{"schemaVersion":1,"run":{"id":"regression-20261022-0e4055c7","createdAt":"2026-10-22T01:08:12.000246+00:00","source":{"repository":"https://github.com/duriantaco/skylos","revision":"0e4055c70e3d8f1b0409227e4f16f6c514b3b5a4","clean":true,"trackedInputSha256":"7c0e8aa3db338ff65ab93cdbaa483dd2ee98874524111b67c2cb66e96ad4e466","inputCount":144,"inputInventoryCommand":["git","ls-files","-z","--","benchmarks/dead_code/manifest.json","benchmarks/dead_code/fixtures/basic_unused_symbols","benchmarks/dead_code/fixtures/fastapi_route_used","benchmarks/dead_code/fixtures/dynamic_registry_used","benchmarks/dead_code/fixtures/local_registration_decorator","benchmarks/dead_code/fixtures/explicit_reexports","benchmarks/dead_code/fixtures/annotation_metadata_scope","benchmarks/dead_code/fixtures/sqlalchemy_mixed_models","benchmarks/dead_code/fixtures/flask_cli_blueprint","benchmarks/dead_code/fixtures/package_service_layers","benchmarks/dead_code/fixtures/django_management_command","benchmarks/dead_code/fixtures/celery_tasks","benchmarks/dead_code/fixtures/pytest_fixtures","benchmarks/dead_code/fixtures/pydantic_validators","benchmarks/dead_code/fixtures/alembic_migration","benchmarks/dead_code/fixtures/importlib_plugins","benchmarks/dead_code/fixtures/package_entrypoints","benchmarks/dead_code/fixtures/go_service","benchmarks/dead_code/fixtures/java_service","benchmarks/dead_code/fixtures/java_fxml_controller","benchmarks/dead_code/fixtures/typescript_vscode_pseudoterminal","benchmarks/dead_code/fixtures/ts_js_package","benchmarks/security/manifest.json","benchmarks/security/fixtures/sql_tainted_param","benchmarks/security/fixtures/sql_constant_format","benchmarks/security/fixtures/ssrf_tainted_host","benchmarks/security/fixtures/ssrf_helper_parameter_safe","benchmarks/security/fixtures/ssrf_fixed_host_path","benchmarks/security/fixtures/subprocess_alias_shell","benchmarks/security/fixtures/yaml_safeloader_positional","benchmarks/security/fixtures/path_traversal_tainted_join","benchmarks/security/fixtures/path_traversal_basename","benchmarks/security/fixtures/xss_mark_safe","benchmarks/security/fixtures/xss_escape_safe","benchmarks/security/fixtures/open_redirect_tainted","benchmarks/security/fixtures/open_redirect_local_guard","benchmarks/security/fixtures/jwt_verify_disabled","benchmarks/security/fixtures/cors_wildcard","benchmarks/security/fixtures/go_zip_slip","benchmarks/security/fixtures/go_zip_slip_safe","benchmarks/security/fixtures/java_path_traversal","benchmarks/security/fixtures/java_path_traversal_safe","benchmarks/security/fixtures/typescript_eval","benchmarks/security/fixtures/csharp_command_injection","benchmarks/security/fixtures/csharp_command_literal_safe","benchmarks/security/fixtures/csharp_sql_injection","benchmarks/security/fixtures/csharp_sql_parameterized_safe","benchmarks/security/fixtures/csharp_ssrf","benchmarks/security/fixtures/csharp_ssrf_fixed_host_safe","benchmarks/security/fixtures/csharp_path_traversal","benchmarks/security/fixtures/csharp_path_basename_safe","benchmarks/security/fixtures/csharp_open_redirect","benchmarks/security/fixtures/csharp_open_redirect_literal_safe","benchmarks/security/fixtures/php_unserialize","benchmarks/security/fixtures/php_json_decode_safe","benchmarks/security/fixtures/php_path_traversal","benchmarks/security/fixtures/php_path_basename_safe","benchmarks/security/fixtures/typescript_eval_safe","benchmarks/security/fixtures/typescript_nextjs_author_shadow","benchmarks/security/fixtures/typescript_nextjs_auth_decoys","benchmarks/security/fixtures/typescript_nextjs_session_guard","benchmarks/security/fixtures/typescript_nextjs_authjs_v5_safe","benchmarks/security/fixtures/typescript_server_action_prisma_unsafe","benchmarks/security/fixtures/typescript_server_action_constant_safe","benchmarks/security/fixtures/typescript_server_action_inline_unsafe","benchmarks/security/fixtures/typescript_server_action_repository_unsafe","benchmarks/security/fixtures/typescript_server_action_query_config_safe","benchmarks/security/fixtures/typescript_server_action_trusted_runtime_safe","benchmarks/security/fixtures/typescript_server_action_prisma_tag_safe","benchmarks/security/fixtures/typescript_webhook_unverified","benchmarks/security/fixtures/typescript_webhook_nondominating_verifier","benchmarks/security/fixtures/typescript_webhook_verified","benchmarks/security/fixtures/typescript_cookie_explicit_false","benchmarks/security/fixtures/typescript_cookie_literal_safe","benchmarks/security/fixtures/java_ssrf_httpclient_send","benchmarks/security/fixtures/java_open_redirect_protocol_relative","benchmarks/security/fixtures/java_ldap_xpath_injection","benchmarks/security/fixtures/go_command_shell_query","benchmarks/security/fixtures/go_tar_symlink_escape","benchmarks/security/fixtures/rust_shell_arg_taint","benchmarks/security/fixtures/rust_path_filename_safe","benchmarks/security/fixtures/dart_http_tainted_url","benchmarks/security/fixtures/dart_uri_https_safe","benchmarks/security/fixtures/php_request_include","benchmarks/security/fixtures/shell_eval_arg","benchmarks/security/fixtures/shell_source_arg","benchmarks/security/fixtures/shell_c_flag_arg","benchmarks/security/fixtures/shell_curl_tainted_url","benchmarks/security/fixtures/shell_curl_fixed_host_path","benchmarks/security/fixtures/shell_path_read_arg","benchmarks/security/fixtures/shell_basename_safe","benchmarks/quality/manifest.json","benchmarks/quality/fixtures/complexity_hotspot","benchmarks/quality/fixtures/long_function","benchmarks/quality/fixtures/argument_overload","benchmarks/quality/fixtures/inconsistent_return","benchmarks/quality/fixtures/empty_error_handler","benchmarks/quality/fixtures/type_annotation_gaps","benchmarks/quality/fixtures/type_annotation_coverage_only","benchmarks/quality/fixtures/framework_route_policy","benchmarks/quality/fixtures/opaque_identifier","benchmarks/quality/fixtures/repo_policy_missing_typechecker","benchmarks/quality/fixtures/clean_module","benchmarks/quality/fixtures/typescript_async_loop_duplicate_condition","benchmarks/quality/fixtures/typescript_type_safety_unsafe","benchmarks/quality/fixtures/typescript_type_safety_clean","benchmarks/quality/samples/typescript_quality_signals_unsafe","benchmarks/quality/samples/typescript_quality_signals_clean","benchmarks/quality/fixtures/python_mutable_alias_unsafe","benchmarks/quality/fixtures/python_mutable_alias_clean","benchmarks/quality/fixtures/go_service_quality_hotspot","benchmarks/quality/fixtures/java_service_quality_hotspot"],"files":[{"path":"pyproject.toml","sha256":"63dbb0038720526939fbfab9e7f3f93054f7bec87b08a7425ee1956b324fecff"},{"path":"skylos/__init__.py","sha256":"e4fcb90e567fe9861069fc82a76afaf4e0840fb76b33dedf2e763eda08260b27"},{"path":"skylos/adapters/__init__.py","sha256":"c1f3453a81a6bd9799ea987a08c7fd13eb8073452098999c54f4405965e19194"},{"path":"skylos/adapters/base.py","sha256":"bd5696cd645cab8d4a484ad463c2cf76bc9ec645609e88587517f043bf153c84"},{"path":"skylos/adapters/litellm_adapter.py","sha256":"e30e4601b4681014f74546b3eeb565d3f2a1571764482c11e4bddb901548dcd8"},{"path":"skylos/agents/__init__.py","sha256":"9528dbe9dc68444deab00010767b9b9079f8a2f5c6141c2231c057e3bc2053f8"},{"path":"skylos/agents/center.py","sha256":"58665d579085f743411e81d193de8d845c39c9d0fe83ec7026eb3774276b69d4"},{"path":"skylos/agents/evaluation/__init__.py","sha256":"67d454fe2968b12a1274dbc692acfc444ecdf8c4b5847491333c48c17ab88e2f"},{"path":"skylos/agents/evaluation/_assertion_helpers.py","sha256":"c15f29a5f62eda2b7b543cb76ec3fb5e13c4d2aac6087c640054c475fa722c53"},{"path":"skylos/agents/evaluation/_loader_support.py","sha256":"36fd19d651caa0503371ae0de92d43f1d44bf2a499ffd750a57de4d2c1761d9b"},{"path":"skylos/agents/evaluation/_openai_response.py","sha256":"1ce119d2a030f9cf18c995a7ab69f5ae9cb16a81ada3a5043b4db23a038c98e9"},{"path":"skylos/agents/evaluation/_openai_transport.py","sha256":"9e56b2cf5886ceba6d22c860ec98a5211fe9191e4ce5b10501ab10ecdeee6678"},{"path":"skylos/agents/evaluation/_runner_evidence.py","sha256":"60b5967c5c4c4204d7de04e40cb0c1a69224143bee01979902cf418fb84ec732"},{"path":"skylos/agents/evaluation/_tool_evaluator.py","sha256":"63e38ed0ceb82766571476356550b041c31887c4c0e7801ccd1ba18fabba3af3"},{"path":"skylos/agents/evaluation/evaluator.py","sha256":"3b339a95ff95df28666b4034c2ad73fd2054fb37bae431994396d99daca370d4"},{"path":"skylos/agents/evaluation/evidence.py","sha256":"92200560c68ec077902f8888fd2e35e34912f96fe1144f6f2179ce051cdc330b"},{"path":"skylos/agents/evaluation/loader.py","sha256":"9cdac63221a966958261addb208c5046f42d3437bec35092a40541bb1bb3adb7"},{"path":"skylos/agents/evaluation/observation_loader.py","sha256":"4982b9b6f4827caf2a7b516e49269e3a304e5d1c158460671cc605b8ad31647c"},{"path":"skylos/agents/evaluation/openai_chat.py","sha256":"8f473fc457c51d689ec58b827013bad1bc477c52ab977329b446a92fe392517a"},{"path":"skylos/agents/evaluation/runner.py","sha256":"d5bf813f485def40d568ef7003da9dd2d3dc19746b0f81724175f1be9751661a"},{"path":"skylos/agents/evaluation/schema.py","sha256":"7b89d149ee8009c30c5d59911824a90240d14357e503d8565f7dd83db17833e5"},{"path":"skylos/agents/payload.py","sha256":"25b2cc12f9904a996ef3c1ce8a2b86d620fc03fe05cea7c076e8c3e02c2b9c0c"},{"path":"skylos/agents/service.py","sha256":"5e62322bf73d9177d6aee87faeaf17a5a528fd16d71e70ea43e9336c10498115"},{"path":"skylos/agents/triage_learner.py","sha256":"eea9e4479192bed501ae2a83b3384e44d65c2a076c3c36928cfd810ebfdc8adf"},{"path":"skylos/analysis/__init__.py","sha256":"07ef978e667afa1da6ec97f16629b30e6c7925a1ed3cfd44204d81ecd0d8f4ea"},{"path":"skylos/analysis/architecture.py","sha256":"92bfe0e82dc2e091b0233776982a183835214f4839c3f1c4d2c4db6172ecf50d"},{"path":"skylos/analysis/architecture_findings.py","sha256":"72e1b4ca1e4fc9b520341acb573dd8cb939c2d7f6a347ee948ff190b29ca6d9a"},{"path":"skylos/analysis/architecture_layers.py","sha256":"6d763b44df42247919953bbd85595a14be5944449370e27c1ce7678795ec3715"},{"path":"skylos/analysis/architecture_support.py","sha256":"50801685074eacf602e9aad7fa26f0dffd01da90a6cb4bd60e67d5534c0a2745"},{"path":"skylos/analysis/ast_cache.py","sha256":"aa26e621e1a71e727f7565076806720c4bd3ca08ee47fbb6e636400086bbea6e"},{"path":"skylos/analysis/ast_mask.py","sha256":"2694b9ecc03fa641851728dc83f70992499be9915e0e91b342d450dd670a9f0c"},{"path":"skylos/analysis/attribute_refs.py","sha256":"1149f86f39c6e9aa0f122f5822896e9214b37a6fc448069c29f100e4708e6a48"},{"path":"skylos/analysis/circular_deps.py","sha256":"468e342f31af35a572f5e4156014158d21cebcf8d5cec23aecbf73174f6eb3e5"},{"path":"skylos/analysis/control_flow.py","sha256":"00b9d98ba127f6a97fc107802ff1b5aa088dd5a2abb819b09c34e11106a26282"},{"path":"skylos/analysis/credential_sources.py","sha256":"641aa77b24e6bbd2c05acd3009dd3c66a82ca126c148919ebdd7c060cc00720e"},{"path":"skylos/analysis/documented_conventions.py","sha256":"07efc8e88674f39cf44daccf23010bfbaa9b446f3f82e1942bfea4f08b10d0ce"},{"path":"skylos/analysis/errors.py","sha256":"c4a91ca1c82b5ce0c2c372a55e4544c9b55a0251d1d5cd8c406a7f0261da5ca2"},{"path":"skylos/analysis/external_bases.py","sha256":"0beb37a5a5843738aa153013bee63f0daec51ee0a1f509f01df1320461a320a7"},{"path":"skylos/analysis/file_processing.py","sha256":"a49d54a4f7396de71e67a76e9cf5b5b05ff06410e9890554a834369cfbebe29d"},{"path":"skylos/analysis/file_worker.py","sha256":"21aabcae36b3c64401ac11922f17e0b3aa2d218d5fb3a2146e236d082c45ae34"},{"path":"skylos/analysis/finding_filter.py","sha256":"90508799faaa294a04a73b369843904fa90a4746d7a344ec1ff38f75bc28b11e"},{"path":"skylos/analysis/implicit_refs.py","sha256":"fd90d90346e86fd3768676b58c3e14d6fccd864f87a2ec31d0608b784206e55a"},{"path":"skylos/analysis/known_patterns.py","sha256":"e74a2920b659e645bafece832e07b72cf7deeb26c4da03efdd151191c90e993b"},{"path":"skylos/analysis/metric_imports.py","sha256":"4507e4c235abc05223dd4c2ad5052814443d5ae7ac7f809b5c8a50dd0461f4e9"},{"path":"skylos/analysis/module_reachability.py","sha256":"602bfc2abc3140e829d1113535b433cf19befa76c0d98acd479e40b8793f392f"},{"path":"skylos/analysis/penalties.py","sha256":"5df8dac77e5f00b52aca308065b79d8181eba7fa4042ca0bd3c059c55946ec28"},{"path":"skylos/analysis/pyproject_entrypoints.py","sha256":"9fe61c1caae1f2bd55df375b29b38176a77acd9c8530e32115ca0c683b894f40"},{"path":"skylos/analysis/typescript_architecture.py","sha256":"768353e94ec94a8b665fb721fbf9d7169ddcb8889bf19a8363ca35db495c2aa1"},{"path":"skylos/analysis/typing_policy.py","sha256":"14087f18ece5cc312af8be0756221715bcb1145e1d9681dde97eb2c04e646b3b"},{"path":"skylos/analysis/typing_scope.py","sha256":"f795d7717f152cf0d0ee7c5f5f830abb41e9e2bc56501edf412a7971cfffdea5"},{"path":"skylos/analyzer.py","sha256":"10360c3d3dadbe228b766005c30d0f181157e1667477bcea6ed9b6f47c2b0268"},{"path":"skylos/api/__init__.py","sha256":"61f4965fd03090b24d0530fa5f62ab559e5fd43ef7e06dd37948d13c51a93179"},{"path":"skylos/api/_ai_detection.py","sha256":"a95ceb22b663bc69f50ae4d89b7172cdf909d73f32ac7d70a38a569ded784352"},{"path":"skylos/api/_artifacts.py","sha256":"939775bf5d6792e3599708abe7e7bd86ade697dcb69e84e93038d9495c7b422e"},{"path":"skylos/api/_contract_check.py","sha256":"bd9ee3cfb4aeeeccad4a5592ff02570f8360a4e57bc8529001ae82b06f9d0070"},{"path":"skylos/api/_findings.py","sha256":"086de2ea0f690ca28c45a491593817d02b85998271fde044300a2c1441ffebdf"},{"path":"skylos/api/_payloads.py","sha256":"21dd34ddffcb27b6c911470c0791d25e93440f07e6dc17d576e1f749e7732092"},{"path":"skylos/api/_pending_uploads.py","sha256":"b122568ced4cd4387a0444e489af4d7edf0d4e8dbeb25c3afab8738f4ecfecb4"},{"path":"skylos/api/_scan_coverage.py","sha256":"3d6e93021d2f80202bcb276082d83c651610d1beb6e913e41b7719ce912f0891"},{"path":"skylos/api/_snippets.py","sha256":"2c8ab95c653cf6ba154741bbfcda167b331c970609698ad0e0343b4563a8f3e8"},{"path":"skylos/api/_source_revision.py","sha256":"a05c3b26d7c3eed31d44d5a4111195d81e5d2b23db7696955d9ebdf679b89a22"},{"path":"skylos/api/_upload_contract.py","sha256":"aad7c515f228be5de9b47a6060341a89bba376df6bc1dc5135cbab14d030338e"},{"path":"skylos/api/_upload_paths.py","sha256":"0461f22f5515ece143694dc577655ed2457e84a8a194633f7f77190acaf21a66"},{"path":"skylos/api/_upload_preflight.py","sha256":"0c2ca9e25a90514d038f90c61066876e0741f94e35e24f063526b35703d67933"},{"path":"skylos/api/_upload_transport.py","sha256":"62f90fb7f59fbea188ce8528af8bb42e461bf00596371cd0e29491a5014b8da4"},{"path":"skylos/api/_urls.py","sha256":"2b7969524baedaae16f463b2cef75f195ddeafd281113efb7835760c9946c438"},{"path":"skylos/api/upload_contract/v1.json","sha256":"d92255262ef6ccc874e7d5993e9f96737a52ede2914836abc533889e8020e463"},{"path":"skylos/audit/__init__.py","sha256":"cf89c91193984b489778eed6f551425d692f890d333bd68418b6c1ef68e2f1a4"},{"path":"skylos/audit/candidates.py","sha256":"b32d3fe0b0899e82013bf0019cd141ca08ce22cd58c52328c4eccf767e48a2b8"},{"path":"skylos/audit/ci.py","sha256":"79a7408b8678714dd3771ea2a9c148d91dfe69469cbd4055c6e9a858d45d9da7"},{"path":"skylos/audit/export.py","sha256":"ecdb08816c3dd176ae289f9b71b51ea6a71cceda2f0f9be22d2cc02f6bf5676e"},{"path":"skylos/audit/freshness.py","sha256":"e3cecc38b1c49a1884ed7a46260747cace75e4206cbe0c10f0d126ef48243436"},{"path":"skylos/audit/investigator_tools/__init__.py","sha256":"df35084f7a717b15c066f34a80c7942d5dd81364aada376b95d49cb6bc1fd696"},{"path":"skylos/audit/investigator_tools/catalog.py","sha256":"0238d88b7b3a06f7da5ada3299cae68963ca5058f98970decf268ee10683f3b6"},{"path":"skylos/audit/investigator_tools/models.py","sha256":"1520c4d1a757ead0164756ed0fbd2351a7dfdb44eac2fb36f71969de29a811ab"},{"path":"skylos/audit/investigator_tools/operations.py","sha256":"1cd8f3c8c20deab64c37d37cb454ad8a3a34562e9a4be7b4cdea3162bac31452"},{"path":"skylos/audit/investigator_tools/rendering.py","sha256":"d073cc419804fab03b71df458d97e44ab13a74faacb86ec0f81a700e2ec4ecf2"},{"path":"skylos/audit/investigator_tools/safety.py","sha256":"88584270e0432dfc57e0eaf6a96dc86bab949878cf5640be3d45fa4c0fcefb20"},{"path":"skylos/audit/investigator_tools/session.py","sha256":"eb384c09f54717917854085502b383d760f0429810cfef3b11652a3143712eb4"},{"path":"skylos/audit/investigator_tools/validation.py","sha256":"6f677164aa4f8d292c241eeea390eea6b50b7d04277098ac6dd3bee04fbb00e0"},{"path":"skylos/audit/polyglot.py","sha256":"e9448948ad980e2c9c14de77e34ff00c69bc60c8942134322770b3c3ed480cf9"},{"path":"skylos/audit/processor.py","sha256":"42e38c8578e41982ca73c7d1800a5e0501ba0039252b2a1a1413153e51526b9a"},{"path":"skylos/audit/redaction.py","sha256":"ef81907b0671a810b8b3e83fa2ea05c52516dc4c244b4e3edb31d18128a83b03"},{"path":"skylos/audit/revalidation/__init__.py","sha256":"86d9a0244efbea101a65570f445462c08bc6c8f2ecf5ec99e1c76779a45c10b5"},{"path":"skylos/audit/revalidation/constants.py","sha256":"fab3259a7dabfe11d6874bf389791540467f3c50fb159c48d8e28c1ef2118ef5"},{"path":"skylos/audit/revalidation/evidence.py","sha256":"45f72d2713e408b7c78bd30c1397e2e900a62f63fd1ce71cb4fb013714b60a5a"},{"path":"skylos/audit/revalidation/policy.py","sha256":"0fe0d18121cb6f95ac7aaf4ec09df8fde680ef5a7449455090ffac9e3cd03037"},{"path":"skylos/audit/revalidation/verifiers.py","sha256":"d19a252649422415be5160b0bf1e86adc44f0767326ef896cd131fde3efd2ca1"},{"path":"skylos/audit/revalidator.py","sha256":"986af533642e00c9483fb2f7cca2b832afbdc899157fb6bec382a08ee5e22c64"},{"path":"skylos/audit/store.py","sha256":"d6d7a4df8613cc68479af15d897b9e70fd34270af9d6ec011685797d72c40134"},{"path":"skylos/audit/types.py","sha256":"1dfd216ce237bb9e53fe3d32b2d352588d4aad494655629345263b6819203168"},{"path":"skylos/benchmarks/__init__.py","sha256":"8bf510f84110f23e29bb07776c38c556b9b131b3849260b29b6544a61a4a15fc"},{"path":"skylos/benchmarks/_jev_dead_code_dataset.py","sha256":"f75a8bdb1f72e3a06e857f0b124dc4f91e6d5db43b0b7b7fe33dbd8f4039ee3c"},{"path":"skylos/benchmarks/_jev_dead_code_golden.py","sha256":"cdcafc571b612cc7b6265bc3dd7246cd2f9c28f016ef18b9f05ba0bd5053238f"},{"path":"skylos/benchmarks/_jev_dead_code_report.py","sha256":"b276013127020de09b11c3ff1d7d108c86f1628b3c17745be68a509ae4a59362"},{"path":"skylos/benchmarks/_jev_dead_code_types.py","sha256":"d26832aebb44907947805454f7cadc2c0a32cbbf5a57b7d59b9531311f075fe1"},{"path":"skylos/benchmarks/agent_behavior.py","sha256":"a76035e8d2ff076255963aa54dca8629a39f24a2629a59dddca3ef01c336a4cf"},{"path":"skylos/benchmarks/agent_review.py","sha256":"d03274d574293474a4145e3f9447c291df2f6402d215be2871723f8c9822728f"},{"path":"skylos/benchmarks/ai_code_defects.py","sha256":"06b78ac52850e2123687df8b3f0cb441669638b90e29056c54d6fbd6b7a12531"},{"path":"skylos/benchmarks/corpus_ci.py","sha256":"a19c50180155dd9fc58e1b855ea1d7a08cb58e70ab257d85bbc2d87f5d46e7d4"},{"path":"skylos/benchmarks/dead_code.py","sha256":"01d871e04cede57bf6bf8411f6bd99feee526ad50d9f921fcf5f1590abae8a31"},{"path":"skylos/benchmarks/deep_audit_logic.py","sha256":"ef6713b2fa4bf494b9098f4cfdd9d1361e3a902e570933461576ffd0ce76eb86"},{"path":"skylos/benchmarks/demo_deadcode.py","sha256":"76a04235e88e1935ef9d87766980835311d50c10eefae44f653be0c71ca95b3c"},{"path":"skylos/benchmarks/framework_corpus.py","sha256":"856cce037e32acc365e55e480f63e44016869630fec35f654a43c60d70bce476"},{"path":"skylos/benchmarks/framework_corpus_schema.py","sha256":"e4eafef4a01c6a6f16b57f1b3c94ae9a22a8657f3040a0c41bc7559acd0613dd"},{"path":"skylos/benchmarks/jev_compare.py","sha256":"902216f6548314e7621c0b9cf6242314d660541c2dc5e264070c8b4760b544aa"},{"path":"skylos/benchmarks/jev_dead_code.py","sha256":"f1f20e84e5aa0ef775ba85dfc78280996c0fb21c26d9e2394e7adf28b1bacefe"},{"path":"skylos/benchmarks/quality.py","sha256":"4780971df00dd29af7a424ce6c007a4b4cf107a4a32ad09ca8df3d40ee844fe9"},{"path":"skylos/benchmarks/security.py","sha256":"71ebb3fd359b811052e77259028191962d631b77a27cacba3b3bbf7c2e17e2c9"},{"path":"skylos/benchmarks/verify_benchmark.py","sha256":"794008b0a5731fb0556fb3c78e1f0f4a11ae7d07a43da3946cc95325a6154388"},{"path":"skylos/benchmarks/verify_benchmark_eval.py","sha256":"b2a9fda80e38b8596843e1f6c781e7fdf15be066d460c890bffb052670251512"},{"path":"skylos/benchmarks/verify_benchmark_report.py","sha256":"067ab1ce65154cdc768a69cdda10d26f3fdc650f1e1629d881c36a507d721845"},{"path":"skylos/benchmarks/verify_benchmark_runner.py","sha256":"ae909bce3de6359f9bc2c2c42e66e10d6e92bc57c30be10973e24aa3a5c2674c"},{"path":"skylos/cicd/__init__.py","sha256":"9661327d43a17d219355aaff90f765e0df169349c9fb07d3696480aa551d40ec"},{"path":"skylos/cicd/agent_review.py","sha256":"67d7f6f528db7a45a4d4c2df31a4028093129e973f4649e447f678c90bbeffcb"},{"path":"skylos/cicd/agent_review_workflow.py","sha256":"8f56a237f2df2b4f68475269877d62f29a6525f90d43b85da27a0ab273fdd07f"},{"path":"skylos/cicd/approval.py","sha256":"8e145f1a73e0225f9337a4817ea6905d595dbea368714d2a3965755054cb017f"},{"path":"skylos/cicd/approval_dependencies.py","sha256":"e5307d9012f1520211687ba5ede521b2c9d4e673d3e665b756e3e3363abff12b"},{"path":"skylos/cicd/approval_github.py","sha256":"f8ea4fc45a724d05d2eb5f8c88ca3b16285200116db68d199d189a37f7d30bdc"},{"path":"skylos/cicd/evidence.py","sha256":"738e463d879a027bd777a67e660999a9fb76887dbd9865eea87556c36264e75a"},{"path":"skylos/cicd/init_setup.py","sha256":"51fad3d5f283bce937ea556b998a5f44c6216adc57c1410565cd1196eb8809a7"},{"path":"skylos/cicd/merge_group.py","sha256":"3e58e0ca93af5607acfce2de9b5b96fdb28a57e209d1ffd56ae3d018fdf70482"},{"path":"skylos/cicd/policy.py","sha256":"cb99d7a9f25913431e0e9c7996237dbaf38ea0b2b528af0e203949a32664b230"},{"path":"skylos/cicd/review.py","sha256":"aa9f62ef1ccbe8f469ecbfe041114a297fce186778eacef6ca180643259f5674"},{"path":"skylos/cicd/risk_passport.py","sha256":"6de2a92873a46e518fb4f845321bde8ffdaddc8a01b2bc2380d2c4b11e2a4a9e"},{"path":"skylos/cicd/scope_receipt.py","sha256":"7166bf165e2b759ef9a20e111c7c0caf127af1f2098602624935bdae81cb36b3"},{"path":"skylos/cicd/workflow.py","sha256":"791623fd310f8d02e2fa050a02088bc0ce3454af04e8840969c080d654de0025"},{"path":"skylos/cli.py","sha256":"6b773b3e8402a42bd78ed3e490775c1ad091b85410ff6e67b122e58c1a60696c"},{"path":"skylos/cli_core/__init__.py","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"},{"path":"skylos/cli_core/dispatch.py","sha256":"b9e112733c59f31e7a556b37e543e94f09b751a41817b0420fd0683d483c6f22"},{"path":"skylos/cli_core/main_parser.py","sha256":"6e9c4193183c6238efa903edc8f71fe15d4a8f8f1c42a9f3c868f05ccc94c0b0"},{"path":"skylos/cloud/__init__.py","sha256":"210e8127796165efdd087f1e243545267121692c0b82beddd0070214adc34132"},{"path":"skylos/cloud/credentials.py","sha256":"ee6a9b111b62400415f8f1673c4bfcb9d52c1036b7327cda4f781bf866dca282"},{"path":"skylos/cloud/gitlab.py","sha256":"46a431461490aac2910e602d12a0fe9e3ee7425cbb5f98c22540b7c62eae09e5"},{"path":"skylos/cloud/login.py","sha256":"b15aa706fc24d80b54bbec6282c917e34b4960740950d0fbe1bd0cb64f289217"},{"path":"skylos/cloud/plan_names.py","sha256":"ee79f2f7e6a681d68e29d2c906af0544b717300143b4a49c36b2c239fd38c5bb"},{"path":"skylos/cloud/project_context.py","sha256":"4a08043873615f3830e6919db553ca598f664fc906c57ad3a1a2e9091b8f4f39"},{"path":"skylos/cloud/shadow_upload.py","sha256":"f8eea392725da19fa5d91c5659cdade6e390a53e84b9cd2be3071fb4f774c8df"},{"path":"skylos/cloud/sync.py","sha256":"c577b5ae2751304931990960c3a611a516090a0a69933e7815c8f4b0ca9ed0c9"},{"path":"skylos/cloud/sync_setup.py","sha256":"0a4791a636d93a7ac35caa51fda2b565991ad144611814f9094fce3dddfb4a82"},{"path":"skylos/cloud/sync_state.py","sha256":"923098e5819f5903b9584350cf1338382a05e513a6e4823e67fde83e893b132c"},{"path":"skylos/cloud/upload_manifest.py","sha256":"0e58d74f060549d2acc61a42990f3a2d99acde7e61a5d7c72e02de82dad79f34"},{"path":"skylos/cloud/windows_sync.py","sha256":"93581c2a7b290d3dd95a60d3230cbd35f95059aa3a4a60125f7b5dc2b414cc4c"},{"path":"skylos/commands/__init__.py","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"},{"path":"skylos/commands/agent_recap_cmd.py","sha256":"9059b0b43ac85bd7f24e570863e08c165fc8ab86f57d1eaf722792c66a8ef3aa"},{"path":"skylos/commands/agent_replay_cmd.py","sha256":"b4e706a61bb919480e3e9765b63903605849a76814b66aa52a7969eeb4e1c64c"},{"path":"skylos/commands/agent_standards_policy.py","sha256":"e86977c4ea32f739bde65a9659dba54081ec9c8c7aa18b10628ce6fe0a4f9301"},{"path":"skylos/commands/agent_test_cmd.py","sha256":"8e62205b0ef17af4f86a0f6fc68c858115c6f30a5749a58c4fa52ac0097a9697"},{"path":"skylos/commands/agent_verify_cmd.py","sha256":"aa07322d9a2912815441a9c80e18536c0be6ac116da9b805b95f6d5f6050f685"},{"path":"skylos/commands/badge_cmd.py","sha256":"2a950619f0c5a2cb67e95ae0b1cb12b9bf52904d116bbe79273c31f7ae4520c6"},{"path":"skylos/commands/baseline_cmd.py","sha256":"e327b58de661d9e16af87f3c16df11f6e51b82c53cccddc5dd634c87138ca8e9"},{"path":"skylos/commands/cache_cmd.py","sha256":"7af1e57dae3c7f7ad86ec377dab71f1ae2fd0a844e50399569e4469302a69ca1"},{"path":"skylos/commands/check_standards_cmd.py","sha256":"382c30db8368a1f6b776d8d166543aa50c30047b8c8519fcf9df51eac43b9566"},{"path":"skylos/commands/cicd_cmd.py","sha256":"fcaf6b186d1b20d3e0b4190a4eafae1880214cf48b5fe18d9f07a4801ce68bed"},{"path":"skylos/commands/clean_cmd.py","sha256":"319777821f6eca1c60a8e2cd4992387b64031ed213c112c13afcac94d3347e4d"},{"path":"skylos/commands/compare_cmd.py","sha256":"7fe24a278428c6125141bbc80058e05c31393056ca99fcd0ef1ba83d7afecaf1"},{"path":"skylos/commands/contract_cmd.py","sha256":"9a915d4ce9e4795a01edc4e70650800bd2a4d5f182d80b2e1dbc2a46c7e55b90"},{"path":"skylos/commands/credits_cmd.py","sha256":"3868946789403d784cbac4501a75f9c3363568a7aad2926dc9fcc3425c2c916a"},{"path":"skylos/commands/debt_cmd.py","sha256":"e65b2da2d90dd918e05ae57e9c2d4ad1aeb2b3d2515419852c196189e19a789b"},{"path":"skylos/commands/defend_cmd.py","sha256":"4b33c2d4be106a8b40f6c5f2cbb10c79f818e410c948ccc6901946692bc6a312"},{"path":"skylos/commands/discover_cmd.py","sha256":"0cddea43a0d4e5e1a7f8508194f0c5a60b95452372e9695e7b4535340727720e"},{"path":"skylos/commands/doctor_cmd.py","sha256":"d4981943b2cb9ce9b45fe9183a8876f8abbfc7b2402287b41d3689e06e86b91c"},{"path":"skylos/commands/doctor_hooks.py","sha256":"79ea957f22afab76386fc74ee0c7aaf7c5d4199082fdd643df2beabd37a3e1e0"},{"path":"skylos/commands/done_cmd.py","sha256":"f1dfe5056d7a416ef852d38d5c6c977a0757010ef99168fde95757cfa8da8aa6"},{"path":"skylos/commands/feedback_cmd.py","sha256":"c5989535cc8eaad79b05cb87696cd304bd372a82d781c9b829c7c775b955f12f"},{"path":"skylos/commands/hook_attribution.py","sha256":"6a2431433b40b4377db22476c0e6fa13693b4fc58f2ca12a7c1dda26d2c3d56a"},{"path":"skylos/commands/hook_cmd.py","sha256":"aa6937b69c56c7f8a65f54387a8366b2fb94706510693ec7deb1407290e05aa9"},{"path":"skylos/commands/hook_git_bypass.py","sha256":"6edbeea8f7e9e7bb79653519f66eb8d5ee1a6d3fa9fbbc6c7aa281649a229ba3"},{"path":"skylos/commands/hook_install_parse.py","sha256":"5a6764129af9b7821572e84687d7b14e751cbedf69eb8f75a4a64bb071d2c630"},{"path":"skylos/commands/hook_install_policy.py","sha256":"eebe8f40c52af4737fd69adb6e784ec2b12db64b237802f9b270187fba5fab13"},{"path":"skylos/commands/hook_policy.py","sha256":"a44deef59d8600240a2ae038ec8e01edb92a323a1d3a65581ee74666b4a99326"},{"path":"skylos/commands/hook_registry_context.py","sha256":"8bb7b65241efe4e579d34125ba87503cbd579b689d65b62b98a0fcec11acf474"},{"path":"skylos/commands/hook_shell_commands.py","sha256":"f249f9e03d035842090de8c3a7d6e9dacc82ff3b50df5c723580511d663ba53d"},{"path":"skylos/commands/hook_shell_filters.py","sha256":"418096a167bb92fece36f3fe853418c2732fe6179d1d1f5d0a67a8689a405eb1"},{"path":"skylos/commands/hook_shell_grep.py","sha256":"95f35d0d3118aed8b469a26283be5633394f0bccba1c28563bb24992e4e60cb8"},{"path":"skylos/commands/hook_shell_lex.py","sha256":"444917d556f6275af87934314e3e0e0f10f11e486345dc296c8923eaccbb28a0"},{"path":"skylos/commands/hook_shell_reads.py","sha256":"39b27cc33c5a2174bbe5cfea36526c41969439816ebe6f692144cd909824bdab"},{"path":"skylos/commands/image_cmd.py","sha256":"830e35fec0d71b0d5abde134284a83b8ac6da2dac84889762757b5b0a3e329f0"},{"path":"skylos/commands/ingest_cmd.py","sha256":"be3e72866f2a94724106927b6a737cb637a564652cdd84aba9d0a76d235cc7a8"},{"path":"skylos/commands/init_cmd.py","sha256":"67bd9cb8322030d3e46a649d4223ae66c11125cc74a1e1ef85ce5e8976b865f7"},{"path":"skylos/commands/install_hooks_cmd.py","sha256":"e35194e9ac09f5cb15eb8b4e3979f753d50b0c3fb96416faa53d3db59c72b93d"},{"path":"skylos/commands/install_standards_cmd.py","sha256":"04b37ce23510edbb39baf36901e55d353d7b6bf5a198a1a50c2c439646c4d074"},{"path":"skylos/commands/key_cmd.py","sha256":"a04943965097fb2923df565fdffbd81ce7d83425c342a978488db888c563ca9d"},{"path":"skylos/commands/lint_cmd.py","sha256":"73adc8ac1c5eea5a12b61bd910c631bc30bf798606abeeb7006c76863ab28a35"},{"path":"skylos/commands/login_cmd.py","sha256":"1e2ed9d8e6c290e8f2c403354654f973bfb338bf5b9be0b353739f9e4058f855"},{"path":"skylos/commands/mcp_cmd.py","sha256":"24a54d216a7cbb0d951c064156f17356f02da636d0d2c2e57e10203dddb4c320"},{"path":"skylos/commands/preflight_cmd.py","sha256":"880e21b3f5b000a5d6b6884e86492794e37ae463daee593e9cc833ad28e9cb8c"},{"path":"skylos/commands/project_cmd.py","sha256":"3a9daf3692e8d14ad3bf246d09c7ea674eaaeae687d87f7187ba0422df7777b0"},{"path":"skylos/commands/provenance_cmd.py","sha256":"ebbde67faa32242e3f12f2a3c7dbded23875a22f053d6770dfda9f24f8a58e5e"},{"path":"skylos/commands/review_cmd.py","sha256":"0be2bb795bd41fa9e076db1924dee24e93b2e7e042cd9969eb6698c69c8681bf"},{"path":"skylos/commands/risk_review_cmd.py","sha256":"fb547136004fe3bf4dd00cd784bf60890ef9f7f18ef13aa9fae55f644c90419c"},{"path":"skylos/commands/rules_cmd.py","sha256":"f33d2623863f553666c302e45aece0ced57eb847f407a44e3e485084db90bedc"},{"path":"skylos/commands/sbom_cmd.py","sha256":"b25c70da705dd61e1c70b7ac2d7445105640d9c7215bc08f49559477c9a00135"},{"path":"skylos/commands/scan_cmd.py","sha256":"e7b5e027b2da91971d5a97135760784bbd926f2be2bc4e377fc75bc0dcb4e369"},{"path":"skylos/commands/security_explain.py","sha256":"327fcea28728b7e51bb97389dac995bfd238389f126147cb6ce90a0eda23dbde"},{"path":"skylos/commands/sonar_cmd.py","sha256":"e4290bb720ad2e15fd5561ff2449275c339005ce25744e55d9bb63e6a38995c6"},{"path":"skylos/commands/suite_cmd.py","sha256":"dc1f5b966504fefbae4fbafe76cf125d604fa7c08489e8eb728061ed997ecef1"},{"path":"skylos/commands/sync_cmd.py","sha256":"7ba16f3fcd95f9539fdfaf65d4255acd875672e466d42eabec23b6677c141002"},{"path":"skylos/commands/trivy_image_cmd.py","sha256":"0563da275e8c0f752a08fd64e3b6552e293683d9bc22a5cdceb27f0c2a2c2fb5"},{"path":"skylos/commands/upload_cmd.py","sha256":"07f3dbad9c3ffffdce74d81d41c4d22062d22c9665c54c19946fe76fe7302252"},{"path":"skylos/commands/verify_cmd.py","sha256":"861e9052e2f03800c8ad5d21f5bc049dc097e8f4b5ab612e099f4146ab54c7f9"},{"path":"skylos/commands/verify_verdict_cmd.py","sha256":"9849cda52c699bcb07362ae82e3acc88857cdd8a0f9186f743ea65b78f4319ea"},{"path":"skylos/commands/warm_cache_cmd.py","sha256":"3ca51c27b9c9c6e9f5231b804747dfb3aa938bfc2795ec614dfb18a5b79bf0e6"},{"path":"skylos/commands/whitelist_cmd.py","sha256":"4be004f1921f7ef444e09d6efed1b87f1a453ef8d57a08ac03502464379c0cbe"},{"path":"skylos/commands/whoami_cmd.py","sha256":"604a2683b362597f884ee972ebfbf400a47f6d2827fe478ee1e0e78eb8322172"},{"path":"skylos/config.py","sha256":"d7c55f1246313eab6fab4fdf723298b3b9ef0fbdf695a43a6a4288c04ef2533d"},{"path":"skylos/constants.py","sha256":"67e90c57c5cc793e4a9b3fca7f2bd04d6fd594b9ebf94c7f654ca8d5e2434e50"},{"path":"skylos/contracts/__init__.py","sha256":"d2277373125b0144b55f0bdbe2179dac775bd19fb429cce0396ab8a008fb275a"},{"path":"skylos/contracts/loader.py","sha256":"5e434fe33c90ae00c8f9398943ecef96bd54889c4b724ca116f59e7288b506bb"},{"path":"skylos/contracts/metadata.py","sha256":"53cea543a320c18a53446a9d252cc30419200729995548f3ba446d0435c63073"},{"path":"skylos/contracts/routes.py","sha256":"6b2b3596035df7b7acd58c7ab1e0a36ff1f9342f800e6ff914ca425c3c408c13"},{"path":"skylos/contracts/schema.py","sha256":"282f83881b44041394de97f9fbdba6ef30bb02d470fd277329c5255f10ae0694"},{"path":"skylos/core/__init__.py","sha256":"e6fc2517c34ef355a3aafad24b15f006b143f44a0e29811bc583857869ab912c"},{"path":"skylos/core/api_symbol_truth.py","sha256":"f2daea36d4a3da6039632801e2014278ea12adfe89191f5ad2d407ff71420392"},{"path":"skylos/core/baseline.py","sha256":"10c9eaee5b387305679b9ab5d05f9ef9a297f10c544eb752075452833a54915d"},{"path":"skylos/core/baseline_source.py","sha256":"9c67830d3af3ba86609bcffa491e04b91b2a7be0f83f5d5f49a0e4a010220a12"},{"path":"skylos/core/ci_env.py","sha256":"35f1efe3c4f2201f4e80f55c7f4349e66c9064cd31480f0ee6103fc212ce9236"},{"path":"skylos/core/cli_shared.py","sha256":"cf965b20011ed338ff6e70102aec97fc8091fcf329b2f0e8b5a91e2058790a28"},{"path":"skylos/core/contribution_events.py","sha256":"a443c1ad8c089880ca85662d3fdb81ae3ee44e346dbcb07aa684210ff45a8c7f"},{"path":"skylos/core/contribution_settings.py","sha256":"105739c86e8b9a4f739d006544749e892956b4ccd06e0f5a64209686ab89e62c"},{"path":"skylos/core/evidence_contract.py","sha256":"9a1becb50698b62c639e96ba1379ecdd1a60d8e8b35ce1075fa569aaffa488b3"},{"path":"skylos/core/fast.py","sha256":"e29312bd3723932645225096a02446076c44b0c16c103f26504b3f8ed49196d5"},{"path":"skylos/core/fast_paths.py","sha256":"a0fff37e8e1d8f7563ad83210e5c2f890295d0ff29565e0304267a4a73d8b3e5"},{"path":"skylos/core/file_discovery.py","sha256":"e3da7cca6a7cff2d638fc57a730e459a739c2eb0a997cf1534655be1848b45cd"},{"path":"skylos/core/gate_incomplete.py","sha256":"208bf3afda99529af172c579b7baa211870721e5b753a9f7d5264756d90f2ae2"},{"path":"skylos/core/gate_outcome.py","sha256":"8f8ade9f509d6c32137b2291a832ebb343b62b91a8649cf12653d4c21e6ac949"},{"path":"skylos/core/gatekeeper.py","sha256":"60d0445c7e822b02d540ea8306c0e37233853f06cea7fe982d7c4edaea1aa226"},{"path":"skylos/core/generated_files.py","sha256":"fc1c82daff30e89669ceb248c54737393d79d47e723666a812aba64e924c649e"},{"path":"skylos/core/git_context.py","sha256":"897aeb3794e7a7d0c2da9660d9f6de07d8143709240a54e46dbb001eedf42ade"},{"path":"skylos/core/git_safety.py","sha256":"f68976c52b3a75a79b90c0f2ae08757aa3dc98e786e3dafe495d4325d7f4571f"},{"path":"skylos/core/go_api_surface.py","sha256":"ea1ebb1e02513300081f4bc5a1fa235ff89fdf8f47307771e3314b113fde15f0"},{"path":"skylos/core/go_module_manifest.py","sha256":"2607135e65d239b8987a092922a55b7b4376b3d835f88efb24a39fcf85225cdf"},{"path":"skylos/core/grep_cache.py","sha256":"5a0517e4fd9aac396a2c5c941c627ddd34029777217ee30a74e34984e1fd8f36"},{"path":"skylos/core/grep_search_state.py","sha256":"e3e54e2670e01032189e7276406050f5ee5902798ce0d45bb8699baa81c58ec4"},{"path":"skylos/core/grep_verify.py","sha256":"69a78b228eb228c6a595b0a033128b27dfa7440d61fbc47004ae430d8e84be56"},{"path":"skylos/core/grep_verify_common.py","sha256":"13b2ece1fd5bd48a7cd5d7e491a605496dd2c2815c49bb75a90c74bf9f684e89"},{"path":"skylos/core/grep_verify_language_strategies.py","sha256":"fe3248e7924f7cd5d096b33918f1c611c52ccab81d293639b1951f00b261163d"},{"path":"skylos/core/grep_verify_parallel.py","sha256":"63b6c73b22398d4a53d10ef43038e5b0ed8cd3fd167d3d1af4bae96bd4113715"},{"path":"skylos/core/grep_verify_python_strategy.py","sha256":"b425b89fca48cf7dd052bf2276031666fcc0f963f151ebc4c55cc62edf3b9131"},{"path":"skylos/core/grep_verify_strategies.py","sha256":"e2d32d8c4e3c576ebdc205501a285136100f6c7599b22bb868bf62fa13d98762"},{"path":"skylos/core/java_api_surface.py","sha256":"c4a7e3e18f13c1c3cb6b8dd00ab10d0435912b003a8de6729b0ffb70d8485a65"},{"path":"skylos/core/js_api_surface.py","sha256":"a28e16fe005b76b2e057829bde51fa6fef32d3043984f40184f511fe91d4e5e9"},{"path":"skylos/core/js_api_surface_exports.py","sha256":"ef436303fb0fe7925d469349d271ea7cda887af168be3c4cb6dbb3bf3e0a627e"},{"path":"skylos/core/js_api_surface_members.py","sha256":"24285f6039f8187f4dc9ab7bcbec095268664d8811742cff7cdb15495f4c8f0a"},{"path":"skylos/core/js_api_surface_utils.py","sha256":"068816f44ccf45d4a02fe45412d34de8bc2638fb8c1357771919aaca5e85b5c1"},{"path":"skylos/core/js_ast.py","sha256":"f712cc59cd54cc74b09d69588d1bea69a9c5b14fa8d9ff89e4849056e9f63ac4"},{"path":"skylos/core/linter.py","sha256":"382d41f781784a0e536aa41cfe50763f1c3f21eaa9a4eb0ce9db38e12c9b468d"},{"path":"skylos/core/pr_impact.py","sha256":"957f0fc057694113888c7f962d25e207faf8485a97efb784d66d41411083a0c5"},{"path":"skylos/core/python_api_surface.py","sha256":"8f0e27e6b9174607c4210fae000fae50ac0cf005b484b1a6888b36075c667f81"},{"path":"skylos/core/python_distributions.py","sha256":"22a992c8adacb8d8fbfe023243bdf6d3b2252f172f0f7c13e24f2dfa6d2a9e12"},{"path":"skylos/core/python_requirements.py","sha256":"9d0bc1b696a89bbdd54c3a98c00d593e0ac2b954f93777816cdbf7ff9fc962fc"},{"path":"skylos/core/reference_index.py","sha256":"88c0b832298ef4316ab91c774a5bbfaa8b896287f4eb85fba7550afeea635b5a"},{"path":"skylos/core/reference_index_store.py","sha256":"de656c0b9f72197179d3ae413cdc21e8548e28a91918f44c76e9e2998e34d73d"},{"path":"skylos/core/report_context.py","sha256":"704d3f4420b19f8cb265323971c6c227b1a1dfa04f0039d5d082d63f121e5856"},{"path":"skylos/core/result_cache.py","sha256":"9c8307c431c1ec4bc3925af6b3ad332328452711118ac4707a3a8cbbf6b763f6"},{"path":"skylos/core/review_context.py","sha256":"c8a9a1d9467b6d74032c18698712a0ae5a0023c6f2d27ea524752d597f059434"},{"path":"skylos/core/review_decisions.py","sha256":"f9274abf31bd8794424f699d8fa6ed0b17d42bbd4840873b122a2efae651d5c8"},{"path":"skylos/core/safe_cache_io.py","sha256":"3e4b940231c646555858572698c5ade25d6c681041bf529a0708f11c08da839d"},{"path":"skylos/core/sca_baseline.py","sha256":"8609e2605c30125ea67521d51a33848925db0e09eaec22d3d719c1125d7f2def"},{"path":"skylos/core/sca_coverage.py","sha256":"d012ab5393a876a013ca0054b24e25b9c1f67282ba727441eb8e30763ac3bff4"},{"path":"skylos/core/suite.py","sha256":"2add14f23594942983f8c165ba52a835c5407aad53243f25467ffe5d419a8bcb"},{"path":"skylos/core/test_paths.py","sha256":"6fd8581b30d82c6b0490f796f2982dcb77da74992af2d99fa844df12afbba525"},{"path":"skylos/core/tracer.py","sha256":"c481b56e3bf01280429d4379f64ff0126dc3e4e0b2320142d5826cf5128ac262"},{"path":"skylos/core/verification_coverage.py","sha256":"69d567ce426281187a5294fab1bff495db74b299b1eda57615ff93f60036bf45"},{"path":"skylos/core/verification_registry.py","sha256":"52ac73794570401437e915750d383cea26776719979d22e0593869459ac9c5c2"},{"path":"skylos/core/verify_change_schema.py","sha256":"06d65bba0a5ab0dd35b123c74ea1965ae440f1002abef2613d67b541794f2fd9"},{"path":"skylos/deadcode/__init__.py","sha256":"42a9a4a9802e146b8d2db7edfd3d29c9038eb18f5cae9cf0ea21b987e2ea1df0"},{"path":"skylos/deadcode/_reachability_bindings.py","sha256":"3738aed921eb3289d0be3a36975e6c677ae12b8e0c21e6a8830628399ff3e3ed"},{"path":"skylos/deadcode/_reachability_graph.py","sha256":"e339e5318023e7c8adfbf8a14055c577d335af61990d86dc891f44df54dfdadd"},{"path":"skylos/deadcode/_reachability_receivers.py","sha256":"56aee85bc219f55a7ee5dbfbab93464c3731ede81a2a7303d4174a172043ad4c"},{"path":"skylos/deadcode/_reachability_scopes.py","sha256":"d773933fcd06fd1d16ac24e5dfadde8039f8b3cc40dd7d5e2474d18a0a2e0986"},{"path":"skylos/deadcode/_reachability_visitor.py","sha256":"34725798bcd9fcda58b281af25885f20c4c568116cbc18e1a951ecdcb3d6dcb8"},{"path":"skylos/deadcode/_registration_common.py","sha256":"b0af00bc539f59362c85e5672d80248a80fdeb279148c450e47a22d7321b12f4"},{"path":"skylos/deadcode/_registration_decorators.py","sha256":"08586310dbac2ae4304097ea59c936422fa8709368a7a25938e74f7fa1c4e75d"},{"path":"skylos/deadcode/_registration_flow.py","sha256":"0e6f4bca426dbdb4dc098a7a48289ec8c43e60e419a1c0ab7f48a9a597824eab"},{"path":"skylos/deadcode/_registration_methods.py","sha256":"81d2a55b3e3b656c960a78b7d41f0aa27d8c15b0b43b95e3b4dc9b84810e4c9b"},{"path":"skylos/deadcode/_registration_patches.py","sha256":"0528f9b58dcacc3ad3520cbeb11251ff8cbdcbddea7c64ace3c38fc0a364be6c"},{"path":"skylos/deadcode/_registration_receivers.py","sha256":"f2cd6e7bc4dfa56fc99ffb44bcf26df539c618cd62f9a350dfd5cf6aae7375c5"},{"path":"skylos/deadcode/_registration_sources.py","sha256":"6aebfd7d147d30ccf680acce7fe964297bb035a616ff210fcd44705acab4ee66"},{"path":"skylos/deadcode/browser_refs.py","sha256":"80734f76095831bdc2ad5883b8a99aadfc4a7e712ae56cc6559b5e90c26df3cb"},{"path":"skylos/deadcode/collect.py","sha256":"3d2e3d20276b00c569e5053928415a63f14fe66297d71f614a271baf49159f18"},{"path":"skylos/deadcode/confidence.py","sha256":"86783d0ff3720fd5926379917e21749a09da6af055964d5884a4af4bd095268d"},{"path":"skylos/deadcode/config_entrypoints.py","sha256":"86e1a7cf15d41634b5f3264beb933672a25187bf3f6166b9c0f6ad12542b88cd"},{"path":"skylos/deadcode/data_names.py","sha256":"a73cde4c4edbad7fd68e6f3f4bedd42af3990d2dcaafdba495a7fc80ed4c6615"},{"path":"skylos/deadcode/django_framework_liveness.py","sha256":"d1b81bb91212c84168b0ac7eff327ac673e1eb40d60dedc6c3c7a0a8a32f1862"},{"path":"skylos/deadcode/django_template_liveness.py","sha256":"89c0314d867bcea769e62899e7187185c03f96ce1de360e620664bcc3c5e910a"},{"path":"skylos/deadcode/evidence.py","sha256":"e254edb2d819750817c5e000ceb988923125d3f031d474f4da73aa693a564023"},{"path":"skylos/deadcode/external_protocols.py","sha256":"46f90ad4610cb4dfb4b81a195fbb50d3182073070604026a22e04dddbeaf7585"},{"path":"skylos/deadcode/finding_evidence.py","sha256":"f5c4b97c553126817d61ed1673afa5e60bbb4569f5c424480567c303980f0908"},{"path":"skylos/deadcode/framework_liveness.py","sha256":"eb66f3de788bab0697ebfecd9ffadc655295cbeb74c22ed1da3a30dd844bc175"},{"path":"skylos/deadcode/java_fxml_refs.py","sha256":"7b3a1df765c9011782a45a4f9e0432222f4c3f8179ca62f532eb1148bae3ee4c"},{"path":"skylos/deadcode/lazy_export_proofs.py","sha256":"256a5ef875bb9a9c4f4e57d37d3d4eb294a4442b2d7c42d5a088c895e3767539"},{"path":"skylos/deadcode/liveness.py","sha256":"60b17ae4c5952e967b9f495e12605050a6ee2ac0667a9254c7ff716391c1634b"},{"path":"skylos/deadcode/module_loader_proofs.py","sha256":"ce96bd29e18ad7b181121b50c3885c209c9cbb14af3e9ae225a8e3119c563209"},{"path":"skylos/deadcode/plugin_registry.py","sha256":"caa9b4eb703751d43239260f7412c921fd6e0269e919dccb99aa3ef28196438b"},{"path":"skylos/deadcode/python_ast.py","sha256":"7f7e71e990cc84375bdd520e444ce891f610b748ac2e7eca9cf38d962f481b97"},{"path":"skylos/deadcode/python_browser_effects.py","sha256":"ea39b7155ba6f1034b5aa3ad8290e6f845dbbc98c3c7652dc3b7f2bd31033aa9"},{"path":"skylos/deadcode/python_module_effects.py","sha256":"d85e129046a3996eef2e59a2c1b4f69b5bf934fc46ae7431cd4a3cc75e53f1f7"},{"path":"skylos/deadcode/python_project_sources.py","sha256":"e9c0bd4f8d1de359ea63ca3ab86fab39a5b16ad6d6370d7b973dcd7710d48073"},{"path":"skylos/deadcode/python_proofs.py","sha256":"5905c6fb69b773c63df51e72c9b0ce7ba10982fccf9fce8c45badcbb1b950477"},{"path":"skylos/deadcode/python_source_effects.py","sha256":"6e1b9dcd14a3501e2decc27fef866cb1cd4d6175da30308061d5f650ffe81e38"},{"path":"skylos/deadcode/python_source_intrinsics.py","sha256":"002d75fd1b6dbd2d1ba03373d8fd9d444943c50e7a5ccde11a57cd4f34abb806"},{"path":"skylos/deadcode/python_source_proofs.py","sha256":"db2bff9ca362199d4560a28632513273919d15c6e238acf9c9f54d1a5efd4b0d"},{"path":"skylos/deadcode/python_template_effects.py","sha256":"4cf1cb7f7bde3935f0dea238e088d021a7f10f6ebc9d333c5a106056f22ddb1f"},{"path":"skylos/deadcode/reachability.py","sha256":"588415eb75eb670a6b76556b6fdcd659442ff0e6149527e9d307bddaee0df090"},{"path":"skylos/deadcode/registration_liveness.py","sha256":"ae3a3fe8e2030cd8ceece9af8d8e10c9d9dc946b24a6bc52826988cda01a6909"},{"path":"skylos/deadcode/review_proof.py","sha256":"715f7364d6d68bb0ba1a55cab565216b9154ee7f42c9fd66c63f442006127252"},{"path":"skylos/deadcode/signature_contracts.py","sha256":"6b0f86ecc2a3d6d68b73df81d994203dfc643bba178a8300972d552077639230"},{"path":"skylos/deadcode/string_references.py","sha256":"3b49ff7c2355d8a37440c16e2c7c4cf7ad484cb484bf502f40bcc4b9eaa18c49"},{"path":"skylos/deadcode/subclass_proofs.py","sha256":"f9a3f288af8b1491c59c59505a2c83da62c29f621c1b1b5113b297cd9bdcf458"},{"path":"skylos/deadcode/web_framework_ast.py","sha256":"06015d5e61b91c41f942f1b043343af47ec7c5766f578178a7919d279525f8f8"},{"path":"skylos/deadcode/web_framework_liveness.py","sha256":"48a0d43e161517f4462d6392d7e1958ef2a4dbe446a4fcb009b677ec28db9a1b"},{"path":"skylos/debt/__init__.py","sha256":"59af6e369e532650196e0cc048fbfffffe7a407a2c504e23a44438844313cebd"},{"path":"skylos/debt/advisor.py","sha256":"25549160e0c50318f22deb3b66ea73cbf7eea0128f97be757d9520ad991b53d4"},{"path":"skylos/debt/baseline.py","sha256":"d976d0a15e0df432f3cf3c4be2ef7b46673953523f38c275ab7af561b6ab0651"},{"path":"skylos/debt/engine.py","sha256":"f7b27d565f3ff7dec523ddc2aa491d0a8ebf69725515d58e970008d2b33ebb65"},{"path":"skylos/debt/policy.py","sha256":"448ba5e4f7abbf12783602e8024ff784c9e347ccf2ae83745b3ea3b6ca6002df"},{"path":"skylos/debt/report.py","sha256":"fb2bacd92395c677397e6597b1fbb22df864389be30da25b01e305c5ade62258"},{"path":"skylos/debt/result.py","sha256":"ffff46cb006bc9d1007c70f0ad69e87be11a04eae303b5ffca9b4ce2ee7b0af9"},{"path":"skylos/debt/scoring.py","sha256":"47d2653158aee4f0ec3ef00fd275ff8ecd36c111514c6684f61ce6b8030a24b5"},{"path":"skylos/defend/__init__.py","sha256":"96036593ff43bedb0322f78503b811b11a10e81b4bd595110f8d2bd203afe264"},{"path":"skylos/defend/attestation.py","sha256":"ad02cf7c777fe6496cfdf5c0d9a264d4bc59bcc5d9f027ff1644ac2aa53875cc"},{"path":"skylos/defend/engine.py","sha256":"324ef79586ccc3ff50194628743b3c716969590ea6bff88eb337ceb792d7d871"},{"path":"skylos/defend/frameworks.py","sha256":"aa3270e68416f65bfdaaa3ba2526c360207bf5769a9eb75a0c1f155728d0451e"},{"path":"skylos/defend/owasp.py","sha256":"639f8de9496c179d421c803b57d1bde64fd55e42a53c9992168243893829144c"},{"path":"skylos/defend/plugin.py","sha256":"057662b4c5e14b9f0e513f4df93e7ead5b6308e2d5ceb349e01b33bffa307a53"},{"path":"skylos/defend/plugins/__init__.py","sha256":"fbb6f554d1b9488338a981249ac168b04ce1a918cecf9a9540a3de49f9bfb985"},{"path":"skylos/defend/plugins/cost_controls.py","sha256":"f6f41e5e284a15f211520b89320639080dbe613f8da4cff6c2e44b73fe9ac232"},{"path":"skylos/defend/plugins/input_length_limit.py","sha256":"a3c03c26f49fcdef2f6b19746a949108a57982bf010b8125e9620089147fbe87"},{"path":"skylos/defend/plugins/logging_present.py","sha256":"19f9bd19fa537ff88cd71f74892018ee51d443bd596465bff6c901319324ede5"},{"path":"skylos/defend/plugins/model_pinned.py","sha256":"c4509efa4ad6f2243d1b6d1861ccf44fa9abd0850dd8338966f8fa377c183646"},{"path":"skylos/defend/plugins/no_dangerous_sink.py","sha256":"fc028342d60c89bb18166b58d68691c84f7286ef17ed98f997dbe19278c720f9"},{"path":"skylos/defend/plugins/output_pii_filter.py","sha256":"29cd214496b1ce48e2c13e829314815a1869e68a6c73dd1438d42abdbfdcbfa3"},{"path":"skylos/defend/plugins/output_validation.py","sha256":"916eed11abe9c135a9b07422064a468c117962669480b3deb1fe5e9e1ab49c51"},{"path":"skylos/defend/plugins/prompt_delimiter.py","sha256":"ab9775fa1e7e03412ea11b0d105b951289904659192269ce78c4a03d455d9e7b"},{"path":"skylos/defend/plugins/rag_context_isolation.py","sha256":"d6327e5da329d11b37e4b6f9e501a503c5bb997ebeaa11c13e189d8c13ec178f"},{"path":"skylos/defend/plugins/rate_limiting.py","sha256":"4fcfee8dd38ec3b0723ba0f8fc6f981878efd20a0ae83096e3d3e9f6c00ce899"},{"path":"skylos/defend/plugins/tool_schema_present.py","sha256":"a6a594aa8effc6e70b922888e50992ad7848925280837cb4f8c3b6a571e3da1b"},{"path":"skylos/defend/plugins/tool_scope.py","sha256":"1201cd1eec427e35463a0b65171c62b306a781d9059b336c8eb6dbc7bcd2442a"},{"path":"skylos/defend/plugins/untrusted_input_to_prompt.py","sha256":"a77234208f4be582b98fdac4e85b5968b95b1f1375834152f177ad90b9cf6916"},{"path":"skylos/defend/policy.py","sha256":"1e84400f696f16d14be52981afc6ceca34506f06720ad355e3a108a80c2bc2bf"},{"path":"skylos/defend/report.py","sha256":"6f1bfc4c2c5cf0e3af272e62e48ee52ea187786b6b9760e91bb873ea3c0448c1"},{"path":"skylos/defend/result.py","sha256":"94ec3667e9661fcc029142ee95a2c801edc29f244efa59db74288d531d376f27"},{"path":"skylos/defend/scoring.py","sha256":"1bbd305b991155df0fc20aeec7a49fc89cfb85bf3b36502d4a0f93634bca7a6f"},{"path":"skylos/discover/__init__.py","sha256":"d2ecf4df01a5a63008929971a7be356c8f13e65734a9227a4b0c56f7af1e3f62"},{"path":"skylos/discover/detector.py","sha256":"ba538283e860f27667b9e8508a2d1d13dc778a792955bc4e68176220159bddeb"},{"path":"skylos/discover/detector_typescript.py","sha256":"46daa9049fd9c50013eb72e914594ab5c6338c7134115ea1e513c7760c613f47"},{"path":"skylos/discover/graph.py","sha256":"1bc51fbfb2f8971817712bc84179d71b89f4183c9d3b1dede82a43e628d7132b"},{"path":"skylos/discover/integration.py","sha256":"9d997fe5b6f1e259868c7b794e7614e8d85bce568c979facd8f75c5a28849dd9"},{"path":"skylos/discover/report.py","sha256":"b5a7421d5ed55142a4566fb668b4f37eb76d4f2c05c9cbe4b058335f006acb4f"},{"path":"skylos/discover/semantics/__init__.py","sha256":"c7063ac60a56ae10a3d3fd1ae821dfbb09283a9d9dbf87b44260e407c767e74e"},{"path":"skylos/discover/semantics/python_output_flow.py","sha256":"99dfd86626bb737de8883fa3025518529f990b29495cbde2b45dc9c41ba24197"},{"path":"skylos/discover/semantics/vocabulary.py","sha256":"ee91ca24c8dce894bc4c365ec6ae712fc5d248df527861fd5d8c4baa31913281"},{"path":"skylos/discover/taint.py","sha256":"7032860e65f42f98a4c3cc29cfed6cc9b6e2b6300a7c04139b53eb8252f6177d"},{"path":"skylos/done/__init__.py","sha256":"d5beab98c962d1a8e01d79e80eaa12cb6fe7d84d72a699af087aa5b548862326"},{"path":"skylos/done/answer_sites.py","sha256":"40904dbafb80e20df3697462bcb558ef65a4fd5f02eb81ee923d2b0a87be5928"},{"path":"skylos/done/base.py","sha256":"5b67e4e68957f09f7f90e4ad7911e0f647b07e3140609ef3b4d9caef74630b28"},{"path":"skylos/done/checks.py","sha256":"eaee73becce9585a6bc1d3f2fec306a438a9bf1ab30e0152d0cc6f5bc8eca9ff"},{"path":"skylos/done/ci_checks.py","sha256":"ddb8f464a0d30df10196a9f602c4481a6d8255e91d50f99301c60b785fff50ea"},{"path":"skylos/done/config.py","sha256":"c35866a88f8ee94d154e58a8b12e4725af1ee5cfc8013f55badabc377a41fc93"},{"path":"skylos/done/engine.py","sha256":"b8f4cfd2f76c32bb769da5d3b90a2853eeab4207606a750f4d002b1d7050a3f6"},{"path":"skylos/done/expected_answers.py","sha256":"59f5cedb7b49f5d03a8c7dd168080476ce06943d02df309ae2ef3e035004d66b"},{"path":"skylos/done/feature_removal.py","sha256":"37587982e21e5ab6a61a353c91083e5477137b7dce3d33e4f8862233eb332233"},{"path":"skylos/done/inventory.py","sha256":"809080d7488ff815e8589b276377d54be5a6bbb05cb89abeb85cf27c7d62f835"},{"path":"skylos/done/js_inventory.py","sha256":"38e0d30ca8aa7e664cffd68f357f6e9caf5d27fceb7fd183246a16c8fc9fe178"},{"path":"skylos/done/js_test_config.py","sha256":"d298016803694e14cb96edc9e1b4bcf785f03dc6702b8bea858df9982af69204"},{"path":"skylos/done/lint_config.py","sha256":"5e93e4ff64927fddedede794f1ec35426a70818e28f7ae75bcf5f3774501d194"},{"path":"skylos/done/mutation.py","sha256":"0534448676e47cade916257ca427dad9e2fa8065534ff4e124c6c164344bed0d"},{"path":"skylos/done/orphans.py","sha256":"0dcf1a2ac25b1104c0ba37c02b26514469eed393bf559e1198b547adbd25106a"},{"path":"skylos/done/preexisting.py","sha256":"542987e06f2bb09c58b99e547ec3d28b3ef7e469f3f8285d54827dba59822ee6"},{"path":"skylos/done/pytest_probe.py","sha256":"eda1a5da4c6ea1120b61096fd7c8151bdcbe57fda62aa42096615b6b8084002d"},{"path":"skylos/done/receipt.py","sha256":"bcdcebbd4d8a0bdd093915eef080d39f5af079f6b09b317a5d938f7cece65993"},{"path":"skylos/done/runner.py","sha256":"5be8fb89be5feba88ba1a5b68431d569e5a6fdeb973091ff21ce488fd04a0b2b"},{"path":"skylos/done/security_controls.py","sha256":"6a38005a2d0246db19137cb54bc64e5a4f264a05710f5e55b8362771e03be117"},{"path":"skylos/done/session.py","sha256":"e2a377c2a419a3396cf83c48c69c56f6497da74443e3121397b0d47239dd6fd9"},{"path":"skylos/done/special_cases.py","sha256":"8159edd1c1974497e3ef4356e7ed971ee2ce3f54082284a6266b5822e2babbc1"},{"path":"skylos/done/suppressions.py","sha256":"b10a7cb5709a69aa93c0ffcc933dfb1c05e476155fff9f56142cb155398d3930"},{"path":"skylos/done/test_config.py","sha256":"049a5b62f238dfb590375d2ba49c188fac198233bfdc67b92f0eec78fa63537b"},{"path":"skylos/engines/__init__.py","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"},{"path":"skylos/engines/go/cmd/skylos-go/main.go","sha256":"3c84fe1b18df8e793b17490ce996f67e80c2edfbf2430f957856f9e2ff035a38"},{"path":"skylos/engines/go/go.mod","sha256":"757adc381c0720e60c77c3de1783b5ef5378191fbed4850de6d9aae1db75dd68"},{"path":"skylos/engines/go/internal/analyzer/analyzer.go","sha256":"8df92f6bef20559ce2fd20fe01abc1b8433f52a11e221ad8e93150f77a4b066d"},{"path":"skylos/engines/go/internal/analyzer/analyzer_exec_command_test.go","sha256":"ca4060fa078ca9b57e5f2f3847c682450380dce78f0e3c9c4e3f05a3dca7bb4e"},{"path":"skylos/engines/go/internal/analyzer/analyzer_path_test.go","sha256":"faaeaf2bdff3bf3361c364557469f88616968afd03c909f15b4607c07091745d"},{"path":"skylos/engines/go/internal/analyzer/analyzer_round5_test.go","sha256":"3fb18675353c8e22b80c5d35b76f5ecc6e80d4a23b5e9ffe7c680fe6fdd370bb"},{"path":"skylos/engines/go/internal/analyzer/analyzer_secret_test.go","sha256":"e477c923a35ee9c75a9de1fcac5ce61756c62c8354402455c94aeff7a8770288"},{"path":"skylos/engines/go/internal/analyzer/analyzer_symlink_test.go","sha256":"80b93b53aeb023f07f5b518c9d5ee76cc077b755d851fef768da48b11a317614"},{"path":"skylos/engines/go/internal/analyzer/analyzer_taint_test.go","sha256":"d37c207cd4c8a1d297c0e844f6ceeb4e2d5b0c79917a7a49f7446b620cdb7e03"},{"path":"skylos/engines/go/internal/analyzer/taint.go","sha256":"dd2ee67a904388f5616583403a6fb5c1733a3e3cced0184e85e8e16befeb1396"},{"path":"skylos/engines/go/internal/output/output.go","sha256":"3c2746d6d7889ba330ccac1e99136e6a997e725f69781fb36dcbdecbbcfedf21"},{"path":"skylos/engines/go/internal/symbols/symbols.go","sha256":"cd0ea637736dd6d32c2938d113aaaad58545c35dae638edc82c7870364b70b46"},{"path":"skylos/engines/go/internal/symbols/symbols_receiver_test.go","sha256":"063c8318662611695792c83133185e3b627d91858bea4e69dff5c57ef069bf1a"},{"path":"skylos/engines/go/internal/symbols/symbols_symlink_test.go","sha256":"06e52d7ed89081973c21388b42358e0149859ca7e9b6a32d6801ec0fc9705037"},{"path":"skylos/engines/go/internal/symbols/typed_selectors.go","sha256":"917aa6bd8403423e76a3da64cbdf72c5a3cbd52367372a14de45d99c9b166f5b"},{"path":"skylos/engines/go/skylos-go","sha256":"b7c96f8a1b818de1efc12a7de6be6f9ecb0f28089b30e38131104d3461389db8"},{"path":"skylos/engines/go_contract.py","sha256":"09c467f4d6e7cadded11599541ae75dd68baf11e06457850578e85389c9326a7"},{"path":"skylos/engines/go_runner.py","sha256":"76bdeef81ed3762d0db5f31e576c8b84de101938cd5308a06eb6a6397e268100"},{"path":"skylos/entry.py","sha256":"ef18dee4c227a81bb19cceed500c9a9c59ba470df1d241d072b0ea0628c96367"},{"path":"skylos/integrations/__init__.py","sha256":"12d6f89ba4f5a2650b687c1950871b4bdf2fa032cf04e12eee959198002f15f6"},{"path":"skylos/integrations/ingest.py","sha256":"d736776ce10745dcfa5db0a8d915d95f8c0c0044ce0b698ce6e875582d4ce361"},{"path":"skylos/integrations/shadow.py","sha256":"bce63812e2e698026f6974d8d0173c155a6d609c4517a2808d121a4ca072a5b0"},{"path":"skylos/integrations/sonar.py","sha256":"b5f1de5d3fe9eee6c117b6461111a884b63d95209e332bc7329e24bb03681ab8"},{"path":"skylos/integrations/trivy_image.py","sha256":"edc56ff7ee8862a147cefa04ed66f2a212197a5a55b4486185e58315f20073b0"},{"path":"skylos/llm/README.md","sha256":"9e75c3a7d119d9a669aea568097846df9021ee2302dd77bc5b9fc29f3ddc6928"},{"path":"skylos/llm/__init__.py","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"},{"path":"skylos/llm/_grounding.py","sha256":"6eabed776b022812b9ccfc0b05506dcbb1f8505e631528bfc1b2e6a815dcc947"},{"path":"skylos/llm/agents.py","sha256":"60be8afa05fb3d376c457e72b0d68ff17263bbea2ac8a770eae6a9241c94a1ef"},{"path":"skylos/llm/analyzer.py","sha256":"901c366133b2545a7e38344008d1cd92a8aae7e3a4ac1b921cf04934232778a3"},{"path":"skylos/llm/cleanup_orchestrator.py","sha256":"1f66669bb97eb1931b250bbe315c246e0c010dce5c684cbd10872afa42cbd08d"},{"path":"skylos/llm/cleanup_standards.md","sha256":"cc7203516eac2a3f8ffeb1090e518a96896a91bc93e204971f1222387a76abb9"},{"path":"skylos/llm/completion_diagnostics.py","sha256":"2c1729132aec2da7ac0d81f84599f29f597de8a50b17697f3d77ec9ee1129fbe"},{"path":"skylos/llm/context.py","sha256":"d002cea750c8b5396c0261d2fa43be9cbeb46aeafc16221958df834d654a884b"},{"path":"skylos/llm/dead_code_verifier.py","sha256":"823366d016c032d3c14763c564836dedbf2cbbbf797d5cb9268cbd161aeb80a5"},{"path":"skylos/llm/executor.py","sha256":"5df8d0b41d60608398d2ee6d614d55b3f57378fbcb1b5f46f596a07e6fbc3fad"},{"path":"skylos/llm/feedback.py","sha256":"077f8fa5ecc498a0aee3422fc38fe7745222cfe22c953f754d82067924de67a2"},{"path":"skylos/llm/finding_evidence.py","sha256":"708de6674fcc88ce54f700c5a10beb006aa0e844cbc4faa2b5d8f7a9d00399fa"},{"path":"skylos/llm/finding_verification.py","sha256":"19b648523b084bef732c7455cc2887f99b73ab2d6a78d7735f144b2dca6faca2"},{"path":"skylos/llm/graph.py","sha256":"e3843e5b86a8aca6094b5065ce91ee193f40e7f0e11cd57d676da25fcda5decc"},{"path":"skylos/llm/harness/__init__.py","sha256":"e7add63636df95da56710a1d61c2f8a997cd4f167a7b81c95b16007def5c10ff"},{"path":"skylos/llm/harness/ai_defect_challenge.py","sha256":"cd6066dca28d719146e8740b7e7807f931db98cf79aa0dab6680f2f04f5e2bc6"},{"path":"skylos/llm/harness/ai_defect_challenge_decisions.py","sha256":"58eefd87e6f002653b8ddf62529231ff64925b9a18bf7bc5c9bf2b104b078db9"},{"path":"skylos/llm/harness/ai_defect_challenge_models.py","sha256":"8a167cf78661f409c875a5651c57d61dff668f46a08928bd7d2336256b9d9a89"},{"path":"skylos/llm/harness/ai_defect_challenge_probes.py","sha256":"ffbd1f8a359206a1f4aa0961724321b054ca04849cee9cfa76e21b438663eeaf"},{"path":"skylos/llm/harness/ai_defect_challenge_prompt.py","sha256":"5a6e6927e0af4db8af95170da87ed39520d16ca5f474ac72d87ee24b3e1389d2"},{"path":"skylos/llm/harness/ai_defect_challenge_proof.py","sha256":"e9ce7d658c022f3e271a92fd0dfeb33eeed0cd1e7c7694c0147865f88a7dda73"},{"path":"skylos/llm/harness/guards.py","sha256":"134a9227b7aeaa42ba2341f81709a3a39bdba7f07fda5d8563f2716c9f13ed5d"},{"path":"skylos/llm/harness/replay.py","sha256":"ea6627bac191e6b3183491b59de24cc5bb82ea38012673dcc88305280cb2d3fc"},{"path":"skylos/llm/harness/runner.py","sha256":"ecd06eb4555232189057768b4808f0f6d5ba4afd535cd6582f79ecab030ebe72"},{"path":"skylos/llm/harness/tools.py","sha256":"25a7455c835409b0ccdf731903725b66f21392fbe669594f46f83df64d628afe"},{"path":"skylos/llm/harness/trace.py","sha256":"3dc9448befb70c790dff75cd13a19a25dea3c0b2abe3eb40335d5c64de898124"},{"path":"skylos/llm/harness/types.py","sha256":"31227d3a6ed329b6b716aaa24d84d81e84f900afc307ad899a085b5a95ac0fc3"},{"path":"skylos/llm/harness/verification.py","sha256":"9d664cee34b40af44545b902e4aca48a7a0366d45fa9c12604638ffdaaf8fb3c"},{"path":"skylos/llm/investigator/__init__.py","sha256":"b4bfe9f53614ffb8f591b860e5e0edbbe8c21ac92fcd442286cb5c7b67b59e34"},{"path":"skylos/llm/investigator/actions.py","sha256":"e661cd046c60b9f52fe819b673fa8ee62ad0d3aaa5d7a05f884ab4ab21e86e58"},{"path":"skylos/llm/investigator/adapter.py","sha256":"09ba23637be5113d6d80087da08e1e0ab50ab3d140f6bd4dd1567f278bfab93f"},{"path":"skylos/llm/investigator/evidence.py","sha256":"3406204948dac45440ed96cebda182b1d2d010e360c36912c52a3605c19c4e60"},{"path":"skylos/llm/investigator/findings.py","sha256":"4bc8ac9a84c0aa4a2d64cf96de8b5406b88a3b3c2bbf0949f7b2eb4c8c266284"},{"path":"skylos/llm/investigator/models.py","sha256":"3e5a27e69ea165d351f27f0250905cf7b801be65567c6a2178a85e9c018cced6"},{"path":"skylos/llm/investigator/orchestrator.py","sha256":"825b28363fb4c16435a55ea2cc465a41ca80cba40ccb646940d0a1238f3089a1"},{"path":"skylos/llm/investigator/prompts.py","sha256":"b5b78d57d6a39e2be4191d68da94a4402acdbd436a8261c03f914b76ed06242f"},{"path":"skylos/llm/investigator/protocol.py","sha256":"864cc948a098974e77c7b70c8dd9ff4eb3b55ead151c6528f858b35a0254036d"},{"path":"skylos/llm/investigator/repository_tools.py","sha256":"71e4fabf52e372c95ccd00a8a710b94d54452826982dfd40d129e92b0dbeab32"},{"path":"skylos/llm/investigator/reviewer_packs.py","sha256":"6f136e9dc8deb3ac5000f5719d2d883dab0e8054a9b9b22ecb06e9f105eb5fe2"},{"path":"skylos/llm/investigator/source_bounds.py","sha256":"5440fb5c8305372b61493cbf9ce81488e9e8788900f01526501e27f097fa479e"},{"path":"skylos/llm/jev_triage.py","sha256":"2e0a012c95c211e659a949d668d04f0037c74e28ef3cde838c4fd838a8bae263"},{"path":"skylos/llm/liveness.py","sha256":"944d6b304556f34a6795fc0fcadbf016f8882299505e0615d0248344cee22e70"},{"path":"skylos/llm/merger.py","sha256":"0d46b361856ba57a75c36187f6522ed86df56623b8daf81d9190b64515bb1c89"},{"path":"skylos/llm/orchestrator.py","sha256":"e575fe2b30b9b32733fb60e785c82168e10c39f91601d020e1a6b042b59889c9"},{"path":"skylos/llm/planner.py","sha256":"84cee6d07b3552205ae7ab0e6093c5138f916900476327f1a9aa2123bff1184b"},{"path":"skylos/llm/prompts.py","sha256":"9bf01bf8fc5a1e918d977374f636dba42c3f8d28c51ae744c90e644ceb082828"},{"path":"skylos/llm/repo_activation.py","sha256":"94f8fef682024511855735a264fd274ad51f37ba7b606d2e10e5e85e87c64c04"},{"path":"skylos/llm/review/__init__.py","sha256":"1b2fded65ba7832869e5fb5162ab3b58a94b89f8b7734b136f9e0b56ad3fec1e"},{"path":"skylos/llm/review/refuters.py","sha256":"090a669ac5ba2396ae087497aca2155edc5053befd2aae119e3c296166c61810"},{"path":"skylos/llm/review/routing.py","sha256":"0a41e5a987af79c48c9a4100004bd973583104383f48f8bee8dca99a8bd703ad"},{"path":"skylos/llm/review/static_findings.py","sha256":"cf99e1201127b95d594b62f1991108389f71e9a5459b967fe823d8ec49c1bda5"},{"path":"skylos/llm/runtime.py","sha256":"e19dc15520dde687cc771dd71011b3d8cae77114373b69802a6b4d5c7c6b7ad9"},{"path":"skylos/llm/schemas.py","sha256":"d927383e4ba2e8c8073988dc33e9ce3a47e92f5050e1d77ae5588694d92019a3"},{"path":"skylos/llm/security_taskflow.py","sha256":"75447d78a8a5b3c2e742135993e26aa1b72e1b17e31565bfd4380dbd4c9acab6"},{"path":"skylos/llm/security_verifier.py","sha256":"c70fb13931f2b3813469f266b476628c285310b1e2cb0f774bdb7b46ac838abb"},{"path":"skylos/llm/threat_trace.py","sha256":"a76565f7bd5d693469c075f10baf9f7a56c63400ed6509ea979d01923a1cc7f1"},{"path":"skylos/llm/ui.py","sha256":"0bb99494482b33d65b43d6f00f8f40960feea863550ea51b4960a19700a8777f"},{"path":"skylos/llm/validator.py","sha256":"b55e931b1dcc127db9dfa2e5829aebfe039bb4a96b4c062549a4f597e9bc8312"},{"path":"skylos/llm/verification/__init__.py","sha256":"e059001bfa413c80b78e7fe2e010450dc8f1b8445af700b0aca117fe2c04d664"},{"path":"skylos/llm/verification/candidate_selection.py","sha256":"259e9e0e835cc1c4b9c482746882128e2a245d559498fe55820e01af42605790"},{"path":"skylos/llm/verification/completion_phases.py","sha256":"79eefd936eecdf20868a3ac32320b756879bd43dea71de6f4c3f110c51978352"},{"path":"skylos/llm/verification/entry_points.py","sha256":"039d362fb485494d730916a05d79bacf51f85acf44907d67c9ee134d3993b113"},{"path":"skylos/llm/verification/jev_precheck.py","sha256":"c26910d5190c8899ee811dfaaaaf8b02b479564b9d8711dce119cb180ca78793"},{"path":"skylos/llm/verification/llm.py","sha256":"35b4a5f63dd421dff6e037b58b0a0824dd6af5b36d0bfbcf85b477ff044375d0"},{"path":"skylos/llm/verification/phases.py","sha256":"3a258127a368aacac1ef2248f14cde7914fd5de026251ed70a6bf76ba826ebe5"},{"path":"skylos/llm/verification/runtime.py","sha256":"0c0cf7ffe82c5250fa31171705755049b7934929f7b8643aa9a0cdc906197941"},{"path":"skylos/llm/verification/suppression_audit.py","sha256":"b4de8d37195a9790b3398dd1f332846ff1d7d16b1e5f8d94379fcb3417a19f60"},{"path":"skylos/llm/verification/survivors.py","sha256":"38f5601b667c56a7855cb9792799cde293c61ae9702285757eab513dc31b3b4a"},{"path":"skylos/llm/verification/types.py","sha256":"2471830aee7fe0644e20cd0ecf362522e19af17376c57b8720072e280784a54a"},{"path":"skylos/llm/verification/verify_findings.py","sha256":"8467c1267e9c6e225cb615d1ec5f85a72f7e2fa3b5bb19c1e730a24bfb162ca2"},{"path":"skylos/llm/verify_orchestrator.py","sha256":"fb8437f1d75d625fe4b4a147e3d0c731424f8c30da358d721e9309ac8e4a0c01"},{"path":"skylos/misc/update_mapping.py","sha256":"c0481f6d5fdcf20a11d7a6eecc666caaa78a62b314af2fdb3c3251a38b8e087b"},{"path":"skylos/pipeline.py","sha256":"bdfc79d9c386db18b32cb61d614bf497026ce8994e2c4235f1ec300303abbf36"},{"path":"skylos/plugins/__init__.py","sha256":"c7caf17bc03dd5816753082519139d7d1e0f085074109c8ec6c1873311d5a0e0"},{"path":"skylos/plugins/pytest_unused_fixtures.py","sha256":"04cb46aa48d38b219246499b1deff3d066c90b57882482400d0c0ae750b40bb9"},{"path":"skylos/preflight/__init__.py","sha256":"18012daa255463057b3338a3445e6182fb8833460ac4258f296d7bba97a0bf65"},{"path":"skylos/preflight/evaluator.py","sha256":"fc711d2f80d4b5be2ce09e7d0eba8d6389f87d5c53ad3dc50df9b22ab62dc0a4"},{"path":"skylos/preflight/inspector.py","sha256":"7458a56d82c9472040e2ff51246b04645fabaf8131351f47a4c6e29e87c69dd4"},{"path":"skylos/preflight/models.py","sha256":"6733c39823bec11e1d12548ed43c79a36f7ef9f91296ef0019d18ae864e98686"},{"path":"skylos/preflight/profile.py","sha256":"2e525312ef88e1de36cd2872a9721a048dc00ebf92fccaab2e90bd9afa962b1d"},{"path":"skylos/remediation/__init__.py","sha256":"6c3a2ffa7dee2dea6a80d0c1efae57cf815f9969543115d019b7ea70d2f3abf1"},{"path":"skylos/remediation/codemods.py","sha256":"2adc253876a2861a530a2a84a7d7bad0b381f68164bb137baa220f14d1b6107b"},{"path":"skylos/remediation/fixgen.py","sha256":"bd792541c60b61e9e24e086018db516f201d2d223ef3e23de08ce856e56ac986"},{"path":"skylos/remediation/regression_tests.py","sha256":"9df44629cb14839aa88f85645674b5c2776f7c98593af38ef0f6c9b37f78b140"},{"path":"skylos/remediation/safety.py","sha256":"9ad4bba9aeb1e9669eb952369af806de98f128ec4c89bc7646e3928b6c65606c"},{"path":"skylos/reporting/__init__.py","sha256":"e1e5713f61ed32729ef26f084ba6c952b45d56342a35798f86499f0df1350e69"},{"path":"skylos/reporting/advice_display.py","sha256":"312bc698edc0c897be00bda0b5c33113641e870a21880c4eb82ed57fc0d66562"},{"path":"skylos/reporting/advice_evidence.py","sha256":"a29a832f633a6b9828b6177dfaea0ccff01296874bec931ae7badbb463caf2c1"},{"path":"skylos/reporting/advice_policy.py","sha256":"d16e86a22fcd5fa9d5b087d64ef114559e2454aeb19bcb09cd2a2ad111d7d51a"},{"path":"skylos/reporting/advice_scope.py","sha256":"97c0a5ae6041f45e291577df8c9c0ed679ccf53bd82f193f69e4734c0b0739f4"},{"path":"skylos/reporting/architecture_result.py","sha256":"876136df3cdf914adf614c6d84717cc70d85ba37c0d136eb56e02118c9b98bde"},{"path":"skylos/reporting/assessment.py","sha256":"07657ee8613022d233878c6846ef9b90314cd542b21f6c0d205d2eaf40d50670"},{"path":"skylos/reporting/assessment_display.py","sha256":"10ece88acaa509fa70c27a8152ea8c28e7175baefdffabe5c06a22eedc9e9424"},{"path":"skylos/reporting/attribution_evidence.py","sha256":"62a18376901692b3ed00715ce89b874b09b1e3fa0690099e2f7b2918c9839ae8"},{"path":"skylos/reporting/container_sarif.py","sha256":"cc9822cc8070aabe22578b8410cb2c4dd5f055ce73872b49589369a5cf481e45"},{"path":"skylos/reporting/dead_code_result.py","sha256":"1ae0a13a993102a5b42e1dce7136ce6706cd4ac7fc4dd1984e9d232db5e680f3"},{"path":"skylos/reporting/finding_categories.py","sha256":"6f82d25cddeb0fa7fa86831653d1371de52830f59d88ce5927fe374b8f905931"},{"path":"skylos/reporting/finding_types.py","sha256":"12d7902d23c42d58ae14b3a76430dc6a5de7426396f00e3851227688f4e8d312"},{"path":"skylos/reporting/github_annotations.py","sha256":"18a48b9f2bce877960d96cf3f412271f96e828f08f6809f6f33feab216e97e9c"},{"path":"skylos/reporting/gitlab.py","sha256":"bb929ba2dc6ede6a57ad9dddab0530e962c35c88d3d99a173b966c9e9cd30030"},{"path":"skylos/reporting/grader.py","sha256":"2581645bf71a6b899ffcbdfa864beec9d3935b3560dcc8ce5b4ec46c285fdf2b"},{"path":"skylos/reporting/listing.py","sha256":"d5a83baf447e3cc05f6ab9cf8b8f37cfb7c7d1b9c5321d6ad30a96d8b44157c8"},{"path":"skylos/reporting/llm_report.py","sha256":"1c4c15aa3015bb0327b828025c605c2e03ba1119f3d5ba1fb89923d88d79f2c4"},{"path":"skylos/reporting/provenance.py","sha256":"25c57e3571d8ad99e3b32b91480b94727a1155428844e8652be3c95e3de9ef74"},{"path":"skylos/reporting/report_scope.py","sha256":"cb9d31d55cdf60c57592049e1533fd2a401731ef5d553ac683bbda51cf92842c"},{"path":"skylos/reporting/result_builder.py","sha256":"da5cb42a49fd05bbf77f7182d15581de6c552ab74f3ea462723166f92ed04e1a"},{"path":"skylos/reporting/rollups.py","sha256":"2d7945b4e453c2ab9b42a7c53727aa376cf28d8d0745e2c7ac9b59f8426b9ba2"},{"path":"skylos/reporting/sarif.py","sha256":"6cd297e06c654ec3fafdda382e1b9c4e165f6bd07d6e3792815821166a37151e"},{"path":"skylos/reporting/sbom.py","sha256":"f3fe659e290fdb4047e433a98ac613950e360c2e4e505c926e40fb2dd8f3fe97"},{"path":"skylos/reporting/sca_summary.py","sha256":"22710df6cc6ae82b3745800ad342e0dec193d6fb7a8d88db05ff781279117f41"},{"path":"skylos/reporting/spdx.py","sha256":"1cc012e5ba4dc7bc38f509b861718c2b8ec44ab3c5294559ec95d105bf5ae559"},{"path":"skylos/reporting/typing_coverage.py","sha256":"612b3536339d0268178d641cd13c77b9a493f80e49fef5912880d8a922a5b8ac"},{"path":"skylos/rules/__init__.py","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"},{"path":"skylos/rules/ai_defect/__init__.py","sha256":"0254c2f5476603adb7ccdc06e3f904197fb24313b1dbf8dfb7f7d821f427b193"},{"path":"skylos/rules/ai_defect/api_signature_hallucination.py","sha256":"7076fadb4df394e4b3eb2d2d50ad50e93b36087ee96099e7c20401ff1f5a02c9"},{"path":"skylos/rules/ai_defect/api_surface_drift.py","sha256":"fe8bdd0208faf8cfc9ac28cef6d1ee2454da30549372dcd6e8b4af5c4f970a37"},{"path":"skylos/rules/ai_defect/assertion_weakening.py","sha256":"ecde36c4fefb34b1a19abf03721d5788d3a4871143378c420440746d685bbd1b"},{"path":"skylos/rules/ai_defect/ci_permission_expansion.py","sha256":"e6377d9e21ee2d61046a90fc0c1f8b9ce906c348bf217537b2ca04e2da7f2a60"},{"path":"skylos/rules/ai_defect/dependency_bump_scan.py","sha256":"a3f5c1e4bca189f06734e5be77aac49aabd0484ef65f492e60605273a8db4749"},{"path":"skylos/rules/ai_defect/dependency_hallucination.py","sha256":"3a0ab4b19f914009ae190ef4c57951f0b54f01b95582d09c8b43f5187a198097"},{"path":"skylos/rules/ai_defect/dependency_truth.py","sha256":"bd9c700b6bd42d3a7be448b026de68c29a498d50b5d33f09b83fc2a351ce9dfc"},{"path":"skylos/rules/ai_defect/dependency_version_bump.py","sha256":"e18bc4b98720005d2a527a6df3345b58c2ad23ca279364b9e4a69c79470f26cf"},{"path":"skylos/rules/ai_defect/diff_dependencies.py","sha256":"9f675ee95f3971e1664b69dbc4660af9bb6257dfec62e86b968cbf23492ef040"},{"path":"skylos/rules/ai_defect/environment_dependencies.py","sha256":"7c6384717d9e72df9b05212c3e4bced81acbd4e58aa23afb2abd58a96d819ef9"},{"path":"skylos/rules/ai_defect/go_api_hallucination.py","sha256":"7dcea1c1663d2c9719149cf71ca880c46fa81053bbeaefae109fb9cefd529433"},{"path":"skylos/rules/ai_defect/guardrails/__init__.py","sha256":"3f126b9e607c822a0a452205b37cd3787fd065d6520d4388d6770b7a03a3ac6c"},{"path":"skylos/rules/ai_defect/guardrails/core.py","sha256":"ae1a295ed0999f09318b1713149e4bc8d9765b481222112534af16a3f144fbc7"},{"path":"skylos/rules/ai_defect/guardrails/markers.py","sha256":"02f3e9c64f06b65d0def0132d2856bdba9f84f143e75fc59fec13b10e5987415"},{"path":"skylos/rules/ai_defect/guardrails/reviewer.py","sha256":"aa35c20e3b7611caa129947889d08b30ef7eb9ae043d384be2cfa59de65ff8f6"},{"path":"skylos/rules/ai_defect/guardrails/scan.py","sha256":"4e184caddcab771223c009b313577cf8724d7be40d733994cf981d616f374147"},{"path":"skylos/rules/ai_defect/install_command.py","sha256":"09c983114486e942ee0baca679d7afc7853778b1bff454edaa4334fb13bc0ba5"},{"path":"skylos/rules/ai_defect/installed_modules_cache.py","sha256":"a1e77801a8e3a88fd59569caec76e3dac1668cefd437f8070abec114aacd995c"},{"path":"skylos/rules/ai_defect/java_api_hallucination.py","sha256":"619937b84c775a2e7615c73529d3fe6b5767a85413400a4866acf0d5baca4576"},{"path":"skylos/rules/ai_defect/java_api_hallucination_reporting.py","sha256":"01186b0c42ea7f52ecdf3318ef5f9dce2b02106c589cd23936eb84cb5c1ea580"},{"path":"skylos/rules/ai_defect/java_api_hallucination_resolution.py","sha256":"62f8f3c73b3aaa8978157b5549144140e116a069a77311794f36437938c6c9ad"},{"path":"skylos/rules/ai_defect/js_api_hallucination.py","sha256":"3bb17580da4bb32da6fc5f88d8ec87e7f68c5fb4bf513564cccb4f7a71dc9a4b"},{"path":"skylos/rules/ai_defect/js_api_namespace_references.py","sha256":"7821e7a3c87e60da19aab4e0ace0a886304cd9e8ad08631749d17a14b7282464"},{"path":"skylos/rules/ai_defect/js_api_reference_model.py","sha256":"7f26588a35da4ffa6320f4c3fe8de2ea2f44a6f913b44fdf19402b4f3ef36929"},{"path":"skylos/rules/ai_defect/js_api_references.py","sha256":"1b5ce7faf607a706d9e74228e4609f42f943cdb68ec3fc9d9ee7167129770f1e"},{"path":"skylos/rules/ai_defect/manifest_dependency_hallucination.py","sha256":"f11e9517169bb0af980bb5d3cddf9bcc89188feea03453a2202443448f7d586e"},{"path":"skylos/rules/ai_defect/module_facts_index.py","sha256":"89653375dfcf2175aa27096d14040442d1b40c525401b4191d65db7c0b15cd1c"},{"path":"skylos/rules/ai_defect/package_selection.py","sha256":"744f2cef53a61f19b985ee92b5e7bb2bb69c65ac6170c4a23558ac471c78dc90"},{"path":"skylos/rules/ai_defect/phantom_call.py","sha256":"3fb4eae976b347a7c91c0fff234031fb62544b97545de1b8fbf72e1f14e41974"},{"path":"skylos/rules/ai_defect/phantom_decorator.py","sha256":"4232c768af730d0369ac4aefc24e3ca6f6515be69038fce3e961d711bd6d9b13"},{"path":"skylos/rules/ai_defect/phantom_refs.py","sha256":"f82d838dda79716f6657ed2d11ae584452b81fa10da6c4d27f3fdbde35691ff4"},{"path":"skylos/rules/ai_defect/pipreqs_import_mapping.txt","sha256":"450740888033ca2555ed6d636562320c1ae9d06d33a6791415146bd68c1eeb5d"},{"path":"skylos/rules/ai_defect/pypi_wheel_modules.py","sha256":"f1d77476a9cf3c8debcfbc851d659fa6692a2d183cdeb96b976c1930d38acea9"},{"path":"skylos/rules/ai_defect/python_api_hallucination.py","sha256":"2ae2bef920276256468c59ff7bfdd2d545efd338376ad4581852090f5d070042"},{"path":"skylos/rules/ai_defect/test_impact.py","sha256":"ddd532795af28affa2d80459c6e0623a3b5512251ced77d2a1a0f2348589ac2d"},{"path":"skylos/rules/ai_defect/transitive_dependencies.py","sha256":"36e964c3ab60b8c44d715cbaf46b49d706c39d84081fd207f923a4e8655c23d1"},{"path":"skylos/rules/base.py","sha256":"35d5de1c713291d47281b1d2d9e33ce885d6bb21e4f28c1a0f042ef9c7bb4cc0"},{"path":"skylos/rules/catalog.py","sha256":"e91761c5b98a2d787f508c7953df19eb6635eb17c6d8429aaac0dd79cb1b7f8f"},{"path":"skylos/rules/compliance.py","sha256":"a58c98776aad36f63965af11c01fc1fe5dd59f311d71b2b3c9784d284c5fab83"},{"path":"skylos/rules/config/__init__.py","sha256":"7e4b0d8dc3f4ceb1f2d3a96b2fb5718c0e2adb89490dbdecd0239000d0503f37"},{"path":"skylos/rules/config/cicd/__init__.py","sha256":"f1d5206bf652aeb034e6677b06ecf1a8d4291d7b64fc47d9da3f4f7aa639fe60"},{"path":"skylos/rules/config/cicd/actions_expressions.py","sha256":"642a4e6d6fef1e4c411fa48159227cc0bafe680185be2d6f58ad29322cfc0112"},{"path":"skylos/rules/config/cicd/ai_agent_expressions.py","sha256":"745f12f792d3acd53e42c6898bec81c7773b0d41ea4cdd24d829b91feebbee4a"},{"path":"skylos/rules/config/cicd/ai_agent_versions.py","sha256":"d063f67a01416bcb7dfbfa70582aefdd323007787aca17b84adbc0b9daa48c5b"},{"path":"skylos/rules/config/cicd/ai_agents.py","sha256":"009046a604bc3496f2cf3a3f383d5d3cc4fe33f2408fde374c0732c3608a2c1a"},{"path":"skylos/rules/config/cicd/data/NOTICE.txt","sha256":"fa0e7df07960a8e80b0464b8a4317f3da27597efdaaabe9d4809e4f2cd34ded0"},{"path":"skylos/rules/config/cicd/data/code_inputs.json","sha256":"249d57f9b5ae1e7cd6f54c3f4e831cd09660697cf4aea5968e10d5f0941646c7"},{"path":"skylos/rules/config/cicd/data/context_capabilities.json","sha256":"5d948a5f0bbc50b31f508aac109f00ac8f10fc32b1903cf337b1f31ea05a7302"},{"path":"skylos/rules/config/cicd/github_actions.py","sha256":"84b8f09ecd56b9fad0cff6e1b24536b5a9a56596d2747ff6784ccadebe539d1c"},{"path":"skylos/rules/config/cicd/gitlab_ci.py","sha256":"8e4682745d792adb71427f3e4870a8dab73f8c1cdf37585f1eeae1d9f3193078"},{"path":"skylos/rules/config/cicd/runner_labels.py","sha256":"05cd022efa668cce41cb9fa632df97b5d388f16abc66646163ffff1b61038ea2"},{"path":"skylos/rules/config/cicd/template_injection.py","sha256":"d502adef3ef0e1d24532ae14b782a65b28acaf7495f4b7d9583416e2d2c9a674"},{"path":"skylos/rules/config/cicd/workflow_audits.py","sha256":"567626d6ec3cd2034bb158c72109f90939557010e685a73afb11c6791e5941ab"},{"path":"skylos/rules/config/cicd/yaml_source.py","sha256":"14e2bd3aa6c2975bd4a398948fe3d66a434dffb35c333856841d60ea3333fa72"},{"path":"skylos/rules/config/container/__init__.py","sha256":"1c8893c3d6002c36cdbc06c4d23572ff9ee6cb3b6cec17b90013593d95ef30b7"},{"path":"skylos/rules/config/container/dockerfile.py","sha256":"e7adf9af13dc53b4817ff16d3d30f462f24e5bd2ef5f021ba94b5116b282a9dc"},{"path":"skylos/rules/config/deployment/__init__.py","sha256":"2f70f3d1fe84d6f527b7bb4837310954eaf4f36ffcc94b0959a994828b2b4b88"},{"path":"skylos/rules/config/deployment/exposure.py","sha256":"ba7cdcf75caa5b5143f6656e1a1a226c0a039b767e0d23c5c72e3f6fb1394b6d"},{"path":"skylos/rules/config/edge/__init__.py","sha256":"46d6b306d09f86fc814e325121125c7bfdf9eaa88c09d876f01988f6e7b9ef24"},{"path":"skylos/rules/config/edge/docker_compose.py","sha256":"bc6c8b220597f0032095886b2f112f093787d963d1e8d1a27a4a531118624fca"},{"path":"skylos/rules/config/edge/systemd.py","sha256":"2da5dfa5a855ab975a77ff2fa1801ca19bf73f0bb128afca348ea25630d0729a"},{"path":"skylos/rules/config/findings.py","sha256":"6225802397264d355a726531021879f1f4f74d955a30610f7a2ead88645b38b3"},{"path":"skylos/rules/config/gpu/__init__.py","sha256":"01ec70814f77abc6a93bd6e85aebaf9aee5aa44098407c7e7a681a5d4e2c6824"},{"path":"skylos/rules/config/gpu/compatibility.py","sha256":"653bcc38b047b67cc33ebbf224df2604e1a76195807125692f501edb019eb0ac"},{"path":"skylos/rules/config/registry.py","sha256":"9072268ea9d07a8e6ab19b4a16110ffdbdda80ae96508e763bcac2fa31ddf01b"},{"path":"skylos/rules/custom.py","sha256":"de61a103f8be0f9393a8a9ae093b293704b330adc3d18d859a73c1b0a844a0dd"},{"path":"skylos/rules/danger/__init__.py","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"},{"path":"skylos/rules/danger/builtin_bindings.py","sha256":"914deac6a925f26a3d1d3a39cd6b61b25f9dd74775a3d1944f4fd072425b074a"},{"path":"skylos/rules/danger/calls.py","sha256":"f819b4c7b297286aa0fa86cdd51c2230e293790c977e2e5279df3f671a084a16"},{"path":"skylos/rules/danger/danger.py","sha256":"756a7dc3c2d009b4f86fdd0658fdf34eea1e3b3227197d9a3cdd5885eacf11a3"},{"path":"skylos/rules/danger/danger_access/__init__.py","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"},{"path":"skylos/rules/danger/danger_access/access_flow.py","sha256":"53288437535e47cf8ae55b062d0a22a1be5f2127bd12887d36e01c51ae5799c6"},{"path":"skylos/rules/danger/danger_agent/__init__.py","sha256":"6ab09ab59a11a099c70dfe12b424fd96c8f5584b519af8d115cc5f80f701ca6e"},{"path":"skylos/rules/danger/danger_agent/tool_privilege.py","sha256":"0169afed8339e542e5f43cd7f535a09e72ff1a2bff914013a07244d2a4c2e3d3"},{"path":"skylos/rules/danger/danger_cmd/__init__.py","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"},{"path":"skylos/rules/danger/danger_cmd/cmd_flow.py","sha256":"3b993381b9fd54358fa0fb0e8471557f4ac466b1b06b9e336f0007704b6e23b3"},{"path":"skylos/rules/danger/danger_cors/__init__.py","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"},{"path":"skylos/rules/danger/danger_cors/cors_flow.py","sha256":"2a3edce3cab47dbbb8fda0f4d22d03b117c715ca11ca295a1907156519d8a38e"},{"path":"skylos/rules/danger/danger_fs/__init__.py","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"},{"path":"skylos/rules/danger/danger_fs/closed_world.py","sha256":"a7e5220c25d3a8f03b0a88b7d0da66d2b02cebf8dd0fc90a851e1ef272cb7701"},{"path":"skylos/rules/danger/danger_fs/open_read_evidence.py","sha256":"eaa5b8cf708ed8c8ae7dc3099ab0b851b99a70fbb2720d230be4870417b5483b"},{"path":"skylos/rules/danger/danger_fs/path_flow.py","sha256":"001eceaa7a90206c35208ed827b2f3de29c5003ed0bb768b8f5291ad3a19ba41"},{"path":"skylos/rules/danger/danger_fs/path_open_modes.py","sha256":"9b8b3d797ed54f42709175f265ece5f47e902b51f6c1ce6f21946085f5d4c213"},{"path":"skylos/rules/danger/danger_fs/path_provenance.py","sha256":"e15906da6bea40a2e2440f851cd3addd9672753f74137f7e663f32bff75fb8d5"},{"path":"skylos/rules/danger/danger_fs/pytest_paths.py","sha256":"8c7a534482d33c87679f5c0c87f740be37b60f9db8b7fecea01c81f3786e3d36"},{"path":"skylos/rules/danger/danger_jwt/__init__.py","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"},{"path":"skylos/rules/danger/danger_jwt/jwt_flow.py","sha256":"774f4703c9a97cc1e0c5473d89de76c63e8f124a556e3e7ed538011ae139ee2d"},{"path":"skylos/rules/danger/danger_jwt/jwt_provenance.py","sha256":"5647f6bcd90400951bd2fc93a9dc39728a4ed0b9831b1e502d437ba6f8e7886f"},{"path":"skylos/rules/danger/danger_llm/__init__.py","sha256":"e77669329c316dedce9860a18bd5fd0498fa7a3cceb2ffaf0fdee3a7275fb146"},{"path":"skylos/rules/danger/danger_llm/consumption.py","sha256":"e08e743ab225262b025c9cb68b91aac3b527a029a0bfdf7e215ff2d0830a580b"},{"path":"skylos/rules/danger/danger_llm/llm_flow.py","sha256":"d4ff8f67c87438bb49ecdc577cd9ac9c0b693a3838a8e1846ef3700a8279f772"},{"path":"skylos/rules/danger/danger_llm/sensitivity.py","sha256":"199a9e574d3f1fad77629155b06bade2c6da36255010fa4283fd7745593bd072"},{"path":"skylos/rules/danger/danger_llm/utils.py","sha256":"ccda72ea6778eab8e637c56af2560290e62aa656435be0939be32e2c911c9f5c"},{"path":"skylos/rules/danger/danger_mcp/__init__.py","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"},{"path":"skylos/rules/danger/danger_mcp/mcp_flow.py","sha256":"cd6abaa8a8c1ee3471ed82d321ec7032eb7fe8797c874c033395e35cedcf1bdb"},{"path":"skylos/rules/danger/danger_ml/__init__.py","sha256":"a37b7b674592be0969cd7473c95a8dab6988db335047a55959587ec039b4552a"},{"path":"skylos/rules/danger/danger_ml/model_deserialization.py","sha256":"388e79d9a7972fd0540dca0703d0bff249ec205897da282a2c85e3e37edb25e5"},{"path":"skylos/rules/danger/danger_net/__init__.py","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"},{"path":"skylos/rules/danger/danger_net/ssrf_flow.py","sha256":"b4c5e24e8149bcfb41d040e4d9049c3f75f489ec0dc92f68d149dcd384cd545a"},{"path":"skylos/rules/danger/danger_redirect/__init__.py","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"},{"path":"skylos/rules/danger/danger_redirect/redirect_flow.py","sha256":"cff25f78d4e5e792f16e685355dbd6dbbc9e4bbd132436cd5e70132cb2fe6a76"},{"path":"skylos/rules/danger/danger_sql/__init__.py","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"},{"path":"skylos/rules/danger/danger_sql/sql_flow.py","sha256":"25a09c5cd4d0ab3be507ae7b22747c992ff1c053b0daced1342aabe82d673466"},{"path":"skylos/rules/danger/danger_sql/sql_raw_flow.py","sha256":"686351c651314ca5e359dc04f6dea591873992fd91e5c3976d8ee27370b654f3"},{"path":"skylos/rules/danger/danger_sql/sqlalchemy_provenance.py","sha256":"db5d2a63c8fec9db90c55c0ed0351aeab694d679339af35fdb1e1640ac47e4bd"},{"path":"skylos/rules/danger/danger_web/__init__.py","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"},{"path":"skylos/rules/danger/danger_web/html_context.py","sha256":"1b1b98dd02cae273e73d656c96ebcfe59f1186d9ed686d7cc9a7979229bdf918"},{"path":"skylos/rules/danger/danger_web/url_patterns.py","sha256":"82ca619314bbef13c27e9228aa4aecf0669602a394b0d35a739a588de7800dc5"},{"path":"skylos/rules/danger/danger_web/xss_flow.py","sha256":"516b9da8a43b41c229021a49a8a8125be09c3183377111aa3cc75ced16dd8fa2"},{"path":"skylos/rules/danger/danger_webhook/__init__.py","sha256":"ada131db6fc90090b420953a585e4b0c4bc8a1b1e22082771abde93ad6cdcd11"},{"path":"skylos/rules/danger/danger_webhook/webhook_flow.py","sha256":"a439f1db2cef7a59255356468387d12ee77ca503faadafeaa28cd472b6de1be4"},{"path":"skylos/rules/danger/module_namespace.py","sha256":"d86f7ff5fa5763aad9663dbf06f2c0759e498f2598f46891db6f9d542f640ce0"},{"path":"skylos/rules/danger/taint.py","sha256":"c600b9acaf099ccdacab7ddc91cdc5d80ae519eb663f965bc63fec7248aaa3b9"},{"path":"skylos/rules/danger/untrusted_sources.py","sha256":"d0c23a51f4ee4e8a7ab25d0e6fb1f20998642e67989e819c0d9b2619c0dec4bf"},{"path":"skylos/rules/quality/__init__.py","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"},{"path":"skylos/rules/quality/_annotation_contract.py","sha256":"e874ce126d601baf845bb5e9942baeeb44d75902cd2ffe30298ff2496cb8aedf"},{"path":"skylos/rules/quality/_argument_contracts.py","sha256":"5f59d64218251295980a08d2a3fead0c40ec0bf4cb313b85bd32b8e2331003dd"},{"path":"skylos/rules/quality/_ast_visit.py","sha256":"4c90f5774177cf1501897bd81ea05897d45672c619390f1ccb4b6d4f9468996c"},{"path":"skylos/rules/quality/_code_lines.py","sha256":"1cd7a1329e0eb49a08dc0f2c0c286f1ac4d0da0d8601fb11e8453b4aaf93cd94"},{"path":"skylos/rules/quality/_cohesion_declarations.py","sha256":"bc846d6ce78b187b6557d607b9f44d894d7ea18e70e69b30a68b42f59a7aac54"},{"path":"skylos/rules/quality/_framework_practices.py","sha256":"e6577eaae02868861c5306be9c4030562a15c086099b99a2549553797be0ce51"},{"path":"skylos/rules/quality/_function_defaults.py","sha256":"9a28206d84ffe6f45fe2de8fd40389514df7375be1922a5fd524e3525dded312"},{"path":"skylos/rules/quality/_import_bindings.py","sha256":"1f56cfbf4f6c33983fc5dd53a09a9a26dcb48d98025b9954ef9302769708d456"},{"path":"skylos/rules/quality/_lint_ignores.py","sha256":"5725220b2804dcbf053f815d8bcdcdeee038f331d99e79a84065b3b4dd71c0bc"},{"path":"skylos/rules/quality/_mutable_defaults.py","sha256":"334473154101643691a4f8526606a1cb5658027ca17fc14df46f6e33c898b083"},{"path":"skylos/rules/quality/_object_auth.py","sha256":"a8d524caaa88355d7fb02edb23c0c5c586fb5275697f4b365e5ab3e6fc943240"},{"path":"skylos/rules/quality/_overload_groups.py","sha256":"7097c2594fa5d6f3f04b8e29dbbf5df90c7096f6c23976ca76e9f6669ccf1ba8"},{"path":"skylos/rules/quality/_parameter_context.py","sha256":"ab4e00f505bf09c98d21034a535ba05badf917433fde2b0bb73ba0143cc2d73b"},{"path":"skylos/rules/quality/_protocols.py","sha256":"fdc3eec78c564478339e1ac2749fe38fb56ac30f64daf708abdf1be301aa1249"},{"path":"skylos/rules/quality/_provider_context.py","sha256":"06571b26d5c386d077ebbb87fbef1f58f29370c42e3c81314865d9e746ac74e4"},{"path":"skylos/rules/quality/_pytest_collection.py","sha256":"07baf93beebf74e9c89921e2caa99607820b0aada0c5dad8049ecacf3e4ee0af"},{"path":"skylos/rules/quality/_readability.py","sha256":"169da1b0d2dde5891b4d4c03742f2e5d2c01c7a6c94b623450706bf57aa5b6c6"},{"path":"skylos/rules/quality/_receiver_decorators.py","sha256":"36f9913139f8e492faec09418ea2a8f3a912ba44c91c6ee69a02691bc9dae9e8"},{"path":"skylos/rules/quality/_receiver_descriptors.py","sha256":"d29326528f606214c8d55f7c84fd0cee71330c21e65625d2a7895be0b22c7f59"},{"path":"skylos/rules/quality/_receivers.py","sha256":"4f5273d202f3863aa2c54646d57aaae22d7928d8a11084a465c207d38f29f93a"},{"path":"skylos/rules/quality/_scope.py","sha256":"33ffd92a1eb44b533f82f59023d48b2c2d36684d8818b9277e8057b7cfbe469c"},{"path":"skylos/rules/quality/_test_code.py","sha256":"982846e815b78a215879f757805dbe848497a78fa2d0c0a0d60088318387077b"},{"path":"skylos/rules/quality/_typing.py","sha256":"adaacb815e4effa286e1450ad9a654fdd07ab405d43d24de5e57b2177876f620"},{"path":"skylos/rules/quality/async_blocking.py","sha256":"aa1f65a0c712a9f6fa19bad06cbf79b8bb5cd996f26d90babf9cf177e784d42f"},{"path":"skylos/rules/quality/class_size.py","sha256":"8961234974f96d9848a8b2e8ef574e965a2a7839c14073a2b9f5d1de0495db34"},{"path":"skylos/rules/quality/clones.py","sha256":"00215528b306de02f0485ed5f1dd28bc7b5868196e7e3c9b190db1bc9420b08f"},{"path":"skylos/rules/quality/code_health.py","sha256":"1fcd42b53dfabb8cfc87821103eec7c4eb1cbbb793578dbbeb957619dc56d9dc"},{"path":"skylos/rules/quality/cohesion.py","sha256":"c0906c2b77da656a991a1929df3388d6878c453adb754f49b45511260e56a9f4"},{"path":"skylos/rules/quality/complexity.py","sha256":"b7d196a8d9a559f8cd4f48a9979d0145ee5a03bef327075be2f7c8901d873fc9"},{"path":"skylos/rules/quality/concurrency.py","sha256":"2a8749ea024a7fda9f31e690ea9ce3d56b1c3df1ad89b7dcdd5827f3781703af"},{"path":"skylos/rules/quality/coupling.py","sha256":"42bba5dbd33863bf72be430fd6dad52ed0cb5e9d0f72060d4be8471f8dc4cd5a"},{"path":"skylos/rules/quality/logic.py","sha256":"b9cbc0b3b2d4b48c383440789d3cbd5560a0c651725198673257599008b9a54f"},{"path":"skylos/rules/quality/logic_foundation.py","sha256":"dfd16e5a8ad7a888de5ee88960a47cabe0abadd92be1b07b661e844d85d0e455"},{"path":"skylos/rules/quality/logic_maintainability.py","sha256":"45931d54dc9a39b4d3f76fd980c8a7ff30591250c0ba4624e475fae616ab8c73"},{"path":"skylos/rules/quality/logic_security.py","sha256":"6d615b25eafa42b50cae7855c66ef2b1198d3728dfc37dab7976939ee4850d92"},{"path":"skylos/rules/quality/nesting.py","sha256":"c62172f0264913c76fc02811fc0b903ee638c42ecff722dffa56b80e6b329713"},{"path":"skylos/rules/quality/performance.py","sha256":"a31960efe77b8ffbd5321060fc92c74fdd88f67f930ad3d68f42f54a1f7a929a"},{"path":"skylos/rules/quality/policy.py","sha256":"f432f240c31e3325147158c98bdee7a50c3f2d1929d90b7ec12bde9332e788a1"},{"path":"skylos/rules/quality/practices.py","sha256":"e677c85a316308aaec1aa2d94a78f152188eed897471664893c87136ee269500"},{"path":"skylos/rules/quality/regression.py","sha256":"9bffe9518c4eca4042040b579ade3ca045c656cea89fa6b0809b713b27f5e646"},{"path":"skylos/rules/quality/slop.py","sha256":"9555526f4b8040ef97a76bcc5ca1c5c2ae8602d8006bd159a6dad96b0bef6165"},{"path":"skylos/rules/quality/standards.py","sha256":"41408c5d2069a79f2889040a32047846d09521d019eaab0510907d7fb3f912d2"},{"path":"skylos/rules/quality/structure.py","sha256":"46095d1105f18e354e93df50c8e58dacc894e5f47b407b52b9a29d3879135f35"},{"path":"skylos/rules/quality/unreachable.py","sha256":"d4afc05e96465716512a9f40ec18ae81ec25bb1324e35ff007787b64758b94c6"},{"path":"skylos/rules/quality/unused_deps.py","sha256":"b7e045c14fbb965b55a06100e7629f8370fb4c13929a2a0fc5ecdeb404166986"},{"path":"skylos/rules/sca/__init__.py","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"},{"path":"skylos/rules/sca/advisory_metadata.py","sha256":"5a1027c8bd03e5e5a4abbe445e0add8bd82b295c6db04d26e93fde314d2d5ba6"},{"path":"skylos/rules/sca/bun_lockfile.py","sha256":"61d42c405b52164f4abac8850d9cca7809e1c350154ff1c59eb2d2626830ace6"},{"path":"skylos/rules/sca/licenses.py","sha256":"4c4de2afa0516efdb388ec9441183e080027b624bcb7fdb7e2543af6e2771b75"},{"path":"skylos/rules/sca/lockfile_types.py","sha256":"3bf3332805960ba58c4cd55fe9bb962f537794956437c6971626255a40b24154"},{"path":"skylos/rules/sca/npm_lockfile.py","sha256":"10f4887fc5be5e78e75c3b059cd83e62d585cc9a95c0694d7812228110126dc4"},{"path":"skylos/rules/sca/osv_client.py","sha256":"f2df7e781bc79600890762b3659bb4c955b0297f018c067c73113a53a6c57cf3"},{"path":"skylos/rules/sca/pipfile_lockfile.py","sha256":"9dd785d668da4df5ba66055c6a9a8dcc49238a98106ab282a8de4d207caefbc8"},{"path":"skylos/rules/sca/pnpm_lockfile.py","sha256":"cc5c7387808f2b48353efb482ff96964b361482e810f28a2411ca3702b7bb8e4"},{"path":"skylos/rules/sca/poetry_lockfile.py","sha256":"3b6bb74554f8adeb3c3a69a638514a7aad4ed2f3a79bb0547583e02c0952dcdd"},{"path":"skylos/rules/sca/publisher_changes.py","sha256":"62a23f28cf5f60d5b1c6a402948d57b9e933d2a4d9518836e96f4d734099f512"},{"path":"skylos/rules/sca/reachability.py","sha256":"39811238e6d4fd0b0707ce41ecffb7a8f13c79ec0959366a2ab52971169750df"},{"path":"skylos/rules/sca/uv_lockfile.py","sha256":"9736b7445703dd939a4ef612aa9dd037f1ea517f17bd4e1eebf87f2626f80fd8"},{"path":"skylos/rules/sca/vulnerability_scanner.py","sha256":"6c8c89a89c8ed33f14d4093f5714ff17d3a25d8256be2e58c7725143aae1eaaa"},{"path":"skylos/rules/sca/yarn_lockfile.py","sha256":"41333faa47bbb5babc020316bb9a2efa37eb48f7f619963a0d221571e10bd7c4"},{"path":"skylos/rules/secret_shapes.py","sha256":"ed35a58a51d0f1fd8762e93ebb7ab0acfcb563f893784000af833001a72fc3af"},{"path":"skylos/rules/secrets.py","sha256":"bf042ed19188b84a0f3abcb1f79560f031b176a3b3a7455591f4ed46b9ba5571"},{"path":"skylos/rules/vibe_dictionary.py","sha256":"06407843a690e8693c6d214c1859c674cc3f076e2646341237741f59f2f79d1a"},{"path":"skylos/scale/__init__.py","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"},{"path":"skylos/scale/parallel_static.py","sha256":"af61798d3e4058ede40f125ef29af4fb1417634003eb8db773984df95f43b19a"},{"path":"skylos/security/__init__.py","sha256":"12b6d9e66565680b9dc709035268a2bd46f6ee94b49e7b5122f59629cb943e10"},{"path":"skylos/security/agent_instruction_paths.py","sha256":"a807fee1ad8950e3490f3188bde9d5dc9878b8ed5a74425ec0b77bb117c3e484"},{"path":"skylos/security/auth_regressions.py","sha256":"43c269e2995257ec5a47407489099f266032b22f54856f252a8487b067904f4c"},{"path":"skylos/security/canonicalize.py","sha256":"616f20638cb2d0b7cb18d77dcea4ebc4d51b2fab512009a8a4f9d489a265b2f1"},{"path":"skylos/security/command_guard.py","sha256":"625e4ce0de8696609845214c6cea5609fba008a92eb74ad96f999208bb21358f"},{"path":"skylos/security/command_guard_exfil.py","sha256":"68bbf75c8cbd8a4e81d95512e1fb280e254262f261b94d89ffc04dcbf5fca09f"},{"path":"skylos/security/command_guard_parse.py","sha256":"3e7dbc92abbd3a3e05400c4fd17e0e3c0f8b87aa4f4f5dfd97468e5052dd71a4"},{"path":"skylos/security/command_guard_paths.py","sha256":"461b1cf4ac2ff6a70cc1b32d38a070513bd87759ecb8ac14e23c4195dd51718a"},{"path":"skylos/security/command_guard_policy.py","sha256":"6a7894ba014bdfdb504a660e9d733e2a1d74b7d0d13860dd717ddaf5044f8b1e"},{"path":"skylos/security/command_guard_types.py","sha256":"da79587f7729748e1d980b863e80d03a643c3d804e9fda2aeb380e3d5a8280c9"},{"path":"skylos/security/contracts.py","sha256":"bb0ec8aee63c99fc3f62e49ae0e1dd55a1f62f94ac20485af5cf02d5b30ed674"},{"path":"skylos/security/injection_scanner.py","sha256":"2cb8995e02ddc78f96400b15d428c830daf1c2b5a04ccde1d68c258d255aa341"},{"path":"skylos/security/receiver_bindings.py","sha256":"d8f69feee9515802c6df35b43f0f14beb8256c0e5d3a04b7c7e45e0fadca0313"},{"path":"skylos/security/receiver_effects.py","sha256":"73f23a1f521b392288d02dba21419a0eece72bb05bfa0832cf95cf2cce7877c5"},{"path":"skylos/security/receiver_resolution.py","sha256":"f1c328dd8f25edd41743c732519a0f0031e05f83354f65cb44df5e6f31aeeda8"},{"path":"skylos/security/receiver_values.py","sha256":"0169a5c14937dabe256cbf6b63d7ca0352330b7fd6fa6f5bea160d0aacb77b6a"},{"path":"skylos/security/regression_diff.py","sha256":"898d0d6518e43a26c77ed705da210ced0b665b528cf7f4722379139b4fa7182d"},{"path":"skylos/security/regression_gate.py","sha256":"319179e15d5fdaf2834196022d959f063a210158b6dc0b0672bd3d6af282b691"},{"path":"skylos/security/static_trace.py","sha256":"b1d9287c8f4113bd46b3c7b2ddd1a2d56685b65b0c43a9a3db9aa6d414a321fb"},{"path":"skylos/security/static_trace_bindings.py","sha256":"d0e631223dc590cbb0686bb552a6df9a6c0e6618c0fb46288a00bc070721736b"},{"path":"skylos/security/static_trace_graph.py","sha256":"c55b5c70e1dc89aaad6ea9102b9910be429cbec766215cda82c1cf14bdee1ef6"},{"path":"skylos/security/static_trace_index.py","sha256":"c0dd7950040b522271c466a1bfe690de343c2f4c7f0c7a02376e1aaa1286aeda"},{"path":"skylos/security/static_trace_receivers.py","sha256":"32373fa2876c7592a7a95d54ab4f74494cd014abe36c42eeac9381eeab98af3e"},{"path":"skylos/security/static_trace_walk.py","sha256":"0da944ba3c867687a8b9c595a447be5d326fb6582f304454f6e1b225ebc3b717"},{"path":"skylos/security/trace_report.py","sha256":"c07c71a4c38237e6e83a76991f17b394b4bd0ffa3ed0fa1a13ece5575480ea50"},{"path":"skylos/ui/__init__.py","sha256":"2bbafb627297e42c087fd3c79caaddfad4c4c37af5dabb7505be86cbe4c63de6"},{"path":"skylos/ui/clipboard.py","sha256":"007bbe1b0aec4b4e953d4925ccd23791c13ff5c2c48a37b1a8ce59175b994786"},{"path":"skylos/ui/dead_code_evidence.py","sha256":"43d3a78a12358eed7eee18028dd36e99c380899e1cef84efe58ec69112e15b50"},{"path":"skylos/ui/help.py","sha256":"1da0c26ce62a80536d21f1af9e60df48673b4941072b0c1f5ca908535b740e05"},{"path":"skylos/ui/nudge.py","sha256":"9a72b23d6f3539248898904d9b35ebcc1b8192e1280063d266908cd8a8b243dc"},{"path":"skylos/ui/quality_advice.py","sha256":"f7d03f69dfffd0a5e37f44a3c5a018f8d64ccc883e5c7c4af253e02ff2ffe653"},{"path":"skylos/ui/rich_report.py","sha256":"fe3cabbedabd7cf28a51053f84bec7e2b5461b42be760f123acc63c5c0de6533"},{"path":"skylos/ui/scope_notes.py","sha256":"403c537648f1d2e670dc4c747223ffb7ece6d5629c45afbd465e761248f5ca24"},{"path":"skylos/ui/security_evidence.py","sha256":"6405b0d1570fee272def9f21815fcaa856cc3e85bb1bf41f3bdbd2940502b1fe"},{"path":"skylos/ui/security_trace.py","sha256":"e18fb819d78aee50aa8ada50b17398e05a77b8069295ee31c639b9f7483cf893"},{"path":"skylos/ui/terminal_report.py","sha256":"72465a0a440ef7fedfa797b89c72446f275b773c045547f2f33bac5bc9f66a9b"},{"path":"skylos/ui/tour.py","sha256":"2ae52fe7bcf48006f5d810942a8aa47817b0f4d3dfc2740a963c1518b6d5d7d1"},{"path":"skylos/ui/tui.py","sha256":"6063e0980807ee076cc48418cf9174c6e18ba9b0f22137a99e4c109f6682172d"},{"path":"skylos/verdict.py","sha256":"963c179f0e5917ee1d831fc1edf76746b045916e0455893c281110459aaf878c"},{"path":"skylos/verification/__init__.py","sha256":"91fe3651b255978d5cad68aef0d507e636faeb9d795b09c1d53cdd76e3eefab8"},{"path":"skylos/verification/behavior.py","sha256":"5a6c8505782825a71b23882a9cae0bcee6e3050b806baf52c4bba859672382db"},{"path":"skylos/verification/changes.py","sha256":"1705c176d88ca089e9cfee159a38a0d8cd1805dd15dd514e454a0be5de576396"},{"path":"skylos/verification/comparison.py","sha256":"7d3d4e4efd325dfa46b7c1853332513e6a043faae36c68f90b1f5592ab58af48"},{"path":"skylos/verification/context.py","sha256":"97cba879669e07221822b1a06d76796ac168bc8afad561e2961399d6c1afe92b"},{"path":"skylos/verification/explanations.py","sha256":"c11e43a19c14597e1962e2cc87a8711535ca264e76f3733dc4e403aeb419b76e"},{"path":"skylos/verification/refactor.py","sha256":"381753cf67b0923acf6c2f6ae3440313f5b6981ab3c58cef85592cb3c33bafbc"},{"path":"skylos/verification/render.py","sha256":"39933c15349ae558320f7a6ddba8b6671fcb6456c98bb1410000bbaf3a06dbe4"},{"path":"skylos/verification/windows_snapshot.py","sha256":"3f217c00158a568333f96ecc958778813bc758056df54ea3e4376e6feb10448d"},{"path":"skylos/verify_change.py","sha256":"3b1ebbdc824f87c360913b2601dba5b35f509e01e50baaec775bff28244a8893"},{"path":"skylos/visitors/__init__.py","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"},{"path":"skylos/visitors/base.py","sha256":"934362eda56f26c855df12c01f341c2415af0128e6191f155f157df396c0f030"},{"path":"skylos/visitors/framework_aware.py","sha256":"5caa2afba57315e9b8e43d948ae340c00cf1a0f6dc0bc666a3be624e9879a480"},{"path":"skylos/visitors/languages/__init__.py","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"},{"path":"skylos/visitors/languages/cpp/__init__.py","sha256":"36a3d0c1a50fa3e47c019b683cd8ce8b7f06e23e8b0a37be3a966cbdaec29895"},{"path":"skylos/visitors/languages/cpp/core.py","sha256":"137d11b4814190e22f586f201b4a940279447f4fdbb88ceac74fab5429e38b09"},{"path":"skylos/visitors/languages/csharp/__init__.py","sha256":"1db4d23d06a431d388d08dad15cf659f4e4d92ca0b483ef08626c4a7ff603adf"},{"path":"skylos/visitors/languages/csharp/_lex.py","sha256":"0a424bdb15285c5ed4ea16b8db43980bd43e0af3be81ff8f1a804c1fd428eee2"},{"path":"skylos/visitors/languages/csharp/core.py","sha256":"0273afaec31106f1c26f68c759347d2b9170f7130d4a56069c4ed2e85837c4d2"},{"path":"skylos/visitors/languages/csharp/danger.py","sha256":"65e2ce65ccb5c69704effe17790ef0ec410dd47f83b4002134bacb8a9cf1fca9"},{"path":"skylos/visitors/languages/csharp/quality.py","sha256":"dcb28874c2b47681e457036de4bd0a72b425a814e68e88b449d0ac6b28124c5e"},{"path":"skylos/visitors/languages/csharp/reachability.py","sha256":"d7f6b0fc71956628529110b1ad5d2f83e1ce886d788997de1ed6dd620bf5abdc"},{"path":"skylos/visitors/languages/dart/__init__.py","sha256":"61b97972e05c74b648dbb71bcabc96b00caa7bb5e3dbc151d75394b7d60253e5"},{"path":"skylos/visitors/languages/dart/core.py","sha256":"8d4d5d2c6963f5e1395433545d806c62cba6c7bbc36c0c7edb9ea7beda3e1566"},{"path":"skylos/visitors/languages/dart/danger.py","sha256":"8a905875bf72dd9edad0c5d1804e5bc5091c29405246cfeb17bc7d49c9ace7fe"},{"path":"skylos/visitors/languages/go/__init__.py","sha256":"154173d325b3ed91f5d68b27b394d3d3ef5488baa7c4bc576d8876986ad6524b"},{"path":"skylos/visitors/languages/go/go.py","sha256":"dbf3a31f834ccfa6b832ff17f78fcefc3ac98508f65140c7df6b6055cf090e45"},{"path":"skylos/visitors/languages/go/quality.py","sha256":"6e81c5a2b600410ee1cef235c86ae3683b41b9056cae2c5766bbe5dced903d4c"},{"path":"skylos/visitors/languages/java/__init__.py","sha256":"c76e846bc18d0b10847185bbb1e2d0874de2f67c7955b07da177e3bb42e1a79d"},{"path":"skylos/visitors/languages/java/core.py","sha256":"2cdc25919deee29b424e0eceb5c817d230bfd12d0734fed285df16d42fd85dea"},{"path":"skylos/visitors/languages/java/danger.py","sha256":"a5b51140da4c0c74f438441f54965f0e7c99f47e8d52380537f9086ada47ec83"},{"path":"skylos/visitors/languages/java/flow.py","sha256":"cfd9cffc60af5e6192209decc2ec9195878670d70c76db0ddefa702fa22caf69"},{"path":"skylos/visitors/languages/java/properties.py","sha256":"01f08275f204966c4caccc4a742a513efd666cee2371cb9e1029f3a20e190a23"},{"path":"skylos/visitors/languages/java/quality.py","sha256":"3d2f838f1e197ffd20ed144026f0572a9079ac62dff5a846846c68bb67996c6f"},{"path":"skylos/visitors/languages/java/source_helpers.py","sha256":"a215aa23faa5d73c4b9500ba037b57d350b631d54fb4d00a64adf0caacd31548"},{"path":"skylos/visitors/languages/kotlin/__init__.py","sha256":"2c5c185c15fabd62a161c18d086da7578ac6dc13d78f6953a4a3f1f0eab6fdb5"},{"path":"skylos/visitors/languages/kotlin/_lex.py","sha256":"57c342a8b5e05c6b472e0820d8b9044de4a249bd04d88d68ecb4ab7d564ac3da"},{"path":"skylos/visitors/languages/kotlin/core.py","sha256":"7982dd6a104ceae07529c3377a386541590cbfae23a9f0705c390dc58bbc5b4b"},{"path":"skylos/visitors/languages/php/__init__.py","sha256":"0c7e6a4f1a10d27d19c42ba335314092b2a3e64b76b1f6ad75b1812553d3160e"},{"path":"skylos/visitors/languages/php/blade.py","sha256":"a20d34a87614578d0b291c583e7203ed738a935e4ea8aa9e3c9e339dd4d4269a"},{"path":"skylos/visitors/languages/php/core.py","sha256":"2a7245d568e7674a56e456655aab4109f7a420e63cf73801ed2e56e338700aef"},{"path":"skylos/visitors/languages/php/danger.py","sha256":"c1440d7ea3f73ec58a8bd1d0d21114a4a14f9b8d50c4bba5900e13a9e6754e27"},{"path":"skylos/visitors/languages/php/laravel.py","sha256":"147c2c14075bd97d867b6dc79a116edc16c7fab1ce60c8bef8210470d088bc7f"},{"path":"skylos/visitors/languages/rust/__init__.py","sha256":"172db52c1366517781658bdf6e68708f498d601bfdd78c5f6aca4bf1c7c44ea2"},{"path":"skylos/visitors/languages/rust/core.py","sha256":"f5c76c2babcb23af7054c3cdae624a3386af84a9b9623ed3542a61a318599b91"},{"path":"skylos/visitors/languages/rust/danger.py","sha256":"7c2ce43e548cc85e09f041f38ead4de65b92b358cdfbea761cc844362d27c89a"},{"path":"skylos/visitors/languages/shell/__init__.py","sha256":"7c3472347d9657e47f43a48d2d944cb30a0b6e16f7a35771f2d12e457db1a50b"},{"path":"skylos/visitors/languages/shell/danger.py","sha256":"6b17eb7cf681840d7ec95cbeed000d281a97467468c457245e7bace2c1f9d0bd"},{"path":"skylos/visitors/languages/statement_scan.py","sha256":"fe663f671cef9dd0636cfd8a824258d6080c28c11a0df939a2e9eee74a4d163b"},{"path":"skylos/visitors/languages/typescript/__init__.py","sha256":"2a0aa0df4a40482bfe537fbd4eeef7878413c23a3e30711e72a891b6c9520a53"},{"path":"skylos/visitors/languages/typescript/analysis.py","sha256":"1129e71bb282b906301ad2027380f2181fb2f21eeba048c9603ef0de37fb26cd"},{"path":"skylos/visitors/languages/typescript/build_configs.py","sha256":"1938a18385ba7cafe3c0e2aedc36d8473d84e15eb264efdc65903e87bb96457e"},{"path":"skylos/visitors/languages/typescript/conventions.py","sha256":"fbc96d4fb86b18d79e15c2922596341823082f6c1836ebb871c45109041c7f9e"},{"path":"skylos/visitors/languages/typescript/core.py","sha256":"f704c437f319558b39e6f83cb0859ba604cb6dbbc07ab4fcb4883c3deab82c95"},{"path":"skylos/visitors/languages/typescript/danger.py","sha256":"007b78b962cb0d0303d162dde2c1d630df7227b04c5ec4bc63d877073f0ae630"},{"path":"skylos/visitors/languages/typescript/esbuild_static.py","sha256":"62b76da6637870f868700f0269a1029a9b0b02b015630c88e00ce0b04371c504"},{"path":"skylos/visitors/languages/typescript/express_taint.py","sha256":"7875aa94ad93894305ccfd6a648284fcbe99c824fb2de776a80cb6c9a218485f"},{"path":"skylos/visitors/languages/typescript/file_references.py","sha256":"ab76d2b3d6d9b247279296dbbc8318b39424dfdf8b623d78bc4865768ee34f8d"},{"path":"skylos/visitors/languages/typescript/framework.py","sha256":"65711413d719ae52a1a5644abce7d899201a67f506beb23245668a9ed14c529e"},{"path":"skylos/visitors/languages/typescript/grammar_gaps.py","sha256":"a83e4b5198e85413339a37bf2c448974a6c27708961b079009aa66f0968eb89c"},{"path":"skylos/visitors/languages/typescript/nextjs.py","sha256":"756d9629bd85decd11d6380ec49dc40cb8106b0f9d85608c64e0cf6b9b461185"},{"path":"skylos/visitors/languages/typescript/quality.py","sha256":"36afcfc4f47bce6720d395998e2d4a18af80bf3ab525553b455c9f7e56cfb678"},{"path":"skylos/visitors/languages/typescript/quality_signals.py","sha256":"fb79759524df6be5a355503dd9bca66b3c13e7727873c4d9e76675916d91a8e2"},{"path":"skylos/visitors/languages/typescript/resolve.py","sha256":"cd5324522c13a05db8ac3c8babf3b328ffd55845e808bee4ba484cfaabf08817"},{"path":"skylos/visitors/languages/typescript/safe_glob.py","sha256":"b0e9a083086dded6c3d43069283844ba29085333051453386b9677b73a410ffe"},{"path":"skylos/visitors/languages/typescript/security_flow.py","sha256":"3c7730bd135b259cb64f72ed91db322d14266a73b2c923b30673b05e71f3c45e"},{"path":"skylos/visitors/languages/typescript/security_proofs.py","sha256":"6c4af7db38e431defa2b25b34ed1b1e50c91ff5f08059ecfe61e6e3ee28d8b65"},{"path":"skylos/visitors/languages/typescript/source_lines.py","sha256":"bf2a555b79f4ed9d2fd968c42e1cb80dc667cc68cf944a9cd1ee564f89d2bcc5"},{"path":"skylos/visitors/languages/typescript/tool_configs.py","sha256":"55f4eb32ae4ef4c2e8e1610775ed6f9d1efd85df5cd4a90e46a95b4c35a0403b"},{"path":"skylos/visitors/languages/typescript/type_safety.py","sha256":"8797922e66bdc49cd9c0fb6bd59e48d63bc29a28a5e2590d6aab6890a84361e0"},{"path":"skylos/visitors/languages/typescript/workspace.py","sha256":"f4ba4a453c4b01ccc6d508efcaac12d158ba66f4b369328c6ced8751f1a2da95"},{"path":"skylos/visitors/registration_decorators.py","sha256":"1c2841299f3d565f50b88f0816578d1c9bd012263f223f9ee1fa4c090f0f13a6"},{"path":"skylos/visitors/test_aware.py","sha256":"8abb7a0b6ff0188d22273f7e0fb639d7c03e948b6f212835f6ca51187f33538f"}],"trackedSourceSha256":"a32e9c9705005a2515b83ec70c9269cb2692a47775a13baba6d873088ea3556f"},"environment":{"python":"3.14.4 (main, Apr  7 2026, 13:13:20) [Clang 15.0.0 (clang-1500.1.0.2.5)]","platform":"macOS-13.7.3-arm64-arm-64bit-Mach-O","machine":"arm64","processor":"arm","cpuCount":8,"dependencies":[{"name":"PyJWT","version":"2.13.0"},{"name":"PyYAML","version":"6.0.3"},{"name":"Pygments","version":"2.20.0"},{"name":"annotated-types","version":"0.8.0"},{"name":"anyio","version":"4.14.2"},{"name":"attrs","version":"26.1.0"},{"name":"blessed","version":"1.48.0"},{"name":"ca9","version":"0.6.0"},{"name":"certifi","version":"2026.7.22"},{"name":"cffi","version":"2.1.1"},{"name":"cfgv","version":"3.5.0"},{"name":"charset-normalizer","version":"3.4.9"},{"name":"click","version":"8.4.2"},{"name":"cryptography","version":"50.0.0"},{"name":"distlib","version":"0.4.3"},{"name":"editor","version":"1.8.0"},{"name":"filelock","version":"3.32.2"},{"name":"h11","version":"0.16.0"},{"name":"httpcore","version":"1.0.9"},{"name":"httpx","version":"0.28.1"},{"name":"httpx-sse","version":"0.4.3"},{"name":"identify","version":"2.6.19"},{"name":"idna","version":"3.18"},{"name":"iniconfig","version":"2.3.0"},{"name":"inquirer","version":"3.4.1"},{"name":"jaraco.classes","version":"3.4.0"},{"name":"jaraco.context","version":"6.1.2"},{"name":"jaraco.functools","version":"4.6.0"},{"name":"jinxed","version":"2.1.0"},{"name":"jsonschema","version":"4.26.0"},{"name":"jsonschema-specifications","version":"2025.9.1"},{"name":"keyring","version":"25.7.0"},{"name":"libcst","version":"1.9.0"},{"name":"linkify-it-py","version":"2.1.0"},{"name":"markdown-it-py","version":"4.2.0"},{"name":"mcp","version":"1.29.0"},{"name":"mdit-py-plugins","version":"0.6.1"},{"name":"mdurl","version":"0.1.2"},{"name":"more-itertools","version":"11.1.0"},{"name":"networkx","version":"3.6.1"},{"name":"nodeenv","version":"1.10.0"},{"name":"packaging","version":"26.3"},{"name":"pip","version":"26.1"},{"name":"platformdirs","version":"4.11.0"},{"name":"pluggy","version":"1.6.0"},{"name":"pre_commit","version":"4.6.1"},{"name":"pycparser","version":"3.0"},{"name":"pydantic","version":"2.13.4"},{"name":"pydantic-settings","version":"2.15.0"},{"name":"pydantic_core","version":"2.46.4"},{"name":"pyperclip","version":"1.11.0"},{"name":"pytest","version":"9.1.1"},{"name":"python-discovery","version":"1.5.0"},{"name":"python-dotenv","version":"1.2.2"},{"name":"python-multipart","version":"0.0.32"},{"name":"readchar","version":"4.2.2"},{"name":"referencing","version":"0.37.0"},{"name":"requests","version":"2.34.2"},{"name":"rich","version":"15.0.0"},{"name":"rpds-py","version":"2026.6.3"},{"name":"runs","version":"1.3.0"},{"name":"skylos","version":"4.50.1"},{"name":"sse-starlette","version":"3.4.8"},{"name":"starlette","version":"1.6.0"},{"name":"textual","version":"8.2.8"},{"name":"tomlkit","version":"0.15.1"},{"name":"tree-sitter","version":"0.26.0"},{"name":"tree-sitter-cpp","version":"0.23.4"},{"name":"tree-sitter-dart-orchard","version":"0.5.0"},{"name":"tree-sitter-go","version":"0.25.0"},{"name":"tree-sitter-java","version":"0.23.5"},{"name":"tree-sitter-php","version":"0.24.1"},{"name":"tree-sitter-rust","version":"0.24.2"},{"name":"tree-sitter-typescript","version":"0.23.2"},{"name":"typing-inspection","version":"0.4.2"},{"name":"typing_extensions","version":"4.16.0"},{"name":"uc-micro-py","version":"2.0.0"},{"name":"urllib3","version":"2.7.0"},{"name":"uv","version":"0.12.16"},{"name":"uvicorn","version":"0.52.1"},{"name":"virtualenv","version":"21.7.0"},{"name":"wcwidth","version":"0.8.2"},{"name":"xmod","version":"1.10.0"}],"pythonHashSeed":"randomized (-I ignores PYTHONHASHSEED)","pythonHashSeedRequested":"0","pythonIsolation":"-I (workers)"},"execution":{"command":["python","reproduce.py","--source","<clean-checkout>","--output","<new-output.json>"],"runnerSha256":"0eb10c2cd3d35d6c53dfce9c3d2f1e639bd2092d49116331fd58dfce5dd2bdde","network":"Python audit hook blocks connect/DNS; no network-dependent detectors enabled","targetCodeExecuted":false,"paidCalls":false,"caseTimeoutSeconds":120,"corpus":"All cases in the three public, project-authored regression manifests","comparisonPolicy":"Full isolated fixture scan; no changed_files/diff comparison (fixture copies contain no Git before/after history)","limits":["Development regression fixtures; no independent holdout or production accuracy claim","Security and quality labels are rule-level presence/absence expectations, not exhaustive finding labels","Unmatched findings remain in nativeReport and are not automatically classified as false positives","Timing is informational, one run on one machine; it is not included in correctness totals","No security or quality benchmark covers every Skylos rule, secret detector or SCA provider","Hash checks detect artifact changes; they do not establish independent label correctness","Profile differs from scripts/security_benchmark.py: changed_files is omitted because isolated fixtures have no Git comparison history; its original profile produced security_regression_unavailable ConfigError in a diagnostic run","all_advice=True retains raw advice checks; this report does not measure the terminal default noise level","The Python network audit hook does not sandbox native subprocesses; Go proxy, checksum service and toolchain downloads are disabled explicitly","Reproduction compares expected-case outcomes, not identical report bytes; temporary paths, timings and randomized Python hashing can vary"]},"finishedAt":"2026-10-22T01:13:14.056293+00:00"},"inputs":[{"path":"benchmarks/dead_code/fixtures/alembic_migration/versions/20260425_add_orders.py","sha256":"b54fafff7c752e8c7b2caa7d58c9ba7c2bfe26dd17cfde3704f49238fa8ec45f","content":"from alembic import op\nimport sqlalchemy as sa\n\n\nrevision = \"20260425_add_orders\"\ndown_revision = \"20260424_previous\"\n\n\ndef upgrade():\n    op.create_table(\n        \"orders\",\n        sa.Column(\"id\", sa.Integer(), primary_key=True),\n        sa.Column(\"name\", sa.String(length=200), nullable=False),\n    )\n\n\ndef downgrade():\n    op.drop_table(\"orders\")\n\n\ndef unused_migration_helper():\n    return \"manual only\"\n\n\nclass UnusedMigrationState:\n    pass\n"},{"path":"benchmarks/dead_code/fixtures/annotation_metadata_scope/app.py","sha256":"a868ddba8c1f220da4d4f64cbf89b21c8cf4a874c44a5ae82d3e85e985c97405","content":"from __future__ import annotations\n\nimport json\nfrom typing import Annotated, Any\nfrom typing_extensions import deprecated\n\n\ndef build_path(\n    value: Annotated[Any | None, deprecated(\"use route_examples\")] = None,\n    deprecated: bool = False,\n):\n    if deprecated:\n        return \"legacy\"\n    return value\n\n\nRESULT = build_path(\"demo\")\n\n\ndef unused_builder():\n    return \"stale\"\n"},{"path":"benchmarks/dead_code/fixtures/basic_unused_symbols/app.py","sha256":"ebb99c0f775c67f2d2111ee214667b3a23e62c67835a843a732a8f74226cc39f","content":"import json\nimport math\n\n\nUSED_SETTING = \"enabled\"\nUNUSED_SETTING = \"disabled\"\n\n\nclass UsedWorker:\n    def run(self):\n        return math.sqrt(16)\n\n\nclass UnusedWorker:\n    def run(self):\n        return {\"unused\": True}\n\n\ndef used_helper():\n    worker = UsedWorker()\n    return worker.run(), USED_SETTING\n\n\ndef unused_helper():\n    return \"not called\"\n\n\nRESULT = used_helper()\n"},{"path":"benchmarks/dead_code/fixtures/celery_tasks/app.py","sha256":"dd701550e062002635e8b3ab1d240f2777fe6da5ecfa253e5d3c91aff4b68ff8","content":"from celery import Celery, shared_task\n\n\ncelery_app = Celery(\"billing\")\n\n\n@celery_app.task(name=\"billing.send_receipt\")\ndef send_receipt(invoice_id):\n    return {\"sent\": invoice_id}\n\n\n@shared_task\ndef rebuild_rollups():\n    return \"rebuilt\"\n\n\ndef unused_task_helper():\n    return \"not scheduled\"\n\n\nclass UnusedTaskPayload:\n    def serialize(self):\n        return {}\n"},{"path":"benchmarks/dead_code/fixtures/django_management_command/shop/__init__.py","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","content":"\n"},{"path":"benchmarks/dead_code/fixtures/django_management_command/shop/management/__init__.py","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","content":"\n"},{"path":"benchmarks/dead_code/fixtures/django_management_command/shop/management/commands/__init__.py","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","content":"\n"},{"path":"benchmarks/dead_code/fixtures/django_management_command/shop/management/commands/rebuild_index.py","sha256":"4707f61ff82ddb9cdb3efba48147332f5a87d4dad55deab72b7ebdb3d0c2c722","content":"from django.core.management.base import BaseCommand\n\n\nclass Command(BaseCommand):\n    help = \"Rebuild the search index.\"\n\n    def add_arguments(self, parser):\n        parser.add_argument(\"--tenant\", default=\"default\")\n\n    def handle(self, *args, **options):\n        return rebuild_index(options[\"tenant\"])\n\n\ndef rebuild_index(tenant):\n    return f\"indexed:{tenant}\"\n\n\ndef unused_export_job():\n    return \"stale\"\n\n\nclass UnusedCommandHelper:\n    def build(self):\n        return \"unused\"\n"},{"path":"benchmarks/dead_code/fixtures/dynamic_registry_used/app.py","sha256":"fa8a84343c463064d4f6ad0da58346ceae314b5b441acd4bc45881772f1bc7c1","content":"REGISTRY = {}\n\n\ndef register(name):\n    def decorator(func):\n        REGISTRY[name] = func\n        return func\n\n    return decorator\n\n\n@register(\"create\")\ndef handle_create(payload):\n    return {\"created\": payload}\n\n\n@register(\"update\")\ndef handle_update(payload):\n    return {\"updated\": payload}\n\n\ndef dispatch(name, payload):\n    return REGISTRY[name](payload)\n\n\ndef unused_handler(payload):\n    return {\"unused\": payload}\n"},{"path":"benchmarks/dead_code/fixtures/explicit_reexports/app.py","sha256":"40eadb0f35180fcffd8778e0f9e21d56eb528ff8cefaa31885da5305fc598659","content":"import json\nimport pathlib as pathlib\nfrom os import PathLike as PathLike\n\n\ndef unused_helper():\n    return \"stale\"\n"},{"path":"benchmarks/dead_code/fixtures/fastapi_route_used/app.py","sha256":"92539f741abeac6f8085ba6af9b86733da34647d43b6e8ca302d535648bc1e1e","content":"from fastapi import Depends, FastAPI\n\n\napp = FastAPI()\n\n\ndef get_current_user():\n    return {\"name\": \"Ada\"}\n\n\n@app.get(\"/profile\")\ndef read_profile(user=Depends(get_current_user)):\n    return user\n\n\ndef unused_helper():\n    return \"not wired\"\n"},{"path":"benchmarks/dead_code/fixtures/flask_cli_blueprint/app.py","sha256":"e05f3bbc60a508983a7dddfd8e6f65402e4b45bfc509c8cb9d0719fc0daca259","content":"from flask import Blueprint, Flask\n\n\napp = Flask(__name__)\norders = Blueprint(\"orders\", __name__)\n\n\n@orders.get(\"/orders/<order_id>\")\ndef show_order(order_id):\n    return {\"id\": order_id}\n\n\n@app.cli.command(\"reindex-orders\")\ndef reindex_orders():\n    return \"queued\"\n\n\ndef unused_view_helper():\n    return \"not registered\"\n\n\nclass UnusedFormatter:\n    def format(self, value):\n        return f\"unused:{value}\"\n\n\napp.register_blueprint(orders)\n"},{"path":"benchmarks/dead_code/fixtures/go_service/go.mod","sha256":"188b212cde416c13b2cae3a00cbcb7de618feaa6c5094cb9ce109ff46ad78f58","content":"module example.com/golden-go-service\n\ngo 1.22\n"},{"path":"benchmarks/dead_code/fixtures/go_service/main.go","sha256":"1e4de845611b1785684761a54d5369db9ad3e73bdbb18b4ffb041d781b7a5d55","content":"package main\n\nimport \"net/http\"\n\nfunc main() {\n\thttp.HandleFunc(\"/health\", healthHandler)\n}\n\nfunc healthHandler(w http.ResponseWriter, r *http.Request) {\n\t_, _ = w.Write([]byte(formatStatus(\"ok\")))\n\t_ = r\n}\n\nfunc formatStatus(status string) string {\n\treturn status\n}\n\nfunc unusedReconciler() string {\n\treturn \"stale\"\n}\n"},{"path":"benchmarks/dead_code/fixtures/importlib_plugins/app.py","sha256":"2c61f090917a3f672adf840e96bcbdeeb63b50c300ccec99b70eb0a5aa5e6059","content":"from importlib import import_module\n\n\nPLUGIN_MODULE = \"plugins.email\"\n\n\ndef load_plugin(name=PLUGIN_MODULE):\n    module = import_module(name)\n    return module.send_email\n\n\ndef run_notification():\n    sender = load_plugin()\n    return sender(\"ops@example.com\")\n\n\ndef unused_loader():\n    return \"stale\"\n\n\nRESULT = run_notification()\n"},{"path":"benchmarks/dead_code/fixtures/importlib_plugins/plugins/__init__.py","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","content":"\n"},{"path":"benchmarks/dead_code/fixtures/importlib_plugins/plugins/email.py","sha256":"e9edd3c3ea6c5dc3d7a1595bfe5b381d6caace9862d64bb767be93281841ecfc","content":"def send_email(address):\n    return f\"sent:{address}\"\n\n\ndef unused_plugin_hook():\n    return \"unused\"\n\n\nclass UnusedPlugin:\n    pass\n"},{"path":"benchmarks/dead_code/fixtures/java_fxml_controller/PrintController.java","sha256":"2a54cc4150c329beca09fb9f97d1fcc63a438efcd12295d67bb245908b44a2b6","content":"import javafx.fxml.FXML;\n\nclass PrintController {\n  @FXML\n  private void printButtonAction() {\n    System.out.println(\"print\");\n  }\n\n  @FXML\n  private void staleAnnotated() {\n    System.out.println(\"stale annotation\");\n  }\n\n  private void staleHelper() {\n    System.out.println(\"stale\");\n  }\n}\n"},{"path":"benchmarks/dead_code/fixtures/java_fxml_controller/view.fxml","sha256":"6a5c9b272d7173c5b90118441d5cddf1221691b288bf542db124abc31236164c","content":"<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n\n<?import javafx.scene.control.Button?>\n\n<Button xmlns:fx=\"http://javafx.com/fxml/1\"\n        fx:controller=\"PrintController\"\n        onAction=\"#printButtonAction\"\n        text=\"Print\" />\n"},{"path":"benchmarks/dead_code/fixtures/java_service/App.java","sha256":"20357a439a670554b106223ba3f23a2fa8425d0db5f5deb4983905eded4e5b90","content":"public class App {\n  public static void main(String[] args) {\n    App app = new App();\n    app.handle();\n  }\n\n  void handle() {\n    formatStatus(\"ok\");\n  }\n\n  String formatStatus(String status) {\n    return status;\n  }\n\n  String unusedFormatter() {\n    return \"stale\";\n  }\n}\n\nclass UnusedController {\n  String render() {\n    return \"unused\";\n  }\n}\n"},{"path":"benchmarks/dead_code/fixtures/local_registration_decorator/app.py","sha256":"ff603802fd88e51a10a96b25e99430bcbb854a7f766bcfe2d307c3bc776a6b9f","content":"ACTIONS = {}\nSTARTUP_CALLBACKS = []\n\n\ndef action(name):\n    def decorator(func):\n        ACTIONS[name] = func\n        return func\n\n    return decorator\n\n\ndef on_startup(func):\n    STARTUP_CALLBACKS.append(func)\n    return func\n\n\n@action(\"resize\")\ndef resize_image(payload):\n    return payload[\"image\"]\n\n\n@action(\"archive\")\ndef archive_image(payload):\n    return payload[\"archive_id\"]\n\n\n@on_startup\ndef warm_cache():\n    return \"ready\"\n\n\ndef dispatch(name, payload):\n    return ACTIONS[name](payload)\n\n\ndef unused_action(payload):\n    return payload.get(\"stale\")\n"},{"path":"benchmarks/dead_code/fixtures/package_entrypoints/bench/__init__.py","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","content":"\n"},{"path":"benchmarks/dead_code/fixtures/package_entrypoints/bench/cli.py","sha256":"9e0ed7cc77e6162e930ae9d4ed718a0c67a6fb28798d9140129fb5adb37cdbde","content":"def main():\n    return format_status(\"ok\")\n\n\ndef format_status(value):\n    return f\"status:{value}\"\n"},{"path":"benchmarks/dead_code/fixtures/package_entrypoints/pyproject.toml","sha256":"7fa5f2607906a710efb56a64914dd822285e3f7ab5fa7ebb3225d361e154373b","content":"[project]\nname = \"golden-entrypoint-fixture\"\nversion = \"0.1.0\"\n\n[project.scripts]\nbench-cli = \"bench.cli:main\"\n"},{"path":"benchmarks/dead_code/fixtures/package_service_layers/app.py","sha256":"d2a27e0fab0ef11e2e1063cc483ce7c4a1b699f731c9093b7c93c40908b6be8b","content":"from service import create_invoice\n\n\ndef run_checkout():\n    return create_invoice({\"id\": \"inv_001\", \"total\": 42})\n\n\nRESULT = run_checkout()\n"},{"path":"benchmarks/dead_code/fixtures/package_service_layers/repository.py","sha256":"118183192d811807f9a1cd17beaf6095df036eb285f35fc44eb5bbf1f858a5fb","content":"class InvoiceRepository:\n    def save(self, invoice_id, status):\n        return {\"id\": invoice_id, \"status\": status}\n"},{"path":"benchmarks/dead_code/fixtures/package_service_layers/service.py","sha256":"ef5f9b3d40b5fabd108abcea363ff3ce5433e7897e7a92da367b7652db1465c1","content":"import json\nimport uuid\n\nfrom repository import InvoiceRepository\n\n\nACTIVE_STATUS = \"active\"\nUNUSED_STATUS = \"archived\"\n\n\nclass UnusedStrategy:\n    def apply(self, payload):\n        return payload\n\n\ndef create_invoice(payload):\n    repository = InvoiceRepository()\n    generated = uuid.uuid4().hex\n    invoice_id = payload.get(\"id\") or generated\n    return repository.save(invoice_id, ACTIVE_STATUS)\n\n\ndef _unused_reconcile(batch):\n    return [item[\"id\"] for item in batch]\n"},{"path":"benchmarks/dead_code/fixtures/pydantic_validators/app.py","sha256":"3d58d1364055a245ae7bed92e55a4cabec030127bda96d51590012863dcc9b5e","content":"from pydantic import BaseModel, field_validator, model_validator\n\n\nclass UserInput(BaseModel):\n    email: str\n\n    @field_validator(\"email\")\n    @classmethod\n    def normalize_email(cls, value):\n        return value.strip().lower()\n\n    @model_validator(mode=\"after\")\n    def ensure_domain(self):\n        return self\n\n\nclass UnusedSchema(BaseModel):\n    name: str\n\n\ndef build_user():\n    return UserInput(email=\"ADA@example.com\")\n\n\ndef unused_normalizer(value):\n    return value.casefold()\n\n\nRESULT = build_user()\n"},{"path":"benchmarks/dead_code/fixtures/pytest_fixtures/tests/test_orders.py","sha256":"6867a144e2f1dc7de13ff15538be7d60236caed4483cab75a313e9b8ecdba9ac","content":"import pytest\n\n\n@pytest.fixture\ndef api_client():\n    return {\"base_url\": \"https://api.internal\"}\n\n\n@pytest.fixture(name=\"order_payload\")\ndef payload_fixture():\n    return {\"id\": \"ord_001\"}\n\n\ndef test_create_order(api_client, order_payload):\n    assert api_client[\"base_url\"]\n    assert order_payload[\"id\"]\n"},{"path":"benchmarks/dead_code/fixtures/sqlalchemy_mixed_models/app.py","sha256":"aa75c16dc2c8c0db56dc25975d4affc01bb3867652de32b082876ace77833a93","content":"from repository import create_note\n\n\ndef build_demo_note():\n    return create_note(\"Launch notes\", \"Operational checklist\")\n\n\nRESULT = build_demo_note()\n"},{"path":"benchmarks/dead_code/fixtures/sqlalchemy_mixed_models/models.py","sha256":"8db2f669708170e2322fe88cb8d117a2d6dd0f2ab71be2adde25d5fda49cfcda","content":"from sqlalchemy import Integer, String, Text\nfrom sqlalchemy.orm import DeclarativeBase, Mapped, mapped_column\n\n\nclass Base(DeclarativeBase):\n    pass\n\n\nclass Note(Base):\n    __tablename__ = \"notes\"\n\n    id: Mapped[int] = mapped_column(Integer, primary_key=True)\n    title: Mapped[str] = mapped_column(String(200), nullable=False)\n    body: Mapped[str] = mapped_column(Text, nullable=False)\n\n\nclass AuditLog(Base):\n    __tablename__ = \"audit_log\"\n\n    id: Mapped[int] = mapped_column(Integer, primary_key=True)\n    action: Mapped[str] = mapped_column(String(100), nullable=False)\n\n\nclass Tag(Base):\n    __tablename__ = \"tags\"\n\n    id: Mapped[int] = mapped_column(Integer, primary_key=True)\n    name: Mapped[str] = mapped_column(String(64), nullable=False)\n"},{"path":"benchmarks/dead_code/fixtures/sqlalchemy_mixed_models/repository.py","sha256":"402dea7fd78c888c93a518a1b20fbb49db31e2e499aebb3e1963c8e29ef8345d","content":"from models import AuditLog, Note\n\n\ndef create_note(title: str, body: str) -> Note:\n    note = Note(title=title, body=body)\n    audit = AuditLog(action=\"note.created\")\n    return note if audit.action else note\n"},{"path":"benchmarks/dead_code/fixtures/ts_js_package/package.json","sha256":"401f3120c3e74c0551d90edc1d5e1050c803a42378b1645c813c4ad238b1ab8c","content":"{\n  \"name\": \"golden-ts-js-package\",\n  \"private\": true,\n  \"type\": \"module\",\n  \"main\": \"src/index.ts\"\n}\n"},{"path":"benchmarks/dead_code/fixtures/ts_js_package/src/index.ts","sha256":"6235eff3fd190a8919fbd080110f0510866e4bdd69c6d5902b9e1fd92604ceba","content":"import { runJob } from \"./service\";\n\nrunJob(\"nightly\");\n"},{"path":"benchmarks/dead_code/fixtures/ts_js_package/src/legacy.js","sha256":"06162d2e1181a0db65c9a6b7141a5a88d4d65ab310076db11ccc408f91b281bb","content":"export function legacySync() {\n  return \"legacy\";\n}\n"},{"path":"benchmarks/dead_code/fixtures/ts_js_package/src/service.ts","sha256":"5e28a5e1856988809fe0a59fb4a2469cf17f820adf9941828adaf6100f278273","content":"export function runJob(name: string): string {\n  return formatJob(name);\n}\n\nfunction formatJob(name: string): string {\n  return `job:${name}`;\n}\n\nexport function unusedTransform(name: string): string {\n  return name.trim().toUpperCase();\n}\n"},{"path":"benchmarks/dead_code/fixtures/typescript_vscode_pseudoterminal/package.json","sha256":"54cdcc8beba580a9f2b12a615f581d63f20d0a1c87c093475f884a3eeb98f835","content":"{\n  \"name\": \"vscode-pseudoterminal-fixture\",\n  \"private\": true,\n  \"main\": \"./out/extension.js\",\n  \"engines\": {\n    \"vscode\": \"^1.100.0\"\n  }\n}\n"},{"path":"benchmarks/dead_code/fixtures/typescript_vscode_pseudoterminal/src/extension.ts","sha256":"6349c6e4411b9be35a2f58776f669e70bc93777f720b2c1d5515f43cf1261f5c","content":"import * as vscode from \"vscode\";\n\nexport function activate() {\n  const execution = new vscode.CustomExecution(\n    async (): Promise<vscode.Pseudoterminal> => new BuildTerminal(),\n  );\n  const registration = vscode.tasks.registerTaskProvider(\n    \"build\",\n    new InternalTaskProvider(),\n  );\n  return { execution, registration };\n}\n\nclass BuildTerminal implements vscode.Pseudoterminal {\n  open(_dimensions: vscode.TerminalDimensions | undefined): void {}\n\n  close(): void {}\n\n  staleHelper(): string {\n    return \"stale\";\n  }\n}\n\nclass InternalTaskProvider implements vscode.TaskProvider<vscode.Task> {\n  provideTasks(): vscode.Task[] {\n    return [];\n  }\n\n  resolveTask(task: vscode.Task): vscode.Task {\n    return task;\n  }\n\n  staleProviderHelper(): string {\n    return \"stale\";\n  }\n}\n"},{"path":"benchmarks/dead_code/manifest.json","sha256":"4ffe68568cddc4e9288ff6088513152488cbd0af53d21f6f446d48e0e6fd011d","content":"{\n  \"version\": 1,\n  \"cases\": [\n    {\n      \"id\": \"basic-unused-symbols\",\n      \"path\": \"fixtures/basic_unused_symbols\",\n      \"description\": \"Basic unused functions, classes, imports, and module variables should be found while referenced symbols stay alive.\",\n      \"taxonomy\": [\"basic_detection\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/duriantaco/skylos\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Local deterministic fixture for core dead-code recall and precision.\"\n      },\n      \"scan\": {\n        \"confidence\": 0,\n        \"grep_verify\": true\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"unused\": [\n          {\"kind\": \"import\", \"file\": \"app.py\", \"symbol\": \"json\"},\n          {\"kind\": \"function\", \"file\": \"app.py\", \"symbol\": \"unused_helper\"},\n          {\"kind\": \"class\", \"file\": \"app.py\", \"symbol\": \"UnusedWorker\"},\n          {\"kind\": \"variable\", \"file\": \"app.py\", \"symbol\": \"UNUSED_SETTING\"},\n          {\"kind\": \"variable\", \"file\": \"app.py\", \"symbol\": \"RESULT\"}\n        ],\n        \"used\": [\n          {\"kind\": \"function\", \"file\": \"app.py\", \"symbol\": \"used_helper\"},\n          {\"kind\": \"class\", \"file\": \"app.py\", \"symbol\": \"UsedWorker\"},\n          {\"kind\": \"variable\", \"file\": \"app.py\", \"symbol\": \"USED_SETTING\"}\n        ]\n      }\n    },\n    {\n      \"id\": \"fastapi-route-used\",\n      \"path\": \"fixtures/fastapi_route_used\",\n      \"description\": \"FastAPI route handlers and dependency providers are framework entrypoints, not dead code.\",\n      \"taxonomy\": [\"framework_precision\", \"fastapi\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/fastapi/fastapi\",\n        \"license\": \"MIT\",\n        \"notes\": \"Distilled from FastAPI decorator and Depends patterns.\"\n      },\n      \"scan\": {\n        \"confidence\": 0,\n        \"grep_verify\": true\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"unused\": [\n          {\"kind\": \"function\", \"file\": \"app.py\", \"symbol\": \"unused_helper\"}\n        ],\n        \"used\": [\n          {\"kind\": \"function\", \"file\": \"app.py\", \"symbol\": \"get_current_user\"},\n          {\"kind\": \"function\", \"file\": \"app.py\", \"symbol\": \"read_profile\"}\n        ]\n      }\n    },\n    {\n      \"id\": \"dynamic-registry-used\",\n      \"path\": \"fixtures/dynamic_registry_used\",\n      \"description\": \"Handlers registered through an explicit local registry should stay alive while unregistered handlers are reported.\",\n      \"taxonomy\": [\"dynamic_dispatch\", \"precision_guard\"],\n      \"importance\": \"high\",\n      \"source\": {\n        \"repo\": \"https://github.com/duriantaco/skylos\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Local deterministic fixture for decorator-based registry liveness.\"\n      },\n      \"scan\": {\n        \"confidence\": 0,\n        \"grep_verify\": true\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"unused\": [\n          {\"kind\": \"function\", \"file\": \"app.py\", \"symbol\": \"unused_handler\"},\n          {\"kind\": \"function\", \"file\": \"app.py\", \"symbol\": \"dispatch\"}\n        ],\n        \"used\": [\n          {\"kind\": \"function\", \"file\": \"app.py\", \"symbol\": \"handle_create\"},\n          {\"kind\": \"function\", \"file\": \"app.py\", \"symbol\": \"handle_update\"}\n        ]\n      }\n    },\n    {\n      \"id\": \"local-registration-decorator-entrypoints\",\n      \"path\": \"fixtures/local_registration_decorator\",\n      \"description\": \"Locally defined decorators that register and return functions should keep decorated entrypoints alive while unregistered helpers are still reported.\",\n      \"taxonomy\": [\"dynamic_dispatch\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/duriantaco/skylos\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Distilled from real Python framework code that registers handlers through project-local decorators.\"\n      },\n      \"scan\": {\n        \"confidence\": 0,\n        \"grep_verify\": true\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"unused\": [\n          {\"kind\": \"function\", \"file\": \"app.py\", \"symbol\": \"dispatch\"},\n          {\"kind\": \"function\", \"file\": \"app.py\", \"symbol\": \"unused_action\"}\n        ],\n        \"used\": [\n          {\"kind\": \"function\", \"file\": \"app.py\", \"symbol\": \"action\"},\n          {\"kind\": \"function\", \"file\": \"app.py\", \"symbol\": \"on_startup\"},\n          {\"kind\": \"function\", \"file\": \"app.py\", \"symbol\": \"resize_image\"},\n          {\"kind\": \"function\", \"file\": \"app.py\", \"symbol\": \"archive_image\"},\n          {\"kind\": \"function\", \"file\": \"app.py\", \"symbol\": \"warm_cache\"}\n        ]\n      }\n    },\n    {\n      \"id\": \"explicit-same-name-reexports\",\n      \"path\": \"fixtures/explicit_reexports\",\n      \"description\": \"Python explicit same-name aliases are public re-export signals and should not be reported as unused imports.\",\n      \"taxonomy\": [\"package_entrypoint\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/pallets/click\",\n        \"license\": \"BSD-3-Clause\",\n        \"notes\": \"Distilled from package API modules that expose imports with `name as name` re-export aliases.\"\n      },\n      \"scan\": {\n        \"confidence\": 0,\n        \"grep_verify\": true\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"unused\": [\n          {\"kind\": \"import\", \"file\": \"app.py\", \"symbol\": \"json\"},\n          {\"kind\": \"function\", \"file\": \"app.py\", \"symbol\": \"unused_helper\"}\n        ],\n        \"used\": [\n          {\"kind\": \"import\", \"file\": \"app.py\", \"symbol\": \"pathlib\"},\n          {\"kind\": \"import\", \"file\": \"app.py\", \"symbol\": \"PathLike\"}\n        ]\n      }\n    },\n    {\n      \"id\": \"annotation-metadata-import-scope\",\n      \"path\": \"fixtures/annotation_metadata_scope\",\n      \"description\": \"Annotation metadata should bind to imported decorators even when a function parameter has the same leaf name.\",\n      \"taxonomy\": [\"pydantic\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/pydantic/pydantic\",\n        \"license\": \"MIT\",\n        \"notes\": \"Distilled from Annotated metadata patterns used by Pydantic and FastAPI.\"\n      },\n      \"scan\": {\n        \"confidence\": 0,\n        \"grep_verify\": true\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"unused\": [\n          {\"kind\": \"import\", \"file\": \"app.py\", \"symbol\": \"json\"},\n          {\"kind\": \"function\", \"file\": \"app.py\", \"symbol\": \"unused_builder\"},\n          {\"kind\": \"variable\", \"file\": \"app.py\", \"symbol\": \"RESULT\"}\n        ],\n        \"used\": [\n          {\"kind\": \"import\", \"file\": \"app.py\", \"symbol\": \"deprecated\"},\n          {\"kind\": \"function\", \"file\": \"app.py\", \"symbol\": \"build_path\"}\n        ]\n      }\n    },\n    {\n      \"id\": \"sqlalchemy-mixed-models\",\n      \"path\": \"fixtures/sqlalchemy_mixed_models\",\n      \"description\": \"A realistic model module should report only the unreferenced SQLAlchemy model while keeping used models and ORM columns quiet.\",\n      \"taxonomy\": [\"sqlalchemy\", \"multi_file\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/sqlalchemy/sqlalchemy\",\n        \"license\": \"MIT\",\n        \"notes\": \"Distilled from declarative model modules where some tables are repository-owned and some models are stale.\"\n      },\n      \"scan\": {\n        \"confidence\": 0,\n        \"grep_verify\": true\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"unused\": [\n          {\"kind\": \"class\", \"file\": \"models.py\", \"symbol\": \"Tag\"},\n          {\"kind\": \"variable\", \"file\": \"app.py\", \"symbol\": \"RESULT\"}\n        ],\n        \"used\": [\n          {\"kind\": \"class\", \"file\": \"models.py\", \"symbol\": \"Base\"},\n          {\"kind\": \"class\", \"file\": \"models.py\", \"symbol\": \"Note\"},\n          {\"kind\": \"class\", \"file\": \"models.py\", \"symbol\": \"AuditLog\"},\n          {\"kind\": \"variable\", \"file\": \"models.py\", \"symbol\": \"id\"},\n          {\"kind\": \"variable\", \"file\": \"models.py\", \"symbol\": \"title\"},\n          {\"kind\": \"variable\", \"file\": \"models.py\", \"symbol\": \"name\"},\n          {\"kind\": \"function\", \"file\": \"repository.py\", \"symbol\": \"create_note\"}\n        ]\n      }\n    },\n    {\n      \"id\": \"flask-cli-blueprint\",\n      \"path\": \"fixtures/flask_cli_blueprint\",\n      \"description\": \"Flask blueprint routes and app CLI commands are entrypoints, while nearby unregistered helpers remain dead code.\",\n      \"taxonomy\": [\"framework_precision\", \"flask\", \"cli_entrypoint\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/pallets/flask\",\n        \"license\": \"BSD-3-Clause\",\n        \"notes\": \"Distilled from production Flask apps with blueprints and application CLI commands.\"\n      },\n      \"scan\": {\n        \"confidence\": 0,\n        \"grep_verify\": true\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"unused\": [\n          {\"kind\": \"function\", \"file\": \"app.py\", \"symbol\": \"unused_view_helper\"},\n          {\"kind\": \"class\", \"file\": \"app.py\", \"symbol\": \"UnusedFormatter\"}\n        ],\n        \"used\": [\n          {\"kind\": \"function\", \"file\": \"app.py\", \"symbol\": \"show_order\"},\n          {\"kind\": \"function\", \"file\": \"app.py\", \"symbol\": \"reindex_orders\"},\n          {\"kind\": \"variable\", \"file\": \"app.py\", \"symbol\": \"orders\"}\n        ]\n      }\n    },\n    {\n      \"id\": \"package-service-layers\",\n      \"path\": \"fixtures/package_service_layers\",\n      \"description\": \"A small service/repository package should resolve cross-file references and still find stale local strategy code.\",\n      \"taxonomy\": [\"multi_file\", \"service_layer\", \"basic_detection\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/psf/requests\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Local industry-style fixture shaped like service/repository layers common in Python web services.\"\n      },\n      \"scan\": {\n        \"confidence\": 0,\n        \"grep_verify\": true\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"unused\": [\n          {\"kind\": \"import\", \"file\": \"service.py\", \"symbol\": \"json\"},\n          {\"kind\": \"function\", \"file\": \"service.py\", \"symbol\": \"_unused_reconcile\"},\n          {\"kind\": \"class\", \"file\": \"service.py\", \"symbol\": \"UnusedStrategy\"},\n          {\"kind\": \"variable\", \"file\": \"service.py\", \"symbol\": \"UNUSED_STATUS\"},\n          {\"kind\": \"variable\", \"file\": \"app.py\", \"symbol\": \"RESULT\"}\n        ],\n        \"used\": [\n          {\"kind\": \"function\", \"file\": \"app.py\", \"symbol\": \"run_checkout\"},\n          {\"kind\": \"function\", \"file\": \"service.py\", \"symbol\": \"create_invoice\"},\n          {\"kind\": \"class\", \"file\": \"repository.py\", \"symbol\": \"InvoiceRepository\"},\n          {\"kind\": \"variable\", \"file\": \"service.py\", \"symbol\": \"ACTIVE_STATUS\"}\n        ]\n      }\n    },\n    {\n      \"id\": \"django-management-command\",\n      \"path\": \"fixtures/django_management_command\",\n      \"description\": \"Django management command classes and lifecycle methods are CLI entrypoints while unrelated helpers remain dead code.\",\n      \"taxonomy\": [\"framework_precision\", \"django\", \"cli_entrypoint\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/django/django\",\n        \"license\": \"BSD-3-Clause\",\n        \"notes\": \"Distilled from Django management command modules under management/commands.\"\n      },\n      \"scan\": {\n        \"confidence\": 0,\n        \"grep_verify\": true\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"unused\": [\n          {\"kind\": \"function\", \"file\": \"shop/management/commands/rebuild_index.py\", \"symbol\": \"unused_export_job\"},\n          {\"kind\": \"class\", \"file\": \"shop/management/commands/rebuild_index.py\", \"symbol\": \"UnusedCommandHelper\"}\n        ],\n        \"used\": [\n          {\"kind\": \"class\", \"file\": \"shop/management/commands/rebuild_index.py\", \"symbol\": \"Command\"},\n          {\"kind\": \"function\", \"file\": \"shop/management/commands/rebuild_index.py\", \"symbol\": \"add_arguments\"},\n          {\"kind\": \"function\", \"file\": \"shop/management/commands/rebuild_index.py\", \"symbol\": \"handle\"},\n          {\"kind\": \"function\", \"file\": \"shop/management/commands/rebuild_index.py\", \"symbol\": \"rebuild_index\"},\n          {\"kind\": \"variable\", \"file\": \"shop/management/commands/rebuild_index.py\", \"symbol\": \"args\"},\n          {\"kind\": \"variable\", \"file\": \"shop/management/commands/rebuild_index.py\", \"symbol\": \"help\"}\n        ]\n      }\n    },\n    {\n      \"id\": \"celery-task-entrypoints\",\n      \"path\": \"fixtures/celery_tasks\",\n      \"description\": \"Celery task decorators should keep worker functions alive while unregistered helpers are reported.\",\n      \"taxonomy\": [\"framework_precision\", \"celery\", \"dynamic_dispatch\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/celery/celery\",\n        \"license\": \"BSD-3-Clause\",\n        \"notes\": \"Distilled from production task modules using app.task and shared_task.\"\n      },\n      \"scan\": {\n        \"confidence\": 0,\n        \"grep_verify\": true\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"unused\": [\n          {\"kind\": \"function\", \"file\": \"app.py\", \"symbol\": \"unused_task_helper\"},\n          {\"kind\": \"class\", \"file\": \"app.py\", \"symbol\": \"UnusedTaskPayload\"}\n        ],\n        \"used\": [\n          {\"kind\": \"function\", \"file\": \"app.py\", \"symbol\": \"send_receipt\"},\n          {\"kind\": \"function\", \"file\": \"app.py\", \"symbol\": \"rebuild_rollups\"},\n          {\"kind\": \"variable\", \"file\": \"app.py\", \"symbol\": \"celery_app\"}\n        ]\n      }\n    },\n    {\n      \"id\": \"pytest-fixture-entrypoints\",\n      \"path\": \"fixtures/pytest_fixtures\",\n      \"description\": \"Pytest tests and fixtures are runtime entrypoints even when referenced through parameter injection.\",\n      \"taxonomy\": [\"framework_precision\", \"pytest\", \"dynamic_dispatch\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/pytest-dev/pytest\",\n        \"license\": \"MIT\",\n        \"notes\": \"Distilled from tests that reference fixtures by argument name and custom fixture aliases.\"\n      },\n      \"scan\": {\n        \"confidence\": 0,\n        \"grep_verify\": true\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"unused\": [],\n        \"used\": [\n          {\"kind\": \"function\", \"file\": \"tests/test_orders.py\", \"symbol\": \"api_client\"},\n          {\"kind\": \"function\", \"file\": \"tests/test_orders.py\", \"symbol\": \"payload_fixture\"},\n          {\"kind\": \"function\", \"file\": \"tests/test_orders.py\", \"symbol\": \"test_create_order\"}\n        ]\n      }\n    },\n    {\n      \"id\": \"pydantic-validator-entrypoints\",\n      \"path\": \"fixtures/pydantic_validators\",\n      \"description\": \"Pydantic validators are framework-called methods while unrelated helpers are still reportable.\",\n      \"taxonomy\": [\"framework_precision\", \"pydantic\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/pydantic/pydantic\",\n        \"license\": \"MIT\",\n        \"notes\": \"Distilled from Pydantic v2 field_validator and model_validator usage.\"\n      },\n      \"scan\": {\n        \"confidence\": 0,\n        \"grep_verify\": true\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"unused\": [\n          {\"kind\": \"function\", \"file\": \"app.py\", \"symbol\": \"unused_normalizer\"},\n          {\"kind\": \"class\", \"file\": \"app.py\", \"symbol\": \"UnusedSchema\"},\n          {\"kind\": \"variable\", \"file\": \"app.py\", \"symbol\": \"RESULT\"}\n        ],\n        \"used\": [\n          {\"kind\": \"class\", \"file\": \"app.py\", \"symbol\": \"UserInput\"},\n          {\"kind\": \"function\", \"file\": \"app.py\", \"symbol\": \"normalize_email\"},\n          {\"kind\": \"function\", \"file\": \"app.py\", \"symbol\": \"ensure_domain\"},\n          {\"kind\": \"function\", \"file\": \"app.py\", \"symbol\": \"build_user\"},\n          {\"kind\": \"variable\", \"file\": \"app.py\", \"symbol\": \"cls\"},\n          {\"kind\": \"variable\", \"file\": \"app.py\", \"symbol\": \"email\"},\n          {\"kind\": \"variable\", \"file\": \"app.py\", \"symbol\": \"name\"}\n        ]\n      }\n    },\n    {\n      \"id\": \"alembic-migration-entrypoints\",\n      \"path\": \"fixtures/alembic_migration\",\n      \"description\": \"Alembic migration lifecycle functions and revision metadata are entrypoints; helper code can still be dead.\",\n      \"taxonomy\": [\"framework_precision\", \"alembic\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/sqlalchemy/alembic\",\n        \"license\": \"MIT\",\n        \"notes\": \"Distilled from Alembic revision modules under versions/.\"\n      },\n      \"scan\": {\n        \"confidence\": 0,\n        \"grep_verify\": true\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"unused\": [\n          {\"kind\": \"function\", \"file\": \"versions/20260425_add_orders.py\", \"symbol\": \"unused_migration_helper\"},\n          {\"kind\": \"class\", \"file\": \"versions/20260425_add_orders.py\", \"symbol\": \"UnusedMigrationState\"}\n        ],\n        \"used\": [\n          {\"kind\": \"function\", \"file\": \"versions/20260425_add_orders.py\", \"symbol\": \"upgrade\"},\n          {\"kind\": \"function\", \"file\": \"versions/20260425_add_orders.py\", \"symbol\": \"downgrade\"},\n          {\"kind\": \"variable\", \"file\": \"versions/20260425_add_orders.py\", \"symbol\": \"revision\"},\n          {\"kind\": \"variable\", \"file\": \"versions/20260425_add_orders.py\", \"symbol\": \"down_revision\"}\n        ]\n      }\n    },\n    {\n      \"id\": \"importlib-plugin-loading\",\n      \"path\": \"fixtures/importlib_plugins\",\n      \"description\": \"String-based importlib plugin loading should keep loaded plugin hooks alive while stale plugin code is reported.\",\n      \"taxonomy\": [\"dynamic_dispatch\", \"plugin_loading\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/duriantaco/skylos\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Local deterministic fixture for importlib.import_module plugin references.\"\n      },\n      \"scan\": {\n        \"confidence\": 0,\n        \"grep_verify\": true\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"unused\": [\n          {\"kind\": \"function\", \"file\": \"app.py\", \"symbol\": \"unused_loader\"},\n          {\"kind\": \"function\", \"file\": \"plugins/email.py\", \"symbol\": \"unused_plugin_hook\"},\n          {\"kind\": \"class\", \"file\": \"plugins/email.py\", \"symbol\": \"UnusedPlugin\"},\n          {\"kind\": \"variable\", \"file\": \"app.py\", \"symbol\": \"RESULT\"}\n        ],\n        \"used\": [\n          {\"kind\": \"function\", \"file\": \"app.py\", \"symbol\": \"load_plugin\"},\n          {\"kind\": \"function\", \"file\": \"app.py\", \"symbol\": \"run_notification\"},\n          {\"kind\": \"function\", \"file\": \"plugins/email.py\", \"symbol\": \"send_email\"},\n          {\"kind\": \"variable\", \"file\": \"app.py\", \"symbol\": \"PLUGIN_MODULE\"}\n        ]\n      }\n    },\n    {\n      \"id\": \"package-entrypoints\",\n      \"path\": \"fixtures/package_entrypoints\",\n      \"description\": \"pyproject project.scripts entrypoints should keep CLI functions alive.\",\n      \"taxonomy\": [\"package_entrypoint\", \"cli_entrypoint\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://packaging.python.org\",\n        \"license\": \"MIT\",\n        \"notes\": \"Distilled from Python package console-script metadata.\"\n      },\n      \"scan\": {\n        \"confidence\": 0,\n        \"grep_verify\": true\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"unused\": [],\n        \"used\": [\n          {\"kind\": \"function\", \"file\": \"bench/cli.py\", \"symbol\": \"main\"},\n          {\"kind\": \"function\", \"file\": \"bench/cli.py\", \"symbol\": \"format_status\"}\n        ]\n      }\n    },\n    {\n      \"id\": \"go-service-entrypoints\",\n      \"path\": \"fixtures/go_service\",\n      \"description\": \"Go HTTP handler references should keep live handlers reachable while stale package-private helpers are reported.\",\n      \"languages\": [\"go\"],\n      \"taxonomy\": [\"go\", \"basic_detection\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/golang/go\",\n        \"license\": \"BSD-3-Clause\",\n        \"notes\": \"Distilled from small Go services that register net/http handlers.\"\n      },\n      \"scan\": {\n        \"confidence\": 0,\n        \"grep_verify\": true\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"unused\": [\n          {\"kind\": \"function\", \"file\": \"main.go\", \"symbol\": \"unusedReconciler\"}\n        ],\n        \"used\": [\n          {\"kind\": \"function\", \"file\": \"main.go\", \"symbol\": \"main\"},\n          {\"kind\": \"function\", \"file\": \"main.go\", \"symbol\": \"healthHandler\"},\n          {\"kind\": \"function\", \"file\": \"main.go\", \"symbol\": \"formatStatus\"}\n        ]\n      }\n    },\n    {\n      \"id\": \"java-service-entrypoints\",\n      \"path\": \"fixtures/java_service\",\n      \"description\": \"Java application entrypoints and method calls should stay live while unused methods and classes are reported.\",\n      \"languages\": [\"java\"],\n      \"taxonomy\": [\"java\", \"basic_detection\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/openjdk/jdk\",\n        \"license\": \"GPL-2.0-only WITH Classpath-exception-2.0\",\n        \"notes\": \"Distilled from Java service classes with application entrypoints and stale helpers.\"\n      },\n      \"scan\": {\n        \"confidence\": 0,\n        \"grep_verify\": true\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"unused\": [\n          {\"kind\": \"function\", \"file\": \"App.java\", \"symbol\": \"unusedFormatter\"},\n          {\"kind\": \"class\", \"file\": \"App.java\", \"symbol\": \"UnusedController\"}\n        ],\n        \"used\": [\n          {\"kind\": \"class\", \"file\": \"App.java\", \"symbol\": \"App\"},\n          {\"kind\": \"function\", \"file\": \"App.java\", \"symbol\": \"main\"},\n          {\"kind\": \"function\", \"file\": \"App.java\", \"symbol\": \"handle\"},\n          {\"kind\": \"function\", \"file\": \"App.java\", \"symbol\": \"formatStatus\"}\n        ]\n      }\n    },\n    {\n      \"id\": \"java-fxml-controller-callbacks\",\n      \"path\": \"fixtures/java_fxml_controller\",\n      \"description\": \"JavaFX methods wired through FXML action metadata are framework callbacks, while unwired @FXML methods and ordinary helpers remain dead code.\",\n      \"languages\": [\"java\"],\n      \"taxonomy\": [\"java\", \"framework_precision\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/jakemarotta/FXMLExercise\",\n        \"license\": \"NOASSERTION\",\n        \"notes\": \"Distilled from @FXML controller callbacks reproduced at pinned revision a75a2c16042d06674fd2361238c9c4933cbdd4be.\"\n      },\n      \"scan\": {\n        \"confidence\": 0,\n        \"grep_verify\": true\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"unused\": [\n          {\"kind\": \"function\", \"file\": \"PrintController.java\", \"symbol\": \"staleAnnotated\"},\n          {\"kind\": \"function\", \"file\": \"PrintController.java\", \"symbol\": \"staleHelper\"}\n        ],\n        \"used\": [\n          {\"kind\": \"class\", \"file\": \"PrintController.java\", \"symbol\": \"PrintController\"},\n          {\"kind\": \"function\", \"file\": \"PrintController.java\", \"symbol\": \"printButtonAction\"}\n        ]\n      }\n    },\n    {\n      \"id\": \"typescript-vscode-pseudoterminal-callbacks\",\n      \"path\": \"fixtures/typescript_vscode_pseudoterminal\",\n      \"description\": \"VS Code Pseudoterminal and provider contract methods are host-invoked callbacks, while unrelated methods on the same classes remain dead code.\",\n      \"languages\": [\"typescript\"],\n      \"taxonomy\": [\"typescript\", \"framework_precision\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/microsoft/vscode-extension-samples\",\n        \"license\": \"MIT\",\n        \"notes\": \"Distilled from the task-provider sample at pinned revision 3d8442b16c7f353779e266f16295703b2b4a6dcc.\"\n      },\n      \"scan\": {\n        \"confidence\": 0,\n        \"grep_verify\": true\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"unused\": [\n          {\"kind\": \"function\", \"file\": \"src/extension.ts\", \"symbol\": \"staleHelper\"},\n          {\"kind\": \"function\", \"file\": \"src/extension.ts\", \"symbol\": \"staleProviderHelper\"}\n        ],\n        \"used\": [\n          {\"kind\": \"function\", \"file\": \"src/extension.ts\", \"symbol\": \"activate\"},\n          {\"kind\": \"class\", \"file\": \"src/extension.ts\", \"symbol\": \"BuildTerminal\"},\n          {\"kind\": \"class\", \"file\": \"src/extension.ts\", \"symbol\": \"InternalTaskProvider\"},\n          {\"kind\": \"function\", \"file\": \"src/extension.ts\", \"symbol\": \"open\"},\n          {\"kind\": \"function\", \"file\": \"src/extension.ts\", \"symbol\": \"close\"},\n          {\"kind\": \"function\", \"file\": \"src/extension.ts\", \"symbol\": \"provideTasks\"},\n          {\"kind\": \"function\", \"file\": \"src/extension.ts\", \"symbol\": \"resolveTask\"}\n        ]\n      }\n    },\n    {\n      \"id\": \"ts-js-package-reachability\",\n      \"path\": \"fixtures/ts_js_package\",\n      \"description\": \"TypeScript package entrypoints and imports should keep live exports reachable while stale TS and JS exports are reported.\",\n      \"languages\": [\"typescript\", \"javascript\"],\n      \"taxonomy\": [\"typescript\", \"javascript\", \"package_entrypoint\", \"basic_detection\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/microsoft/TypeScript\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Distilled from package.json main entrypoints and mixed TS/JS module graphs.\"\n      },\n      \"scan\": {\n        \"confidence\": 0,\n        \"grep_verify\": true\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"unused\": [\n          {\"kind\": \"function\", \"file\": \"src/service.ts\", \"symbol\": \"unusedTransform\"},\n          {\"kind\": \"function\", \"file\": \"src/legacy.js\", \"symbol\": \"legacySync\"},\n          {\"kind\": \"file\", \"file\": \"src/legacy.js\", \"symbol\": \"src/legacy.js\"}\n        ],\n        \"used\": [\n          {\"kind\": \"function\", \"file\": \"src/service.ts\", \"symbol\": \"runJob\"},\n          {\"kind\": \"function\", \"file\": \"src/service.ts\", \"symbol\": \"formatJob\"}\n        ]\n      }\n    }\n  ]\n}\n"},{"path":"benchmarks/quality/fixtures/argument_overload/pyproject.toml","sha256":"73fc7c0fa3a0c54f6ae184e2561b6085292028836fca68029f7150563968aedc","content":"[tool.skylos]\nmax_args = 3\n"},{"path":"benchmarks/quality/fixtures/argument_overload/service.py","sha256":"9e78a120f7b0591f4e7b544f00dcd69db4fdcd7802c44c1ef7316f2711a36772","content":"def build_request(user_id, account_id, region, timeout, retries):\n    return {\n        \"user_id\": user_id,\n        \"account_id\": account_id,\n        \"region\": region,\n        \"timeout\": timeout,\n        \"retries\": retries,\n    }\n\n\ndef helper(user_id, timeout=1):\n    return user_id, timeout\n"},{"path":"benchmarks/quality/fixtures/clean_module/module.py","sha256":"43876cea77b2b5fdf12562bbc485ad6a01f551bcbf81132523618892269d7356","content":"def normalize_name(value, default=None):\n    if value is None:\n        return default\n    return value.strip().title()\n\n\ndef join_parts(parts):\n    return \"-\".join(part.strip() for part in parts if part)\n"},{"path":"benchmarks/quality/fixtures/complexity_hotspot/app.py","sha256":"f97f4c0fc374deb1f8fe0ca8d46861ef1e7f570c237294e88f33c878e126e887","content":"def branchy_handler(flag_a, flag_b, flag_c):\n    if flag_a:\n        if flag_b:\n            return 1\n        return 2\n    if flag_c:\n        return 3\n    return 4\n\n\ndef simple_handler():\n    return 1\n"},{"path":"benchmarks/quality/fixtures/complexity_hotspot/pyproject.toml","sha256":"c41aad417521c2196a164475cf3810175538fb96cf6b2ecd994f93d4dce9126a","content":"[tool.skylos]\ncomplexity = 3\n"},{"path":"benchmarks/quality/fixtures/empty_error_handler/module.py","sha256":"dc2f7a8df95c82934952d1a1b4ed4cbaa418112f6a70118d57097f8f43506d81","content":"def parse_payload(payload):\n    try:\n        return int(payload)\n    except Exception:\n        pass\n\n    return 0\n"},{"path":"benchmarks/quality/fixtures/framework_route_policy/app.py","sha256":"df850f5c46f758945cf12fc04237d8813fbad72eabad79c4b8e82245c7fec283","content":"from fastapi import APIRouter, Depends\n\nrouter = APIRouter()\n\n\ndef require_admin() -> bool:\n    return True\n\n\n@router.post(\"/users\")\ndef create_user(payload: dict) -> dict:\n    return payload\n\n\n@router.get(\"/users\", response_model=list[str])\ndef list_users() -> list[str]:\n    return []\n\n\n@router.post(\"/admin\")\ndef create_admin(payload: dict, user: bool = Depends(require_admin)) -> dict:\n    return payload\n"},{"path":"benchmarks/quality/fixtures/go_service_quality_hotspot/go.mod","sha256":"660fc9ca5e595a0d1cf4a6d66a8b419590f0413ddf86bbf0d9b49ebe8c427d27","content":"module example.com/quality\n\ngo 1.22\n"},{"path":"benchmarks/quality/fixtures/go_service_quality_hotspot/service.go","sha256":"8c8fbcd39af44873667daec00a535dbaf4727a6577ab8f092a90813c466d5b91","content":"package quality\n\nfunc EvaluateOrder(userID string, plan string, region string, coupon string, source string, actor string, score int) string {\n\tif userID == \"\" {\n\t\treturn \"reject\"\n\t}\n\tif plan == \"enterprise\" {\n\t\tscore += 3\n\t}\n\tif plan == \"pro\" {\n\t\tscore += 2\n\t}\n\tif region == \"eu\" {\n\t\tscore++\n\t}\n\tif coupon != \"\" {\n\t\tscore++\n\t}\n\tif source == \"partner\" {\n\t\tscore++\n\t}\n\tif actor == \"admin\" {\n\t\tscore += 2\n\t}\n\tif score > 20 {\n\t\treturn \"approve\"\n\t}\n\tif score > 10 {\n\t\treturn \"review\"\n\t}\n\tif score == 10 {\n\t\treturn \"manual\"\n\t}\n\tif score < 0 {\n\t\treturn \"reject\"\n\t}\n\treturn \"pending\"\n}\n\nfunc Helper(value int) int {\n\treturn value + 1\n}\n"},{"path":"benchmarks/quality/fixtures/inconsistent_return/module.py","sha256":"e994bebe60a6fd7b30cd518ef7ad535b5da855e40b328cf4a605fbfe8202baf5","content":"def resolve_user(flag):\n    if flag:\n        return \"present\"\n    return\n"},{"path":"benchmarks/quality/fixtures/java_service_quality_hotspot/App.java","sha256":"ab2201ab9b2d3ecc444679a68d0e884bcf7a9b57392542edf4c6483cccfac80d","content":"class AccountPolicy {\n  String decide(String userId, String plan, String region, String coupon, String source, String actor, int score) {\n    if (userId != null) {\n      if (plan != null) {\n        if (region != null) {\n          if (source != null) {\n            if (actor != null) {\n              if (score > 10) {\n                return \"approve\";\n              }\n            }\n          }\n        }\n      }\n    }\n    return \"review\";\n  }\n\n  String helper(String userId) {\n    return userId;\n  }\n}\n"},{"path":"benchmarks/quality/fixtures/long_function/module.py","sha256":"5a7d0dd52a877cf912aa73540d76766cab9698984f0a53b09cfd5b1d881e19ba","content":"def render_report(name):\n    lines = []\n    lines.append(\"start\")\n    lines.append(name)\n    lines.append(\"middle\")\n    lines.append(\"detail\")\n    lines.append(\"summary\")\n    lines.append(\"end\")\n    return \"\\n\".join(lines)\n\n\ndef tiny_helper():\n    return \"ok\"\n"},{"path":"benchmarks/quality/fixtures/long_function/pyproject.toml","sha256":"170954b6f655797cb40f5eb27423eb8fb2b4d678935f1d42c8fd90a009e1a139","content":"[tool.skylos]\nmax_lines = 6\n"},{"path":"benchmarks/quality/fixtures/opaque_identifier/module.py","sha256":"c71123f245e959385453e63ac5d7d1ac69852bbc6d2e4c286bc4f009fc9e0d92","content":"def load_account_snapshot(request, repository, audit_log):\n    x = request.args.get(\"account_id\")\n    if not x:\n        audit_log.warning(\"missing account\")\n        return {\"status\": \"missing\", \"account_id\": \"\"}\n\n    audit_log.info(\"loading account snapshot\")\n    account = repository.fetch_account(x)\n    if account is None:\n        return {\"status\": \"missing\", \"account_id\": x}\n\n    owner = repository.fetch_owner(account.owner_id)\n    return {\n        \"status\": \"active\",\n        \"account_id\": x,\n        \"owner\": owner.email,\n    }\n\n\ndef coordinate_area(point):\n    x = point.get(\"x\", 0)\n    y = point.get(\"y\", 0)\n    return x * y\n\n\ndef normalize(raw):\n    tmp = raw.strip()\n    return tmp\n"},{"path":"benchmarks/quality/fixtures/python_mutable_alias_clean/app.py","sha256":"972a988ab6d1a4bc5681e2ec1312a54bae49d2e37f918c9d0b379ebdf45b96d7","content":"def build_fallbacks(count: int) -> list[dict[str, str]]:\n    return [{\"status\": \"missing\"} for _ in range(count)]\n"},{"path":"benchmarks/quality/fixtures/python_mutable_alias_unsafe/app.py","sha256":"96f5d5f16ec504bb2482ea5770a9a0041c421aa71c7e622483400895059d7b8a","content":"def build_fallbacks(count: int) -> list[dict[str, str]]:\n    return [{\"status\": \"missing\"}] * count\n"},{"path":"benchmarks/quality/fixtures/repo_policy_missing_typechecker/.pre-commit-config.yaml","sha256":"9fefdca9b4f8cf3c9147e84018de2f4d0167647f2572ede3f82559ffa2170d59","content":"repos: []\n"},{"path":"benchmarks/quality/fixtures/repo_policy_missing_typechecker/app.py","sha256":"379163dafa64f5d1e5629289e07bd6d695c95a4aefb90188602aa4b08618fe10","content":"def configured_helper() -> int:\n    return 1\n"},{"path":"benchmarks/quality/fixtures/repo_policy_missing_typechecker/pyproject.toml","sha256":"006dae6be57b3aca51799cfcce8dbd14aa751dd66b368ed35c37b774dd43db99","content":"[tool.ruff]\ntarget-version = \"py310\"\n\n[tool.skylos.gate]\nmax_quality = 10\n"},{"path":"benchmarks/quality/fixtures/type_annotation_coverage_only/module.py","sha256":"ae19eb7c66c30c7aeaf3475fae1811102b4b331f1983754fec89ac2bf76db03b","content":"from typing import Any\n\n__all__ = [\"load_user\", \"typed_helper\"]\n\n\ndef load_user(user_id, include_deleted: bool):\n    return {\"id\": str(user_id), \"include_deleted\": include_deleted}\n\n\ndef typed_helper(user_id: str) -> dict[str, Any]:\n    return {\"id\": user_id}\n"},{"path":"benchmarks/quality/fixtures/type_annotation_coverage_only/pyproject.toml","sha256":"5ecf9cbb02a924b614e670000660c7ba10600a5d42949ee0a34078a8d0898282","content":"[tool.mypy]\nfiles = [\"module.py\"]\ncheck_untyped_defs = true\n"},{"path":"benchmarks/quality/fixtures/type_annotation_gaps/module.py","sha256":"cf0bc8b47032e3369355f7309bb1b66f5e24a7f1f14c3ecccb0a7a2dc15e18e0","content":"from typing import Any\n\n\ndef load_user(user_id, include_deleted: bool):\n    return {\"id\": str(user_id), \"include_deleted\": include_deleted}\n\n\ndef typed_helper(user_id: str) -> dict[str, Any]:\n    return {\"id\": user_id}\n"},{"path":"benchmarks/quality/fixtures/type_annotation_gaps/pyproject.toml","sha256":"a8ae2c8474c9dd5502655ad4bed0dd2c88937c1cc8d5def4a5c29017efd6d0b4","content":"[tool.mypy]\nfiles = [\"module.py\"]\ndisallow_untyped_defs = true\n"},{"path":"benchmarks/quality/fixtures/typescript_async_loop_duplicate_condition/service.ts","sha256":"aac2131bf9685608001cae79c24f52b9ba5849866a901e2196099b840dfd5507","content":"type Invoice = {\n  id: string;\n  status: string;\n};\n\nasync function loadInvoice(id: string): Promise<Invoice> {\n  return { id, status: \"open\" };\n}\n\nexport async function reconcileInvoices(\n  ids: string[],\n  status: string\n): Promise<Invoice[]> {\n  const invoices: Invoice[] = [];\n\n  if (status === \"paid\") {\n    await markPaid(ids);\n  } else if (status === \"void\") {\n    await markVoid(ids);\n  } else if (status === \"paid\") {\n    await markPaid(ids);\n  }\n\n  for (let index = 0; index < ids.length; index++) {\n    invoices.push(await loadInvoice(ids[index]));\n  }\n\n  return invoices;\n}\n\nasync function markPaid(ids: string[]): Promise<void> {\n  void ids;\n}\n\nasync function markVoid(ids: string[]): Promise<void> {\n  void ids;\n}\n"},{"path":"benchmarks/quality/fixtures/typescript_type_safety_clean/service.ts","sha256":"3e1a36e2ee4ca7bbe03de4a31dbf4f1e6bb0dd828cfd33232872d7485d7c3bc9","content":"type User = {\n  id: string;\n};\n\ntype UserId = string & { readonly __brand: \"UserId\" };\n\nfunction isUser(value: unknown): value is User {\n  if (typeof value !== \"object\" || value === null || !(\"id\" in value)) {\n    return false;\n  }\n  return typeof value.id === \"string\";\n}\n\nexport function parseUser(payload: string): User {\n  const value: unknown = JSON.parse(payload);\n  if (!isUser(value)) {\n    throw new TypeError(\"Invalid user payload\");\n  }\n  return value;\n}\n\nexport function userId(value: string): UserId {\n  return value as UserId;\n}\n\n// @ts-expect-error -- this fixture deliberately checks a rejected assignment\nconst rejectedUser: User = { id: 42 };\nvoid rejectedUser;\n"},{"path":"benchmarks/quality/fixtures/typescript_type_safety_unsafe/service.ts","sha256":"02d6949aab47aba9527f7175d0906c09273086c5274ddfaf27ba009be9d1a598","content":"type User = {\n  id: string;\n};\n\ndeclare const input: unknown;\ndeclare const payload: string;\n\nexport const forcedUser = input as unknown as User;\n\n// @ts-ignore -- the generated SDK type was not checked\nexport const ignoredTypeError: string = 1;\n\nexport const parsedUser = JSON.parse(payload) as User;\n"},{"path":"benchmarks/quality/manifest.json","sha256":"05d9e4958b8da77fbbdacb7cca9ad7e6fdb13647d44b58131d45d3c869dde276","content":"{\n  \"version\": 1,\n  \"cases\": [\n    {\n      \"id\": \"complexity-hotspot\",\n      \"path\": \"fixtures/complexity_hotspot\",\n      \"description\": \"Branch-heavy request handler should be flagged for cyclomatic complexity.\",\n      \"taxonomy\": [\"complexity\", \"control_flow\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/fastapi/fastapi\",\n        \"license\": \"MIT\",\n        \"notes\": \"Distilled from common API handler branching patterns.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 10.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"quality\": [\"SKY-Q301\", \"branchy_handler\"]\n        },\n        \"absent\": {\n          \"quality\": [\"simple_handler\"]\n        }\n      }\n    },\n    {\n      \"id\": \"long-function\",\n      \"path\": \"fixtures/long_function\",\n      \"description\": \"Report builder should be flagged when the local max_lines threshold is exceeded.\",\n      \"taxonomy\": [\"maintainability\"],\n      \"importance\": \"high\",\n      \"source\": {\n        \"repo\": \"https://github.com/pallets/click\",\n        \"license\": \"BSD-3-Clause\",\n        \"notes\": \"Distilled from command/report formatting helpers.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"quality\": [\"SKY-C304\", \"render_report\"]\n        },\n        \"absent\": {\n          \"quality\": [\"tiny_helper\"]\n        }\n      }\n    },\n    {\n      \"id\": \"argument-overload\",\n      \"path\": \"fixtures/argument_overload\",\n      \"description\": \"Service function should be flagged when it takes too many required arguments.\",\n      \"taxonomy\": [\"api_design\", \"maintainability\"],\n      \"importance\": \"high\",\n      \"source\": {\n        \"repo\": \"https://github.com/django/django\",\n        \"license\": \"BSD-3-Clause\",\n        \"notes\": \"Distilled from service-layer helper signatures.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"quality\": [\"SKY-C303\", \"build_request\"]\n        },\n        \"absent\": {\n          \"quality\": [\"helper\"]\n        }\n      }\n    },\n    {\n      \"id\": \"inconsistent-return\",\n      \"path\": \"fixtures/inconsistent_return\",\n      \"description\": \"Mixed value and bare returns should be reported as a logic issue.\",\n      \"taxonomy\": [\"control_flow\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/pallets/flask\",\n        \"license\": \"BSD-3-Clause\",\n        \"notes\": \"Distilled from request handler helper logic.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"quality\": [\"SKY-L006\", \"resolve_user\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"empty-error-handler\",\n      \"path\": \"fixtures/empty_error_handler\",\n      \"description\": \"Silent exception swallowing should be treated as a quality problem.\",\n      \"taxonomy\": [\"exception_handling\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/psf/requests\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Distilled from network retry / fallback shapes where exception swallowing matters.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"quality\": [\"SKY-L007\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"type-annotation-gaps\",\n      \"path\": \"fixtures/type_annotation_gaps\",\n      \"description\": \"An explicit disallow_untyped_defs policy must flag public functions with untyped parameters and missing return annotations.\",\n      \"taxonomy\": [\"typing\", \"api_design\"],\n      \"importance\": \"high\",\n      \"source\": {\n        \"repo\": \"https://github.com/python/cpython\",\n        \"license\": \"PSF-2.0\",\n        \"notes\": \"Synthetic helper API with an explicit annotation requirement; preserves both required-annotation controls.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"quality\": [\"SKY-T101\", \"SKY-T102\", \"load_user\"]\n        },\n        \"absent\": {\n          \"quality\": [\"typed_helper\"]\n        }\n      }\n    },\n    {\n      \"id\": \"type-annotation-coverage-only\",\n      \"path\": \"fixtures/type_annotation_coverage_only\",\n      \"description\": \"Checking untyped bodies and declaring exports do not require annotations or enable optional coverage advice.\",\n      \"taxonomy\": [\"typing\", \"api_design\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/python/mypy\",\n        \"license\": \"MIT\",\n        \"notes\": \"Synthetic counterpart of type-annotation-gaps with check_untyped_defs instead of an annotation requirement.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"quality\": [\"SKY-T101\", \"SKY-T102\"]\n        }\n      }\n    },\n    {\n      \"id\": \"framework-route-policy\",\n      \"path\": \"fixtures/framework_route_policy\",\n      \"description\": \"Mutating framework routes should have an obvious auth or dependency guard.\",\n      \"taxonomy\": [\"framework\", \"security_practice\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/fastapi/fastapi\",\n        \"license\": \"MIT\",\n        \"notes\": \"Distilled from FastAPI router conventions.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"quality\": [\"SKY-F102\", \"create_user\"]\n        },\n        \"absent\": {\n          \"quality\": [\"create_admin\", \"list_users\"]\n        }\n      }\n    },\n    {\n      \"id\": \"opaque-identifier\",\n      \"path\": \"fixtures/opaque_identifier\",\n      \"description\": \"Long-lived short or vague variables should be reported only when RHS semantics provide a clearly better name.\",\n      \"taxonomy\": [\"readability\", \"maintainability\", \"precision_guard\"],\n      \"importance\": \"high\",\n      \"source\": {\n        \"repo\": \"https://github.com/google/styleguide\",\n        \"license\": \"CC-BY-3.0\",\n        \"notes\": \"Distilled from identifier guidance around descriptive names proportional to scope.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"quality\": [\"SKY-Q806\", \"x\", \"account_id\"]\n        },\n        \"absent\": {\n          \"quality\": [\"coordinate_area\", \"tmp\"]\n        }\n      }\n    },\n    {\n      \"id\": \"repo-policy-missing-typechecker\",\n      \"path\": \"fixtures/repo_policy_missing_typechecker\",\n      \"description\": \"Repository policy checks should report Python projects without mypy or pyright configuration.\",\n      \"taxonomy\": [\"repo_policy\", \"typing\"],\n      \"importance\": \"high\",\n      \"source\": {\n        \"repo\": \"https://github.com/astral-sh/ruff\",\n        \"license\": \"MIT\",\n        \"notes\": \"Distilled from common pyproject-based policy configuration.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"quality\": [\"SKY-R101\", \"python-type-check-policy\"]\n        },\n        \"absent\": {\n          \"quality\": [\"SKY-R102\", \"SKY-R103\", \"SKY-R104\"]\n        }\n      }\n    },\n    {\n      \"id\": \"clean-module\",\n      \"path\": \"fixtures/clean_module\",\n      \"description\": \"A small helper module should remain free of the starter benchmark quality findings.\",\n      \"taxonomy\": [\"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/python/cpython\",\n        \"license\": \"PSF-2.0\",\n        \"notes\": \"Distilled from small utility-module patterns in the Python standard library.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"quality\": [\"SKY-Q301\", \"SKY-C303\", \"SKY-C304\", \"SKY-L006\", \"SKY-L007\", \"SKY-UC001\", \"SKY-Q806\"]\n        }\n      }\n    },\n    {\n      \"id\": \"typescript-async-loop-duplicate-condition\",\n      \"path\": \"fixtures/typescript_async_loop_duplicate_condition\",\n      \"description\": \"TypeScript service code should flag duplicate branch conditions and serialized await inside loops.\",\n      \"languages\": [\"typescript\"],\n      \"taxonomy\": [\"typescript\", \"control_flow\", \"maintainability\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/microsoft/TypeScript\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Distilled from common async service-loop and duplicated-branch review patterns.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"quality\": [\"SKY-Q305\", \"SKY-Q402\", \"reconcileInvoices\"]\n        },\n        \"absent\": {\n          \"quality\": [\"markPaid\", \"markVoid\"]\n        }\n      }\n    },\n    {\n      \"id\": \"typescript-type-safety-unsafe\",\n      \"path\": \"fixtures/typescript_type_safety_unsafe\",\n      \"description\": \"TypeScript escape hatches and direct unvalidated JSON assertions should be reported.\",\n      \"languages\": [\"typescript\"],\n      \"taxonomy\": [\"typescript\", \"typing\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/dmmulroy/anti-slop\",\n        \"license\": \"MIT\",\n        \"notes\": \"Distilled and narrowed from TypeScript type-evidence escape-hatch patterns.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"quality\": [\"SKY-T103\", \"SKY-T104\", \"SKY-T105\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"typescript-type-safety-clean\",\n      \"path\": \"fixtures/typescript_type_safety_clean\",\n      \"description\": \"Runtime validation, a single branded assertion, and a reasoned expect-error should remain clean.\",\n      \"languages\": [\"typescript\"],\n      \"taxonomy\": [\"typescript\", \"typing\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/microsoft/TypeScript\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Synthetic precision controls based on normal TypeScript narrowing and type-test patterns.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"quality\": [\"SKY-T103\", \"SKY-T104\", \"SKY-T105\"]\n        }\n      }\n    },\n    {\n      \"id\": \"typescript-quality-signals-unsafe\",\n      \"path\": \"samples/typescript_quality_signals_unsafe\",\n      \"description\": \"Concrete async mistakes, unsafe exports, unfinished code, empty catches, and blanket lint suppression should be reported.\",\n      \"languages\": [\"typescript\"],\n      \"taxonomy\": [\"typescript\", \"control_flow\", \"typing\", \"maintainability\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/dmmulroy/anti-slop\",\n        \"license\": \"MIT\",\n        \"notes\": \"Synthetic fixture narrowed to behaviorally incorrect or high-risk JS/TS patterns.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"quality\": [\"SKY-L007\", \"SKY-L026\", \"SKY-L035\", \"SKY-Q405\", \"SKY-Q406\", \"SKY-Q407\", \"SKY-T106\", \"LegacyPayload\", \"acceptLegacy\", \"loadLegacy\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"typescript-quality-signals-clean\",\n      \"path\": \"samples/typescript_quality_signals_clean\",\n      \"description\": \"Narrow lint suppression, consumed async work, precise exports, implemented code, and handled errors should remain clean.\",\n      \"languages\": [\"typescript\"],\n      \"taxonomy\": [\"typescript\", \"control_flow\", \"typing\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/microsoft/TypeScript\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Synthetic precision controls based on normal TypeScript async and public API patterns.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"quality\": [\"SKY-L007\", \"SKY-L026\", \"SKY-L035\", \"SKY-Q405\", \"SKY-Q406\", \"SKY-Q407\", \"SKY-T106\"]\n        }\n      }\n    },\n    {\n      \"id\": \"python-mutable-alias-unsafe\",\n      \"path\": \"fixtures/python_mutable_alias_unsafe\",\n      \"description\": \"Sequence multiplication that repeats one mutable object should be reported.\",\n      \"languages\": [\"python\"],\n      \"taxonomy\": [\"maintainability\", \"control_flow\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/python/cpython\",\n        \"license\": \"PSF-2.0\",\n        \"notes\": \"Synthetic fixture based on Python sequence repetition and mutable identity semantics.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"quality\": [\"SKY-L034\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"python-mutable-alias-clean\",\n      \"path\": \"fixtures/python_mutable_alias_clean\",\n      \"description\": \"A comprehension that creates one dictionary per slot should remain clean.\",\n      \"languages\": [\"python\"],\n      \"taxonomy\": [\"maintainability\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/python/cpython\",\n        \"license\": \"PSF-2.0\",\n        \"notes\": \"Synthetic precision control using a fresh object per comprehension iteration.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"quality\": [\"SKY-L034\"]\n        }\n      }\n    },\n    {\n      \"id\": \"go-service-quality-hotspot\",\n      \"path\": \"fixtures/go_service_quality_hotspot\",\n      \"description\": \"Go service function with excessive branching and a wide call surface should be flagged.\",\n      \"languages\": [\"go\"],\n      \"taxonomy\": [\"go\", \"complexity\", \"api_design\", \"maintainability\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/golang/go\",\n        \"license\": \"BSD-3-Clause\",\n        \"notes\": \"Distilled from service-layer branching and oversized function signatures.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"quality\": [\"SKY-Q301\", \"SKY-C303\", \"EvaluateOrder\"]\n        },\n        \"absent\": {\n          \"quality\": [\"Helper\"]\n        }\n      }\n    },\n    {\n      \"id\": \"java-service-quality-hotspot\",\n      \"path\": \"fixtures/java_service_quality_hotspot\",\n      \"description\": \"Java service method with deep nesting and too many parameters should be flagged.\",\n      \"languages\": [\"java\"],\n      \"taxonomy\": [\"java\", \"complexity\", \"api_design\", \"maintainability\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/google/styleguide\",\n        \"license\": \"CC-BY-3.0\",\n        \"notes\": \"Distilled from Java service-method maintainability review patterns.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"quality\": [\"SKY-Q302\", \"SKY-C303\", \"decide\"]\n        },\n        \"absent\": {\n          \"quality\": [\"helper\"]\n        }\n      }\n    }\n  ]\n}\n"},{"path":"benchmarks/quality/samples/typescript_quality_signals_clean/app.ts","sha256":"31ba757f644d3f12587bd8821f9c8ad81acc1e029ac7e84b6b2eb5ce0b7c84a6","content":"/* eslint-disable no-console */\n\nexport interface Payload {\n  [key: string]: unknown;\n}\n\nexport function normalize(value: unknown): Record<string, unknown> {\n  if (typeof value !== \"object\" || value === null) {\n    return {};\n  }\n  return { value };\n}\n\nasync function saveAll(values: number[]): Promise<void> {\n  const jobs = values.map(async (value) => saveValue(value));\n  await Promise.all(jobs);\n}\n\nnew Promise((resolve) => resolve(loadRemote()));\n[1, 2, 3].forEach((value) => saveValue(value));\n\ntry {\n  refreshCache();\n} catch (error) {\n  console.warn(\"Cache refresh failed\", error);\n}\n"},{"path":"benchmarks/quality/samples/typescript_quality_signals_unsafe/app.ts","sha256":"3cb453c8c3ae977ff253ab45e1d5bbe7498417a7da1277746ac57b4cf78dd317","content":"/* eslint-disable */\n\nexport interface LegacyPayload {\n  [key: string]: any;\n}\n\nexport function acceptLegacy(value: any): unknown {\n  return value;\n}\n\nexport function loadLegacy(): Record<string, any> {\n  return {};\n}\n\nfunction unfinished(): never {\n  throw new Error(\"Not implemented\");\n}\n\ntry {\n  refreshCache();\n} catch {\n}\n\nnew Promise(async (resolve) => {\n  resolve(await loadRemote());\n});\n\nconst values = [1, 2, 3];\nvalues.forEach(async (value) => {\n  await saveValue(value);\n});\nconst mappedValues = [1, 2, 3];\nmappedValues.map(async (value) => saveValue(value));\n"},{"path":"benchmarks/security/fixtures/cors_wildcard/app.py","sha256":"d683c3bc267c4cd25394143a2071cf5fc8dbeb7eb01341c8385039f21248c20b","content":"CORS_ALLOW_ALL_ORIGINS = True\n"},{"path":"benchmarks/security/fixtures/csharp_command_injection/App.cs","sha256":"1e1209245cc32d866f83e878e57e07c631395dd87bf0a2b94622e22702e00899","content":"using System.Diagnostics;\n\npublic class Runner\n{\n    public void Run(string command)\n    {\n        Process.Start(command);\n    }\n}\n"},{"path":"benchmarks/security/fixtures/csharp_command_literal_safe/App.cs","sha256":"8ec09da142017ec74781244854f7509c3926e2a06d2159fae0bcab91891b852d","content":"using System.Diagnostics;\n\npublic class Runner\n{\n    public void Status()\n    {\n        Process.Start(\"git\", \"status\");\n    }\n}\n"},{"path":"benchmarks/security/fixtures/csharp_open_redirect/App.cs","sha256":"f0f028177ca2498ef7c26542be75177578bd16d72f2a6a314501a82713f4aafd","content":"using Microsoft.AspNetCore.Mvc;\n\npublic class AccountController : Controller\n{\n    public IActionResult Next(string redirect)\n    {\n        return Redirect(redirect);\n    }\n}\n"},{"path":"benchmarks/security/fixtures/csharp_open_redirect_literal_safe/App.cs","sha256":"162208ed7717997e8040ca6d7418e6c5110ebb6b6b29512d85b16e177067987a","content":"using Microsoft.AspNetCore.Mvc;\n\npublic class AccountController : Controller\n{\n    public IActionResult Next()\n    {\n        return Redirect(\"/dashboard\");\n    }\n}\n"},{"path":"benchmarks/security/fixtures/csharp_path_basename_safe/App.cs","sha256":"efebe04cb82a4538291ebdd25f5e4fa69cd81fc58b9bad94f9a7135fc69cfe97","content":"using System.IO;\n\npublic class Files\n{\n    public string Read(string path)\n    {\n        var name = Path.GetFileName(path);\n        return File.ReadAllText(Path.Combine(\"uploads\", name));\n    }\n}\n"},{"path":"benchmarks/security/fixtures/csharp_path_traversal/App.cs","sha256":"8ceaa7fb8eb4ff40c2674ea805fdd6a4ea5d03e930a53d94841dc1551b20a665","content":"using System.IO;\n\npublic class Files\n{\n    public string Read(string path)\n    {\n        return File.ReadAllText(path);\n    }\n}\n"},{"path":"benchmarks/security/fixtures/csharp_sql_injection/App.cs","sha256":"652bc7f7cabb1b225f9290d146a70bc26256a687ceaaf4148732528934d47df1","content":"using Microsoft.Data.SqlClient;\n\npublic class Repository\n{\n    public void Find(string sql, SqlConnection connection)\n    {\n        var command = new SqlCommand(sql, connection);\n        command.ExecuteNonQuery();\n    }\n}\n"},{"path":"benchmarks/security/fixtures/csharp_sql_parameterized_safe/App.cs","sha256":"26e5fc4637233441d62dac406a108aba7430fdb5f66433e94c512d62f78dd63b","content":"using Microsoft.Data.SqlClient;\n\npublic class Repository\n{\n    public void Find(int id, SqlConnection connection)\n    {\n        var command = new SqlCommand(\"SELECT email FROM users WHERE id = @id\", connection);\n        command.Parameters.AddWithValue(\"@id\", id);\n        command.ExecuteNonQuery();\n    }\n}\n"},{"path":"benchmarks/security/fixtures/csharp_ssrf/App.cs","sha256":"cb3a371444259eb957cf9af6641d952a8aa88d6d2d57a459db05c2aa7c49f9a7","content":"using System.Net.Http;\nusing System.Threading.Tasks;\n\npublic class Client\n{\n    public Task<HttpResponseMessage> Fetch(string url, HttpClient client)\n    {\n        return client.GetAsync(url);\n    }\n}\n"},{"path":"benchmarks/security/fixtures/csharp_ssrf_fixed_host_safe/App.cs","sha256":"daeb85f13bad15d6becf39d3a508a021f64f84890c3cfa32d01c300b7fd02ca8","content":"using System.Net.Http;\nusing System.Threading.Tasks;\n\npublic class Client\n{\n    public Task<HttpResponseMessage> Status(HttpClient client)\n    {\n        return client.GetAsync(\"https://api.example.com/status\");\n    }\n}\n"},{"path":"benchmarks/security/fixtures/dart_http_tainted_url/main.dart","sha256":"8fde06171e5e363e7b6dbf83bf2bd2468df7055c72e4181da0a039a8a75ded12","content":"import 'package:http/http.dart' as http;\n\nFuture<void> load(String url) async {\n  await http.get(Uri.parse(url));\n}\n"},{"path":"benchmarks/security/fixtures/dart_uri_https_safe/main.dart","sha256":"322bf6f3b6a7b1d3e9a093bdc8c7ceca54d3195dc377797e6dbd71716d08e74d","content":"import 'package:http/http.dart' as http;\n\nFuture<void> load(String input) async {\n  final uri = Uri.https('api.example.com', '/v1/items', {'q': input});\n  await http.get(uri);\n}\n"},{"path":"benchmarks/security/fixtures/go_command_shell_query/go.mod","sha256":"37873716522a074de32495d43a4387420a2b6088aa69ff0ed5406c6aaaafd8ee","content":"module example.com/bench\n\ngo 1.22\n"},{"path":"benchmarks/security/fixtures/go_command_shell_query/main.go","sha256":"42109951bf3cc4f566d2a0796031669ffc7560348cb73f0f1234b0363f952bba","content":"package main\n\nimport (\n\t\"net/http\"\n\t\"os/exec\"\n)\n\nfunc checkout(w http.ResponseWriter, r *http.Request) {\n\tbranch := r.URL.Query().Get(\"branch\")\n\t_ = exec.Command(\"sh\", \"-c\", \"git checkout \"+branch).Run()\n}\n"},{"path":"benchmarks/security/fixtures/go_tar_symlink_escape/go.mod","sha256":"37873716522a074de32495d43a4387420a2b6088aa69ff0ed5406c6aaaafd8ee","content":"module example.com/bench\n\ngo 1.22\n"},{"path":"benchmarks/security/fixtures/go_tar_symlink_escape/main.go","sha256":"408de67aae69b0ed2c3259c04efa399f02dd4d40407341b79722e2d8bfd6fcba","content":"package main\n\nimport (\n\t\"archive/tar\"\n\t\"os\"\n\t\"path/filepath\"\n)\n\nfunc untar(reader *tar.Reader, dest string) error {\n\tfor {\n\t\theader, err := reader.Next()\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tif header.Typeflag != tar.TypeSymlink {\n\t\t\tcontinue\n\t\t}\n\t\ttarget := filepath.Join(dest, header.Name)\n\t\tif err := os.Symlink(header.Linkname, target); err != nil {\n\t\t\treturn err\n\t\t}\n\t}\n}\n"},{"path":"benchmarks/security/fixtures/go_zip_slip/go.mod","sha256":"086d259c7c4f585fed9bb4bcdc59d7214be9045ff0f49d9a8dee8c920692bc33","content":"module example.com/golden-go-zip-slip\n\ngo 1.22\n"},{"path":"benchmarks/security/fixtures/go_zip_slip/main.go","sha256":"b7770db68f12fcd184a355c4c9b771383d56a55faf574ccdf87d2cb4fdaba762","content":"package main\n\nimport (\n\t\"archive/zip\"\n\t\"os\"\n\t\"path/filepath\"\n)\n\nfunc unzip(path string, dest string) error {\n\treader, _ := zip.OpenReader(path)\n\tfor _, file := range reader.File {\n\t\ttarget := filepath.Join(dest, file.Name)\n\t\tout, _ := os.Create(target)\n\t\t_ = out\n\t}\n\treturn nil\n}\n"},{"path":"benchmarks/security/fixtures/go_zip_slip_safe/go.mod","sha256":"eb2406009d6c7243f8c81f37f46cde1a0337b73889bbdb6cb8ccc41de739f0f0","content":"module example.com/golden-go-zip-slip-safe\n\ngo 1.22\n"},{"path":"benchmarks/security/fixtures/go_zip_slip_safe/main.go","sha256":"29323efc855bd731bc5557d57a646f7d6f8c1c39da50b41c732c0fd5f1f9f40c","content":"package main\n\nimport (\n\t\"archive/zip\"\n\t\"os\"\n\t\"path/filepath\"\n)\n\nfunc unzip(path string, dest string) error {\n\treader, _ := zip.OpenReader(path)\n\tfor _, file := range reader.File {\n\t\tif !filepath.IsLocal(file.Name) {\n\t\t\tcontinue\n\t\t}\n\t\ttarget := filepath.Join(dest, file.Name)\n\t\tout, _ := os.Create(target)\n\t\t_ = out\n\t}\n\treturn nil\n}\n"},{"path":"benchmarks/security/fixtures/java_ldap_xpath_injection/App.java","sha256":"4ffe19c369e184f19e348c760c06e71a141dea139a9f4665ff137cbb7b838ee6","content":"import javax.naming.directory.DirContext;\nimport javax.servlet.http.HttpServletRequest;\nimport javax.xml.xpath.XPath;\n\nclass App {\n  Object lookup(HttpServletRequest request, DirContext directory, XPath xpath) throws Exception {\n    String user = request.getParameter(\"user\");\n    String filter = \"(&(objectClass=person)(uid=\" + user + \"))\";\n    directory.search(\"ou=people,dc=example,dc=com\", filter, null);\n\n    String node = request.getParameter(\"node\");\n    String expr = \"//account[name/text()='\" + node + \"']\";\n    return xpath.evaluate(expr, new org.xml.sax.InputSource());\n  }\n}\n"},{"path":"benchmarks/security/fixtures/java_open_redirect_protocol_relative/App.java","sha256":"6d22cd5d0f4a7472549671d5a40246b09734fd6e2006566d68b0962e3fd9c47d","content":"import javax.servlet.http.HttpServletRequest;\nimport javax.servlet.http.HttpServletResponse;\n\nclass App {\n  void redirect(HttpServletRequest request, HttpServletResponse response) throws Exception {\n    String next = request.getParameter(\"next\");\n    if (!next.startsWith(\"/\")) {\n      throw new IllegalArgumentException(\"bad redirect\");\n    }\n    response.sendRedirect(next);\n  }\n}\n"},{"path":"benchmarks/security/fixtures/java_path_traversal/App.java","sha256":"3d86d71c9b656070841814d7e35fb24038fc74d005e732bb1547def81a753d5d","content":"import java.nio.file.*;\nimport javax.servlet.http.HttpServletRequest;\n\nclass App {\n  String read(HttpServletRequest request) throws Exception {\n    String file = request.getParameter(\"file\");\n    Path target = Paths.get(\"/srv/data\", file);\n    return Files.readString(target);\n  }\n}\n"},{"path":"benchmarks/security/fixtures/java_path_traversal_safe/App.java","sha256":"10a984ad7c31e259761754942a0a51a47bcb8b0c9b0cda7d10332a8c1e157f24","content":"import java.nio.file.*;\nimport javax.servlet.http.HttpServletRequest;\n\nclass App {\n  String read(HttpServletRequest request) throws Exception {\n    String file = request.getParameter(\"file\");\n    Path base = Paths.get(\"/srv/data\");\n    Path target = base.resolve(file).normalize();\n    if (!target.startsWith(base)) {\n      throw new IllegalArgumentException(\"bad path\");\n    }\n    return Files.readString(target);\n  }\n}\n"},{"path":"benchmarks/security/fixtures/java_ssrf_httpclient_send/App.java","sha256":"e26625e29b51eb0e03cf5773bccad2d1e36e26b3060c5b3f196aa5bd3a925d00","content":"import java.net.URI;\nimport java.net.http.HttpClient;\nimport java.net.http.HttpRequest;\nimport javax.servlet.http.HttpServletRequest;\n\nclass App {\n  String fetch(HttpServletRequest request) throws Exception {\n    String target = request.getParameter(\"url\");\n    URI uri = URI.create(target);\n    HttpRequest outbound = HttpRequest.newBuilder().uri(uri).GET().build();\n    return HttpClient.newHttpClient()\n        .send(outbound, java.net.http.HttpResponse.BodyHandlers.ofString())\n        .body();\n  }\n}\n"},{"path":"benchmarks/security/fixtures/jwt_verify_disabled/app.py","sha256":"44e010e1d94497f190cf60fbcdcd45ade1932c5fc33dc5dc7369f2ec708024b7","content":"import jwt\n\n\ndef decode_token(token):\n    return jwt.decode(token, options={\"verify_signature\": False})\n"},{"path":"benchmarks/security/fixtures/open_redirect_local_guard/app.py","sha256":"a56c715576f33c74a1495e4cf297340536d797e41c2c72c4fc7cc9018e87df1d","content":"from flask import redirect, request\n\n\ndef login():\n    next_url = request.args.get(\"next\", \"/\")\n    if not next_url.startswith(\"/\"):\n        next_url = \"/\"\n    return redirect(next_url)\n"},{"path":"benchmarks/security/fixtures/open_redirect_tainted/app.py","sha256":"e13dd40a53b1aa7675cc48f9bc638195ad313537acc937c31aa1832988b00709","content":"from flask import redirect, request\n\n\ndef login():\n    return redirect(request.args.get(\"next\", \"/\"))\n"},{"path":"benchmarks/security/fixtures/path_traversal_basename/app.py","sha256":"25e0791774217f5645ec8c4db55dd9289ff9a586d3117658cc14e3361b5b1781","content":"import os\n\nfrom flask import Flask, request\n\napp = Flask(__name__)\n\nBASE_DIR = \"/srv/app/uploads\"\n\n\n@app.route(\"/uploads\")\ndef read_upload():\n    safe_name = os.path.basename(request.args.get(\"name\", \"\"))\n    path = os.path.join(BASE_DIR, safe_name)\n    with open(path, encoding=\"utf-8\") as handle:\n        return handle.read()\n"},{"path":"benchmarks/security/fixtures/path_traversal_tainted_join/app.py","sha256":"81aae6e37baab37be7fa0e7c99530e3ebfa1f7da562053c138e126ae768ca540","content":"import os\n\nfrom flask import Flask, request\n\napp = Flask(__name__)\n\nBASE_DIR = \"/srv/app/uploads\"\n\n\n@app.route(\"/uploads\")\ndef read_upload():\n    filename = request.args.get(\"name\", \"\")\n    path = os.path.join(BASE_DIR, filename)\n    with open(path, encoding=\"utf-8\") as handle:\n        return handle.read()\n"},{"path":"benchmarks/security/fixtures/php_json_decode_safe/index.php","sha256":"99011826d68636ffc8181d283ebc08ab8aecdbd654943914d03afda7a30ef09f","content":"<?php\n\nfunction load_payload() {\n    $payload = $_POST[\"payload\"];\n    return json_decode($payload, true);\n}\n"},{"path":"benchmarks/security/fixtures/php_path_basename_safe/index.php","sha256":"d15e3193c1603c66ff7264e408d174bb02c14f51f47fa7835e68e189ff830a34","content":"<?php\n\nfunction read_file() {\n    $name = basename($_GET[\"path\"]);\n    return file_get_contents(__DIR__ . \"/uploads/\" . $name);\n}\n"},{"path":"benchmarks/security/fixtures/php_path_traversal/index.php","sha256":"eab3d298e99cc7234001b2fc3fc3202cc5efcadd4d80841a699be656cde2cdf5","content":"<?php\n\nfunction read_file() {\n    $path = $_GET[\"path\"];\n    return file_get_contents($path);\n}\n"},{"path":"benchmarks/security/fixtures/php_request_include/index.php","sha256":"6adf1bba01314b9491ff5e2a6d0d46f21229083f381094454d5f8b4c702d3ee6","content":"<?php\n$template = $_GET['template'];\ninclude $template;\n"},{"path":"benchmarks/security/fixtures/php_unserialize/index.php","sha256":"0175aca58929e73d3f03808b4ec45f976ededf073a9ec1309b4b4d71e26c1e2d","content":"<?php\n\nfunction load_payload() {\n    $payload = $_POST[\"payload\"];\n    return unserialize($payload);\n}\n"},{"path":"benchmarks/security/fixtures/rust_path_filename_safe/main.rs","sha256":"a196ce1d67fc854c842e96d24bf137570cb65e0f9d6a1a682dab1d6cf9630223","content":"use std::path::{Path, PathBuf};\n\nfn read_profile(input: String) -> std::io::Result<String> {\n    let name = Path::new(&input).file_name().unwrap();\n    let mut base = PathBuf::from(\"/srv/profiles\");\n    base.push(name);\n    std::fs::read_to_string(base)\n}\n"},{"path":"benchmarks/security/fixtures/rust_shell_arg_taint/main.rs","sha256":"591c2821a1206c3be6380659ca7e0b193c9dbe28ddb3408d6bd731b9662eb5ac","content":"use std::process::Command;\n\nfn main() {\n    let branch = std::env::args().nth(1).unwrap_or_default();\n    let _ = Command::new(\"sh\")\n        .arg(\"-c\")\n        .arg(format!(\"git checkout {}\", branch))\n        .status();\n}\n"},{"path":"benchmarks/security/fixtures/shell_basename_safe/read.sh","sha256":"2e8b677b1a84d475bf5cfca1ae5bd1e1b0a62f82b33ac8b335cee74825f94a2b","content":"#!/usr/bin/env bash\nset -euo pipefail\n\nbackup_name=\"$(basename -- \"$1\")\"\ncat \"/srv/backups/$backup_name\"\n"},{"path":"benchmarks/security/fixtures/shell_c_flag_arg/run.sh","sha256":"66c4120195e04fdff4aa28ed4e552b0ff29a52fd6b4e80aea8e9af94e18445a8","content":"#!/usr/bin/env bash\nset -euo pipefail\n\ntask=\"$1\"\nbash -c \"$task\"\n"},{"path":"benchmarks/security/fixtures/shell_curl_fixed_host_path/fetch.sh","sha256":"dc39699c76772b089b54ace7d3617397c9705361d28f2d4819a4e9a37492ddd9","content":"#!/usr/bin/env bash\nset -euo pipefail\n\nartifact=\"$1\"\ncurl -fsSL \"https://downloads.example.com/releases/$artifact\"\n"},{"path":"benchmarks/security/fixtures/shell_curl_tainted_url/fetch.sh","sha256":"36409fe9943b7f2ed1b0791e7167c329b7c741a8fb7589ae59f0860dfbcfbaf2","content":"#!/usr/bin/env bash\nset -euo pipefail\n\nread -r url\ncurl -fsSL \"$url\"\n"},{"path":"benchmarks/security/fixtures/shell_eval_arg/deploy.sh","sha256":"8ff15b795a35ab352217fe9cf8df1e8ee878761ad768e63dc03374b8d13d33a4","content":"#!/usr/bin/env bash\nset -euo pipefail\n\ncmd=\"$1\"\neval \"$cmd\"\n"},{"path":"benchmarks/security/fixtures/shell_path_read_arg/read.sh","sha256":"dec3fb2be4699659b9a963a2a97d99604e6493962f4f4ec95a64dc7b481ece66","content":"#!/usr/bin/env bash\nset -euo pipefail\n\nbackup_name=\"$1\"\ncat \"/srv/backups/$backup_name\"\n"},{"path":"benchmarks/security/fixtures/shell_source_arg/run.sh","sha256":"558aefdaf0919065832bb623b4282260b99ccdf47e3974d31578237c0acbaceb","content":"#!/usr/bin/env bash\nset -euo pipefail\n\nplugin=\"$1\"\nsource \"$plugin\"\n"},{"path":"benchmarks/security/fixtures/sql_constant_format/app.py","sha256":"606ec5ef3ac6f87f5e18a4d79564204f09f2b85c1747bf3acb95fa2b75983aa0","content":"def load_users(cursor):\n    query = \"SELECT * FROM {} WHERE active = 1\".format(\"users\")\n    cursor.execute(query)\n"},{"path":"benchmarks/security/fixtures/sql_tainted_param/app.py","sha256":"68f036f64d537642ee18b583dabfd2f6973ea264df8bb8657189268252600bea","content":"def run_query(cursor, query, user_id):\n    cursor.execute(query, {\"id\": user_id})\n"},{"path":"benchmarks/security/fixtures/ssrf_fixed_host_path/app.py","sha256":"d11b7da28afbb7415885018c83577ca6e79799fc8aa15c27fe6a1f265c8c96e9","content":"import requests\n\n\ndef fetch_user(user_id):\n    return requests.get(f\"https://api.example.com/users/{user_id}\", timeout=3)\n"},{"path":"benchmarks/security/fixtures/ssrf_helper_parameter_safe/app.py","sha256":"2a162d4379b41054c4c5283b289010a14ed6c1bfe2cf45fc735a668b64f1ebeb","content":"import requests\n\n\ndef fetch_host(host):\n    # A helper parameter is caller/operator configuration, not attacker input:\n    # the call site decides whether this is SSRF.\n    return requests.get(f\"https://{host}/status\", timeout=3)\n"},{"path":"benchmarks/security/fixtures/ssrf_tainted_host/app.py","sha256":"e986b76ad4f2ebeac368d65019b08499d86a2a4093f6ebca43e9a2220e706cd4","content":"import requests\nfrom flask import Flask, request\n\napp = Flask(__name__)\n\n\n@app.route(\"/status\")\ndef fetch_host():\n    host = request.args.get(\"host\", \"\")\n    return requests.get(f\"https://{host}/status\", timeout=3).text\n"},{"path":"benchmarks/security/fixtures/subprocess_alias_shell/app.py","sha256":"b33d6f7a400cc397a6c1ae6bae2008344e8a0b6cbb1130ab6f938948f1bcd996","content":"import subprocess as sp\n\n\ndef list_files():\n    return sp.run(\"ls -la\", shell=True, check=False)\n"},{"path":"benchmarks/security/fixtures/typescript_cookie_explicit_false/app.ts","sha256":"42eb0e6cb510079d73818738fa9292fee64afb83f45298fd2b82876d09204639","content":"export function setSessionCookie(res: any, token: string) {\n  res.cookie(\"session\", token, { secure: false, httpOnly: false });\n}\n"},{"path":"benchmarks/security/fixtures/typescript_cookie_literal_safe/app.ts","sha256":"500ef65b38b8cc0070567f2dae0ec22d21bc1a93cf45dd23cac303f900b86f80","content":"export function setSessionCookie(res: any, token: string) {\n  res.cookie(\"session\", token, { secure: true, httpOnly: true });\n}\n"},{"path":"benchmarks/security/fixtures/typescript_eval/app.ts","sha256":"5854fbf00731fef980960e37abf634a5c7e4bb1a16bf6077fd8e31527de7ea05","content":"export function runUnsafe(input: string) {\n  return eval(input);\n}\n"},{"path":"benchmarks/security/fixtures/typescript_eval_safe/app.ts","sha256":"74ac16a444b42f532aef2085ab67908be07676551c97c6894ca15efb009183f4","content":"export function parsePayload(input: string) {\n  return JSON.parse(input);\n}\n"},{"path":"benchmarks/security/fixtures/typescript_nextjs_auth_decoys/app/api/account/route.ts","sha256":"0dc490baaa40eab06fb0f489650b79b418fe2b03065e1887f209c34f0696d0c4","content":"import { auth } from \"@/auth\";\nimport { db } from \"@/lib/db\";\nimport { cookies, headers } from \"next/headers\";\n\n// Authentication and session handling are still TODO.\nexport async function POST(request: Request) {\n  headers();\n  cookies();\n  const body = await request.json();\n  await db.user.create({ data: body });\n  return Response.json({ ok: true });\n}\n"},{"path":"benchmarks/security/fixtures/typescript_nextjs_authjs_v5_safe/app/api/account/route.ts","sha256":"729eae78795d07e5cc59f220ee1b622b2a18c43ac77e129ad56b82c32b52ab51","content":"import { auth } from \"@/auth\";\n\nexport async function POST(request: Request) {\n  const session = await auth();\n  if (!session) {\n    return new Response(\"unauthorized\", { status: 401 });\n  }\n\n  await db.account.update({\n    where: { id: session.user.id },\n    data: await request.json(),\n  });\n  return Response.json({ ok: true });\n}\n"},{"path":"benchmarks/security/fixtures/typescript_nextjs_authjs_v5_safe/auth.ts","sha256":"f2cdbb8c66cf682ada376d68858288453ffb8cc037bd94fce10a6f7531dd741e","content":"import NextAuth from \"next-auth\";\n\nexport const { auth, handlers, signIn, signOut } = NextAuth({\n  providers: [],\n});\n"},{"path":"benchmarks/security/fixtures/typescript_nextjs_authjs_v5_safe/package.json","sha256":"477d0f7711292dab9e483f993a582614341b76ac8a229fb7c889cf13a192450d","content":"{\"name\":\"authjs-v5-proof-fixture\",\"private\":true}\n"},{"path":"benchmarks/security/fixtures/typescript_nextjs_authjs_v5_safe/tsconfig.json","sha256":"c52f13f3a1d457ce01be33225bd72748593ca460c523d4871a61146d3c417c1b","content":"{\"compilerOptions\":{\"baseUrl\":\".\",\"paths\":{\"@/*\":[\"./*\"]}}}\n"},{"path":"benchmarks/security/fixtures/typescript_nextjs_author_shadow/app/api/billing/route.ts","sha256":"971ced460049c06b961f3208c2319008242b5d427f8f090633e280289577594c","content":"import { db } from \"@/lib/db\";\n\nexport async function POST(request: Request) {\n  const body = await request.json();\n  const authorId = String(body.authorId ?? \"\");\n  const plan = String(body.plan ?? \"free\");\n\n  await db.billingPlan.update({\n    where: { accountId: body.accountId },\n    data: { authorId, plan },\n  });\n\n  return Response.json({ ok: true });\n}\n"},{"path":"benchmarks/security/fixtures/typescript_nextjs_session_guard/app/api/billing/route.ts","sha256":"6c801f9a1a39b99ed247611295ffbd2944e762c60c40a70e73cbef4a34fdd24f","content":"import { getServerSession } from \"next-auth\";\nimport { db } from \"@/lib/db\";\n\nexport async function POST(request: Request) {\n  const session = await getServerSession();\n  if (!session) {\n    return Response.json({ error: \"unauthorized\" }, { status: 401 });\n  }\n\n  const body = await request.json();\n  await db.billingPlan.update({\n    where: { accountId: session.user.accountId },\n    data: { plan: String(body.plan ?? \"free\") },\n  });\n\n  return Response.json({ ok: true });\n}\n"},{"path":"benchmarks/security/fixtures/typescript_server_action_constant_safe/actions.ts","sha256":"b5d7aedfdc3204195f4b8905ce105b69d4cf500eba25375165b4d9f1bb3a7591","content":"\"use server\";\n\nconst table = \"users\";\nconst limit = 25;\n\nexport async function listUsers() {\n  return db.query(`SELECT * FROM ${table} LIMIT ${limit}`);\n}\n"},{"path":"benchmarks/security/fixtures/typescript_server_action_inline_unsafe/page.tsx","sha256":"2e9f5d1df47119a823285b83ca79c278858fdf63a76a7d51070f606c9f8787be","content":"export async function findUser(email: string) {\n  \"use server\";\n  return db.query(`SELECT * FROM users WHERE email = '${email}'`);\n}\n"},{"path":"benchmarks/security/fixtures/typescript_server_action_prisma_tag_safe/actions.ts","sha256":"12d74b22267eeffc4dd88e84bf2624cf205d97964b8e06af2931a503ee5c73fe","content":"\"use server\";\n\nimport { PrismaClient } from \"@prisma/client\";\n\nconst prisma = new PrismaClient();\n\nexport async function findUser(email: string) {\n  return prisma.$queryRaw`SELECT * FROM users WHERE email = ${email}`;\n}\n"},{"path":"benchmarks/security/fixtures/typescript_server_action_prisma_unsafe/actions.ts","sha256":"9abb81a2f3ea9b0fc52c95168c08377ac9dd3af58d540a84a62370c974824997","content":"\"use server\";\n\nimport { prisma } from \"@/lib/db\";\n\nexport async function findUser(formData: FormData) {\n  const email = String(formData.get(\"email\") ?? \"\");\n  return prisma.$queryRawUnsafe(\n    `SELECT id, email FROM users WHERE email = '${email}'`\n  );\n}\n"},{"path":"benchmarks/security/fixtures/typescript_server_action_query_config_safe/actions.ts","sha256":"556e2b253afb1a52b55c016244fdd907846a5b2985c64b3f14b9331afa9f8623","content":"\"use server\";\n\nfunction buildQuery(text: string, value: string) {\n  return { text, values: [value] };\n}\n\nexport async function findUser(input: string) {\n  return db.query(\n    buildQuery(\"SELECT * FROM users WHERE name = $1\", input),\n  );\n}\n"},{"path":"benchmarks/security/fixtures/typescript_server_action_repository_unsafe/actions.ts","sha256":"7d60abb6de1a00191a68d8d91e6121d997b85fb8b8a22ef9aba0ab821d3cd0b2","content":"\"use server\";\n\nclass UserRepository {\n  lookup(value: string) {\n    const query = \"SELECT * FROM users WHERE name = '\" + value + \"'\";\n    return db.query(query);\n  }\n}\n\nconst repository = new UserRepository();\n\nexport async function findUser(input: string) {\n  return repository.lookup(input);\n}\n"},{"path":"benchmarks/security/fixtures/typescript_server_action_trusted_runtime_safe/actions.ts","sha256":"5f11c88115f6fca1b94541c91e61d34cdb14549bfcba9902312e61a533304712","content":"\"use server\";\n\nexport async function recordAuditEvent() {\n  const createdAt = new Date().toISOString();\n  return db.query(`INSERT INTO audit(created_at) VALUES (${createdAt})`);\n}\n"},{"path":"benchmarks/security/fixtures/typescript_webhook_nondominating_verifier/app/api/stripe/webhook/route.ts","sha256":"0fc9174f0de7e1c7d7a9c566d62d3f3280d990af41b61752e3ef6f408bf5b993","content":"import Stripe from \"stripe\";\n\nconst stripe = new Stripe(process.env.STRIPE_API_KEY!);\n\nexport async function POST(request: Request) {\n  const payload = await request.text();\n  const signature = request.headers.get(\"stripe-signature\");\n\n  await enqueueStripeEvent(JSON.parse(payload));\n  stripe.webhooks.constructEvent(\n    \"unrelated-payload\",\n    signature,\n    process.env.STRIPE_WEBHOOK_SECRET!,\n  );\n\n  return new Response(\"ok\");\n}\n\nasync function enqueueStripeEvent(event: unknown) {\n  return event;\n}\n"},{"path":"benchmarks/security/fixtures/typescript_webhook_unverified/app/api/stripe/webhook/route.ts","sha256":"d6f3509661f529768253b880bf3d55872363fce33a800e104f400d9655b271b9","content":"type StripeEvent = {\n  type: string;\n  data: { object: { id: string } };\n};\n\nexport async function POST(request: Request) {\n  const rawBody = await request.text();\n  const event = JSON.parse(rawBody) as StripeEvent;\n\n  if (event.type === \"checkout.session.completed\") {\n    await fulfillOrder(event.data.object.id);\n  }\n\n  return Response.json({ received: true });\n}\n\nasync function fulfillOrder(sessionId: string) {\n  return sessionId;\n}\n"},{"path":"benchmarks/security/fixtures/typescript_webhook_verified/app/api/stripe/webhook/route.ts","sha256":"d7f0c089fe0cb29f62484b369a5c91b8a545eee1761a1a422a1f367172731005","content":"import Stripe from \"stripe\";\n\nconst stripe = new Stripe(process.env.STRIPE_API_KEY!);\n\nexport async function POST(request: Request) {\n  const signature = request.headers.get(\"stripe-signature\");\n  if (!signature) {\n    return Response.json({ error: \"missing signature\" }, { status: 400 });\n  }\n\n  const rawBody = await request.text();\n  const event = stripe.webhooks.constructEvent(\n    rawBody,\n    signature,\n    process.env.STRIPE_WEBHOOK_SECRET!\n  );\n\n  return Response.json({ type: event.type });\n}\n"},{"path":"benchmarks/security/fixtures/xss_escape_safe/app.py","sha256":"5e7e43e46e057025b35495414f75f242c261b36e9d2c64b9ea731509b347b5b5","content":"import html\n\nfrom markupsafe import Markup\n\n\ndef render_name(name):\n    escaped = html.escape(name)\n    return Markup(f\"<strong>{escaped}</strong>\")\n"},{"path":"benchmarks/security/fixtures/xss_mark_safe/app.py","sha256":"16f23287981a90fe7f6b8792a01aec2603e1c689faa9bdad57321cd39cee34f0","content":"from markupsafe import Markup\n\n\ndef render_name(name):\n    return Markup(f\"<strong>{name}</strong>\")\n"},{"path":"benchmarks/security/fixtures/yaml_safeloader_positional/app.py","sha256":"152ef1fd9c05d1f181872bf31873042817be76d6be0736fecb20738d5d8cff16","content":"import yaml\n\n\ndef parse_config(payload):\n    return yaml.load(payload, yaml.SafeLoader)\n"},{"path":"benchmarks/security/manifest.json","sha256":"6fda48fdfaaeaff89c0168168d97989139ff0a753f831e476bc262145c2da7cd","content":"{\n  \"version\": 1,\n  \"cases\": [\n    {\n      \"id\": \"sql-tainted-param\",\n      \"path\": \"fixtures/sql_tainted_param\",\n      \"description\": \"Tainted SQL query passed as a function parameter should be detected even when execute() receives params separately.\",\n      \"taxonomy\": [\"sql_injection\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/duriantaco/skylos\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Regression fixture distilled from a confirmed false negative in Skylos SQL flow analysis.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 6.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D211\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"sql-constant-format\",\n      \"path\": \"fixtures/sql_constant_format\",\n      \"description\": \"Statically built SQL using constant .format() arguments should not be reported as SQL injection.\",\n      \"taxonomy\": [\"sql_injection\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/duriantaco/skylos\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Regression fixture distilled from a confirmed SQL false-positive pattern.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"danger\": [\"SKY-D211\", \"SKY-D217\"]\n        }\n      }\n    },\n    {\n      \"id\": \"ssrf-tainted-host\",\n      \"path\": \"fixtures/ssrf_tainted_host\",\n      \"description\": \"A request parameter interpolated into the URL host of a route handler should be detected as SSRF.\",\n      \"taxonomy\": [\"ssrf\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/duriantaco/skylos\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Regression fixture for host-level SSRF taint.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D216\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"ssrf-helper-parameter-safe\",\n      \"path\": \"fixtures/ssrf_helper_parameter_safe\",\n      \"description\": \"A helper whose URL host comes only from its own parameter (no route, request, CLI, MCP-tool or stdin source) is not reported as SSRF.\",\n      \"taxonomy\": [\"ssrf\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/duriantaco/skylos\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Regression fixture from agent-pr-bench false positives on operator-configured URLs (plan 3.8b).\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"danger\": [\"SKY-D216\"]\n        }\n      }\n    },\n    {\n      \"id\": \"ssrf-fixed-host-path\",\n      \"path\": \"fixtures/ssrf_fixed_host_path\",\n      \"description\": \"Fixed-host URL interpolation should not be reported as SSRF when only the path segment is tainted.\",\n      \"taxonomy\": [\"ssrf\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/duriantaco/skylos\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Regression fixture distilled from a confirmed SSRF false-positive pattern.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"danger\": [\"SKY-D216\"]\n        }\n      }\n    },\n    {\n      \"id\": \"subprocess-alias-shell\",\n      \"path\": \"fixtures/subprocess_alias_shell\",\n      \"description\": \"subprocess imported with an alias should still be detected when shell=True is used.\",\n      \"taxonomy\": [\"command_injection\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/duriantaco/skylos\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Regression fixture distilled from a confirmed dangerous-call alias false negative.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D209\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"yaml-safeloader-positional\",\n      \"path\": \"fixtures/yaml_safeloader_positional\",\n      \"description\": \"yaml.load with positional yaml.SafeLoader should not be reported as unsafe deserialization.\",\n      \"taxonomy\": [\"deserialization\", \"precision_guard\"],\n      \"importance\": \"high\",\n      \"source\": {\n        \"repo\": \"https://github.com/duriantaco/skylos\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Regression fixture distilled from a confirmed SafeLoader false positive.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"danger\": [\"SKY-D206\"]\n        }\n      }\n    },\n    {\n      \"id\": \"path-traversal-tainted-join\",\n      \"path\": \"fixtures/path_traversal_tainted_join\",\n      \"description\": \"User-controlled path segments joined into a filesystem path should be reported as path traversal.\",\n      \"taxonomy\": [\"path_traversal\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/duriantaco/skylos\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Golden fixture for tainted os.path.join data reaching open().\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D215\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"path-traversal-basename\",\n      \"path\": \"fixtures/path_traversal_basename\",\n      \"description\": \"Path input sanitized with os.path.basename before opening a fixed directory should stay quiet.\",\n      \"taxonomy\": [\"path_traversal\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/duriantaco/skylos\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Golden precision fixture for basename path sanitization.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"danger\": [\"SKY-D215\"]\n        }\n      }\n    },\n    {\n      \"id\": \"xss-mark-safe\",\n      \"path\": \"fixtures/xss_mark_safe\",\n      \"description\": \"Tainted HTML interpolated into Markup should be reported as XSS.\",\n      \"taxonomy\": [\"xss\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/duriantaco/skylos\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Golden fixture for untrusted content marked safe.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D226\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"xss-escape-safe\",\n      \"path\": \"fixtures/xss_escape_safe\",\n      \"description\": \"Escaped content wrapped with Markup should not be reported as XSS.\",\n      \"taxonomy\": [\"xss\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/duriantaco/skylos\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Golden precision fixture for HTML escaping before Markup.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"danger\": [\"SKY-D226\"]\n        }\n      }\n    },\n    {\n      \"id\": \"open-redirect-tainted\",\n      \"path\": \"fixtures/open_redirect_tainted\",\n      \"description\": \"User-controlled redirect targets should be reported as open redirect.\",\n      \"taxonomy\": [\"open_redirect\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/duriantaco/skylos\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Golden fixture for Flask request parameter redirect flow.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D230\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"open-redirect-local-guard\",\n      \"path\": \"fixtures/open_redirect_local_guard\",\n      \"description\": \"Redirect targets guarded to local paths should stay quiet.\",\n      \"taxonomy\": [\"open_redirect\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/duriantaco/skylos\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Golden precision fixture for local-path redirect guards.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"danger\": [\"SKY-D230\"]\n        }\n      }\n    },\n    {\n      \"id\": \"jwt-verify-disabled\",\n      \"path\": \"fixtures/jwt_verify_disabled\",\n      \"description\": \"JWT decode with signature verification disabled should be reported.\",\n      \"taxonomy\": [\"auth_bypass\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/duriantaco/skylos\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Golden fixture for JWT verification bypass.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D232\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"cors-wildcard\",\n      \"path\": \"fixtures/cors_wildcard\",\n      \"description\": \"Wildcard CORS configuration should be reported.\",\n      \"taxonomy\": [\"cors\"],\n      \"importance\": \"high\",\n      \"source\": {\n        \"repo\": \"https://github.com/duriantaco/skylos\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Golden fixture for permissive CORS settings.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D231\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"go-zip-slip\",\n      \"path\": \"fixtures/go_zip_slip\",\n      \"description\": \"Go archive extraction that joins an archive entry name into a filesystem path should be reported as Zip Slip path traversal.\",\n      \"languages\": [\"go\"],\n      \"taxonomy\": [\"path_traversal\", \"go\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/securego/gosec\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Distilled from Go archive extraction path traversal patterns.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D215\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"go-zip-slip-safe\",\n      \"path\": \"fixtures/go_zip_slip_safe\",\n      \"description\": \"Go archive extraction guarded with filepath.IsLocal should stay quiet.\",\n      \"languages\": [\"go\"],\n      \"taxonomy\": [\"path_traversal\", \"go\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/securego/gosec\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Distilled from Go archive extraction sanitizer patterns.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"danger\": [\"SKY-D215\"]\n        }\n      }\n    },\n    {\n      \"id\": \"java-path-traversal\",\n      \"path\": \"fixtures/java_path_traversal\",\n      \"description\": \"Java servlet request parameters used in filesystem paths should be reported as path traversal.\",\n      \"languages\": [\"java\"],\n      \"taxonomy\": [\"path_traversal\", \"java\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/spotbugs/spotbugs\",\n        \"license\": \"LGPL-2.1-only\",\n        \"notes\": \"Distilled from Java servlet path traversal patterns.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D215\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"java-path-traversal-safe\",\n      \"path\": \"fixtures/java_path_traversal_safe\",\n      \"description\": \"Java request path resolution guarded with normalize and startsWith should stay quiet.\",\n      \"languages\": [\"java\"],\n      \"taxonomy\": [\"path_traversal\", \"java\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/spotbugs/spotbugs\",\n        \"license\": \"LGPL-2.1-only\",\n        \"notes\": \"Distilled from Java path traversal sanitizer patterns.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"danger\": [\"SKY-D215\"]\n        }\n      }\n    },\n    {\n      \"id\": \"typescript-eval\",\n      \"path\": \"fixtures/typescript_eval\",\n      \"description\": \"TypeScript eval of caller-controlled input should be reported as code execution.\",\n      \"languages\": [\"typescript\"],\n      \"taxonomy\": [\"command_injection\", \"typescript\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/semgrep/semgrep-rules\",\n        \"license\": \"LGPL-2.1-only\",\n        \"notes\": \"Distilled from JavaScript and TypeScript unsafe eval patterns.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D201\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"csharp-command-injection\",\n      \"path\": \"fixtures/csharp_command_injection\",\n      \"description\": \"C# Process.Start with caller-controlled command input should be reported as command injection.\",\n      \"languages\": [\"csharp\"],\n      \"taxonomy\": [\"command_injection\", \"csharp\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/duriantaco/skylos\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Golden fixture for C# process execution taint.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D212\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"csharp-command-literal-safe\",\n      \"path\": \"fixtures/csharp_command_literal_safe\",\n      \"description\": \"C# Process.Start with literal argv should not be reported as command injection.\",\n      \"languages\": [\"csharp\"],\n      \"taxonomy\": [\"command_injection\", \"csharp\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/duriantaco/skylos\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Golden precision fixture for literal C# process execution.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"danger\": [\"SKY-D212\"]\n        }\n      }\n    },\n    {\n      \"id\": \"csharp-sql-injection\",\n      \"path\": \"fixtures/csharp_sql_injection\",\n      \"description\": \"C# SqlCommand built from caller-controlled SQL text should be reported.\",\n      \"languages\": [\"csharp\"],\n      \"taxonomy\": [\"sql_injection\", \"csharp\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/duriantaco/skylos\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Golden fixture for C# raw SQL taint.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D211\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"csharp-sql-parameterized-safe\",\n      \"path\": \"fixtures/csharp_sql_parameterized_safe\",\n      \"description\": \"C# parameterized SqlCommand with literal query text should stay quiet.\",\n      \"languages\": [\"csharp\"],\n      \"taxonomy\": [\"sql_injection\", \"csharp\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/duriantaco/skylos\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Golden precision fixture for parameterized C# SQL.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"danger\": [\"SKY-D211\"]\n        }\n      }\n    },\n    {\n      \"id\": \"csharp-ssrf\",\n      \"path\": \"fixtures/csharp_ssrf\",\n      \"description\": \"C# HttpClient request using caller-controlled URL should be reported as SSRF.\",\n      \"languages\": [\"csharp\"],\n      \"taxonomy\": [\"ssrf\", \"csharp\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/duriantaco/skylos\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Golden fixture for C# outbound request taint.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D216\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"csharp-ssrf-fixed-host-safe\",\n      \"path\": \"fixtures/csharp_ssrf_fixed_host_safe\",\n      \"description\": \"C# HttpClient request to a literal fixed URL should stay quiet.\",\n      \"languages\": [\"csharp\"],\n      \"taxonomy\": [\"ssrf\", \"csharp\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/duriantaco/skylos\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Golden precision fixture for literal C# outbound request targets.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"danger\": [\"SKY-D216\"]\n        }\n      }\n    },\n    {\n      \"id\": \"csharp-path-traversal\",\n      \"path\": \"fixtures/csharp_path_traversal\",\n      \"description\": \"C# File.ReadAllText with caller-controlled path should be reported as path traversal.\",\n      \"languages\": [\"csharp\"],\n      \"taxonomy\": [\"path_traversal\", \"csharp\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/duriantaco/skylos\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Golden fixture for C# filesystem path taint.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D215\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"csharp-path-basename-safe\",\n      \"path\": \"fixtures/csharp_path_basename_safe\",\n      \"description\": \"C# path input sanitized with Path.GetFileName before fixed-directory access should stay quiet.\",\n      \"languages\": [\"csharp\"],\n      \"taxonomy\": [\"path_traversal\", \"csharp\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/duriantaco/skylos\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Golden precision fixture for C# path basename sanitization.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"danger\": [\"SKY-D215\"]\n        }\n      }\n    },\n    {\n      \"id\": \"csharp-open-redirect\",\n      \"path\": \"fixtures/csharp_open_redirect\",\n      \"description\": \"C# MVC Redirect using caller-controlled target should be reported as open redirect.\",\n      \"languages\": [\"csharp\"],\n      \"taxonomy\": [\"open_redirect\", \"csharp\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/duriantaco/skylos\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Golden fixture for C# redirect taint.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D230\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"csharp-open-redirect-literal-safe\",\n      \"path\": \"fixtures/csharp_open_redirect_literal_safe\",\n      \"description\": \"C# MVC Redirect to a literal local route should stay quiet.\",\n      \"languages\": [\"csharp\"],\n      \"taxonomy\": [\"open_redirect\", \"csharp\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/duriantaco/skylos\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Golden precision fixture for literal C# redirects.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"danger\": [\"SKY-D230\"]\n        }\n      }\n    },\n    {\n      \"id\": \"php-unserialize\",\n      \"path\": \"fixtures/php_unserialize\",\n      \"description\": \"PHP unserialize on request-controlled data should be reported as unsafe deserialization.\",\n      \"languages\": [\"php\"],\n      \"taxonomy\": [\"deserialization\", \"php\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/duriantaco/skylos\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Golden fixture for PHP unsafe deserialization.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D204\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"php-json-decode-safe\",\n      \"path\": \"fixtures/php_json_decode_safe\",\n      \"description\": \"PHP JSON decoding request data should not be treated as unsafe deserialization.\",\n      \"languages\": [\"php\"],\n      \"taxonomy\": [\"deserialization\", \"php\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/duriantaco/skylos\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Golden precision fixture for PHP JSON parsing.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"danger\": [\"SKY-D204\"]\n        }\n      }\n    },\n    {\n      \"id\": \"php-path-traversal\",\n      \"path\": \"fixtures/php_path_traversal\",\n      \"description\": \"PHP filesystem read using request-controlled path should be reported as path traversal.\",\n      \"languages\": [\"php\"],\n      \"taxonomy\": [\"path_traversal\", \"php\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/duriantaco/skylos\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Golden fixture for PHP filesystem path taint.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D215\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"php-path-basename-safe\",\n      \"path\": \"fixtures/php_path_basename_safe\",\n      \"description\": \"PHP path input sanitized with basename before fixed-directory access should stay quiet.\",\n      \"languages\": [\"php\"],\n      \"taxonomy\": [\"path_traversal\", \"php\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/duriantaco/skylos\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Golden precision fixture for PHP basename sanitization.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"danger\": [\"SKY-D215\"]\n        }\n      }\n    },\n    {\n      \"id\": \"typescript-eval-safe\",\n      \"path\": \"fixtures/typescript_eval_safe\",\n      \"description\": \"TypeScript JSON parsing should not be treated as eval or code execution.\",\n      \"languages\": [\"typescript\"],\n      \"taxonomy\": [\"command_injection\", \"typescript\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/semgrep/semgrep-rules\",\n        \"license\": \"LGPL-2.1-only\",\n        \"notes\": \"Distilled precision guard for non-eval parsing.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"danger\": [\"SKY-D201\"]\n        }\n      }\n    },\n    {\n      \"id\": \"typescript-nextjs-author-shadow-missing-auth\",\n      \"path\": \"fixtures/typescript_nextjs_author_shadow\",\n      \"description\": \"Next.js mutating route without an authorization check should be reported even when unrelated identifiers contain the substring auth.\",\n      \"languages\": [\"typescript\"],\n      \"taxonomy\": [\"auth_bypass\", \"typescript\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/vercel/next.js\",\n        \"license\": \"MIT\",\n        \"notes\": \"Distilled from common App Router mutation handlers and substring-bypass missing-auth patterns.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D280\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"typescript-nextjs-auth-decoys\",\n      \"path\": \"fixtures/typescript_nextjs_auth_decoys\",\n      \"description\": \"Next.js mutating route without an authentication guard should be reported even when comments, imports, headers, and cookies look auth-related.\",\n      \"languages\": [\"typescript\"],\n      \"taxonomy\": [\"auth_bypass\", \"typescript\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/vercel/next.js\",\n        \"license\": \"MIT\",\n        \"notes\": \"Distilled from common App Router mutation handlers where auth-shaped syntax does not enforce authorization.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D280\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"typescript-nextjs-session-guard-safe\",\n      \"path\": \"fixtures/typescript_nextjs_session_guard\",\n      \"description\": \"Next.js mutating route with an explicit server-session guard should stay quiet.\",\n      \"languages\": [\"typescript\"],\n      \"taxonomy\": [\"auth_bypass\", \"typescript\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/vercel/next.js\",\n        \"license\": \"MIT\",\n        \"notes\": \"Distilled precision guard for App Router routes protected with server-side session checks.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"danger\": [\"SKY-D280\"]\n        }\n      }\n    },\n    {\n      \"id\": \"typescript-nextjs-authjs-v5-safe\",\n      \"path\": \"fixtures/typescript_nextjs_authjs_v5_safe\",\n      \"description\": \"Next.js mutating route guarded through the official Auth.js v5 local auth adapter should stay quiet.\",\n      \"languages\": [\"typescript\"],\n      \"taxonomy\": [\"auth_bypass\", \"typescript\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/nextauthjs/next-auth\",\n        \"license\": \"ISC\",\n        \"notes\": \"Distilled from the official Auth.js pattern that exports auth from a local NextAuth adapter module.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"danger\": [\"SKY-D280\"]\n        }\n      }\n    },\n    {\n      \"id\": \"typescript-server-action-prisma-unsafe\",\n      \"path\": \"fixtures/typescript_server_action_prisma_unsafe\",\n      \"description\": \"Next.js server action using Prisma unsafe raw SQL with interpolated form input should be reported.\",\n      \"languages\": [\"typescript\"],\n      \"taxonomy\": [\"sql_injection\", \"typescript\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/prisma/prisma\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Distilled from common server-action and Prisma raw-query misuse patterns.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D281\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"typescript-server-action-constant-safe\",\n      \"path\": \"fixtures/typescript_server_action_constant_safe\",\n      \"description\": \"Next.js server action with compile-time constant SQL substitutions should stay quiet.\",\n      \"languages\": [\"typescript\"],\n      \"taxonomy\": [\"sql_injection\", \"typescript\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/vercel/next.js\",\n        \"license\": \"MIT\",\n        \"notes\": \"Distilled precision guard for constant propagation in server-action SQL analysis.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"danger\": [\"SKY-D211\", \"SKY-D281\"]\n        }\n      }\n    },\n    {\n      \"id\": \"typescript-server-action-inline-unsafe\",\n      \"path\": \"fixtures/typescript_server_action_inline_unsafe\",\n      \"description\": \"Inline Next.js server action with dynamic SQL interpolation should be reported.\",\n      \"languages\": [\"typescript\"],\n      \"taxonomy\": [\"sql_injection\", \"typescript\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/vercel/next.js\",\n        \"license\": \"MIT\",\n        \"notes\": \"Distilled from canonical inline use-server actions and unsafe dynamic SQL construction.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D281\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"typescript-server-action-repository-unsafe\",\n      \"path\": \"fixtures/typescript_server_action_repository_unsafe\",\n      \"description\": \"Next.js server action input reaching concatenated SQL through a same-file repository class should be reported.\",\n      \"languages\": [\"typescript\"],\n      \"taxonomy\": [\"sql_injection\", \"typescript\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/vercel/next.js\",\n        \"license\": \"MIT\",\n        \"notes\": \"Distilled from enterprise server-action repository layering where generic template matching has no fallback.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D281\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"typescript-server-action-query-config-safe\",\n      \"path\": \"fixtures/typescript_server_action_query_config_safe\",\n      \"description\": \"Next.js server action using a helper-built parameterized text-and-values query config should stay quiet.\",\n      \"languages\": [\"typescript\"],\n      \"taxonomy\": [\"sql_injection\", \"typescript\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/brianc/node-postgres\",\n        \"license\": \"MIT\",\n        \"notes\": \"Distilled precision guard for node-postgres query configuration objects returned through a helper.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"danger\": [\"SKY-D211\", \"SKY-D281\"]\n        }\n      }\n    },\n    {\n      \"id\": \"typescript-server-action-trusted-runtime-safe\",\n      \"path\": \"fixtures/typescript_server_action_trusted_runtime_safe\",\n      \"description\": \"Next.js server action interpolating a trusted server timestamp should stay quiet because runtime variability is not user taint.\",\n      \"languages\": [\"typescript\"],\n      \"taxonomy\": [\"sql_injection\", \"typescript\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/vercel/next.js\",\n        \"license\": \"MIT\",\n        \"notes\": \"Distilled precision guard separating trusted runtime values from Server Action input taint.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"danger\": [\"SKY-D211\", \"SKY-D281\"]\n        }\n      }\n    },\n    {\n      \"id\": \"typescript-server-action-prisma-tag-safe\",\n      \"path\": \"fixtures/typescript_server_action_prisma_tag_safe\",\n      \"description\": \"Next.js server action using a proven Prisma parameterizing tagged template should stay quiet.\",\n      \"languages\": [\"typescript\"],\n      \"taxonomy\": [\"sql_injection\", \"typescript\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/prisma/prisma\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Distilled precision guard for Prisma Client parameterized tagged-template queries with import provenance.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"danger\": [\"SKY-D211\", \"SKY-D281\"]\n        }\n      }\n    },\n    {\n      \"id\": \"typescript-webhook-unverified\",\n      \"path\": \"fixtures/typescript_webhook_unverified\",\n      \"description\": \"Stripe webhook handler that parses raw request body before signature verification should be reported.\",\n      \"languages\": [\"typescript\"],\n      \"taxonomy\": [\"auth_bypass\", \"typescript\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/stripe/stripe-node\",\n        \"license\": \"MIT\",\n        \"notes\": \"Distilled from provider webhook signature verification requirements.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D282\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"typescript-webhook-nondominating-verifier\",\n      \"path\": \"fixtures/typescript_webhook_nondominating_verifier\",\n      \"description\": \"Stripe webhook verification of an unrelated payload after a side effect must not prove the handler safe.\",\n      \"languages\": [\"typescript\"],\n      \"taxonomy\": [\"auth_bypass\", \"typescript\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/stripe/stripe-node\",\n        \"license\": \"MIT\",\n        \"notes\": \"Distilled from provider webhook requirements that the matching request payload be verified before it is trusted.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D282\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"typescript-webhook-verified-safe\",\n      \"path\": \"fixtures/typescript_webhook_verified\",\n      \"description\": \"Stripe webhook handler that uses provider signature verification before trusting the event should stay quiet.\",\n      \"languages\": [\"typescript\"],\n      \"taxonomy\": [\"auth_bypass\", \"typescript\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/stripe/stripe-node\",\n        \"license\": \"MIT\",\n        \"notes\": \"Distilled precision guard for verified provider webhooks.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"scan\": {\n        \"enable_secrets\": true\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"danger\": [\"SKY-D282\"],\n          \"secrets\": [\"SKY-S102\"]\n        }\n      }\n    },\n    {\n      \"id\": \"typescript-cookie-explicit-false\",\n      \"path\": \"fixtures/typescript_cookie_explicit_false\",\n      \"description\": \"A session cookie with explicit false secure and httpOnly flags should be reported as insecure.\",\n      \"languages\": [\"typescript\"],\n      \"taxonomy\": [\"cookie_security\", \"typescript\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/OWASP/CheatSheetSeries\",\n        \"license\": \"CC-BY-SA-4.0\",\n        \"notes\": \"Distilled from Session Management guidance for Secure and HttpOnly cookie attributes.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D252\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"typescript-cookie-literal-safe\",\n      \"path\": \"fixtures/typescript_cookie_literal_safe\",\n      \"description\": \"A session cookie with literal true secure and httpOnly flags should stay quiet.\",\n      \"languages\": [\"typescript\"],\n      \"taxonomy\": [\"cookie_security\", \"typescript\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/OWASP/CheatSheetSeries\",\n        \"license\": \"CC-BY-SA-4.0\",\n        \"notes\": \"Distilled precision guard from Session Management guidance for Secure and HttpOnly cookie attributes.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"danger\": [\"SKY-D252\"]\n        }\n      }\n    },\n    {\n      \"id\": \"java-ssrf-httpclient-send\",\n      \"path\": \"fixtures/java_ssrf_httpclient_send\",\n      \"description\": \"Java HttpClient request built from servlet-controlled URL and sent outbound should be reported as SSRF.\",\n      \"languages\": [\"java\"],\n      \"taxonomy\": [\"ssrf\", \"java\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/OWASP/CheatSheetSeries\",\n        \"license\": \"CC-BY-SA-4.0\",\n        \"notes\": \"Distilled from SSRF prevention guidance around complete user-controlled URLs.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D216\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"java-open-redirect-protocol-relative\",\n      \"path\": \"fixtures/java_open_redirect_protocol_relative\",\n      \"description\": \"Java redirect guarded only by startsWith('/') should still be reported because protocol-relative URLs bypass that guard.\",\n      \"languages\": [\"java\"],\n      \"taxonomy\": [\"open_redirect\", \"java\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/OWASP/CheatSheetSeries\",\n        \"license\": \"CC-BY-SA-4.0\",\n        \"notes\": \"Distilled from unvalidated redirect allowlist guidance and protocol-relative bypasses.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D230\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"java-ldap-xpath-injection\",\n      \"path\": \"fixtures/java_ldap_xpath_injection\",\n      \"description\": \"Java servlet parameters concatenated into LDAP filters and XPath expressions should be reported.\",\n      \"languages\": [\"java\"],\n      \"taxonomy\": [\"ldap_injection\", \"xpath_injection\", \"java\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/OWASP/CheatSheetSeries\",\n        \"license\": \"CC-BY-SA-4.0\",\n        \"notes\": \"Distilled from LDAP and XPath injection classes: user input changes interpreter expressions.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D240\", \"SKY-D241\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"go-command-shell-query\",\n      \"path\": \"fixtures/go_command_shell_query\",\n      \"description\": \"Go HTTP query parameter concatenated into a shell command should be reported as command injection.\",\n      \"languages\": [\"go\"],\n      \"taxonomy\": [\"command_injection\", \"go\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/securego/gosec\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Distilled from shell execution and request-taint command injection patterns.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D212\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"go-tar-symlink-escape\",\n      \"path\": \"fixtures/go_tar_symlink_escape\",\n      \"description\": \"Go tar extraction that creates archive-controlled symlinks without resolving the final target should be reported.\",\n      \"languages\": [\"go\"],\n      \"taxonomy\": [\"path_traversal\", \"go\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/securego/gosec\",\n        \"license\": \"Apache-2.0\",\n        \"notes\": \"Distilled from archive extraction symlink escape patterns.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D215\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"rust-shell-arg-taint\",\n      \"path\": \"fixtures/rust_shell_arg_taint\",\n      \"description\": \"Rust CLI argument passed through sh -c should be reported as command injection.\",\n      \"languages\": [\"rust\"],\n      \"taxonomy\": [\"command_injection\", \"rust\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/OWASP/CheatSheetSeries\",\n        \"license\": \"CC-BY-SA-4.0\",\n        \"notes\": \"Distilled from OS command injection guidance around shell invocation and externally influenced input.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D212\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"rust-path-filename-safe\",\n      \"path\": \"fixtures/rust_path_filename_safe\",\n      \"description\": \"Rust path input reduced to file_name before fixed-directory access should stay quiet.\",\n      \"languages\": [\"rust\"],\n      \"taxonomy\": [\"path_traversal\", \"rust\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/rust-lang/rust-clippy\",\n        \"license\": \"MIT OR Apache-2.0\",\n        \"notes\": \"Distilled precision guard for basename-style path sanitization in Rust.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"danger\": [\"SKY-D215\"]\n        }\n      }\n    },\n    {\n      \"id\": \"dart-http-tainted-url\",\n      \"path\": \"fixtures/dart_http_tainted_url\",\n      \"description\": \"Dart http.get with caller-controlled Uri.parse input should be reported as SSRF.\",\n      \"languages\": [\"dart\"],\n      \"taxonomy\": [\"ssrf\", \"dart\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/dart-lang/http\",\n        \"license\": \"BSD-3-Clause\",\n        \"notes\": \"Distilled from outbound request APIs that accept caller-controlled URLs.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D216\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"dart-uri-https-safe\",\n      \"path\": \"fixtures/dart_uri_https_safe\",\n      \"description\": \"Dart request built with Uri.https fixed host and tainted query parameter should stay quiet.\",\n      \"languages\": [\"dart\"],\n      \"taxonomy\": [\"ssrf\", \"dart\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/dart-lang/http\",\n        \"license\": \"BSD-3-Clause\",\n        \"notes\": \"Distilled precision guard for fixed-host Uri.https construction.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"danger\": [\"SKY-D216\"]\n        }\n      }\n    },\n    {\n      \"id\": \"php-request-include\",\n      \"path\": \"fixtures/php_request_include\",\n      \"description\": \"PHP include using request-controlled template path should be reported as path traversal.\",\n      \"languages\": [\"php\"],\n      \"taxonomy\": [\"path_traversal\", \"php\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/OWASP/CheatSheetSeries\",\n        \"license\": \"CC-BY-SA-4.0\",\n        \"notes\": \"Distilled from file inclusion and path traversal guidance.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D215\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"shell-eval-arg\",\n      \"path\": \"fixtures/shell_eval_arg\",\n      \"description\": \"Shell positional argument assigned to a command and passed to eval should be reported as command injection.\",\n      \"languages\": [\"shell\"],\n      \"taxonomy\": [\"command_injection\", \"shell\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/koalaman/shellcheck\",\n        \"license\": \"GPL-3.0\",\n        \"notes\": \"Distilled from shell injection guidance around eval of externally controlled input.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D212\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"shell-source-arg\",\n      \"path\": \"fixtures/shell_source_arg\",\n      \"description\": \"Shell source of a positional-argument path should be reported because the sourced file executes in-process.\",\n      \"languages\": [\"shell\"],\n      \"taxonomy\": [\"command_injection\", \"shell\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/koalaman/shellcheck\",\n        \"license\": \"GPL-3.0\",\n        \"notes\": \"Distilled from dynamic source/include patterns that execute attacker-selected shell code.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D212\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"shell-c-flag-arg\",\n      \"path\": \"fixtures/shell_c_flag_arg\",\n      \"description\": \"Shell command string passed to bash -c from a positional argument should be reported.\",\n      \"languages\": [\"shell\"],\n      \"taxonomy\": [\"command_injection\", \"shell\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/OWASP/CheatSheetSeries\",\n        \"license\": \"CC-BY-SA-4.0\",\n        \"notes\": \"Distilled from OS command injection guidance around shell interpreters and command strings.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D212\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"shell-curl-tainted-url\",\n      \"path\": \"fixtures/shell_curl_tainted_url\",\n      \"description\": \"Shell read input passed as a curl URL should be reported as SSRF.\",\n      \"languages\": [\"shell\"],\n      \"taxonomy\": [\"ssrf\", \"shell\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/OWASP/CheatSheetSeries\",\n        \"license\": \"CC-BY-SA-4.0\",\n        \"notes\": \"Distilled from SSRF guidance around complete user-controlled URLs.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D216\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"shell-curl-fixed-host-path\",\n      \"path\": \"fixtures/shell_curl_fixed_host_path\",\n      \"description\": \"Shell curl to a fixed host with only the path segment tainted should stay quiet for SSRF.\",\n      \"languages\": [\"shell\"],\n      \"taxonomy\": [\"ssrf\", \"shell\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/OWASP/CheatSheetSeries\",\n        \"license\": \"CC-BY-SA-4.0\",\n        \"notes\": \"Distilled precision guard for fixed-destination requests with attacker-controlled path data.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"danger\": [\"SKY-D216\"]\n        }\n      }\n    },\n    {\n      \"id\": \"shell-path-read-arg\",\n      \"path\": \"fixtures/shell_path_read_arg\",\n      \"description\": \"Shell positional argument interpolated into a filesystem path should be reported as path traversal.\",\n      \"languages\": [\"shell\"],\n      \"taxonomy\": [\"path_traversal\", \"shell\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/OWASP/CheatSheetSeries\",\n        \"license\": \"CC-BY-SA-4.0\",\n        \"notes\": \"Distilled from path traversal guidance around joining untrusted file names to fixed directories.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {\n          \"danger\": [\"SKY-D215\"]\n        },\n        \"absent\": {}\n      }\n    },\n    {\n      \"id\": \"shell-basename-safe\",\n      \"path\": \"fixtures/shell_basename_safe\",\n      \"description\": \"Shell positional argument reduced with basename before fixed-directory file access should stay quiet for path traversal.\",\n      \"languages\": [\"shell\"],\n      \"taxonomy\": [\"path_traversal\", \"shell\", \"precision_guard\"],\n      \"importance\": \"critical\",\n      \"source\": {\n        \"repo\": \"https://github.com/OWASP/CheatSheetSeries\",\n        \"license\": \"CC-BY-SA-4.0\",\n        \"notes\": \"Distilled precision guard for basename-style shell path sanitization.\"\n      },\n      \"budget\": {\n        \"max_seconds\": 5.0\n      },\n      \"expect\": {\n        \"present\": {},\n        \"absent\": {\n          \"danger\": [\"SKY-D215\"]\n        }\n      }\n    }\n  ]\n}\n"}],"suites":[{"id":"dead_code","manifestPath":"benchmarks/dead_code/manifest.json","manifestSha256":"4ffe68568cddc4e9288ff6088513152488cbd0af53d21f6f446d48e0e6fd011d","manifest":{"version":1,"cases":[{"id":"basic-unused-symbols","path":"fixtures/basic_unused_symbols","description":"Basic unused functions, classes, imports, and module variables should be found while referenced symbols stay alive.","taxonomy":["basic_detection"],"importance":"critical","source":{"repo":"https://github.com/duriantaco/skylos","license":"Apache-2.0","notes":"Local deterministic fixture for core dead-code recall and precision."},"scan":{"confidence":0,"grep_verify":true},"budget":{"max_seconds":5.0},"expect":{"unused":[{"kind":"import","file":"app.py","symbol":"json"},{"kind":"function","file":"app.py","symbol":"unused_helper"},{"kind":"class","file":"app.py","symbol":"UnusedWorker"},{"kind":"variable","file":"app.py","symbol":"UNUSED_SETTING"},{"kind":"variable","file":"app.py","symbol":"RESULT"}],"used":[{"kind":"function","file":"app.py","symbol":"used_helper"},{"kind":"class","file":"app.py","symbol":"UsedWorker"},{"kind":"variable","file":"app.py","symbol":"USED_SETTING"}]}},{"id":"fastapi-route-used","path":"fixtures/fastapi_route_used","description":"FastAPI route handlers and dependency providers are framework entrypoints, not dead code.","taxonomy":["framework_precision","fastapi"],"importance":"critical","source":{"repo":"https://github.com/fastapi/fastapi","license":"MIT","notes":"Distilled from FastAPI decorator and Depends patterns."},"scan":{"confidence":0,"grep_verify":true},"budget":{"max_seconds":5.0},"expect":{"unused":[{"kind":"function","file":"app.py","symbol":"unused_helper"}],"used":[{"kind":"function","file":"app.py","symbol":"get_current_user"},{"kind":"function","file":"app.py","symbol":"read_profile"}]}},{"id":"dynamic-registry-used","path":"fixtures/dynamic_registry_used","description":"Handlers registered through an explicit local registry should stay alive while unregistered handlers are reported.","taxonomy":["dynamic_dispatch","precision_guard"],"importance":"high","source":{"repo":"https://github.com/duriantaco/skylos","license":"Apache-2.0","notes":"Local deterministic fixture for decorator-based registry liveness."},"scan":{"confidence":0,"grep_verify":true},"budget":{"max_seconds":5.0},"expect":{"unused":[{"kind":"function","file":"app.py","symbol":"unused_handler"},{"kind":"function","file":"app.py","symbol":"dispatch"}],"used":[{"kind":"function","file":"app.py","symbol":"handle_create"},{"kind":"function","file":"app.py","symbol":"handle_update"}]}},{"id":"local-registration-decorator-entrypoints","path":"fixtures/local_registration_decorator","description":"Locally defined decorators that register and return functions should keep decorated entrypoints alive while unregistered helpers are still reported.","taxonomy":["dynamic_dispatch","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/duriantaco/skylos","license":"Apache-2.0","notes":"Distilled from real Python framework code that registers handlers through project-local decorators."},"scan":{"confidence":0,"grep_verify":true},"budget":{"max_seconds":5.0},"expect":{"unused":[{"kind":"function","file":"app.py","symbol":"dispatch"},{"kind":"function","file":"app.py","symbol":"unused_action"}],"used":[{"kind":"function","file":"app.py","symbol":"action"},{"kind":"function","file":"app.py","symbol":"on_startup"},{"kind":"function","file":"app.py","symbol":"resize_image"},{"kind":"function","file":"app.py","symbol":"archive_image"},{"kind":"function","file":"app.py","symbol":"warm_cache"}]}},{"id":"explicit-same-name-reexports","path":"fixtures/explicit_reexports","description":"Python explicit same-name aliases are public re-export signals and should not be reported as unused imports.","taxonomy":["package_entrypoint","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/pallets/click","license":"BSD-3-Clause","notes":"Distilled from package API modules that expose imports with `name as name` re-export aliases."},"scan":{"confidence":0,"grep_verify":true},"budget":{"max_seconds":5.0},"expect":{"unused":[{"kind":"import","file":"app.py","symbol":"json"},{"kind":"function","file":"app.py","symbol":"unused_helper"}],"used":[{"kind":"import","file":"app.py","symbol":"pathlib"},{"kind":"import","file":"app.py","symbol":"PathLike"}]}},{"id":"annotation-metadata-import-scope","path":"fixtures/annotation_metadata_scope","description":"Annotation metadata should bind to imported decorators even when a function parameter has the same leaf name.","taxonomy":["pydantic","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/pydantic/pydantic","license":"MIT","notes":"Distilled from Annotated metadata patterns used by Pydantic and FastAPI."},"scan":{"confidence":0,"grep_verify":true},"budget":{"max_seconds":5.0},"expect":{"unused":[{"kind":"import","file":"app.py","symbol":"json"},{"kind":"function","file":"app.py","symbol":"unused_builder"},{"kind":"variable","file":"app.py","symbol":"RESULT"}],"used":[{"kind":"import","file":"app.py","symbol":"deprecated"},{"kind":"function","file":"app.py","symbol":"build_path"}]}},{"id":"sqlalchemy-mixed-models","path":"fixtures/sqlalchemy_mixed_models","description":"A realistic model module should report only the unreferenced SQLAlchemy model while keeping used models and ORM columns quiet.","taxonomy":["sqlalchemy","multi_file","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/sqlalchemy/sqlalchemy","license":"MIT","notes":"Distilled from declarative model modules where some tables are repository-owned and some models are stale."},"scan":{"confidence":0,"grep_verify":true},"budget":{"max_seconds":5.0},"expect":{"unused":[{"kind":"class","file":"models.py","symbol":"Tag"},{"kind":"variable","file":"app.py","symbol":"RESULT"}],"used":[{"kind":"class","file":"models.py","symbol":"Base"},{"kind":"class","file":"models.py","symbol":"Note"},{"kind":"class","file":"models.py","symbol":"AuditLog"},{"kind":"variable","file":"models.py","symbol":"id"},{"kind":"variable","file":"models.py","symbol":"title"},{"kind":"variable","file":"models.py","symbol":"name"},{"kind":"function","file":"repository.py","symbol":"create_note"}]}},{"id":"flask-cli-blueprint","path":"fixtures/flask_cli_blueprint","description":"Flask blueprint routes and app CLI commands are entrypoints, while nearby unregistered helpers remain dead code.","taxonomy":["framework_precision","flask","cli_entrypoint","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/pallets/flask","license":"BSD-3-Clause","notes":"Distilled from production Flask apps with blueprints and application CLI commands."},"scan":{"confidence":0,"grep_verify":true},"budget":{"max_seconds":5.0},"expect":{"unused":[{"kind":"function","file":"app.py","symbol":"unused_view_helper"},{"kind":"class","file":"app.py","symbol":"UnusedFormatter"}],"used":[{"kind":"function","file":"app.py","symbol":"show_order"},{"kind":"function","file":"app.py","symbol":"reindex_orders"},{"kind":"variable","file":"app.py","symbol":"orders"}]}},{"id":"package-service-layers","path":"fixtures/package_service_layers","description":"A small service/repository package should resolve cross-file references and still find stale local strategy code.","taxonomy":["multi_file","service_layer","basic_detection"],"importance":"critical","source":{"repo":"https://github.com/psf/requests","license":"Apache-2.0","notes":"Local industry-style fixture shaped like service/repository layers common in Python web services."},"scan":{"confidence":0,"grep_verify":true},"budget":{"max_seconds":5.0},"expect":{"unused":[{"kind":"import","file":"service.py","symbol":"json"},{"kind":"function","file":"service.py","symbol":"_unused_reconcile"},{"kind":"class","file":"service.py","symbol":"UnusedStrategy"},{"kind":"variable","file":"service.py","symbol":"UNUSED_STATUS"},{"kind":"variable","file":"app.py","symbol":"RESULT"}],"used":[{"kind":"function","file":"app.py","symbol":"run_checkout"},{"kind":"function","file":"service.py","symbol":"create_invoice"},{"kind":"class","file":"repository.py","symbol":"InvoiceRepository"},{"kind":"variable","file":"service.py","symbol":"ACTIVE_STATUS"}]}},{"id":"django-management-command","path":"fixtures/django_management_command","description":"Django management command classes and lifecycle methods are CLI entrypoints while unrelated helpers remain dead code.","taxonomy":["framework_precision","django","cli_entrypoint","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/django/django","license":"BSD-3-Clause","notes":"Distilled from Django management command modules under management/commands."},"scan":{"confidence":0,"grep_verify":true},"budget":{"max_seconds":5.0},"expect":{"unused":[{"kind":"function","file":"shop/management/commands/rebuild_index.py","symbol":"unused_export_job"},{"kind":"class","file":"shop/management/commands/rebuild_index.py","symbol":"UnusedCommandHelper"}],"used":[{"kind":"class","file":"shop/management/commands/rebuild_index.py","symbol":"Command"},{"kind":"function","file":"shop/management/commands/rebuild_index.py","symbol":"add_arguments"},{"kind":"function","file":"shop/management/commands/rebuild_index.py","symbol":"handle"},{"kind":"function","file":"shop/management/commands/rebuild_index.py","symbol":"rebuild_index"},{"kind":"variable","file":"shop/management/commands/rebuild_index.py","symbol":"args"},{"kind":"variable","file":"shop/management/commands/rebuild_index.py","symbol":"help"}]}},{"id":"celery-task-entrypoints","path":"fixtures/celery_tasks","description":"Celery task decorators should keep worker functions alive while unregistered helpers are reported.","taxonomy":["framework_precision","celery","dynamic_dispatch","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/celery/celery","license":"BSD-3-Clause","notes":"Distilled from production task modules using app.task and shared_task."},"scan":{"confidence":0,"grep_verify":true},"budget":{"max_seconds":5.0},"expect":{"unused":[{"kind":"function","file":"app.py","symbol":"unused_task_helper"},{"kind":"class","file":"app.py","symbol":"UnusedTaskPayload"}],"used":[{"kind":"function","file":"app.py","symbol":"send_receipt"},{"kind":"function","file":"app.py","symbol":"rebuild_rollups"},{"kind":"variable","file":"app.py","symbol":"celery_app"}]}},{"id":"pytest-fixture-entrypoints","path":"fixtures/pytest_fixtures","description":"Pytest tests and fixtures are runtime entrypoints even when referenced through parameter injection.","taxonomy":["framework_precision","pytest","dynamic_dispatch","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/pytest-dev/pytest","license":"MIT","notes":"Distilled from tests that reference fixtures by argument name and custom fixture aliases."},"scan":{"confidence":0,"grep_verify":true},"budget":{"max_seconds":5.0},"expect":{"unused":[],"used":[{"kind":"function","file":"tests/test_orders.py","symbol":"api_client"},{"kind":"function","file":"tests/test_orders.py","symbol":"payload_fixture"},{"kind":"function","file":"tests/test_orders.py","symbol":"test_create_order"}]}},{"id":"pydantic-validator-entrypoints","path":"fixtures/pydantic_validators","description":"Pydantic validators are framework-called methods while unrelated helpers are still reportable.","taxonomy":["framework_precision","pydantic","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/pydantic/pydantic","license":"MIT","notes":"Distilled from Pydantic v2 field_validator and model_validator usage."},"scan":{"confidence":0,"grep_verify":true},"budget":{"max_seconds":5.0},"expect":{"unused":[{"kind":"function","file":"app.py","symbol":"unused_normalizer"},{"kind":"class","file":"app.py","symbol":"UnusedSchema"},{"kind":"variable","file":"app.py","symbol":"RESULT"}],"used":[{"kind":"class","file":"app.py","symbol":"UserInput"},{"kind":"function","file":"app.py","symbol":"normalize_email"},{"kind":"function","file":"app.py","symbol":"ensure_domain"},{"kind":"function","file":"app.py","symbol":"build_user"},{"kind":"variable","file":"app.py","symbol":"cls"},{"kind":"variable","file":"app.py","symbol":"email"},{"kind":"variable","file":"app.py","symbol":"name"}]}},{"id":"alembic-migration-entrypoints","path":"fixtures/alembic_migration","description":"Alembic migration lifecycle functions and revision metadata are entrypoints; helper code can still be dead.","taxonomy":["framework_precision","alembic","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/sqlalchemy/alembic","license":"MIT","notes":"Distilled from Alembic revision modules under versions/."},"scan":{"confidence":0,"grep_verify":true},"budget":{"max_seconds":5.0},"expect":{"unused":[{"kind":"function","file":"versions/20260425_add_orders.py","symbol":"unused_migration_helper"},{"kind":"class","file":"versions/20260425_add_orders.py","symbol":"UnusedMigrationState"}],"used":[{"kind":"function","file":"versions/20260425_add_orders.py","symbol":"upgrade"},{"kind":"function","file":"versions/20260425_add_orders.py","symbol":"downgrade"},{"kind":"variable","file":"versions/20260425_add_orders.py","symbol":"revision"},{"kind":"variable","file":"versions/20260425_add_orders.py","symbol":"down_revision"}]}},{"id":"importlib-plugin-loading","path":"fixtures/importlib_plugins","description":"String-based importlib plugin loading should keep loaded plugin hooks alive while stale plugin code is reported.","taxonomy":["dynamic_dispatch","plugin_loading","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/duriantaco/skylos","license":"Apache-2.0","notes":"Local deterministic fixture for importlib.import_module plugin references."},"scan":{"confidence":0,"grep_verify":true},"budget":{"max_seconds":5.0},"expect":{"unused":[{"kind":"function","file":"app.py","symbol":"unused_loader"},{"kind":"function","file":"plugins/email.py","symbol":"unused_plugin_hook"},{"kind":"class","file":"plugins/email.py","symbol":"UnusedPlugin"},{"kind":"variable","file":"app.py","symbol":"RESULT"}],"used":[{"kind":"function","file":"app.py","symbol":"load_plugin"},{"kind":"function","file":"app.py","symbol":"run_notification"},{"kind":"function","file":"plugins/email.py","symbol":"send_email"},{"kind":"variable","file":"app.py","symbol":"PLUGIN_MODULE"}]}},{"id":"package-entrypoints","path":"fixtures/package_entrypoints","description":"pyproject project.scripts entrypoints should keep CLI functions alive.","taxonomy":["package_entrypoint","cli_entrypoint","precision_guard"],"importance":"critical","source":{"repo":"https://packaging.python.org","license":"MIT","notes":"Distilled from Python package console-script metadata."},"scan":{"confidence":0,"grep_verify":true},"budget":{"max_seconds":5.0},"expect":{"unused":[],"used":[{"kind":"function","file":"bench/cli.py","symbol":"main"},{"kind":"function","file":"bench/cli.py","symbol":"format_status"}]}},{"id":"go-service-entrypoints","path":"fixtures/go_service","description":"Go HTTP handler references should keep live handlers reachable while stale package-private helpers are reported.","languages":["go"],"taxonomy":["go","basic_detection","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/golang/go","license":"BSD-3-Clause","notes":"Distilled from small Go services that register net/http handlers."},"scan":{"confidence":0,"grep_verify":true},"budget":{"max_seconds":5.0},"expect":{"unused":[{"kind":"function","file":"main.go","symbol":"unusedReconciler"}],"used":[{"kind":"function","file":"main.go","symbol":"main"},{"kind":"function","file":"main.go","symbol":"healthHandler"},{"kind":"function","file":"main.go","symbol":"formatStatus"}]}},{"id":"java-service-entrypoints","path":"fixtures/java_service","description":"Java application entrypoints and method calls should stay live while unused methods and classes are reported.","languages":["java"],"taxonomy":["java","basic_detection","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/openjdk/jdk","license":"GPL-2.0-only WITH Classpath-exception-2.0","notes":"Distilled from Java service classes with application entrypoints and stale helpers."},"scan":{"confidence":0,"grep_verify":true},"budget":{"max_seconds":5.0},"expect":{"unused":[{"kind":"function","file":"App.java","symbol":"unusedFormatter"},{"kind":"class","file":"App.java","symbol":"UnusedController"}],"used":[{"kind":"class","file":"App.java","symbol":"App"},{"kind":"function","file":"App.java","symbol":"main"},{"kind":"function","file":"App.java","symbol":"handle"},{"kind":"function","file":"App.java","symbol":"formatStatus"}]}},{"id":"java-fxml-controller-callbacks","path":"fixtures/java_fxml_controller","description":"JavaFX methods wired through FXML action metadata are framework callbacks, while unwired @FXML methods and ordinary helpers remain dead code.","languages":["java"],"taxonomy":["java","framework_precision","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/jakemarotta/FXMLExercise","license":"NOASSERTION","notes":"Distilled from @FXML controller callbacks reproduced at pinned revision a75a2c16042d06674fd2361238c9c4933cbdd4be."},"scan":{"confidence":0,"grep_verify":true},"budget":{"max_seconds":5.0},"expect":{"unused":[{"kind":"function","file":"PrintController.java","symbol":"staleAnnotated"},{"kind":"function","file":"PrintController.java","symbol":"staleHelper"}],"used":[{"kind":"class","file":"PrintController.java","symbol":"PrintController"},{"kind":"function","file":"PrintController.java","symbol":"printButtonAction"}]}},{"id":"typescript-vscode-pseudoterminal-callbacks","path":"fixtures/typescript_vscode_pseudoterminal","description":"VS Code Pseudoterminal and provider contract methods are host-invoked callbacks, while unrelated methods on the same classes remain dead code.","languages":["typescript"],"taxonomy":["typescript","framework_precision","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/microsoft/vscode-extension-samples","license":"MIT","notes":"Distilled from the task-provider sample at pinned revision 3d8442b16c7f353779e266f16295703b2b4a6dcc."},"scan":{"confidence":0,"grep_verify":true},"budget":{"max_seconds":5.0},"expect":{"unused":[{"kind":"function","file":"src/extension.ts","symbol":"staleHelper"},{"kind":"function","file":"src/extension.ts","symbol":"staleProviderHelper"}],"used":[{"kind":"function","file":"src/extension.ts","symbol":"activate"},{"kind":"class","file":"src/extension.ts","symbol":"BuildTerminal"},{"kind":"class","file":"src/extension.ts","symbol":"InternalTaskProvider"},{"kind":"function","file":"src/extension.ts","symbol":"open"},{"kind":"function","file":"src/extension.ts","symbol":"close"},{"kind":"function","file":"src/extension.ts","symbol":"provideTasks"},{"kind":"function","file":"src/extension.ts","symbol":"resolveTask"}]}},{"id":"ts-js-package-reachability","path":"fixtures/ts_js_package","description":"TypeScript package entrypoints and imports should keep live exports reachable while stale TS and JS exports are reported.","languages":["typescript","javascript"],"taxonomy":["typescript","javascript","package_entrypoint","basic_detection","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/microsoft/TypeScript","license":"Apache-2.0","notes":"Distilled from package.json main entrypoints and mixed TS/JS module graphs."},"scan":{"confidence":0,"grep_verify":true},"budget":{"max_seconds":5.0},"expect":{"unused":[{"kind":"function","file":"src/service.ts","symbol":"unusedTransform"},{"kind":"function","file":"src/legacy.js","symbol":"legacySync"},{"kind":"file","file":"src/legacy.js","symbol":"src/legacy.js"}],"used":[{"kind":"function","file":"src/service.ts","symbol":"runJob"},{"kind":"function","file":"src/service.ts","symbol":"formatJob"}]}}]},"cases":[{"id":"basic-unused-symbols","status":"complete","elapsedSeconds":0.655078,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-l1_3ms4m/basic_unused_symbols","nativeReport":{"definitions":{"app.UsedWorker":{"name":"app.UsedWorker","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-l1_3ms4m/basic_unused_symbols/app.py","line":9,"type":"class","loc":3,"complexity":1,"calls":[],"called_by":["app.used_helper"],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Reachable from root","dead_code_reason_tags":["reachable_from_root"]},"app.UsedWorker.run":{"name":"app.UsedWorker.run","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-l1_3ms4m/basic_unused_symbols/app.py","line":10,"type":"method","loc":2,"complexity":1,"calls":["math","math.sqrt"],"called_by":["app.used_helper"],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"attribute_name_match","role":"context","reason":"unverified same_file_attr match","source":"attribute_reference","confidence":0.9643,"details":{"bucket":"same_file_attr"}},{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Reachable from root","dead_code_reason_tags":["reachable_from_root"]},"app.UnusedWorker":{"name":"app.UnusedWorker","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-l1_3ms4m/basic_unused_symbols/app.py","line":14,"type":"class","loc":3,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"app.UnusedWorker.run":{"name":"app.UnusedWorker.run","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-l1_3ms4m/basic_unused_symbols/app.py","line":15,"type":"method","loc":2,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"attribute_name_match","role":"context","reason":"unverified same_file_attr match","source":"attribute_reference","confidence":0.9643,"details":{"bucket":"same_file_attr"}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"app.used_helper":{"name":"app.used_helper","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-l1_3ms4m/basic_unused_symbols/app.py","line":19,"type":"function","loc":3,"complexity":1,"calls":["app.USED_SETTING","app.UsedWorker","app.UsedWorker.run","app.used_helper.worker"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"top_level_execution","role":"supports_live","reason":"called during module top-level execution","source":"python_ast","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Called during module import","reason_tags":["top_level_execution"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Called during module import","dead_code_reason_tags":["top_level_execution"]},"app.unused_helper":{"name":"app.unused_helper","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-l1_3ms4m/basic_unused_symbols/app.py","line":24,"type":"function","loc":2,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"unused_helper","full_name":"app.unused_helper","simple_name":"unused_helper","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-l1_3ms4m/basic_unused_symbols/app.py","basename":"app.py","line":24,"confidence":90,"references":0,"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[{"name":"json","full_name":"json","simple_name":"json","type":"import","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-l1_3ms4m/basic_unused_symbols/app.py","basename":"app.py","line":1,"confidence":100,"references":0,"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_classes":[{"name":"UnusedWorker","full_name":"app.UnusedWorker","simple_name":"UnusedWorker","type":"class","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-l1_3ms4m/basic_unused_symbols/app.py","basename":"app.py","line":14,"confidence":90,"references":0,"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_variables":[{"name":"UNUSED_SETTING","full_name":"app.UNUSED_SETTING","simple_name":"UNUSED_SETTING","type":"variable","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-l1_3ms4m/basic_unused_symbols/app.py","basename":"app.py","line":6,"confidence":60,"references":0,"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.6,"details":{"confidence":60,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":60,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"name":"RESULT","full_name":"app.RESULT","simple_name":"RESULT","type":"variable","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-l1_3ms4m/basic_unused_symbols/app.py","basename":"app.py","line":28,"confidence":60,"references":0,"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.6,"details":{"confidence":60,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":60,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.py","qualified_name":"app.RESULT","kind":"variable","line":28,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":60,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.6,"details":{"confidence":60,"threshold":0}}]},{"file":"app.py","qualified_name":"app.UNUSED_SETTING","kind":"variable","line":6,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":60,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.6,"details":{"confidence":60,"threshold":0}}]},{"file":"app.py","qualified_name":"app.USED_SETTING","kind":"variable","line":5,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":60,"threshold":0},"evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.UnusedWorker","kind":"class","line":14,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]},{"file":"app.py","qualified_name":"app.UnusedWorker.run","kind":"method","line":15,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"evidence":[{"kind":"attribute_name_match","role":"context","reason":"unverified same_file_attr match","source":"attribute_reference","confidence":0.9643,"details":{"bucket":"same_file_attr"}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}]},{"file":"app.py","qualified_name":"app.UsedWorker","kind":"class","line":9,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.UsedWorker.run","kind":"method","line":10,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"attribute_name_match","role":"context","reason":"unverified same_file_attr match","source":"attribute_reference","confidence":0.9643,"details":{"bucket":"same_file_attr"}},{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.unused_helper","kind":"function","line":24,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]},{"file":"app.py","qualified_name":"app.used_helper","kind":"function","line":19,"classification":"alive","decision":{"classification":"alive","primary_reason":"Called during module import","reason_tags":["top_level_execution"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"top_level_execution","role":"supports_live","reason":"called during module top-level execution","source":"python_ast","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.used_helper.worker","kind":"variable","line":20,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":10,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":5,"likely_dead":5},"candidate_decisions":{"reported":5,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-l1_3ms4m/basic_unused_symbols","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-l1_3ms4m/basic_unused_symbols","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":true,"rescued_count":0,"project_cache_enabled":false,"backend":"ripgrep"},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":16,"grade_categories":["dead_code"],"by_directory":[{"path":".","total":5,"files":1,"dead_code":5,"rules":{"unused-classes":1,"unused-functions":1,"unused-imports":1,"unused-variables":2},"severities":{"LOW":5}}],"finding_type_counts":{"defect":0,"review":5,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"listed_finding_type_counts":{"defect":0,"review":5,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["dead_code"],"coverage":{"status":"partial","not_assessed":["security","quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":5,"confidence_range":[60,100]},"finding_counts":{"defect":0,"review":5,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-l1_3ms4m/basic_unused_symbols","conf":0,"enable_quality":false,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":true,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"fastapi-route-used","status":"complete","elapsedSeconds":0.72936,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-3kwjgxam/fastapi_route_used","nativeReport":{"definitions":{"app.get_current_user":{"name":"app.get_current_user","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-3kwjgxam/fastapi_route_used/app.py","line":7,"type":"function","loc":2,"complexity":1,"calls":[],"called_by":["app.read_profile"],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]},"app.read_profile":{"name":"app.read_profile","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-3kwjgxam/fastapi_route_used/app.py","line":12,"type":"function","loc":2,"complexity":1,"calls":["app.get_current_user","app.read_profile.user","fastapi.Depends"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]},"app.unused_helper":{"name":"app.unused_helper","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-3kwjgxam/fastapi_route_used/app.py","line":16,"type":"function","loc":2,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"unused_helper","full_name":"app.unused_helper","simple_name":"unused_helper","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-3kwjgxam/fastapi_route_used/app.py","basename":"app.py","line":16,"confidence":90,"references":0,"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.py","qualified_name":"app.app","kind":"variable","line":4,"classification":"alive","decision":{"classification":"alive","primary_reason":"Called during module import","reason_tags":["top_level_execution"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"top_level_execution","role":"supports_live","reason":"called during module top-level execution","source":"python_ast","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.get_current_user","kind":"function","line":7,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.read_profile","kind":"function","line":12,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.unused_helper","kind":"function","line":16,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":4,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":3,"likely_dead":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-3kwjgxam/fastapi_route_used","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-3kwjgxam/fastapi_route_used","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":true,"rescued_count":0,"project_cache_enabled":false,"backend":"ripgrep"},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":9,"grade_categories":["dead_code"],"by_directory":[{"path":".","total":1,"files":1,"dead_code":1,"rules":{"unused-functions":1},"severities":{"LOW":1}}],"finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"listed_finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["dead_code"],"coverage":{"status":"partial","not_assessed":["security","quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[90,90]},"finding_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-3kwjgxam/fastapi_route_used","conf":0,"enable_quality":false,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":true,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"dynamic-registry-used","status":"complete","elapsedSeconds":0.956756,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-gx1j1n80/dynamic_registry_used","nativeReport":{"definitions":{"app.register":{"name":"app.register","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-gx1j1n80/dynamic_registry_used/app.py","line":4,"type":"function","loc":6,"complexity":1,"calls":["app.register.decorator"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"top_level_execution","role":"supports_live","reason":"called during module top-level execution","source":"python_ast","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Called during module import","reason_tags":["top_level_execution"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Called during module import","dead_code_reason_tags":["top_level_execution"]},"app.register.decorator":{"name":"app.register.decorator","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-gx1j1n80/dynamic_registry_used/app.py","line":5,"type":"function","loc":3,"complexity":1,"calls":["app.REGISTRY","app.register.decorator.func","app.register.name"],"called_by":["app.register"],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Reachable from root","dead_code_reason_tags":["reachable_from_root"]},"app.handle_create":{"name":"app.handle_create","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-gx1j1n80/dynamic_registry_used/app.py","line":13,"type":"function","loc":2,"complexity":1,"calls":["app.handle_create.payload"],"called_by":["<skylos.deadcode.liveness>"],"dead":false,"dead_code_classification":"uncertain","dead_code_evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"registered_by_decorator","source":"dead_code_liveness","confidence":1.0,"details":{}},{"kind":"uncertainty","role":"uncertainty","reason":"registered_by_decorator","source":"framework_signal","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; Not exported","reason_tags":["uncertainty","not_exported"],"live_evidence_count":0,"dead_evidence_count":0,"uncertainty_count":2,"confidence":85,"threshold":0},"dead_code_reason":"Uncertainty evidence present; Not exported","dead_code_reason_tags":["uncertainty","not_exported"]},"app.handle_update":{"name":"app.handle_update","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-gx1j1n80/dynamic_registry_used/app.py","line":18,"type":"function","loc":2,"complexity":1,"calls":["app.handle_update.payload"],"called_by":["<skylos.deadcode.liveness>"],"dead":false,"dead_code_classification":"uncertain","dead_code_evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"registered_by_decorator","source":"dead_code_liveness","confidence":1.0,"details":{}},{"kind":"uncertainty","role":"uncertainty","reason":"registered_by_decorator","source":"framework_signal","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; Not exported","reason_tags":["uncertainty","not_exported"],"live_evidence_count":0,"dead_evidence_count":0,"uncertainty_count":2,"confidence":85,"threshold":0},"dead_code_reason":"Uncertainty evidence present; Not exported","dead_code_reason_tags":["uncertainty","not_exported"]},"app.dispatch":{"name":"app.dispatch","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-gx1j1n80/dynamic_registry_used/app.py","line":22,"type":"function","loc":2,"complexity":1,"calls":["app.REGISTRY","app.dispatch.name","app.dispatch.payload"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"app.unused_handler":{"name":"app.unused_handler","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-gx1j1n80/dynamic_registry_used/app.py","line":26,"type":"function","loc":2,"complexity":1,"calls":["app.unused_handler.payload"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"dispatch","full_name":"app.dispatch","simple_name":"dispatch","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-gx1j1n80/dynamic_registry_used/app.py","basename":"app.py","line":22,"confidence":90,"references":0,"calls":["app.dispatch.payload","app.dispatch.name","app.REGISTRY"],"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"name":"unused_handler","full_name":"app.unused_handler","simple_name":"unused_handler","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-gx1j1n80/dynamic_registry_used/app.py","basename":"app.py","line":26,"confidence":85,"references":0,"calls":["app.unused_handler.payload"],"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.py","qualified_name":"app.REGISTRY","kind":"variable","line":1,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":60,"threshold":0},"evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.dispatch","kind":"function","line":22,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]},{"file":"app.py","qualified_name":"app.handle_create","kind":"function","line":13,"classification":"uncertain","decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; Not exported","reason_tags":["uncertainty","not_exported"],"live_evidence_count":0,"dead_evidence_count":0,"uncertainty_count":2,"confidence":85,"threshold":0},"evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"registered_by_decorator","source":"dead_code_liveness","confidence":1.0,"details":{}},{"kind":"uncertainty","role":"uncertainty","reason":"registered_by_decorator","source":"framework_signal","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.handle_update","kind":"function","line":18,"classification":"uncertain","decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; Not exported","reason_tags":["uncertainty","not_exported"],"live_evidence_count":0,"dead_evidence_count":0,"uncertainty_count":2,"confidence":85,"threshold":0},"evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"registered_by_decorator","source":"dead_code_liveness","confidence":1.0,"details":{}},{"kind":"uncertainty","role":"uncertainty","reason":"registered_by_decorator","source":"framework_signal","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.register","kind":"function","line":4,"classification":"alive","decision":{"classification":"alive","primary_reason":"Called during module import","reason_tags":["top_level_execution"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"top_level_execution","role":"supports_live","reason":"called during module top-level execution","source":"python_ast","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.register.decorator","kind":"function","line":5,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.unused_handler","kind":"function","line":26,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":7,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":3,"uncertain":2,"likely_dead":2},"uncertainty_reasons":{"registered_by_decorator":2},"candidate_decisions":{"reported":2,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-gx1j1n80/dynamic_registry_used","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-gx1j1n80/dynamic_registry_used","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":2,"rescued":[{"name":"app.handle_create","reason":"registered_by_decorator","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-gx1j1n80/dynamic_registry_used/app.py","line":13},{"name":"app.handle_update","reason":"registered_by_decorator","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-gx1j1n80/dynamic_registry_used/app.py","line":18}]},"grep_verify":{"enabled":true,"rescued_count":0,"project_cache_enabled":false,"backend":"ripgrep"},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":16,"grade_categories":["dead_code"],"by_directory":[{"path":".","total":2,"files":1,"dead_code":2,"rules":{"unused-functions":2},"severities":{"LOW":2}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["dead_code"],"coverage":{"status":"partial","not_assessed":["security","quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":2,"confidence_range":[85,90]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-gx1j1n80/dynamic_registry_used","conf":0,"enable_quality":false,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":true,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"local-registration-decorator-entrypoints","status":"complete","elapsedSeconds":0.878989,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-k44oy7ws/local_registration_decorator","nativeReport":{"definitions":{"app.action":{"name":"app.action","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-k44oy7ws/local_registration_decorator/app.py","line":5,"type":"function","loc":6,"complexity":1,"calls":["app.action.decorator"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"top_level_execution","role":"supports_live","reason":"called during module top-level execution","source":"python_ast","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Called during module import","reason_tags":["top_level_execution"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Called during module import","dead_code_reason_tags":["top_level_execution"]},"app.action.decorator":{"name":"app.action.decorator","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-k44oy7ws/local_registration_decorator/app.py","line":6,"type":"function","loc":3,"complexity":1,"calls":["app.ACTIONS","app.action.decorator.func","app.action.name"],"called_by":["app.action"],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Reachable from root","dead_code_reason_tags":["reachable_from_root"]},"app.on_startup":{"name":"app.on_startup","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-k44oy7ws/local_registration_decorator/app.py","line":13,"type":"function","loc":3,"complexity":1,"calls":["app.STARTUP_CALLBACKS","app.STARTUP_CALLBACKS.append","app.on_startup.func"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"top_level_execution","role":"supports_live","reason":"called during module top-level execution","source":"python_ast","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Called during module import","reason_tags":["top_level_execution"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"Called during module import","dead_code_reason_tags":["top_level_execution"]},"app.resize_image":{"name":"app.resize_image","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-k44oy7ws/local_registration_decorator/app.py","line":19,"type":"function","loc":2,"complexity":1,"calls":["app.resize_image.payload"],"called_by":["<skylos.deadcode.liveness>"],"dead":false,"dead_code_classification":"uncertain","dead_code_evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"registered_by_decorator","source":"dead_code_liveness","confidence":1.0,"details":{}},{"kind":"uncertainty","role":"uncertainty","reason":"registered_by_decorator","source":"framework_signal","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; Not exported","reason_tags":["uncertainty","not_exported"],"live_evidence_count":0,"dead_evidence_count":0,"uncertainty_count":2,"confidence":100,"threshold":0},"dead_code_reason":"Uncertainty evidence present; Not exported","dead_code_reason_tags":["uncertainty","not_exported"]},"app.archive_image":{"name":"app.archive_image","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-k44oy7ws/local_registration_decorator/app.py","line":24,"type":"function","loc":2,"complexity":1,"calls":["app.archive_image.payload"],"called_by":["<skylos.deadcode.liveness>"],"dead":false,"dead_code_classification":"uncertain","dead_code_evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"registered_by_decorator","source":"dead_code_liveness","confidence":1.0,"details":{}},{"kind":"uncertainty","role":"uncertainty","reason":"registered_by_decorator","source":"framework_signal","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; Not exported","reason_tags":["uncertainty","not_exported"],"live_evidence_count":0,"dead_evidence_count":0,"uncertainty_count":2,"confidence":100,"threshold":0},"dead_code_reason":"Uncertainty evidence present; Not exported","dead_code_reason_tags":["uncertainty","not_exported"]},"app.warm_cache":{"name":"app.warm_cache","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-k44oy7ws/local_registration_decorator/app.py","line":29,"type":"function","loc":2,"complexity":1,"calls":[],"called_by":["<skylos.deadcode.liveness>"],"dead":false,"dead_code_classification":"uncertain","dead_code_evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"registered_by_decorator","source":"dead_code_liveness","confidence":1.0,"details":{}},{"kind":"uncertainty","role":"uncertainty","reason":"registered_by_decorator","source":"framework_signal","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; Not exported","reason_tags":["uncertainty","not_exported"],"live_evidence_count":0,"dead_evidence_count":0,"uncertainty_count":2,"confidence":100,"threshold":0},"dead_code_reason":"Uncertainty evidence present; Not exported","dead_code_reason_tags":["uncertainty","not_exported"]},"app.dispatch":{"name":"app.dispatch","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-k44oy7ws/local_registration_decorator/app.py","line":33,"type":"function","loc":2,"complexity":1,"calls":["app.ACTIONS","app.dispatch.name","app.dispatch.payload"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"app.unused_action":{"name":"app.unused_action","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-k44oy7ws/local_registration_decorator/app.py","line":37,"type":"function","loc":2,"complexity":1,"calls":["app.payload.get","app.unused_action.payload"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"dispatch","full_name":"app.dispatch","simple_name":"dispatch","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-k44oy7ws/local_registration_decorator/app.py","basename":"app.py","line":33,"confidence":90,"references":0,"calls":["app.dispatch.payload","app.dispatch.name","app.ACTIONS"],"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"name":"unused_action","full_name":"app.unused_action","simple_name":"unused_action","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-k44oy7ws/local_registration_decorator/app.py","basename":"app.py","line":37,"confidence":90,"references":0,"calls":["app.unused_action.payload","app.payload.get"],"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.py","qualified_name":"app.ACTIONS","kind":"variable","line":1,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":60,"threshold":0},"evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.STARTUP_CALLBACKS","kind":"variable","line":2,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":60,"threshold":0},"evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.action","kind":"function","line":5,"classification":"alive","decision":{"classification":"alive","primary_reason":"Called during module import","reason_tags":["top_level_execution"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"top_level_execution","role":"supports_live","reason":"called during module top-level execution","source":"python_ast","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.action.decorator","kind":"function","line":6,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.archive_image","kind":"function","line":24,"classification":"uncertain","decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; Not exported","reason_tags":["uncertainty","not_exported"],"live_evidence_count":0,"dead_evidence_count":0,"uncertainty_count":2,"confidence":100,"threshold":0},"evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"registered_by_decorator","source":"dead_code_liveness","confidence":1.0,"details":{}},{"kind":"uncertainty","role":"uncertainty","reason":"registered_by_decorator","source":"framework_signal","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.dispatch","kind":"function","line":33,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]},{"file":"app.py","qualified_name":"app.on_startup","kind":"function","line":13,"classification":"alive","decision":{"classification":"alive","primary_reason":"Called during module import","reason_tags":["top_level_execution"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"top_level_execution","role":"supports_live","reason":"called during module top-level execution","source":"python_ast","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.resize_image","kind":"function","line":19,"classification":"uncertain","decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; Not exported","reason_tags":["uncertainty","not_exported"],"live_evidence_count":0,"dead_evidence_count":0,"uncertainty_count":2,"confidence":100,"threshold":0},"evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"registered_by_decorator","source":"dead_code_liveness","confidence":1.0,"details":{}},{"kind":"uncertainty","role":"uncertainty","reason":"registered_by_decorator","source":"framework_signal","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.unused_action","kind":"function","line":37,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]},{"file":"app.py","qualified_name":"app.warm_cache","kind":"function","line":29,"classification":"uncertain","decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; Not exported","reason_tags":["uncertainty","not_exported"],"live_evidence_count":0,"dead_evidence_count":0,"uncertainty_count":2,"confidence":100,"threshold":0},"evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"registered_by_decorator","source":"dead_code_liveness","confidence":1.0,"details":{}},{"kind":"uncertainty","role":"uncertainty","reason":"registered_by_decorator","source":"framework_signal","confidence":1.0,"details":{}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":10,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":5,"uncertain":3,"likely_dead":2},"uncertainty_reasons":{"registered_by_decorator":3},"candidate_decisions":{"reported":2,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-k44oy7ws/local_registration_decorator","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-k44oy7ws/local_registration_decorator","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":3,"rescued":[{"name":"app.resize_image","reason":"registered_by_decorator","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-k44oy7ws/local_registration_decorator/app.py","line":19},{"name":"app.archive_image","reason":"registered_by_decorator","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-k44oy7ws/local_registration_decorator/app.py","line":24},{"name":"app.warm_cache","reason":"registered_by_decorator","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-k44oy7ws/local_registration_decorator/app.py","line":29}]},"grep_verify":{"enabled":true,"rescued_count":0,"project_cache_enabled":false,"backend":"ripgrep"},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":23,"grade_categories":["dead_code"],"by_directory":[{"path":".","total":2,"files":1,"dead_code":2,"rules":{"unused-functions":2},"severities":{"LOW":2}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["dead_code"],"coverage":{"status":"partial","not_assessed":["security","quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":2,"confidence_range":[90,90]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-k44oy7ws/local_registration_decorator","conf":0,"enable_quality":false,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":true,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"explicit-same-name-reexports","status":"complete","elapsedSeconds":0.705021,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ocx7rb1x/explicit_reexports","nativeReport":{"definitions":{"app.unused_helper":{"name":"app.unused_helper","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ocx7rb1x/explicit_reexports/app.py","line":6,"type":"function","loc":2,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"unused_helper","full_name":"app.unused_helper","simple_name":"unused_helper","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ocx7rb1x/explicit_reexports/app.py","basename":"app.py","line":6,"confidence":90,"references":0,"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[{"name":"json","full_name":"json","simple_name":"json","type":"import","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ocx7rb1x/explicit_reexports/app.py","basename":"app.py","line":1,"confidence":100,"references":0,"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.py","qualified_name":"app.unused_helper","kind":"function","line":6,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1},"candidate_decisions":{"reported":2,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ocx7rb1x/explicit_reexports","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ocx7rb1x/explicit_reexports","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":true,"rescued_count":0,"project_cache_enabled":false,"backend":"ripgrep"},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":5,"grade_categories":["dead_code"],"by_directory":[{"path":".","total":2,"files":1,"dead_code":2,"rules":{"unused-functions":1,"unused-imports":1},"severities":{"LOW":2}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["dead_code"],"coverage":{"status":"partial","not_assessed":["security","quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":2,"confidence_range":[90,100]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ocx7rb1x/explicit_reexports","conf":0,"enable_quality":false,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":true,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"annotation-metadata-import-scope","status":"complete","elapsedSeconds":0.656024,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ks1zes7c/annotation_metadata_scope","nativeReport":{"definitions":{"app.build_path":{"name":"app.build_path","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ks1zes7c/annotation_metadata_scope/app.py","line":8,"type":"function","loc":7,"complexity":2,"calls":["app.bool","app.build_path.deprecated","app.build_path.value","typing.Annotated","typing.Any","typing_extensions.deprecated"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"top_level_execution","role":"supports_live","reason":"called during module top-level execution","source":"python_ast","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Called during module import","reason_tags":["top_level_execution"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Called during module import","dead_code_reason_tags":["top_level_execution"]},"app.unused_builder":{"name":"app.unused_builder","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ks1zes7c/annotation_metadata_scope/app.py","line":20,"type":"function","loc":2,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"unused_builder","full_name":"app.unused_builder","simple_name":"unused_builder","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ks1zes7c/annotation_metadata_scope/app.py","basename":"app.py","line":20,"confidence":90,"references":0,"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[{"name":"json","full_name":"json","simple_name":"json","type":"import","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ks1zes7c/annotation_metadata_scope/app.py","basename":"app.py","line":3,"confidence":100,"references":0,"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_classes":[],"unused_variables":[{"name":"RESULT","full_name":"app.RESULT","simple_name":"RESULT","type":"variable","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ks1zes7c/annotation_metadata_scope/app.py","basename":"app.py","line":17,"confidence":60,"references":0,"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.6,"details":{"confidence":60,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":60,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.py","qualified_name":"app.RESULT","kind":"variable","line":17,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":60,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.6,"details":{"confidence":60,"threshold":0}}]},{"file":"app.py","qualified_name":"app.build_path","kind":"function","line":8,"classification":"alive","decision":{"classification":"alive","primary_reason":"Called during module import","reason_tags":["top_level_execution"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"top_level_execution","role":"supports_live","reason":"called during module top-level execution","source":"python_ast","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.unused_builder","kind":"function","line":20,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":3,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":1,"likely_dead":2},"candidate_decisions":{"reported":3,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ks1zes7c/annotation_metadata_scope","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ks1zes7c/annotation_metadata_scope","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":true,"rescued_count":0,"project_cache_enabled":false,"backend":"ripgrep"},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":14,"grade_categories":["dead_code"],"by_directory":[{"path":".","total":3,"files":1,"dead_code":3,"rules":{"unused-functions":1,"unused-imports":1,"unused-variables":1},"severities":{"LOW":3}}],"finding_type_counts":{"defect":0,"review":3,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"listed_finding_type_counts":{"defect":0,"review":3,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["dead_code"],"coverage":{"status":"partial","not_assessed":["security","quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":3,"confidence_range":[60,100]},"finding_counts":{"defect":0,"review":3,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ks1zes7c/annotation_metadata_scope","conf":0,"enable_quality":false,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":true,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"sqlalchemy-mixed-models","status":"complete","elapsedSeconds":2.369213,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-hl4qzqfl/sqlalchemy_mixed_models","nativeReport":{"definitions":{"app.build_demo_note":{"name":"app.build_demo_note","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-hl4qzqfl/sqlalchemy_mixed_models/app.py","line":4,"type":"function","loc":2,"complexity":1,"calls":["repository.create_note"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"top_level_execution","role":"supports_live","reason":"called during module top-level execution","source":"python_ast","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Called during module import","reason_tags":["top_level_execution"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Called during module import","dead_code_reason_tags":["top_level_execution"]},"models.Base":{"name":"models.Base","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-hl4qzqfl/sqlalchemy_mixed_models/models.py","line":5,"type":"class","loc":2,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"top_level_execution","role":"supports_live","reason":"called during module top-level execution","source":"python_ast","confidence":1.0,"details":{}},{"kind":"uncertainty","role":"uncertainty","reason":"ORM declarative base class","source":"suppression","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Called during module import","reason_tags":["top_level_execution"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Called during module import","dead_code_reason_tags":["top_level_execution"]},"models.Note":{"name":"models.Note","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-hl4qzqfl/sqlalchemy_mixed_models/models.py","line":9,"type":"class","loc":6,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Reachable from root","dead_code_reason_tags":["reachable_from_root"]},"models.AuditLog":{"name":"models.AuditLog","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-hl4qzqfl/sqlalchemy_mixed_models/models.py","line":17,"type":"class","loc":5,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Reachable from root","dead_code_reason_tags":["reachable_from_root"]},"models.Tag":{"name":"models.Tag","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-hl4qzqfl/sqlalchemy_mixed_models/models.py","line":24,"type":"class","loc":5,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"repository.create_note":{"name":"repository.create_note","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-hl4qzqfl/sqlalchemy_mixed_models/repository.py","line":4,"type":"function","loc":4,"complexity":1,"calls":["models.AuditLog","models.AuditLog.action","models.Note","repository.create_note.audit","repository.create_note.body","repository.create_note.note","repository.create_note.title","repository.str"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Reachable from root","dead_code_reason_tags":["reachable_from_root"]}},"unused_functions":[],"unused_imports":[],"unused_classes":[{"name":"Tag","full_name":"models.Tag","simple_name":"Tag","type":"class","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-hl4qzqfl/sqlalchemy_mixed_models/models.py","basename":"models.py","line":24,"confidence":90,"references":0,"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_variables":[{"name":"RESULT","full_name":"app.RESULT","simple_name":"RESULT","type":"variable","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-hl4qzqfl/sqlalchemy_mixed_models/app.py","basename":"app.py","line":8,"confidence":60,"references":0,"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.6,"details":{"confidence":60,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":60,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[{"name":"Base","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-hl4qzqfl/sqlalchemy_mixed_models/models.py","line":5,"reason":"ORM declarative base class","category":"dead_code","suppression_code":null,"folder_role":null},{"name":"__tablename__","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-hl4qzqfl/sqlalchemy_mixed_models/models.py","line":10,"reason":"ORM model column","category":"dead_code","suppression_code":null,"folder_role":null},{"name":"id","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-hl4qzqfl/sqlalchemy_mixed_models/models.py","line":12,"reason":"ORM declarative field","category":"dead_code","suppression_code":null,"folder_role":null},{"name":"title","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-hl4qzqfl/sqlalchemy_mixed_models/models.py","line":13,"reason":"ORM declarative field","category":"dead_code","suppression_code":null,"folder_role":null},{"name":"body","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-hl4qzqfl/sqlalchemy_mixed_models/models.py","line":14,"reason":"ORM declarative field","category":"dead_code","suppression_code":null,"folder_role":null},{"name":"__tablename__","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-hl4qzqfl/sqlalchemy_mixed_models/models.py","line":18,"reason":"ORM model column","category":"dead_code","suppression_code":null,"folder_role":null},{"name":"id","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-hl4qzqfl/sqlalchemy_mixed_models/models.py","line":20,"reason":"ORM declarative field","category":"dead_code","suppression_code":null,"folder_role":null},{"name":"action","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-hl4qzqfl/sqlalchemy_mixed_models/models.py","line":21,"reason":"ORM declarative field","category":"dead_code","suppression_code":null,"folder_role":null},{"name":"__tablename__","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-hl4qzqfl/sqlalchemy_mixed_models/models.py","line":25,"reason":"ORM model column","category":"dead_code","suppression_code":null,"folder_role":null},{"name":"id","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-hl4qzqfl/sqlalchemy_mixed_models/models.py","line":27,"reason":"ORM declarative field","category":"dead_code","suppression_code":null,"folder_role":null},{"name":"name","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-hl4qzqfl/sqlalchemy_mixed_models/models.py","line":28,"reason":"ORM declarative field","category":"dead_code","suppression_code":null,"folder_role":null}],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.py","qualified_name":"app.RESULT","kind":"variable","line":8,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":60,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.6,"details":{"confidence":60,"threshold":0}}]},{"file":"app.py","qualified_name":"app.build_demo_note","kind":"function","line":4,"classification":"alive","decision":{"classification":"alive","primary_reason":"Called during module import","reason_tags":["top_level_execution"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"top_level_execution","role":"supports_live","reason":"called during module top-level execution","source":"python_ast","confidence":1.0,"details":{}}]},{"file":"models.py","qualified_name":"models.AuditLog","kind":"class","line":17,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]},{"file":"models.py","qualified_name":"models.AuditLog.__tablename__","kind":"variable","line":18,"classification":"uncertain","decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; No static references; Not exported","reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"ORM model column","source":"suppression","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}]},{"file":"models.py","qualified_name":"models.AuditLog.action","kind":"variable","line":21,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"attribute_name_match","role":"context","reason":"unverified global_attr match","source":"attribute_reference","confidence":0.0846,"details":{"bucket":"global_attr"}},{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}},{"kind":"uncertainty","role":"uncertainty","reason":"ORM declarative field","source":"suppression","confidence":1.0,"details":{}}]},{"file":"models.py","qualified_name":"models.AuditLog.id","kind":"variable","line":20,"classification":"uncertain","decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; No static references; Not exported","reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"ORM declarative field","source":"suppression","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}]},{"file":"models.py","qualified_name":"models.Base","kind":"class","line":5,"classification":"alive","decision":{"classification":"alive","primary_reason":"Called during module import","reason_tags":["top_level_execution"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"top_level_execution","role":"supports_live","reason":"called during module top-level execution","source":"python_ast","confidence":1.0,"details":{}},{"kind":"uncertainty","role":"uncertainty","reason":"ORM declarative base class","source":"suppression","confidence":1.0,"details":{}}]},{"file":"models.py","qualified_name":"models.Note","kind":"class","line":9,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]},{"file":"models.py","qualified_name":"models.Note.__tablename__","kind":"variable","line":10,"classification":"uncertain","decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; No static references; Not exported","reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"ORM model column","source":"suppression","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}]},{"file":"models.py","qualified_name":"models.Note.body","kind":"variable","line":14,"classification":"uncertain","decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; No static references; Not exported","reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"ORM declarative field","source":"suppression","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}]},{"file":"models.py","qualified_name":"models.Note.id","kind":"variable","line":12,"classification":"uncertain","decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; No static references; Not exported","reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"ORM declarative field","source":"suppression","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}]},{"file":"models.py","qualified_name":"models.Note.title","kind":"variable","line":13,"classification":"uncertain","decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; No static references; Not exported","reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"ORM declarative field","source":"suppression","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}]},{"file":"models.py","qualified_name":"models.Tag","kind":"class","line":24,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]},{"file":"models.py","qualified_name":"models.Tag.__tablename__","kind":"variable","line":25,"classification":"uncertain","decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; No static references; Not exported","reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"ORM model column","source":"suppression","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}]},{"file":"models.py","qualified_name":"models.Tag.id","kind":"variable","line":27,"classification":"uncertain","decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; No static references; Not exported","reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"ORM declarative field","source":"suppression","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}]},{"file":"models.py","qualified_name":"models.Tag.name","kind":"variable","line":28,"classification":"uncertain","decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; No static references; Not exported","reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"ORM declarative field","source":"suppression","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}]},{"file":"repository.py","qualified_name":"repository.create_note","kind":"function","line":4,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]},{"file":"repository.py","qualified_name":"repository.create_note.audit","kind":"variable","line":6,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]},{"file":"repository.py","qualified_name":"repository.create_note.note","kind":"variable","line":5,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":3,"excluded_folders":[],"languages":{"Python":3},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":19,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":8,"likely_dead":2,"uncertain":9},"uncertainty_reasons":{"ORM declarative field":6,"ORM model column":3},"candidate_decisions":{"reported":2,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-hl4qzqfl/sqlalchemy_mixed_models","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-hl4qzqfl/sqlalchemy_mixed_models","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":true,"rescued_count":0,"project_cache_enabled":false,"backend":"ripgrep"},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":26,"grade_categories":["dead_code"],"by_directory":[{"path":".","total":2,"files":2,"dead_code":2,"rules":{"unused-classes":1,"unused-variables":1},"severities":{"LOW":2}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["dead_code"],"coverage":{"status":"partial","not_assessed":["security","quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":2,"confidence_range":[60,90]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-hl4qzqfl/sqlalchemy_mixed_models","conf":0,"enable_quality":false,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":true,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"flask-cli-blueprint","status":"complete","elapsedSeconds":0.95923,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-u79ks673/flask_cli_blueprint","nativeReport":{"definitions":{"app.show_order":{"name":"app.show_order","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-u79ks673/flask_cli_blueprint/app.py","line":9,"type":"function","loc":2,"complexity":1,"calls":["app.show_order.order_id"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]},"app.reindex_orders":{"name":"app.reindex_orders","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-u79ks673/flask_cli_blueprint/app.py","line":14,"type":"function","loc":2,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]},"app.unused_view_helper":{"name":"app.unused_view_helper","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-u79ks673/flask_cli_blueprint/app.py","line":18,"type":"function","loc":2,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"app.UnusedFormatter":{"name":"app.UnusedFormatter","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-u79ks673/flask_cli_blueprint/app.py","line":22,"type":"class","loc":3,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"app.UnusedFormatter.format":{"name":"app.UnusedFormatter.format","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-u79ks673/flask_cli_blueprint/app.py","line":23,"type":"method","loc":2,"complexity":1,"calls":["app.UnusedFormatter.format.value"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"unused_view_helper","full_name":"app.unused_view_helper","simple_name":"unused_view_helper","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-u79ks673/flask_cli_blueprint/app.py","basename":"app.py","line":18,"confidence":90,"references":0,"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[{"name":"UnusedFormatter","full_name":"app.UnusedFormatter","simple_name":"UnusedFormatter","type":"class","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-u79ks673/flask_cli_blueprint/app.py","basename":"app.py","line":22,"confidence":90,"references":0,"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.py","qualified_name":"app.UnusedFormatter","kind":"class","line":22,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]},{"file":"app.py","qualified_name":"app.UnusedFormatter.format","kind":"method","line":23,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}]},{"file":"app.py","qualified_name":"app.app","kind":"variable","line":4,"classification":"alive","decision":{"classification":"alive","primary_reason":"Called during module import","reason_tags":["top_level_execution"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"top_level_execution","role":"supports_live","reason":"called during module top-level execution","source":"python_ast","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.orders","kind":"variable","line":5,"classification":"alive","decision":{"classification":"alive","primary_reason":"Called during module import","reason_tags":["top_level_execution"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"top_level_execution","role":"supports_live","reason":"called during module top-level execution","source":"python_ast","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.reindex_orders","kind":"function","line":14,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.show_order","kind":"function","line":9,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.unused_view_helper","kind":"function","line":18,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":7,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":4,"likely_dead":3},"candidate_decisions":{"reported":2,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-u79ks673/flask_cli_blueprint","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-u79ks673/flask_cli_blueprint","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":true,"rescued_count":0,"project_cache_enabled":false,"backend":"ripgrep"},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":15,"grade_categories":["dead_code"],"by_directory":[{"path":".","total":2,"files":1,"dead_code":2,"rules":{"unused-classes":1,"unused-functions":1},"severities":{"LOW":2}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["dead_code"],"coverage":{"status":"partial","not_assessed":["security","quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":2,"confidence_range":[90,90]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-u79ks673/flask_cli_blueprint","conf":0,"enable_quality":false,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":true,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"package-service-layers","status":"complete","elapsedSeconds":6.027072,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-nkskkg7x/package_service_layers","nativeReport":{"definitions":{"app.run_checkout":{"name":"app.run_checkout","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-nkskkg7x/package_service_layers/app.py","line":4,"type":"function","loc":2,"complexity":1,"calls":["service.create_invoice"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"top_level_execution","role":"supports_live","reason":"called during module top-level execution","source":"python_ast","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Called during module import","reason_tags":["top_level_execution"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Called during module import","dead_code_reason_tags":["top_level_execution"]},"repository.InvoiceRepository":{"name":"repository.InvoiceRepository","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-nkskkg7x/package_service_layers/repository.py","line":1,"type":"class","loc":3,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Reachable from root","dead_code_reason_tags":["reachable_from_root"]},"repository.InvoiceRepository.save":{"name":"repository.InvoiceRepository.save","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-nkskkg7x/package_service_layers/repository.py","line":2,"type":"method","loc":2,"complexity":1,"calls":["repository.InvoiceRepository.save.invoice_id","repository.InvoiceRepository.save.status"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"attribute_name_match","role":"context","reason":"unverified global_attr match","source":"attribute_reference","confidence":0.0846,"details":{"bucket":"global_attr"}},{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Reachable from root","dead_code_reason_tags":["reachable_from_root"]},"service.UnusedStrategy":{"name":"service.UnusedStrategy","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-nkskkg7x/package_service_layers/service.py","line":11,"type":"class","loc":3,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"service.UnusedStrategy.apply":{"name":"service.UnusedStrategy.apply","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-nkskkg7x/package_service_layers/service.py","line":12,"type":"method","loc":2,"complexity":1,"calls":["service.UnusedStrategy.apply.payload"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"service.create_invoice":{"name":"service.create_invoice","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-nkskkg7x/package_service_layers/service.py","line":16,"type":"function","loc":5,"complexity":1,"calls":["repository.InvoiceRepository","repository.InvoiceRepository.save","service.ACTIVE_STATUS","service.create_invoice.generated","service.create_invoice.invoice_id","service.create_invoice.payload","service.create_invoice.repository","service.payload.get","uuid","uuid.uuid4"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Reachable from root","dead_code_reason_tags":["reachable_from_root"]},"service._unused_reconcile":{"name":"service._unused_reconcile","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-nkskkg7x/package_service_layers/service.py","line":23,"type":"function","loc":2,"complexity":1,"calls":["service._unused_reconcile.batch"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"_unused_reconcile","full_name":"service._unused_reconcile","simple_name":"_unused_reconcile","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-nkskkg7x/package_service_layers/service.py","basename":"service.py","line":23,"confidence":90,"references":0,"calls":["service._unused_reconcile.batch"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[{"name":"json","full_name":"json","simple_name":"json","type":"import","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-nkskkg7x/package_service_layers/service.py","basename":"service.py","line":1,"confidence":100,"references":0,"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_classes":[{"name":"UnusedStrategy","full_name":"service.UnusedStrategy","simple_name":"UnusedStrategy","type":"class","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-nkskkg7x/package_service_layers/service.py","basename":"service.py","line":11,"confidence":90,"references":0,"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_variables":[{"name":"RESULT","full_name":"app.RESULT","simple_name":"RESULT","type":"variable","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-nkskkg7x/package_service_layers/app.py","basename":"app.py","line":8,"confidence":60,"references":0,"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.6,"details":{"confidence":60,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":60,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"name":"UNUSED_STATUS","full_name":"service.UNUSED_STATUS","simple_name":"UNUSED_STATUS","type":"variable","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-nkskkg7x/package_service_layers/service.py","basename":"service.py","line":8,"confidence":60,"references":0,"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.6,"details":{"confidence":60,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":60,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.py","qualified_name":"app.RESULT","kind":"variable","line":8,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":60,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.6,"details":{"confidence":60,"threshold":0}}]},{"file":"app.py","qualified_name":"app.run_checkout","kind":"function","line":4,"classification":"alive","decision":{"classification":"alive","primary_reason":"Called during module import","reason_tags":["top_level_execution"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"top_level_execution","role":"supports_live","reason":"called during module top-level execution","source":"python_ast","confidence":1.0,"details":{}}]},{"file":"repository.py","qualified_name":"repository.InvoiceRepository","kind":"class","line":1,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]},{"file":"repository.py","qualified_name":"repository.InvoiceRepository.save","kind":"method","line":2,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"attribute_name_match","role":"context","reason":"unverified global_attr match","source":"attribute_reference","confidence":0.0846,"details":{"bucket":"global_attr"}},{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]},{"file":"service.py","qualified_name":"service.ACTIVE_STATUS","kind":"variable","line":7,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":60,"threshold":0},"evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]},{"file":"service.py","qualified_name":"service.UNUSED_STATUS","kind":"variable","line":8,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":60,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.6,"details":{"confidence":60,"threshold":0}}]},{"file":"service.py","qualified_name":"service.UnusedStrategy","kind":"class","line":11,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]},{"file":"service.py","qualified_name":"service.UnusedStrategy.apply","kind":"method","line":12,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}]},{"file":"service.py","qualified_name":"service._unused_reconcile","kind":"function","line":23,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]},{"file":"service.py","qualified_name":"service.create_invoice","kind":"function","line":16,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]},{"file":"service.py","qualified_name":"service.create_invoice.generated","kind":"variable","line":18,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]},{"file":"service.py","qualified_name":"service.create_invoice.invoice_id","kind":"variable","line":19,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]},{"file":"service.py","qualified_name":"service.create_invoice.repository","kind":"variable","line":17,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":3,"excluded_folders":[],"languages":{"Python":3},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":13,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":8,"likely_dead":5},"candidate_decisions":{"reported":5,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-nkskkg7x/package_service_layers","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-nkskkg7x/package_service_layers","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":true,"rescued_count":0,"project_cache_enabled":false,"backend":"ripgrep"},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":22,"grade_categories":["dead_code"],"by_directory":[{"path":".","total":5,"files":2,"dead_code":5,"rules":{"unused-classes":1,"unused-functions":1,"unused-imports":1,"unused-variables":2},"severities":{"LOW":5}}],"finding_type_counts":{"defect":0,"review":5,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"listed_finding_type_counts":{"defect":0,"review":5,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["dead_code"],"coverage":{"status":"partial","not_assessed":["security","quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":5,"confidence_range":[60,100]},"finding_counts":{"defect":0,"review":5,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-nkskkg7x/package_service_layers","conf":0,"enable_quality":false,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":true,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"django-management-command","status":"complete","elapsedSeconds":4.405711,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a6gs9615/django_management_command","nativeReport":{"definitions":{"shop.management.commands.rebuild_index.Command":{"name":"shop.management.commands.rebuild_index.Command","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a6gs9615/django_management_command/shop/management/commands/rebuild_index.py","line":4,"type":"class","loc":8,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"uncertain","dead_code_evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"Django framework class","source":"suppression","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}],"dead_code_decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; No static references; Not exported","reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Uncertainty evidence present; No static references; Not exported","dead_code_reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"shop.management.commands.rebuild_index.Command.add_arguments":{"name":"shop.management.commands.rebuild_index.Command.add_arguments","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a6gs9615/django_management_command/shop/management/commands/rebuild_index.py","line":7,"type":"method","loc":2,"complexity":1,"calls":["shop.management.commands.rebuild_index.Command.add_arguments.parser","shop.management.commands.rebuild_index.parser.add_argument"],"called_by":[],"dead":false,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":0,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"shop.management.commands.rebuild_index.Command.handle":{"name":"shop.management.commands.rebuild_index.Command.handle","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a6gs9615/django_management_command/shop/management/commands/rebuild_index.py","line":10,"type":"method","loc":2,"complexity":1,"calls":["shop.management.commands.rebuild_index.Command.handle.options","shop.management.commands.rebuild_index.rebuild_index"],"called_by":[],"dead":false,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":0,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"shop.management.commands.rebuild_index.rebuild_index":{"name":"shop.management.commands.rebuild_index.rebuild_index","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a6gs9615/django_management_command/shop/management/commands/rebuild_index.py","line":14,"type":"function","loc":2,"complexity":1,"calls":["shop.management.commands.rebuild_index.rebuild_index.tenant"],"called_by":["shop.management.commands.rebuild_index.Command.handle"],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"grep_rescue","role":"supports_live","reason":"grep verification found a usage","source":"grep_verify","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Grep verification found usage","reason_tags":["grep_rescue"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Grep verification found usage","dead_code_reason_tags":["grep_rescue"]},"shop.management.commands.rebuild_index.unused_export_job":{"name":"shop.management.commands.rebuild_index.unused_export_job","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a6gs9615/django_management_command/shop/management/commands/rebuild_index.py","line":18,"type":"function","loc":2,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"shop.management.commands.rebuild_index.UnusedCommandHelper":{"name":"shop.management.commands.rebuild_index.UnusedCommandHelper","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a6gs9615/django_management_command/shop/management/commands/rebuild_index.py","line":22,"type":"class","loc":3,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"shop.management.commands.rebuild_index.UnusedCommandHelper.build":{"name":"shop.management.commands.rebuild_index.UnusedCommandHelper.build","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a6gs9615/django_management_command/shop/management/commands/rebuild_index.py","line":23,"type":"method","loc":2,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"unused_export_job","full_name":"shop.management.commands.rebuild_index.unused_export_job","simple_name":"unused_export_job","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a6gs9615/django_management_command/shop/management/commands/rebuild_index.py","basename":"rebuild_index.py","line":18,"confidence":90,"references":0,"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[{"name":"UnusedCommandHelper","full_name":"shop.management.commands.rebuild_index.UnusedCommandHelper","simple_name":"UnusedCommandHelper","type":"class","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a6gs9615/django_management_command/shop/management/commands/rebuild_index.py","basename":"rebuild_index.py","line":22,"confidence":90,"references":0,"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[{"name":"Command","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a6gs9615/django_management_command/shop/management/commands/rebuild_index.py","line":4,"reason":"Django framework class","category":"dead_code","suppression_code":null,"folder_role":null},{"name":"help","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a6gs9615/django_management_command/shop/management/commands/rebuild_index.py","line":5,"reason":"Django management command attribute","category":"dead_code","suppression_code":null,"folder_role":null},{"name":"self","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a6gs9615/django_management_command/shop/management/commands/rebuild_index.py","line":7,"reason":"Django management command parameter","category":"dead_code","suppression_code":null,"folder_role":null},{"name":"parser","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a6gs9615/django_management_command/shop/management/commands/rebuild_index.py","line":7,"reason":"Django management command parameter","category":"dead_code","suppression_code":null,"folder_role":null},{"name":"self","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a6gs9615/django_management_command/shop/management/commands/rebuild_index.py","line":10,"reason":"Django management command parameter","category":"dead_code","suppression_code":null,"folder_role":null},{"name":"args","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a6gs9615/django_management_command/shop/management/commands/rebuild_index.py","line":10,"reason":"Django management command parameter","category":"dead_code","suppression_code":null,"folder_role":null},{"name":"options","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a6gs9615/django_management_command/shop/management/commands/rebuild_index.py","line":10,"reason":"Django management command parameter","category":"dead_code","suppression_code":null,"folder_role":null}],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"shop/management/commands/rebuild_index.py","qualified_name":"shop.management.commands.rebuild_index.Command","kind":"class","line":4,"classification":"uncertain","decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; No static references; Not exported","reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"Django framework class","source":"suppression","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}]},{"file":"shop/management/commands/rebuild_index.py","qualified_name":"shop.management.commands.rebuild_index.Command.add_arguments","kind":"method","line":7,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}]},{"file":"shop/management/commands/rebuild_index.py","qualified_name":"shop.management.commands.rebuild_index.Command.handle","kind":"method","line":10,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}]},{"file":"shop/management/commands/rebuild_index.py","qualified_name":"shop.management.commands.rebuild_index.Command.help","kind":"variable","line":5,"classification":"uncertain","decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; No static references; Not exported","reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"Django management command attribute","source":"suppression","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}]},{"file":"shop/management/commands/rebuild_index.py","qualified_name":"shop.management.commands.rebuild_index.UnusedCommandHelper","kind":"class","line":22,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]},{"file":"shop/management/commands/rebuild_index.py","qualified_name":"shop.management.commands.rebuild_index.UnusedCommandHelper.build","kind":"method","line":23,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}]},{"file":"shop/management/commands/rebuild_index.py","qualified_name":"shop.management.commands.rebuild_index.rebuild_index","kind":"function","line":14,"classification":"alive","decision":{"classification":"alive","primary_reason":"Grep verification found usage","reason_tags":["grep_rescue"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"grep_rescue","role":"supports_live","reason":"grep verification found a usage","source":"grep_verify","confidence":1.0,"details":{}}]},{"file":"shop/management/commands/rebuild_index.py","qualified_name":"shop.management.commands.rebuild_index.unused_export_job","kind":"function","line":18,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":4,"excluded_folders":[],"languages":{"Python":4},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":8,"classification_policy":"dead-code-evidence-v3","classifications":{"uncertain":2,"likely_dead":5,"alive":1},"uncertainty_reasons":{"Django framework class":1,"Django management command attribute":1},"candidate_decisions":{"reported":2,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a6gs9615/django_management_command","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a6gs9615/django_management_command","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":true,"rescued_count":1,"project_cache_enabled":false,"backend":"ripgrep"},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":14,"grade_categories":["dead_code"],"by_directory":[{"path":"shop/management/commands","total":2,"files":1,"dead_code":2,"rules":{"unused-classes":1,"unused-functions":1},"severities":{"LOW":2}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["dead_code"],"coverage":{"status":"partial","not_assessed":["security","quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":2,"confidence_range":[90,90]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a6gs9615/django_management_command","conf":0,"enable_quality":false,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":true,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"celery-task-entrypoints","status":"complete","elapsedSeconds":2.054006,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-6l2bftem/celery_tasks","nativeReport":{"definitions":{"app.send_receipt":{"name":"app.send_receipt","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-6l2bftem/celery_tasks/app.py","line":8,"type":"function","loc":2,"complexity":1,"calls":["app.send_receipt.invoice_id"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]},"app.rebuild_rollups":{"name":"app.rebuild_rollups","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-6l2bftem/celery_tasks/app.py","line":13,"type":"function","loc":2,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]},"app.unused_task_helper":{"name":"app.unused_task_helper","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-6l2bftem/celery_tasks/app.py","line":17,"type":"function","loc":2,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"app.UnusedTaskPayload":{"name":"app.UnusedTaskPayload","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-6l2bftem/celery_tasks/app.py","line":21,"type":"class","loc":3,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"app.UnusedTaskPayload.serialize":{"name":"app.UnusedTaskPayload.serialize","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-6l2bftem/celery_tasks/app.py","line":22,"type":"method","loc":2,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"unused_task_helper","full_name":"app.unused_task_helper","simple_name":"unused_task_helper","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-6l2bftem/celery_tasks/app.py","basename":"app.py","line":17,"confidence":90,"references":0,"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[{"name":"UnusedTaskPayload","full_name":"app.UnusedTaskPayload","simple_name":"UnusedTaskPayload","type":"class","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-6l2bftem/celery_tasks/app.py","basename":"app.py","line":21,"confidence":90,"references":0,"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.py","qualified_name":"app.UnusedTaskPayload","kind":"class","line":21,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]},{"file":"app.py","qualified_name":"app.UnusedTaskPayload.serialize","kind":"method","line":22,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}]},{"file":"app.py","qualified_name":"app.celery_app","kind":"variable","line":4,"classification":"alive","decision":{"classification":"alive","primary_reason":"Called during module import","reason_tags":["top_level_execution"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"top_level_execution","role":"supports_live","reason":"called during module top-level execution","source":"python_ast","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.rebuild_rollups","kind":"function","line":13,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.send_receipt","kind":"function","line":8,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.unused_task_helper","kind":"function","line":17,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":6,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":3,"likely_dead":3},"candidate_decisions":{"reported":2,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-6l2bftem/celery_tasks","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-6l2bftem/celery_tasks","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":true,"rescued_count":0,"project_cache_enabled":false,"backend":"ripgrep"},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":13,"grade_categories":["dead_code"],"by_directory":[{"path":".","total":2,"files":1,"dead_code":2,"rules":{"unused-classes":1,"unused-functions":1},"severities":{"LOW":2}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["dead_code"],"coverage":{"status":"partial","not_assessed":["security","quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":2,"confidence_range":[90,90]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-6l2bftem/celery_tasks","conf":0,"enable_quality":false,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":true,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"pytest-fixture-entrypoints","status":"complete","elapsedSeconds":1.378972,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4ek8oqso/pytest_fixtures","nativeReport":{"definitions":{"tests.test_orders.api_client":{"name":"tests.test_orders.api_client","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4ek8oqso/pytest_fixtures/tests/test_orders.py","line":5,"type":"function","loc":2,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"test_entrypoint","role":"supports_live","reason":"test entrypoint or test module","source":"python_ast","confidence":1.0,"details":{}},{"kind":"test_entrypoint","role":"supports_live","reason":"pytest test or fixture entrypoint","source":"python_ast","confidence":1.0,"details":{}},{"kind":"uncertainty","role":"uncertainty","reason":"test-only path","source":"suppression","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Test entrypoint","reason_tags":["test_entrypoint"],"live_evidence_count":2,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Test entrypoint","dead_code_reason_tags":["test_entrypoint"]},"tests.test_orders.payload_fixture":{"name":"tests.test_orders.payload_fixture","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4ek8oqso/pytest_fixtures/tests/test_orders.py","line":10,"type":"function","loc":2,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"test_entrypoint","role":"supports_live","reason":"test entrypoint or test module","source":"python_ast","confidence":1.0,"details":{}},{"kind":"uncertainty","role":"uncertainty","reason":"test-only path","source":"suppression","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Test entrypoint","reason_tags":["test_entrypoint"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Test entrypoint","dead_code_reason_tags":["test_entrypoint"]},"tests.test_orders.test_create_order":{"name":"tests.test_orders.test_create_order","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4ek8oqso/pytest_fixtures/tests/test_orders.py","line":14,"type":"function","loc":3,"complexity":1,"calls":["tests.test_orders.test_create_order.api_client","tests.test_orders.test_create_order.order_payload"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"test_entrypoint","role":"supports_live","reason":"test entrypoint or test module","source":"python_ast","confidence":1.0,"details":{}},{"kind":"test_entrypoint","role":"supports_live","reason":"pytest test or fixture entrypoint","source":"python_ast","confidence":1.0,"details":{}},{"kind":"uncertainty","role":"uncertainty","reason":"test-only path","source":"suppression","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Test entrypoint","reason_tags":["test_entrypoint"],"live_evidence_count":2,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Test entrypoint","dead_code_reason_tags":["test_entrypoint"]}},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[{"name":"pytest","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4ek8oqso/pytest_fixtures/tests/test_orders.py","line":1,"reason":"test-only path","category":"dead_code","suppression_code":"non_library_path","folder_role":"test"},{"name":"api_client","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4ek8oqso/pytest_fixtures/tests/test_orders.py","line":5,"reason":"test-only path","category":"dead_code","suppression_code":"non_library_path","folder_role":"test"},{"name":"payload_fixture","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4ek8oqso/pytest_fixtures/tests/test_orders.py","line":10,"reason":"test-only path","category":"dead_code","suppression_code":"non_library_path","folder_role":"test"},{"name":"test_create_order","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4ek8oqso/pytest_fixtures/tests/test_orders.py","line":14,"reason":"test-only path","category":"dead_code","suppression_code":"non_library_path","folder_role":"test"},{"name":"api_client","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4ek8oqso/pytest_fixtures/tests/test_orders.py","line":14,"reason":"test-only path","category":"dead_code","suppression_code":"non_library_path","folder_role":"test"},{"name":"order_payload","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4ek8oqso/pytest_fixtures/tests/test_orders.py","line":14,"reason":"test-only path","category":"dead_code","suppression_code":"non_library_path","folder_role":"test"}],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"tests/test_orders.py","qualified_name":"tests.test_orders.api_client","kind":"function","line":5,"classification":"alive","decision":{"classification":"alive","primary_reason":"Test entrypoint","reason_tags":["test_entrypoint"],"live_evidence_count":2,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"test_entrypoint","role":"supports_live","reason":"test entrypoint or test module","source":"python_ast","confidence":1.0,"details":{}},{"kind":"test_entrypoint","role":"supports_live","reason":"pytest test or fixture entrypoint","source":"python_ast","confidence":1.0,"details":{}},{"kind":"uncertainty","role":"uncertainty","reason":"test-only path","source":"suppression","confidence":1.0,"details":{}}]},{"file":"tests/test_orders.py","qualified_name":"tests.test_orders.payload_fixture","kind":"function","line":10,"classification":"alive","decision":{"classification":"alive","primary_reason":"Test entrypoint","reason_tags":["test_entrypoint"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"test_entrypoint","role":"supports_live","reason":"test entrypoint or test module","source":"python_ast","confidence":1.0,"details":{}},{"kind":"uncertainty","role":"uncertainty","reason":"test-only path","source":"suppression","confidence":1.0,"details":{}}]},{"file":"tests/test_orders.py","qualified_name":"tests.test_orders.test_create_order","kind":"function","line":14,"classification":"alive","decision":{"classification":"alive","primary_reason":"Test entrypoint","reason_tags":["test_entrypoint"],"live_evidence_count":2,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"test_entrypoint","role":"supports_live","reason":"test entrypoint or test module","source":"python_ast","confidence":1.0,"details":{}},{"kind":"test_entrypoint","role":"supports_live","reason":"pytest test or fixture entrypoint","source":"python_ast","confidence":1.0,"details":{}},{"kind":"uncertainty","role":"uncertainty","reason":"test-only path","source":"suppression","confidence":1.0,"details":{}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":3,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":3},"candidate_decisions":{"reported":0,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4ek8oqso/pytest_fixtures","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4ek8oqso/pytest_fixtures","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":true,"rescued_count":0,"project_cache_enabled":false},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":10,"grade_categories":["dead_code"],"finding_type_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"listed_finding_type_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["dead_code"],"coverage":{"status":"partial","not_assessed":["security","quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"none","candidate_count":0,"confidence_range":null},"finding_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4ek8oqso/pytest_fixtures","conf":0,"enable_quality":false,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":true,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"pydantic-validator-entrypoints","status":"complete","elapsedSeconds":3.15255,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-edy16d1p/pydantic_validators","nativeReport":{"definitions":{"app.UserInput":{"name":"app.UserInput","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-edy16d1p/pydantic_validators/app.py","line":4,"type":"class","loc":11,"complexity":1,"calls":[],"called_by":["app.build_user"],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Reachable from root","dead_code_reason_tags":["reachable_from_root"]},"app.UserInput.normalize_email":{"name":"app.UserInput.normalize_email","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-edy16d1p/pydantic_validators/app.py","line":9,"type":"method","loc":2,"complexity":1,"calls":["app.UserInput.normalize_email.value","app.value.strip"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":3,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]},"app.UserInput.ensure_domain":{"name":"app.UserInput.ensure_domain","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-edy16d1p/pydantic_validators/app.py","line":13,"type":"method","loc":2,"complexity":1,"calls":["app.UserInput.ensure_domain.self"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":3,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]},"app.UnusedSchema":{"name":"app.UnusedSchema","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-edy16d1p/pydantic_validators/app.py","line":17,"type":"class","loc":2,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"app.build_user":{"name":"app.build_user","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-edy16d1p/pydantic_validators/app.py","line":21,"type":"function","loc":2,"complexity":1,"calls":["app.UserInput"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"top_level_execution","role":"supports_live","reason":"called during module top-level execution","source":"python_ast","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Called during module import","reason_tags":["top_level_execution"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Called during module import","dead_code_reason_tags":["top_level_execution"]},"app.unused_normalizer":{"name":"app.unused_normalizer","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-edy16d1p/pydantic_validators/app.py","line":25,"type":"function","loc":2,"complexity":1,"calls":["app.unused_normalizer.value","app.value.casefold"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"unused_normalizer","full_name":"app.unused_normalizer","simple_name":"unused_normalizer","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-edy16d1p/pydantic_validators/app.py","basename":"app.py","line":25,"confidence":90,"references":0,"calls":["app.unused_normalizer.value","app.value.casefold"],"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[{"name":"UnusedSchema","full_name":"app.UnusedSchema","simple_name":"UnusedSchema","type":"class","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-edy16d1p/pydantic_validators/app.py","basename":"app.py","line":17,"confidence":90,"references":0,"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_variables":[{"name":"RESULT","full_name":"app.RESULT","simple_name":"RESULT","type":"variable","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-edy16d1p/pydantic_validators/app.py","basename":"app.py","line":29,"confidence":60,"references":0,"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.6,"details":{"confidence":60,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":60,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.py","qualified_name":"app.RESULT","kind":"variable","line":29,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":60,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.6,"details":{"confidence":60,"threshold":0}}]},{"file":"app.py","qualified_name":"app.UnusedSchema","kind":"class","line":17,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]},{"file":"app.py","qualified_name":"app.UnusedSchema.name","kind":"variable","line":18,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}]},{"file":"app.py","qualified_name":"app.UserInput","kind":"class","line":4,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.UserInput.email","kind":"variable","line":5,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}]},{"file":"app.py","qualified_name":"app.UserInput.ensure_domain","kind":"method","line":13,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":3,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}]},{"file":"app.py","qualified_name":"app.UserInput.normalize_email","kind":"method","line":9,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":3,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}]},{"file":"app.py","qualified_name":"app.build_user","kind":"function","line":21,"classification":"alive","decision":{"classification":"alive","primary_reason":"Called during module import","reason_tags":["top_level_execution"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"top_level_execution","role":"supports_live","reason":"called during module top-level execution","source":"python_ast","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.unused_normalizer","kind":"function","line":25,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":9,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":4,"likely_dead":5},"candidate_decisions":{"reported":3,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-edy16d1p/pydantic_validators","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-edy16d1p/pydantic_validators","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":true,"rescued_count":0,"project_cache_enabled":false,"backend":"ripgrep"},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":17,"grade_categories":["dead_code"],"by_directory":[{"path":".","total":3,"files":1,"dead_code":3,"rules":{"unused-classes":1,"unused-functions":1,"unused-variables":1},"severities":{"LOW":3}}],"finding_type_counts":{"defect":0,"review":3,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"listed_finding_type_counts":{"defect":0,"review":3,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["dead_code"],"coverage":{"status":"partial","not_assessed":["security","quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":3,"confidence_range":[60,90]},"finding_counts":{"defect":0,"review":3,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-edy16d1p/pydantic_validators","conf":0,"enable_quality":false,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":true,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"alembic-migration-entrypoints","status":"complete","elapsedSeconds":1.635636,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1xbekyq4/alembic_migration","nativeReport":{"definitions":{"versions.20260425_add_orders.upgrade":{"name":"versions.20260425_add_orders.upgrade","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1xbekyq4/alembic_migration/versions/20260425_add_orders.py","line":9,"type":"function","loc":6,"complexity":1,"calls":["alembic.op","alembic.op.create_table","sqlalchemy","sqlalchemy.Column","sqlalchemy.Integer","sqlalchemy.String"],"called_by":[],"dead":false,"dead_code_classification":"uncertain","dead_code_evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"Alembic migration lifecycle function","source":"suppression","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}],"dead_code_decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; No static references; Not exported","reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Uncertainty evidence present; No static references; Not exported","dead_code_reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"versions.20260425_add_orders.downgrade":{"name":"versions.20260425_add_orders.downgrade","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1xbekyq4/alembic_migration/versions/20260425_add_orders.py","line":17,"type":"function","loc":2,"complexity":1,"calls":["alembic.op","alembic.op.drop_table"],"called_by":[],"dead":false,"dead_code_classification":"uncertain","dead_code_evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"Alembic migration lifecycle function","source":"suppression","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}],"dead_code_decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; No static references; Not exported","reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Uncertainty evidence present; No static references; Not exported","dead_code_reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"versions.20260425_add_orders.unused_migration_helper":{"name":"versions.20260425_add_orders.unused_migration_helper","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1xbekyq4/alembic_migration/versions/20260425_add_orders.py","line":21,"type":"function","loc":2,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"versions.20260425_add_orders.UnusedMigrationState":{"name":"versions.20260425_add_orders.UnusedMigrationState","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1xbekyq4/alembic_migration/versions/20260425_add_orders.py","line":25,"type":"class","loc":2,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"unused_migration_helper","full_name":"versions.20260425_add_orders.unused_migration_helper","simple_name":"unused_migration_helper","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1xbekyq4/alembic_migration/versions/20260425_add_orders.py","basename":"20260425_add_orders.py","line":21,"confidence":90,"references":0,"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[{"name":"UnusedMigrationState","full_name":"versions.20260425_add_orders.UnusedMigrationState","simple_name":"UnusedMigrationState","type":"class","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1xbekyq4/alembic_migration/versions/20260425_add_orders.py","basename":"20260425_add_orders.py","line":25,"confidence":90,"references":0,"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[{"name":"revision","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1xbekyq4/alembic_migration/versions/20260425_add_orders.py","line":5,"reason":"Alembic revision metadata","category":"dead_code","suppression_code":null,"folder_role":null},{"name":"down_revision","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1xbekyq4/alembic_migration/versions/20260425_add_orders.py","line":6,"reason":"Alembic revision metadata","category":"dead_code","suppression_code":null,"folder_role":null},{"name":"upgrade","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1xbekyq4/alembic_migration/versions/20260425_add_orders.py","line":9,"reason":"Alembic migration lifecycle function","category":"dead_code","suppression_code":null,"folder_role":null},{"name":"downgrade","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1xbekyq4/alembic_migration/versions/20260425_add_orders.py","line":17,"reason":"Alembic migration lifecycle function","category":"dead_code","suppression_code":null,"folder_role":null}],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"versions/20260425_add_orders.py","qualified_name":"versions.20260425_add_orders.UnusedMigrationState","kind":"class","line":25,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]},{"file":"versions/20260425_add_orders.py","qualified_name":"versions.20260425_add_orders.down_revision","kind":"variable","line":6,"classification":"uncertain","decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; No static references; Not exported","reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"Alembic revision metadata","source":"suppression","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}]},{"file":"versions/20260425_add_orders.py","qualified_name":"versions.20260425_add_orders.downgrade","kind":"function","line":17,"classification":"uncertain","decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; No static references; Not exported","reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"Alembic migration lifecycle function","source":"suppression","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}]},{"file":"versions/20260425_add_orders.py","qualified_name":"versions.20260425_add_orders.revision","kind":"variable","line":5,"classification":"uncertain","decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; No static references; Not exported","reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"Alembic revision metadata","source":"suppression","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}]},{"file":"versions/20260425_add_orders.py","qualified_name":"versions.20260425_add_orders.unused_migration_helper","kind":"function","line":21,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]},{"file":"versions/20260425_add_orders.py","qualified_name":"versions.20260425_add_orders.upgrade","kind":"function","line":9,"classification":"uncertain","decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; No static references; Not exported","reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"Alembic migration lifecycle function","source":"suppression","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":6,"classification_policy":"dead-code-evidence-v3","classifications":{"uncertain":4,"likely_dead":2},"uncertainty_reasons":{"Alembic migration lifecycle function":2,"Alembic revision metadata":2},"candidate_decisions":{"reported":2,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1xbekyq4/alembic_migration","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1xbekyq4/alembic_migration","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":true,"rescued_count":0,"project_cache_enabled":false,"backend":"ripgrep"},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":16,"grade_categories":["dead_code"],"by_directory":[{"path":"versions","total":2,"files":1,"dead_code":2,"rules":{"unused-classes":1,"unused-functions":1},"severities":{"LOW":2}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["dead_code"],"coverage":{"status":"partial","not_assessed":["security","quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":2,"confidence_range":[90,90]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1xbekyq4/alembic_migration","conf":0,"enable_quality":false,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":true,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"importlib-plugin-loading","status":"complete","elapsedSeconds":5.283665,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-3s1covin/importlib_plugins","nativeReport":{"definitions":{"app.load_plugin":{"name":"app.load_plugin","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-3s1covin/importlib_plugins/app.py","line":7,"type":"function","loc":3,"complexity":1,"calls":["app.PLUGIN_MODULE","app.load_plugin.module","app.load_plugin.name","importlib.import_module","importlib.import_module.send_email"],"called_by":["app.run_notification"],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Reachable from root","dead_code_reason_tags":["reachable_from_root"]},"app.run_notification":{"name":"app.run_notification","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-3s1covin/importlib_plugins/app.py","line":12,"type":"function","loc":3,"complexity":1,"calls":["app.load_plugin","app.run_notification.sender"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"top_level_execution","role":"supports_live","reason":"called during module top-level execution","source":"python_ast","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Called during module import","reason_tags":["top_level_execution"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Called during module import","dead_code_reason_tags":["top_level_execution"]},"app.unused_loader":{"name":"app.unused_loader","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-3s1covin/importlib_plugins/app.py","line":17,"type":"function","loc":2,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.7,"details":{"confidence":70,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":70,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"plugins.email.send_email":{"name":"plugins.email.send_email","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-3s1covin/importlib_plugins/plugins/email.py","line":1,"type":"function","loc":2,"complexity":1,"calls":["plugins.email.send_email.address"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"attribute_name_match","role":"context","reason":"unverified global_attr match","source":"attribute_reference","confidence":0.0846,"details":{"bucket":"global_attr"}},{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":1}}],"dead_code_decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Static references found","dead_code_reason_tags":["static_reference"]},"plugins.email.unused_plugin_hook":{"name":"plugins.email.unused_plugin_hook","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-3s1covin/importlib_plugins/plugins/email.py","line":5,"type":"function","loc":2,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.7,"details":{"confidence":70,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":70,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"plugins.email.UnusedPlugin":{"name":"plugins.email.UnusedPlugin","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-3s1covin/importlib_plugins/plugins/email.py","line":9,"type":"class","loc":2,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"unused_loader","full_name":"app.unused_loader","simple_name":"unused_loader","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-3s1covin/importlib_plugins/app.py","basename":"app.py","line":17,"confidence":70,"references":0,"confidence_factors":["dynamic_lookup","public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.7,"details":{"confidence":70,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":70,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"name":"unused_plugin_hook","full_name":"plugins.email.unused_plugin_hook","simple_name":"unused_plugin_hook","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-3s1covin/importlib_plugins/plugins/email.py","basename":"email.py","line":5,"confidence":70,"references":0,"confidence_factors":["dynamic_lookup","public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.7,"details":{"confidence":70,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":70,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[{"name":"UnusedPlugin","full_name":"plugins.email.UnusedPlugin","simple_name":"UnusedPlugin","type":"class","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-3s1covin/importlib_plugins/plugins/email.py","basename":"email.py","line":9,"confidence":80,"references":0,"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_variables":[{"name":"RESULT","full_name":"app.RESULT","simple_name":"RESULT","type":"variable","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-3s1covin/importlib_plugins/app.py","basename":"app.py","line":21,"confidence":60,"references":0,"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.6,"details":{"confidence":60,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":60,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.py","qualified_name":"app.PLUGIN_MODULE","kind":"variable","line":4,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":60,"threshold":0},"evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.RESULT","kind":"variable","line":21,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":60,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.6,"details":{"confidence":60,"threshold":0}}]},{"file":"app.py","qualified_name":"app.load_plugin","kind":"function","line":7,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.load_plugin.module","kind":"variable","line":8,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.run_notification","kind":"function","line":12,"classification":"alive","decision":{"classification":"alive","primary_reason":"Called during module import","reason_tags":["top_level_execution"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"top_level_execution","role":"supports_live","reason":"called during module top-level execution","source":"python_ast","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.run_notification.sender","kind":"variable","line":13,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.unused_loader","kind":"function","line":17,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":70,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.7,"details":{"confidence":70,"threshold":0}}]},{"file":"plugins/email.py","qualified_name":"plugins.email.UnusedPlugin","kind":"class","line":9,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}]},{"file":"plugins/email.py","qualified_name":"plugins.email.send_email","kind":"function","line":1,"classification":"alive","decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"attribute_name_match","role":"context","reason":"unverified global_attr match","source":"attribute_reference","confidence":0.0846,"details":{"bucket":"global_attr"}},{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":1}}]},{"file":"plugins/email.py","qualified_name":"plugins.email.unused_plugin_hook","kind":"function","line":5,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":70,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.7,"details":{"confidence":70,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":3,"excluded_folders":[],"languages":{"Python":3},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":10,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":6,"likely_dead":4},"candidate_decisions":{"reported":4,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-3s1covin/importlib_plugins","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-3s1covin/importlib_plugins","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":true,"rescued_count":0,"project_cache_enabled":false,"backend":"ripgrep"},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":17,"grade_categories":["dead_code"],"by_directory":[{"path":".","total":2,"files":1,"dead_code":2,"rules":{"unused-functions":1,"unused-variables":1},"severities":{"LOW":2}},{"path":"plugins","total":2,"files":1,"dead_code":2,"rules":{"unused-classes":1,"unused-functions":1},"severities":{"LOW":2}}],"finding_type_counts":{"defect":0,"review":4,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"listed_finding_type_counts":{"defect":0,"review":4,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["dead_code"],"coverage":{"status":"partial","not_assessed":["security","quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":4,"confidence_range":[60,80]},"finding_counts":{"defect":0,"review":4,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-3s1covin/importlib_plugins","conf":0,"enable_quality":false,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":true,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"package-entrypoints","status":"complete","elapsedSeconds":5.11313,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-46oymyfm/package_entrypoints","nativeReport":{"definitions":{"bench.cli.main":{"name":"bench.cli.main","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-46oymyfm/package_entrypoints/bench/cli.py","line":1,"type":"function","loc":2,"complexity":1,"calls":["bench.cli.format_status"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"package_entrypoint","role":"supports_live","reason":"pyproject script entrypoint","source":"pyproject.toml","confidence":1.0,"details":{}},{"kind":"uncertainty","role":"uncertainty","reason":"benchmark entrypoint path","source":"suppression","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Package entrypoint","reason_tags":["package_entrypoint"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Package entrypoint","dead_code_reason_tags":["package_entrypoint"]},"bench.cli.format_status":{"name":"bench.cli.format_status","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-46oymyfm/package_entrypoints/bench/cli.py","line":5,"type":"function","loc":2,"complexity":1,"calls":["bench.cli.format_status.value"],"called_by":["bench.cli.main"],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}},{"kind":"uncertainty","role":"uncertainty","reason":"benchmark entrypoint path","source":"suppression","confidence":1.0,"details":{}},{"kind":"uncertainty","role":"uncertainty","reason":"weak helper function","source":"reference_safe_policy","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":2,"confidence":0,"threshold":0},"dead_code_reason":"Reachable from root","dead_code_reason_tags":["reachable_from_root"]}},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[{"name":"main","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-46oymyfm/package_entrypoints/bench/cli.py","line":1,"reason":"benchmark entrypoint path","category":"dead_code","suppression_code":"non_library_path","folder_role":"benchmark"},{"name":"format_status","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-46oymyfm/package_entrypoints/bench/cli.py","line":5,"reason":"benchmark entrypoint path","category":"dead_code","suppression_code":"non_library_path","folder_role":"benchmark"},{"name":"value","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-46oymyfm/package_entrypoints/bench/cli.py","line":5,"reason":"benchmark entrypoint path","category":"dead_code","suppression_code":"non_library_path","folder_role":"benchmark"}],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"bench/cli.py","qualified_name":"bench.cli.format_status","kind":"function","line":5,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":2,"confidence":0,"threshold":0},"evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}},{"kind":"uncertainty","role":"uncertainty","reason":"benchmark entrypoint path","source":"suppression","confidence":1.0,"details":{}},{"kind":"uncertainty","role":"uncertainty","reason":"weak helper function","source":"reference_safe_policy","confidence":1.0,"details":{}}]},{"file":"bench/cli.py","qualified_name":"bench.cli.main","kind":"function","line":1,"classification":"alive","decision":{"classification":"alive","primary_reason":"Package entrypoint","reason_tags":["package_entrypoint"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"package_entrypoint","role":"supports_live","reason":"pyproject script entrypoint","source":"pyproject.toml","confidence":1.0,"details":{}},{"kind":"uncertainty","role":"uncertainty","reason":"benchmark entrypoint path","source":"suppression","confidence":1.0,"details":{}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":2,"excluded_folders":[],"languages":{"Python":2},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":2,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":2},"candidate_decisions":{"reported":0,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-46oymyfm/package_entrypoints","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-46oymyfm/package_entrypoints","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":true,"rescued_count":0,"project_cache_enabled":false},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":4,"grade_categories":["dead_code"],"finding_type_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"listed_finding_type_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["dead_code"],"coverage":{"status":"partial","not_assessed":["security","quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"none","candidate_count":0,"confidence_range":null},"finding_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-46oymyfm/package_entrypoints","conf":0,"enable_quality":false,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":true,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"go-service-entrypoints","status":"complete","elapsedSeconds":1.201057,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f7obx4yb/go_service","nativeReport":{"definitions":{"main":{"name":"main","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f7obx4yb/go_service/main.go","line":5,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]},"healthHandler":{"name":"healthHandler","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f7obx4yb/go_service/main.go","line":9,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":1}}],"dead_code_decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Static references found","dead_code_reason_tags":["static_reference"]},"formatStatus":{"name":"formatStatus","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f7obx4yb/go_service/main.go","line":14,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":1}}],"dead_code_decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Static references found","dead_code_reason_tags":["static_reference"]},"unusedReconciler":{"name":"unusedReconciler","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f7obx4yb/go_service/main.go","line":18,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"unusedReconciler","full_name":"unusedReconciler","simple_name":"unusedReconciler","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f7obx4yb/go_service/main.go","basename":"main.go","line":18,"confidence":100,"references":0,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"main.go","qualified_name":"formatStatus","kind":"function","line":14,"classification":"alive","decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":1}}]},{"file":"main.go","qualified_name":"healthHandler","kind":"function","line":9,"classification":"alive","decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":1}}]},{"file":"main.go","qualified_name":"main","kind":"function","line":5,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}]},{"file":"main.go","qualified_name":"unusedReconciler","kind":"function","line":18,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Go":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":4,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":3,"likely_dead":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f7obx4yb/go_service","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f7obx4yb/go_service","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":true,"rescued_count":0,"project_cache_enabled":false,"backend":"ripgrep"},"language_engines":{"go":{"status":"available","file_count":1,"engine":{"status":"available","binary":"/private/tmp/skylos-public-benchmark-run-20261022/skylos/engines/go/skylos-go","configured_by":"bundled"},"completed_checks":["quality","dead_code","security"],"skipped_checks":[]}},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":15,"grade_categories":["dead_code"],"by_directory":[{"path":".","total":1,"files":1,"dead_code":1,"rules":{"unused-functions":1},"severities":{"LOW":1}}],"finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"listed_finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["dead_code"],"coverage":{"status":"partial","not_assessed":["security","quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[100,100]},"finding_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f7obx4yb/go_service","conf":0,"enable_quality":false,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":true,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"java-service-entrypoints","status":"complete","elapsedSeconds":2.269277,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-c0zeoehm/java_service","nativeReport":{"definitions":{"App":{"name":"App","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-c0zeoehm/java_service/App.java","line":1,"type":"class","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":2,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]},"UnusedController":{"name":"UnusedController","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-c0zeoehm/java_service/App.java","line":20,"type":"class","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"App.formatStatus":{"name":"App.formatStatus","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-c0zeoehm/java_service/App.java","line":11,"type":"method","loc":1,"complexity":1,"calls":[],"called_by":["App.handle"],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":2}}],"dead_code_decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Static references found","dead_code_reason_tags":["static_reference"]},"App.unusedFormatter":{"name":"App.unusedFormatter","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-c0zeoehm/java_service/App.java","line":15,"type":"method","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"App.handle":{"name":"App.handle","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-c0zeoehm/java_service/App.java","line":7,"type":"method","loc":1,"complexity":1,"calls":["App.formatStatus"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":2}}],"dead_code_decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Static references found","dead_code_reason_tags":["static_reference"]},"UnusedController.render":{"name":"UnusedController.render","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-c0zeoehm/java_service/App.java","line":21,"type":"method","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"App.unusedFormatter","full_name":"App.unusedFormatter","simple_name":"unusedFormatter","type":"method","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-c0zeoehm/java_service/App.java","basename":"App.java","line":15,"confidence":80,"references":0,"confidence_factors":["public_method"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[{"name":"UnusedController","full_name":"UnusedController","simple_name":"UnusedController","type":"class","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-c0zeoehm/java_service/App.java","basename":"App.java","line":20,"confidence":100,"references":0,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"App.java","qualified_name":"App","kind":"class","line":1,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":2,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}]},{"file":"App.java","qualified_name":"App.formatStatus","kind":"method","line":11,"classification":"alive","decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":2}}]},{"file":"App.java","qualified_name":"App.handle","kind":"method","line":7,"classification":"alive","decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":2}}]},{"file":"App.java","qualified_name":"App.unusedFormatter","kind":"method","line":15,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}]},{"file":"App.java","qualified_name":"UnusedController","kind":"class","line":20,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}]},{"file":"App.java","qualified_name":"UnusedController.render","kind":"method","line":21,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Java":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":6,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":3,"likely_dead":3},"candidate_decisions":{"reported":2,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-c0zeoehm/java_service","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-c0zeoehm/java_service","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":true,"rescued_count":0,"project_cache_enabled":false,"backend":"ripgrep"},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":20,"grade_categories":["dead_code"],"by_directory":[{"path":".","total":2,"files":1,"dead_code":2,"rules":{"unused-classes":1,"unused-functions":1},"severities":{"LOW":2}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["dead_code"],"coverage":{"status":"partial","not_assessed":["security","quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":2,"confidence_range":[80,100]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-c0zeoehm/java_service","conf":0,"enable_quality":false,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":true,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"java-fxml-controller-callbacks","status":"complete","elapsedSeconds":0.76664,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-uzxug8hr/java_fxml_controller","nativeReport":{"definitions":{"PrintController":{"name":"PrintController","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-uzxug8hr/java_fxml_controller/PrintController.java","line":3,"type":"class","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":1}}],"dead_code_decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Static references found","dead_code_reason_tags":["static_reference"]},"PrintController.printButtonAction":{"name":"PrintController.printButtonAction","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-uzxug8hr/java_fxml_controller/PrintController.java","line":5,"type":"method","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":1}}],"dead_code_decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Static references found","dead_code_reason_tags":["static_reference"]},"PrintController.staleAnnotated":{"name":"PrintController.staleAnnotated","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-uzxug8hr/java_fxml_controller/PrintController.java","line":10,"type":"method","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"PrintController.staleHelper":{"name":"PrintController.staleHelper","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-uzxug8hr/java_fxml_controller/PrintController.java","line":14,"type":"method","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"PrintController.staleAnnotated","full_name":"PrintController.staleAnnotated","simple_name":"staleAnnotated","type":"method","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-uzxug8hr/java_fxml_controller/PrintController.java","basename":"PrintController.java","line":10,"confidence":80,"references":0,"confidence_factors":["public_method"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"name":"PrintController.staleHelper","full_name":"PrintController.staleHelper","simple_name":"staleHelper","type":"method","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-uzxug8hr/java_fxml_controller/PrintController.java","basename":"PrintController.java","line":14,"confidence":80,"references":0,"confidence_factors":["public_method"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"PrintController.java","qualified_name":"PrintController","kind":"class","line":3,"classification":"alive","decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":1}}]},{"file":"PrintController.java","qualified_name":"PrintController.printButtonAction","kind":"method","line":5,"classification":"alive","decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":1}}]},{"file":"PrintController.java","qualified_name":"PrintController.staleAnnotated","kind":"method","line":10,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}]},{"file":"PrintController.java","qualified_name":"PrintController.staleHelper","kind":"method","line":14,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Java":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":4,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":2,"likely_dead":2},"candidate_decisions":{"reported":2,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-uzxug8hr/java_fxml_controller","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-uzxug8hr/java_fxml_controller","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":true,"rescued_count":0,"project_cache_enabled":false,"backend":"ripgrep"},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":14,"grade_categories":["dead_code"],"by_directory":[{"path":".","total":2,"files":1,"dead_code":2,"rules":{"unused-functions":2},"severities":{"LOW":2}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["dead_code"],"coverage":{"status":"partial","not_assessed":["security","quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":2,"confidence_range":[80,80]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-uzxug8hr/java_fxml_controller","conf":0,"enable_quality":false,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":true,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"typescript-vscode-pseudoterminal-callbacks","status":"complete","elapsedSeconds":1.137437,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-bl57gn28/typescript_vscode_pseudoterminal","nativeReport":{"definitions":{"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-bl57gn28/typescript_vscode_pseudoterminal/src/extension.ts:activate":{"name":"activate","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-bl57gn28/typescript_vscode_pseudoterminal/src/extension.ts","line":3,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":2,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]},"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-bl57gn28/typescript_vscode_pseudoterminal/src/extension.ts:BuildTerminal":{"name":"BuildTerminal","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-bl57gn28/typescript_vscode_pseudoterminal/src/extension.ts","line":14,"type":"class","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":1}}],"dead_code_decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Static references found","dead_code_reason_tags":["static_reference"]},"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-bl57gn28/typescript_vscode_pseudoterminal/src/extension.ts:InternalTaskProvider":{"name":"InternalTaskProvider","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-bl57gn28/typescript_vscode_pseudoterminal/src/extension.ts","line":24,"type":"class","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":1}}],"dead_code_decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Static references found","dead_code_reason_tags":["static_reference"]},"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-bl57gn28/typescript_vscode_pseudoterminal/src/extension.ts:BuildTerminal.open":{"name":"BuildTerminal.open","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-bl57gn28/typescript_vscode_pseudoterminal/src/extension.ts","line":15,"type":"method","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":3,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]},"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-bl57gn28/typescript_vscode_pseudoterminal/src/extension.ts:BuildTerminal.staleHelper":{"name":"BuildTerminal.staleHelper","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-bl57gn28/typescript_vscode_pseudoterminal/src/extension.ts","line":19,"type":"method","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-bl57gn28/typescript_vscode_pseudoterminal/src/extension.ts:InternalTaskProvider.provideTasks":{"name":"InternalTaskProvider.provideTasks","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-bl57gn28/typescript_vscode_pseudoterminal/src/extension.ts","line":25,"type":"method","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":3,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]},"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-bl57gn28/typescript_vscode_pseudoterminal/src/extension.ts:InternalTaskProvider.resolveTask":{"name":"InternalTaskProvider.resolveTask","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-bl57gn28/typescript_vscode_pseudoterminal/src/extension.ts","line":29,"type":"method","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":3,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]},"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-bl57gn28/typescript_vscode_pseudoterminal/src/extension.ts:BuildTerminal.close":{"name":"BuildTerminal.close","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-bl57gn28/typescript_vscode_pseudoterminal/src/extension.ts","line":17,"type":"method","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":3,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]},"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-bl57gn28/typescript_vscode_pseudoterminal/src/extension.ts:InternalTaskProvider.staleProviderHelper":{"name":"InternalTaskProvider.staleProviderHelper","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-bl57gn28/typescript_vscode_pseudoterminal/src/extension.ts","line":33,"type":"method","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"BuildTerminal.staleHelper","full_name":"BuildTerminal.staleHelper","simple_name":"staleHelper","type":"method","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-bl57gn28/typescript_vscode_pseudoterminal/src/extension.ts","basename":"extension.ts","line":19,"confidence":80,"references":0,"confidence_factors":["public_method"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"name":"InternalTaskProvider.staleProviderHelper","full_name":"InternalTaskProvider.staleProviderHelper","simple_name":"staleProviderHelper","type":"method","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-bl57gn28/typescript_vscode_pseudoterminal/src/extension.ts","basename":"extension.ts","line":33,"confidence":80,"references":0,"confidence_factors":["public_method"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"src/extension.ts","qualified_name":"BuildTerminal","kind":"class","line":14,"classification":"alive","decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":1}}]},{"file":"src/extension.ts","qualified_name":"BuildTerminal.close","kind":"method","line":17,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":3,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}]},{"file":"src/extension.ts","qualified_name":"BuildTerminal.open","kind":"method","line":15,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":3,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}]},{"file":"src/extension.ts","qualified_name":"BuildTerminal.staleHelper","kind":"method","line":19,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}]},{"file":"src/extension.ts","qualified_name":"InternalTaskProvider","kind":"class","line":24,"classification":"alive","decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":1}}]},{"file":"src/extension.ts","qualified_name":"InternalTaskProvider.provideTasks","kind":"method","line":25,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":3,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}]},{"file":"src/extension.ts","qualified_name":"InternalTaskProvider.resolveTask","kind":"method","line":29,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":3,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}]},{"file":"src/extension.ts","qualified_name":"InternalTaskProvider.staleProviderHelper","kind":"method","line":33,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}]},{"file":"src/extension.ts","qualified_name":"activate","kind":"function","line":3,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":2,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"TypeScript":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":9,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":7,"likely_dead":2},"candidate_decisions":{"reported":2,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-bl57gn28/typescript_vscode_pseudoterminal","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-bl57gn28/typescript_vscode_pseudoterminal","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":true,"rescued_count":0,"project_cache_enabled":false,"backend":"ripgrep"},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":1,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":29,"grade_categories":["dead_code"],"by_directory":[{"path":"src","total":2,"files":1,"dead_code":2,"rules":{"unused-functions":2},"severities":{"LOW":2}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":{"name":"vscode-pseudoterminal-fixture","path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-bl57gn28/typescript_vscode_pseudoterminal","relative_path":".","discovered_from":["root-package"],"is_root":true,"is_internal_dependency":false,"has_package_json":true},"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":1,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["dead_code"],"coverage":{"status":"partial","not_assessed":["security","quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":2,"confidence_range":[80,80]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-bl57gn28/typescript_vscode_pseudoterminal","conf":0,"enable_quality":false,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":true,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"ts-js-package-reachability","status":"complete","elapsedSeconds":3.21659,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-5v_blx_z/ts_js_package","nativeReport":{"definitions":{"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-5v_blx_z/ts_js_package/src/legacy.js:legacySync":{"name":"legacySync","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-5v_blx_z/ts_js_package/src/legacy.js","line":1,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-5v_blx_z/ts_js_package/src/service.ts:runJob":{"name":"runJob","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-5v_blx_z/ts_js_package/src/service.ts","line":1,"type":"function","loc":1,"complexity":1,"calls":["formatJob"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]},"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-5v_blx_z/ts_js_package/src/service.ts:unusedTransform":{"name":"unusedTransform","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-5v_blx_z/ts_js_package/src/service.ts","line":9,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-5v_blx_z/ts_js_package/src/service.ts:formatJob":{"name":"formatJob","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-5v_blx_z/ts_js_package/src/service.ts","line":5,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":["runJob"],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":1}}],"dead_code_decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Static references found","dead_code_reason_tags":["static_reference"]}},"unused_functions":[{"name":"legacySync","full_name":"legacySync","simple_name":"legacySync","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-5v_blx_z/ts_js_package/src/legacy.js","basename":"legacy.js","line":1,"confidence":85,"references":0,"confidence_factors":["exported_symbol"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"name":"unusedTransform","full_name":"unusedTransform","simple_name":"unusedTransform","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-5v_blx_z/ts_js_package/src/service.ts","basename":"service.ts","line":9,"confidence":85,"references":0,"confidence_factors":["exported_symbol"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[{"rule_id":"SKY-E003","message":"Unused TypeScript/JavaScript file (not imported by any other file)","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-5v_blx_z/ts_js_package/src/legacy.js","line":1,"severity":"LOW","category":"DEAD_CODE","confidence":80,"confidence_factors":["unimported_file"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"src/legacy.js","qualified_name":"legacySync","kind":"function","line":1,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}]},{"file":"src/service.ts","qualified_name":"formatJob","kind":"function","line":5,"classification":"alive","decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":1}}]},{"file":"src/service.ts","qualified_name":"runJob","kind":"function","line":1,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}]},{"file":"src/service.ts","qualified_name":"unusedTransform","kind":"function","line":9,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":3,"excluded_folders":[],"languages":{"TypeScript":2,"JavaScript":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":4,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":2,"alive":2},"candidate_decisions":{"reported":2,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-5v_blx_z/ts_js_package","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-5v_blx_z/ts_js_package","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":true,"rescued_count":0,"project_cache_enabled":false,"backend":"ripgrep"},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":1,"workspace_diagnostic_count":0,"unused_files_count":1,"maintainability_inventory":[],"total_loc":14,"grade_categories":["dead_code"],"by_directory":[{"path":"src","total":3,"files":2,"dead_code":3,"rules":{"SKY-E003":1,"unused-functions":2},"severities":{"LOW":3}}],"finding_type_counts":{"defect":0,"review":3,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"listed_finding_type_counts":{"defect":0,"review":3,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":{"name":"golden-ts-js-package","path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-5v_blx_z/ts_js_package","relative_path":".","discovered_from":["root-package"],"is_root":true,"is_internal_dependency":false,"has_package_json":true},"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":1,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["dead_code"],"coverage":{"status":"partial","not_assessed":["security","quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":3,"confidence_range":[80,85]},"finding_counts":{"defect":0,"review":3,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-5v_blx_z/ts_js_package","conf":0,"enable_quality":false,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":true,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]}]},{"id":"security","manifestPath":"benchmarks/security/manifest.json","manifestSha256":"6fda48fdfaaeaff89c0168168d97989139ff0a753f831e476bc262145c2da7cd","manifest":{"version":1,"cases":[{"id":"sql-tainted-param","path":"fixtures/sql_tainted_param","description":"Tainted SQL query passed as a function parameter should be detected even when execute() receives params separately.","taxonomy":["sql_injection"],"importance":"critical","source":{"repo":"https://github.com/duriantaco/skylos","license":"Apache-2.0","notes":"Regression fixture distilled from a confirmed false negative in Skylos SQL flow analysis."},"budget":{"max_seconds":6.0},"expect":{"present":{"danger":["SKY-D211"]},"absent":{}}},{"id":"sql-constant-format","path":"fixtures/sql_constant_format","description":"Statically built SQL using constant .format() arguments should not be reported as SQL injection.","taxonomy":["sql_injection","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/duriantaco/skylos","license":"Apache-2.0","notes":"Regression fixture distilled from a confirmed SQL false-positive pattern."},"budget":{"max_seconds":5.0},"expect":{"present":{},"absent":{"danger":["SKY-D211","SKY-D217"]}}},{"id":"ssrf-tainted-host","path":"fixtures/ssrf_tainted_host","description":"A request parameter interpolated into the URL host of a route handler should be detected as SSRF.","taxonomy":["ssrf"],"importance":"critical","source":{"repo":"https://github.com/duriantaco/skylos","license":"Apache-2.0","notes":"Regression fixture for host-level SSRF taint."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D216"]},"absent":{}}},{"id":"ssrf-helper-parameter-safe","path":"fixtures/ssrf_helper_parameter_safe","description":"A helper whose URL host comes only from its own parameter (no route, request, CLI, MCP-tool or stdin source) is not reported as SSRF.","taxonomy":["ssrf","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/duriantaco/skylos","license":"Apache-2.0","notes":"Regression fixture from agent-pr-bench false positives on operator-configured URLs (plan 3.8b)."},"budget":{"max_seconds":5.0},"expect":{"present":{},"absent":{"danger":["SKY-D216"]}}},{"id":"ssrf-fixed-host-path","path":"fixtures/ssrf_fixed_host_path","description":"Fixed-host URL interpolation should not be reported as SSRF when only the path segment is tainted.","taxonomy":["ssrf","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/duriantaco/skylos","license":"Apache-2.0","notes":"Regression fixture distilled from a confirmed SSRF false-positive pattern."},"budget":{"max_seconds":5.0},"expect":{"present":{},"absent":{"danger":["SKY-D216"]}}},{"id":"subprocess-alias-shell","path":"fixtures/subprocess_alias_shell","description":"subprocess imported with an alias should still be detected when shell=True is used.","taxonomy":["command_injection"],"importance":"critical","source":{"repo":"https://github.com/duriantaco/skylos","license":"Apache-2.0","notes":"Regression fixture distilled from a confirmed dangerous-call alias false negative."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D209"]},"absent":{}}},{"id":"yaml-safeloader-positional","path":"fixtures/yaml_safeloader_positional","description":"yaml.load with positional yaml.SafeLoader should not be reported as unsafe deserialization.","taxonomy":["deserialization","precision_guard"],"importance":"high","source":{"repo":"https://github.com/duriantaco/skylos","license":"Apache-2.0","notes":"Regression fixture distilled from a confirmed SafeLoader false positive."},"budget":{"max_seconds":5.0},"expect":{"present":{},"absent":{"danger":["SKY-D206"]}}},{"id":"path-traversal-tainted-join","path":"fixtures/path_traversal_tainted_join","description":"User-controlled path segments joined into a filesystem path should be reported as path traversal.","taxonomy":["path_traversal"],"importance":"critical","source":{"repo":"https://github.com/duriantaco/skylos","license":"Apache-2.0","notes":"Golden fixture for tainted os.path.join data reaching open()."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D215"]},"absent":{}}},{"id":"path-traversal-basename","path":"fixtures/path_traversal_basename","description":"Path input sanitized with os.path.basename before opening a fixed directory should stay quiet.","taxonomy":["path_traversal","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/duriantaco/skylos","license":"Apache-2.0","notes":"Golden precision fixture for basename path sanitization."},"budget":{"max_seconds":5.0},"expect":{"present":{},"absent":{"danger":["SKY-D215"]}}},{"id":"xss-mark-safe","path":"fixtures/xss_mark_safe","description":"Tainted HTML interpolated into Markup should be reported as XSS.","taxonomy":["xss"],"importance":"critical","source":{"repo":"https://github.com/duriantaco/skylos","license":"Apache-2.0","notes":"Golden fixture for untrusted content marked safe."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D226"]},"absent":{}}},{"id":"xss-escape-safe","path":"fixtures/xss_escape_safe","description":"Escaped content wrapped with Markup should not be reported as XSS.","taxonomy":["xss","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/duriantaco/skylos","license":"Apache-2.0","notes":"Golden precision fixture for HTML escaping before Markup."},"budget":{"max_seconds":5.0},"expect":{"present":{},"absent":{"danger":["SKY-D226"]}}},{"id":"open-redirect-tainted","path":"fixtures/open_redirect_tainted","description":"User-controlled redirect targets should be reported as open redirect.","taxonomy":["open_redirect"],"importance":"critical","source":{"repo":"https://github.com/duriantaco/skylos","license":"Apache-2.0","notes":"Golden fixture for Flask request parameter redirect flow."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D230"]},"absent":{}}},{"id":"open-redirect-local-guard","path":"fixtures/open_redirect_local_guard","description":"Redirect targets guarded to local paths should stay quiet.","taxonomy":["open_redirect","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/duriantaco/skylos","license":"Apache-2.0","notes":"Golden precision fixture for local-path redirect guards."},"budget":{"max_seconds":5.0},"expect":{"present":{},"absent":{"danger":["SKY-D230"]}}},{"id":"jwt-verify-disabled","path":"fixtures/jwt_verify_disabled","description":"JWT decode with signature verification disabled should be reported.","taxonomy":["auth_bypass"],"importance":"critical","source":{"repo":"https://github.com/duriantaco/skylos","license":"Apache-2.0","notes":"Golden fixture for JWT verification bypass."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D232"]},"absent":{}}},{"id":"cors-wildcard","path":"fixtures/cors_wildcard","description":"Wildcard CORS configuration should be reported.","taxonomy":["cors"],"importance":"high","source":{"repo":"https://github.com/duriantaco/skylos","license":"Apache-2.0","notes":"Golden fixture for permissive CORS settings."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D231"]},"absent":{}}},{"id":"go-zip-slip","path":"fixtures/go_zip_slip","description":"Go archive extraction that joins an archive entry name into a filesystem path should be reported as Zip Slip path traversal.","languages":["go"],"taxonomy":["path_traversal","go"],"importance":"critical","source":{"repo":"https://github.com/securego/gosec","license":"Apache-2.0","notes":"Distilled from Go archive extraction path traversal patterns."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D215"]},"absent":{}}},{"id":"go-zip-slip-safe","path":"fixtures/go_zip_slip_safe","description":"Go archive extraction guarded with filepath.IsLocal should stay quiet.","languages":["go"],"taxonomy":["path_traversal","go","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/securego/gosec","license":"Apache-2.0","notes":"Distilled from Go archive extraction sanitizer patterns."},"budget":{"max_seconds":5.0},"expect":{"present":{},"absent":{"danger":["SKY-D215"]}}},{"id":"java-path-traversal","path":"fixtures/java_path_traversal","description":"Java servlet request parameters used in filesystem paths should be reported as path traversal.","languages":["java"],"taxonomy":["path_traversal","java"],"importance":"critical","source":{"repo":"https://github.com/spotbugs/spotbugs","license":"LGPL-2.1-only","notes":"Distilled from Java servlet path traversal patterns."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D215"]},"absent":{}}},{"id":"java-path-traversal-safe","path":"fixtures/java_path_traversal_safe","description":"Java request path resolution guarded with normalize and startsWith should stay quiet.","languages":["java"],"taxonomy":["path_traversal","java","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/spotbugs/spotbugs","license":"LGPL-2.1-only","notes":"Distilled from Java path traversal sanitizer patterns."},"budget":{"max_seconds":5.0},"expect":{"present":{},"absent":{"danger":["SKY-D215"]}}},{"id":"typescript-eval","path":"fixtures/typescript_eval","description":"TypeScript eval of caller-controlled input should be reported as code execution.","languages":["typescript"],"taxonomy":["command_injection","typescript"],"importance":"critical","source":{"repo":"https://github.com/semgrep/semgrep-rules","license":"LGPL-2.1-only","notes":"Distilled from JavaScript and TypeScript unsafe eval patterns."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D201"]},"absent":{}}},{"id":"csharp-command-injection","path":"fixtures/csharp_command_injection","description":"C# Process.Start with caller-controlled command input should be reported as command injection.","languages":["csharp"],"taxonomy":["command_injection","csharp"],"importance":"critical","source":{"repo":"https://github.com/duriantaco/skylos","license":"Apache-2.0","notes":"Golden fixture for C# process execution taint."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D212"]},"absent":{}}},{"id":"csharp-command-literal-safe","path":"fixtures/csharp_command_literal_safe","description":"C# Process.Start with literal argv should not be reported as command injection.","languages":["csharp"],"taxonomy":["command_injection","csharp","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/duriantaco/skylos","license":"Apache-2.0","notes":"Golden precision fixture for literal C# process execution."},"budget":{"max_seconds":5.0},"expect":{"present":{},"absent":{"danger":["SKY-D212"]}}},{"id":"csharp-sql-injection","path":"fixtures/csharp_sql_injection","description":"C# SqlCommand built from caller-controlled SQL text should be reported.","languages":["csharp"],"taxonomy":["sql_injection","csharp"],"importance":"critical","source":{"repo":"https://github.com/duriantaco/skylos","license":"Apache-2.0","notes":"Golden fixture for C# raw SQL taint."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D211"]},"absent":{}}},{"id":"csharp-sql-parameterized-safe","path":"fixtures/csharp_sql_parameterized_safe","description":"C# parameterized SqlCommand with literal query text should stay quiet.","languages":["csharp"],"taxonomy":["sql_injection","csharp","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/duriantaco/skylos","license":"Apache-2.0","notes":"Golden precision fixture for parameterized C# SQL."},"budget":{"max_seconds":5.0},"expect":{"present":{},"absent":{"danger":["SKY-D211"]}}},{"id":"csharp-ssrf","path":"fixtures/csharp_ssrf","description":"C# HttpClient request using caller-controlled URL should be reported as SSRF.","languages":["csharp"],"taxonomy":["ssrf","csharp"],"importance":"critical","source":{"repo":"https://github.com/duriantaco/skylos","license":"Apache-2.0","notes":"Golden fixture for C# outbound request taint."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D216"]},"absent":{}}},{"id":"csharp-ssrf-fixed-host-safe","path":"fixtures/csharp_ssrf_fixed_host_safe","description":"C# HttpClient request to a literal fixed URL should stay quiet.","languages":["csharp"],"taxonomy":["ssrf","csharp","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/duriantaco/skylos","license":"Apache-2.0","notes":"Golden precision fixture for literal C# outbound request targets."},"budget":{"max_seconds":5.0},"expect":{"present":{},"absent":{"danger":["SKY-D216"]}}},{"id":"csharp-path-traversal","path":"fixtures/csharp_path_traversal","description":"C# File.ReadAllText with caller-controlled path should be reported as path traversal.","languages":["csharp"],"taxonomy":["path_traversal","csharp"],"importance":"critical","source":{"repo":"https://github.com/duriantaco/skylos","license":"Apache-2.0","notes":"Golden fixture for C# filesystem path taint."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D215"]},"absent":{}}},{"id":"csharp-path-basename-safe","path":"fixtures/csharp_path_basename_safe","description":"C# path input sanitized with Path.GetFileName before fixed-directory access should stay quiet.","languages":["csharp"],"taxonomy":["path_traversal","csharp","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/duriantaco/skylos","license":"Apache-2.0","notes":"Golden precision fixture for C# path basename sanitization."},"budget":{"max_seconds":5.0},"expect":{"present":{},"absent":{"danger":["SKY-D215"]}}},{"id":"csharp-open-redirect","path":"fixtures/csharp_open_redirect","description":"C# MVC Redirect using caller-controlled target should be reported as open redirect.","languages":["csharp"],"taxonomy":["open_redirect","csharp"],"importance":"critical","source":{"repo":"https://github.com/duriantaco/skylos","license":"Apache-2.0","notes":"Golden fixture for C# redirect taint."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D230"]},"absent":{}}},{"id":"csharp-open-redirect-literal-safe","path":"fixtures/csharp_open_redirect_literal_safe","description":"C# MVC Redirect to a literal local route should stay quiet.","languages":["csharp"],"taxonomy":["open_redirect","csharp","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/duriantaco/skylos","license":"Apache-2.0","notes":"Golden precision fixture for literal C# redirects."},"budget":{"max_seconds":5.0},"expect":{"present":{},"absent":{"danger":["SKY-D230"]}}},{"id":"php-unserialize","path":"fixtures/php_unserialize","description":"PHP unserialize on request-controlled data should be reported as unsafe deserialization.","languages":["php"],"taxonomy":["deserialization","php"],"importance":"critical","source":{"repo":"https://github.com/duriantaco/skylos","license":"Apache-2.0","notes":"Golden fixture for PHP unsafe deserialization."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D204"]},"absent":{}}},{"id":"php-json-decode-safe","path":"fixtures/php_json_decode_safe","description":"PHP JSON decoding request data should not be treated as unsafe deserialization.","languages":["php"],"taxonomy":["deserialization","php","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/duriantaco/skylos","license":"Apache-2.0","notes":"Golden precision fixture for PHP JSON parsing."},"budget":{"max_seconds":5.0},"expect":{"present":{},"absent":{"danger":["SKY-D204"]}}},{"id":"php-path-traversal","path":"fixtures/php_path_traversal","description":"PHP filesystem read using request-controlled path should be reported as path traversal.","languages":["php"],"taxonomy":["path_traversal","php"],"importance":"critical","source":{"repo":"https://github.com/duriantaco/skylos","license":"Apache-2.0","notes":"Golden fixture for PHP filesystem path taint."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D215"]},"absent":{}}},{"id":"php-path-basename-safe","path":"fixtures/php_path_basename_safe","description":"PHP path input sanitized with basename before fixed-directory access should stay quiet.","languages":["php"],"taxonomy":["path_traversal","php","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/duriantaco/skylos","license":"Apache-2.0","notes":"Golden precision fixture for PHP basename sanitization."},"budget":{"max_seconds":5.0},"expect":{"present":{},"absent":{"danger":["SKY-D215"]}}},{"id":"typescript-eval-safe","path":"fixtures/typescript_eval_safe","description":"TypeScript JSON parsing should not be treated as eval or code execution.","languages":["typescript"],"taxonomy":["command_injection","typescript","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/semgrep/semgrep-rules","license":"LGPL-2.1-only","notes":"Distilled precision guard for non-eval parsing."},"budget":{"max_seconds":5.0},"expect":{"present":{},"absent":{"danger":["SKY-D201"]}}},{"id":"typescript-nextjs-author-shadow-missing-auth","path":"fixtures/typescript_nextjs_author_shadow","description":"Next.js mutating route without an authorization check should be reported even when unrelated identifiers contain the substring auth.","languages":["typescript"],"taxonomy":["auth_bypass","typescript"],"importance":"critical","source":{"repo":"https://github.com/vercel/next.js","license":"MIT","notes":"Distilled from common App Router mutation handlers and substring-bypass missing-auth patterns."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D280"]},"absent":{}}},{"id":"typescript-nextjs-auth-decoys","path":"fixtures/typescript_nextjs_auth_decoys","description":"Next.js mutating route without an authentication guard should be reported even when comments, imports, headers, and cookies look auth-related.","languages":["typescript"],"taxonomy":["auth_bypass","typescript"],"importance":"critical","source":{"repo":"https://github.com/vercel/next.js","license":"MIT","notes":"Distilled from common App Router mutation handlers where auth-shaped syntax does not enforce authorization."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D280"]},"absent":{}}},{"id":"typescript-nextjs-session-guard-safe","path":"fixtures/typescript_nextjs_session_guard","description":"Next.js mutating route with an explicit server-session guard should stay quiet.","languages":["typescript"],"taxonomy":["auth_bypass","typescript","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/vercel/next.js","license":"MIT","notes":"Distilled precision guard for App Router routes protected with server-side session checks."},"budget":{"max_seconds":5.0},"expect":{"present":{},"absent":{"danger":["SKY-D280"]}}},{"id":"typescript-nextjs-authjs-v5-safe","path":"fixtures/typescript_nextjs_authjs_v5_safe","description":"Next.js mutating route guarded through the official Auth.js v5 local auth adapter should stay quiet.","languages":["typescript"],"taxonomy":["auth_bypass","typescript","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/nextauthjs/next-auth","license":"ISC","notes":"Distilled from the official Auth.js pattern that exports auth from a local NextAuth adapter module."},"budget":{"max_seconds":5.0},"expect":{"present":{},"absent":{"danger":["SKY-D280"]}}},{"id":"typescript-server-action-prisma-unsafe","path":"fixtures/typescript_server_action_prisma_unsafe","description":"Next.js server action using Prisma unsafe raw SQL with interpolated form input should be reported.","languages":["typescript"],"taxonomy":["sql_injection","typescript"],"importance":"critical","source":{"repo":"https://github.com/prisma/prisma","license":"Apache-2.0","notes":"Distilled from common server-action and Prisma raw-query misuse patterns."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D281"]},"absent":{}}},{"id":"typescript-server-action-constant-safe","path":"fixtures/typescript_server_action_constant_safe","description":"Next.js server action with compile-time constant SQL substitutions should stay quiet.","languages":["typescript"],"taxonomy":["sql_injection","typescript","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/vercel/next.js","license":"MIT","notes":"Distilled precision guard for constant propagation in server-action SQL analysis."},"budget":{"max_seconds":5.0},"expect":{"present":{},"absent":{"danger":["SKY-D211","SKY-D281"]}}},{"id":"typescript-server-action-inline-unsafe","path":"fixtures/typescript_server_action_inline_unsafe","description":"Inline Next.js server action with dynamic SQL interpolation should be reported.","languages":["typescript"],"taxonomy":["sql_injection","typescript"],"importance":"critical","source":{"repo":"https://github.com/vercel/next.js","license":"MIT","notes":"Distilled from canonical inline use-server actions and unsafe dynamic SQL construction."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D281"]},"absent":{}}},{"id":"typescript-server-action-repository-unsafe","path":"fixtures/typescript_server_action_repository_unsafe","description":"Next.js server action input reaching concatenated SQL through a same-file repository class should be reported.","languages":["typescript"],"taxonomy":["sql_injection","typescript"],"importance":"critical","source":{"repo":"https://github.com/vercel/next.js","license":"MIT","notes":"Distilled from enterprise server-action repository layering where generic template matching has no fallback."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D281"]},"absent":{}}},{"id":"typescript-server-action-query-config-safe","path":"fixtures/typescript_server_action_query_config_safe","description":"Next.js server action using a helper-built parameterized text-and-values query config should stay quiet.","languages":["typescript"],"taxonomy":["sql_injection","typescript","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/brianc/node-postgres","license":"MIT","notes":"Distilled precision guard for node-postgres query configuration objects returned through a helper."},"budget":{"max_seconds":5.0},"expect":{"present":{},"absent":{"danger":["SKY-D211","SKY-D281"]}}},{"id":"typescript-server-action-trusted-runtime-safe","path":"fixtures/typescript_server_action_trusted_runtime_safe","description":"Next.js server action interpolating a trusted server timestamp should stay quiet because runtime variability is not user taint.","languages":["typescript"],"taxonomy":["sql_injection","typescript","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/vercel/next.js","license":"MIT","notes":"Distilled precision guard separating trusted runtime values from Server Action input taint."},"budget":{"max_seconds":5.0},"expect":{"present":{},"absent":{"danger":["SKY-D211","SKY-D281"]}}},{"id":"typescript-server-action-prisma-tag-safe","path":"fixtures/typescript_server_action_prisma_tag_safe","description":"Next.js server action using a proven Prisma parameterizing tagged template should stay quiet.","languages":["typescript"],"taxonomy":["sql_injection","typescript","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/prisma/prisma","license":"Apache-2.0","notes":"Distilled precision guard for Prisma Client parameterized tagged-template queries with import provenance."},"budget":{"max_seconds":5.0},"expect":{"present":{},"absent":{"danger":["SKY-D211","SKY-D281"]}}},{"id":"typescript-webhook-unverified","path":"fixtures/typescript_webhook_unverified","description":"Stripe webhook handler that parses raw request body before signature verification should be reported.","languages":["typescript"],"taxonomy":["auth_bypass","typescript"],"importance":"critical","source":{"repo":"https://github.com/stripe/stripe-node","license":"MIT","notes":"Distilled from provider webhook signature verification requirements."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D282"]},"absent":{}}},{"id":"typescript-webhook-nondominating-verifier","path":"fixtures/typescript_webhook_nondominating_verifier","description":"Stripe webhook verification of an unrelated payload after a side effect must not prove the handler safe.","languages":["typescript"],"taxonomy":["auth_bypass","typescript"],"importance":"critical","source":{"repo":"https://github.com/stripe/stripe-node","license":"MIT","notes":"Distilled from provider webhook requirements that the matching request payload be verified before it is trusted."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D282"]},"absent":{}}},{"id":"typescript-webhook-verified-safe","path":"fixtures/typescript_webhook_verified","description":"Stripe webhook handler that uses provider signature verification before trusting the event should stay quiet.","languages":["typescript"],"taxonomy":["auth_bypass","typescript","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/stripe/stripe-node","license":"MIT","notes":"Distilled precision guard for verified provider webhooks."},"budget":{"max_seconds":5.0},"scan":{"enable_secrets":true},"expect":{"present":{},"absent":{"danger":["SKY-D282"],"secrets":["SKY-S102"]}}},{"id":"typescript-cookie-explicit-false","path":"fixtures/typescript_cookie_explicit_false","description":"A session cookie with explicit false secure and httpOnly flags should be reported as insecure.","languages":["typescript"],"taxonomy":["cookie_security","typescript"],"importance":"critical","source":{"repo":"https://github.com/OWASP/CheatSheetSeries","license":"CC-BY-SA-4.0","notes":"Distilled from Session Management guidance for Secure and HttpOnly cookie attributes."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D252"]},"absent":{}}},{"id":"typescript-cookie-literal-safe","path":"fixtures/typescript_cookie_literal_safe","description":"A session cookie with literal true secure and httpOnly flags should stay quiet.","languages":["typescript"],"taxonomy":["cookie_security","typescript","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/OWASP/CheatSheetSeries","license":"CC-BY-SA-4.0","notes":"Distilled precision guard from Session Management guidance for Secure and HttpOnly cookie attributes."},"budget":{"max_seconds":5.0},"expect":{"present":{},"absent":{"danger":["SKY-D252"]}}},{"id":"java-ssrf-httpclient-send","path":"fixtures/java_ssrf_httpclient_send","description":"Java HttpClient request built from servlet-controlled URL and sent outbound should be reported as SSRF.","languages":["java"],"taxonomy":["ssrf","java"],"importance":"critical","source":{"repo":"https://github.com/OWASP/CheatSheetSeries","license":"CC-BY-SA-4.0","notes":"Distilled from SSRF prevention guidance around complete user-controlled URLs."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D216"]},"absent":{}}},{"id":"java-open-redirect-protocol-relative","path":"fixtures/java_open_redirect_protocol_relative","description":"Java redirect guarded only by startsWith('/') should still be reported because protocol-relative URLs bypass that guard.","languages":["java"],"taxonomy":["open_redirect","java"],"importance":"critical","source":{"repo":"https://github.com/OWASP/CheatSheetSeries","license":"CC-BY-SA-4.0","notes":"Distilled from unvalidated redirect allowlist guidance and protocol-relative bypasses."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D230"]},"absent":{}}},{"id":"java-ldap-xpath-injection","path":"fixtures/java_ldap_xpath_injection","description":"Java servlet parameters concatenated into LDAP filters and XPath expressions should be reported.","languages":["java"],"taxonomy":["ldap_injection","xpath_injection","java"],"importance":"critical","source":{"repo":"https://github.com/OWASP/CheatSheetSeries","license":"CC-BY-SA-4.0","notes":"Distilled from LDAP and XPath injection classes: user input changes interpreter expressions."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D240","SKY-D241"]},"absent":{}}},{"id":"go-command-shell-query","path":"fixtures/go_command_shell_query","description":"Go HTTP query parameter concatenated into a shell command should be reported as command injection.","languages":["go"],"taxonomy":["command_injection","go"],"importance":"critical","source":{"repo":"https://github.com/securego/gosec","license":"Apache-2.0","notes":"Distilled from shell execution and request-taint command injection patterns."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D212"]},"absent":{}}},{"id":"go-tar-symlink-escape","path":"fixtures/go_tar_symlink_escape","description":"Go tar extraction that creates archive-controlled symlinks without resolving the final target should be reported.","languages":["go"],"taxonomy":["path_traversal","go"],"importance":"critical","source":{"repo":"https://github.com/securego/gosec","license":"Apache-2.0","notes":"Distilled from archive extraction symlink escape patterns."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D215"]},"absent":{}}},{"id":"rust-shell-arg-taint","path":"fixtures/rust_shell_arg_taint","description":"Rust CLI argument passed through sh -c should be reported as command injection.","languages":["rust"],"taxonomy":["command_injection","rust"],"importance":"critical","source":{"repo":"https://github.com/OWASP/CheatSheetSeries","license":"CC-BY-SA-4.0","notes":"Distilled from OS command injection guidance around shell invocation and externally influenced input."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D212"]},"absent":{}}},{"id":"rust-path-filename-safe","path":"fixtures/rust_path_filename_safe","description":"Rust path input reduced to file_name before fixed-directory access should stay quiet.","languages":["rust"],"taxonomy":["path_traversal","rust","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/rust-lang/rust-clippy","license":"MIT OR Apache-2.0","notes":"Distilled precision guard for basename-style path sanitization in Rust."},"budget":{"max_seconds":5.0},"expect":{"present":{},"absent":{"danger":["SKY-D215"]}}},{"id":"dart-http-tainted-url","path":"fixtures/dart_http_tainted_url","description":"Dart http.get with caller-controlled Uri.parse input should be reported as SSRF.","languages":["dart"],"taxonomy":["ssrf","dart"],"importance":"critical","source":{"repo":"https://github.com/dart-lang/http","license":"BSD-3-Clause","notes":"Distilled from outbound request APIs that accept caller-controlled URLs."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D216"]},"absent":{}}},{"id":"dart-uri-https-safe","path":"fixtures/dart_uri_https_safe","description":"Dart request built with Uri.https fixed host and tainted query parameter should stay quiet.","languages":["dart"],"taxonomy":["ssrf","dart","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/dart-lang/http","license":"BSD-3-Clause","notes":"Distilled precision guard for fixed-host Uri.https construction."},"budget":{"max_seconds":5.0},"expect":{"present":{},"absent":{"danger":["SKY-D216"]}}},{"id":"php-request-include","path":"fixtures/php_request_include","description":"PHP include using request-controlled template path should be reported as path traversal.","languages":["php"],"taxonomy":["path_traversal","php"],"importance":"critical","source":{"repo":"https://github.com/OWASP/CheatSheetSeries","license":"CC-BY-SA-4.0","notes":"Distilled from file inclusion and path traversal guidance."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D215"]},"absent":{}}},{"id":"shell-eval-arg","path":"fixtures/shell_eval_arg","description":"Shell positional argument assigned to a command and passed to eval should be reported as command injection.","languages":["shell"],"taxonomy":["command_injection","shell"],"importance":"critical","source":{"repo":"https://github.com/koalaman/shellcheck","license":"GPL-3.0","notes":"Distilled from shell injection guidance around eval of externally controlled input."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D212"]},"absent":{}}},{"id":"shell-source-arg","path":"fixtures/shell_source_arg","description":"Shell source of a positional-argument path should be reported because the sourced file executes in-process.","languages":["shell"],"taxonomy":["command_injection","shell"],"importance":"critical","source":{"repo":"https://github.com/koalaman/shellcheck","license":"GPL-3.0","notes":"Distilled from dynamic source/include patterns that execute attacker-selected shell code."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D212"]},"absent":{}}},{"id":"shell-c-flag-arg","path":"fixtures/shell_c_flag_arg","description":"Shell command string passed to bash -c from a positional argument should be reported.","languages":["shell"],"taxonomy":["command_injection","shell"],"importance":"critical","source":{"repo":"https://github.com/OWASP/CheatSheetSeries","license":"CC-BY-SA-4.0","notes":"Distilled from OS command injection guidance around shell interpreters and command strings."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D212"]},"absent":{}}},{"id":"shell-curl-tainted-url","path":"fixtures/shell_curl_tainted_url","description":"Shell read input passed as a curl URL should be reported as SSRF.","languages":["shell"],"taxonomy":["ssrf","shell"],"importance":"critical","source":{"repo":"https://github.com/OWASP/CheatSheetSeries","license":"CC-BY-SA-4.0","notes":"Distilled from SSRF guidance around complete user-controlled URLs."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D216"]},"absent":{}}},{"id":"shell-curl-fixed-host-path","path":"fixtures/shell_curl_fixed_host_path","description":"Shell curl to a fixed host with only the path segment tainted should stay quiet for SSRF.","languages":["shell"],"taxonomy":["ssrf","shell","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/OWASP/CheatSheetSeries","license":"CC-BY-SA-4.0","notes":"Distilled precision guard for fixed-destination requests with attacker-controlled path data."},"budget":{"max_seconds":5.0},"expect":{"present":{},"absent":{"danger":["SKY-D216"]}}},{"id":"shell-path-read-arg","path":"fixtures/shell_path_read_arg","description":"Shell positional argument interpolated into a filesystem path should be reported as path traversal.","languages":["shell"],"taxonomy":["path_traversal","shell"],"importance":"critical","source":{"repo":"https://github.com/OWASP/CheatSheetSeries","license":"CC-BY-SA-4.0","notes":"Distilled from path traversal guidance around joining untrusted file names to fixed directories."},"budget":{"max_seconds":5.0},"expect":{"present":{"danger":["SKY-D215"]},"absent":{}}},{"id":"shell-basename-safe","path":"fixtures/shell_basename_safe","description":"Shell positional argument reduced with basename before fixed-directory file access should stay quiet for path traversal.","languages":["shell"],"taxonomy":["path_traversal","shell","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/OWASP/CheatSheetSeries","license":"CC-BY-SA-4.0","notes":"Distilled precision guard for basename-style shell path sanitization."},"budget":{"max_seconds":5.0},"expect":{"present":{},"absent":{"danger":["SKY-D215"]}}}]},"cases":[{"id":"sql-tainted-param","status":"complete","elapsedSeconds":1.214078,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4fowsv5i/sql_tainted_param","nativeReport":{"definitions":{"app.run_query":{"name":"app.run_query","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4fowsv5i/sql_tainted_param/app.py","line":1,"type":"function","loc":2,"complexity":1,"calls":["app.cursor.execute","app.run_query.cursor","app.run_query.query","app.run_query.user_id"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"run_query","full_name":"app.run_query","simple_name":"run_query","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4fowsv5i/sql_tainted_param/app.py","basename":"app.py","line":1,"confidence":90,"references":0,"calls":["app.run_query.cursor","app.run_query.query","app.cursor.execute","app.run_query.user_id"],"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.py","qualified_name":"app.run_query","kind":"function","line":1,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4fowsv5i/sql_tainted_param","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4fowsv5i/sql_tainted_param","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"maintainability_inventory":[],"total_loc":2,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":2,"files":1,"dead_code":1,"security":1,"rules":{"SKY-D211":1,"unused-functions":1},"severities":{"CRITICAL":1,"LOW":1}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":1,"unknown":0,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D211","severity":"CRITICAL","message":"Possible SQL injection: tainted or string-built query.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4fowsv5i/sql_tainted_param/app.py","line":2,"col":4,"symbol":"run_query","metadata":{"receiver_resolution":{"status":"unknown","qualified_name":null,"kind":"unknown","file":null,"line":null,"steps":[],"limitations":["Receiver or binding is unavailable, reassigned, conditional, dynamically modified, inherited, or supported only by an annotation."],"effects":{"filesystem":"unknown","database":"unknown"},"receiver_is_path":null,"receiver_is_non_path":null,"path_argument_index":null,"bound_method":null,"path_argument_name":null},"security_trace":{"version":1,"trace_id":"c3c8e651f58b14b629155e8e","status":"partial","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"5a473f0b950792eae739aa321d9029ea88b429686e8323c22d69c6b1dfe67a33","selected_file_count":1},"steps":[{"id":"5884bf03fb336af92ae6ab11","kind":"unknown","message":"No source-resolved project callers; external/dynamic callers remain unknown.","file":"app.py","line":1,"column":0,"source_sha256":"68f036f64d537642ee18b583dabfd2f6973ea264df8bb8657189268252600bea"},{"id":"7cfe200bb28f13cf675fd830","kind":"parameter","message":"Function parameter: query","file":"app.py","line":1,"column":22,"source_sha256":"68f036f64d537642ee18b583dabfd2f6973ea264df8bb8657189268252600bea","parent_id":"5884bf03fb336af92ae6ab11"},{"id":"f088b8060f38351204b402b5","kind":"sink","message":"Static finding location: SKY-D211","file":"app.py","line":2,"column":4,"source_sha256":"68f036f64d537642ee18b583dabfd2f6973ea264df8bb8657189268252600bea","parent_id":"7cfe200bb28f13cf675fd830"}],"edges":[{"from":"5884bf03fb336af92ae6ab11","to":"7cfe200bb28f13cf675fd830","kind":"data"},{"from":"7cfe200bb28f13cf675fd830","to":"f088b8060f38351204b402b5","kind":"data"}],"receiver":{"status":"unknown","qualified_name":null,"kind":"unknown","effects":{"filesystem":"unknown","database":"unknown"},"receiver_is_path":null,"receiver_is_non_path":null,"path_argument_index":null,"bound_method":null,"line":null,"path_argument_name":null,"limitations":["Receiver or binding is unavailable, reassigned, conditional, dynamically modified, inherited, or supported only by an annotation."],"steps":[]},"file_digests":{"app.py":"68f036f64d537642ee18b583dabfd2f6973ea264df8bb8657189268252600bea"},"limitations":["No source-resolved project callers; external/dynamic callers remain unknown.","Receiver or binding is unavailable, reassigned, conditional, dynamically modified, inherited, or supported only by an annotation.","Sink receiver/provider is unresolved; its name does not prove sink identity.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"critical","highest_severity":"CRITICAL","finding_count":1,"severity_counts":{"CRITICAL":1,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"critical","highest_severity":"CRITICAL","finding_count":1,"severity_counts":{"CRITICAL":1,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[90,90]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4fowsv5i/sql_tainted_param","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"sql-constant-format","status":"complete","elapsedSeconds":0.80929,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-u5wxkd68/sql_constant_format","nativeReport":{"definitions":{"app.load_users":{"name":"app.load_users","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-u5wxkd68/sql_constant_format/app.py","line":1,"type":"function","loc":3,"complexity":1,"calls":["app.cursor.execute","app.load_users.cursor","app.load_users.query"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"load_users","full_name":"app.load_users","simple_name":"load_users","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-u5wxkd68/sql_constant_format/app.py","basename":"app.py","line":1,"confidence":90,"references":0,"calls":["app.load_users.cursor","app.cursor.execute","app.load_users.query"],"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.py","qualified_name":"app.load_users","kind":"function","line":1,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]},{"file":"app.py","qualified_name":"app.load_users.query","kind":"variable","line":2,"classification":"alive","decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":1}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":2,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1,"alive":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-u5wxkd68/sql_constant_format","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-u5wxkd68/sql_constant_format","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":3,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":1,"files":1,"dead_code":1,"rules":{"unused-functions":1},"severities":{"LOW":1}}],"finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":0,"by_status":{"source_to_sink":0,"partial":0,"unknown":0,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[90,90]},"finding_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-u5wxkd68/sql_constant_format","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"ssrf-tainted-host","status":"complete","elapsedSeconds":1.019035,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-rtz14qod/ssrf_tainted_host","nativeReport":{"definitions":{"app.fetch_host":{"name":"app.fetch_host","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-rtz14qod/ssrf_tainted_host/app.py","line":8,"type":"function","loc":3,"complexity":1,"calls":["app.fetch_host.host","flask.request","flask.request.args","requests","requests.get"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]}},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.py","qualified_name":"app.app","kind":"variable","line":4,"classification":"alive","decision":{"classification":"alive","primary_reason":"Called during module import","reason_tags":["top_level_execution"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"top_level_execution","role":"supports_live","reason":"called during module top-level execution","source":"python_ast","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.fetch_host","kind":"function","line":8,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.fetch_host.host","kind":"variable","line":9,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":3,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":3},"candidate_decisions":{"reported":0,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-rtz14qod/ssrf_tainted_host","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-rtz14qod/ssrf_tainted_host","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"maintainability_inventory":[],"total_loc":7,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":1,"files":1,"security":1,"rules":{"SKY-D216":1},"severities":{"CRITICAL":1}}],"finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D216","severity":"CRITICAL","message":"Possible SSRF: tainted URL passed to HTTP client.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-rtz14qod/ssrf_tainted_host/app.py","line":10,"col":11,"symbol":"fetch_host","metadata":{"security_evidence":{"evidence_kind":"source_to_sink","source":"interpolated URL expression","sink":"requests.get","path":["interpolated URL expression","url expression `f'https://{host}/status'`","HTTP sink `requests.get`"],"guards_seen":[],"guards_missing":["URL host or scheme allowlist","private, loopback, and metadata host rejection"],"confidence_reason":"Untrusted URL data can influence the outbound HTTP request target.","test_hint":"Assert untrusted input cannot control the request host and private or metadata URLs are rejected before the HTTP client call.","fix_shape":"validate and allowlist the URL before the HTTP request","entrypoint":"fetch_host"},"untrusted_source":"request data `request.args.get`","security_trace":{"version":1,"trace_id":"eeb7f3b7b408df1cd56a514b","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"5a473f0b950792eae739aa321d9029ea88b429686e8323c22d69c6b1dfe67a33","selected_file_count":1},"steps":[{"id":"cc2c6aa210603c7bacec8784","kind":"sink","message":"Static finding location: SKY-D216","file":"app.py","line":10,"column":0,"source_sha256":"e986b76ad4f2ebeac368d65019b08499d86a2a4093f6ebca43e9a2220e706cd4"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"app.py":"e986b76ad4f2ebeac368d65019b08499d86a2a4093f6ebca43e9a2220e706cd4"},"limitations":["No unambiguous Python call at the reported location; the original finding is retained.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"compliance_tags":[{"framework":"OWASP_TOP10","requirement":"A10:2021","title":"SSRF"},{"framework":"PCI_DSS_4","requirement":"6.2.4","title":"Security Flaws"}],"compliance_display":["OWASP Top 10 A10:2021","PCI DSS 4.0 6.2.4"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"critical","highest_severity":"CRITICAL","finding_count":1,"severity_counts":{"CRITICAL":1,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"critical","highest_severity":"CRITICAL","finding_count":1,"severity_counts":{"CRITICAL":1,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"none","candidate_count":0,"confidence_range":null},"finding_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-rtz14qod/ssrf_tainted_host","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"ssrf-helper-parameter-safe","status":"complete","elapsedSeconds":0.675868,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-dfiuzk_l/ssrf_helper_parameter_safe","nativeReport":{"definitions":{"app.fetch_host":{"name":"app.fetch_host","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-dfiuzk_l/ssrf_helper_parameter_safe/app.py","line":4,"type":"function","loc":4,"complexity":1,"calls":["app.fetch_host.host","requests","requests.get"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"fetch_host","full_name":"app.fetch_host","simple_name":"fetch_host","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-dfiuzk_l/ssrf_helper_parameter_safe/app.py","basename":"app.py","line":4,"confidence":90,"references":0,"calls":["requests","requests.get","app.fetch_host.host"],"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.py","qualified_name":"app.fetch_host","kind":"function","line":4,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-dfiuzk_l/ssrf_helper_parameter_safe","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-dfiuzk_l/ssrf_helper_parameter_safe","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":3,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":1,"files":1,"dead_code":1,"rules":{"unused-functions":1},"severities":{"LOW":1}}],"finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":0,"by_status":{"source_to_sink":0,"partial":0,"unknown":0,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[90,90]},"finding_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-dfiuzk_l/ssrf_helper_parameter_safe","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"ssrf-fixed-host-path","status":"complete","elapsedSeconds":2.028246,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-gpfhlwjs/ssrf_fixed_host_path","nativeReport":{"definitions":{"app.fetch_user":{"name":"app.fetch_user","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-gpfhlwjs/ssrf_fixed_host_path/app.py","line":4,"type":"function","loc":2,"complexity":1,"calls":["app.fetch_user.user_id","requests","requests.get"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"fetch_user","full_name":"app.fetch_user","simple_name":"fetch_user","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-gpfhlwjs/ssrf_fixed_host_path/app.py","basename":"app.py","line":4,"confidence":90,"references":0,"calls":["requests","app.fetch_user.user_id","requests.get"],"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.py","qualified_name":"app.fetch_user","kind":"function","line":4,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-gpfhlwjs/ssrf_fixed_host_path","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-gpfhlwjs/ssrf_fixed_host_path","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":3,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":1,"files":1,"dead_code":1,"rules":{"unused-functions":1},"severities":{"LOW":1}}],"finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":0,"by_status":{"source_to_sink":0,"partial":0,"unknown":0,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[90,90]},"finding_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-gpfhlwjs/ssrf_fixed_host_path","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"subprocess-alias-shell","status":"complete","elapsedSeconds":1.578455,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-t3xzsepv/subprocess_alias_shell","nativeReport":{"definitions":{"app.list_files":{"name":"app.list_files","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-t3xzsepv/subprocess_alias_shell/app.py","line":4,"type":"function","loc":2,"complexity":1,"calls":["subprocess","subprocess.run"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"list_files","full_name":"app.list_files","simple_name":"list_files","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-t3xzsepv/subprocess_alias_shell/app.py","basename":"app.py","line":4,"confidence":90,"references":0,"calls":["subprocess","subprocess.run"],"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.py","qualified_name":"app.list_files","kind":"function","line":4,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-t3xzsepv/subprocess_alias_shell","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-t3xzsepv/subprocess_alias_shell","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"maintainability_inventory":[],"total_loc":3,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":2,"files":1,"dead_code":1,"security":1,"rules":{"SKY-D209":1,"unused-functions":1},"severities":{"HIGH":1,"LOW":1}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D209","severity":"HIGH","message":"subprocess call with shell=True","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-t3xzsepv/subprocess_alias_shell/app.py","line":5,"col":11,"metadata":{"security_trace":{"version":1,"trace_id":"c242f35249d29cd5f78248e6","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"5a473f0b950792eae739aa321d9029ea88b429686e8323c22d69c6b1dfe67a33","selected_file_count":1},"steps":[{"id":"38b7b38f840c4ae40f71346a","kind":"sink","message":"Static finding location: SKY-D209","file":"app.py","line":5,"column":0,"source_sha256":"b33d6f7a400cc397a6c1ae6bae2008344e8a0b6cbb1130ab6f938948f1bcd996"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"app.py":"b33d6f7a400cc397a6c1ae6bae2008344e8a0b6cbb1130ab6f938948f1bcd996"},"limitations":["No unambiguous Python call at the reported location; the original finding is retained.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[90,90]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-t3xzsepv/subprocess_alias_shell","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"yaml-safeloader-positional","status":"complete","elapsedSeconds":2.381755,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-td6a89zg/yaml_safeloader_positional","nativeReport":{"definitions":{"app.parse_config":{"name":"app.parse_config","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-td6a89zg/yaml_safeloader_positional/app.py","line":4,"type":"function","loc":2,"complexity":1,"calls":["app.parse_config.payload","yaml","yaml.SafeLoader","yaml.load"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"parse_config","full_name":"app.parse_config","simple_name":"parse_config","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-td6a89zg/yaml_safeloader_positional/app.py","basename":"app.py","line":4,"confidence":90,"references":0,"calls":["yaml.load","app.parse_config.payload","yaml.SafeLoader","yaml"],"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.py","qualified_name":"app.parse_config","kind":"function","line":4,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-td6a89zg/yaml_safeloader_positional","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-td6a89zg/yaml_safeloader_positional","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":3,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":1,"files":1,"dead_code":1,"rules":{"unused-functions":1},"severities":{"LOW":1}}],"finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":0,"by_status":{"source_to_sink":0,"partial":0,"unknown":0,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[90,90]},"finding_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-td6a89zg/yaml_safeloader_positional","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"path-traversal-tainted-join","status":"complete","elapsedSeconds":1.706334,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-qi8uh7_i/path_traversal_tainted_join","nativeReport":{"definitions":{"app.read_upload":{"name":"app.read_upload","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-qi8uh7_i/path_traversal_tainted_join/app.py","line":11,"type":"function","loc":5,"complexity":1,"calls":["app.BASE_DIR","app.handle.read","app.open","app.read_upload.filename","app.read_upload.handle","app.read_upload.path","flask.request","flask.request.args","os","os.path"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]}},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.py","qualified_name":"app.BASE_DIR","kind":"variable","line":7,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":60,"threshold":0},"evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.app","kind":"variable","line":5,"classification":"alive","decision":{"classification":"alive","primary_reason":"Called during module import","reason_tags":["top_level_execution"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"top_level_execution","role":"supports_live","reason":"called during module top-level execution","source":"python_ast","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.read_upload","kind":"function","line":11,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.read_upload.filename","kind":"variable","line":12,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.read_upload.handle","kind":"variable","line":14,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.read_upload.path","kind":"variable","line":13,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"attribute_name_match","role":"context","reason":"unverified same_file_attr match","source":"attribute_reference","confidence":0.9643,"details":{"bucket":"same_file_attr"}},{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":6,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":6},"candidate_decisions":{"reported":0,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-qi8uh7_i/path_traversal_tainted_join","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-qi8uh7_i/path_traversal_tainted_join","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":2,"maintainability_inventory":[],"total_loc":10,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":2,"files":1,"security":2,"rules":{"SKY-D215":1,"SKY-D325":1},"severities":{"HIGH":1,"MEDIUM":1}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":2,"by_status":{"source_to_sink":0,"partial":2,"unknown":0,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D215","severity":"HIGH","message":"Possible path traversal: request data `request.args.get()` reaches this filesystem path through project callers with no containment check; resolve it and check it stays under the base directory.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-qi8uh7_i/path_traversal_tainted_join/app.py","line":14,"col":9,"symbol":"read_upload","metadata":{"security_evidence":{"evidence_kind":"python_path_taint","source":"request data `request.args.get()`","sources":["request data `request.args.get()`"],"sink":"filesystem path operation","path":["untrusted input from request data `request.args.get()`","`filename` = request.args.get(...)","passes through `os.path.join(...)`","`path` = os.path.join(...)","path `path` reaches the filesystem path operation"],"guards_seen":[],"guards_missing":["resolved-path containment check against a fixed base"],"analysis_complete":false},"path_operand":{"line":14,"col":14,"end_line":14,"end_col":18},"path_provenance":{"version":1,"status":"untrusted","function":"read_upload","complete_project":false,"untrusted":[["app.py:12 request data `request.args.get()`","app.py:12 `filename` = request.args.get(...)","app.py:13 passes through `os.path.join(...)`","app.py:13 `path` = os.path.join(...)","app.py:14 path `path` reaches the filesystem path operation"]],"safe":[["app.py:7 literal","app.py:7 `BASE_DIR` = <literal>","app.py:13 passes through `os.path.join(...)`","app.py:13 `path` = os.path.join(...)","app.py:14 path `path` reaches the filesystem path operation"]]},"path_source":"resolved_caller","security_trace":{"version":1,"trace_id":"1c909d72aee293eeafa4d962","status":"partial","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"5a473f0b950792eae739aa321d9029ea88b429686e8323c22d69c6b1dfe67a33","selected_file_count":1},"steps":[{"id":"b60e69d1d1449bdaadf57a8f","kind":"literal","message":"Literal value (content withheld).","file":"app.py","line":7,"column":11,"source_sha256":"81aae6e37baab37be7fa0e7c99530e3ebfa1f7da562053c138e126ae768ca540"},{"id":"47b20e53703018e8403f163a","kind":"assignment","message":"Assignment provides: BASE_DIR","file":"app.py","line":7,"column":0,"source_sha256":"81aae6e37baab37be7fa0e7c99530e3ebfa1f7da562053c138e126ae768ca540","parent_id":"b60e69d1d1449bdaadf57a8f"},{"id":"ec689f674a440190c68ea78f","kind":"source","message":"Imported Flask request input call: flask.request.args.get","file":"app.py","line":12,"column":15,"source_sha256":"81aae6e37baab37be7fa0e7c99530e3ebfa1f7da562053c138e126ae768ca540"},{"id":"cf6a8245f985982c5cf7f379","kind":"assignment","message":"Assignment provides: filename","file":"app.py","line":12,"column":4,"source_sha256":"81aae6e37baab37be7fa0e7c99530e3ebfa1f7da562053c138e126ae768ca540","parent_id":"ec689f674a440190c68ea78f"},{"id":"bfbf4f072c02bc2390fac0d1","kind":"call","message":"Call expression; implementation is followed only when source-resolved.","file":"app.py","line":13,"column":11,"source_sha256":"81aae6e37baab37be7fa0e7c99530e3ebfa1f7da562053c138e126ae768ca540","parent_id":"47b20e53703018e8403f163a"},{"id":"9fdac3e1c4669233a713d44d","kind":"assignment","message":"Assignment provides: path","file":"app.py","line":13,"column":4,"source_sha256":"81aae6e37baab37be7fa0e7c99530e3ebfa1f7da562053c138e126ae768ca540","parent_id":"bfbf4f072c02bc2390fac0d1"},{"id":"8b00250c75cd4086df6561e4","kind":"receiver","message":"Callee resolves statically to builtins.open.","file":"app.py","line":14,"column":0,"source_sha256":"81aae6e37baab37be7fa0e7c99530e3ebfa1f7da562053c138e126ae768ca540"},{"id":"05718fb31dbde39c94977ea4","kind":"guard","message":"Observed With syntax; safety/reachability is not established.","file":"app.py","line":14,"column":4,"source_sha256":"81aae6e37baab37be7fa0e7c99530e3ebfa1f7da562053c138e126ae768ca540"},{"id":"1e0f407b520f0f310bf39090","kind":"sink","message":"Static finding location: SKY-D215","file":"app.py","line":14,"column":9,"source_sha256":"81aae6e37baab37be7fa0e7c99530e3ebfa1f7da562053c138e126ae768ca540","parent_id":"9fdac3e1c4669233a713d44d"}],"edges":[{"from":"05718fb31dbde39c94977ea4","to":"1e0f407b520f0f310bf39090","kind":"observed_guard"},{"from":"47b20e53703018e8403f163a","to":"bfbf4f072c02bc2390fac0d1","kind":"data"},{"from":"8b00250c75cd4086df6561e4","to":"1e0f407b520f0f310bf39090","kind":"receiver"},{"from":"9fdac3e1c4669233a713d44d","to":"1e0f407b520f0f310bf39090","kind":"data"},{"from":"b60e69d1d1449bdaadf57a8f","to":"47b20e53703018e8403f163a","kind":"data"},{"from":"bfbf4f072c02bc2390fac0d1","to":"9fdac3e1c4669233a713d44d","kind":"data"},{"from":"cf6a8245f985982c5cf7f379","to":"bfbf4f072c02bc2390fac0d1","kind":"data"},{"from":"ec689f674a440190c68ea78f","to":"cf6a8245f985982c5cf7f379","kind":"data"}],"receiver":{"status":"resolved","qualified_name":"builtins.open","kind":"function","effects":{"filesystem":"wrapped_path_argument","database":"none"},"receiver_is_path":null,"receiver_is_non_path":null,"path_argument_index":0,"bound_method":null,"line":null,"path_argument_name":null,"limitations":[],"steps":[{"kind":"source_binding","file":"app.py","line":14,"description":"Callee resolves statically to builtins.open.","source_sha256":"81aae6e37baab37be7fa0e7c99530e3ebfa1f7da562053c138e126ae768ca540"}]},"file_digests":{"app.py":"81aae6e37baab37be7fa0e7c99530e3ebfa1f7da562053c138e126ae768ca540"},"limitations":["Call return/provider is unresolved; no sanitizer or return-value guarantee is assumed.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"rule_id":"SKY-D325","severity":"MEDIUM","message":"Possible symlink-following or unbounded read: request data `request.args.get()` reaches this path through project callers; require a regular in-root file and a size cap.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-qi8uh7_i/path_traversal_tainted_join/app.py","line":14,"col":9,"symbol":"read_upload","metadata":{"security_evidence":{"evidence_kind":"python_path_taint","source":"request data `request.args.get()`","sources":["request data `request.args.get()`"],"sink":"filesystem read","path":["untrusted input from request data `request.args.get()`","`filename` = request.args.get(...)","passes through `os.path.join(...)`","`path` = os.path.join(...)","path `path` reaches the filesystem read"],"guards_seen":[],"guards_missing":["resolved-path containment check against a fixed base"],"analysis_complete":false},"path_operand":{"line":14,"col":14,"end_line":14,"end_col":18},"path_provenance":{"version":1,"status":"untrusted","function":"read_upload","complete_project":false,"untrusted":[["app.py:12 request data `request.args.get()`","app.py:12 `filename` = request.args.get(...)","app.py:13 passes through `os.path.join(...)`","app.py:13 `path` = os.path.join(...)","app.py:14 path `path` reaches the filesystem read"]],"safe":[["app.py:7 literal","app.py:7 `BASE_DIR` = <literal>","app.py:13 passes through `os.path.join(...)`","app.py:13 `path` = os.path.join(...)","app.py:14 path `path` reaches the filesystem read"]]},"path_source":"resolved_caller","security_trace":{"version":1,"trace_id":"c4d8b0a4dae031f735aff88d","status":"partial","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"5a473f0b950792eae739aa321d9029ea88b429686e8323c22d69c6b1dfe67a33","selected_file_count":1},"steps":[{"id":"75b9b914f016978b5269556a","kind":"literal","message":"Literal value (content withheld).","file":"app.py","line":7,"column":11,"source_sha256":"81aae6e37baab37be7fa0e7c99530e3ebfa1f7da562053c138e126ae768ca540"},{"id":"100c39ddf403f9a5b9378e3f","kind":"assignment","message":"Assignment provides: BASE_DIR","file":"app.py","line":7,"column":0,"source_sha256":"81aae6e37baab37be7fa0e7c99530e3ebfa1f7da562053c138e126ae768ca540","parent_id":"75b9b914f016978b5269556a"},{"id":"3059166e0eac97768de7f382","kind":"source","message":"Imported Flask request input call: flask.request.args.get","file":"app.py","line":12,"column":15,"source_sha256":"81aae6e37baab37be7fa0e7c99530e3ebfa1f7da562053c138e126ae768ca540"},{"id":"241381aa46dda092152a0bd6","kind":"assignment","message":"Assignment provides: filename","file":"app.py","line":12,"column":4,"source_sha256":"81aae6e37baab37be7fa0e7c99530e3ebfa1f7da562053c138e126ae768ca540","parent_id":"3059166e0eac97768de7f382"},{"id":"311ded9bf18cf4f74600db65","kind":"call","message":"Call expression; implementation is followed only when source-resolved.","file":"app.py","line":13,"column":11,"source_sha256":"81aae6e37baab37be7fa0e7c99530e3ebfa1f7da562053c138e126ae768ca540","parent_id":"100c39ddf403f9a5b9378e3f"},{"id":"6a21aa33e4ac9dacd7891676","kind":"assignment","message":"Assignment provides: path","file":"app.py","line":13,"column":4,"source_sha256":"81aae6e37baab37be7fa0e7c99530e3ebfa1f7da562053c138e126ae768ca540","parent_id":"311ded9bf18cf4f74600db65"},{"id":"1c1081a27f3c7ca05dd99542","kind":"receiver","message":"Callee resolves statically to builtins.open.","file":"app.py","line":14,"column":0,"source_sha256":"81aae6e37baab37be7fa0e7c99530e3ebfa1f7da562053c138e126ae768ca540"},{"id":"da4db473fb0caeb47848fb44","kind":"guard","message":"Observed With syntax; safety/reachability is not established.","file":"app.py","line":14,"column":4,"source_sha256":"81aae6e37baab37be7fa0e7c99530e3ebfa1f7da562053c138e126ae768ca540"},{"id":"c65e97bb92a56492aef87509","kind":"sink","message":"Static finding location: SKY-D325","file":"app.py","line":14,"column":9,"source_sha256":"81aae6e37baab37be7fa0e7c99530e3ebfa1f7da562053c138e126ae768ca540","parent_id":"6a21aa33e4ac9dacd7891676"}],"edges":[{"from":"100c39ddf403f9a5b9378e3f","to":"311ded9bf18cf4f74600db65","kind":"data"},{"from":"1c1081a27f3c7ca05dd99542","to":"c65e97bb92a56492aef87509","kind":"receiver"},{"from":"241381aa46dda092152a0bd6","to":"311ded9bf18cf4f74600db65","kind":"data"},{"from":"3059166e0eac97768de7f382","to":"241381aa46dda092152a0bd6","kind":"data"},{"from":"311ded9bf18cf4f74600db65","to":"6a21aa33e4ac9dacd7891676","kind":"data"},{"from":"6a21aa33e4ac9dacd7891676","to":"c65e97bb92a56492aef87509","kind":"data"},{"from":"75b9b914f016978b5269556a","to":"100c39ddf403f9a5b9378e3f","kind":"data"},{"from":"da4db473fb0caeb47848fb44","to":"c65e97bb92a56492aef87509","kind":"observed_guard"}],"receiver":{"status":"resolved","qualified_name":"builtins.open","kind":"function","effects":{"filesystem":"wrapped_path_argument","database":"none"},"receiver_is_path":null,"receiver_is_non_path":null,"path_argument_index":0,"bound_method":null,"line":null,"path_argument_name":null,"limitations":[],"steps":[{"kind":"source_binding","file":"app.py","line":14,"description":"Callee resolves statically to builtins.open.","source_sha256":"81aae6e37baab37be7fa0e7c99530e3ebfa1f7da562053c138e126ae768ca540"}]},"file_digests":{"app.py":"81aae6e37baab37be7fa0e7c99530e3ebfa1f7da562053c138e126ae768ca540"},"limitations":["Call return/provider is unresolved; no sanitizer or return-value guarantee is assumed.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"high","highest_severity":"HIGH","finding_count":2,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":1,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"high","highest_severity":"HIGH","finding_count":2,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":1,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"none","candidate_count":0,"confidence_range":null},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-qi8uh7_i/path_traversal_tainted_join","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"path-traversal-basename","status":"complete","elapsedSeconds":1.110468,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-lktpr8_j/path_traversal_basename","nativeReport":{"definitions":{"app.read_upload":{"name":"app.read_upload","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-lktpr8_j/path_traversal_basename/app.py","line":11,"type":"function","loc":5,"complexity":1,"calls":["app.BASE_DIR","app.handle.read","app.open","app.read_upload.handle","app.read_upload.path","app.read_upload.safe_name","flask.request","flask.request.args","os","os.path"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]}},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.py","qualified_name":"app.BASE_DIR","kind":"variable","line":7,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":60,"threshold":0},"evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.app","kind":"variable","line":5,"classification":"alive","decision":{"classification":"alive","primary_reason":"Called during module import","reason_tags":["top_level_execution"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"top_level_execution","role":"supports_live","reason":"called during module top-level execution","source":"python_ast","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.read_upload","kind":"function","line":11,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.read_upload.handle","kind":"variable","line":14,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.read_upload.path","kind":"variable","line":13,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"attribute_name_match","role":"context","reason":"unverified same_file_attr match","source":"attribute_reference","confidence":0.019286,"details":{"bucket":"same_file_attr"}},{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.read_upload.safe_name","kind":"variable","line":12,"classification":"alive","decision":{"classification":"alive","primary_reason":"Reachable from root","reason_tags":["reachable_from_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"reachable_from_root","role":"supports_live","reason":"reachable from inferred root","source":"reachability","confidence":1.0,"details":{}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":6,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":6},"candidate_decisions":{"reported":0,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-lktpr8_j/path_traversal_basename","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-lktpr8_j/path_traversal_basename","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":10,"grade_categories":["security","dead_code"],"finding_type_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":0,"by_status":{"source_to_sink":0,"partial":0,"unknown":0,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"none","candidate_count":0,"confidence_range":null},"finding_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-lktpr8_j/path_traversal_basename","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"xss-mark-safe","status":"complete","elapsedSeconds":1.441047,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9rp0hrzq/xss_mark_safe","nativeReport":{"definitions":{"app.render_name":{"name":"app.render_name","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9rp0hrzq/xss_mark_safe/app.py","line":4,"type":"function","loc":2,"complexity":1,"calls":["app.render_name.name","markupsafe.Markup"],"called_by":[],"dead":true,"dead_code_classification":"uncertain","dead_code_evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"weak helper function","source":"reference_safe_policy","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; No static references; Not exported","reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":1,"confidence":90,"threshold":0},"dead_code_reason":"Uncertainty evidence present; No static references; Not exported","dead_code_reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.py","qualified_name":"app.render_name","kind":"function","line":4,"classification":"uncertain","decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; No static references; Not exported","reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":1,"confidence":90,"threshold":0},"evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"weak helper function","source":"reference_safe_policy","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[{"name":"render_name","full_name":"app.render_name","simple_name":"render_name","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9rp0hrzq/xss_mark_safe/app.py","basename":"app.py","line":4,"confidence":90,"references":0,"calls":["markupsafe.Markup","app.render_name.name"],"confidence_factors":["public_name"],"dead_code_classification":"uncertain","dead_code_evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"weak helper function","source":"reference_safe_policy","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; No static references; Not exported","reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":1,"confidence":90,"threshold":0},"dead_code_reason":"Uncertainty evidence present; No static references; Not exported","dead_code_reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"abstained"}],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"uncertain":1},"uncertainty_reasons":{"weak helper function":1},"candidate_decisions":{"reported":0,"rescued":0,"abstained":1}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9rp0hrzq/xss_mark_safe","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9rp0hrzq/xss_mark_safe","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"maintainability_inventory":[],"total_loc":3,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":1,"files":1,"security":1,"rules":{"SKY-D226":1},"severities":{"CRITICAL":1}}],"finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D226","severity":"CRITICAL","message":"Possible XSS: untrusted content marked safe","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9rp0hrzq/xss_mark_safe/app.py","line":5,"col":11,"symbol":"render_name","metadata":{"security_trace":{"version":1,"trace_id":"a721a80319e57550a20d98d4","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"5a473f0b950792eae739aa321d9029ea88b429686e8323c22d69c6b1dfe67a33","selected_file_count":1},"steps":[{"id":"c4f7e43daccdf69454db0b39","kind":"sink","message":"Static finding location: SKY-D226","file":"app.py","line":5,"column":0,"source_sha256":"16f23287981a90fe7f6b8792a01aec2603e1c689faa9bdad57321cd39cee34f0"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"app.py":"16f23287981a90fe7f6b8792a01aec2603e1c689faa9bdad57321cd39cee34f0"},"limitations":["No unambiguous Python call at the reported location; the original finding is retained.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"compliance_tags":[{"framework":"OWASP_TOP10","requirement":"A03:2021","title":"Injection"},{"framework":"PCI_DSS_4","requirement":"6.5.7","title":"Cross-Site Scripting"}],"compliance_display":["OWASP Top 10 A03:2021","PCI DSS 4.0 6.5.7"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"critical","highest_severity":"CRITICAL","finding_count":1,"severity_counts":{"CRITICAL":1,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"critical","highest_severity":"CRITICAL","finding_count":1,"severity_counts":{"CRITICAL":1,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"none","candidate_count":0,"confidence_range":null},"finding_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9rp0hrzq/xss_mark_safe","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"xss-escape-safe","status":"complete","elapsedSeconds":0.887272,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-h4fesk2n/xss_escape_safe","nativeReport":{"definitions":{"app.render_name":{"name":"app.render_name","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-h4fesk2n/xss_escape_safe/app.py","line":6,"type":"function","loc":3,"complexity":1,"calls":["app.render_name.escaped","app.render_name.name","html","html.escape","markupsafe.Markup"],"called_by":[],"dead":true,"dead_code_classification":"uncertain","dead_code_evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"weak helper function","source":"reference_safe_policy","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; No static references; Not exported","reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":1,"confidence":90,"threshold":0},"dead_code_reason":"Uncertainty evidence present; No static references; Not exported","dead_code_reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.py","qualified_name":"app.render_name","kind":"function","line":6,"classification":"uncertain","decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; No static references; Not exported","reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":1,"confidence":90,"threshold":0},"evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"weak helper function","source":"reference_safe_policy","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]},{"file":"app.py","qualified_name":"app.render_name.escaped","kind":"variable","line":7,"classification":"alive","decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":1}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[{"name":"render_name","full_name":"app.render_name","simple_name":"render_name","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-h4fesk2n/xss_escape_safe/app.py","basename":"app.py","line":6,"confidence":90,"references":0,"calls":["markupsafe.Markup","html.escape","html","app.render_name.name","app.render_name.escaped"],"confidence_factors":["public_name"],"dead_code_classification":"uncertain","dead_code_evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"weak helper function","source":"reference_safe_policy","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; No static references; Not exported","reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":1,"confidence":90,"threshold":0},"dead_code_reason":"Uncertainty evidence present; No static references; Not exported","dead_code_reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"abstained"}],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":2,"classification_policy":"dead-code-evidence-v3","classifications":{"uncertain":1,"alive":1},"uncertainty_reasons":{"weak helper function":1},"candidate_decisions":{"reported":0,"rescued":0,"abstained":1}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-h4fesk2n/xss_escape_safe","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-h4fesk2n/xss_escape_safe","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":5,"grade_categories":["security","dead_code"],"finding_type_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":0,"by_status":{"source_to_sink":0,"partial":0,"unknown":0,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"none","candidate_count":0,"confidence_range":null},"finding_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-h4fesk2n/xss_escape_safe","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"open-redirect-tainted","status":"complete","elapsedSeconds":0.703947,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9uebn953/open_redirect_tainted","nativeReport":{"definitions":{"app.login":{"name":"app.login","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9uebn953/open_redirect_tainted/app.py","line":4,"type":"function","loc":2,"complexity":1,"calls":["flask.redirect","flask.request","flask.request.args"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"login","full_name":"app.login","simple_name":"login","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9uebn953/open_redirect_tainted/app.py","basename":"app.py","line":4,"confidence":90,"references":0,"calls":["flask.redirect","flask.request.args","flask.request"],"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.py","qualified_name":"app.login","kind":"function","line":4,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9uebn953/open_redirect_tainted","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9uebn953/open_redirect_tainted","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"maintainability_inventory":[],"total_loc":3,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":2,"files":1,"dead_code":1,"security":1,"rules":{"SKY-D230":1,"unused-functions":1},"severities":{"HIGH":1,"LOW":1}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D230","severity":"HIGH","message":"Possible open redirect: request parameter passed to redirect via .get() — default value does not prevent attacker-supplied input.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9uebn953/open_redirect_tainted/app.py","line":5,"col":11,"symbol":"login","metadata":{"security_trace":{"version":1,"trace_id":"52deaa1cf34b775e9b807a44","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"5a473f0b950792eae739aa321d9029ea88b429686e8323c22d69c6b1dfe67a33","selected_file_count":1},"steps":[{"id":"ad258c37f2e2f9ac228dedf8","kind":"sink","message":"Static finding location: SKY-D230","file":"app.py","line":5,"column":0,"source_sha256":"e13dd40a53b1aa7675cc48f9bc638195ad313537acc937c31aa1832988b00709"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"app.py":"e13dd40a53b1aa7675cc48f9bc638195ad313537acc937c31aa1832988b00709"},"limitations":["No unambiguous Python call at the reported location; the original finding is retained.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"compliance_tags":[{"framework":"OWASP_TOP10","requirement":"A01:2021","title":"Broken Access Control"}],"compliance_display":["OWASP Top 10 A01:2021"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[90,90]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9uebn953/open_redirect_tainted","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"open-redirect-local-guard","status":"complete","elapsedSeconds":0.93797,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-2k1ppnaw/open_redirect_local_guard","nativeReport":{"definitions":{"app.login":{"name":"app.login","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-2k1ppnaw/open_redirect_local_guard/app.py","line":4,"type":"function","loc":5,"complexity":2,"calls":["app.login.next_url","flask.redirect","flask.request","flask.request.args","flask.request.args.get.startswith"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"login","full_name":"app.login","simple_name":"login","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-2k1ppnaw/open_redirect_local_guard/app.py","basename":"app.py","line":4,"confidence":90,"references":0,"calls":["flask.redirect","flask.request.args","flask.request.args.get.startswith","flask.request","app.login.next_url"],"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.py","qualified_name":"app.login","kind":"function","line":4,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]},{"file":"app.py","qualified_name":"app.login.next_url","kind":"variable","line":5,"classification":"alive","decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":2}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":2,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1,"alive":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-2k1ppnaw/open_redirect_local_guard","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-2k1ppnaw/open_redirect_local_guard","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":6,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":1,"files":1,"dead_code":1,"rules":{"unused-functions":1},"severities":{"LOW":1}}],"finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":0,"by_status":{"source_to_sink":0,"partial":0,"unknown":0,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[90,90]},"finding_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-2k1ppnaw/open_redirect_local_guard","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"jwt-verify-disabled","status":"complete","elapsedSeconds":0.96271,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-2wxuy7o6/jwt_verify_disabled","nativeReport":{"definitions":{"app.decode_token":{"name":"app.decode_token","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-2wxuy7o6/jwt_verify_disabled/app.py","line":4,"type":"function","loc":2,"complexity":1,"calls":["app.decode_token.token","jwt","jwt.decode"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"decode_token","full_name":"app.decode_token","simple_name":"decode_token","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-2wxuy7o6/jwt_verify_disabled/app.py","basename":"app.py","line":4,"confidence":90,"references":0,"calls":["jwt","jwt.decode","app.decode_token.token"],"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.py","qualified_name":"app.decode_token","kind":"function","line":4,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-2wxuy7o6/jwt_verify_disabled","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-2wxuy7o6/jwt_verify_disabled","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"maintainability_inventory":[],"total_loc":3,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":2,"files":1,"dead_code":1,"security":1,"rules":{"SKY-D232":1,"unused-functions":1},"severities":{"CRITICAL":1,"LOW":1}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D232","severity":"CRITICAL","message":"JWT vulnerability: verify_signature=False disables signature verification.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-2wxuy7o6/jwt_verify_disabled/app.py","line":5,"col":11,"metadata":{"security_trace":{"version":1,"trace_id":"64dff2a332dde962c3e0473e","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"5a473f0b950792eae739aa321d9029ea88b429686e8323c22d69c6b1dfe67a33","selected_file_count":1},"steps":[{"id":"bb07edf5cd81a16dddde79d5","kind":"sink","message":"Static finding location: SKY-D232","file":"app.py","line":5,"column":0,"source_sha256":"44e010e1d94497f190cf60fbcdcd45ade1932c5fc33dc5dc7369f2ec708024b7"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"app.py":"44e010e1d94497f190cf60fbcdcd45ade1932c5fc33dc5dc7369f2ec708024b7"},"limitations":["No unambiguous Python call at the reported location; the original finding is retained.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"compliance_tags":[{"framework":"OWASP_TOP10","requirement":"A02:2021","title":"Cryptographic Failures"},{"framework":"PCI_DSS_4","requirement":"6.2.4","title":"Security Flaws"}],"compliance_display":["OWASP Top 10 A02:2021","PCI DSS 4.0 6.2.4"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"critical","highest_severity":"CRITICAL","finding_count":1,"severity_counts":{"CRITICAL":1,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"critical","highest_severity":"CRITICAL","finding_count":1,"severity_counts":{"CRITICAL":1,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[90,90]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-2wxuy7o6/jwt_verify_disabled","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"cors-wildcard","status":"complete","elapsedSeconds":0.84466,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1w13wl63/cors_wildcard","nativeReport":{"definitions":{},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[{"name":"CORS_ALLOW_ALL_ORIGINS","full_name":"app.CORS_ALLOW_ALL_ORIGINS","simple_name":"CORS_ALLOW_ALL_ORIGINS","type":"variable","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1w13wl63/cors_wildcard/app.py","basename":"app.py","line":1,"confidence":60,"references":0,"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.6,"details":{"confidence":60,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":60,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.py","qualified_name":"app.CORS_ALLOW_ALL_ORIGINS","kind":"variable","line":1,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":60,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.6,"details":{"confidence":60,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1w13wl63/cors_wildcard","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1w13wl63/cors_wildcard","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"maintainability_inventory":[],"total_loc":1,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":2,"files":1,"dead_code":1,"security":1,"rules":{"SKY-D231":1,"unused-variables":1},"severities":{"HIGH":1,"LOW":1}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D231","severity":"HIGH","message":"CORS misconfiguration: CORS_ALLOW_ALL_ORIGINS = True","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1w13wl63/cors_wildcard/app.py","line":1,"col":0,"metadata":{"security_trace":{"version":1,"trace_id":"4e4878fe47601083afd541a9","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"5a473f0b950792eae739aa321d9029ea88b429686e8323c22d69c6b1dfe67a33","selected_file_count":1},"steps":[{"id":"63a98fe2502697ba78ea5c3a","kind":"sink","message":"Static finding location: SKY-D231","file":"app.py","line":1,"column":0,"source_sha256":"d683c3bc267c4cd25394143a2071cf5fc8dbeb7eb01341c8385039f21248c20b"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"app.py":"d683c3bc267c4cd25394143a2071cf5fc8dbeb7eb01341c8385039f21248c20b"},"limitations":["No unambiguous Python call at the reported location; the original finding is retained.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"compliance_tags":[{"framework":"OWASP_TOP10","requirement":"A05:2021","title":"Security Misconfiguration"}],"compliance_display":["OWASP Top 10 A05:2021"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[60,60]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1w13wl63/cors_wildcard","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"go-zip-slip","status":"complete","elapsedSeconds":0.970111,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-yyh9tpmh/go_zip_slip","nativeReport":{"definitions":{"unzip":{"name":"unzip","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-yyh9tpmh/go_zip_slip/main.go","line":9,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"unzip","full_name":"unzip","simple_name":"unzip","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-yyh9tpmh/go_zip_slip/main.go","basename":"main.go","line":9,"confidence":100,"references":0,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"main.go","qualified_name":"unzip","kind":"function","line":9,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Go":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-yyh9tpmh/go_zip_slip","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-yyh9tpmh/go_zip_slip","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"language_engines":{"go":{"status":"available","file_count":1,"engine":{"status":"available","binary":"/private/tmp/skylos-public-benchmark-run-20261022/skylos/engines/go/skylos-go","configured_by":"bundled"},"completed_checks":["quality","dead_code","security"],"skipped_checks":[]}},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"maintainability_inventory":[],"total_loc":15,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":2,"files":1,"dead_code":1,"security":1,"rules":{"SKY-D215":1,"unused-functions":1},"severities":{"HIGH":1,"LOW":1}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D215","severity":"HIGH","message":"Archive Extraction Path Traversal Archive entry path is written to disk without validating traversal segments. Reject '..' paths or ensure the cleaned output path stays under the extraction root.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-yyh9tpmh/go_zip_slip/main.go","line":13,"col":13,"metadata":{"security_trace":{"version":1,"trace_id":"4e9771680ac0c321b19e1cce","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"1790ded2eac632735ba76082e613deb4261521c6daafd3ef41bd707a9f4979f9","selected_file_count":1},"steps":[{"id":"1045cf8613e6cfbe964dcb25","kind":"sink","message":"Static finding location: SKY-D215","file":"main.go","line":13,"column":0,"source_sha256":"b7770db68f12fcd184a355c4c9b771383d56a55faf574ccdf87d2cb4fdaba762"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"main.go":"b7770db68f12fcd184a355c4c9b771383d56a55faf574ccdf87d2cb4fdaba762"},"limitations":["Finding source is outside the selected readable Python snapshot; config/other languages are not interpreted as Python.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[100,100]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-yyh9tpmh/go_zip_slip","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"go-zip-slip-safe","status":"complete","elapsedSeconds":1.529485,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-17qy0183/go_zip_slip_safe","nativeReport":{"definitions":{"unzip":{"name":"unzip","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-17qy0183/go_zip_slip_safe/main.go","line":9,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"unzip","full_name":"unzip","simple_name":"unzip","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-17qy0183/go_zip_slip_safe/main.go","basename":"main.go","line":9,"confidence":100,"references":0,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"main.go","qualified_name":"unzip","kind":"function","line":9,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Go":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-17qy0183/go_zip_slip_safe","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-17qy0183/go_zip_slip_safe","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"language_engines":{"go":{"status":"available","file_count":1,"engine":{"status":"available","binary":"/private/tmp/skylos-public-benchmark-run-20261022/skylos/engines/go/skylos-go","configured_by":"bundled"},"completed_checks":["quality","dead_code","security"],"skipped_checks":[]}},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":18,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":1,"files":1,"dead_code":1,"rules":{"unused-functions":1},"severities":{"LOW":1}}],"finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":0,"by_status":{"source_to_sink":0,"partial":0,"unknown":0,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[100,100]},"finding_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-17qy0183/go_zip_slip_safe","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"java-path-traversal","status":"complete","elapsedSeconds":1.713687,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-6hh2ufpk/java_path_traversal","nativeReport":{"definitions":{"App":{"name":"App","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-6hh2ufpk/java_path_traversal/App.java","line":4,"type":"class","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"App.read":{"name":"App.read","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-6hh2ufpk/java_path_traversal/App.java","line":5,"type":"method","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[],"unused_imports":[],"unused_classes":[{"name":"App","full_name":"App","simple_name":"App","type":"class","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-6hh2ufpk/java_path_traversal/App.java","basename":"App.java","line":4,"confidence":100,"references":0,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"App.java","qualified_name":"App","kind":"class","line":4,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}]},{"file":"App.java","qualified_name":"App.read","kind":"method","line":5,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Java":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":2,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":2},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-6hh2ufpk/java_path_traversal","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-6hh2ufpk/java_path_traversal","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"maintainability_inventory":[],"total_loc":9,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":2,"files":1,"dead_code":1,"security":1,"rules":{"SKY-D215":1,"unused-classes":1},"severities":{"HIGH":1,"LOW":1}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D215","severity":"HIGH","message":"Servlet-controlled path reaches a filesystem sink without canonical path validation.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-6hh2ufpk/java_path_traversal/App.java","line":8,"col":0,"cwe":"CWE-22","metadata":{"security_trace":{"version":1,"trace_id":"c49876739b2b04989dd6f43a","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"323352329960e9ca5df6efda29f65cef3887dbc2017fbf84a97bdd85b4c33444","selected_file_count":1},"steps":[{"id":"7eb1c5f0aa9eb824e73da29d","kind":"sink","message":"Static finding location: SKY-D215","file":"App.java","line":8,"column":0,"source_sha256":"3d86d71c9b656070841814d7e35fb24038fc74d005e732bb1547def81a753d5d"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"App.java":"3d86d71c9b656070841814d7e35fb24038fc74d005e732bb1547def81a753d5d"},"limitations":["Finding source is outside the selected readable Python snapshot; config/other languages are not interpreted as Python.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[100,100]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-6hh2ufpk/java_path_traversal","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"java-path-traversal-safe","status":"complete","elapsedSeconds":0.860748,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-s0sajfq5/java_path_traversal_safe","nativeReport":{"definitions":{"App":{"name":"App","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-s0sajfq5/java_path_traversal_safe/App.java","line":4,"type":"class","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"App.read":{"name":"App.read","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-s0sajfq5/java_path_traversal_safe/App.java","line":5,"type":"method","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[],"unused_imports":[],"unused_classes":[{"name":"App","full_name":"App","simple_name":"App","type":"class","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-s0sajfq5/java_path_traversal_safe/App.java","basename":"App.java","line":4,"confidence":100,"references":0,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"App.java","qualified_name":"App","kind":"class","line":4,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}]},{"file":"App.java","qualified_name":"App.read","kind":"method","line":5,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Java":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":2,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":2},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-s0sajfq5/java_path_traversal_safe","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-s0sajfq5/java_path_traversal_safe","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":13,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":1,"files":1,"dead_code":1,"rules":{"unused-classes":1},"severities":{"LOW":1}}],"finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":0,"by_status":{"source_to_sink":0,"partial":0,"unknown":0,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[100,100]},"finding_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-s0sajfq5/java_path_traversal_safe","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"typescript-eval","status":"complete","elapsedSeconds":1.359232,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-c7bmrl6t/typescript_eval","nativeReport":{"definitions":{"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-c7bmrl6t/typescript_eval/app.ts:runUnsafe":{"name":"runUnsafe","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-c7bmrl6t/typescript_eval/app.ts","line":1,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"runUnsafe","full_name":"runUnsafe","simple_name":"runUnsafe","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-c7bmrl6t/typescript_eval/app.ts","basename":"app.ts","line":1,"confidence":85,"references":0,"confidence_factors":["exported_symbol"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[{"rule_id":"SKY-E003","message":"Unused TypeScript/JavaScript file (not imported by any other file)","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-c7bmrl6t/typescript_eval/app.ts","line":1,"severity":"LOW","category":"DEAD_CODE","confidence":80,"confidence_factors":["unimported_file"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.ts","qualified_name":"runUnsafe","kind":"function","line":1,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"TypeScript":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-c7bmrl6t/typescript_eval","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-c7bmrl6t/typescript_eval","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"unused_files_count":1,"maintainability_inventory":[],"total_loc":3,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":3,"files":1,"dead_code":2,"security":1,"rules":{"SKY-D201":1,"SKY-E003":1,"unused-functions":1},"severities":{"CRITICAL":1,"LOW":2}}],"finding_type_counts":{"defect":0,"review":3,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":3,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D201","severity":"CRITICAL","message":"Use of eval() detected","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-c7bmrl6t/typescript_eval/app.ts","line":2,"col":0,"metadata":{"security_trace":{"version":1,"trace_id":"f9db2b3df00696829e1ca51a","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"e903737d0573da873f9651e5525d5cceeebd4745631b982a4efdd5ddc1068adc","selected_file_count":1},"steps":[{"id":"7f504cc4720481f54bac6db4","kind":"sink","message":"Static finding location: SKY-D201","file":"app.ts","line":2,"column":0,"source_sha256":"5854fbf00731fef980960e37abf634a5c7e4bb1a16bf6077fd8e31527de7ea05"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"app.ts":"5854fbf00731fef980960e37abf634a5c7e4bb1a16bf6077fd8e31527de7ea05"},"limitations":["Finding source is outside the selected readable Python snapshot; config/other languages are not interpreted as Python.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"compliance_tags":[{"framework":"PCI_DSS_4","requirement":"6.2.4","title":"Injection Flaws"},{"framework":"PCI_DSS_4","requirement":"6.5.1","title":"Injection Flaws"},{"framework":"OWASP_TOP10","requirement":"A03:2021","title":"Injection"},{"framework":"SOC2","requirement":"CC6.1","title":"Security Controls"},{"framework":"HIPAA","requirement":"164.312(a)(1)","title":"Access Control"}],"compliance_display":["PCI DSS 4.0 6.2.4","PCI DSS 4.0 6.5.1","OWASP Top 10 A03:2021","SOC 2 CC6.1","HIPAA 164.312(a)(1)"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"critical","highest_severity":"CRITICAL","finding_count":1,"severity_counts":{"CRITICAL":1,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"critical","highest_severity":"CRITICAL","finding_count":1,"severity_counts":{"CRITICAL":1,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":2,"confidence_range":[80,85]},"finding_counts":{"defect":0,"review":3,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-c7bmrl6t/typescript_eval","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"csharp-command-injection","status":"complete","elapsedSeconds":0.607654,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-oby8wq42/csharp_command_injection","nativeReport":{"definitions":{"csharp:type:Runner":{"name":"Runner","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-oby8wq42/csharp_command_injection/App.cs","line":3,"type":"class","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]},"csharp:/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-oby8wq42/csharp_command_injection/App.cs:Runner.Run:method:string command":{"name":"Runner.Run","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-oby8wq42/csharp_command_injection/App.cs","line":5,"type":"method","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]}},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"App.cs","qualified_name":"Runner","kind":"class","line":3,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}]},{"file":"App.cs","qualified_name":"Runner.Run","kind":"method","line":5,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"C#":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":2,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":2},"candidate_decisions":{"reported":0,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-oby8wq42/csharp_command_injection","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-oby8wq42/csharp_command_injection","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"maintainability_inventory":[],"total_loc":8,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":1,"files":1,"security":1,"rules":{"SKY-D212":1},"severities":{"HIGH":1}}],"finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D212","severity":"HIGH","message":"Process execution receives tainted input; validate or allowlist the command.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-oby8wq42/csharp_command_injection/App.cs","line":7,"col":0,"category":"danger","metadata":{"security_trace":{"version":1,"trace_id":"0479ad67084bf5d5264d6d5d","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"0f4e1f4bfc71327dec4d57e69d4bd064a1b705ff6ae1b06d73da77d5cceb9a81","selected_file_count":1},"steps":[{"id":"c4932c961e48727bc8fe171d","kind":"sink","message":"Static finding location: SKY-D212","file":"App.cs","line":7,"column":0,"source_sha256":"1e1209245cc32d866f83e878e57e07c631395dd87bf0a2b94622e22702e00899"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"App.cs":"1e1209245cc32d866f83e878e57e07c631395dd87bf0a2b94622e22702e00899"},"limitations":["Finding source is outside the selected readable Python snapshot; config/other languages are not interpreted as Python.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"evidence_contract":{"schema_version":1,"proof_state":"candidate","sources":[],"sinks":[],"symbols":[],"traces":["/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-oby8wq42/csharp_command_injection/App.cs:7"],"limitations":[]},"compliance_tags":[{"framework":"PCI_DSS_4","requirement":"6.2.4","title":"Injection Flaws"},{"framework":"OWASP_TOP10","requirement":"A03:2021","title":"Injection"},{"framework":"SOC2","requirement":"CC6.1","title":"Security Controls"}],"compliance_display":["PCI DSS 4.0 6.2.4","OWASP Top 10 A03:2021","SOC 2 CC6.1"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"none","candidate_count":0,"confidence_range":null},"finding_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-oby8wq42/csharp_command_injection","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"csharp-command-literal-safe","status":"complete","elapsedSeconds":0.633972,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-s79t2kro/csharp_command_literal_safe","nativeReport":{"definitions":{"csharp:type:Runner":{"name":"Runner","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-s79t2kro/csharp_command_literal_safe/App.cs","line":3,"type":"class","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]},"csharp:/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-s79t2kro/csharp_command_literal_safe/App.cs:Runner.Status:method:":{"name":"Runner.Status","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-s79t2kro/csharp_command_literal_safe/App.cs","line":5,"type":"method","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]}},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"App.cs","qualified_name":"Runner","kind":"class","line":3,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}]},{"file":"App.cs","qualified_name":"Runner.Status","kind":"method","line":5,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"C#":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":2,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":2},"candidate_decisions":{"reported":0,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-s79t2kro/csharp_command_literal_safe","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-s79t2kro/csharp_command_literal_safe","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":8,"grade_categories":["security","dead_code"],"finding_type_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":0,"by_status":{"source_to_sink":0,"partial":0,"unknown":0,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"none","candidate_count":0,"confidence_range":null},"finding_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-s79t2kro/csharp_command_literal_safe","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"csharp-sql-injection","status":"complete","elapsedSeconds":0.743428,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9sqt71a8/csharp_sql_injection","nativeReport":{"definitions":{"csharp:type:Repository":{"name":"Repository","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9sqt71a8/csharp_sql_injection/App.cs","line":3,"type":"class","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]},"csharp:/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9sqt71a8/csharp_sql_injection/App.cs:Repository.Find:method:string sql,SqlConnection connection":{"name":"Repository.Find","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9sqt71a8/csharp_sql_injection/App.cs","line":5,"type":"method","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]}},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"App.cs","qualified_name":"Repository","kind":"class","line":3,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}]},{"file":"App.cs","qualified_name":"Repository.Find","kind":"method","line":5,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"C#":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":2,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":2},"candidate_decisions":{"reported":0,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9sqt71a8/csharp_sql_injection","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9sqt71a8/csharp_sql_injection","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"maintainability_inventory":[],"total_loc":9,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":1,"files":1,"security":1,"rules":{"SKY-D211":1},"severities":{"HIGH":1}}],"finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D211","severity":"HIGH","message":"SQL command text is built from tainted input; use parameters.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9sqt71a8/csharp_sql_injection/App.cs","line":7,"col":0,"category":"danger","metadata":{"security_trace":{"version":1,"trace_id":"15fc503dcf4e91f1a2e46ce0","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"0f4e1f4bfc71327dec4d57e69d4bd064a1b705ff6ae1b06d73da77d5cceb9a81","selected_file_count":1},"steps":[{"id":"b5589c18c688d617f4875af1","kind":"sink","message":"Static finding location: SKY-D211","file":"App.cs","line":7,"column":0,"source_sha256":"652bc7f7cabb1b225f9290d146a70bc26256a687ceaaf4148732528934d47df1"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"App.cs":"652bc7f7cabb1b225f9290d146a70bc26256a687ceaaf4148732528934d47df1"},"limitations":["Finding source is outside the selected readable Python snapshot; config/other languages are not interpreted as Python.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"evidence_contract":{"schema_version":1,"proof_state":"candidate","sources":[],"sinks":[],"symbols":[],"traces":["/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9sqt71a8/csharp_sql_injection/App.cs:7"],"limitations":[]},"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"none","candidate_count":0,"confidence_range":null},"finding_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9sqt71a8/csharp_sql_injection","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"csharp-sql-parameterized-safe","status":"complete","elapsedSeconds":0.649793,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-qkbazt41/csharp_sql_parameterized_safe","nativeReport":{"definitions":{"csharp:type:Repository":{"name":"Repository","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-qkbazt41/csharp_sql_parameterized_safe/App.cs","line":3,"type":"class","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]},"csharp:/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-qkbazt41/csharp_sql_parameterized_safe/App.cs:Repository.Find:method:int id,SqlConnection connection":{"name":"Repository.Find","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-qkbazt41/csharp_sql_parameterized_safe/App.cs","line":5,"type":"method","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]}},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"App.cs","qualified_name":"Repository","kind":"class","line":3,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}]},{"file":"App.cs","qualified_name":"Repository.Find","kind":"method","line":5,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"C#":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":2,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":2},"candidate_decisions":{"reported":0,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-qkbazt41/csharp_sql_parameterized_safe","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-qkbazt41/csharp_sql_parameterized_safe","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":10,"grade_categories":["security","dead_code"],"finding_type_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":0,"by_status":{"source_to_sink":0,"partial":0,"unknown":0,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"none","candidate_count":0,"confidence_range":null},"finding_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-qkbazt41/csharp_sql_parameterized_safe","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"csharp-ssrf","status":"complete","elapsedSeconds":0.86545,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-h621f_lq/csharp_ssrf","nativeReport":{"definitions":{"csharp:type:Client":{"name":"Client","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-h621f_lq/csharp_ssrf/App.cs","line":4,"type":"class","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]},"csharp:/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-h621f_lq/csharp_ssrf/App.cs:Client.Fetch:method:string url,HttpClient client":{"name":"Client.Fetch","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-h621f_lq/csharp_ssrf/App.cs","line":6,"type":"method","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]}},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"App.cs","qualified_name":"Client","kind":"class","line":4,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}]},{"file":"App.cs","qualified_name":"Client.Fetch","kind":"method","line":6,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"C#":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":2,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":2},"candidate_decisions":{"reported":0,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-h621f_lq/csharp_ssrf","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-h621f_lq/csharp_ssrf","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"maintainability_inventory":[],"total_loc":9,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":1,"files":1,"security":1,"rules":{"SKY-D216":1},"severities":{"HIGH":1}}],"finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D216","severity":"HIGH","message":"User-controlled URL reaches an outbound request sink.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-h621f_lq/csharp_ssrf/App.cs","line":8,"col":0,"category":"danger","metadata":{"security_trace":{"version":1,"trace_id":"091f74ae0bcf2814cc82cb51","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"0f4e1f4bfc71327dec4d57e69d4bd064a1b705ff6ae1b06d73da77d5cceb9a81","selected_file_count":1},"steps":[{"id":"7e4fc10941d1388d9c08896b","kind":"sink","message":"Static finding location: SKY-D216","file":"App.cs","line":8,"column":0,"source_sha256":"cb3a371444259eb957cf9af6641d952a8aa88d6d2d57a459db05c2aa7c49f9a7"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"App.cs":"cb3a371444259eb957cf9af6641d952a8aa88d6d2d57a459db05c2aa7c49f9a7"},"limitations":["Finding source is outside the selected readable Python snapshot; config/other languages are not interpreted as Python.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"evidence_contract":{"schema_version":1,"proof_state":"candidate","sources":[],"sinks":[],"symbols":[],"traces":["/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-h621f_lq/csharp_ssrf/App.cs:8"],"limitations":[]},"compliance_tags":[{"framework":"OWASP_TOP10","requirement":"A10:2021","title":"SSRF"},{"framework":"PCI_DSS_4","requirement":"6.2.4","title":"Security Flaws"}],"compliance_display":["OWASP Top 10 A10:2021","PCI DSS 4.0 6.2.4"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"none","candidate_count":0,"confidence_range":null},"finding_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-h621f_lq/csharp_ssrf","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"csharp-ssrf-fixed-host-safe","status":"complete","elapsedSeconds":0.611627,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-b6yeczc4/csharp_ssrf_fixed_host_safe","nativeReport":{"definitions":{"csharp:type:Client":{"name":"Client","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-b6yeczc4/csharp_ssrf_fixed_host_safe/App.cs","line":4,"type":"class","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]},"csharp:/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-b6yeczc4/csharp_ssrf_fixed_host_safe/App.cs:Client.Status:method:HttpClient client":{"name":"Client.Status","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-b6yeczc4/csharp_ssrf_fixed_host_safe/App.cs","line":6,"type":"method","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]}},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"App.cs","qualified_name":"Client","kind":"class","line":4,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}]},{"file":"App.cs","qualified_name":"Client.Status","kind":"method","line":6,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"C#":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":2,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":2},"candidate_decisions":{"reported":0,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-b6yeczc4/csharp_ssrf_fixed_host_safe","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-b6yeczc4/csharp_ssrf_fixed_host_safe","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":9,"grade_categories":["security","dead_code"],"finding_type_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":0,"by_status":{"source_to_sink":0,"partial":0,"unknown":0,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"none","candidate_count":0,"confidence_range":null},"finding_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-b6yeczc4/csharp_ssrf_fixed_host_safe","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"csharp-path-traversal","status":"complete","elapsedSeconds":0.79473,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-lcm5v3q6/csharp_path_traversal","nativeReport":{"definitions":{"csharp:type:Files":{"name":"Files","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-lcm5v3q6/csharp_path_traversal/App.cs","line":3,"type":"class","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]},"csharp:/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-lcm5v3q6/csharp_path_traversal/App.cs:Files.Read:method:string path":{"name":"Files.Read","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-lcm5v3q6/csharp_path_traversal/App.cs","line":5,"type":"method","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]}},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"App.cs","qualified_name":"Files","kind":"class","line":3,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}]},{"file":"App.cs","qualified_name":"Files.Read","kind":"method","line":5,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"C#":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":2,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":2},"candidate_decisions":{"reported":0,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-lcm5v3q6/csharp_path_traversal","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-lcm5v3q6/csharp_path_traversal","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"maintainability_inventory":[],"total_loc":8,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":1,"files":1,"security":1,"rules":{"SKY-D215":1},"severities":{"HIGH":1}}],"finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D215","severity":"HIGH","message":"User-controlled path reaches a filesystem sink without path validation.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-lcm5v3q6/csharp_path_traversal/App.cs","line":7,"col":0,"category":"danger","metadata":{"security_trace":{"version":1,"trace_id":"7abc99826333a6f7f18f04ee","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"0f4e1f4bfc71327dec4d57e69d4bd064a1b705ff6ae1b06d73da77d5cceb9a81","selected_file_count":1},"steps":[{"id":"02b88726ac6b5a4561ffcc65","kind":"sink","message":"Static finding location: SKY-D215","file":"App.cs","line":7,"column":0,"source_sha256":"8ceaa7fb8eb4ff40c2674ea805fdd6a4ea5d03e930a53d94841dc1551b20a665"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"App.cs":"8ceaa7fb8eb4ff40c2674ea805fdd6a4ea5d03e930a53d94841dc1551b20a665"},"limitations":["Finding source is outside the selected readable Python snapshot; config/other languages are not interpreted as Python.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"evidence_contract":{"schema_version":1,"proof_state":"candidate","sources":[],"sinks":[],"symbols":[],"traces":["/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-lcm5v3q6/csharp_path_traversal/App.cs:7"],"limitations":[]},"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"none","candidate_count":0,"confidence_range":null},"finding_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-lcm5v3q6/csharp_path_traversal","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"csharp-path-basename-safe","status":"complete","elapsedSeconds":0.969002,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1myvgw23/csharp_path_basename_safe","nativeReport":{"definitions":{"csharp:type:Files":{"name":"Files","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1myvgw23/csharp_path_basename_safe/App.cs","line":3,"type":"class","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]},"csharp:/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1myvgw23/csharp_path_basename_safe/App.cs:Files.Read:method:string path":{"name":"Files.Read","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1myvgw23/csharp_path_basename_safe/App.cs","line":5,"type":"method","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]}},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"App.cs","qualified_name":"Files","kind":"class","line":3,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}]},{"file":"App.cs","qualified_name":"Files.Read","kind":"method","line":5,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"C#":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":2,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":2},"candidate_decisions":{"reported":0,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1myvgw23/csharp_path_basename_safe","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1myvgw23/csharp_path_basename_safe","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":9,"grade_categories":["security","dead_code"],"finding_type_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":0,"by_status":{"source_to_sink":0,"partial":0,"unknown":0,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"none","candidate_count":0,"confidence_range":null},"finding_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1myvgw23/csharp_path_basename_safe","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"csharp-open-redirect","status":"complete","elapsedSeconds":0.693844,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-e4i8712b/csharp_open_redirect","nativeReport":{"definitions":{"csharp:type:AccountController":{"name":"AccountController","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-e4i8712b/csharp_open_redirect/App.cs","line":3,"type":"class","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]},"csharp:/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-e4i8712b/csharp_open_redirect/App.cs:AccountController.Next:method:string redirect":{"name":"AccountController.Next","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-e4i8712b/csharp_open_redirect/App.cs","line":5,"type":"method","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]}},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"App.cs","qualified_name":"AccountController","kind":"class","line":3,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}]},{"file":"App.cs","qualified_name":"AccountController.Next","kind":"method","line":5,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"C#":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":2,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":2},"candidate_decisions":{"reported":0,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-e4i8712b/csharp_open_redirect","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-e4i8712b/csharp_open_redirect","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"maintainability_inventory":[],"total_loc":8,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":1,"files":1,"security":1,"rules":{"SKY-D230":1},"severities":{"HIGH":1}}],"finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D230","severity":"HIGH","message":"Redirect target is controlled by input; validate allowed destinations.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-e4i8712b/csharp_open_redirect/App.cs","line":7,"col":0,"category":"danger","metadata":{"security_trace":{"version":1,"trace_id":"b75b5d1b0babdccda2e4ee21","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"0f4e1f4bfc71327dec4d57e69d4bd064a1b705ff6ae1b06d73da77d5cceb9a81","selected_file_count":1},"steps":[{"id":"4e1cb9eea70bed4da1759752","kind":"sink","message":"Static finding location: SKY-D230","file":"App.cs","line":7,"column":0,"source_sha256":"f0f028177ca2498ef7c26542be75177578bd16d72f2a6a314501a82713f4aafd"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"App.cs":"f0f028177ca2498ef7c26542be75177578bd16d72f2a6a314501a82713f4aafd"},"limitations":["Finding source is outside the selected readable Python snapshot; config/other languages are not interpreted as Python.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"evidence_contract":{"schema_version":1,"proof_state":"candidate","sources":[],"sinks":[],"symbols":[],"traces":["/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-e4i8712b/csharp_open_redirect/App.cs:7"],"limitations":[]},"compliance_tags":[{"framework":"OWASP_TOP10","requirement":"A01:2021","title":"Broken Access Control"}],"compliance_display":["OWASP Top 10 A01:2021"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"none","candidate_count":0,"confidence_range":null},"finding_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-e4i8712b/csharp_open_redirect","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"csharp-open-redirect-literal-safe","status":"complete","elapsedSeconds":0.82327,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1v5qwgj1/csharp_open_redirect_literal_safe","nativeReport":{"definitions":{"csharp:type:AccountController":{"name":"AccountController","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1v5qwgj1/csharp_open_redirect_literal_safe/App.cs","line":3,"type":"class","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]},"csharp:/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1v5qwgj1/csharp_open_redirect_literal_safe/App.cs:AccountController.Next:method:":{"name":"AccountController.Next","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1v5qwgj1/csharp_open_redirect_literal_safe/App.cs","line":5,"type":"method","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]}},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"App.cs","qualified_name":"AccountController","kind":"class","line":3,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}]},{"file":"App.cs","qualified_name":"AccountController.Next","kind":"method","line":5,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"C#":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":2,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":2},"candidate_decisions":{"reported":0,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1v5qwgj1/csharp_open_redirect_literal_safe","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1v5qwgj1/csharp_open_redirect_literal_safe","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":8,"grade_categories":["security","dead_code"],"finding_type_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":0,"by_status":{"source_to_sink":0,"partial":0,"unknown":0,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"none","candidate_count":0,"confidence_range":null},"finding_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1v5qwgj1/csharp_open_redirect_literal_safe","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"php-unserialize","status":"complete","elapsedSeconds":0.618907,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ce7vutuy/php_unserialize","nativeReport":{"definitions":{"load_payload":{"name":"load_payload","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ce7vutuy/php_unserialize/index.php","line":3,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"load_payload","full_name":"load_payload","simple_name":"load_payload","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ce7vutuy/php_unserialize/index.php","basename":"index.php","line":3,"confidence":100,"references":0,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"index.php","qualified_name":"load_payload","kind":"function","line":3,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"PHP":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ce7vutuy/php_unserialize","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ce7vutuy/php_unserialize","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"maintainability_inventory":[],"total_loc":5,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":2,"files":1,"dead_code":1,"security":1,"rules":{"SKY-D204":1,"unused-functions":1},"severities":{"HIGH":1,"LOW":1}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D204","severity":"HIGH","message":"unserialize on user-controlled data is unsafe and can lead to code execution.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ce7vutuy/php_unserialize/index.php","line":5,"col":11,"category":"danger","metadata":{"security_trace":{"version":1,"trace_id":"9a477df6b0172afc4931445a","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"a1680ccada0380c664f183ff24d6410041a2b65a24541336f0ba9a48e47eab8f","selected_file_count":1},"steps":[{"id":"fe3a45755af41d4faad3d65e","kind":"sink","message":"Static finding location: SKY-D204","file":"index.php","line":5,"column":0,"source_sha256":"0175aca58929e73d3f03808b4ec45f976ededf073a9ec1309b4b4d71e26c1e2d"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"index.php":"0175aca58929e73d3f03808b4ec45f976ededf073a9ec1309b4b4d71e26c1e2d"},"limitations":["Finding source is outside the selected readable Python snapshot; config/other languages are not interpreted as Python.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"evidence_contract":{"schema_version":1,"proof_state":"candidate","sources":[],"sinks":[],"symbols":[],"traces":["/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ce7vutuy/php_unserialize/index.php:5"],"limitations":[]},"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[100,100]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ce7vutuy/php_unserialize","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"php-json-decode-safe","status":"complete","elapsedSeconds":0.848112,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4q27crib/php_json_decode_safe","nativeReport":{"definitions":{"load_payload":{"name":"load_payload","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4q27crib/php_json_decode_safe/index.php","line":3,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"load_payload","full_name":"load_payload","simple_name":"load_payload","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4q27crib/php_json_decode_safe/index.php","basename":"index.php","line":3,"confidence":100,"references":0,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"index.php","qualified_name":"load_payload","kind":"function","line":3,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"PHP":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4q27crib/php_json_decode_safe","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4q27crib/php_json_decode_safe","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":5,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":1,"files":1,"dead_code":1,"rules":{"unused-functions":1},"severities":{"LOW":1}}],"finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":0,"by_status":{"source_to_sink":0,"partial":0,"unknown":0,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[100,100]},"finding_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4q27crib/php_json_decode_safe","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"php-path-traversal","status":"complete","elapsedSeconds":0.668822,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-z5qgs7tq/php_path_traversal","nativeReport":{"definitions":{"read_file":{"name":"read_file","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-z5qgs7tq/php_path_traversal/index.php","line":3,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"read_file","full_name":"read_file","simple_name":"read_file","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-z5qgs7tq/php_path_traversal/index.php","basename":"index.php","line":3,"confidence":100,"references":0,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"index.php","qualified_name":"read_file","kind":"function","line":3,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"PHP":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-z5qgs7tq/php_path_traversal","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-z5qgs7tq/php_path_traversal","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"maintainability_inventory":[],"total_loc":5,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":2,"files":1,"dead_code":1,"security":1,"rules":{"SKY-D215":1,"unused-functions":1},"severities":{"HIGH":1,"LOW":1}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D215","severity":"HIGH","message":"Request-controlled path reaches a filesystem sink without path validation.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-z5qgs7tq/php_path_traversal/index.php","line":5,"col":11,"category":"danger","metadata":{"security_trace":{"version":1,"trace_id":"fae83acb2c704c12af6753f5","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"a1680ccada0380c664f183ff24d6410041a2b65a24541336f0ba9a48e47eab8f","selected_file_count":1},"steps":[{"id":"4d62bc9b0c598f8e31b9622b","kind":"sink","message":"Static finding location: SKY-D215","file":"index.php","line":5,"column":0,"source_sha256":"eab3d298e99cc7234001b2fc3fc3202cc5efcadd4d80841a699be656cde2cdf5"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"index.php":"eab3d298e99cc7234001b2fc3fc3202cc5efcadd4d80841a699be656cde2cdf5"},"limitations":["Finding source is outside the selected readable Python snapshot; config/other languages are not interpreted as Python.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"evidence_contract":{"schema_version":1,"proof_state":"candidate","sources":[],"sinks":[],"symbols":[],"traces":["/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-z5qgs7tq/php_path_traversal/index.php:5"],"limitations":[]},"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[100,100]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-z5qgs7tq/php_path_traversal","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"php-path-basename-safe","status":"complete","elapsedSeconds":0.563769,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-jy1c_p3r/php_path_basename_safe","nativeReport":{"definitions":{"read_file":{"name":"read_file","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-jy1c_p3r/php_path_basename_safe/index.php","line":3,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"read_file","full_name":"read_file","simple_name":"read_file","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-jy1c_p3r/php_path_basename_safe/index.php","basename":"index.php","line":3,"confidence":100,"references":0,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"index.php","qualified_name":"read_file","kind":"function","line":3,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"PHP":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-jy1c_p3r/php_path_basename_safe","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-jy1c_p3r/php_path_basename_safe","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":5,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":1,"files":1,"dead_code":1,"rules":{"unused-functions":1},"severities":{"LOW":1}}],"finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":0,"by_status":{"source_to_sink":0,"partial":0,"unknown":0,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[100,100]},"finding_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-jy1c_p3r/php_path_basename_safe","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"typescript-eval-safe","status":"complete","elapsedSeconds":1.13497,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a61qb3zd/typescript_eval_safe","nativeReport":{"definitions":{"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a61qb3zd/typescript_eval_safe/app.ts:parsePayload":{"name":"parsePayload","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a61qb3zd/typescript_eval_safe/app.ts","line":1,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"parsePayload","full_name":"parsePayload","simple_name":"parsePayload","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a61qb3zd/typescript_eval_safe/app.ts","basename":"app.ts","line":1,"confidence":85,"references":0,"confidence_factors":["exported_symbol"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[{"rule_id":"SKY-E003","message":"Unused TypeScript/JavaScript file (not imported by any other file)","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a61qb3zd/typescript_eval_safe/app.ts","line":1,"severity":"LOW","category":"DEAD_CODE","confidence":80,"confidence_factors":["unimported_file"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.ts","qualified_name":"parsePayload","kind":"function","line":1,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"TypeScript":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a61qb3zd/typescript_eval_safe","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a61qb3zd/typescript_eval_safe","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"unused_files_count":1,"maintainability_inventory":[],"total_loc":3,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":2,"files":1,"dead_code":2,"rules":{"SKY-E003":1,"unused-functions":1},"severities":{"LOW":2}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":0,"by_status":{"source_to_sink":0,"partial":0,"unknown":0,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":2,"confidence_range":[80,85]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a61qb3zd/typescript_eval_safe","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"typescript-nextjs-author-shadow-missing-auth","status":"complete","elapsedSeconds":1.157957,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-s4huwmol/typescript_nextjs_author_shadow","nativeReport":{"definitions":{"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-s4huwmol/typescript_nextjs_author_shadow/app/api/billing/route.ts:POST":{"name":"POST","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-s4huwmol/typescript_nextjs_author_shadow/app/api/billing/route.ts","line":3,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":3,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]}},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app/api/billing/route.ts","qualified_name":"POST","kind":"function","line":3,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":3,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"TypeScript":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":1},"candidate_decisions":{"reported":0,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-s4huwmol/typescript_nextjs_author_shadow","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-s4huwmol/typescript_nextjs_author_shadow","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"maintainability_inventory":[],"total_loc":11,"grade_categories":["security","dead_code"],"by_directory":[{"path":"app/api/billing","total":1,"files":1,"security":1,"rules":{"SKY-D280":1},"severities":{"HIGH":1}}],"finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D280","severity":"HIGH","message":"Next.js mutating API route has no route-local authentication guard before mutation. Add and enforce an authentication check.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-s4huwmol/typescript_nextjs_author_shadow/app/api/billing/route.ts","line":3,"col":7,"metadata":{"security_evidence":{"evidence_kind":"authorization_guard","source":"Next.js POST route entry","sink":"db.billingPlan.update","path":["mutating route POST","db.billingPlan.update"],"guards_seen":[],"guards_missing":["route-local rejecting authentication guard before mutation"],"confidence_reason":"No trusted authentication result is enforced by a route-local terminating guard before this mutation.","test_hint":"Call a trusted server-side authentication API, reject missing identity with return or throw, then mutate.","fix_shape":"add a route-local authentication call and an early rejecting guard before the mutation","analysis_complete":true,"analysis_diagnostics":[]},"security_trace":{"version":1,"trace_id":"94b61cea3902afe135f37c15","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"1df0e92f09620bca4573735d20660e5dd91cb44eac59fccca1ebd97d83a33e4a","selected_file_count":1},"steps":[{"id":"02d75e4fe9236b4294229049","kind":"sink","message":"Static finding location: SKY-D280","file":"app/api/billing/route.ts","line":3,"column":0,"source_sha256":"971ced460049c06b961f3208c2319008242b5d427f8f090633e280289577594c"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"app/api/billing/route.ts":"971ced460049c06b961f3208c2319008242b5d427f8f090633e280289577594c"},"limitations":["Finding source is outside the selected readable Python snapshot; config/other languages are not interpreted as Python.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"evidence_contract":{"schema_version":1,"proof_state":"verified","sources":["Next.js POST route entry"],"sinks":["db.billingPlan.update"],"symbols":[],"traces":["/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-s4huwmol/typescript_nextjs_author_shadow/app/api/billing/route.ts:3","mutating route POST","db.billingPlan.update"],"limitations":[]},"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"none","candidate_count":0,"confidence_range":null},"finding_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-s4huwmol/typescript_nextjs_author_shadow","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"typescript-nextjs-auth-decoys","status":"complete","elapsedSeconds":1.334929,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1_df7em7/typescript_nextjs_auth_decoys","nativeReport":{"definitions":{"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1_df7em7/typescript_nextjs_auth_decoys/app/api/account/route.ts:POST":{"name":"POST","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1_df7em7/typescript_nextjs_auth_decoys/app/api/account/route.ts","line":6,"type":"function","loc":1,"complexity":1,"calls":["cookies","headers"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":3,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]}},"unused_functions":[],"unused_imports":[{"name":"auth","full_name":"auth","simple_name":"auth","type":"import","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1_df7em7/typescript_nextjs_auth_decoys/app/api/account/route.ts","basename":"route.ts","line":1,"confidence":100,"references":0,"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app/api/account/route.ts","qualified_name":"POST","kind":"function","line":6,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":3,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"TypeScript":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1_df7em7/typescript_nextjs_auth_decoys","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1_df7em7/typescript_nextjs_auth_decoys","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"maintainability_inventory":[],"total_loc":10,"grade_categories":["security","dead_code"],"by_directory":[{"path":"app/api/account","total":2,"files":1,"dead_code":1,"security":1,"rules":{"SKY-D280":1,"unused-imports":1},"severities":{"HIGH":1,"LOW":1}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D280","severity":"HIGH","message":"Next.js mutating API route has no route-local authentication guard before mutation. Add and enforce an authentication check.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1_df7em7/typescript_nextjs_auth_decoys/app/api/account/route.ts","line":6,"col":7,"metadata":{"security_evidence":{"evidence_kind":"authorization_guard","source":"Next.js POST route entry","sink":"db.user.create","path":["mutating route POST","db.user.create"],"guards_seen":[],"guards_missing":["route-local rejecting authentication guard before mutation"],"confidence_reason":"No trusted authentication result is enforced by a route-local terminating guard before this mutation.","test_hint":"Call a trusted server-side authentication API, reject missing identity with return or throw, then mutate.","fix_shape":"add a route-local authentication call and an early rejecting guard before the mutation","analysis_complete":true,"analysis_diagnostics":[]},"security_trace":{"version":1,"trace_id":"3fa944ff2b4ade1df988070c","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"b757c629f1d70a42416e56aea1f5762013b5a222c9eed59ed6336dbd483584e9","selected_file_count":1},"steps":[{"id":"f95b7f94d65f91146d05be7b","kind":"sink","message":"Static finding location: SKY-D280","file":"app/api/account/route.ts","line":6,"column":0,"source_sha256":"0dc490baaa40eab06fb0f489650b79b418fe2b03065e1887f209c34f0696d0c4"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"app/api/account/route.ts":"0dc490baaa40eab06fb0f489650b79b418fe2b03065e1887f209c34f0696d0c4"},"limitations":["Finding source is outside the selected readable Python snapshot; config/other languages are not interpreted as Python.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"evidence_contract":{"schema_version":1,"proof_state":"verified","sources":["Next.js POST route entry"],"sinks":["db.user.create"],"symbols":[],"traces":["/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1_df7em7/typescript_nextjs_auth_decoys/app/api/account/route.ts:6","mutating route POST","db.user.create"],"limitations":[]},"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[100,100]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1_df7em7/typescript_nextjs_auth_decoys","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"typescript-nextjs-session-guard-safe","status":"complete","elapsedSeconds":2.409189,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-vuqocfum/typescript_nextjs_session_guard","nativeReport":{"definitions":{"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-vuqocfum/typescript_nextjs_session_guard/app/api/billing/route.ts:POST":{"name":"POST","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-vuqocfum/typescript_nextjs_session_guard/app/api/billing/route.ts","line":4,"type":"function","loc":1,"complexity":1,"calls":["getServerSession"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":3,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]}},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app/api/billing/route.ts","qualified_name":"POST","kind":"function","line":4,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":3,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"TypeScript":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":1},"candidate_decisions":{"reported":0,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-vuqocfum/typescript_nextjs_session_guard","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-vuqocfum/typescript_nextjs_session_guard","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":14,"grade_categories":["security","dead_code"],"finding_type_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":0,"by_status":{"source_to_sink":0,"partial":0,"unknown":0,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"none","candidate_count":0,"confidence_range":null},"finding_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-vuqocfum/typescript_nextjs_session_guard","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"typescript-nextjs-authjs-v5-safe","status":"complete","elapsedSeconds":2.63178,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-v5ibpji6/typescript_nextjs_authjs_v5_safe","nativeReport":{"definitions":{"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-v5ibpji6/typescript_nextjs_authjs_v5_safe/app/api/account/route.ts:POST":{"name":"POST","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-v5ibpji6/typescript_nextjs_authjs_v5_safe/app/api/account/route.ts","line":3,"type":"function","loc":1,"complexity":1,"calls":["auth"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":3,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]}},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app/api/account/route.ts","qualified_name":"POST","kind":"function","line":3,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":3,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":2,"excluded_folders":[],"languages":{"TypeScript":2},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":1},"candidate_decisions":{"reported":0,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-v5ibpji6/typescript_nextjs_authjs_v5_safe","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-v5ibpji6/typescript_nextjs_authjs_v5_safe","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":1,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":16,"grade_categories":["security","dead_code"],"finding_type_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":0,"by_status":{"source_to_sink":0,"partial":0,"unknown":0,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":{"name":"authjs-v5-proof-fixture","path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-v5ibpji6/typescript_nextjs_authjs_v5_safe","relative_path":".","discovered_from":["root-package"],"is_root":true,"is_internal_dependency":false,"has_package_json":true},"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":1,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"none","candidate_count":0,"confidence_range":null},"finding_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-v5ibpji6/typescript_nextjs_authjs_v5_safe","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"typescript-server-action-prisma-unsafe","status":"complete","elapsedSeconds":1.19132,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ztlz5isd/typescript_server_action_prisma_unsafe","nativeReport":{"definitions":{"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ztlz5isd/typescript_server_action_prisma_unsafe/actions.ts:findUser":{"name":"findUser","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ztlz5isd/typescript_server_action_prisma_unsafe/actions.ts","line":5,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"findUser","full_name":"findUser","simple_name":"findUser","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ztlz5isd/typescript_server_action_prisma_unsafe/actions.ts","basename":"actions.ts","line":5,"confidence":85,"references":0,"confidence_factors":["exported_symbol"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[{"rule_id":"SKY-E003","message":"Unused TypeScript/JavaScript file (not imported by any other file)","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ztlz5isd/typescript_server_action_prisma_unsafe/actions.ts","line":1,"severity":"LOW","category":"DEAD_CODE","confidence":80,"confidence_factors":["unimported_file"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"actions.ts","qualified_name":"findUser","kind":"function","line":5,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"TypeScript":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ztlz5isd/typescript_server_action_prisma_unsafe","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ztlz5isd/typescript_server_action_prisma_unsafe","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"unused_files_count":1,"maintainability_inventory":[],"total_loc":8,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":3,"files":1,"dead_code":2,"security":1,"rules":{"SKY-D281":1,"SKY-E003":1,"unused-functions":1},"severities":{"CRITICAL":1,"LOW":2}}],"finding_type_counts":{"defect":0,"review":3,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":3,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D281","severity":"CRITICAL","message":"Untrusted Server Action input `formData` reaches SQL text via `.$queryRawUnsafe()`. Use a parameterized query.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ztlz5isd/typescript_server_action_prisma_unsafe/actions.ts","line":8,"col":4,"metadata":{"security_evidence":{"evidence_kind":"server_action_sql_taint","source":"Server Action parameter(s): formData","sink":".$queryRawUnsafe SQL text argument","path":["untrusted action input reaches SQL expression at line 8"],"guards_seen":[],"guards_missing":["parameterized SQL binding"],"confidence_reason":"A lexical taint path from a Server Action parameter reaches SQL text rather than a bound-value argument.","test_hint":"Submit SQL metacharacters through the named action input and verify the driver treats them as data.","fix_shape":"replace SQL text construction with placeholders and bound parameters","analysis_complete":true,"analysis_diagnostics":[]},"security_trace":{"version":1,"trace_id":"87f7f58dd9c9d878d8419573","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"0d843e661168a781640d35ca8aa0d1212bb1c9a95daee9b3c23852849e8faf18","selected_file_count":1},"steps":[{"id":"33345f1f4c2e339bebccb8a0","kind":"sink","message":"Static finding location: SKY-D281","file":"actions.ts","line":8,"column":0,"source_sha256":"9abb81a2f3ea9b0fc52c95168c08377ac9dd3af58d540a84a62370c974824997"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"actions.ts":"9abb81a2f3ea9b0fc52c95168c08377ac9dd3af58d540a84a62370c974824997"},"limitations":["Finding source is outside the selected readable Python snapshot; config/other languages are not interpreted as Python.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"evidence_contract":{"schema_version":1,"proof_state":"verified","sources":["Server Action parameter(s): formData"],"sinks":[".$queryRawUnsafe SQL text argument"],"symbols":[],"traces":["/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ztlz5isd/typescript_server_action_prisma_unsafe/actions.ts:8","untrusted action input reaches SQL expression at line 8"],"limitations":[]},"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"critical","highest_severity":"CRITICAL","finding_count":1,"severity_counts":{"CRITICAL":1,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"critical","highest_severity":"CRITICAL","finding_count":1,"severity_counts":{"CRITICAL":1,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":2,"confidence_range":[80,85]},"finding_counts":{"defect":0,"review":3,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ztlz5isd/typescript_server_action_prisma_unsafe","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"typescript-server-action-constant-safe","status":"complete","elapsedSeconds":1.260168,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-lhggbuwp/typescript_server_action_constant_safe","nativeReport":{"definitions":{"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-lhggbuwp/typescript_server_action_constant_safe/actions.ts:listUsers":{"name":"listUsers","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-lhggbuwp/typescript_server_action_constant_safe/actions.ts","line":6,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"listUsers","full_name":"listUsers","simple_name":"listUsers","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-lhggbuwp/typescript_server_action_constant_safe/actions.ts","basename":"actions.ts","line":6,"confidence":85,"references":0,"confidence_factors":["exported_symbol"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[{"rule_id":"SKY-E003","message":"Unused TypeScript/JavaScript file (not imported by any other file)","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-lhggbuwp/typescript_server_action_constant_safe/actions.ts","line":1,"severity":"LOW","category":"DEAD_CODE","confidence":80,"confidence_factors":["unimported_file"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"actions.ts","qualified_name":"limit","kind":"variable","line":4,"classification":"alive","decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":1}}]},{"file":"actions.ts","qualified_name":"listUsers","kind":"function","line":6,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}]},{"file":"actions.ts","qualified_name":"table","kind":"variable","line":3,"classification":"alive","decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":1}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"TypeScript":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":3,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1,"alive":2},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-lhggbuwp/typescript_server_action_constant_safe","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-lhggbuwp/typescript_server_action_constant_safe","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"unused_files_count":1,"maintainability_inventory":[],"total_loc":6,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":2,"files":1,"dead_code":2,"rules":{"SKY-E003":1,"unused-functions":1},"severities":{"LOW":2}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":0,"by_status":{"source_to_sink":0,"partial":0,"unknown":0,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":2,"confidence_range":[80,85]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-lhggbuwp/typescript_server_action_constant_safe","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"typescript-server-action-inline-unsafe","status":"complete","elapsedSeconds":1.475546,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-irstpcpe/typescript_server_action_inline_unsafe","nativeReport":{"definitions":{"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-irstpcpe/typescript_server_action_inline_unsafe/page.tsx:findUser":{"name":"findUser","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-irstpcpe/typescript_server_action_inline_unsafe/page.tsx","line":1,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"findUser","full_name":"findUser","simple_name":"findUser","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-irstpcpe/typescript_server_action_inline_unsafe/page.tsx","basename":"page.tsx","line":1,"confidence":85,"references":0,"confidence_factors":["exported_symbol"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"page.tsx","qualified_name":"findUser","kind":"function","line":1,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"TypeScript":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-irstpcpe/typescript_server_action_inline_unsafe","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-irstpcpe/typescript_server_action_inline_unsafe","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"maintainability_inventory":[],"total_loc":4,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":2,"files":1,"dead_code":1,"security":1,"rules":{"SKY-D281":1,"unused-functions":1},"severities":{"CRITICAL":1,"LOW":1}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D281","severity":"CRITICAL","message":"Untrusted Server Action input `email` reaches SQL text via `.query()`. Use a parameterized query.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-irstpcpe/typescript_server_action_inline_unsafe/page.tsx","line":3,"col":18,"metadata":{"security_evidence":{"evidence_kind":"server_action_sql_taint","source":"Server Action parameter(s): email","sink":".query SQL text argument","path":["untrusted action input reaches SQL expression at line 3"],"guards_seen":[],"guards_missing":["parameterized SQL binding"],"confidence_reason":"A lexical taint path from a Server Action parameter reaches SQL text rather than a bound-value argument.","test_hint":"Submit SQL metacharacters through the named action input and verify the driver treats them as data.","fix_shape":"replace SQL text construction with placeholders and bound parameters","analysis_complete":true,"analysis_diagnostics":[]},"security_trace":{"version":1,"trace_id":"9a34fc79263b224035f29d93","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"1d48eec1e0a368d959a92e5f0fc1bd127103b77f0a8ac8646b2b64f0e9836a4b","selected_file_count":1},"steps":[{"id":"06a7bfe6b37fb2928b25cb11","kind":"sink","message":"Static finding location: SKY-D281","file":"page.tsx","line":3,"column":0,"source_sha256":"2e9f5d1df47119a823285b83ca79c278858fdf63a76a7d51070f606c9f8787be"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"page.tsx":"2e9f5d1df47119a823285b83ca79c278858fdf63a76a7d51070f606c9f8787be"},"limitations":["Finding source is outside the selected readable Python snapshot; config/other languages are not interpreted as Python.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"evidence_contract":{"schema_version":1,"proof_state":"verified","sources":["Server Action parameter(s): email"],"sinks":[".query SQL text argument"],"symbols":[],"traces":["/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-irstpcpe/typescript_server_action_inline_unsafe/page.tsx:3","untrusted action input reaches SQL expression at line 3"],"limitations":[]},"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"critical","highest_severity":"CRITICAL","finding_count":1,"severity_counts":{"CRITICAL":1,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"critical","highest_severity":"CRITICAL","finding_count":1,"severity_counts":{"CRITICAL":1,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[85,85]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-irstpcpe/typescript_server_action_inline_unsafe","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"typescript-server-action-repository-unsafe","status":"complete","elapsedSeconds":1.353463,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9n8ggw_u/typescript_server_action_repository_unsafe","nativeReport":{"definitions":{"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9n8ggw_u/typescript_server_action_repository_unsafe/actions.ts:findUser":{"name":"findUser","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9n8ggw_u/typescript_server_action_repository_unsafe/actions.ts","line":12,"type":"function","loc":1,"complexity":1,"calls":["UserRepository.lookup"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9n8ggw_u/typescript_server_action_repository_unsafe/actions.ts:UserRepository":{"name":"UserRepository","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9n8ggw_u/typescript_server_action_repository_unsafe/actions.ts","line":3,"type":"class","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":1}}],"dead_code_decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Static references found","dead_code_reason_tags":["static_reference"]},"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9n8ggw_u/typescript_server_action_repository_unsafe/actions.ts:UserRepository.lookup":{"name":"UserRepository.lookup","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9n8ggw_u/typescript_server_action_repository_unsafe/actions.ts","line":4,"type":"method","loc":1,"complexity":1,"calls":[],"called_by":["findUser"],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":3}}],"dead_code_decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Static references found","dead_code_reason_tags":["static_reference"]}},"unused_functions":[{"name":"findUser","full_name":"findUser","simple_name":"findUser","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9n8ggw_u/typescript_server_action_repository_unsafe/actions.ts","basename":"actions.ts","line":12,"confidence":85,"references":0,"calls":["UserRepository.lookup"],"confidence_factors":["exported_symbol"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[{"rule_id":"SKY-E003","message":"Unused TypeScript/JavaScript file (not imported by any other file)","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9n8ggw_u/typescript_server_action_repository_unsafe/actions.ts","line":1,"severity":"LOW","category":"DEAD_CODE","confidence":80,"confidence_factors":["unimported_file"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"actions.ts","qualified_name":"UserRepository","kind":"class","line":3,"classification":"alive","decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":1}}]},{"file":"actions.ts","qualified_name":"UserRepository.lookup","kind":"method","line":4,"classification":"alive","decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":3}}]},{"file":"actions.ts","qualified_name":"findUser","kind":"function","line":12,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}]},{"file":"actions.ts","qualified_name":"repository","kind":"variable","line":10,"classification":"alive","decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":1}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"TypeScript":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":4,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1,"alive":3},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9n8ggw_u/typescript_server_action_repository_unsafe","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9n8ggw_u/typescript_server_action_repository_unsafe","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"unused_files_count":1,"maintainability_inventory":[],"total_loc":11,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":3,"files":1,"dead_code":2,"security":1,"rules":{"SKY-D281":1,"SKY-E003":1,"unused-functions":1},"severities":{"CRITICAL":1,"LOW":2}}],"finding_type_counts":{"defect":0,"review":3,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":3,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D281","severity":"CRITICAL","message":"Untrusted Server Action input `input` reaches SQL text via `.query()`. Use a parameterized query.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9n8ggw_u/typescript_server_action_repository_unsafe/actions.ts","line":6,"col":20,"metadata":{"security_evidence":{"evidence_kind":"server_action_sql_taint","source":"Server Action parameter(s): input","sink":".query SQL text argument","path":["untrusted action input reaches SQL expression at line 6"],"guards_seen":[],"guards_missing":["parameterized SQL binding"],"confidence_reason":"A lexical taint path from a Server Action parameter reaches SQL text rather than a bound-value argument.","test_hint":"Submit SQL metacharacters through the named action input and verify the driver treats them as data.","fix_shape":"replace SQL text construction with placeholders and bound parameters","analysis_complete":true,"analysis_diagnostics":[]},"security_trace":{"version":1,"trace_id":"ece34dd8a5eb56d76731f4b0","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"0d843e661168a781640d35ca8aa0d1212bb1c9a95daee9b3c23852849e8faf18","selected_file_count":1},"steps":[{"id":"a093b4cb6d3d16c0c1842868","kind":"sink","message":"Static finding location: SKY-D281","file":"actions.ts","line":6,"column":0,"source_sha256":"7d60abb6de1a00191a68d8d91e6121d997b85fb8b8a22ef9aba0ab821d3cd0b2"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"actions.ts":"7d60abb6de1a00191a68d8d91e6121d997b85fb8b8a22ef9aba0ab821d3cd0b2"},"limitations":["Finding source is outside the selected readable Python snapshot; config/other languages are not interpreted as Python.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"evidence_contract":{"schema_version":1,"proof_state":"verified","sources":["Server Action parameter(s): input"],"sinks":[".query SQL text argument"],"symbols":[],"traces":["/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9n8ggw_u/typescript_server_action_repository_unsafe/actions.ts:6","untrusted action input reaches SQL expression at line 6"],"limitations":[]},"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"critical","highest_severity":"CRITICAL","finding_count":1,"severity_counts":{"CRITICAL":1,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"critical","highest_severity":"CRITICAL","finding_count":1,"severity_counts":{"CRITICAL":1,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":2,"confidence_range":[80,85]},"finding_counts":{"defect":0,"review":3,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9n8ggw_u/typescript_server_action_repository_unsafe","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"typescript-server-action-query-config-safe","status":"complete","elapsedSeconds":0.969051,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-3nsf3f2t/typescript_server_action_query_config_safe","nativeReport":{"definitions":{"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-3nsf3f2t/typescript_server_action_query_config_safe/actions.ts:buildQuery":{"name":"buildQuery","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-3nsf3f2t/typescript_server_action_query_config_safe/actions.ts","line":3,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":["findUser"],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-3nsf3f2t/typescript_server_action_query_config_safe/actions.ts:findUser":{"name":"findUser","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-3nsf3f2t/typescript_server_action_query_config_safe/actions.ts","line":7,"type":"function","loc":1,"complexity":1,"calls":["buildQuery"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"buildQuery","full_name":"buildQuery","simple_name":"buildQuery","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-3nsf3f2t/typescript_server_action_query_config_safe/actions.ts","basename":"actions.ts","line":3,"confidence":100,"references":0,"called_by":["findUser"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"name":"findUser","full_name":"findUser","simple_name":"findUser","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-3nsf3f2t/typescript_server_action_query_config_safe/actions.ts","basename":"actions.ts","line":7,"confidence":85,"references":0,"calls":["buildQuery"],"confidence_factors":["exported_symbol"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[{"rule_id":"SKY-E003","message":"Unused TypeScript/JavaScript file (not imported by any other file)","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-3nsf3f2t/typescript_server_action_query_config_safe/actions.ts","line":1,"severity":"LOW","category":"DEAD_CODE","confidence":80,"confidence_factors":["unimported_file"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"actions.ts","qualified_name":"buildQuery","kind":"function","line":3,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}]},{"file":"actions.ts","qualified_name":"findUser","kind":"function","line":7,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"TypeScript":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":2,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":2},"candidate_decisions":{"reported":2,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-3nsf3f2t/typescript_server_action_query_config_safe","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-3nsf3f2t/typescript_server_action_query_config_safe","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"unused_files_count":1,"maintainability_inventory":[],"total_loc":9,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":3,"files":1,"dead_code":3,"rules":{"SKY-E003":1,"unused-functions":2},"severities":{"LOW":3}}],"finding_type_counts":{"defect":0,"review":3,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":0,"by_status":{"source_to_sink":0,"partial":0,"unknown":0,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":3,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":3,"confidence_range":[80,100]},"finding_counts":{"defect":0,"review":3,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-3nsf3f2t/typescript_server_action_query_config_safe","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"typescript-server-action-trusted-runtime-safe","status":"complete","elapsedSeconds":1.1222,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-y4l0trab/typescript_server_action_trusted_runtime_safe","nativeReport":{"definitions":{"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-y4l0trab/typescript_server_action_trusted_runtime_safe/actions.ts:recordAuditEvent":{"name":"recordAuditEvent","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-y4l0trab/typescript_server_action_trusted_runtime_safe/actions.ts","line":3,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"recordAuditEvent","full_name":"recordAuditEvent","simple_name":"recordAuditEvent","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-y4l0trab/typescript_server_action_trusted_runtime_safe/actions.ts","basename":"actions.ts","line":3,"confidence":85,"references":0,"confidence_factors":["exported_symbol"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[{"rule_id":"SKY-E003","message":"Unused TypeScript/JavaScript file (not imported by any other file)","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-y4l0trab/typescript_server_action_trusted_runtime_safe/actions.ts","line":1,"severity":"LOW","category":"DEAD_CODE","confidence":80,"confidence_factors":["unimported_file"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"actions.ts","qualified_name":"recordAuditEvent","kind":"function","line":3,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"TypeScript":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-y4l0trab/typescript_server_action_trusted_runtime_safe","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-y4l0trab/typescript_server_action_trusted_runtime_safe","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"unused_files_count":1,"maintainability_inventory":[],"total_loc":5,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":2,"files":1,"dead_code":2,"rules":{"SKY-E003":1,"unused-functions":1},"severities":{"LOW":2}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":0,"by_status":{"source_to_sink":0,"partial":0,"unknown":0,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":2,"confidence_range":[80,85]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-y4l0trab/typescript_server_action_trusted_runtime_safe","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"typescript-server-action-prisma-tag-safe","status":"complete","elapsedSeconds":0.968128,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ur2i8k6b/typescript_server_action_prisma_tag_safe","nativeReport":{"definitions":{"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ur2i8k6b/typescript_server_action_prisma_tag_safe/actions.ts:findUser":{"name":"findUser","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ur2i8k6b/typescript_server_action_prisma_tag_safe/actions.ts","line":7,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"findUser","full_name":"findUser","simple_name":"findUser","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ur2i8k6b/typescript_server_action_prisma_tag_safe/actions.ts","basename":"actions.ts","line":7,"confidence":85,"references":0,"confidence_factors":["exported_symbol"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[{"rule_id":"SKY-E003","message":"Unused TypeScript/JavaScript file (not imported by any other file)","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ur2i8k6b/typescript_server_action_prisma_tag_safe/actions.ts","line":1,"severity":"LOW","category":"DEAD_CODE","confidence":80,"confidence_factors":["unimported_file"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"actions.ts","qualified_name":"findUser","kind":"function","line":7,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}]},{"file":"actions.ts","qualified_name":"prisma","kind":"variable","line":5,"classification":"alive","decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":1}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"TypeScript":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":2,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1,"alive":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ur2i8k6b/typescript_server_action_prisma_tag_safe","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ur2i8k6b/typescript_server_action_prisma_tag_safe","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"unused_files_count":1,"maintainability_inventory":[],"total_loc":6,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":2,"files":1,"dead_code":2,"rules":{"SKY-E003":1,"unused-functions":1},"severities":{"LOW":2}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":0,"by_status":{"source_to_sink":0,"partial":0,"unknown":0,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":2,"confidence_range":[80,85]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ur2i8k6b/typescript_server_action_prisma_tag_safe","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"typescript-webhook-unverified","status":"complete","elapsedSeconds":1.194007,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ntixriki/typescript_webhook_unverified","nativeReport":{"definitions":{"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ntixriki/typescript_webhook_unverified/app/api/stripe/webhook/route.ts:POST":{"name":"POST","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ntixriki/typescript_webhook_unverified/app/api/stripe/webhook/route.ts","line":6,"type":"function","loc":1,"complexity":1,"calls":["fulfillOrder"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":3,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]},"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ntixriki/typescript_webhook_unverified/app/api/stripe/webhook/route.ts:fulfillOrder":{"name":"fulfillOrder","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ntixriki/typescript_webhook_unverified/app/api/stripe/webhook/route.ts","line":17,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":["POST"],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ntixriki/typescript_webhook_unverified/app/api/stripe/webhook/route.ts:StripeEvent":{"name":"StripeEvent","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ntixriki/typescript_webhook_unverified/app/api/stripe/webhook/route.ts","line":1,"type":"class","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"uncertain","dead_code_evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"type-only declaration","source":"framework_signal","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; Not exported","reason_tags":["uncertainty","not_exported"],"live_evidence_count":0,"dead_evidence_count":0,"uncertainty_count":1,"confidence":100,"threshold":0},"dead_code_reason":"Uncertainty evidence present; Not exported","dead_code_reason_tags":["uncertainty","not_exported"]}},"unused_functions":[{"name":"fulfillOrder","full_name":"fulfillOrder","simple_name":"fulfillOrder","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ntixriki/typescript_webhook_unverified/app/api/stripe/webhook/route.ts","basename":"route.ts","line":17,"confidence":100,"references":0,"called_by":["POST"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app/api/stripe/webhook/route.ts","qualified_name":"POST","kind":"function","line":6,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":3,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}]},{"file":"app/api/stripe/webhook/route.ts","qualified_name":"StripeEvent","kind":"class","line":1,"classification":"uncertain","decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; Not exported","reason_tags":["uncertainty","not_exported"],"live_evidence_count":0,"dead_evidence_count":0,"uncertainty_count":1,"confidence":100,"threshold":0},"evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"type-only declaration","source":"framework_signal","confidence":1.0,"details":{}}]},{"file":"app/api/stripe/webhook/route.ts","qualified_name":"fulfillOrder","kind":"function","line":17,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"TypeScript":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":3,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":1,"likely_dead":1,"uncertain":1},"uncertainty_reasons":{"type-only declaration":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ntixriki/typescript_webhook_unverified","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ntixriki/typescript_webhook_unverified","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"maintainability_inventory":[],"total_loc":15,"grade_categories":["security","dead_code"],"by_directory":[{"path":"app/api/stripe/webhook","total":2,"files":1,"dead_code":1,"security":1,"rules":{"SKY-D282":1,"unused-functions":1},"severities":{"HIGH":1,"LOW":1}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D282","severity":"HIGH","message":"Webhook handler processes an inbound request without proving provider signature verification before body trust or side effects.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ntixriki/typescript_webhook_unverified/app/api/stripe/webhook/route.ts","line":6,"col":7,"metadata":{"security_evidence":{"evidence_kind":"webhook_signature_guard","source":"raw request body `rawBody`","sink":"JSON.parse","path":["raw request body `rawBody`","JSON.parse"],"guards_seen":[],"guards_missing":["provider signature verification of request payload before body trust or side effect"],"confidence_reason":"No route-local proof verifies the same raw request body before its first parsed use or side effect.","test_hint":"Verify the exact raw request body and signature, reject failure, and only then parse or dispatch the event.","fix_shape":"verify the exact raw request payload before parsing or performing side effects","analysis_complete":true,"analysis_diagnostics":[]},"security_trace":{"version":1,"trace_id":"46999ce6380f6c3928ddc45e","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"34685201a433c9c4ee11855038a5fdebc85c3c07aa2f3f832d59e3e6f7bb7ad8","selected_file_count":1},"steps":[{"id":"b7b8cd38260b8e1e63bcc5fd","kind":"sink","message":"Static finding location: SKY-D282","file":"app/api/stripe/webhook/route.ts","line":6,"column":0,"source_sha256":"d6f3509661f529768253b880bf3d55872363fce33a800e104f400d9655b271b9"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"app/api/stripe/webhook/route.ts":"d6f3509661f529768253b880bf3d55872363fce33a800e104f400d9655b271b9"},"limitations":["Finding source is outside the selected readable Python snapshot; config/other languages are not interpreted as Python.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"evidence_contract":{"schema_version":1,"proof_state":"verified","sources":["raw request body `rawBody`"],"sinks":["JSON.parse"],"symbols":[],"traces":["/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ntixriki/typescript_webhook_unverified/app/api/stripe/webhook/route.ts:6","raw request body `rawBody`","JSON.parse"],"limitations":[]},"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[100,100]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ntixriki/typescript_webhook_unverified","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"typescript-webhook-nondominating-verifier","status":"complete","elapsedSeconds":1.264106,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-0vgznab7/typescript_webhook_nondominating_verifier","nativeReport":{"definitions":{"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-0vgznab7/typescript_webhook_nondominating_verifier/app/api/stripe/webhook/route.ts:POST":{"name":"POST","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-0vgznab7/typescript_webhook_nondominating_verifier/app/api/stripe/webhook/route.ts","line":5,"type":"function","loc":1,"complexity":1,"calls":["enqueueStripeEvent"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":3,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]},"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-0vgznab7/typescript_webhook_nondominating_verifier/app/api/stripe/webhook/route.ts:enqueueStripeEvent":{"name":"enqueueStripeEvent","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-0vgznab7/typescript_webhook_nondominating_verifier/app/api/stripe/webhook/route.ts","line":19,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":["POST"],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"enqueueStripeEvent","full_name":"enqueueStripeEvent","simple_name":"enqueueStripeEvent","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-0vgznab7/typescript_webhook_nondominating_verifier/app/api/stripe/webhook/route.ts","basename":"route.ts","line":19,"confidence":100,"references":0,"called_by":["POST"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app/api/stripe/webhook/route.ts","qualified_name":"POST","kind":"function","line":5,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":3,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}]},{"file":"app/api/stripe/webhook/route.ts","qualified_name":"enqueueStripeEvent","kind":"function","line":19,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}]},{"file":"app/api/stripe/webhook/route.ts","qualified_name":"stripe","kind":"variable","line":3,"classification":"alive","decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":1}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"TypeScript":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":3,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":2,"likely_dead":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-0vgznab7/typescript_webhook_nondominating_verifier","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-0vgznab7/typescript_webhook_nondominating_verifier","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"maintainability_inventory":[],"total_loc":16,"grade_categories":["security","dead_code"],"by_directory":[{"path":"app/api/stripe/webhook","total":2,"files":1,"dead_code":1,"security":1,"rules":{"SKY-D282":1,"unused-functions":1},"severities":{"HIGH":1,"LOW":1}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D282","severity":"HIGH","message":"Webhook handler processes an inbound request without proving provider signature verification before body trust or side effects.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-0vgznab7/typescript_webhook_nondominating_verifier/app/api/stripe/webhook/route.ts","line":5,"col":7,"metadata":{"security_evidence":{"evidence_kind":"webhook_signature_guard","source":"raw request body `payload`","sink":"enqueueStripeEvent","path":["raw request body `payload`","enqueueStripeEvent"],"guards_seen":["provider verifier receives an unrelated payload"],"guards_missing":["provider signature verification of request payload before body trust or side effect"],"confidence_reason":"No route-local proof verifies the same raw request body before its first parsed use or side effect.","test_hint":"Verify the exact raw request body and signature, reject failure, and only then parse or dispatch the event.","fix_shape":"verify the exact raw request payload before parsing or performing side effects","analysis_complete":true,"analysis_diagnostics":[]},"security_trace":{"version":1,"trace_id":"52a6f1474adcbf204c34fd26","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"34685201a433c9c4ee11855038a5fdebc85c3c07aa2f3f832d59e3e6f7bb7ad8","selected_file_count":1},"steps":[{"id":"f770c7f41639df1eec7cdf97","kind":"sink","message":"Static finding location: SKY-D282","file":"app/api/stripe/webhook/route.ts","line":5,"column":0,"source_sha256":"0fc9174f0de7e1c7d7a9c566d62d3f3280d990af41b61752e3ef6f408bf5b993"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"app/api/stripe/webhook/route.ts":"0fc9174f0de7e1c7d7a9c566d62d3f3280d990af41b61752e3ef6f408bf5b993"},"limitations":["Finding source is outside the selected readable Python snapshot; config/other languages are not interpreted as Python.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"evidence_contract":{"schema_version":1,"proof_state":"verified","sources":["raw request body `payload`"],"sinks":["enqueueStripeEvent"],"symbols":[],"traces":["/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-0vgznab7/typescript_webhook_nondominating_verifier/app/api/stripe/webhook/route.ts:5","raw request body `payload`","enqueueStripeEvent"],"limitations":[]},"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[100,100]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-0vgznab7/typescript_webhook_nondominating_verifier","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"typescript-webhook-verified-safe","status":"complete","elapsedSeconds":1.240308,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9bn3u6mb/typescript_webhook_verified","nativeReport":{"definitions":{"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9bn3u6mb/typescript_webhook_verified/app/api/stripe/webhook/route.ts:POST":{"name":"POST","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9bn3u6mb/typescript_webhook_verified/app/api/stripe/webhook/route.ts","line":5,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":3,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]}},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app/api/stripe/webhook/route.ts","qualified_name":"POST","kind":"function","line":5,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":3,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.0,"details":{"confidence":0,"threshold":0}}]},{"file":"app/api/stripe/webhook/route.ts","qualified_name":"stripe","kind":"variable","line":3,"classification":"alive","decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":1}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"TypeScript":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":2,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":2},"candidate_decisions":{"reported":0,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9bn3u6mb/typescript_webhook_verified","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9bn3u6mb/typescript_webhook_verified","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":15,"grade_categories":["security","dead_code","secrets"],"finding_type_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":0,"by_status":{"source_to_sink":0,"partial":0,"unknown":0,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code","secrets"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"none","candidate_count":0,"confidence_range":null},"finding_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-9bn3u6mb/typescript_webhook_verified","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":true,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"typescript-cookie-explicit-false","status":"complete","elapsedSeconds":1.612442,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-xkvctnju/typescript_cookie_explicit_false","nativeReport":{"definitions":{"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-xkvctnju/typescript_cookie_explicit_false/app.ts:setSessionCookie":{"name":"setSessionCookie","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-xkvctnju/typescript_cookie_explicit_false/app.ts","line":1,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"setSessionCookie","full_name":"setSessionCookie","simple_name":"setSessionCookie","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-xkvctnju/typescript_cookie_explicit_false/app.ts","basename":"app.ts","line":1,"confidence":85,"references":0,"confidence_factors":["exported_symbol"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[{"rule_id":"SKY-E003","message":"Unused TypeScript/JavaScript file (not imported by any other file)","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-xkvctnju/typescript_cookie_explicit_false/app.ts","line":1,"severity":"LOW","category":"DEAD_CODE","confidence":80,"confidence_factors":["unimported_file"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.ts","qualified_name":"setSessionCookie","kind":"function","line":1,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"TypeScript":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-xkvctnju/typescript_cookie_explicit_false","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-xkvctnju/typescript_cookie_explicit_false","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"unused_files_count":1,"maintainability_inventory":[],"total_loc":3,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":3,"files":1,"dead_code":2,"security":1,"rules":{"SKY-D252":1,"SKY-E003":1,"unused-functions":1},"severities":{"MEDIUM":1,"LOW":2}}],"finding_type_counts":{"defect":0,"review":3,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":3,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D252","severity":"MEDIUM","message":"Cookie security flags are not proven enabled (httpOnly=false, secure=false). Set httpOnly and secure to literal true.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-xkvctnju/typescript_cookie_explicit_false/app.ts","line":2,"col":2,"metadata":{"security_evidence":{"evidence_kind":"cookie_security_options","source":"cookie options at the response write","sink":"res.cookie","path":["cookie options","httpOnly=false, secure=false","Set-Cookie response"],"guards_seen":[],"guards_missing":["httpOnly=true","secure=true"],"options":{"httpOnly":"false","secure":"false"},"confidence_reason":"The browser security flags are false, absent, or cannot be proven true at this cookie write.","test_hint":"Assert the emitted Set-Cookie header has Secure and HttpOnly attributes.","fix_shape":"set httpOnly and secure to literal true after all spreads","analysis_complete":true,"analysis_diagnostics":[]},"security_trace":{"version":1,"trace_id":"9612e6037c78bd78efd6dce1","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"e903737d0573da873f9651e5525d5cceeebd4745631b982a4efdd5ddc1068adc","selected_file_count":1},"steps":[{"id":"1ada39a0b35b58594264c73a","kind":"sink","message":"Static finding location: SKY-D252","file":"app.ts","line":2,"column":0,"source_sha256":"42eb0e6cb510079d73818738fa9292fee64afb83f45298fd2b82876d09204639"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"app.ts":"42eb0e6cb510079d73818738fa9292fee64afb83f45298fd2b82876d09204639"},"limitations":["Finding source is outside the selected readable Python snapshot; config/other languages are not interpreted as Python.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"evidence_contract":{"schema_version":1,"proof_state":"verified","sources":["cookie options at the response write"],"sinks":["res.cookie"],"symbols":[],"traces":["/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-xkvctnju/typescript_cookie_explicit_false/app.ts:2","cookie options","httpOnly=false, secure=false","Set-Cookie response"],"limitations":[]},"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"medium","highest_severity":"MEDIUM","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":1,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"medium","highest_severity":"MEDIUM","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":1,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":2,"confidence_range":[80,85]},"finding_counts":{"defect":0,"review":3,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-xkvctnju/typescript_cookie_explicit_false","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"typescript-cookie-literal-safe","status":"complete","elapsedSeconds":2.054538,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-tw2209zj/typescript_cookie_literal_safe","nativeReport":{"definitions":{"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-tw2209zj/typescript_cookie_literal_safe/app.ts:setSessionCookie":{"name":"setSessionCookie","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-tw2209zj/typescript_cookie_literal_safe/app.ts","line":1,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"setSessionCookie","full_name":"setSessionCookie","simple_name":"setSessionCookie","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-tw2209zj/typescript_cookie_literal_safe/app.ts","basename":"app.ts","line":1,"confidence":85,"references":0,"confidence_factors":["exported_symbol"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[{"rule_id":"SKY-E003","message":"Unused TypeScript/JavaScript file (not imported by any other file)","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-tw2209zj/typescript_cookie_literal_safe/app.ts","line":1,"severity":"LOW","category":"DEAD_CODE","confidence":80,"confidence_factors":["unimported_file"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.ts","qualified_name":"setSessionCookie","kind":"function","line":1,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"TypeScript":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-tw2209zj/typescript_cookie_literal_safe","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-tw2209zj/typescript_cookie_literal_safe","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"unused_files_count":1,"maintainability_inventory":[],"total_loc":3,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":2,"files":1,"dead_code":2,"rules":{"SKY-E003":1,"unused-functions":1},"severities":{"LOW":2}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":0,"by_status":{"source_to_sink":0,"partial":0,"unknown":0,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":2,"confidence_range":[80,85]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-tw2209zj/typescript_cookie_literal_safe","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"java-ssrf-httpclient-send","status":"complete","elapsedSeconds":1.604815,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-lck_ei04/java_ssrf_httpclient_send","nativeReport":{"definitions":{"App":{"name":"App","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-lck_ei04/java_ssrf_httpclient_send/App.java","line":6,"type":"class","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"App.fetch":{"name":"App.fetch","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-lck_ei04/java_ssrf_httpclient_send/App.java","line":7,"type":"method","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[],"unused_imports":[],"unused_classes":[{"name":"App","full_name":"App","simple_name":"App","type":"class","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-lck_ei04/java_ssrf_httpclient_send/App.java","basename":"App.java","line":6,"confidence":100,"references":0,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"App.java","qualified_name":"App","kind":"class","line":6,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}]},{"file":"App.java","qualified_name":"App.fetch","kind":"method","line":7,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Java":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":2,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":2},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-lck_ei04/java_ssrf_httpclient_send","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-lck_ei04/java_ssrf_httpclient_send","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"maintainability_inventory":[],"total_loc":14,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":2,"files":1,"dead_code":1,"security":1,"rules":{"SKY-D216":1,"unused-classes":1},"severities":{"CRITICAL":1,"LOW":1}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D216","severity":"CRITICAL","message":"Request-controlled URL reaches Java HTTP request construction. Validate scheme and host against an allowlist.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-lck_ei04/java_ssrf_httpclient_send/App.java","line":10,"col":0,"cwe":"CWE-918","metadata":{"security_trace":{"version":1,"trace_id":"8e937e591fcff43e0f3b820b","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"323352329960e9ca5df6efda29f65cef3887dbc2017fbf84a97bdd85b4c33444","selected_file_count":1},"steps":[{"id":"ec991534f56b35430e171750","kind":"sink","message":"Static finding location: SKY-D216","file":"App.java","line":10,"column":0,"source_sha256":"e26625e29b51eb0e03cf5773bccad2d1e36e26b3060c5b3f196aa5bd3a925d00"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"App.java":"e26625e29b51eb0e03cf5773bccad2d1e36e26b3060c5b3f196aa5bd3a925d00"},"limitations":["Finding source is outside the selected readable Python snapshot; config/other languages are not interpreted as Python.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"compliance_tags":[{"framework":"OWASP_TOP10","requirement":"A10:2021","title":"SSRF"},{"framework":"PCI_DSS_4","requirement":"6.2.4","title":"Security Flaws"}],"compliance_display":["OWASP Top 10 A10:2021","PCI DSS 4.0 6.2.4"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"critical","highest_severity":"CRITICAL","finding_count":1,"severity_counts":{"CRITICAL":1,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"critical","highest_severity":"CRITICAL","finding_count":1,"severity_counts":{"CRITICAL":1,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[100,100]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-lck_ei04/java_ssrf_httpclient_send","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"java-open-redirect-protocol-relative","status":"complete","elapsedSeconds":0.661485,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-bhnes3fk/java_open_redirect_protocol_relative","nativeReport":{"definitions":{"App":{"name":"App","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-bhnes3fk/java_open_redirect_protocol_relative/App.java","line":4,"type":"class","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"App.redirect":{"name":"App.redirect","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-bhnes3fk/java_open_redirect_protocol_relative/App.java","line":5,"type":"method","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[],"unused_imports":[],"unused_classes":[{"name":"App","full_name":"App","simple_name":"App","type":"class","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-bhnes3fk/java_open_redirect_protocol_relative/App.java","basename":"App.java","line":4,"confidence":100,"references":0,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"App.java","qualified_name":"App","kind":"class","line":4,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}]},{"file":"App.java","qualified_name":"App.redirect","kind":"method","line":5,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Java":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":2,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":2},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-bhnes3fk/java_open_redirect_protocol_relative","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-bhnes3fk/java_open_redirect_protocol_relative","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"maintainability_inventory":[],"total_loc":11,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":2,"files":1,"dead_code":1,"security":1,"rules":{"SKY-D230":1,"unused-classes":1},"severities":{"HIGH":1,"LOW":1}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D230","severity":"HIGH","message":"Servlet redirect uses request-controlled data. Validate redirect targets against a relative-path or host allowlist.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-bhnes3fk/java_open_redirect_protocol_relative/App.java","line":10,"col":0,"cwe":"CWE-601","metadata":{"security_trace":{"version":1,"trace_id":"3f296f81f8c52d83d5094613","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"323352329960e9ca5df6efda29f65cef3887dbc2017fbf84a97bdd85b4c33444","selected_file_count":1},"steps":[{"id":"bf85bee1aeb4c03073da3f3d","kind":"sink","message":"Static finding location: SKY-D230","file":"App.java","line":10,"column":0,"source_sha256":"6d22cd5d0f4a7472549671d5a40246b09734fd6e2006566d68b0962e3fd9c47d"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"App.java":"6d22cd5d0f4a7472549671d5a40246b09734fd6e2006566d68b0962e3fd9c47d"},"limitations":["Finding source is outside the selected readable Python snapshot; config/other languages are not interpreted as Python.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"compliance_tags":[{"framework":"OWASP_TOP10","requirement":"A01:2021","title":"Broken Access Control"}],"compliance_display":["OWASP Top 10 A01:2021"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[100,100]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-bhnes3fk/java_open_redirect_protocol_relative","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"java-ldap-xpath-injection","status":"complete","elapsedSeconds":0.762549,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-v57r4xdk/java_ldap_xpath_injection","nativeReport":{"definitions":{"App":{"name":"App","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-v57r4xdk/java_ldap_xpath_injection/App.java","line":5,"type":"class","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"App.lookup":{"name":"App.lookup","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-v57r4xdk/java_ldap_xpath_injection/App.java","line":6,"type":"method","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[],"unused_imports":[],"unused_classes":[{"name":"App","full_name":"App","simple_name":"App","type":"class","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-v57r4xdk/java_ldap_xpath_injection/App.java","basename":"App.java","line":5,"confidence":100,"references":0,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"App.java","qualified_name":"App","kind":"class","line":5,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}]},{"file":"App.java","qualified_name":"App.lookup","kind":"method","line":6,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Java":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":2,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":2},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-v57r4xdk/java_ldap_xpath_injection","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-v57r4xdk/java_ldap_xpath_injection","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":2,"maintainability_inventory":[],"total_loc":13,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":3,"files":1,"dead_code":1,"security":2,"rules":{"SKY-D240":1,"SKY-D241":1,"unused-classes":1},"severities":{"CRITICAL":2,"LOW":1}}],"finding_type_counts":{"defect":0,"review":3,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":2,"by_status":{"source_to_sink":0,"partial":0,"unknown":2,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":3,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D240","severity":"CRITICAL","message":"LDAP search filter uses servlet-controlled data. Escape LDAP filter values or use safe APIs.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-v57r4xdk/java_ldap_xpath_injection/App.java","line":9,"col":0,"category":"ldap_injection","cwe":"CWE-90","metadata":{"security_trace":{"version":1,"trace_id":"130f7d262ba8b69a51663003","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"323352329960e9ca5df6efda29f65cef3887dbc2017fbf84a97bdd85b4c33444","selected_file_count":1},"steps":[{"id":"123adfdb1f25255516704d89","kind":"sink","message":"Static finding location: SKY-D240","file":"App.java","line":9,"column":0,"source_sha256":"4ffe19c369e184f19e348c760c06e71a141dea139a9f4665ff137cbb7b838ee6"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"App.java":"4ffe19c369e184f19e348c760c06e71a141dea139a9f4665ff137cbb7b838ee6"},"limitations":["Finding source is outside the selected readable Python snapshot; config/other languages are not interpreted as Python.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"compliance_tags":[{"framework":"OWASP_TOP10","requirement":"A03:2021","title":"Injection"},{"framework":"PCI_DSS_4","requirement":"6.2.4","title":"Security Flaws"}],"compliance_display":["OWASP Top 10 A03:2021","PCI DSS 4.0 6.2.4"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"rule_id":"SKY-D241","severity":"CRITICAL","message":"XPath expression uses servlet-controlled data. Use fixed expressions or strict allowlists.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-v57r4xdk/java_ldap_xpath_injection/App.java","line":13,"col":0,"category":"xpath_injection","cwe":"CWE-643","metadata":{"security_trace":{"version":1,"trace_id":"475f2d6efe5881457f66c605","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"323352329960e9ca5df6efda29f65cef3887dbc2017fbf84a97bdd85b4c33444","selected_file_count":1},"steps":[{"id":"31b1e2cfd4672aa3d4b47850","kind":"sink","message":"Static finding location: SKY-D241","file":"App.java","line":13,"column":0,"source_sha256":"4ffe19c369e184f19e348c760c06e71a141dea139a9f4665ff137cbb7b838ee6"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"App.java":"4ffe19c369e184f19e348c760c06e71a141dea139a9f4665ff137cbb7b838ee6"},"limitations":["Finding source is outside the selected readable Python snapshot; config/other languages are not interpreted as Python.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"compliance_tags":[{"framework":"OWASP_TOP10","requirement":"A07:2021","title":"Identification and Authentication Failures"},{"framework":"PCI_DSS_4","requirement":"6.5.10","title":"Authentication"}],"compliance_display":["OWASP Top 10 A07:2021","PCI DSS 4.0 6.5.10"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"critical","highest_severity":"CRITICAL","finding_count":2,"severity_counts":{"CRITICAL":2,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"critical","highest_severity":"CRITICAL","finding_count":2,"severity_counts":{"CRITICAL":2,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[100,100]},"finding_counts":{"defect":0,"review":3,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-v57r4xdk/java_ldap_xpath_injection","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"go-command-shell-query","status":"complete","elapsedSeconds":0.654488,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-he2wmbsx/go_command_shell_query","nativeReport":{"definitions":{"checkout":{"name":"checkout","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-he2wmbsx/go_command_shell_query/main.go","line":8,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"checkout","full_name":"checkout","simple_name":"checkout","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-he2wmbsx/go_command_shell_query/main.go","basename":"main.go","line":8,"confidence":100,"references":0,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"main.go","qualified_name":"checkout","kind":"function","line":8,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Go":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-he2wmbsx/go_command_shell_query","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-he2wmbsx/go_command_shell_query","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"language_engines":{"go":{"status":"available","file_count":1,"engine":{"status":"available","binary":"/private/tmp/skylos-public-benchmark-run-20261022/skylos/engines/go/skylos-go","configured_by":"bundled"},"completed_checks":["quality","dead_code","security"],"skipped_checks":[]}},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"maintainability_inventory":[],"total_loc":9,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":2,"files":1,"dead_code":1,"security":1,"rules":{"SKY-D212":1,"unused-functions":1},"severities":{"CRITICAL":1,"LOW":1}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D212","severity":"CRITICAL","message":"Command Injection Shell command built from request or network input. Pass arguments to a fixed program without a shell.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-he2wmbsx/go_command_shell_query/main.go","line":10,"col":6,"metadata":{"security_trace":{"version":1,"trace_id":"d930a3c1200c4c7c1a726971","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"1790ded2eac632735ba76082e613deb4261521c6daafd3ef41bd707a9f4979f9","selected_file_count":1},"steps":[{"id":"74fc379cbf6472a453149955","kind":"sink","message":"Static finding location: SKY-D212","file":"main.go","line":10,"column":0,"source_sha256":"42109951bf3cc4f566d2a0796031669ffc7560348cb73f0f1234b0363f952bba"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"main.go":"42109951bf3cc4f566d2a0796031669ffc7560348cb73f0f1234b0363f952bba"},"limitations":["Finding source is outside the selected readable Python snapshot; config/other languages are not interpreted as Python.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"compliance_tags":[{"framework":"PCI_DSS_4","requirement":"6.2.4","title":"Injection Flaws"},{"framework":"OWASP_TOP10","requirement":"A03:2021","title":"Injection"},{"framework":"SOC2","requirement":"CC6.1","title":"Security Controls"}],"compliance_display":["PCI DSS 4.0 6.2.4","OWASP Top 10 A03:2021","SOC 2 CC6.1"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"critical","highest_severity":"CRITICAL","finding_count":1,"severity_counts":{"CRITICAL":1,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"critical","highest_severity":"CRITICAL","finding_count":1,"severity_counts":{"CRITICAL":1,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[100,100]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-he2wmbsx/go_command_shell_query","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"go-tar-symlink-escape","status":"complete","elapsedSeconds":0.772342,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a3aqumpx/go_tar_symlink_escape","nativeReport":{"definitions":{"untar":{"name":"untar","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a3aqumpx/go_tar_symlink_escape/main.go","line":9,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"untar","full_name":"untar","simple_name":"untar","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a3aqumpx/go_tar_symlink_escape/main.go","basename":"main.go","line":9,"confidence":100,"references":0,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"main.go","qualified_name":"untar","kind":"function","line":9,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Go":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a3aqumpx/go_tar_symlink_escape","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a3aqumpx/go_tar_symlink_escape","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"language_engines":{"go":{"status":"available","file_count":1,"engine":{"status":"available","binary":"/private/tmp/skylos-public-benchmark-run-20261022/skylos/engines/go/skylos-go","configured_by":"bundled"},"completed_checks":["quality","dead_code","security"],"skipped_checks":[]}},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"maintainability_inventory":[],"total_loc":21,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":2,"files":1,"dead_code":1,"security":1,"rules":{"SKY-D215":1,"unused-functions":1},"severities":{"HIGH":1,"LOW":1}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D215","severity":"HIGH","message":"Archive Extraction Path Traversal Archive entry path is written to disk without validating traversal segments. Reject '..' paths or ensure the cleaned output path stays under the extraction root.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a3aqumpx/go_tar_symlink_escape/main.go","line":19,"col":13,"metadata":{"security_trace":{"version":1,"trace_id":"c6a18e97344f40565c5708bc","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"1790ded2eac632735ba76082e613deb4261521c6daafd3ef41bd707a9f4979f9","selected_file_count":1},"steps":[{"id":"57b8d4e966b3e3d3a2438023","kind":"sink","message":"Static finding location: SKY-D215","file":"main.go","line":19,"column":0,"source_sha256":"408de67aae69b0ed2c3259c04efa399f02dd4d40407341b79722e2d8bfd6fcba"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"main.go":"408de67aae69b0ed2c3259c04efa399f02dd4d40407341b79722e2d8bfd6fcba"},"limitations":["Finding source is outside the selected readable Python snapshot; config/other languages are not interpreted as Python.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[100,100]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a3aqumpx/go_tar_symlink_escape","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"rust-shell-arg-taint","status":"complete","elapsedSeconds":0.595834,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-76bp_ibe/rust_shell_arg_taint","nativeReport":{"definitions":{"main":{"name":"main","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-76bp_ibe/rust_shell_arg_taint/main.rs","line":3,"type":"function","loc":1,"complexity":1,"calls":["Command"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":2,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]}},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"main.rs","qualified_name":"main","kind":"function","line":3,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":2,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Rust":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":1},"candidate_decisions":{"reported":0,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-76bp_ibe/rust_shell_arg_taint","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-76bp_ibe/rust_shell_arg_taint","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"maintainability_inventory":[],"total_loc":8,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":1,"files":1,"security":1,"rules":{"SKY-D212":1},"severities":{"HIGH":1}}],"finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D212","severity":"HIGH","message":"User-controlled input reaches a shell command argument.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-76bp_ibe/rust_shell_arg_taint/main.rs","line":5,"col":12,"category":"danger","metadata":{"security_trace":{"version":1,"trace_id":"ad92da9831a86d372ef296d2","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"e412ac6fbf1b861ab66280b5ff9376b918346d099c84585834c4e66e62292b05","selected_file_count":1},"steps":[{"id":"643f22d68768012d68bdd248","kind":"sink","message":"Static finding location: SKY-D212","file":"main.rs","line":5,"column":0,"source_sha256":"591c2821a1206c3be6380659ca7e0b193c9dbe28ddb3408d6bd731b9662eb5ac"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"main.rs":"591c2821a1206c3be6380659ca7e0b193c9dbe28ddb3408d6bd731b9662eb5ac"},"limitations":["Finding source is outside the selected readable Python snapshot; config/other languages are not interpreted as Python.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"evidence_contract":{"schema_version":1,"proof_state":"candidate","sources":[],"sinks":[],"symbols":[],"traces":["/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-76bp_ibe/rust_shell_arg_taint/main.rs:5"],"limitations":[]},"compliance_tags":[{"framework":"PCI_DSS_4","requirement":"6.2.4","title":"Injection Flaws"},{"framework":"OWASP_TOP10","requirement":"A03:2021","title":"Injection"},{"framework":"SOC2","requirement":"CC6.1","title":"Security Controls"}],"compliance_display":["PCI DSS 4.0 6.2.4","OWASP Top 10 A03:2021","SOC 2 CC6.1"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"none","candidate_count":0,"confidence_range":null},"finding_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-76bp_ibe/rust_shell_arg_taint","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"rust-path-filename-safe","status":"complete","elapsedSeconds":0.607569,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4mey78gd/rust_path_filename_safe","nativeReport":{"definitions":{"read_profile":{"name":"read_profile","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4mey78gd/rust_path_filename_safe/main.rs","line":3,"type":"function","loc":1,"complexity":1,"calls":["Path","PathBuf"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.4,"details":{"confidence":40,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":40,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"read_profile","full_name":"read_profile","simple_name":"read_profile","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4mey78gd/rust_path_filename_safe/main.rs","basename":"main.rs","line":3,"confidence":40,"references":0,"calls":["Path","PathBuf"],"confidence_factors":["experimental_language"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.4,"details":{"confidence":40,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":40,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"main.rs","qualified_name":"read_profile","kind":"function","line":3,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":40,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.4,"details":{"confidence":40,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Rust":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4mey78gd/rust_path_filename_safe","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4mey78gd/rust_path_filename_safe","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":7,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":1,"files":1,"dead_code":1,"rules":{"unused-functions":1},"severities":{"LOW":1}}],"finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":0,"by_status":{"source_to_sink":0,"partial":0,"unknown":0,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[40,40]},"finding_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4mey78gd/rust_path_filename_safe","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"dart-http-tainted-url","status":"complete","elapsedSeconds":1.266574,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-qftwgk3u/dart_http_tainted_url","nativeReport":{"definitions":{"load":{"name":"load","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-qftwgk3u/dart_http_tainted_url/main.dart","line":3,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"load","full_name":"load","simple_name":"load","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-qftwgk3u/dart_http_tainted_url/main.dart","basename":"main.dart","line":3,"confidence":100,"references":0,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[{"name":"http","full_name":"http","simple_name":"http","type":"import","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-qftwgk3u/dart_http_tainted_url/main.dart","basename":"main.dart","line":1,"confidence":100,"references":0,"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"main.dart","qualified_name":"load","kind":"function","line":3,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Dart":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1},"candidate_decisions":{"reported":2,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-qftwgk3u/dart_http_tainted_url","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-qftwgk3u/dart_http_tainted_url","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"maintainability_inventory":[],"total_loc":4,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":3,"files":1,"dead_code":2,"security":1,"rules":{"SKY-D216":1,"unused-functions":1,"unused-imports":1},"severities":{"HIGH":1,"LOW":2}}],"finding_type_counts":{"defect":0,"review":3,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":3,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D216","severity":"HIGH","message":"User-controlled URL reaches an outbound request sink.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-qftwgk3u/dart_http_tainted_url/main.dart","line":4,"col":2,"category":"danger","metadata":{"security_trace":{"version":1,"trace_id":"a087fa30eabec173734e6f83","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"01a8634aa16bd28eeeaac138fa4fdfbc3727b84600e607e6f3ca90bff15c1662","selected_file_count":1},"steps":[{"id":"97626120d351b1a335bcfd82","kind":"sink","message":"Static finding location: SKY-D216","file":"main.dart","line":4,"column":0,"source_sha256":"8fde06171e5e363e7b6dbf83bf2bd2468df7055c72e4181da0a039a8a75ded12"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"main.dart":"8fde06171e5e363e7b6dbf83bf2bd2468df7055c72e4181da0a039a8a75ded12"},"limitations":["Finding source is outside the selected readable Python snapshot; config/other languages are not interpreted as Python.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"evidence_contract":{"schema_version":1,"proof_state":"candidate","sources":[],"sinks":[],"symbols":[],"traces":["/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-qftwgk3u/dart_http_tainted_url/main.dart:4"],"limitations":[]},"compliance_tags":[{"framework":"OWASP_TOP10","requirement":"A10:2021","title":"SSRF"},{"framework":"PCI_DSS_4","requirement":"6.2.4","title":"Security Flaws"}],"compliance_display":["OWASP Top 10 A10:2021","PCI DSS 4.0 6.2.4"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":2,"confidence_range":[100,100]},"finding_counts":{"defect":0,"review":3,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-qftwgk3u/dart_http_tainted_url","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"dart-uri-https-safe","status":"complete","elapsedSeconds":1.595821,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-phjw_6yr/dart_uri_https_safe","nativeReport":{"definitions":{"load":{"name":"load","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-phjw_6yr/dart_uri_https_safe/main.dart","line":3,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"load","full_name":"load","simple_name":"load","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-phjw_6yr/dart_uri_https_safe/main.dart","basename":"main.dart","line":3,"confidence":100,"references":0,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[{"name":"http","full_name":"http","simple_name":"http","type":"import","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-phjw_6yr/dart_uri_https_safe/main.dart","basename":"main.dart","line":1,"confidence":100,"references":0,"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"main.dart","qualified_name":"load","kind":"function","line":3,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Dart":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1},"candidate_decisions":{"reported":2,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-phjw_6yr/dart_uri_https_safe","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-phjw_6yr/dart_uri_https_safe","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":5,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":2,"files":1,"dead_code":2,"rules":{"unused-functions":1,"unused-imports":1},"severities":{"LOW":2}}],"finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":0,"by_status":{"source_to_sink":0,"partial":0,"unknown":0,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"review","candidate_count":2,"confidence_range":[100,100]},"finding_counts":{"defect":0,"review":2,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-phjw_6yr/dart_uri_https_safe","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"php-request-include","status":"complete","elapsedSeconds":1.126141,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-jyjynjcu/php_request_include","nativeReport":{"definitions":{},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"PHP":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":0,"classification_policy":"dead-code-evidence-v3","classifications":{},"candidate_decisions":{"reported":0,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-jyjynjcu/php_request_include","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-jyjynjcu/php_request_include","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"maintainability_inventory":[],"total_loc":3,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":1,"files":1,"security":1,"rules":{"SKY-D215":1},"severities":{"HIGH":1}}],"finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D215","severity":"HIGH","message":"Request-controlled path reaches a filesystem sink without path validation.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-jyjynjcu/php_request_include/index.php","line":3,"col":0,"category":"danger","metadata":{"security_trace":{"version":1,"trace_id":"d3cb57708b2245e1b04eb648","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"a1680ccada0380c664f183ff24d6410041a2b65a24541336f0ba9a48e47eab8f","selected_file_count":1},"steps":[{"id":"2d51c8faf6c3800abbbe9cfc","kind":"sink","message":"Static finding location: SKY-D215","file":"index.php","line":3,"column":0,"source_sha256":"6adf1bba01314b9491ff5e2a6d0d46f21229083f381094454d5f8b4c702d3ee6"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"index.php":"6adf1bba01314b9491ff5e2a6d0d46f21229083f381094454d5f8b4c702d3ee6"},"limitations":["Finding source is outside the selected readable Python snapshot; config/other languages are not interpreted as Python.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"evidence_contract":{"schema_version":1,"proof_state":"candidate","sources":[],"sinks":[],"symbols":[],"traces":["/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-jyjynjcu/php_request_include/index.php:3"],"limitations":[]},"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"none","candidate_count":0,"confidence_range":null},"finding_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-jyjynjcu/php_request_include","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"shell-eval-arg","status":"complete","elapsedSeconds":1.087904,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-o8nlp4gd/shell_eval_arg","nativeReport":{"definitions":{},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Shell":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":0,"classification_policy":"dead-code-evidence-v3","classifications":{},"candidate_decisions":{"reported":0,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-o8nlp4gd/shell_eval_arg","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-o8nlp4gd/shell_eval_arg","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"maintainability_inventory":[],"total_loc":4,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":1,"files":1,"security":1,"rules":{"SKY-D212":1},"severities":{"CRITICAL":1}}],"finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D212","severity":"CRITICAL","message":"Shell command execution receives untrusted input; use fixed commands and strict allowlists.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-o8nlp4gd/shell_eval_arg/deploy.sh","line":5,"col":0,"category":"danger","metadata":{"security_trace":{"version":1,"trace_id":"176d984fe6e63c69bd5f69db","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"95a732ea57fb9e9b3bf0dfd4ab794199429feb4fa43f77b99cbff04bc68b2888","selected_file_count":1},"steps":[{"id":"74f3ae10cccb053f27a97cfd","kind":"sink","message":"Static finding location: SKY-D212","file":"deploy.sh","line":5,"column":0,"source_sha256":"8ff15b795a35ab352217fe9cf8df1e8ee878761ad768e63dc03374b8d13d33a4"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"deploy.sh":"8ff15b795a35ab352217fe9cf8df1e8ee878761ad768e63dc03374b8d13d33a4"},"limitations":["Finding source is outside the selected readable Python snapshot; config/other languages are not interpreted as Python.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"evidence_contract":{"schema_version":1,"proof_state":"candidate","sources":[],"sinks":[],"symbols":[],"traces":["/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-o8nlp4gd/shell_eval_arg/deploy.sh:5"],"limitations":[]},"compliance_tags":[{"framework":"PCI_DSS_4","requirement":"6.2.4","title":"Injection Flaws"},{"framework":"OWASP_TOP10","requirement":"A03:2021","title":"Injection"},{"framework":"SOC2","requirement":"CC6.1","title":"Security Controls"}],"compliance_display":["PCI DSS 4.0 6.2.4","OWASP Top 10 A03:2021","SOC 2 CC6.1"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"critical","highest_severity":"CRITICAL","finding_count":1,"severity_counts":{"CRITICAL":1,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"critical","highest_severity":"CRITICAL","finding_count":1,"severity_counts":{"CRITICAL":1,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"none","candidate_count":0,"confidence_range":null},"finding_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-o8nlp4gd/shell_eval_arg","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"shell-source-arg","status":"complete","elapsedSeconds":0.816053,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-g06jro0o/shell_source_arg","nativeReport":{"definitions":{},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Shell":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":0,"classification_policy":"dead-code-evidence-v3","classifications":{},"candidate_decisions":{"reported":0,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-g06jro0o/shell_source_arg","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-g06jro0o/shell_source_arg","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"maintainability_inventory":[],"total_loc":4,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":1,"files":1,"security":1,"rules":{"SKY-D212":1},"severities":{"CRITICAL":1}}],"finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D212","severity":"CRITICAL","message":"Shell command execution receives untrusted input; use fixed commands and strict allowlists.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-g06jro0o/shell_source_arg/run.sh","line":5,"col":0,"category":"danger","metadata":{"security_trace":{"version":1,"trace_id":"b1138549d0bff3d0a227751d","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"eeadd117c2e5be1ed208523b2dbb572b7e7635bc7c7bd2afa80e8aad6d86102a","selected_file_count":1},"steps":[{"id":"16a6f93c64294de905f43978","kind":"sink","message":"Static finding location: SKY-D212","file":"run.sh","line":5,"column":0,"source_sha256":"558aefdaf0919065832bb623b4282260b99ccdf47e3974d31578237c0acbaceb"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"run.sh":"558aefdaf0919065832bb623b4282260b99ccdf47e3974d31578237c0acbaceb"},"limitations":["Finding source is outside the selected readable Python snapshot; config/other languages are not interpreted as Python.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"evidence_contract":{"schema_version":1,"proof_state":"candidate","sources":[],"sinks":[],"symbols":[],"traces":["/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-g06jro0o/shell_source_arg/run.sh:5"],"limitations":[]},"compliance_tags":[{"framework":"PCI_DSS_4","requirement":"6.2.4","title":"Injection Flaws"},{"framework":"OWASP_TOP10","requirement":"A03:2021","title":"Injection"},{"framework":"SOC2","requirement":"CC6.1","title":"Security Controls"}],"compliance_display":["PCI DSS 4.0 6.2.4","OWASP Top 10 A03:2021","SOC 2 CC6.1"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"critical","highest_severity":"CRITICAL","finding_count":1,"severity_counts":{"CRITICAL":1,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"critical","highest_severity":"CRITICAL","finding_count":1,"severity_counts":{"CRITICAL":1,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"none","candidate_count":0,"confidence_range":null},"finding_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-g06jro0o/shell_source_arg","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"shell-c-flag-arg","status":"complete","elapsedSeconds":0.659435,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4jy_phzh/shell_c_flag_arg","nativeReport":{"definitions":{},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Shell":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":0,"classification_policy":"dead-code-evidence-v3","classifications":{},"candidate_decisions":{"reported":0,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4jy_phzh/shell_c_flag_arg","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4jy_phzh/shell_c_flag_arg","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"maintainability_inventory":[],"total_loc":4,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":1,"files":1,"security":1,"rules":{"SKY-D212":1},"severities":{"CRITICAL":1}}],"finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D212","severity":"CRITICAL","message":"Shell command execution receives untrusted input; use fixed commands and strict allowlists.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4jy_phzh/shell_c_flag_arg/run.sh","line":5,"col":0,"category":"danger","metadata":{"security_trace":{"version":1,"trace_id":"8795ee0967ece6a5a79e82ea","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"eeadd117c2e5be1ed208523b2dbb572b7e7635bc7c7bd2afa80e8aad6d86102a","selected_file_count":1},"steps":[{"id":"c52341d23b1e77f183ab2c3c","kind":"sink","message":"Static finding location: SKY-D212","file":"run.sh","line":5,"column":0,"source_sha256":"66c4120195e04fdff4aa28ed4e552b0ff29a52fd6b4e80aea8e9af94e18445a8"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"run.sh":"66c4120195e04fdff4aa28ed4e552b0ff29a52fd6b4e80aea8e9af94e18445a8"},"limitations":["Finding source is outside the selected readable Python snapshot; config/other languages are not interpreted as Python.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"evidence_contract":{"schema_version":1,"proof_state":"candidate","sources":[],"sinks":[],"symbols":[],"traces":["/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4jy_phzh/shell_c_flag_arg/run.sh:5"],"limitations":[]},"compliance_tags":[{"framework":"PCI_DSS_4","requirement":"6.2.4","title":"Injection Flaws"},{"framework":"OWASP_TOP10","requirement":"A03:2021","title":"Injection"},{"framework":"SOC2","requirement":"CC6.1","title":"Security Controls"}],"compliance_display":["PCI DSS 4.0 6.2.4","OWASP Top 10 A03:2021","SOC 2 CC6.1"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"critical","highest_severity":"CRITICAL","finding_count":1,"severity_counts":{"CRITICAL":1,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"critical","highest_severity":"CRITICAL","finding_count":1,"severity_counts":{"CRITICAL":1,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"none","candidate_count":0,"confidence_range":null},"finding_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4jy_phzh/shell_c_flag_arg","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"shell-curl-tainted-url","status":"complete","elapsedSeconds":1.300388,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-85safm0d/shell_curl_tainted_url","nativeReport":{"definitions":{},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Shell":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":0,"classification_policy":"dead-code-evidence-v3","classifications":{},"candidate_decisions":{"reported":0,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-85safm0d/shell_curl_tainted_url","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-85safm0d/shell_curl_tainted_url","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"maintainability_inventory":[],"total_loc":4,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":1,"files":1,"security":1,"rules":{"SKY-D216":1},"severities":{"CRITICAL":1}}],"finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D216","severity":"CRITICAL","message":"User-controlled URL reaches curl or wget; validate outbound destinations against an allowlist.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-85safm0d/shell_curl_tainted_url/fetch.sh","line":5,"col":0,"category":"danger","metadata":{"security_trace":{"version":1,"trace_id":"9cb515130581b98d2ce4bd44","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"f218cd800afe478601a1687d642b974fff8e51789fa8db49ede17d08811031a7","selected_file_count":1},"steps":[{"id":"e3f84ca9435afed59104ba89","kind":"sink","message":"Static finding location: SKY-D216","file":"fetch.sh","line":5,"column":0,"source_sha256":"36409fe9943b7f2ed1b0791e7167c329b7c741a8fb7589ae59f0860dfbcfbaf2"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"fetch.sh":"36409fe9943b7f2ed1b0791e7167c329b7c741a8fb7589ae59f0860dfbcfbaf2"},"limitations":["Finding source is outside the selected readable Python snapshot; config/other languages are not interpreted as Python.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"evidence_contract":{"schema_version":1,"proof_state":"candidate","sources":[],"sinks":[],"symbols":[],"traces":["/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-85safm0d/shell_curl_tainted_url/fetch.sh:5"],"limitations":[]},"compliance_tags":[{"framework":"OWASP_TOP10","requirement":"A10:2021","title":"SSRF"},{"framework":"PCI_DSS_4","requirement":"6.2.4","title":"Security Flaws"}],"compliance_display":["OWASP Top 10 A10:2021","PCI DSS 4.0 6.2.4"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"critical","highest_severity":"CRITICAL","finding_count":1,"severity_counts":{"CRITICAL":1,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"critical","highest_severity":"CRITICAL","finding_count":1,"severity_counts":{"CRITICAL":1,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"none","candidate_count":0,"confidence_range":null},"finding_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-85safm0d/shell_curl_tainted_url","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"shell-curl-fixed-host-path","status":"complete","elapsedSeconds":0.698579,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-j9tk0xyi/shell_curl_fixed_host_path","nativeReport":{"definitions":{},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Shell":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":0,"classification_policy":"dead-code-evidence-v3","classifications":{},"candidate_decisions":{"reported":0,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-j9tk0xyi/shell_curl_fixed_host_path","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-j9tk0xyi/shell_curl_fixed_host_path","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":4,"grade_categories":["security","dead_code"],"finding_type_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":0,"by_status":{"source_to_sink":0,"partial":0,"unknown":0,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"none","candidate_count":0,"confidence_range":null},"finding_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-j9tk0xyi/shell_curl_fixed_host_path","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"shell-path-read-arg","status":"complete","elapsedSeconds":0.618263,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4fr2adh7/shell_path_read_arg","nativeReport":{"definitions":{},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Shell":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":0,"classification_policy":"dead-code-evidence-v3","classifications":{},"candidate_decisions":{"reported":0,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4fr2adh7/shell_path_read_arg","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4fr2adh7/shell_path_read_arg","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"danger_count":1,"maintainability_inventory":[],"total_loc":4,"grade_categories":["security","dead_code"],"by_directory":[{"path":".","total":1,"files":1,"security":1,"rules":{"SKY-D215":1},"severities":{"HIGH":1}}],"finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":1,"by_status":{"source_to_sink":0,"partial":0,"unknown":1,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"danger":[{"rule_id":"SKY-D215","severity":"HIGH","message":"User-controlled shell path reaches a filesystem sink without basename or canonical path validation.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4fr2adh7/shell_path_read_arg/read.sh","line":5,"col":0,"category":"danger","metadata":{"security_trace":{"version":1,"trace_id":"26f8f70d1b4301e67a2764da","status":"unknown","context":{"algorithm":"security-static-trace-v1","receiver_model_version":2,"analyzer_version":"4.50.1","python_syntax_version":"3.14.4","limits":{"max_discovery_entries":50000,"max_files":1024,"max_file_bytes":2000000,"max_total_bytes":32000000,"max_ast_nodes":500000,"max_steps":128,"max_depth":16,"max_callers":16},"selected_scope_sha256":"ea6bd324e47f99639dc2bdcc20df1839fd542b40d44b770ea5ba99aa66b26dc6","selected_file_count":1},"steps":[{"id":"5add214d632df1777038ffff","kind":"sink","message":"Static finding location: SKY-D215","file":"read.sh","line":5,"column":0,"source_sha256":"dec3fb2be4699659b9a963a2a97d99604e6493962f4f4ec95a64dc7b481ece66"}],"edges":[],"receiver":{"status":"unknown","qualified_name":null,"limitations":["No source-resolved Python sink call."]},"file_digests":{"read.sh":"dec3fb2be4699659b9a963a2a97d99604e6493962f4f4ec95a64dc7b481ece66"},"limitations":["Finding source is outside the selected readable Python snapshot; config/other languages are not interpreted as Python.","Static source/call evidence does not prove runtime reachability, guard effectiveness or complete external callers."]}},"evidence_contract":{"schema_version":1,"proof_state":"candidate","sources":[],"sinks":[],"symbols":[],"traces":["/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4fr2adh7/shell_path_read_arg/read.sh:5"],"limitations":[]},"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"high","highest_severity":"HIGH","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":1,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"none","candidate_count":0,"confidence_range":null},"finding_counts":{"defect":0,"review":1,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4fr2adh7/shell_path_read_arg","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"shell-basename-safe","status":"complete","elapsedSeconds":0.900045,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-0yfvl0v3/shell_basename_safe","nativeReport":{"definitions":{},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Shell":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":0,"classification_policy":"dead-code-evidence-v3","classifications":{},"candidate_decisions":{"reported":0,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-0yfvl0v3/shell_basename_safe","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-0yfvl0v3/shell_basename_safe","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"maintainability_inventory":[],"total_loc":4,"grade_categories":["security","dead_code"],"finding_type_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0},"assessment_scope":"listed_findings","resolution_scope_limited":true,"security_trace_coverage":{"static_only":true,"findings":0,"by_status":{"source_to_sink":0,"partial":0,"unknown":0,"unavailable":0},"explanation_failures":0,"scope":"Recorded explanation coverage; not proof of runtime exploitation or complete external callers."},"listed_finding_type_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0},"quality_count":0,"listed_quality_count":0},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["security","dead_code"],"coverage":{"status":"partial","not_assessed":["quality","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"not_assessed","advice_count":0,"rule_count":0,"affected_files":0,"affected_functions":null,"checks":[]},"dead_code":{"status":"none","candidate_count":0,"confidence_range":null},"finding_counts":{"defect":0,"review":0,"advice":0,"advice_groups":0}},"listing_policy_version":1,"advice_visibility":{"total_checks":0,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-0yfvl0v3/shell_basename_safe","conf":0,"enable_quality":false,"enable_danger":true,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]}]},{"id":"quality","manifestPath":"benchmarks/quality/manifest.json","manifestSha256":"05d9e4958b8da77fbbdacb7cca9ad7e6fdb13647d44b58131d45d3c869dde276","manifest":{"version":1,"cases":[{"id":"complexity-hotspot","path":"fixtures/complexity_hotspot","description":"Branch-heavy request handler should be flagged for cyclomatic complexity.","taxonomy":["complexity","control_flow"],"importance":"critical","source":{"repo":"https://github.com/fastapi/fastapi","license":"MIT","notes":"Distilled from common API handler branching patterns."},"budget":{"max_seconds":10.0},"expect":{"present":{"quality":["SKY-Q301","branchy_handler"]},"absent":{"quality":["simple_handler"]}}},{"id":"long-function","path":"fixtures/long_function","description":"Report builder should be flagged when the local max_lines threshold is exceeded.","taxonomy":["maintainability"],"importance":"high","source":{"repo":"https://github.com/pallets/click","license":"BSD-3-Clause","notes":"Distilled from command/report formatting helpers."},"budget":{"max_seconds":5.0},"expect":{"present":{"quality":["SKY-C304","render_report"]},"absent":{"quality":["tiny_helper"]}}},{"id":"argument-overload","path":"fixtures/argument_overload","description":"Service function should be flagged when it takes too many required arguments.","taxonomy":["api_design","maintainability"],"importance":"high","source":{"repo":"https://github.com/django/django","license":"BSD-3-Clause","notes":"Distilled from service-layer helper signatures."},"budget":{"max_seconds":5.0},"expect":{"present":{"quality":["SKY-C303","build_request"]},"absent":{"quality":["helper"]}}},{"id":"inconsistent-return","path":"fixtures/inconsistent_return","description":"Mixed value and bare returns should be reported as a logic issue.","taxonomy":["control_flow"],"importance":"critical","source":{"repo":"https://github.com/pallets/flask","license":"BSD-3-Clause","notes":"Distilled from request handler helper logic."},"budget":{"max_seconds":5.0},"expect":{"present":{"quality":["SKY-L006","resolve_user"]},"absent":{}}},{"id":"empty-error-handler","path":"fixtures/empty_error_handler","description":"Silent exception swallowing should be treated as a quality problem.","taxonomy":["exception_handling"],"importance":"critical","source":{"repo":"https://github.com/psf/requests","license":"Apache-2.0","notes":"Distilled from network retry / fallback shapes where exception swallowing matters."},"budget":{"max_seconds":5.0},"expect":{"present":{"quality":["SKY-L007"]},"absent":{}}},{"id":"type-annotation-gaps","path":"fixtures/type_annotation_gaps","description":"An explicit disallow_untyped_defs policy must flag public functions with untyped parameters and missing return annotations.","taxonomy":["typing","api_design"],"importance":"high","source":{"repo":"https://github.com/python/cpython","license":"PSF-2.0","notes":"Synthetic helper API with an explicit annotation requirement; preserves both required-annotation controls."},"budget":{"max_seconds":5.0},"expect":{"present":{"quality":["SKY-T101","SKY-T102","load_user"]},"absent":{"quality":["typed_helper"]}}},{"id":"type-annotation-coverage-only","path":"fixtures/type_annotation_coverage_only","description":"Checking untyped bodies and declaring exports do not require annotations or enable optional coverage advice.","taxonomy":["typing","api_design","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/python/mypy","license":"MIT","notes":"Synthetic counterpart of type-annotation-gaps with check_untyped_defs instead of an annotation requirement."},"budget":{"max_seconds":5.0},"expect":{"present":{},"absent":{"quality":["SKY-T101","SKY-T102"]}}},{"id":"framework-route-policy","path":"fixtures/framework_route_policy","description":"Mutating framework routes should have an obvious auth or dependency guard.","taxonomy":["framework","security_practice"],"importance":"critical","source":{"repo":"https://github.com/fastapi/fastapi","license":"MIT","notes":"Distilled from FastAPI router conventions."},"budget":{"max_seconds":5.0},"expect":{"present":{"quality":["SKY-F102","create_user"]},"absent":{"quality":["create_admin","list_users"]}}},{"id":"opaque-identifier","path":"fixtures/opaque_identifier","description":"Long-lived short or vague variables should be reported only when RHS semantics provide a clearly better name.","taxonomy":["readability","maintainability","precision_guard"],"importance":"high","source":{"repo":"https://github.com/google/styleguide","license":"CC-BY-3.0","notes":"Distilled from identifier guidance around descriptive names proportional to scope."},"budget":{"max_seconds":5.0},"expect":{"present":{"quality":["SKY-Q806","x","account_id"]},"absent":{"quality":["coordinate_area","tmp"]}}},{"id":"repo-policy-missing-typechecker","path":"fixtures/repo_policy_missing_typechecker","description":"Repository policy checks should report Python projects without mypy or pyright configuration.","taxonomy":["repo_policy","typing"],"importance":"high","source":{"repo":"https://github.com/astral-sh/ruff","license":"MIT","notes":"Distilled from common pyproject-based policy configuration."},"budget":{"max_seconds":5.0},"expect":{"present":{"quality":["SKY-R101","python-type-check-policy"]},"absent":{"quality":["SKY-R102","SKY-R103","SKY-R104"]}}},{"id":"clean-module","path":"fixtures/clean_module","description":"A small helper module should remain free of the starter benchmark quality findings.","taxonomy":["precision_guard"],"importance":"critical","source":{"repo":"https://github.com/python/cpython","license":"PSF-2.0","notes":"Distilled from small utility-module patterns in the Python standard library."},"budget":{"max_seconds":5.0},"expect":{"present":{},"absent":{"quality":["SKY-Q301","SKY-C303","SKY-C304","SKY-L006","SKY-L007","SKY-UC001","SKY-Q806"]}}},{"id":"typescript-async-loop-duplicate-condition","path":"fixtures/typescript_async_loop_duplicate_condition","description":"TypeScript service code should flag duplicate branch conditions and serialized await inside loops.","languages":["typescript"],"taxonomy":["typescript","control_flow","maintainability"],"importance":"critical","source":{"repo":"https://github.com/microsoft/TypeScript","license":"Apache-2.0","notes":"Distilled from common async service-loop and duplicated-branch review patterns."},"budget":{"max_seconds":5.0},"expect":{"present":{"quality":["SKY-Q305","SKY-Q402","reconcileInvoices"]},"absent":{"quality":["markPaid","markVoid"]}}},{"id":"typescript-type-safety-unsafe","path":"fixtures/typescript_type_safety_unsafe","description":"TypeScript escape hatches and direct unvalidated JSON assertions should be reported.","languages":["typescript"],"taxonomy":["typescript","typing"],"importance":"critical","source":{"repo":"https://github.com/dmmulroy/anti-slop","license":"MIT","notes":"Distilled and narrowed from TypeScript type-evidence escape-hatch patterns."},"budget":{"max_seconds":5.0},"expect":{"present":{"quality":["SKY-T103","SKY-T104","SKY-T105"]},"absent":{}}},{"id":"typescript-type-safety-clean","path":"fixtures/typescript_type_safety_clean","description":"Runtime validation, a single branded assertion, and a reasoned expect-error should remain clean.","languages":["typescript"],"taxonomy":["typescript","typing","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/microsoft/TypeScript","license":"Apache-2.0","notes":"Synthetic precision controls based on normal TypeScript narrowing and type-test patterns."},"budget":{"max_seconds":5.0},"expect":{"present":{},"absent":{"quality":["SKY-T103","SKY-T104","SKY-T105"]}}},{"id":"typescript-quality-signals-unsafe","path":"samples/typescript_quality_signals_unsafe","description":"Concrete async mistakes, unsafe exports, unfinished code, empty catches, and blanket lint suppression should be reported.","languages":["typescript"],"taxonomy":["typescript","control_flow","typing","maintainability"],"importance":"critical","source":{"repo":"https://github.com/dmmulroy/anti-slop","license":"MIT","notes":"Synthetic fixture narrowed to behaviorally incorrect or high-risk JS/TS patterns."},"budget":{"max_seconds":5.0},"expect":{"present":{"quality":["SKY-L007","SKY-L026","SKY-L035","SKY-Q405","SKY-Q406","SKY-Q407","SKY-T106","LegacyPayload","acceptLegacy","loadLegacy"]},"absent":{}}},{"id":"typescript-quality-signals-clean","path":"samples/typescript_quality_signals_clean","description":"Narrow lint suppression, consumed async work, precise exports, implemented code, and handled errors should remain clean.","languages":["typescript"],"taxonomy":["typescript","control_flow","typing","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/microsoft/TypeScript","license":"Apache-2.0","notes":"Synthetic precision controls based on normal TypeScript async and public API patterns."},"budget":{"max_seconds":5.0},"expect":{"present":{},"absent":{"quality":["SKY-L007","SKY-L026","SKY-L035","SKY-Q405","SKY-Q406","SKY-Q407","SKY-T106"]}}},{"id":"python-mutable-alias-unsafe","path":"fixtures/python_mutable_alias_unsafe","description":"Sequence multiplication that repeats one mutable object should be reported.","languages":["python"],"taxonomy":["maintainability","control_flow"],"importance":"critical","source":{"repo":"https://github.com/python/cpython","license":"PSF-2.0","notes":"Synthetic fixture based on Python sequence repetition and mutable identity semantics."},"budget":{"max_seconds":5.0},"expect":{"present":{"quality":["SKY-L034"]},"absent":{}}},{"id":"python-mutable-alias-clean","path":"fixtures/python_mutable_alias_clean","description":"A comprehension that creates one dictionary per slot should remain clean.","languages":["python"],"taxonomy":["maintainability","precision_guard"],"importance":"critical","source":{"repo":"https://github.com/python/cpython","license":"PSF-2.0","notes":"Synthetic precision control using a fresh object per comprehension iteration."},"budget":{"max_seconds":5.0},"expect":{"present":{},"absent":{"quality":["SKY-L034"]}}},{"id":"go-service-quality-hotspot","path":"fixtures/go_service_quality_hotspot","description":"Go service function with excessive branching and a wide call surface should be flagged.","languages":["go"],"taxonomy":["go","complexity","api_design","maintainability"],"importance":"critical","source":{"repo":"https://github.com/golang/go","license":"BSD-3-Clause","notes":"Distilled from service-layer branching and oversized function signatures."},"budget":{"max_seconds":5.0},"expect":{"present":{"quality":["SKY-Q301","SKY-C303","EvaluateOrder"]},"absent":{"quality":["Helper"]}}},{"id":"java-service-quality-hotspot","path":"fixtures/java_service_quality_hotspot","description":"Java service method with deep nesting and too many parameters should be flagged.","languages":["java"],"taxonomy":["java","complexity","api_design","maintainability"],"importance":"critical","source":{"repo":"https://github.com/google/styleguide","license":"CC-BY-3.0","notes":"Distilled from Java service-method maintainability review patterns."},"budget":{"max_seconds":5.0},"expect":{"present":{"quality":["SKY-Q302","SKY-C303","decide"]},"absent":{"quality":["helper"]}}}]},"cases":[{"id":"complexity-hotspot","status":"complete","elapsedSeconds":1.029706,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4rxp8_w7/complexity_hotspot","nativeReport":{"definitions":{"app.branchy_handler":{"name":"app.branchy_handler","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4rxp8_w7/complexity_hotspot/app.py","line":1,"type":"function","loc":8,"complexity":4,"calls":["app.branchy_handler.flag_a","app.branchy_handler.flag_b","app.branchy_handler.flag_c"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"app.simple_handler":{"name":"app.simple_handler","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4rxp8_w7/complexity_hotspot/app.py","line":11,"type":"function","loc":2,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"branchy_handler","full_name":"app.branchy_handler","simple_name":"branchy_handler","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4rxp8_w7/complexity_hotspot/app.py","basename":"app.py","line":1,"confidence":85,"references":0,"calls":["app.branchy_handler.flag_a","app.branchy_handler.flag_c","app.branchy_handler.flag_b"],"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"name":"simple_handler","full_name":"app.simple_handler","simple_name":"simple_handler","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4rxp8_w7/complexity_hotspot/app.py","basename":"app.py","line":11,"confidence":85,"references":0,"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.py","qualified_name":"app.branchy_handler","kind":"function","line":1,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}]},{"file":"app.py","qualified_name":"app.simple_handler","kind":"function","line":11,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":2,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":2},"candidate_decisions":{"reported":2,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4rxp8_w7/complexity_hotspot","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4rxp8_w7/complexity_hotspot","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"quality_count":5,"architecture_advisory_count":0,"maintainability_inventory":[{"file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4rxp8_w7/complexity_hotspot/app.py","language":"Python","function_lines":[1,11],"rule_units":{"SKY-Q301":2,"SKY-Q306":2,"SKY-Q302":2,"SKY-C303":2,"SKY-C304":2}}],"typing_coverage":{"version":1,"scope":"public_source_definitions","files_analyzed":1,"definition_count":2,"definitions_with_complete_annotations":0,"definitions_missing_annotations":2,"missing_parameter_annotations":3,"missing_return_annotations":2,"definitions_with_supplied_contract":0,"unreported_missing_definitions":2,"enable_coverage_advice_with":"[tool.skylos] typing_coverage_advice = true"},"total_loc":10,"grade_categories":["quality","dead_code"],"by_directory":[{"path":".","total":7,"files":3,"dead_code":2,"quality":5,"rules":{"SKY-Q301":1,"SKY-R101":1,"SKY-R102":1,"SKY-R103":1,"SKY-R104":1,"unused-functions":2},"severities":{"MEDIUM":1,"WARN":1,"LOW":5}}],"finding_type_counts":{"defect":0,"review":2,"advice":5,"advice_groups":5},"assessment_scope":"listed_findings","resolution_scope_limited":true,"unused_dependency_analysis":{"rule_id":"SKY-U005","status":"complete","complete":true,"reasons":[],"abstained_count":0,"abstained_dependencies":[]},"listed_finding_type_counts":{"defect":0,"review":2,"advice":5,"advice_groups":5},"listed_quality_count":5},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"quality":[{"rule_id":"SKY-Q301","kind":"complexity","severity":"WARN","type":"function","name":"branchy_handler","simple_name":"branchy_handler","value":4,"threshold":3,"length":8,"message":"Cyclomatic complexity is 4 (threshold: 3). Consider splitting branches.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4rxp8_w7/complexity_hotspot/app.py","basename":"app.py","line":1,"cwe":[{"id":"CWE-1121","name":"Excessive McCabe Cyclomatic Complexity"}],"standard_refs":["ISO/IEC 5055:2021 §6.3.4","McCabe Cyclomatic Complexity"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R101","kind":"repo_policy","severity":"MEDIUM","type":"policy","name":"python-type-check-policy","simple_name":"python-type-check-policy","value":"missing_type_checker","threshold":0,"message":"Python project has no mypy or pyright policy configured. Add a checked type policy for public code paths.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4rxp8_w7/complexity_hotspot/pyproject.toml","basename":"pyproject.toml","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Python type checking"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R102","kind":"repo_policy","severity":"LOW","type":"policy","name":"python-lint-policy","simple_name":"python-lint-policy","value":"missing_ruff","threshold":0,"message":"Python project has no detected Ruff, Flake8 or Pylint policy configured.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4rxp8_w7/complexity_hotspot/pyproject.toml","basename":"pyproject.toml","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Python linting"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R103","kind":"repo_policy","severity":"LOW","type":"policy","name":"skylos-gate-policy","simple_name":"skylos-gate-policy","value":"missing_skylos_gate","threshold":0,"message":"No [tool.skylos.gate] policy is configured for repository quality gates.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4rxp8_w7/complexity_hotspot/pyproject.toml","basename":"pyproject.toml","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Skylos quality gate"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R104","kind":"repo_policy","severity":"LOW","type":"policy","name":"pre-commit-policy","simple_name":"pre-commit-policy","value":"missing_pre_commit","threshold":0,"message":"Repository has no pre-commit policy file.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4rxp8_w7/complexity_hotspot","basename":"complexity_hotspot","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: pre-commit"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}}],"architecture_metrics":{"system_metrics":{"total_modules":1,"total_packages":1,"total_loc":10,"modularity_index":1.0,"architecture_fitness":0.0,"mean_distance":1.0,"instability_variance":0.0,"coupling_health":1.0,"dip_violations":0,"zone_distribution":{"main_sequence":0,"off_main_sequence":0,"zone_of_pain":0,"zone_of_uselessness":0,"disconnected":1}},"module_count":1,"packages":{"app":{"instability":0.0,"avg_abstractness":0.0,"avg_distance":1.0,"module_count":1}},"module_metrics":{"app":{"ca":0,"ce":0,"instability":0.0,"abstractness":0.0,"distance":1.0,"zone":"disconnected"}},"iad_enforced":false,"advisories":[],"advisory_count":0,"advisory_signal_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["quality","dead_code"],"coverage":{"status":"partial","not_assessed":["security","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"measured","advice_count":5,"rule_count":9,"affected_files":3,"affected_functions":null,"checks":[{"rule_id":"SKY-C303","name":"Too many function arguments","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":2,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-C304","name":"Function too long","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":2,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q301","name":"Cyclomatic complexity","language":"Python","count":1,"affected_units":1,"unit":"function","analyzed_units":2,"affected_percent":50.0,"max_value":4,"max_threshold":3,"max_excess_ratio":1.333},{"rule_id":"SKY-Q302","name":"Deep nesting","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":2,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q306","name":"Cognitive complexity","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":2,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R101","name":"Python type-check policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R102","name":"Python lint policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R103","name":"Skylos gate policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R104","name":"Pre-commit policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null}]},"dead_code":{"status":"review","candidate_count":2,"confidence_range":[85,85]},"finding_counts":{"defect":0,"review":2,"advice":5,"advice_groups":5}},"listing_policy_version":1,"advice_visibility":{"total_checks":5,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-4rxp8_w7/complexity_hotspot","conf":0,"enable_quality":true,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"long-function","status":"complete","elapsedSeconds":1.08212,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-g2sn14n6/long_function","nativeReport":{"definitions":{"module.render_report":{"name":"module.render_report","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-g2sn14n6/long_function/module.py","line":1,"type":"function","loc":9,"complexity":1,"calls":["module.lines.append","module.render_report.lines","module.render_report.name"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"module.tiny_helper":{"name":"module.tiny_helper","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-g2sn14n6/long_function/module.py","line":12,"type":"function","loc":2,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"render_report","full_name":"module.render_report","simple_name":"render_report","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-g2sn14n6/long_function/module.py","basename":"module.py","line":1,"confidence":90,"references":0,"calls":["module.render_report.lines","module.render_report.name","module.lines.append"],"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"name":"tiny_helper","full_name":"module.tiny_helper","simple_name":"tiny_helper","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-g2sn14n6/long_function/module.py","basename":"module.py","line":12,"confidence":90,"references":0,"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"module.py","qualified_name":"module.render_report","kind":"function","line":1,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]},{"file":"module.py","qualified_name":"module.render_report.lines","kind":"variable","line":2,"classification":"alive","decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":7}}]},{"file":"module.py","qualified_name":"module.tiny_helper","kind":"function","line":12,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":3,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":2,"alive":1},"candidate_decisions":{"reported":2,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-g2sn14n6/long_function","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-g2sn14n6/long_function","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"quality_count":5,"architecture_advisory_count":0,"maintainability_inventory":[{"file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-g2sn14n6/long_function/module.py","language":"Python","function_lines":[1,12],"rule_units":{"SKY-Q301":2,"SKY-Q306":2,"SKY-Q302":2,"SKY-C303":2,"SKY-C304":2}}],"typing_coverage":{"version":1,"scope":"public_source_definitions","files_analyzed":1,"definition_count":2,"definitions_with_complete_annotations":0,"definitions_missing_annotations":2,"missing_parameter_annotations":1,"missing_return_annotations":2,"definitions_with_supplied_contract":0,"unreported_missing_definitions":2,"enable_coverage_advice_with":"[tool.skylos] typing_coverage_advice = true"},"total_loc":11,"grade_categories":["quality","dead_code"],"by_directory":[{"path":".","total":7,"files":3,"dead_code":2,"quality":5,"rules":{"SKY-C304":1,"SKY-R101":1,"SKY-R102":1,"SKY-R103":1,"SKY-R104":1,"unused-functions":2},"severities":{"MEDIUM":2,"LOW":5}}],"finding_type_counts":{"defect":0,"review":2,"advice":5,"advice_groups":5},"assessment_scope":"listed_findings","resolution_scope_limited":true,"unused_dependency_analysis":{"rule_id":"SKY-U005","status":"complete","complete":true,"reasons":[],"abstained_count":0,"abstained_dependencies":[]},"listed_finding_type_counts":{"defect":0,"review":2,"advice":5,"advice_groups":5},"listed_quality_count":5},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"quality":[{"rule_id":"SKY-C304","kind":"structure","type":"function","name":"render_report","simple_name":"render_report","value":9,"threshold":6,"severity":"MEDIUM","message":"Function has 9 code lines (limit: 6); blank, comment and docstring lines are not counted.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-g2sn14n6/long_function/module.py","basename":"module.py","line":1,"col":0,"cwe":[{"id":"CWE-1080","name":"Source Code File with Excessive Number of Lines of Code"}],"standard_refs":["ISO/IEC 5055:2021 §6.3.3"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R101","kind":"repo_policy","severity":"MEDIUM","type":"policy","name":"python-type-check-policy","simple_name":"python-type-check-policy","value":"missing_type_checker","threshold":0,"message":"Python project has no mypy or pyright policy configured. Add a checked type policy for public code paths.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-g2sn14n6/long_function/pyproject.toml","basename":"pyproject.toml","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Python type checking"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R102","kind":"repo_policy","severity":"LOW","type":"policy","name":"python-lint-policy","simple_name":"python-lint-policy","value":"missing_ruff","threshold":0,"message":"Python project has no detected Ruff, Flake8 or Pylint policy configured.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-g2sn14n6/long_function/pyproject.toml","basename":"pyproject.toml","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Python linting"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R103","kind":"repo_policy","severity":"LOW","type":"policy","name":"skylos-gate-policy","simple_name":"skylos-gate-policy","value":"missing_skylos_gate","threshold":0,"message":"No [tool.skylos.gate] policy is configured for repository quality gates.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-g2sn14n6/long_function/pyproject.toml","basename":"pyproject.toml","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Skylos quality gate"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R104","kind":"repo_policy","severity":"LOW","type":"policy","name":"pre-commit-policy","simple_name":"pre-commit-policy","value":"missing_pre_commit","threshold":0,"message":"Repository has no pre-commit policy file.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-g2sn14n6/long_function","basename":"long_function","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: pre-commit"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}}],"architecture_metrics":{"system_metrics":{"total_modules":1,"total_packages":1,"total_loc":11,"modularity_index":1.0,"architecture_fitness":0.0,"mean_distance":1.0,"instability_variance":0.0,"coupling_health":1.0,"dip_violations":0,"zone_distribution":{"main_sequence":0,"off_main_sequence":0,"zone_of_pain":0,"zone_of_uselessness":0,"disconnected":1}},"module_count":1,"packages":{"module":{"instability":0.0,"avg_abstractness":0.0,"avg_distance":1.0,"module_count":1}},"module_metrics":{"module":{"ca":0,"ce":0,"instability":0.0,"abstractness":0.0,"distance":1.0,"zone":"disconnected"}},"iad_enforced":false,"advisories":[],"advisory_count":0,"advisory_signal_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["quality","dead_code"],"coverage":{"status":"partial","not_assessed":["security","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"measured","advice_count":5,"rule_count":9,"affected_files":3,"affected_functions":null,"checks":[{"rule_id":"SKY-C303","name":"Too many function arguments","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":2,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-C304","name":"Function too long","language":"Python","count":1,"affected_units":1,"unit":"function","analyzed_units":2,"affected_percent":50.0,"max_value":9,"max_threshold":6,"max_excess_ratio":1.5},{"rule_id":"SKY-Q301","name":"Cyclomatic complexity","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":2,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q302","name":"Deep nesting","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":2,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q306","name":"Cognitive complexity","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":2,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R101","name":"Python type-check policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R102","name":"Python lint policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R103","name":"Skylos gate policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R104","name":"Pre-commit policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null}]},"dead_code":{"status":"review","candidate_count":2,"confidence_range":[90,90]},"finding_counts":{"defect":0,"review":2,"advice":5,"advice_groups":5}},"listing_policy_version":1,"advice_visibility":{"total_checks":5,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-g2sn14n6/long_function","conf":0,"enable_quality":true,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"argument-overload","status":"complete","elapsedSeconds":0.922815,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f1gnyzde/argument_overload","nativeReport":{"definitions":{"service.build_request":{"name":"service.build_request","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f1gnyzde/argument_overload/service.py","line":1,"type":"function","loc":8,"complexity":1,"calls":["service.build_request.account_id","service.build_request.region","service.build_request.retries","service.build_request.timeout","service.build_request.user_id"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"service.helper":{"name":"service.helper","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f1gnyzde/argument_overload/service.py","line":11,"type":"function","loc":2,"complexity":1,"calls":["service.helper.timeout","service.helper.user_id"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"build_request","full_name":"service.build_request","simple_name":"build_request","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f1gnyzde/argument_overload/service.py","basename":"service.py","line":1,"confidence":90,"references":0,"calls":["service.build_request.region","service.build_request.timeout","service.build_request.retries","service.build_request.account_id","service.build_request.user_id"],"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"name":"helper","full_name":"service.helper","simple_name":"helper","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f1gnyzde/argument_overload/service.py","basename":"service.py","line":11,"confidence":90,"references":0,"calls":["service.helper.user_id","service.helper.timeout"],"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"service.py","qualified_name":"service.build_request","kind":"function","line":1,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]},{"file":"service.py","qualified_name":"service.helper","kind":"function","line":11,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":2,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":2},"candidate_decisions":{"reported":2,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f1gnyzde/argument_overload","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f1gnyzde/argument_overload","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"quality_count":5,"architecture_advisory_count":0,"maintainability_inventory":[{"file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f1gnyzde/argument_overload/service.py","language":"Python","function_lines":[1,11],"rule_units":{"SKY-Q301":2,"SKY-Q306":2,"SKY-Q302":2,"SKY-C303":2,"SKY-C304":2}}],"typing_coverage":{"version":1,"scope":"public_source_definitions","files_analyzed":1,"definition_count":2,"definitions_with_complete_annotations":0,"definitions_missing_annotations":2,"missing_parameter_annotations":7,"missing_return_annotations":2,"definitions_with_supplied_contract":0,"unreported_missing_definitions":2,"enable_coverage_advice_with":"[tool.skylos] typing_coverage_advice = true"},"total_loc":10,"grade_categories":["quality","dead_code"],"by_directory":[{"path":".","total":7,"files":3,"dead_code":2,"quality":5,"rules":{"SKY-C303":1,"SKY-R101":1,"SKY-R102":1,"SKY-R103":1,"SKY-R104":1,"unused-functions":2},"severities":{"MEDIUM":2,"LOW":5}}],"finding_type_counts":{"defect":0,"review":2,"advice":5,"advice_groups":5},"assessment_scope":"listed_findings","resolution_scope_limited":true,"unused_dependency_analysis":{"rule_id":"SKY-U005","status":"complete","complete":true,"reasons":[],"abstained_count":0,"abstained_dependencies":[]},"listed_finding_type_counts":{"defect":0,"review":2,"advice":5,"advice_groups":5},"listed_quality_count":5},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"quality":[{"rule_id":"SKY-C303","kind":"structure","type":"function","name":"build_request","simple_name":"build_request","value":5,"threshold":3,"severity":"MEDIUM","argument_evidence":{"version":1,"complete":true,"metric":"required_positional","source_line":1,"required_positional":5,"optional_positional":0,"positional_only":0,"positional_or_keyword":5,"required_keyword_only":0,"optional_keyword_only":0,"keyword_only":0,"total_parameters":5,"positional_parameters":[{"name":"user_id","kind":"positional_or_keyword","required":true},{"name":"account_id","kind":"positional_or_keyword","required":true},{"name":"region","kind":"positional_or_keyword","required":true},{"name":"timeout","kind":"positional_or_keyword","required":true},{"name":"retries","kind":"positional_or_keyword","required":true}],"keyword_only_parameters":[],"variadic_positional":null,"variadic_keyword":null,"receiver_binding":"function","receiver_parameter":null,"limits":{"required_positional":3,"total_parameters":10}},"message":"Function has 5 required positional arguments (limit: 3). Review actual call sites and compatibility before changing the signature.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f1gnyzde/argument_overload/service.py","basename":"service.py","line":1,"col":0,"cwe":[{"id":"CWE-1064","name":"Invokable Control Element with Signature Containing an Excessive Number of Parameters"}],"standard_refs":["ISO/IEC 5055:2021 §6.3.2"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R101","kind":"repo_policy","severity":"MEDIUM","type":"policy","name":"python-type-check-policy","simple_name":"python-type-check-policy","value":"missing_type_checker","threshold":0,"message":"Python project has no mypy or pyright policy configured. Add a checked type policy for public code paths.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f1gnyzde/argument_overload/pyproject.toml","basename":"pyproject.toml","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Python type checking"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R102","kind":"repo_policy","severity":"LOW","type":"policy","name":"python-lint-policy","simple_name":"python-lint-policy","value":"missing_ruff","threshold":0,"message":"Python project has no detected Ruff, Flake8 or Pylint policy configured.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f1gnyzde/argument_overload/pyproject.toml","basename":"pyproject.toml","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Python linting"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R103","kind":"repo_policy","severity":"LOW","type":"policy","name":"skylos-gate-policy","simple_name":"skylos-gate-policy","value":"missing_skylos_gate","threshold":0,"message":"No [tool.skylos.gate] policy is configured for repository quality gates.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f1gnyzde/argument_overload/pyproject.toml","basename":"pyproject.toml","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Skylos quality gate"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R104","kind":"repo_policy","severity":"LOW","type":"policy","name":"pre-commit-policy","simple_name":"pre-commit-policy","value":"missing_pre_commit","threshold":0,"message":"Repository has no pre-commit policy file.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f1gnyzde/argument_overload","basename":"argument_overload","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: pre-commit"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}}],"architecture_metrics":{"system_metrics":{"total_modules":1,"total_packages":1,"total_loc":10,"modularity_index":1.0,"architecture_fitness":0.0,"mean_distance":1.0,"instability_variance":0.0,"coupling_health":1.0,"dip_violations":0,"zone_distribution":{"main_sequence":0,"off_main_sequence":0,"zone_of_pain":0,"zone_of_uselessness":0,"disconnected":1}},"module_count":1,"packages":{"service":{"instability":0.0,"avg_abstractness":0.0,"avg_distance":1.0,"module_count":1}},"module_metrics":{"service":{"ca":0,"ce":0,"instability":0.0,"abstractness":0.0,"distance":1.0,"zone":"disconnected"}},"iad_enforced":false,"advisories":[],"advisory_count":0,"advisory_signal_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["quality","dead_code"],"coverage":{"status":"partial","not_assessed":["security","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"measured","advice_count":5,"rule_count":9,"affected_files":3,"affected_functions":null,"checks":[{"rule_id":"SKY-C303","name":"Too many function arguments","language":"Python","count":1,"affected_units":1,"unit":"function","analyzed_units":2,"affected_percent":50.0,"max_value":5,"max_threshold":3,"max_excess_ratio":1.667},{"rule_id":"SKY-C304","name":"Function too long","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":2,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q301","name":"Cyclomatic complexity","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":2,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q302","name":"Deep nesting","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":2,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q306","name":"Cognitive complexity","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":2,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R101","name":"Python type-check policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R102","name":"Python lint policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R103","name":"Skylos gate policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R104","name":"Pre-commit policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null}]},"dead_code":{"status":"review","candidate_count":2,"confidence_range":[90,90]},"finding_counts":{"defect":0,"review":2,"advice":5,"advice_groups":5}},"listing_policy_version":1,"advice_visibility":{"total_checks":5,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f1gnyzde/argument_overload","conf":0,"enable_quality":true,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"inconsistent-return","status":"complete","elapsedSeconds":0.480291,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-dxgnc0d2/inconsistent_return","nativeReport":{"definitions":{"module.resolve_user":{"name":"module.resolve_user","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-dxgnc0d2/inconsistent_return/module.py","line":1,"type":"function","loc":4,"complexity":2,"calls":["module.resolve_user.flag"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"resolve_user","full_name":"module.resolve_user","simple_name":"resolve_user","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-dxgnc0d2/inconsistent_return/module.py","basename":"module.py","line":1,"confidence":90,"references":0,"calls":["module.resolve_user.flag"],"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"module.py","qualified_name":"module.resolve_user","kind":"function","line":1,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-dxgnc0d2/inconsistent_return","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-dxgnc0d2/inconsistent_return","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"quality_count":5,"architecture_advisory_count":0,"maintainability_inventory":[{"file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-dxgnc0d2/inconsistent_return/module.py","language":"Python","function_lines":[1],"rule_units":{"SKY-Q301":1,"SKY-Q306":1,"SKY-Q302":1,"SKY-C303":1,"SKY-C304":1}}],"typing_coverage":{"version":1,"scope":"public_source_definitions","files_analyzed":1,"definition_count":1,"definitions_with_complete_annotations":0,"definitions_missing_annotations":1,"missing_parameter_annotations":1,"missing_return_annotations":1,"definitions_with_supplied_contract":0,"unreported_missing_definitions":1,"enable_coverage_advice_with":"[tool.skylos] typing_coverage_advice = true"},"total_loc":4,"grade_categories":["quality","dead_code"],"by_directory":[{"path":".","total":6,"files":2,"dead_code":1,"quality":5,"rules":{"SKY-L006":1,"SKY-R101":1,"SKY-R102":1,"SKY-R103":1,"SKY-R104":1,"unused-functions":1},"severities":{"MEDIUM":2,"LOW":4}}],"finding_type_counts":{"defect":0,"review":2,"advice":4,"advice_groups":4},"assessment_scope":"listed_findings","resolution_scope_limited":true,"unused_dependency_analysis":{"rule_id":"SKY-U005","status":"complete","complete":true,"reasons":[],"abstained_count":0,"abstained_dependencies":[]},"listed_finding_type_counts":{"defect":0,"review":2,"advice":4,"advice_groups":4},"listed_quality_count":5},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"quality":[{"rule_id":"SKY-L006","kind":"logic","severity":"MEDIUM","type":"function","name":"resolve_user","simple_name":"resolve_user","value":"inconsistent","threshold":0,"message":"Function 'resolve_user' has inconsistent returns: some paths return a value, others return None.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-dxgnc0d2/inconsistent_return/module.py","basename":"module.py","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":[],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"rule_id":"SKY-R101","kind":"repo_policy","severity":"MEDIUM","type":"policy","name":"python-type-check-policy","simple_name":"python-type-check-policy","value":"missing_type_checker","threshold":0,"message":"Python project has no mypy or pyright policy configured. Add a checked type policy for public code paths.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-dxgnc0d2/inconsistent_return","basename":"inconsistent_return","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Python type checking"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R102","kind":"repo_policy","severity":"LOW","type":"policy","name":"python-lint-policy","simple_name":"python-lint-policy","value":"missing_ruff","threshold":0,"message":"Python project has no detected Ruff, Flake8 or Pylint policy configured.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-dxgnc0d2/inconsistent_return","basename":"inconsistent_return","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Python linting"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R103","kind":"repo_policy","severity":"LOW","type":"policy","name":"skylos-gate-policy","simple_name":"skylos-gate-policy","value":"missing_skylos_gate","threshold":0,"message":"No [tool.skylos.gate] policy is configured for repository quality gates.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-dxgnc0d2/inconsistent_return","basename":"inconsistent_return","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Skylos quality gate"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R104","kind":"repo_policy","severity":"LOW","type":"policy","name":"pre-commit-policy","simple_name":"pre-commit-policy","value":"missing_pre_commit","threshold":0,"message":"Repository has no pre-commit policy file.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-dxgnc0d2/inconsistent_return","basename":"inconsistent_return","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: pre-commit"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}}],"architecture_metrics":{"system_metrics":{"total_modules":1,"total_packages":1,"total_loc":4,"modularity_index":1.0,"architecture_fitness":0.0,"mean_distance":1.0,"instability_variance":0.0,"coupling_health":1.0,"dip_violations":0,"zone_distribution":{"main_sequence":0,"off_main_sequence":0,"zone_of_pain":0,"zone_of_uselessness":0,"disconnected":1}},"module_count":1,"packages":{"module":{"instability":0.0,"avg_abstractness":0.0,"avg_distance":1.0,"module_count":1}},"module_metrics":{"module":{"ca":0,"ce":0,"instability":0.0,"abstractness":0.0,"distance":1.0,"zone":"disconnected"}},"iad_enforced":false,"advisories":[],"advisory_count":0,"advisory_signal_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["quality","dead_code"],"coverage":{"status":"partial","not_assessed":["security","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"medium","highest_severity":"MEDIUM","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":1,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"medium","highest_severity":"MEDIUM","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":1,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"measured","advice_count":4,"rule_count":9,"affected_files":1,"affected_functions":null,"checks":[{"rule_id":"SKY-C303","name":"Too many function arguments","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":1,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-C304","name":"Function too long","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":1,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q301","name":"Cyclomatic complexity","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":1,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q302","name":"Deep nesting","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":1,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q306","name":"Cognitive complexity","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":1,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R101","name":"Python type-check policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R102","name":"Python lint policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R103","name":"Skylos gate policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R104","name":"Pre-commit policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null}]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[90,90]},"finding_counts":{"defect":0,"review":2,"advice":4,"advice_groups":4}},"listing_policy_version":1,"advice_visibility":{"total_checks":4,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-dxgnc0d2/inconsistent_return","conf":0,"enable_quality":true,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"empty-error-handler","status":"complete","elapsedSeconds":0.476033,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-t1guwqzi/empty_error_handler","nativeReport":{"definitions":{"module.parse_payload":{"name":"module.parse_payload","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-t1guwqzi/empty_error_handler/module.py","line":1,"type":"function","loc":7,"complexity":2,"calls":["module.Exception","module.int","module.parse_payload.payload"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"parse_payload","full_name":"module.parse_payload","simple_name":"parse_payload","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-t1guwqzi/empty_error_handler/module.py","basename":"module.py","line":1,"confidence":90,"references":0,"calls":["module.parse_payload.payload","module.Exception","module.int"],"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"module.py","qualified_name":"module.parse_payload","kind":"function","line":1,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-t1guwqzi/empty_error_handler","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-t1guwqzi/empty_error_handler","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"quality_count":5,"architecture_advisory_count":0,"maintainability_inventory":[{"file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-t1guwqzi/empty_error_handler/module.py","language":"Python","function_lines":[1],"rule_units":{"SKY-Q301":1,"SKY-Q306":1,"SKY-Q302":1,"SKY-C303":1,"SKY-C304":1}}],"typing_coverage":{"version":1,"scope":"public_source_definitions","files_analyzed":1,"definition_count":1,"definitions_with_complete_annotations":0,"definitions_missing_annotations":1,"missing_parameter_annotations":1,"missing_return_annotations":1,"definitions_with_supplied_contract":0,"unreported_missing_definitions":1,"enable_coverage_advice_with":"[tool.skylos] typing_coverage_advice = true"},"total_loc":6,"grade_categories":["quality","dead_code"],"by_directory":[{"path":".","total":6,"files":2,"dead_code":1,"quality":5,"rules":{"SKY-L007":1,"SKY-R101":1,"SKY-R102":1,"SKY-R103":1,"SKY-R104":1,"unused-functions":1},"severities":{"MEDIUM":2,"LOW":4}}],"finding_type_counts":{"defect":0,"review":2,"advice":4,"advice_groups":4},"assessment_scope":"listed_findings","resolution_scope_limited":true,"unused_dependency_analysis":{"rule_id":"SKY-U005","status":"complete","complete":true,"reasons":[],"abstained_count":0,"abstained_dependencies":[]},"listed_finding_type_counts":{"defect":0,"review":2,"advice":4,"advice_groups":4},"listed_quality_count":5},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"quality":[{"rule_id":"SKY-L007","kind":"logic","severity":"MEDIUM","type":"block","name":"except","simple_name":"except","value":"trivial","threshold":0,"message":"Empty error handler silently swallows exceptions.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-t1guwqzi/empty_error_handler/module.py","basename":"module.py","line":4,"col":4,"cwe":[{"id":"CWE-391","name":"Unchecked Error Condition"}],"standard_refs":[],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"rule_id":"SKY-R101","kind":"repo_policy","severity":"MEDIUM","type":"policy","name":"python-type-check-policy","simple_name":"python-type-check-policy","value":"missing_type_checker","threshold":0,"message":"Python project has no mypy or pyright policy configured. Add a checked type policy for public code paths.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-t1guwqzi/empty_error_handler","basename":"empty_error_handler","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Python type checking"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R102","kind":"repo_policy","severity":"LOW","type":"policy","name":"python-lint-policy","simple_name":"python-lint-policy","value":"missing_ruff","threshold":0,"message":"Python project has no detected Ruff, Flake8 or Pylint policy configured.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-t1guwqzi/empty_error_handler","basename":"empty_error_handler","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Python linting"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R103","kind":"repo_policy","severity":"LOW","type":"policy","name":"skylos-gate-policy","simple_name":"skylos-gate-policy","value":"missing_skylos_gate","threshold":0,"message":"No [tool.skylos.gate] policy is configured for repository quality gates.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-t1guwqzi/empty_error_handler","basename":"empty_error_handler","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Skylos quality gate"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R104","kind":"repo_policy","severity":"LOW","type":"policy","name":"pre-commit-policy","simple_name":"pre-commit-policy","value":"missing_pre_commit","threshold":0,"message":"Repository has no pre-commit policy file.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-t1guwqzi/empty_error_handler","basename":"empty_error_handler","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: pre-commit"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}}],"architecture_metrics":{"system_metrics":{"total_modules":1,"total_packages":1,"total_loc":6,"modularity_index":1.0,"architecture_fitness":0.0,"mean_distance":1.0,"instability_variance":0.0,"coupling_health":1.0,"dip_violations":0,"zone_distribution":{"main_sequence":0,"off_main_sequence":0,"zone_of_pain":0,"zone_of_uselessness":0,"disconnected":1}},"module_count":1,"packages":{"module":{"instability":0.0,"avg_abstractness":0.0,"avg_distance":1.0,"module_count":1}},"module_metrics":{"module":{"ca":0,"ce":0,"instability":0.0,"abstractness":0.0,"distance":1.0,"zone":"disconnected"}},"iad_enforced":false,"advisories":[],"advisory_count":0,"advisory_signal_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["quality","dead_code"],"coverage":{"status":"partial","not_assessed":["security","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"medium","highest_severity":"MEDIUM","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":1,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"medium","highest_severity":"MEDIUM","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":1,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"measured","advice_count":4,"rule_count":9,"affected_files":1,"affected_functions":null,"checks":[{"rule_id":"SKY-C303","name":"Too many function arguments","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":1,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-C304","name":"Function too long","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":1,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q301","name":"Cyclomatic complexity","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":1,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q302","name":"Deep nesting","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":1,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q306","name":"Cognitive complexity","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":1,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R101","name":"Python type-check policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R102","name":"Python lint policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R103","name":"Skylos gate policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R104","name":"Pre-commit policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null}]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[90,90]},"finding_counts":{"defect":0,"review":2,"advice":4,"advice_groups":4}},"listing_policy_version":1,"advice_visibility":{"total_checks":4,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-t1guwqzi/empty_error_handler","conf":0,"enable_quality":true,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"type-annotation-gaps","status":"complete","elapsedSeconds":0.507134,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-itiuyqtp/type_annotation_gaps","nativeReport":{"definitions":{"module.load_user":{"name":"module.load_user","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-itiuyqtp/type_annotation_gaps/module.py","line":4,"type":"function","loc":2,"complexity":1,"calls":["module.bool","module.load_user.include_deleted","module.load_user.user_id","module.str"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"module.typed_helper":{"name":"module.typed_helper","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-itiuyqtp/type_annotation_gaps/module.py","line":8,"type":"function","loc":2,"complexity":1,"calls":["module.dict","module.str","module.typed_helper.user_id","typing.Any"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"load_user","full_name":"module.load_user","simple_name":"load_user","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-itiuyqtp/type_annotation_gaps/module.py","basename":"module.py","line":4,"confidence":90,"references":0,"calls":["module.str","module.load_user.user_id","module.bool","module.load_user.include_deleted"],"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"name":"typed_helper","full_name":"module.typed_helper","simple_name":"typed_helper","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-itiuyqtp/type_annotation_gaps/module.py","basename":"module.py","line":8,"confidence":90,"references":0,"calls":["typing.Any","module.dict","module.str","module.typed_helper.user_id"],"return_type":"dict","confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"module.py","qualified_name":"module.load_user","kind":"function","line":4,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]},{"file":"module.py","qualified_name":"module.typed_helper","kind":"function","line":8,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":2,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":2},"candidate_decisions":{"reported":2,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-itiuyqtp/type_annotation_gaps","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-itiuyqtp/type_annotation_gaps","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"quality_count":6,"architecture_advisory_count":0,"maintainability_inventory":[{"file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-itiuyqtp/type_annotation_gaps/module.py","language":"Python","function_lines":[4,8],"rule_units":{"SKY-Q301":2,"SKY-Q306":2,"SKY-Q302":2,"SKY-C303":2,"SKY-C304":2}}],"typing_coverage":{"version":1,"scope":"public_source_definitions","files_analyzed":1,"definition_count":2,"definitions_with_complete_annotations":1,"definitions_missing_annotations":1,"missing_parameter_annotations":1,"missing_return_annotations":1,"definitions_with_supplied_contract":0,"unreported_missing_definitions":0,"enable_coverage_advice_with":"[tool.skylos] typing_coverage_advice = true"},"total_loc":5,"grade_categories":["quality","dead_code"],"by_directory":[{"path":".","total":8,"files":3,"dead_code":2,"quality":6,"rules":{"SKY-L029":1,"SKY-R102":1,"SKY-R103":1,"SKY-R104":1,"SKY-T101":1,"SKY-T102":1,"unused-functions":2},"severities":{"LOW":8}}],"finding_type_counts":{"defect":0,"review":2,"advice":6,"advice_groups":6},"assessment_scope":"listed_findings","resolution_scope_limited":true,"unused_dependency_analysis":{"rule_id":"SKY-U005","status":"complete","complete":true,"reasons":[],"abstained_count":0,"abstained_dependencies":[]},"listed_finding_type_counts":{"defect":0,"review":2,"advice":6,"advice_groups":6},"listed_quality_count":6},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"quality":[{"rule_id":"SKY-T101","kind":"typing","severity":"LOW","type":"function","name":"load_user","simple_name":"load_user","value":"user_id","threshold":0,"message":"Public function 'load_user' has untyped parameters: user_id.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-itiuyqtp/type_annotation_gaps/module.py","basename":"module.py","line":4,"col":0,"annotation_evidence":{"version":1,"required":true,"source":"annotation_policy"},"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["PEP 484","Typed public API parameters"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-T102","kind":"typing","severity":"LOW","type":"function","name":"load_user","simple_name":"load_user","value":"missing_return_annotation","threshold":0,"message":"Public function 'load_user' is missing a return type annotation.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-itiuyqtp/type_annotation_gaps/module.py","basename":"module.py","line":4,"col":0,"annotation_evidence":{"version":1,"required":true,"source":"annotation_policy"},"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["PEP 484","Typed public API returns"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-L029","kind":"quality","severity":"LOW","type":"function","name":"load_user.include_deleted","simple_name":"include_deleted","value":"include_deleted","threshold":0,"message":"Boolean parameter 'include_deleted' permits positional calls, which can obscure their meaning. Prefer named calls; consider keyword-only arguments when the public or callback contract permits it.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-itiuyqtp/type_annotation_gaps/module.py","basename":"module.py","line":4,"col":23,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":[],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R102","kind":"repo_policy","severity":"LOW","type":"policy","name":"python-lint-policy","simple_name":"python-lint-policy","value":"missing_ruff","threshold":0,"message":"Python project has no detected Ruff, Flake8 or Pylint policy configured.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-itiuyqtp/type_annotation_gaps/pyproject.toml","basename":"pyproject.toml","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Python linting"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R103","kind":"repo_policy","severity":"LOW","type":"policy","name":"skylos-gate-policy","simple_name":"skylos-gate-policy","value":"missing_skylos_gate","threshold":0,"message":"No [tool.skylos.gate] policy is configured for repository quality gates.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-itiuyqtp/type_annotation_gaps/pyproject.toml","basename":"pyproject.toml","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Skylos quality gate"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R104","kind":"repo_policy","severity":"LOW","type":"policy","name":"pre-commit-policy","simple_name":"pre-commit-policy","value":"missing_pre_commit","threshold":0,"message":"Repository has no pre-commit policy file.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-itiuyqtp/type_annotation_gaps","basename":"type_annotation_gaps","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: pre-commit"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}}],"architecture_metrics":{"system_metrics":{"total_modules":1,"total_packages":1,"total_loc":5,"modularity_index":1.0,"architecture_fitness":0.0,"mean_distance":1.0,"instability_variance":0.0,"coupling_health":1.0,"dip_violations":0,"zone_distribution":{"main_sequence":0,"off_main_sequence":0,"zone_of_pain":0,"zone_of_uselessness":0,"disconnected":1}},"module_count":1,"packages":{"module":{"instability":0.0,"avg_abstractness":0.0,"avg_distance":1.0,"module_count":1}},"module_metrics":{"module":{"ca":0,"ce":0,"instability":0.0,"abstractness":0.0,"distance":1.0,"zone":"disconnected"}},"iad_enforced":false,"advisories":[],"advisory_count":0,"advisory_signal_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["quality","dead_code"],"coverage":{"status":"partial","not_assessed":["security","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"measured","advice_count":6,"rule_count":11,"affected_files":3,"affected_functions":null,"checks":[{"rule_id":"SKY-C303","name":"Too many function arguments","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":2,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-C304","name":"Function too long","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":2,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-L029","name":"Boolean trap","language":"Python","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q301","name":"Cyclomatic complexity","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":2,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q302","name":"Deep nesting","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":2,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q306","name":"Cognitive complexity","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":2,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R102","name":"Python lint policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R103","name":"Skylos gate policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R104","name":"Pre-commit policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-T101","name":"Missing type annotations","language":"Python","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-T102","name":"Missing return type annotations","language":"Python","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null}]},"dead_code":{"status":"review","candidate_count":2,"confidence_range":[90,90]},"finding_counts":{"defect":0,"review":2,"advice":6,"advice_groups":6}},"listing_policy_version":1,"advice_visibility":{"total_checks":6,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-itiuyqtp/type_annotation_gaps","conf":0,"enable_quality":true,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"type-annotation-coverage-only","status":"complete","elapsedSeconds":0.611665,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8i4th433/type_annotation_coverage_only","nativeReport":{"definitions":{"module.load_user":{"name":"module.load_user","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8i4th433/type_annotation_coverage_only/module.py","line":6,"type":"function","loc":2,"complexity":1,"calls":["module.bool","module.load_user.include_deleted","module.load_user.user_id","module.str"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]},"module.typed_helper":{"name":"module.typed_helper","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8i4th433/type_annotation_coverage_only/module.py","line":10,"type":"function","loc":2,"complexity":1,"calls":["module.dict","module.str","module.typed_helper.user_id","typing.Any"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]}},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"module.py","qualified_name":"module.load_user","kind":"function","line":6,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}]},{"file":"module.py","qualified_name":"module.typed_helper","kind":"function","line":10,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":2,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":2},"candidate_decisions":{"reported":0,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8i4th433/type_annotation_coverage_only","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8i4th433/type_annotation_coverage_only","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"quality_count":4,"architecture_advisory_count":0,"maintainability_inventory":[{"file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8i4th433/type_annotation_coverage_only/module.py","language":"Python","function_lines":[6,10],"rule_units":{"SKY-Q301":2,"SKY-Q306":2,"SKY-Q302":2,"SKY-C303":2,"SKY-C304":2}}],"typing_coverage":{"version":1,"scope":"public_source_definitions","files_analyzed":1,"definition_count":2,"definitions_with_complete_annotations":1,"definitions_missing_annotations":1,"missing_parameter_annotations":1,"missing_return_annotations":1,"definitions_with_supplied_contract":0,"unreported_missing_definitions":1,"enable_coverage_advice_with":"[tool.skylos] typing_coverage_advice = true"},"total_loc":6,"grade_categories":["quality","dead_code"],"by_directory":[{"path":".","total":4,"files":3,"quality":4,"rules":{"SKY-L029":1,"SKY-R102":1,"SKY-R103":1,"SKY-R104":1},"severities":{"LOW":4}}],"finding_type_counts":{"defect":0,"review":0,"advice":4,"advice_groups":4},"assessment_scope":"listed_findings","resolution_scope_limited":true,"unused_dependency_analysis":{"rule_id":"SKY-U005","status":"complete","complete":true,"reasons":[],"abstained_count":0,"abstained_dependencies":[]},"listed_finding_type_counts":{"defect":0,"review":0,"advice":4,"advice_groups":4},"listed_quality_count":4},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"quality":[{"rule_id":"SKY-L029","kind":"quality","severity":"LOW","type":"function","name":"load_user.include_deleted","simple_name":"include_deleted","value":"include_deleted","threshold":0,"message":"Boolean parameter 'include_deleted' permits positional calls, which can obscure their meaning. Prefer named calls; consider keyword-only arguments when the public or callback contract permits it.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8i4th433/type_annotation_coverage_only/module.py","basename":"module.py","line":6,"col":23,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":[],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R102","kind":"repo_policy","severity":"LOW","type":"policy","name":"python-lint-policy","simple_name":"python-lint-policy","value":"missing_ruff","threshold":0,"message":"Python project has no detected Ruff, Flake8 or Pylint policy configured.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8i4th433/type_annotation_coverage_only/pyproject.toml","basename":"pyproject.toml","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Python linting"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R103","kind":"repo_policy","severity":"LOW","type":"policy","name":"skylos-gate-policy","simple_name":"skylos-gate-policy","value":"missing_skylos_gate","threshold":0,"message":"No [tool.skylos.gate] policy is configured for repository quality gates.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8i4th433/type_annotation_coverage_only/pyproject.toml","basename":"pyproject.toml","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Skylos quality gate"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R104","kind":"repo_policy","severity":"LOW","type":"policy","name":"pre-commit-policy","simple_name":"pre-commit-policy","value":"missing_pre_commit","threshold":0,"message":"Repository has no pre-commit policy file.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8i4th433/type_annotation_coverage_only","basename":"type_annotation_coverage_only","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: pre-commit"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}}],"architecture_metrics":{"system_metrics":{"total_modules":1,"total_packages":1,"total_loc":6,"modularity_index":1.0,"architecture_fitness":0.0,"mean_distance":1.0,"instability_variance":0.0,"coupling_health":1.0,"dip_violations":0,"zone_distribution":{"main_sequence":0,"off_main_sequence":0,"zone_of_pain":0,"zone_of_uselessness":0,"disconnected":1}},"module_count":1,"packages":{"module":{"instability":0.0,"avg_abstractness":0.0,"avg_distance":1.0,"module_count":1}},"module_metrics":{"module":{"ca":0,"ce":0,"instability":0.0,"abstractness":0.0,"distance":1.0,"zone":"disconnected"}},"iad_enforced":false,"advisories":[],"advisory_count":0,"advisory_signal_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["quality","dead_code"],"coverage":{"status":"partial","not_assessed":["security","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"measured","advice_count":4,"rule_count":9,"affected_files":3,"affected_functions":null,"checks":[{"rule_id":"SKY-C303","name":"Too many function arguments","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":2,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-C304","name":"Function too long","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":2,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-L029","name":"Boolean trap","language":"Python","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q301","name":"Cyclomatic complexity","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":2,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q302","name":"Deep nesting","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":2,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q306","name":"Cognitive complexity","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":2,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R102","name":"Python lint policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R103","name":"Skylos gate policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R104","name":"Pre-commit policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null}]},"dead_code":{"status":"none","candidate_count":0,"confidence_range":null},"finding_counts":{"defect":0,"review":0,"advice":4,"advice_groups":4}},"listing_policy_version":1,"advice_visibility":{"total_checks":4,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8i4th433/type_annotation_coverage_only","conf":0,"enable_quality":true,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"framework-route-policy","status":"complete","elapsedSeconds":0.490021,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-z6l2qkjd/framework_route_policy","nativeReport":{"definitions":{"app.require_admin":{"name":"app.require_admin","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-z6l2qkjd/framework_route_policy/app.py","line":6,"type":"function","loc":2,"complexity":1,"calls":["app.bool"],"called_by":["app.create_admin"],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]},"app.create_user":{"name":"app.create_user","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-z6l2qkjd/framework_route_policy/app.py","line":11,"type":"function","loc":2,"complexity":1,"calls":["app.create_user.payload","app.dict"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]},"app.list_users":{"name":"app.list_users","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-z6l2qkjd/framework_route_policy/app.py","line":16,"type":"function","loc":2,"complexity":1,"calls":["app.list","app.str"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]},"app.create_admin":{"name":"app.create_admin","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-z6l2qkjd/framework_route_policy/app.py","line":21,"type":"function","loc":2,"complexity":1,"calls":["app.bool","app.create_admin.payload","app.dict","app.require_admin","fastapi.Depends"],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]}},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.py","qualified_name":"app.create_admin","kind":"function","line":21,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.create_user","kind":"function","line":11,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.list_users","kind":"function","line":16,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.require_admin","kind":"function","line":6,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":1,"confidence":0,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"framework root","source":"framework","confidence":1.0,"details":{"root_kind":"framework_route"}},{"kind":"uncertainty","role":"uncertainty","reason":"framework_decorator","source":"framework_signal","confidence":1.0,"details":{}}]},{"file":"app.py","qualified_name":"app.router","kind":"variable","line":3,"classification":"alive","decision":{"classification":"alive","primary_reason":"Called during module import","reason_tags":["top_level_execution"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"top_level_execution","role":"supports_live","reason":"called during module top-level execution","source":"python_ast","confidence":1.0,"details":{}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":5,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":5},"candidate_decisions":{"reported":0,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-z6l2qkjd/framework_route_policy","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-z6l2qkjd/framework_route_policy","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"quality_count":6,"architecture_advisory_count":0,"maintainability_inventory":[{"file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-z6l2qkjd/framework_route_policy/app.py","language":"Python","function_lines":[6,11,16,21],"rule_units":{"SKY-Q301":4,"SKY-Q306":4,"SKY-Q302":4,"SKY-C303":4,"SKY-C304":4}}],"typing_coverage":{"version":1,"scope":"public_source_definitions","files_analyzed":1,"definition_count":4,"definitions_with_complete_annotations":4,"definitions_missing_annotations":0,"missing_parameter_annotations":0,"missing_return_annotations":0,"definitions_with_supplied_contract":0,"unreported_missing_definitions":0,"enable_coverage_advice_with":"[tool.skylos] typing_coverage_advice = true"},"total_loc":13,"grade_categories":["quality","dead_code"],"by_directory":[{"path":".","total":6,"files":2,"quality":6,"rules":{"SKY-F102":1,"SKY-L029":1,"SKY-R101":1,"SKY-R102":1,"SKY-R103":1,"SKY-R104":1},"severities":{"MEDIUM":2,"LOW":4}}],"finding_type_counts":{"defect":0,"review":1,"advice":5,"advice_groups":5},"assessment_scope":"listed_findings","resolution_scope_limited":true,"unused_dependency_analysis":{"rule_id":"SKY-U005","status":"complete","complete":true,"reasons":[],"abstained_count":0,"abstained_dependencies":[]},"listed_finding_type_counts":{"defect":0,"review":1,"advice":5,"advice_groups":5},"listed_quality_count":6},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"quality":[{"rule_id":"SKY-F102","kind":"framework_security","severity":"MEDIUM","type":"route","name":"create_user","simple_name":"create_user","value":"POST","threshold":0,"message":"Function 'create_user' uses a decorator matching a mutating HTTP method, with no obvious auth, permission, security, or dependency guard. Review whether it registers a route and whether access is protected.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-z6l2qkjd/framework_route_policy/app.py","basename":"app.py","line":11,"col":0,"cwe":[{"id":"CWE-862","name":"Missing Authorization"}],"standard_refs":["OWASP API1: Broken Object Level Authorization"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"rule_id":"SKY-L029","kind":"quality","severity":"LOW","type":"function","name":"create_admin.user","simple_name":"user","value":"user","threshold":0,"message":"Boolean parameter 'user' permits positional calls, which can obscure their meaning. Prefer named calls; consider keyword-only arguments when the public or callback contract permits it.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-z6l2qkjd/framework_route_policy/app.py","basename":"app.py","line":21,"col":32,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":[],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R101","kind":"repo_policy","severity":"MEDIUM","type":"policy","name":"python-type-check-policy","simple_name":"python-type-check-policy","value":"missing_type_checker","threshold":0,"message":"Python project has no mypy or pyright policy configured. Add a checked type policy for public code paths.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-z6l2qkjd/framework_route_policy","basename":"framework_route_policy","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Python type checking"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R102","kind":"repo_policy","severity":"LOW","type":"policy","name":"python-lint-policy","simple_name":"python-lint-policy","value":"missing_ruff","threshold":0,"message":"Python project has no detected Ruff, Flake8 or Pylint policy configured.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-z6l2qkjd/framework_route_policy","basename":"framework_route_policy","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Python linting"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R103","kind":"repo_policy","severity":"LOW","type":"policy","name":"skylos-gate-policy","simple_name":"skylos-gate-policy","value":"missing_skylos_gate","threshold":0,"message":"No [tool.skylos.gate] policy is configured for repository quality gates.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-z6l2qkjd/framework_route_policy","basename":"framework_route_policy","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Skylos quality gate"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R104","kind":"repo_policy","severity":"LOW","type":"policy","name":"pre-commit-policy","simple_name":"pre-commit-policy","value":"missing_pre_commit","threshold":0,"message":"Repository has no pre-commit policy file.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-z6l2qkjd/framework_route_policy","basename":"framework_route_policy","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: pre-commit"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}}],"architecture_metrics":{"system_metrics":{"total_modules":1,"total_packages":1,"total_loc":13,"modularity_index":1.0,"architecture_fitness":0.0,"mean_distance":1.0,"instability_variance":0.0,"coupling_health":1.0,"dip_violations":0,"zone_distribution":{"main_sequence":0,"off_main_sequence":0,"zone_of_pain":0,"zone_of_uselessness":0,"disconnected":1}},"module_count":1,"packages":{"app":{"instability":0.0,"avg_abstractness":0.0,"avg_distance":1.0,"module_count":1}},"module_metrics":{"app":{"ca":0,"ce":0,"instability":0.0,"abstractness":0.0,"distance":1.0,"zone":"disconnected"}},"iad_enforced":false,"advisories":[],"advisory_count":0,"advisory_signal_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["quality","dead_code"],"coverage":{"status":"partial","not_assessed":["security","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"medium","highest_severity":"MEDIUM","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":1,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"medium","highest_severity":"MEDIUM","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":1,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"measured","advice_count":5,"rule_count":10,"affected_files":2,"affected_functions":null,"checks":[{"rule_id":"SKY-C303","name":"Too many function arguments","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":4,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-C304","name":"Function too long","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":4,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-L029","name":"Boolean trap","language":"Python","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q301","name":"Cyclomatic complexity","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":4,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q302","name":"Deep nesting","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":4,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q306","name":"Cognitive complexity","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":4,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R101","name":"Python type-check policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R102","name":"Python lint policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R103","name":"Skylos gate policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R104","name":"Pre-commit policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null}]},"dead_code":{"status":"none","candidate_count":0,"confidence_range":null},"finding_counts":{"defect":0,"review":1,"advice":5,"advice_groups":5}},"listing_policy_version":1,"advice_visibility":{"total_checks":5,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-z6l2qkjd/framework_route_policy","conf":0,"enable_quality":true,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"opaque-identifier","status":"complete","elapsedSeconds":0.502041,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a2y4do71/opaque_identifier","nativeReport":{"definitions":{"module.load_account_snapshot":{"name":"module.load_account_snapshot","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a2y4do71/opaque_identifier/module.py","line":1,"type":"function","loc":17,"complexity":3,"calls":["module.audit_log.info","module.audit_log.warning","module.load_account_snapshot.account","module.load_account_snapshot.audit_log","module.load_account_snapshot.owner","module.load_account_snapshot.repository","module.load_account_snapshot.request","module.load_account_snapshot.x","module.repository.fetch_account","module.repository.fetch_account.owner_id","module.repository.fetch_owner","module.repository.fetch_owner.email","module.request.args"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"module.coordinate_area":{"name":"module.coordinate_area","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a2y4do71/opaque_identifier/module.py","line":20,"type":"function","loc":4,"complexity":1,"calls":["module.coordinate_area.point","module.coordinate_area.x","module.coordinate_area.y","module.point.get"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"module.normalize":{"name":"module.normalize","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a2y4do71/opaque_identifier/module.py","line":26,"type":"function","loc":3,"complexity":1,"calls":["module.normalize.raw","module.normalize.tmp","module.raw.strip"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"load_account_snapshot","full_name":"module.load_account_snapshot","simple_name":"load_account_snapshot","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a2y4do71/opaque_identifier/module.py","basename":"module.py","line":1,"confidence":90,"references":0,"calls":["module.audit_log.info","module.load_account_snapshot.audit_log","module.load_account_snapshot.account","module.repository.fetch_account.owner_id","module.load_account_snapshot.x","module.load_account_snapshot.repository","module.repository.fetch_account","module.request.args","module.load_account_snapshot.owner","module.repository.fetch_owner","module.audit_log.warning","module.load_account_snapshot.request","module.repository.fetch_owner.email"],"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"name":"coordinate_area","full_name":"module.coordinate_area","simple_name":"coordinate_area","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a2y4do71/opaque_identifier/module.py","basename":"module.py","line":20,"confidence":90,"references":0,"calls":["module.coordinate_area.y","module.coordinate_area.x","module.point.get","module.coordinate_area.point"],"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"name":"normalize","full_name":"module.normalize","simple_name":"normalize","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a2y4do71/opaque_identifier/module.py","basename":"module.py","line":26,"confidence":90,"references":0,"calls":["module.normalize.raw","module.raw.strip","module.normalize.tmp"],"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"module.py","qualified_name":"module.coordinate_area","kind":"function","line":20,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]},{"file":"module.py","qualified_name":"module.coordinate_area.x","kind":"variable","line":21,"classification":"alive","decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":1}}]},{"file":"module.py","qualified_name":"module.coordinate_area.y","kind":"variable","line":22,"classification":"alive","decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":1}}]},{"file":"module.py","qualified_name":"module.load_account_snapshot","kind":"function","line":1,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]},{"file":"module.py","qualified_name":"module.load_account_snapshot.account","kind":"variable","line":8,"classification":"alive","decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":2}}]},{"file":"module.py","qualified_name":"module.load_account_snapshot.owner","kind":"variable","line":12,"classification":"alive","decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":1}}]},{"file":"module.py","qualified_name":"module.load_account_snapshot.x","kind":"variable","line":2,"classification":"alive","decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":4}}]},{"file":"module.py","qualified_name":"module.normalize","kind":"function","line":26,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]},{"file":"module.py","qualified_name":"module.normalize.tmp","kind":"variable","line":27,"classification":"alive","decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":0,"threshold":0},"evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":1}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":9,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":3,"alive":6},"candidate_decisions":{"reported":3,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a2y4do71/opaque_identifier","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a2y4do71/opaque_identifier","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"quality_count":5,"architecture_advisory_count":0,"maintainability_inventory":[{"file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a2y4do71/opaque_identifier/module.py","language":"Python","function_lines":[1,20,26],"rule_units":{"SKY-Q301":3,"SKY-Q306":3,"SKY-Q302":3,"SKY-C303":3,"SKY-C304":3}}],"typing_coverage":{"version":1,"scope":"public_source_definitions","files_analyzed":1,"definition_count":3,"definitions_with_complete_annotations":0,"definitions_missing_annotations":3,"missing_parameter_annotations":5,"missing_return_annotations":3,"definitions_with_supplied_contract":0,"unreported_missing_definitions":3,"enable_coverage_advice_with":"[tool.skylos] typing_coverage_advice = true"},"total_loc":22,"grade_categories":["quality","dead_code"],"by_directory":[{"path":".","total":8,"files":2,"dead_code":3,"quality":5,"rules":{"SKY-Q806":1,"SKY-R101":1,"SKY-R102":1,"SKY-R103":1,"SKY-R104":1,"unused-functions":3},"severities":{"MEDIUM":1,"LOW":7}}],"finding_type_counts":{"defect":0,"review":3,"advice":5,"advice_groups":5},"assessment_scope":"listed_findings","resolution_scope_limited":true,"unused_dependency_analysis":{"rule_id":"SKY-U005","status":"complete","complete":true,"reasons":[],"abstained_count":0,"abstained_dependencies":[]},"listed_finding_type_counts":{"defect":0,"review":3,"advice":5,"advice_groups":5},"listed_quality_count":5},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"quality":[{"rule_id":"SKY-Q806","kind":"readability","severity":"LOW","type":"variable","name":"x","simple_name":"x","value":"account_id","threshold":6,"metric":"identifier_opacity","message":"Opaque variable 'x' hides semantic RHS evidence; consider a name like 'account_id'.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a2y4do71/opaque_identifier/module.py","basename":"module.py","line":2,"col":4,"span":13,"use_count":4,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["PEP 8 naming guidance","Google Python style: descriptive names proportional to scope"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R101","kind":"repo_policy","severity":"MEDIUM","type":"policy","name":"python-type-check-policy","simple_name":"python-type-check-policy","value":"missing_type_checker","threshold":0,"message":"Python project has no mypy or pyright policy configured. Add a checked type policy for public code paths.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a2y4do71/opaque_identifier","basename":"opaque_identifier","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Python type checking"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R102","kind":"repo_policy","severity":"LOW","type":"policy","name":"python-lint-policy","simple_name":"python-lint-policy","value":"missing_ruff","threshold":0,"message":"Python project has no detected Ruff, Flake8 or Pylint policy configured.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a2y4do71/opaque_identifier","basename":"opaque_identifier","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Python linting"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R103","kind":"repo_policy","severity":"LOW","type":"policy","name":"skylos-gate-policy","simple_name":"skylos-gate-policy","value":"missing_skylos_gate","threshold":0,"message":"No [tool.skylos.gate] policy is configured for repository quality gates.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a2y4do71/opaque_identifier","basename":"opaque_identifier","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Skylos quality gate"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R104","kind":"repo_policy","severity":"LOW","type":"policy","name":"pre-commit-policy","simple_name":"pre-commit-policy","value":"missing_pre_commit","threshold":0,"message":"Repository has no pre-commit policy file.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a2y4do71/opaque_identifier","basename":"opaque_identifier","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: pre-commit"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}}],"architecture_metrics":{"system_metrics":{"total_modules":1,"total_packages":1,"total_loc":22,"modularity_index":1.0,"architecture_fitness":0.0,"mean_distance":1.0,"instability_variance":0.0,"coupling_health":1.0,"dip_violations":0,"zone_distribution":{"main_sequence":0,"off_main_sequence":0,"zone_of_pain":0,"zone_of_uselessness":0,"disconnected":1}},"module_count":1,"packages":{"module":{"instability":0.0,"avg_abstractness":0.0,"avg_distance":1.0,"module_count":1}},"module_metrics":{"module":{"ca":0,"ce":0,"instability":0.0,"abstractness":0.0,"distance":1.0,"zone":"disconnected"}},"iad_enforced":false,"advisories":[],"advisory_count":0,"advisory_signal_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["quality","dead_code"],"coverage":{"status":"partial","not_assessed":["security","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"measured","advice_count":5,"rule_count":10,"affected_files":2,"affected_functions":null,"checks":[{"rule_id":"SKY-C303","name":"Too many function arguments","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":3,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-C304","name":"Function too long","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":3,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q301","name":"Cyclomatic complexity","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":3,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q302","name":"Deep nesting","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":3,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q306","name":"Cognitive complexity","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":3,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q806","name":"Opaque identifier","language":"Python","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R101","name":"Python type-check policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R102","name":"Python lint policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R103","name":"Skylos gate policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R104","name":"Pre-commit policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null}]},"dead_code":{"status":"review","candidate_count":3,"confidence_range":[90,90]},"finding_counts":{"defect":0,"review":3,"advice":5,"advice_groups":5}},"listing_policy_version":1,"advice_visibility":{"total_checks":5,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-a2y4do71/opaque_identifier","conf":0,"enable_quality":true,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"repo-policy-missing-typechecker","status":"complete","elapsedSeconds":0.314658,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-06s141qc/repo_policy_missing_typechecker","nativeReport":{"definitions":{"app.configured_helper":{"name":"app.configured_helper","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-06s141qc/repo_policy_missing_typechecker/app.py","line":1,"type":"function","loc":2,"complexity":1,"calls":["app.int"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"configured_helper","full_name":"app.configured_helper","simple_name":"configured_helper","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-06s141qc/repo_policy_missing_typechecker/app.py","basename":"app.py","line":1,"confidence":90,"references":0,"calls":["app.int"],"return_type":"int","confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.py","qualified_name":"app.configured_helper","kind":"function","line":1,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-06s141qc/repo_policy_missing_typechecker","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-06s141qc/repo_policy_missing_typechecker","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"quality_count":1,"architecture_advisory_count":0,"maintainability_inventory":[{"file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-06s141qc/repo_policy_missing_typechecker/app.py","language":"Python","function_lines":[1],"rule_units":{"SKY-Q301":1,"SKY-Q306":1,"SKY-Q302":1,"SKY-C303":1,"SKY-C304":1}}],"typing_coverage":{"version":1,"scope":"public_source_definitions","files_analyzed":1,"definition_count":1,"definitions_with_complete_annotations":1,"definitions_missing_annotations":0,"missing_parameter_annotations":0,"missing_return_annotations":0,"definitions_with_supplied_contract":0,"unreported_missing_definitions":0,"enable_coverage_advice_with":"[tool.skylos] typing_coverage_advice = true"},"total_loc":2,"grade_categories":["quality","dead_code"],"by_directory":[{"path":".","total":2,"files":2,"dead_code":1,"quality":1,"rules":{"SKY-R101":1,"unused-functions":1},"severities":{"MEDIUM":1,"LOW":1}}],"finding_type_counts":{"defect":0,"review":1,"advice":1,"advice_groups":1},"assessment_scope":"listed_findings","resolution_scope_limited":true,"unused_dependency_analysis":{"rule_id":"SKY-U005","status":"complete","complete":true,"reasons":[],"abstained_count":0,"abstained_dependencies":[]},"listed_finding_type_counts":{"defect":0,"review":1,"advice":1,"advice_groups":1},"listed_quality_count":1},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"quality":[{"rule_id":"SKY-R101","kind":"repo_policy","severity":"MEDIUM","type":"policy","name":"python-type-check-policy","simple_name":"python-type-check-policy","value":"missing_type_checker","threshold":0,"message":"Python project has no mypy or pyright policy configured. Add a checked type policy for public code paths.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-06s141qc/repo_policy_missing_typechecker/pyproject.toml","basename":"pyproject.toml","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Python type checking"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}}],"architecture_metrics":{"system_metrics":{"total_modules":1,"total_packages":1,"total_loc":2,"modularity_index":1.0,"architecture_fitness":0.0,"mean_distance":1.0,"instability_variance":0.0,"coupling_health":1.0,"dip_violations":0,"zone_distribution":{"main_sequence":0,"off_main_sequence":0,"zone_of_pain":0,"zone_of_uselessness":0,"disconnected":1}},"module_count":1,"packages":{"app":{"instability":0.0,"avg_abstractness":0.0,"avg_distance":1.0,"module_count":1}},"module_metrics":{"app":{"ca":0,"ce":0,"instability":0.0,"abstractness":0.0,"distance":1.0,"zone":"disconnected"}},"iad_enforced":false,"advisories":[],"advisory_count":0,"advisory_signal_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["quality","dead_code"],"coverage":{"status":"partial","not_assessed":["security","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"measured","advice_count":1,"rule_count":6,"affected_files":1,"affected_functions":null,"checks":[{"rule_id":"SKY-C303","name":"Too many function arguments","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":1,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-C304","name":"Function too long","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":1,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q301","name":"Cyclomatic complexity","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":1,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q302","name":"Deep nesting","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":1,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q306","name":"Cognitive complexity","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":1,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R101","name":"Python type-check policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null}]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[90,90]},"finding_counts":{"defect":0,"review":1,"advice":1,"advice_groups":1}},"listing_policy_version":1,"advice_visibility":{"total_checks":1,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-06s141qc/repo_policy_missing_typechecker","conf":0,"enable_quality":true,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"clean-module","status":"complete","elapsedSeconds":0.350615,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-tu4xhc60/clean_module","nativeReport":{"definitions":{"module.normalize_name":{"name":"module.normalize_name","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-tu4xhc60/clean_module/module.py","line":1,"type":"function","loc":4,"complexity":2,"calls":["module.normalize_name.default","module.normalize_name.value","module.value.strip"],"called_by":[],"dead":true,"dead_code_classification":"uncertain","dead_code_evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"weak helper function","source":"reference_safe_policy","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; No static references; Not exported","reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":1,"confidence":90,"threshold":0},"dead_code_reason":"Uncertainty evidence present; No static references; Not exported","dead_code_reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"module.join_parts":{"name":"module.join_parts","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-tu4xhc60/clean_module/module.py","line":7,"type":"function","loc":2,"complexity":1,"calls":["module.join_parts.parts","module.part.strip"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"join_parts","full_name":"module.join_parts","simple_name":"join_parts","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-tu4xhc60/clean_module/module.py","basename":"module.py","line":7,"confidence":90,"references":0,"calls":["module.part.strip","module.join_parts.parts"],"confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"module.py","qualified_name":"module.join_parts","kind":"function","line":7,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]},{"file":"module.py","qualified_name":"module.normalize_name","kind":"function","line":1,"classification":"uncertain","decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; No static references; Not exported","reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":1,"confidence":90,"threshold":0},"evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"weak helper function","source":"reference_safe_policy","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[{"name":"normalize_name","full_name":"module.normalize_name","simple_name":"normalize_name","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-tu4xhc60/clean_module/module.py","basename":"module.py","line":1,"confidence":90,"references":0,"calls":["module.value.strip","module.normalize_name.default","module.normalize_name.value"],"confidence_factors":["public_name"],"dead_code_classification":"uncertain","dead_code_evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"weak helper function","source":"reference_safe_policy","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; No static references; Not exported","reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":1,"confidence":90,"threshold":0},"dead_code_reason":"Uncertainty evidence present; No static references; Not exported","dead_code_reason_tags":["uncertainty","no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"abstained"}],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":2,"classification_policy":"dead-code-evidence-v3","classifications":{"uncertain":1,"likely_dead":1},"uncertainty_reasons":{"weak helper function":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":1}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-tu4xhc60/clean_module","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-tu4xhc60/clean_module","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"quality_count":4,"architecture_advisory_count":0,"maintainability_inventory":[{"file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-tu4xhc60/clean_module/module.py","language":"Python","function_lines":[1,7],"rule_units":{"SKY-Q301":2,"SKY-Q306":2,"SKY-Q302":2,"SKY-C303":2,"SKY-C304":2}}],"typing_coverage":{"version":1,"scope":"public_source_definitions","files_analyzed":1,"definition_count":2,"definitions_with_complete_annotations":0,"definitions_missing_annotations":2,"missing_parameter_annotations":3,"missing_return_annotations":2,"definitions_with_supplied_contract":0,"unreported_missing_definitions":2,"enable_coverage_advice_with":"[tool.skylos] typing_coverage_advice = true"},"total_loc":6,"grade_categories":["quality","dead_code"],"by_directory":[{"path":".","total":5,"files":2,"dead_code":1,"quality":4,"rules":{"SKY-R101":1,"SKY-R102":1,"SKY-R103":1,"SKY-R104":1,"unused-functions":1},"severities":{"MEDIUM":1,"LOW":4}}],"finding_type_counts":{"defect":0,"review":1,"advice":4,"advice_groups":4},"assessment_scope":"listed_findings","resolution_scope_limited":true,"unused_dependency_analysis":{"rule_id":"SKY-U005","status":"complete","complete":true,"reasons":[],"abstained_count":0,"abstained_dependencies":[]},"listed_finding_type_counts":{"defect":0,"review":1,"advice":4,"advice_groups":4},"listed_quality_count":4},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"quality":[{"rule_id":"SKY-R101","kind":"repo_policy","severity":"MEDIUM","type":"policy","name":"python-type-check-policy","simple_name":"python-type-check-policy","value":"missing_type_checker","threshold":0,"message":"Python project has no mypy or pyright policy configured. Add a checked type policy for public code paths.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-tu4xhc60/clean_module","basename":"clean_module","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Python type checking"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R102","kind":"repo_policy","severity":"LOW","type":"policy","name":"python-lint-policy","simple_name":"python-lint-policy","value":"missing_ruff","threshold":0,"message":"Python project has no detected Ruff, Flake8 or Pylint policy configured.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-tu4xhc60/clean_module","basename":"clean_module","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Python linting"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R103","kind":"repo_policy","severity":"LOW","type":"policy","name":"skylos-gate-policy","simple_name":"skylos-gate-policy","value":"missing_skylos_gate","threshold":0,"message":"No [tool.skylos.gate] policy is configured for repository quality gates.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-tu4xhc60/clean_module","basename":"clean_module","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Skylos quality gate"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R104","kind":"repo_policy","severity":"LOW","type":"policy","name":"pre-commit-policy","simple_name":"pre-commit-policy","value":"missing_pre_commit","threshold":0,"message":"Repository has no pre-commit policy file.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-tu4xhc60/clean_module","basename":"clean_module","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: pre-commit"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}}],"architecture_metrics":{"system_metrics":{"total_modules":1,"total_packages":1,"total_loc":6,"modularity_index":1.0,"architecture_fitness":0.0,"mean_distance":1.0,"instability_variance":0.0,"coupling_health":1.0,"dip_violations":0,"zone_distribution":{"main_sequence":0,"off_main_sequence":0,"zone_of_pain":0,"zone_of_uselessness":0,"disconnected":1}},"module_count":1,"packages":{"module":{"instability":0.0,"avg_abstractness":0.0,"avg_distance":1.0,"module_count":1}},"module_metrics":{"module":{"ca":0,"ce":0,"instability":0.0,"abstractness":0.0,"distance":1.0,"zone":"disconnected"}},"iad_enforced":false,"advisories":[],"advisory_count":0,"advisory_signal_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["quality","dead_code"],"coverage":{"status":"partial","not_assessed":["security","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"measured","advice_count":4,"rule_count":9,"affected_files":1,"affected_functions":null,"checks":[{"rule_id":"SKY-C303","name":"Too many function arguments","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":2,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-C304","name":"Function too long","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":2,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q301","name":"Cyclomatic complexity","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":2,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q302","name":"Deep nesting","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":2,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q306","name":"Cognitive complexity","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":2,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R101","name":"Python type-check policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R102","name":"Python lint policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R103","name":"Skylos gate policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R104","name":"Pre-commit policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null}]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[90,90]},"finding_counts":{"defect":0,"review":1,"advice":4,"advice_groups":4}},"listing_policy_version":1,"advice_visibility":{"total_checks":4,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-tu4xhc60/clean_module","conf":0,"enable_quality":true,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"typescript-async-loop-duplicate-condition","status":"complete","elapsedSeconds":0.492867,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8eofitgl/typescript_async_loop_duplicate_condition","nativeReport":{"definitions":{"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8eofitgl/typescript_async_loop_duplicate_condition/service.ts:loadInvoice":{"name":"loadInvoice","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8eofitgl/typescript_async_loop_duplicate_condition/service.ts","line":6,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":["reconcileInvoices"],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8eofitgl/typescript_async_loop_duplicate_condition/service.ts:markPaid":{"name":"markPaid","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8eofitgl/typescript_async_loop_duplicate_condition/service.ts","line":31,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":["reconcileInvoices"],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":2}}],"dead_code_decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Static references found","dead_code_reason_tags":["static_reference"]},"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8eofitgl/typescript_async_loop_duplicate_condition/service.ts:markVoid":{"name":"markVoid","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8eofitgl/typescript_async_loop_duplicate_condition/service.ts","line":35,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":["reconcileInvoices"],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8eofitgl/typescript_async_loop_duplicate_condition/service.ts:reconcileInvoices":{"name":"reconcileInvoices","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8eofitgl/typescript_async_loop_duplicate_condition/service.ts","line":10,"type":"function","loc":1,"complexity":1,"calls":["loadInvoice","markPaid","markVoid"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8eofitgl/typescript_async_loop_duplicate_condition/service.ts:Invoice":{"name":"Invoice","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8eofitgl/typescript_async_loop_duplicate_condition/service.ts","line":1,"type":"class","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"uncertain","dead_code_evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"type-only declaration","source":"framework_signal","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; Not exported","reason_tags":["uncertainty","not_exported"],"live_evidence_count":0,"dead_evidence_count":0,"uncertainty_count":1,"confidence":100,"threshold":0},"dead_code_reason":"Uncertainty evidence present; Not exported","dead_code_reason_tags":["uncertainty","not_exported"]}},"unused_functions":[{"name":"loadInvoice","full_name":"loadInvoice","simple_name":"loadInvoice","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8eofitgl/typescript_async_loop_duplicate_condition/service.ts","basename":"service.ts","line":6,"confidence":100,"references":0,"called_by":["reconcileInvoices"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"name":"markVoid","full_name":"markVoid","simple_name":"markVoid","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8eofitgl/typescript_async_loop_duplicate_condition/service.ts","basename":"service.ts","line":35,"confidence":100,"references":0,"called_by":["reconcileInvoices"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"name":"reconcileInvoices","full_name":"reconcileInvoices","simple_name":"reconcileInvoices","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8eofitgl/typescript_async_loop_duplicate_condition/service.ts","basename":"service.ts","line":10,"confidence":85,"references":0,"calls":["markPaid","loadInvoice","markVoid"],"confidence_factors":["exported_symbol"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[{"rule_id":"SKY-E003","message":"Unused TypeScript/JavaScript file (not imported by any other file)","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8eofitgl/typescript_async_loop_duplicate_condition/service.ts","line":1,"severity":"LOW","category":"DEAD_CODE","confidence":80,"confidence_factors":["unimported_file"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"service.ts","qualified_name":"Invoice","kind":"class","line":1,"classification":"uncertain","decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; Not exported","reason_tags":["uncertainty","not_exported"],"live_evidence_count":0,"dead_evidence_count":0,"uncertainty_count":1,"confidence":100,"threshold":0},"evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"type-only declaration","source":"framework_signal","confidence":1.0,"details":{}}]},{"file":"service.ts","qualified_name":"loadInvoice","kind":"function","line":6,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}]},{"file":"service.ts","qualified_name":"markPaid","kind":"function","line":31,"classification":"alive","decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":2}}]},{"file":"service.ts","qualified_name":"markVoid","kind":"function","line":35,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}]},{"file":"service.ts","qualified_name":"reconcileInvoices","kind":"function","line":10,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"TypeScript":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":5,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":3,"alive":1,"uncertain":1},"uncertainty_reasons":{"type-only declaration":1},"candidate_decisions":{"reported":3,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8eofitgl/typescript_async_loop_duplicate_condition","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8eofitgl/typescript_async_loop_duplicate_condition","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"quality_count":4,"unused_files_count":1,"architecture_advisory_count":0,"maintainability_inventory":[{"file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8eofitgl/typescript_async_loop_duplicate_condition/service.ts","language":"TypeScript","function_lines":[6,31,35,10],"rule_units":{"SKY-Q301":4,"SKY-Q302":4,"SKY-C303":4,"SKY-C304":4}}],"total_loc":30,"grade_categories":["quality","dead_code"],"by_directory":[{"path":".","total":8,"files":2,"dead_code":4,"quality":4,"rules":{"SKY-E003":1,"SKY-Q305":1,"SKY-Q402":1,"SKY-R103":1,"SKY-R104":1,"unused-functions":3},"severities":{"MEDIUM":1,"LOW":7}}],"finding_type_counts":{"defect":0,"review":6,"advice":2,"advice_groups":2},"assessment_scope":"listed_findings","resolution_scope_limited":true,"unused_dependency_analysis":{"rule_id":"SKY-U005","status":"not_run","complete":false,"reasons":[{"kind":"no_project_python_sources"}],"abstained_count":0},"listed_finding_type_counts":{"defect":0,"review":6,"advice":2,"advice_groups":2},"listed_quality_count":4},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"quality":[{"rule_id":"SKY-Q305","severity":"MEDIUM","message":"Duplicate condition '(status === \"paid\")' in if-else chain (first seen at line 16)","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8eofitgl/typescript_async_loop_duplicate_condition/service.ts","line":20,"col":0,"name":"reconcileInvoices","simple_name":"reconcileInvoices","cwe":[{"id":"CWE-670","name":"Always-Incorrect Control Flow Implementation"}],"standard_refs":["Control-flow correctness: duplicate branch condition/body"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"rule_id":"SKY-Q402","severity":"LOW","message":"Sequential await in loop; consider bounded parallelism only when iterations are independent and ordering and rate limits allow.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8eofitgl/typescript_async_loop_duplicate_condition/service.ts","line":25,"col":0,"name":"reconcileInvoices","simple_name":"reconcileInvoices","cwe":[{"id":"CWE-400","name":"Uncontrolled Resource Consumption"}],"standard_refs":[],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"rule_id":"SKY-R103","kind":"repo_policy","severity":"LOW","type":"policy","name":"skylos-gate-policy","simple_name":"skylos-gate-policy","value":"missing_skylos_gate","threshold":0,"message":"No [tool.skylos.gate] policy is configured for repository quality gates.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8eofitgl/typescript_async_loop_duplicate_condition","basename":"typescript_async_loop_duplicate_condition","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Skylos quality gate"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R104","kind":"repo_policy","severity":"LOW","type":"policy","name":"pre-commit-policy","simple_name":"pre-commit-policy","value":"missing_pre_commit","threshold":0,"message":"Repository has no pre-commit policy file.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8eofitgl/typescript_async_loop_duplicate_condition","basename":"typescript_async_loop_duplicate_condition","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: pre-commit"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}}],"architecture_metrics":{"system_metrics":{"total_modules":1,"total_packages":1,"total_loc":30,"modularity_index":1.0,"architecture_fitness":0.0,"mean_distance":1.0,"instability_variance":0.0,"coupling_health":1.0,"dip_violations":0,"zone_distribution":{"main_sequence":0,"off_main_sequence":0,"zone_of_pain":0,"zone_of_uselessness":0,"disconnected":1}},"module_count":1,"packages":{"root":{"instability":0.0,"avg_abstractness":0.0,"avg_distance":1.0,"module_count":1}},"module_metrics":{"service":{"ca":0,"ce":0,"instability":0.0,"abstractness":0.0,"distance":1.0,"zone":"disconnected"}},"iad_enforced":false,"advisories":[],"advisory_count":0,"advisory_signal_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["quality","dead_code"],"coverage":{"status":"partial","not_assessed":["security","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"medium","highest_severity":"MEDIUM","finding_count":2,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":1,"LOW":1,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"medium","highest_severity":"MEDIUM","finding_count":2,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":1,"LOW":1,"UNKNOWN":0}}}},"maintainability":{"status":"measured","advice_count":2,"rule_count":6,"affected_files":1,"affected_functions":null,"checks":[{"rule_id":"SKY-C303","name":"Too many function arguments","language":"TypeScript","count":0,"affected_units":0,"unit":"function","analyzed_units":4,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-C304","name":"Function too long","language":"TypeScript","count":0,"affected_units":0,"unit":"function","analyzed_units":4,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q301","name":"Cyclomatic complexity","language":"TypeScript","count":0,"affected_units":0,"unit":"function","analyzed_units":4,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q302","name":"Deep nesting","language":"TypeScript","count":0,"affected_units":0,"unit":"function","analyzed_units":4,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R103","name":"Skylos gate policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R104","name":"Pre-commit policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null}]},"dead_code":{"status":"review","candidate_count":4,"confidence_range":[80,100]},"finding_counts":{"defect":0,"review":6,"advice":2,"advice_groups":2}},"listing_policy_version":1,"advice_visibility":{"total_checks":2,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-8eofitgl/typescript_async_loop_duplicate_condition","conf":0,"enable_quality":true,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"typescript-type-safety-unsafe","status":"complete","elapsedSeconds":0.473151,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-rgbs0t8g/typescript_type_safety_unsafe","nativeReport":{"definitions":{"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-rgbs0t8g/typescript_type_safety_unsafe/service.ts:User":{"name":"User","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-rgbs0t8g/typescript_type_safety_unsafe/service.ts","line":1,"type":"class","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"uncertain","dead_code_evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"type-only declaration","source":"framework_signal","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; Not exported","reason_tags":["uncertainty","not_exported"],"live_evidence_count":0,"dead_evidence_count":0,"uncertainty_count":1,"confidence":100,"threshold":0},"dead_code_reason":"Uncertainty evidence present; Not exported","dead_code_reason_tags":["uncertainty","not_exported"]}},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[{"name":"parsedUser","full_name":"parsedUser","simple_name":"parsedUser","type":"variable","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-rgbs0t8g/typescript_type_safety_unsafe/service.ts","basename":"service.ts","line":13,"confidence":85,"references":0,"confidence_factors":["exported_symbol"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"name":"forcedUser","full_name":"forcedUser","simple_name":"forcedUser","type":"variable","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-rgbs0t8g/typescript_type_safety_unsafe/service.ts","basename":"service.ts","line":8,"confidence":85,"references":0,"confidence_factors":["exported_symbol"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"name":"ignoredTypeError","full_name":"ignoredTypeError","simple_name":"ignoredTypeError","type":"variable","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-rgbs0t8g/typescript_type_safety_unsafe/service.ts","basename":"service.ts","line":11,"confidence":85,"references":0,"confidence_factors":["exported_symbol"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_parameters":[],"unused_files":[{"rule_id":"SKY-E003","message":"Unused TypeScript/JavaScript file (not imported by any other file)","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-rgbs0t8g/typescript_type_safety_unsafe/service.ts","line":1,"severity":"LOW","category":"DEAD_CODE","confidence":80,"confidence_factors":["unimported_file"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"service.ts","qualified_name":"User","kind":"class","line":1,"classification":"uncertain","decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; Not exported","reason_tags":["uncertainty","not_exported"],"live_evidence_count":0,"dead_evidence_count":0,"uncertainty_count":1,"confidence":100,"threshold":0},"evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"type-only declaration","source":"framework_signal","confidence":1.0,"details":{}}]},{"file":"service.ts","qualified_name":"forcedUser","kind":"variable","line":8,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}]},{"file":"service.ts","qualified_name":"ignoredTypeError","kind":"variable","line":11,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}]},{"file":"service.ts","qualified_name":"parsedUser","kind":"variable","line":13,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"TypeScript":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":4,"classification_policy":"dead-code-evidence-v3","classifications":{"uncertain":1,"likely_dead":3},"uncertainty_reasons":{"type-only declaration":1},"candidate_decisions":{"reported":3,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-rgbs0t8g/typescript_type_safety_unsafe","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-rgbs0t8g/typescript_type_safety_unsafe","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"quality_count":5,"unused_files_count":1,"architecture_advisory_count":0,"maintainability_inventory":[{"file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-rgbs0t8g/typescript_type_safety_unsafe/service.ts","language":"TypeScript","function_lines":[],"rule_units":{"SKY-Q301":0,"SKY-Q302":0,"SKY-C303":0,"SKY-C304":0}}],"total_loc":8,"grade_categories":["quality","dead_code"],"by_directory":[{"path":".","total":9,"files":2,"dead_code":4,"quality":5,"rules":{"SKY-E003":1,"SKY-R103":1,"SKY-R104":1,"SKY-T103":1,"SKY-T104":1,"SKY-T105":1,"unused-variables":3},"severities":{"MEDIUM":3,"LOW":6}}],"finding_type_counts":{"defect":0,"review":7,"advice":2,"advice_groups":2},"assessment_scope":"listed_findings","resolution_scope_limited":true,"unused_dependency_analysis":{"rule_id":"SKY-U005","status":"not_run","complete":false,"reasons":[{"kind":"no_project_python_sources"}],"abstained_count":0},"listed_finding_type_counts":{"defect":0,"review":7,"advice":2,"advice_groups":2},"listed_quality_count":5},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"quality":[{"rule_id":"SKY-T103","severity":"MEDIUM","message":"Chained assertion uses 'unknown' to force a value to 'User'; validate or narrow the value instead.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-rgbs0t8g/typescript_type_safety_unsafe/service.ts","line":8,"col":26,"name":"User","simple_name":"User","cwe":[{"id":"CWE-704","name":"Incorrect Type Conversion or Cast"}],"standard_refs":["TypeScript Handbook: Type Assertions"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"rule_id":"SKY-T104","severity":"MEDIUM","message":"@ts-ignore hides every TypeScript error on the next line; fix the type or use @ts-expect-error with a reason.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-rgbs0t8g/typescript_type_safety_unsafe/service.ts","line":10,"col":0,"name":"@ts-ignore","simple_name":"@ts-ignore","cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["TypeScript compiler directive comments"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"rule_id":"SKY-T105","severity":"MEDIUM","message":"JSON.parse() result is asserted as 'User' without runtime validation.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-rgbs0t8g/typescript_type_safety_unsafe/service.ts","line":13,"col":26,"name":"User","simple_name":"User","cwe":[{"id":"CWE-704","name":"Incorrect Type Conversion or Cast"}],"standard_refs":["TypeScript Handbook: Type Assertions","Runtime input validation"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"rule_id":"SKY-R103","kind":"repo_policy","severity":"LOW","type":"policy","name":"skylos-gate-policy","simple_name":"skylos-gate-policy","value":"missing_skylos_gate","threshold":0,"message":"No [tool.skylos.gate] policy is configured for repository quality gates.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-rgbs0t8g/typescript_type_safety_unsafe","basename":"typescript_type_safety_unsafe","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Skylos quality gate"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R104","kind":"repo_policy","severity":"LOW","type":"policy","name":"pre-commit-policy","simple_name":"pre-commit-policy","value":"missing_pre_commit","threshold":0,"message":"Repository has no pre-commit policy file.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-rgbs0t8g/typescript_type_safety_unsafe","basename":"typescript_type_safety_unsafe","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: pre-commit"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}}],"architecture_metrics":{"system_metrics":{"total_modules":1,"total_packages":1,"total_loc":9,"modularity_index":1.0,"architecture_fitness":0.0,"mean_distance":1.0,"instability_variance":0.0,"coupling_health":1.0,"dip_violations":0,"zone_distribution":{"main_sequence":0,"off_main_sequence":0,"zone_of_pain":0,"zone_of_uselessness":0,"disconnected":1}},"module_count":1,"packages":{"root":{"instability":0.0,"avg_abstractness":0.0,"avg_distance":1.0,"module_count":1}},"module_metrics":{"service":{"ca":0,"ce":0,"instability":0.0,"abstractness":0.0,"distance":1.0,"zone":"disconnected"}},"iad_enforced":false,"advisories":[],"advisory_count":0,"advisory_signal_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["quality","dead_code"],"coverage":{"status":"partial","not_assessed":["security","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"medium","highest_severity":"MEDIUM","finding_count":3,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":3,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"medium","highest_severity":"MEDIUM","finding_count":3,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":3,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"measured","advice_count":2,"rule_count":6,"affected_files":1,"affected_functions":null,"checks":[{"rule_id":"SKY-C303","name":"Too many function arguments","language":"TypeScript","count":0,"affected_units":0,"unit":"function","analyzed_units":0,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-C304","name":"Function too long","language":"TypeScript","count":0,"affected_units":0,"unit":"function","analyzed_units":0,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q301","name":"Cyclomatic complexity","language":"TypeScript","count":0,"affected_units":0,"unit":"function","analyzed_units":0,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q302","name":"Deep nesting","language":"TypeScript","count":0,"affected_units":0,"unit":"function","analyzed_units":0,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R103","name":"Skylos gate policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R104","name":"Pre-commit policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null}]},"dead_code":{"status":"review","candidate_count":4,"confidence_range":[80,85]},"finding_counts":{"defect":0,"review":7,"advice":2,"advice_groups":2}},"listing_policy_version":1,"advice_visibility":{"total_checks":2,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-rgbs0t8g/typescript_type_safety_unsafe","conf":0,"enable_quality":true,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"typescript-type-safety-clean","status":"complete","elapsedSeconds":0.450927,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-x27zdv2m/typescript_type_safety_clean","nativeReport":{"definitions":{"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-x27zdv2m/typescript_type_safety_clean/service.ts:isUser":{"name":"isUser","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-x27zdv2m/typescript_type_safety_clean/service.ts","line":7,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":["parseUser"],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-x27zdv2m/typescript_type_safety_clean/service.ts:parseUser":{"name":"parseUser","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-x27zdv2m/typescript_type_safety_clean/service.ts","line":14,"type":"function","loc":1,"complexity":1,"calls":["isUser"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-x27zdv2m/typescript_type_safety_clean/service.ts:userId":{"name":"userId","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-x27zdv2m/typescript_type_safety_clean/service.ts","line":22,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-x27zdv2m/typescript_type_safety_clean/service.ts:User":{"name":"User","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-x27zdv2m/typescript_type_safety_clean/service.ts","line":1,"type":"class","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"uncertain","dead_code_evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"type-only declaration","source":"framework_signal","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; Not exported","reason_tags":["uncertainty","not_exported"],"live_evidence_count":0,"dead_evidence_count":0,"uncertainty_count":1,"confidence":100,"threshold":0},"dead_code_reason":"Uncertainty evidence present; Not exported","dead_code_reason_tags":["uncertainty","not_exported"]},"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-x27zdv2m/typescript_type_safety_clean/service.ts:UserId":{"name":"UserId","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-x27zdv2m/typescript_type_safety_clean/service.ts","line":5,"type":"class","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"uncertain","dead_code_evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"type-only declaration","source":"framework_signal","confidence":1.0,"details":{}}],"dead_code_decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; Not exported","reason_tags":["uncertainty","not_exported"],"live_evidence_count":0,"dead_evidence_count":0,"uncertainty_count":1,"confidence":100,"threshold":0},"dead_code_reason":"Uncertainty evidence present; Not exported","dead_code_reason_tags":["uncertainty","not_exported"]}},"unused_functions":[{"name":"isUser","full_name":"isUser","simple_name":"isUser","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-x27zdv2m/typescript_type_safety_clean/service.ts","basename":"service.ts","line":7,"confidence":100,"references":0,"called_by":["parseUser"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"name":"parseUser","full_name":"parseUser","simple_name":"parseUser","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-x27zdv2m/typescript_type_safety_clean/service.ts","basename":"service.ts","line":14,"confidence":85,"references":0,"calls":["isUser"],"confidence_factors":["exported_symbol"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"name":"userId","full_name":"userId","simple_name":"userId","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-x27zdv2m/typescript_type_safety_clean/service.ts","basename":"service.ts","line":22,"confidence":85,"references":0,"confidence_factors":["exported_symbol"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[{"rule_id":"SKY-E003","message":"Unused TypeScript/JavaScript file (not imported by any other file)","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-x27zdv2m/typescript_type_safety_clean/service.ts","line":1,"severity":"LOW","category":"DEAD_CODE","confidence":80,"confidence_factors":["unimported_file"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"service.ts","qualified_name":"User","kind":"class","line":1,"classification":"uncertain","decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; Not exported","reason_tags":["uncertainty","not_exported"],"live_evidence_count":0,"dead_evidence_count":0,"uncertainty_count":1,"confidence":100,"threshold":0},"evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"type-only declaration","source":"framework_signal","confidence":1.0,"details":{}}]},{"file":"service.ts","qualified_name":"UserId","kind":"class","line":5,"classification":"uncertain","decision":{"classification":"uncertain","primary_reason":"Uncertainty evidence present; Not exported","reason_tags":["uncertainty","not_exported"],"live_evidence_count":0,"dead_evidence_count":0,"uncertainty_count":1,"confidence":100,"threshold":0},"evidence":[{"kind":"uncertainty","role":"uncertainty","reason":"type-only declaration","source":"framework_signal","confidence":1.0,"details":{}}]},{"file":"service.ts","qualified_name":"isUser","kind":"function","line":7,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}]},{"file":"service.ts","qualified_name":"parseUser","kind":"function","line":14,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}]},{"file":"service.ts","qualified_name":"rejectedUser","kind":"variable","line":27,"classification":"alive","decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":1}}]},{"file":"service.ts","qualified_name":"userId","kind":"function","line":22,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"TypeScript":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":6,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":3,"uncertain":2,"alive":1},"uncertainty_reasons":{"type-only declaration":2},"candidate_decisions":{"reported":3,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-x27zdv2m/typescript_type_safety_clean","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-x27zdv2m/typescript_type_safety_clean","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"quality_count":2,"unused_files_count":1,"architecture_advisory_count":0,"maintainability_inventory":[{"file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-x27zdv2m/typescript_type_safety_clean/service.ts","language":"TypeScript","function_lines":[7,22,14],"rule_units":{"SKY-Q301":3,"SKY-Q302":3,"SKY-C303":3,"SKY-C304":3}}],"total_loc":22,"grade_categories":["quality","dead_code"],"by_directory":[{"path":".","total":6,"files":2,"dead_code":4,"quality":2,"rules":{"SKY-E003":1,"SKY-R103":1,"SKY-R104":1,"unused-functions":3},"severities":{"LOW":6}}],"finding_type_counts":{"defect":0,"review":4,"advice":2,"advice_groups":2},"assessment_scope":"listed_findings","resolution_scope_limited":true,"unused_dependency_analysis":{"rule_id":"SKY-U005","status":"not_run","complete":false,"reasons":[{"kind":"no_project_python_sources"}],"abstained_count":0},"listed_finding_type_counts":{"defect":0,"review":4,"advice":2,"advice_groups":2},"listed_quality_count":2},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"quality":[{"rule_id":"SKY-R103","kind":"repo_policy","severity":"LOW","type":"policy","name":"skylos-gate-policy","simple_name":"skylos-gate-policy","value":"missing_skylos_gate","threshold":0,"message":"No [tool.skylos.gate] policy is configured for repository quality gates.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-x27zdv2m/typescript_type_safety_clean","basename":"typescript_type_safety_clean","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Skylos quality gate"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R104","kind":"repo_policy","severity":"LOW","type":"policy","name":"pre-commit-policy","simple_name":"pre-commit-policy","value":"missing_pre_commit","threshold":0,"message":"Repository has no pre-commit policy file.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-x27zdv2m/typescript_type_safety_clean","basename":"typescript_type_safety_clean","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: pre-commit"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}}],"architecture_metrics":{"system_metrics":{"total_modules":1,"total_packages":1,"total_loc":23,"modularity_index":1.0,"architecture_fitness":0.0,"mean_distance":1.0,"instability_variance":0.0,"coupling_health":1.0,"dip_violations":0,"zone_distribution":{"main_sequence":0,"off_main_sequence":0,"zone_of_pain":0,"zone_of_uselessness":0,"disconnected":1}},"module_count":1,"packages":{"root":{"instability":0.0,"avg_abstractness":0.0,"avg_distance":1.0,"module_count":1}},"module_metrics":{"service":{"ca":0,"ce":0,"instability":0.0,"abstractness":0.0,"distance":1.0,"zone":"disconnected"}},"iad_enforced":false,"advisories":[],"advisory_count":0,"advisory_signal_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["quality","dead_code"],"coverage":{"status":"partial","not_assessed":["security","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"measured","advice_count":2,"rule_count":6,"affected_files":1,"affected_functions":null,"checks":[{"rule_id":"SKY-C303","name":"Too many function arguments","language":"TypeScript","count":0,"affected_units":0,"unit":"function","analyzed_units":3,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-C304","name":"Function too long","language":"TypeScript","count":0,"affected_units":0,"unit":"function","analyzed_units":3,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q301","name":"Cyclomatic complexity","language":"TypeScript","count":0,"affected_units":0,"unit":"function","analyzed_units":3,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q302","name":"Deep nesting","language":"TypeScript","count":0,"affected_units":0,"unit":"function","analyzed_units":3,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R103","name":"Skylos gate policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R104","name":"Pre-commit policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null}]},"dead_code":{"status":"review","candidate_count":4,"confidence_range":[80,100]},"finding_counts":{"defect":0,"review":4,"advice":2,"advice_groups":2}},"listing_policy_version":1,"advice_visibility":{"total_checks":2,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-x27zdv2m/typescript_type_safety_clean","conf":0,"enable_quality":true,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"typescript-quality-signals-unsafe","status":"complete","elapsedSeconds":0.459375,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ouk9czid/typescript_quality_signals_unsafe","nativeReport":{"definitions":{"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ouk9czid/typescript_quality_signals_unsafe/app.ts:acceptLegacy":{"name":"acceptLegacy","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ouk9czid/typescript_quality_signals_unsafe/app.ts","line":7,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ouk9czid/typescript_quality_signals_unsafe/app.ts:unfinished":{"name":"unfinished","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ouk9czid/typescript_quality_signals_unsafe/app.ts","line":15,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ouk9czid/typescript_quality_signals_unsafe/app.ts:loadLegacy":{"name":"loadLegacy","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ouk9czid/typescript_quality_signals_unsafe/app.ts","line":11,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ouk9czid/typescript_quality_signals_unsafe/app.ts:LegacyPayload":{"name":"LegacyPayload","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ouk9czid/typescript_quality_signals_unsafe/app.ts","line":3,"type":"class","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}},{"kind":"uncertainty","role":"uncertainty","reason":"type-only declaration","source":"framework_signal","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":2,"uncertainty_count":1,"confidence":100,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]}},"unused_functions":[{"name":"acceptLegacy","full_name":"acceptLegacy","simple_name":"acceptLegacy","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ouk9czid/typescript_quality_signals_unsafe/app.ts","basename":"app.ts","line":7,"confidence":85,"references":0,"confidence_factors":["exported_symbol"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"name":"unfinished","full_name":"unfinished","simple_name":"unfinished","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ouk9czid/typescript_quality_signals_unsafe/app.ts","basename":"app.ts","line":15,"confidence":100,"references":0,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"name":"loadLegacy","full_name":"loadLegacy","simple_name":"loadLegacy","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ouk9czid/typescript_quality_signals_unsafe/app.ts","basename":"app.ts","line":11,"confidence":85,"references":0,"confidence_factors":["exported_symbol"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[{"rule_id":"SKY-E003","message":"Unused TypeScript/JavaScript file (not imported by any other file)","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ouk9czid/typescript_quality_signals_unsafe/app.ts","line":1,"severity":"LOW","category":"DEAD_CODE","confidence":80,"confidence_factors":["unimported_file"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.ts","qualified_name":"LegacyPayload","kind":"class","line":3,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":2,"uncertainty_count":1,"confidence":100,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}},{"kind":"uncertainty","role":"uncertainty","reason":"type-only declaration","source":"framework_signal","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}]},{"file":"app.ts","qualified_name":"acceptLegacy","kind":"function","line":7,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}]},{"file":"app.ts","qualified_name":"loadLegacy","kind":"function","line":11,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}]},{"file":"app.ts","qualified_name":"mappedValues","kind":"variable","line":32,"classification":"alive","decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":1}}]},{"file":"app.ts","qualified_name":"unfinished","kind":"function","line":15,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}]},{"file":"app.ts","qualified_name":"values","kind":"variable","line":28,"classification":"alive","decision":{"classification":"alive","primary_reason":"Static references found","reason_tags":["static_reference"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"static_reference","role":"supports_live","reason":"referenced by static analysis","source":"analyzer","confidence":1.0,"details":{"references":1}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"TypeScript":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":6,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":3,"alive":3},"candidate_decisions":{"reported":3,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ouk9czid/typescript_quality_signals_unsafe","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ouk9czid/typescript_quality_signals_unsafe","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"quality_count":11,"unused_files_count":1,"architecture_advisory_count":0,"maintainability_inventory":[{"file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ouk9czid/typescript_quality_signals_unsafe/app.ts","language":"TypeScript","function_lines":[7,24,11,15,29,33],"rule_units":{"SKY-Q301":6,"SKY-Q302":6,"SKY-C303":6,"SKY-C304":6}}],"total_loc":26,"grade_categories":["quality","dead_code"],"by_directory":[{"path":".","total":15,"files":2,"dead_code":4,"quality":11,"rules":{"SKY-E003":1,"SKY-L007":1,"SKY-L026":1,"SKY-L035":1,"SKY-Q405":1,"SKY-Q406":1,"SKY-Q407":1,"SKY-R103":1,"SKY-R104":1,"SKY-T106":3,"unused-functions":3},"severities":{"HIGH":4,"MEDIUM":5,"LOW":6}}],"finding_type_counts":{"defect":3,"review":10,"advice":2,"advice_groups":2},"assessment_scope":"listed_findings","resolution_scope_limited":true,"unused_dependency_analysis":{"rule_id":"SKY-U005","status":"not_run","complete":false,"reasons":[{"kind":"no_project_python_sources"}],"abstained_count":0},"listed_finding_type_counts":{"defect":3,"review":10,"advice":2,"advice_groups":2},"listed_quality_count":11},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"quality":[{"rule_id":"SKY-L035","severity":"HIGH","message":"A bare file-wide eslint-disable turns off every ESLint rule; name only the required rule and keep the suppression narrow.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ouk9czid/typescript_quality_signals_unsafe/app.ts","line":1,"col":0,"name":"eslint-disable","simple_name":"eslint-disable","cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["ESLint configuration comments"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"rule_id":"SKY-T106","severity":"MEDIUM","message":"Exported API 'LegacyPayload' uses an any-valued index signature; use a precise type or unknown with validation.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ouk9czid/typescript_quality_signals_unsafe/app.ts","line":4,"col":17,"name":"LegacyPayload","simple_name":"LegacyPayload","cwe":[{"id":"CWE-704","name":"Incorrect Type Conversion or Cast"}],"standard_refs":["TypeScript Handbook: The any type","Public API type safety"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"rule_id":"SKY-T106","severity":"MEDIUM","message":"Exported API 'acceptLegacy' uses the exact type 'any'; use a precise type or unknown with validation.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ouk9czid/typescript_quality_signals_unsafe/app.ts","line":7,"col":36,"name":"acceptLegacy","simple_name":"acceptLegacy","cwe":[{"id":"CWE-704","name":"Incorrect Type Conversion or Cast"}],"standard_refs":["TypeScript Handbook: The any type","Public API type safety"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"rule_id":"SKY-T106","severity":"MEDIUM","message":"Exported API 'loadLegacy' uses 'Record<string, any>'; use a precise type or unknown with validation.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ouk9czid/typescript_quality_signals_unsafe/app.ts","line":11,"col":30,"name":"loadLegacy","simple_name":"loadLegacy","cwe":[{"id":"CWE-704","name":"Incorrect Type Conversion or Cast"}],"standard_refs":["TypeScript Handbook: The any type","Public API type safety"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"rule_id":"SKY-L026","severity":"MEDIUM","message":"Function 'unfinished' is only a not-implemented stub; implement it or remove it from the runtime surface.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ouk9czid/typescript_quality_signals_unsafe/app.ts","line":15,"col":0,"name":"unfinished","simple_name":"unfinished","cwe":[{"id":"CWE-1164","name":"Irrelevant Code"}],"standard_refs":[],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"rule_id":"SKY-L007","severity":"MEDIUM","message":"Empty catch block silently discards an error; handle it, report it, or document why ignoring it is safe.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ouk9czid/typescript_quality_signals_unsafe/app.ts","line":21,"col":2,"name":"catch","simple_name":"catch","cwe":[{"id":"CWE-391","name":"Unchecked Error Condition"}],"standard_refs":[],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"rule_id":"SKY-Q405","severity":"HIGH","message":"Promise executors must not be async; move async work outside the constructor. An async-generator executor does not run its body.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ouk9czid/typescript_quality_signals_unsafe/app.ts","line":24,"col":0,"name":"Promise","simple_name":"Promise","cwe":[{"id":"CWE-755","name":"Improper Handling of Exceptional Conditions"}],"standard_refs":["ESLint no-async-promise-executor"],"finding_type":"defect","listing":{"version":1,"listed":true,"reason":"finding"}},{"rule_id":"SKY-Q406","severity":"HIGH","message":"Array.forEach does not await an async callback; use for...of or await Promise.all(array.map(...)).","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ouk9czid/typescript_quality_signals_unsafe/app.ts","line":29,"col":0,"name":"forEach","simple_name":"forEach","cwe":[{"id":"CWE-252","name":"Unchecked Return Value"}],"standard_refs":["Array.forEach callback return semantics"],"finding_type":"defect","listing":{"version":1,"listed":true,"reason":"finding"}},{"rule_id":"SKY-Q407","severity":"HIGH","message":"The promises returned by array.map(async ...) are discarded; await Promise.all(...) or return the result.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ouk9czid/typescript_quality_signals_unsafe/app.ts","line":33,"col":0,"name":"map","simple_name":"map","cwe":[{"id":"CWE-252","name":"Unchecked Return Value"}],"standard_refs":["Promise.all and Array.map result handling"],"finding_type":"defect","listing":{"version":1,"listed":true,"reason":"finding"}},{"rule_id":"SKY-R103","kind":"repo_policy","severity":"LOW","type":"policy","name":"skylos-gate-policy","simple_name":"skylos-gate-policy","value":"missing_skylos_gate","threshold":0,"message":"No [tool.skylos.gate] policy is configured for repository quality gates.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ouk9czid/typescript_quality_signals_unsafe","basename":"typescript_quality_signals_unsafe","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Skylos quality gate"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R104","kind":"repo_policy","severity":"LOW","type":"policy","name":"pre-commit-policy","simple_name":"pre-commit-policy","value":"missing_pre_commit","threshold":0,"message":"Repository has no pre-commit policy file.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ouk9czid/typescript_quality_signals_unsafe","basename":"typescript_quality_signals_unsafe","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: pre-commit"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}}],"architecture_metrics":{"system_metrics":{"total_modules":1,"total_packages":1,"total_loc":26,"modularity_index":1.0,"architecture_fitness":0.25,"mean_distance":0.75,"instability_variance":0.0,"coupling_health":1.0,"dip_violations":0,"zone_distribution":{"main_sequence":0,"off_main_sequence":0,"zone_of_pain":0,"zone_of_uselessness":0,"disconnected":1}},"module_count":1,"packages":{"root":{"instability":0.0,"avg_abstractness":0.25,"avg_distance":0.75,"module_count":1}},"module_metrics":{"app":{"ca":0,"ce":0,"instability":0.0,"abstractness":0.25,"distance":0.75,"zone":"disconnected"}},"iad_enforced":false,"advisories":[],"advisory_count":0,"advisory_signal_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["quality","dead_code"],"coverage":{"status":"partial","not_assessed":["security","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"high","highest_severity":"HIGH","finding_count":9,"severity_counts":{"CRITICAL":0,"HIGH":4,"MEDIUM":5,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"high","highest_severity":"HIGH","finding_count":9,"severity_counts":{"CRITICAL":0,"HIGH":4,"MEDIUM":5,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"measured","advice_count":2,"rule_count":6,"affected_files":1,"affected_functions":null,"checks":[{"rule_id":"SKY-C303","name":"Too many function arguments","language":"TypeScript","count":0,"affected_units":0,"unit":"function","analyzed_units":6,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-C304","name":"Function too long","language":"TypeScript","count":0,"affected_units":0,"unit":"function","analyzed_units":6,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q301","name":"Cyclomatic complexity","language":"TypeScript","count":0,"affected_units":0,"unit":"function","analyzed_units":6,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q302","name":"Deep nesting","language":"TypeScript","count":0,"affected_units":0,"unit":"function","analyzed_units":6,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R103","name":"Skylos gate policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R104","name":"Pre-commit policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null}]},"dead_code":{"status":"review","candidate_count":4,"confidence_range":[80,100]},"finding_counts":{"defect":3,"review":10,"advice":2,"advice_groups":2}},"listing_policy_version":1,"advice_visibility":{"total_checks":2,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ouk9czid/typescript_quality_signals_unsafe","conf":0,"enable_quality":true,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"typescript-quality-signals-clean","status":"complete","elapsedSeconds":0.468102,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1ak4ixms/typescript_quality_signals_clean","nativeReport":{"definitions":{"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1ak4ixms/typescript_quality_signals_clean/app.ts:normalize":{"name":"normalize","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1ak4ixms/typescript_quality_signals_clean/app.ts","line":7,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1ak4ixms/typescript_quality_signals_clean/app.ts:saveAll":{"name":"saveAll","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1ak4ixms/typescript_quality_signals_clean/app.ts","line":14,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1ak4ixms/typescript_quality_signals_clean/app.ts:Payload":{"name":"Payload","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1ak4ixms/typescript_quality_signals_clean/app.ts","line":3,"type":"class","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}},{"kind":"uncertainty","role":"uncertainty","reason":"type-only declaration","source":"framework_signal","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":2,"uncertainty_count":1,"confidence":100,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]}},"unused_functions":[{"name":"normalize","full_name":"normalize","simple_name":"normalize","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1ak4ixms/typescript_quality_signals_clean/app.ts","basename":"app.ts","line":7,"confidence":85,"references":0,"confidence_factors":["exported_symbol"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}},{"name":"saveAll","full_name":"saveAll","simple_name":"saveAll","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1ak4ixms/typescript_quality_signals_clean/app.ts","basename":"app.ts","line":14,"confidence":100,"references":0,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[{"rule_id":"SKY-E003","message":"Unused TypeScript/JavaScript file (not imported by any other file)","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1ak4ixms/typescript_quality_signals_clean/app.ts","line":1,"severity":"LOW","category":"DEAD_CODE","confidence":80,"confidence_factors":["unimported_file"],"finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.ts","qualified_name":"Payload","kind":"class","line":3,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":2,"uncertainty_count":1,"confidence":100,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}},{"kind":"uncertainty","role":"uncertainty","reason":"type-only declaration","source":"framework_signal","confidence":1.0,"details":{}},{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}]},{"file":"app.ts","qualified_name":"normalize","kind":"function","line":7,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":85,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.85,"details":{"confidence":85,"threshold":0}}]},{"file":"app.ts","qualified_name":"saveAll","kind":"function","line":14,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"TypeScript":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":3,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":2,"alive":1},"candidate_decisions":{"reported":2,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1ak4ixms/typescript_quality_signals_clean","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1ak4ixms/typescript_quality_signals_clean","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"quality_count":2,"unused_files_count":1,"architecture_advisory_count":0,"maintainability_inventory":[{"file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1ak4ixms/typescript_quality_signals_clean/app.ts","language":"TypeScript","function_lines":[7,14,15,19,20],"rule_units":{"SKY-Q301":5,"SKY-Q302":5,"SKY-C303":5,"SKY-C304":5}}],"total_loc":21,"grade_categories":["quality","dead_code"],"by_directory":[{"path":".","total":5,"files":2,"dead_code":3,"quality":2,"rules":{"SKY-E003":1,"SKY-R103":1,"SKY-R104":1,"unused-functions":2},"severities":{"LOW":5}}],"finding_type_counts":{"defect":0,"review":3,"advice":2,"advice_groups":2},"assessment_scope":"listed_findings","resolution_scope_limited":true,"unused_dependency_analysis":{"rule_id":"SKY-U005","status":"not_run","complete":false,"reasons":[{"kind":"no_project_python_sources"}],"abstained_count":0},"listed_finding_type_counts":{"defect":0,"review":3,"advice":2,"advice_groups":2},"listed_quality_count":2},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"quality":[{"rule_id":"SKY-R103","kind":"repo_policy","severity":"LOW","type":"policy","name":"skylos-gate-policy","simple_name":"skylos-gate-policy","value":"missing_skylos_gate","threshold":0,"message":"No [tool.skylos.gate] policy is configured for repository quality gates.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1ak4ixms/typescript_quality_signals_clean","basename":"typescript_quality_signals_clean","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Skylos quality gate"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R104","kind":"repo_policy","severity":"LOW","type":"policy","name":"pre-commit-policy","simple_name":"pre-commit-policy","value":"missing_pre_commit","threshold":0,"message":"Repository has no pre-commit policy file.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1ak4ixms/typescript_quality_signals_clean","basename":"typescript_quality_signals_clean","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: pre-commit"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}}],"architecture_metrics":{"system_metrics":{"total_modules":1,"total_packages":1,"total_loc":21,"modularity_index":1.0,"architecture_fitness":0.333,"mean_distance":0.667,"instability_variance":0.0,"coupling_health":1.0,"dip_violations":0,"zone_distribution":{"main_sequence":0,"off_main_sequence":0,"zone_of_pain":0,"zone_of_uselessness":0,"disconnected":1}},"module_count":1,"packages":{"root":{"instability":0.0,"avg_abstractness":0.333,"avg_distance":0.667,"module_count":1}},"module_metrics":{"app":{"ca":0,"ce":0,"instability":0.0,"abstractness":0.333,"distance":0.667,"zone":"disconnected"}},"iad_enforced":false,"advisories":[],"advisory_count":0,"advisory_signal_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["quality","dead_code"],"coverage":{"status":"partial","not_assessed":["security","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"measured","advice_count":2,"rule_count":6,"affected_files":1,"affected_functions":null,"checks":[{"rule_id":"SKY-C303","name":"Too many function arguments","language":"TypeScript","count":0,"affected_units":0,"unit":"function","analyzed_units":5,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-C304","name":"Function too long","language":"TypeScript","count":0,"affected_units":0,"unit":"function","analyzed_units":5,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q301","name":"Cyclomatic complexity","language":"TypeScript","count":0,"affected_units":0,"unit":"function","analyzed_units":5,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q302","name":"Deep nesting","language":"TypeScript","count":0,"affected_units":0,"unit":"function","analyzed_units":5,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R103","name":"Skylos gate policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R104","name":"Pre-commit policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null}]},"dead_code":{"status":"review","candidate_count":3,"confidence_range":[80,100]},"finding_counts":{"defect":0,"review":3,"advice":2,"advice_groups":2}},"listing_policy_version":1,"advice_visibility":{"total_checks":2,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-1ak4ixms/typescript_quality_signals_clean","conf":0,"enable_quality":true,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"python-mutable-alias-unsafe","status":"complete","elapsedSeconds":0.430999,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-728ij2sp/python_mutable_alias_unsafe","nativeReport":{"definitions":{"app.build_fallbacks":{"name":"app.build_fallbacks","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-728ij2sp/python_mutable_alias_unsafe/app.py","line":1,"type":"function","loc":2,"complexity":1,"calls":["app.build_fallbacks.count","app.dict","app.int","app.list","app.str"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"build_fallbacks","full_name":"app.build_fallbacks","simple_name":"build_fallbacks","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-728ij2sp/python_mutable_alias_unsafe/app.py","basename":"app.py","line":1,"confidence":90,"references":0,"calls":["app.build_fallbacks.count","app.int","app.dict","app.str","app.list"],"return_type":"list","confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.py","qualified_name":"app.build_fallbacks","kind":"function","line":1,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-728ij2sp/python_mutable_alias_unsafe","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-728ij2sp/python_mutable_alias_unsafe","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"quality_count":5,"architecture_advisory_count":0,"maintainability_inventory":[{"file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-728ij2sp/python_mutable_alias_unsafe/app.py","language":"Python","function_lines":[1],"rule_units":{"SKY-Q301":1,"SKY-Q306":1,"SKY-Q302":1,"SKY-C303":1,"SKY-C304":1}}],"typing_coverage":{"version":1,"scope":"public_source_definitions","files_analyzed":1,"definition_count":1,"definitions_with_complete_annotations":1,"definitions_missing_annotations":0,"missing_parameter_annotations":0,"missing_return_annotations":0,"definitions_with_supplied_contract":0,"unreported_missing_definitions":0,"enable_coverage_advice_with":"[tool.skylos] typing_coverage_advice = true"},"total_loc":2,"grade_categories":["quality","dead_code"],"by_directory":[{"path":".","total":6,"files":2,"dead_code":1,"quality":5,"rules":{"SKY-L034":1,"SKY-R101":1,"SKY-R102":1,"SKY-R103":1,"SKY-R104":1,"unused-functions":1},"severities":{"MEDIUM":2,"LOW":4}}],"finding_type_counts":{"defect":1,"review":1,"advice":4,"advice_groups":4},"assessment_scope":"listed_findings","resolution_scope_limited":true,"unused_dependency_analysis":{"rule_id":"SKY-U005","status":"complete","complete":true,"reasons":[],"abstained_count":0,"abstained_dependencies":[]},"listed_finding_type_counts":{"defect":1,"review":1,"advice":4,"advice_groups":4},"listed_quality_count":5},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"quality":[{"rule_id":"SKY-L034","kind":"logic","severity":"MEDIUM","type":"expression","name":"sequence repetition","simple_name":"sequence repetition","value":"mutable_alias","threshold":0,"message":"Sequence repetition reuses mutable elements across repetitions; use a comprehension to create independent values.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-728ij2sp/python_mutable_alias_unsafe/app.py","basename":"app.py","line":2,"col":11,"cwe":[{"id":"CWE-665","name":"Improper Initialization"}],"standard_refs":["Python sequence repetition semantics"],"finding_type":"defect","listing":{"version":1,"listed":true,"reason":"finding"}},{"rule_id":"SKY-R101","kind":"repo_policy","severity":"MEDIUM","type":"policy","name":"python-type-check-policy","simple_name":"python-type-check-policy","value":"missing_type_checker","threshold":0,"message":"Python project has no mypy or pyright policy configured. Add a checked type policy for public code paths.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-728ij2sp/python_mutable_alias_unsafe","basename":"python_mutable_alias_unsafe","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Python type checking"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R102","kind":"repo_policy","severity":"LOW","type":"policy","name":"python-lint-policy","simple_name":"python-lint-policy","value":"missing_ruff","threshold":0,"message":"Python project has no detected Ruff, Flake8 or Pylint policy configured.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-728ij2sp/python_mutable_alias_unsafe","basename":"python_mutable_alias_unsafe","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Python linting"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R103","kind":"repo_policy","severity":"LOW","type":"policy","name":"skylos-gate-policy","simple_name":"skylos-gate-policy","value":"missing_skylos_gate","threshold":0,"message":"No [tool.skylos.gate] policy is configured for repository quality gates.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-728ij2sp/python_mutable_alias_unsafe","basename":"python_mutable_alias_unsafe","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Skylos quality gate"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R104","kind":"repo_policy","severity":"LOW","type":"policy","name":"pre-commit-policy","simple_name":"pre-commit-policy","value":"missing_pre_commit","threshold":0,"message":"Repository has no pre-commit policy file.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-728ij2sp/python_mutable_alias_unsafe","basename":"python_mutable_alias_unsafe","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: pre-commit"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}}],"architecture_metrics":{"system_metrics":{"total_modules":1,"total_packages":1,"total_loc":2,"modularity_index":1.0,"architecture_fitness":0.0,"mean_distance":1.0,"instability_variance":0.0,"coupling_health":1.0,"dip_violations":0,"zone_distribution":{"main_sequence":0,"off_main_sequence":0,"zone_of_pain":0,"zone_of_uselessness":0,"disconnected":1}},"module_count":1,"packages":{"app":{"instability":0.0,"avg_abstractness":0.0,"avg_distance":1.0,"module_count":1}},"module_metrics":{"app":{"ca":0,"ce":0,"instability":0.0,"abstractness":0.0,"distance":1.0,"zone":"disconnected"}},"iad_enforced":false,"advisories":[],"advisory_count":0,"advisory_signal_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["quality","dead_code"],"coverage":{"status":"partial","not_assessed":["security","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"medium","highest_severity":"MEDIUM","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":1,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"medium","highest_severity":"MEDIUM","finding_count":1,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":1,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"measured","advice_count":4,"rule_count":9,"affected_files":1,"affected_functions":null,"checks":[{"rule_id":"SKY-C303","name":"Too many function arguments","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":1,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-C304","name":"Function too long","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":1,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q301","name":"Cyclomatic complexity","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":1,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q302","name":"Deep nesting","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":1,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q306","name":"Cognitive complexity","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":1,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R101","name":"Python type-check policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R102","name":"Python lint policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R103","name":"Skylos gate policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R104","name":"Pre-commit policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null}]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[90,90]},"finding_counts":{"defect":1,"review":1,"advice":4,"advice_groups":4}},"listing_policy_version":1,"advice_visibility":{"total_checks":4,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-728ij2sp/python_mutable_alias_unsafe","conf":0,"enable_quality":true,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"python-mutable-alias-clean","status":"complete","elapsedSeconds":0.33,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f8bhk3ca/python_mutable_alias_clean","nativeReport":{"definitions":{"app.build_fallbacks":{"name":"app.build_fallbacks","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f8bhk3ca/python_mutable_alias_clean/app.py","line":1,"type":"function","loc":2,"complexity":1,"calls":["app.build_fallbacks.count","app.dict","app.int","app.list","app.range","app.str"],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[{"name":"build_fallbacks","full_name":"app.build_fallbacks","simple_name":"build_fallbacks","type":"function","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f8bhk3ca/python_mutable_alias_clean/app.py","basename":"app.py","line":1,"confidence":90,"references":0,"calls":["app.list","app.build_fallbacks.count","app.range","app.int","app.dict","app.str"],"return_type":"list","confidence_factors":["public_name"],"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"app.py","qualified_name":"app.build_fallbacks","kind":"function","line":1,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":90,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.9,"details":{"confidence":90,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Python":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":1,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":1},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f8bhk3ca/python_mutable_alias_clean","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f8bhk3ca/python_mutable_alias_clean","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"quality_count":4,"architecture_advisory_count":0,"maintainability_inventory":[{"file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f8bhk3ca/python_mutable_alias_clean/app.py","language":"Python","function_lines":[1],"rule_units":{"SKY-Q301":1,"SKY-Q306":1,"SKY-Q302":1,"SKY-C303":1,"SKY-C304":1}}],"typing_coverage":{"version":1,"scope":"public_source_definitions","files_analyzed":1,"definition_count":1,"definitions_with_complete_annotations":1,"definitions_missing_annotations":0,"missing_parameter_annotations":0,"missing_return_annotations":0,"definitions_with_supplied_contract":0,"unreported_missing_definitions":0,"enable_coverage_advice_with":"[tool.skylos] typing_coverage_advice = true"},"total_loc":2,"grade_categories":["quality","dead_code"],"by_directory":[{"path":".","total":5,"files":2,"dead_code":1,"quality":4,"rules":{"SKY-R101":1,"SKY-R102":1,"SKY-R103":1,"SKY-R104":1,"unused-functions":1},"severities":{"MEDIUM":1,"LOW":4}}],"finding_type_counts":{"defect":0,"review":1,"advice":4,"advice_groups":4},"assessment_scope":"listed_findings","resolution_scope_limited":true,"unused_dependency_analysis":{"rule_id":"SKY-U005","status":"complete","complete":true,"reasons":[],"abstained_count":0,"abstained_dependencies":[]},"listed_finding_type_counts":{"defect":0,"review":1,"advice":4,"advice_groups":4},"listed_quality_count":4},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"quality":[{"rule_id":"SKY-R101","kind":"repo_policy","severity":"MEDIUM","type":"policy","name":"python-type-check-policy","simple_name":"python-type-check-policy","value":"missing_type_checker","threshold":0,"message":"Python project has no mypy or pyright policy configured. Add a checked type policy for public code paths.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f8bhk3ca/python_mutable_alias_clean","basename":"python_mutable_alias_clean","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Python type checking"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R102","kind":"repo_policy","severity":"LOW","type":"policy","name":"python-lint-policy","simple_name":"python-lint-policy","value":"missing_ruff","threshold":0,"message":"Python project has no detected Ruff, Flake8 or Pylint policy configured.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f8bhk3ca/python_mutable_alias_clean","basename":"python_mutable_alias_clean","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Python linting"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R103","kind":"repo_policy","severity":"LOW","type":"policy","name":"skylos-gate-policy","simple_name":"skylos-gate-policy","value":"missing_skylos_gate","threshold":0,"message":"No [tool.skylos.gate] policy is configured for repository quality gates.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f8bhk3ca/python_mutable_alias_clean","basename":"python_mutable_alias_clean","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Skylos quality gate"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R104","kind":"repo_policy","severity":"LOW","type":"policy","name":"pre-commit-policy","simple_name":"pre-commit-policy","value":"missing_pre_commit","threshold":0,"message":"Repository has no pre-commit policy file.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f8bhk3ca/python_mutable_alias_clean","basename":"python_mutable_alias_clean","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: pre-commit"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}}],"architecture_metrics":{"system_metrics":{"total_modules":1,"total_packages":1,"total_loc":2,"modularity_index":1.0,"architecture_fitness":0.0,"mean_distance":1.0,"instability_variance":0.0,"coupling_health":1.0,"dip_violations":0,"zone_distribution":{"main_sequence":0,"off_main_sequence":0,"zone_of_pain":0,"zone_of_uselessness":0,"disconnected":1}},"module_count":1,"packages":{"app":{"instability":0.0,"avg_abstractness":0.0,"avg_distance":1.0,"module_count":1}},"module_metrics":{"app":{"ca":0,"ce":0,"instability":0.0,"abstractness":0.0,"distance":1.0,"zone":"disconnected"}},"iad_enforced":false,"advisories":[],"advisory_count":0,"advisory_signal_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["quality","dead_code"],"coverage":{"status":"partial","not_assessed":["security","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"measured","advice_count":4,"rule_count":9,"affected_files":1,"affected_functions":null,"checks":[{"rule_id":"SKY-C303","name":"Too many function arguments","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":1,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-C304","name":"Function too long","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":1,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q301","name":"Cyclomatic complexity","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":1,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q302","name":"Deep nesting","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":1,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q306","name":"Cognitive complexity","language":"Python","count":0,"affected_units":0,"unit":"function","analyzed_units":1,"affected_percent":0.0,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R101","name":"Python type-check policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R102","name":"Python lint policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R103","name":"Skylos gate policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R104","name":"Pre-commit policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null}]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[90,90]},"finding_counts":{"defect":0,"review":1,"advice":4,"advice_groups":4}},"listing_policy_version":1,"advice_visibility":{"total_checks":4,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-f8bhk3ca/python_mutable_alias_clean","conf":0,"enable_quality":true,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"go-service-quality-hotspot","status":"complete","elapsedSeconds":0.368517,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ksleupd9/go_service_quality_hotspot","nativeReport":{"definitions":{"EvaluateOrder":{"name":"EvaluateOrder","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ksleupd9/go_service_quality_hotspot/service.go","line":3,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]},"Helper":{"name":"Helper","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ksleupd9/go_service_quality_hotspot/service.go","line":40,"type":"function","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":false,"dead_code_classification":"alive","dead_code_evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}],"dead_code_decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"Framework entrypoint","dead_code_reason_tags":["framework_root"]}},"unused_functions":[],"unused_imports":[],"unused_classes":[],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"service.go","qualified_name":"EvaluateOrder","kind":"function","line":3,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}]},{"file":"service.go","qualified_name":"Helper","kind":"function","line":40,"classification":"alive","decision":{"classification":"alive","primary_reason":"Framework entrypoint","reason_tags":["framework_root"],"live_evidence_count":1,"dead_evidence_count":0,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"framework_root","role":"supports_live","reason":"public export","source":"python_ast","confidence":1.0,"details":{"root_kind":"public_export"}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Go":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":2,"classification_policy":"dead-code-evidence-v3","classifications":{"alive":2},"candidate_decisions":{"reported":0,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ksleupd9/go_service_quality_hotspot","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ksleupd9/go_service_quality_hotspot","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"language_engines":{"go":{"status":"available","file_count":1,"engine":{"status":"available","binary":"/private/tmp/skylos-public-benchmark-run-20261022/skylos/engines/go/skylos-go","configured_by":"bundled"},"completed_checks":["quality","dead_code","security"],"skipped_checks":[]}},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"quality_count":4,"architecture_advisory_count":0,"maintainability_inventory":[],"total_loc":40,"grade_categories":["quality","dead_code"],"by_directory":[{"path":".","total":4,"files":2,"quality":4,"rules":{"SKY-C303":1,"SKY-Q301":1,"SKY-R103":1,"SKY-R104":1},"severities":{"MEDIUM":1,"LOW":3}}],"finding_type_counts":{"defect":0,"review":0,"advice":4,"advice_groups":4},"assessment_scope":"listed_findings","resolution_scope_limited":true,"unused_dependency_analysis":{"rule_id":"SKY-U005","status":"not_run","complete":false,"reasons":[{"kind":"no_project_python_sources"}],"abstained_count":0},"listed_finding_type_counts":{"defect":0,"review":0,"advice":4,"advice_groups":4},"listed_quality_count":4},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"quality":[{"rule_id":"SKY-Q301","severity":"MEDIUM","message":"Function 'EvaluateOrder' has cyclomatic complexity 12 (limit: 10)","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ksleupd9/go_service_quality_hotspot/service.go","line":3,"col":0,"name":"EvaluateOrder","simple_name":"EvaluateOrder","cwe":[{"id":"CWE-1121","name":"Excessive McCabe Cyclomatic Complexity"}],"standard_refs":["ISO/IEC 5055:2021 §6.3.4","McCabe Cyclomatic Complexity"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-C303","severity":"LOW","message":"Function 'EvaluateOrder' has 7 parameters (limit: 5)","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ksleupd9/go_service_quality_hotspot/service.go","line":3,"col":0,"name":"EvaluateOrder","simple_name":"EvaluateOrder","cwe":[{"id":"CWE-1064","name":"Invokable Control Element with Signature Containing an Excessive Number of Parameters"}],"standard_refs":["ISO/IEC 5055:2021 §6.3.2"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R103","kind":"repo_policy","severity":"LOW","type":"policy","name":"skylos-gate-policy","simple_name":"skylos-gate-policy","value":"missing_skylos_gate","threshold":0,"message":"No [tool.skylos.gate] policy is configured for repository quality gates.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ksleupd9/go_service_quality_hotspot","basename":"go_service_quality_hotspot","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Skylos quality gate"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R104","kind":"repo_policy","severity":"LOW","type":"policy","name":"pre-commit-policy","simple_name":"pre-commit-policy","value":"missing_pre_commit","threshold":0,"message":"Repository has no pre-commit policy file.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ksleupd9/go_service_quality_hotspot","basename":"go_service_quality_hotspot","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: pre-commit"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}}],"architecture_metrics":{"system_metrics":{"total_modules":0,"total_packages":0,"total_loc":0,"modularity_index":1.0,"architecture_fitness":1.0,"mean_distance":0.0,"instability_variance":0.0,"coupling_health":1.0,"dip_violations":0,"zone_distribution":{}},"module_count":0,"packages":{},"module_metrics":{},"iad_enforced":false,"advisories":[],"advisory_count":0,"advisory_signal_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["quality","dead_code"],"coverage":{"status":"partial","not_assessed":["security","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"measured","advice_count":4,"rule_count":4,"affected_files":2,"affected_functions":null,"checks":[{"rule_id":"SKY-C303","name":"Too many function arguments","language":"Go","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q301","name":"Cyclomatic complexity","language":"Go","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R103","name":"Skylos gate policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R104","name":"Pre-commit policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null}]},"dead_code":{"status":"none","candidate_count":0,"confidence_range":null},"finding_counts":{"defect":0,"review":0,"advice":4,"advice_groups":4}},"listing_policy_version":1,"advice_visibility":{"total_checks":4,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-ksleupd9/go_service_quality_hotspot","conf":0,"enable_quality":true,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]},{"id":"java-service-quality-hotspot","status":"complete","elapsedSeconds":0.320216,"analysisRoot":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-u_7cjh52/java_service_quality_hotspot","nativeReport":{"definitions":{"AccountPolicy":{"name":"AccountPolicy","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-u_7cjh52/java_service_quality_hotspot/App.java","line":1,"type":"class","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"AccountPolicy.decide":{"name":"AccountPolicy.decide","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-u_7cjh52/java_service_quality_hotspot/App.java","line":2,"type":"method","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]},"AccountPolicy.helper":{"name":"AccountPolicy.helper","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-u_7cjh52/java_service_quality_hotspot/App.java","line":19,"type":"method","loc":1,"complexity":1,"calls":[],"called_by":[],"dead":true,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"]}},"unused_functions":[],"unused_imports":[],"unused_classes":[{"name":"AccountPolicy","full_name":"AccountPolicy","simple_name":"AccountPolicy","type":"class","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-u_7cjh52/java_service_quality_hotspot/App.java","basename":"App.java","line":1,"confidence":100,"references":0,"dead_code_classification":"likely_dead","dead_code_evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}],"dead_code_decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"dead_code_reason":"No static references; Not exported; No entrypoint evidence","dead_code_reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"dead_code_disposition":"reported","finding_type":"review","listing":{"version":1,"listed":true,"reason":"finding"}}],"unused_variables":[],"unused_parameters":[],"unused_files":[],"analysis_errors":[],"whitelisted":[],"suppressed":[],"dead_code_evidence":{"classification_policy":"dead-code-evidence-v3","symbols":[{"file":"App.java","qualified_name":"AccountPolicy","kind":"class","line":1,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":100,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":1.0,"details":{"confidence":100,"threshold":0}}]},{"file":"App.java","qualified_name":"AccountPolicy.decide","kind":"method","line":2,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}]},{"file":"App.java","qualified_name":"AccountPolicy.helper","kind":"method","line":19,"classification":"likely_dead","decision":{"classification":"likely_dead","primary_reason":"No static references; Not exported; No entrypoint evidence","reason_tags":["no_refs","not_exported","no_entrypoint","confidence_ge_threshold"],"live_evidence_count":0,"dead_evidence_count":4,"uncertainty_count":0,"confidence":80,"threshold":0},"evidence":[{"kind":"no_static_references","role":"supports_dead","reason":"no static references were found","source":"analyzer","confidence":1.0,"details":{"references":0}},{"kind":"not_exported","role":"supports_dead","reason":"symbol is not exported as public API","source":"analyzer","confidence":1.0,"details":{}},{"kind":"no_entrypoint","role":"supports_dead","reason":"no package, framework, test, or root entrypoint evidence","source":"analyzer","confidence":1.0,"details":{}},{"kind":"confidence_gate","role":"supports_dead","reason":"confidence meets the configured reporting threshold","source":"confidence","confidence":0.8,"details":{"confidence":80,"threshold":0}}]}]},"dead_code_rescues":[],"dead_code_abstentions":[],"analysis_summary":{"total_files":1,"excluded_folders":[],"languages":{"Java":1},"analysis_error_count":0,"dead_code_evidence":{"symbol_count":3,"classification_policy":"dead-code-evidence-v3","classifications":{"likely_dead":3},"candidate_decisions":{"reported":1,"rescued":0,"abstained":0}},"comparison_scope":{"kind":"repository_root","scan_path":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-u_7cjh52/java_service_quality_hotspot","repository_root":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-u_7cjh52/java_service_quality_hotspot","complete_repository":true,"excluded_folders":[],"changed_files_only":false},"dead_code_liveness":{"rescued_count":0,"rescued":[]},"grep_verify":{"enabled":false,"rescued_count":0},"monorepo_detected":false,"workspace_count":0,"workspace_total_packages":0,"workspace_diagnostic_count":0,"quality_count":4,"architecture_advisory_count":0,"maintainability_inventory":[],"total_loc":21,"grade_categories":["quality","dead_code"],"by_directory":[{"path":".","total":5,"files":2,"dead_code":1,"quality":4,"rules":{"SKY-C303":1,"SKY-Q302":1,"SKY-R103":1,"SKY-R104":1,"unused-classes":1},"severities":{"MEDIUM":1,"LOW":4}}],"finding_type_counts":{"defect":0,"review":1,"advice":4,"advice_groups":4},"assessment_scope":"listed_findings","resolution_scope_limited":true,"unused_dependency_analysis":{"rule_id":"SKY-U005","status":"not_run","complete":false,"reasons":[{"kind":"no_project_python_sources"}],"abstained_count":0},"listed_finding_type_counts":{"defect":0,"review":1,"advice":4,"advice_groups":4},"listed_quality_count":4},"workspaces":{"is_monorepo":false,"root_package":null,"packages":[],"diagnostics":[],"declared_patterns":[],"tsconfig_references":[],"package_count":0,"total_packages":0,"diagnostic_count":0},"quality":[{"rule_id":"SKY-Q302","severity":"MEDIUM","message":"Method 'decide' has nesting depth 6 (limit: 4)","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-u_7cjh52/java_service_quality_hotspot/App.java","line":2,"col":0,"name":"decide","simple_name":"decide","cwe":[{"id":"CWE-1124","name":"Excessively Deep Nesting"}],"standard_refs":["ISO/IEC 5055:2021 §6.3.5"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-C303","severity":"LOW","message":"Method 'decide' has 7 parameters (limit: 5)","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-u_7cjh52/java_service_quality_hotspot/App.java","line":2,"col":0,"name":"decide","simple_name":"decide","cwe":[{"id":"CWE-1064","name":"Invokable Control Element with Signature Containing an Excessive Number of Parameters"}],"standard_refs":["ISO/IEC 5055:2021 §6.3.2"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R103","kind":"repo_policy","severity":"LOW","type":"policy","name":"skylos-gate-policy","simple_name":"skylos-gate-policy","value":"missing_skylos_gate","threshold":0,"message":"No [tool.skylos.gate] policy is configured for repository quality gates.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-u_7cjh52/java_service_quality_hotspot","basename":"java_service_quality_hotspot","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: Skylos quality gate"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}},{"rule_id":"SKY-R104","kind":"repo_policy","severity":"LOW","type":"policy","name":"pre-commit-policy","simple_name":"pre-commit-policy","value":"missing_pre_commit","threshold":0,"message":"Repository has no pre-commit policy file.","file":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-u_7cjh52/java_service_quality_hotspot","basename":"java_service_quality_hotspot","line":1,"col":0,"cwe":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"standard_refs":["Repository policy: pre-commit"],"finding_type":"advice","listing":{"version":1,"listed":true,"reason":"all_advice"}}],"architecture_metrics":{"system_metrics":{"total_modules":0,"total_packages":0,"total_loc":0,"modularity_index":1.0,"architecture_fitness":1.0,"mean_distance":0.0,"instability_variance":0.0,"coupling_health":1.0,"dip_violations":0,"zone_distribution":{}},"module_count":0,"packages":{},"module_metrics":{},"iad_enforced":false,"advisories":[],"advisory_count":0,"advisory_signal_count":0},"assessment":{"version":1,"scope":"all_analyzed_findings","scanned_checks":["quality","dead_code"],"coverage":{"status":"partial","not_assessed":["security","ai_defects","dependencies","secrets"],"incomplete_checks":[],"reasons":["configured_suppression"]},"risk":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0},"categories":{"security":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"secrets":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"dependencies":{"status":"not_assessed","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}},"correctness":{"status":"none","highest_severity":null,"finding_count":0,"severity_counts":{"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":0,"UNKNOWN":0}}}},"maintainability":{"status":"measured","advice_count":4,"rule_count":4,"affected_files":2,"affected_functions":null,"checks":[{"rule_id":"SKY-C303","name":"Too many function arguments","language":"Java","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-Q302","name":"Deep nesting","language":"Java","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R103","name":"Skylos gate policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null},{"rule_id":"SKY-R104","name":"Pre-commit policy","language":"Other","count":1,"affected_units":1,"unit":"finding","analyzed_units":null,"affected_percent":null,"max_value":null,"max_threshold":null,"max_excess_ratio":null}]},"dead_code":{"status":"review","candidate_count":1,"confidence_range":[100,100]},"finding_counts":{"defect":0,"review":1,"advice":4,"advice_groups":4}},"listing_policy_version":1,"advice_visibility":{"total_checks":4,"omitted_checks":0,"reasons":{},"rules":{},"include_with":"--all-advice"}},"error":null,"effectiveScan":{"target":"/private/var/folders/sz/zrbjt3sn56x7yvwg_nk4hh640000gn/T/skylos-public-case-u_7cjh52/java_service_quality_hotspot","conf":0,"enable_quality":true,"enable_danger":false,"enable_secrets":false,"enable_ai_defects":false,"enable_dependency_hallucinations":false,"enable_sca":false,"grep_verify":false,"grep_cache":false,"custom_rules_data":[],"all_advice":true},"stdout":"","stderr":"","networkAttempts":[]}]}]}