced" tier ratelimit (300k/month)	COMMENT
LOW⚡	…c/api/routes/v2_identities_delete_identity/200_test.go	264	// Step 2: Delete old identity (tier downgrade starts)	COMMENT
LOW⚡	…c/api/routes/v2_identities_delete_identity/200_test.go	269	// Step 3: Create new identity with "Starter" tier ratelimit (20k/month)	COMMENT
LOW	…c/api/routes/v2_identities_delete_identity/200_test.go	286	// Step 4: Delete new identity (this is where the bug used to happen)	COMMENT

Example Usage Blocks50 hits · 75 pts

Severity	File	Line	Snippet	Context
LOW	internal/sdk/optionalnullable/optionalnullable.go	211	// Example usage:	COMMENT
LOW	internal/services/ratelimit/metrics/prometheus.go	50	// Example usage:	COMMENT
LOW	internal/services/ratelimit/metrics/prometheus.go	65	// Example usage:	COMMENT
LOW	internal/services/ratelimit/metrics/prometheus.go	80	// Example usage:	COMMENT
LOW	internal/services/ratelimit/metrics/prometheus.go	102	// Example usage:	COMMENT
LOW	internal/services/ratelimit/metrics/prometheus.go	122	// Example usage:	COMMENT
LOW	internal/services/ratelimit/metrics/prometheus.go	142	// Example usage:	COMMENT
LOW	internal/services/ratelimit/metrics/prometheus.go	171	// Example usage:	COMMENT
LOW	internal/services/ratelimit/metrics/prometheus.go	187	// Example usage:	COMMENT
LOW	internal/services/ratelimit/metrics/prometheus.go	228	// Example usage:	COMMENT
LOW	internal/services/ratelimit/metrics/prometheus.go	245	// Example usage:	COMMENT
LOW	internal/services/ratelimit/metrics/prometheus.go	262	// Example usage:	COMMENT
LOW	internal/services/ratelimit/metrics/prometheus.go	277	// Example usage:	COMMENT
LOW	internal/services/ratelimit/metrics/prometheus.go	293	// Example usage:	COMMENT
LOW	internal/services/ratelimit/metrics/prometheus.go	309	// Example usage:	COMMENT
LOW	internal/services/keys/metrics/prometheus.go	38	// Example usage:	COMMENT
LOW	internal/services/keys/metrics/prometheus.go	67	// Example usage:	COMMENT
LOW	internal/services/usagelimiter/metrics/prometheus.go	39	// Example usage:	COMMENT
LOW	internal/services/usagelimiter/metrics/prometheus.go	56	// Example usage:	COMMENT
LOW	internal/services/usagelimiter/metrics/prometheus.go	72	// Example usage:	COMMENT
LOW	svc/ctrl/internal/db/custom_types.go	52	// Example usage:	COMMENT
LOW	dev/k8s/topolvm/setup-vg.sh	7	# Usage:	COMMENT
LOW	pkg/clickhouse/doc.go	16	// Example usage:	COMMENT
LOW	pkg/rbac/lexer.go	103	// Example usage:	COMMENT
LOW	pkg/rbac/parser.go	51	// Example usage:	COMMENT
LOW	pkg/cache/metrics/prometheus.go	12	// Example usage:	COMMENT
LOW	pkg/cache/metrics/prometheus.go	30	// Example usage:	COMMENT
LOW	pkg/cache/metrics/prometheus.go	47	// Example usage:	COMMENT
LOW	pkg/cache/metrics/prometheus.go	62	// Example usage:	COMMENT
LOW	pkg/cache/metrics/prometheus.go	77	// Example usage:	COMMENT
LOW	pkg/cache/metrics/prometheus.go	168	// Example usage:	COMMENT
LOW	pkg/hash/doc.go	12	// Example usage:	COMMENT
LOW	pkg/zen/context.go	9	// Example usage:	COMMENT
LOW	pkg/zen/context.go	56	// Usage example:	COMMENT
LOW	pkg/zen/context.go	88	// Usage example:	COMMENT
LOW	pkg/zen/metrics/prometheus.go	53	// Example usage:	COMMENT
LOW	pkg/zen/metrics/prometheus.go	74	// Example usage:	COMMENT
LOW	pkg/zen/metrics/prometheus.go	92	// Example usage:	COMMENT
LOW	pkg/batch/metrics/prometheus.go	29	// Example usage:	COMMENT
LOW	pkg/batch/metrics/prometheus.go	56	// Example usage:	COMMENT
LOW	pkg/batch/metrics/prometheus.go	76	// Example usage:	COMMENT
LOW	pkg/batch/metrics/prometheus.go	92	// Example usage:	COMMENT
LOW	pkg/ptr/deref.go	29	// Example usage:	COMMENT
LOW	pkg/db/custom_types.go	52	// Example usage:	COMMENT
LOW	pkg/prometheus/metrics/panic.go	17	// Example usage:	COMMENT
LOW	pkg/fault/wrapped.go	148	// Example usage:	COMMENT
LOW	pkg/circuitbreaker/doc.go	16	// Example usage:	COMMENT
LOW	pkg/circuitbreaker/metrics/prometheus.go	12	// Example usage:	COMMENT
LOW	pkg/buffer/metrics/prometheus.go	22	// Example usage:	COMMENT
LOW	pkg/buffer/metrics/prometheus.go	38	// Example usage:	COMMENT

Fake / Example Data39 hits · 42 pts

Severity	File	Line	Snippet	Context
LOW	contributing/quality/testing/unit-tests.md	23	{name: "valid email", email: "user@example.com", wantErr: false},	CODE
LOW	web/internal/resend/emails/free_tier_exceeded.tsx	46	workspaceName: "Acme Inc",	CODE
LOW	web/internal/resend/emails/compute_budget_alert.tsx	41	workspaceName: "Acme Inc",	CODE
LOW	web/internal/resend/emails/free_tier_throttled.tsx	39	workspaceName: "Acme Inc",	CODE
LOW	web/internal/resend/emails/compute_budget_stopped.tsx	44	workspaceName: "Acme Inc",	CODE
LOW	…p)/[workspaceSlug]/settings/team/managed-team.test.tsx	149	mocks.impersonator = { email: "admin@example.com" };	CODE
LOW	…apis/[apiId]/portal/components/portal-preview.test.tsx	14	displayName={overrides?.displayName ?? "Acme Inc"}	CODE
LOW	…apis/[apiId]/portal/components/portal-preview.test.tsx	26	renderPreview({ displayName: "Acme Inc" });	CODE
LOW	…apis/[apiId]/portal/components/portal-preview.test.tsx	27	expect(screen.getByText("Acme Inc")).toBeTruthy();	CODE
LOW⚡	…apiId]/portal/components/create-portal-dialog.test.tsx	173	fireEvent.change(displayNameInput(), { target: { value: "Acme Inc" } });	CODE
LOW⚡	…apiId]/portal/components/create-portal-dialog.test.tsx	182	fireEvent.change(displayNameInput(), { target: { value: "Acme Inc" } });	CODE
LOW⚡	…apiId]/portal/components/create-portal-dialog.test.tsx	184	await waitFor(() => expect(displayNameInput().value).toBe("Acme Inc"));	CODE
LOW	…ard/app/(app)/[workspaceSlug]/account/account.test.tsx	221	mocks.impersonator = { email: "admin@example.com" };	CODE
LOW	web/apps/dashboard/lib/auth/local.ts	38	email: "admin@example.com",	CODE
LOW	web/apps/dashboard/lib/auth/tests/workos-admin.test.ts	58	email: "user@example.com",	CODE
LOW	web/apps/dashboard/lib/auth/tests/workos-admin.test.ts	95	email: "user@example.com",	CODE
LOW	web/apps/dashboard/lib/auth/tests/workos-admin.test.ts	286	email: "user@example.com",	CODE
LOW	…/apps/dashboard/lib/auth/tests/authkit-adapter.test.ts	59	email: "user@example.com",	CODE
LOW	…trpc/routers/deploy/deployment/list-active-branches.ts	100	row.gitCommitAuthorAvatarUrl ?? "https://github.com/identicons/dummy-user.png",	CODE
LOW	…dashboard/lib/trpc/routers/user/getCurrentUser.test.ts	21	email: "user@example.com",	CODE
LOW	web/apps/dashboard/lib/utils/slackAlerts.test.ts	33	expect(escapeSlackText("Acme\r\n\tInc")).toBe("Acme Inc");	CODE
LOW	web/apps/dashboard/lib/schemas/identity-forms.test.ts	19	expect(identityExternalIdSchema.safeParse("user@example.com").success).toBe(false);	CODE
LOW	…b/apps/dashboard/lib/collections/deploy/deployments.ts	139	const DEFAULT_AVATAR_URL = "https://github.com/identicons/dummy-user.png";	CODE
LOW	svc/ctrl/integration/deploy_spend_realert_test.go	63	Admins: fixedAdmins{email: "admin@example.com"},	CODE
LOW	svc/api/openapi/gen.go	5324	// Example: {"billing":{"renewal":"2024-12-31","tier":"premium"},"customerName":"Acme Corp","featureFlags":{"betaAccess	COMMENT
LOW	svc/api/openapi/gen.go	5507	// Example: {"billing":{"renewal":"2024-12-31","tier":"premium"},"customerName":"Acme Corp","featureFlags":{"betaAccess	COMMENT
LOW	svc/api/routes/v2_keys_whoami/200_test.go	180	"created_by": "admin@example.com",	CODE
LOW	svc/api/routes/v2_identities_get_identity/200_test.go	140	strings.Repeat("Lorem ipsum dolor sit amet ", 50),	CODE
LOW	svc/api/routes/v2_identities_get_identity/200_test.go	140	strings.Repeat("Lorem ipsum dolor sit amet ", 50),	CODE
LOW	svc/api/routes/v2_keys_get_key/200_test.go	196	"created_by": "admin@example.com",	CODE
LOW	…c/api/routes/v2_identities_create_identity/200_test.go	263	"name": "John Doe",	CODE
LOW	svc/vault/internal/vault/corruption_detection_test.go	424	"fake-key-id",	CODE
LOW	pkg/zen/session_bind_query_test.go	217	queryValues.Add("name", "John Doe")	CODE
LOW	pkg/zen/session_bind_query_test.go	230	assert.Equal(t, "John Doe", target.Name)	CODE
LOW	pkg/redaction/openapi_test.go	335	string(r.Redact([]byte(`[{"identifier":"user@example.com"},{"identifier":"1.2.3.4"}]`))),	CODE
LOW	pkg/workos/client_test.go	74	adminID: "admin@example.com",	CODE
LOW	pkg/workos/client_test.go	75	duplicateID: "admin@example.com",	CODE
LOW	pkg/workos/client_test.go	91	want := []string{"member@example.com", "admin@example.com"}	CODE
LOW	pkg/workos/client_test.go	94	want = []string{"admin@example.com", "admin@example.com"}	CODE

Modern AI Meta-Vocabulary8 hits · 28 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	internal/services/ratelimit/db/generate.go	13	// typed Go code plus a scaffold db file named "deleteme.go".	COMMENT
MEDIUM	internal/services/ratelimit/db/doc.go	14	// pkg/mysql/schema and queries in queries/, and removes the scaffold db file	COMMENT
MEDIUM⚡	internal/services/keys/db/generate.go	10	// typed Go code plus a scaffold db file named "deleteme.go".	COMMENT
MEDIUM⚡	svc/frontline/internal/db/generate.go	10	// typed Go code plus a scaffold db file named "deleteme.go".	COMMENT
MEDIUM	svc/frontline/internal/db/doc.go	24	// the temporary db scaffold file that sqlc emits (see generate.go and	COMMENT
MEDIUM	svc/ctrl/worker/deploy/build.go	215	// gitBuildContext carries the inputs that the shared git-build scaffold	COMMENT
MEDIUM	svc/ctrl/worker/deploy/railpack.go	133	// Names are already validated by the scaffold; the template only	COMMENT
MEDIUM	svc/ctrl/services/ops/rebuild_deployment.go	12	// authentication. See the proto doc for semantics and guardrails.	COMMENT

AI Slop Vocabulary7 hits · 21 pts

Severity	File	Line	Snippet	Context
MEDIUM	web/apps/dashboard/components/logs/parse-timestamp.ts	42	// Parse timestamp to number with robust validation	COMMENT
MEDIUM	web/apps/dashboard/components/logs/utils.tsx	159	// Normalize timestamps to numeric for robust comparison	COMMENT
MEDIUM	…/deployment_list_running_by_workspace.sql_generated.go	44	// at least one live instance. The instance check makes this robust to a stale	COMMENT
MEDIUM	svc/ctrl/internal/db/querier_generated.go	2311	// at least one live instance. The instance check makes this robust to a stale	COMMENT
MEDIUM	pkg/fault/doc.go	2	// building robust applications with rich error context and secure user messaging.	COMMENT
MEDIUM	pkg/circuitbreaker/lib.go	65	// tiny sample can't trip it. This is robust to traffic volume — a brief	COMMENT
MEDIUM	pkg/testutil/docker-compose.test.yaml	129	# leadership independently on cold start. The harness readiness gate probes	COMMENT

Synthetic Comment Markers1 hit · 8 pts

Severity	File	Line	Snippet	Context
HIGH	svc/api/routes/v2_root_keys_create_key/security_test.go	123	// stored exactly as requested for the new root key.	COMMENT

Redundant / Tautological Comments1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	dev/setup-wildcard-dns.sh	24	# Check if dnsmasq is installed	COMMENT

unkeyed/unkey

Open-Source Code Quality, Security and Technical Debt Review