Issues

Stage-1 confidence is a free 0-1 field with no rubric and no decision consumer, yet it ships to the report and CSV as stage1_confidence — across 213 Stage-2-verified findings it barely separates agreed from refuted (AUC 0.57) — define it, consume it, or drop it

#736

· gadievron opened

on Sep 25, 2026

(likely cosmetic) The UNSUPPORTED remedy says 'create a manual OPENANT.md override file' but not what it must contain — and seven near-miss override shapes are skipped silently (only a missing key inside a parsed fence warns)

#735

· gadievron opened

on Sep 25, 2026

Vendored and generated inputs in scan scope: .yarn is absent from all three directory skip lists and no parser recognises generated-code headers — one bundled Yarn binary became 2,410 LR units and 249 Stage-1 units on one run; SwiftPM manifests are a second exhibit (a cost/policy ruling, not a wrong output)

#734

· gadievron opened

on Sep 25, 2026

LR's 'unknown unit_id' skip label and counter describe out-of-batch ids as unknown — 113 of 210 campaign skips were real dataset units (likely cosmetic: no promotion was lost; 18/18 promotable skips were already reachable)

#733

· gadievron opened

on Sep 25, 2026

Dynamic-test single-container timeout kills the docker run client and leaves the container running — no --name/--cidfile, no docker kill; cleanup removes only image and network (the compose path tears down correctly)

#732

· gadievron opened

on Sep 25, 2026

The agent's read_file_section tool reads the whole file before slicing — a 2-line request against a 10 MB file allocates ~30 MB and a FIFO in the scanned tree blocks the enhance step; the bounded reader is not used here

#731

· gadievron opened

on Sep 25, 2026

The enhance agent discards all gathered context at the iteration limit — include_functions=[] sends the unit to analysis with no agent-gathered context

#730

· gadievron opened

on Sep 24, 2026

Swift lifecycle entry points are LLM-tier-gated with no structural seeding, and the unscoped gets-boundary heuristic over-seeds from comments

#729

· gadievron opened

on Sep 24, 2026

Disclosure generation abandons completed usages and leaks paid workers on one failure; refusal raises omit token usage and a stop-finished OpenAI refusal is misclassified

#728

· gadievron opened

on Sep 24, 2026

Usage history is lost across resume and retry: single-shot enhancement persists no per-unit usage and a verify retry overwrites the prior attempt's record

#727

· gadievron opened

on Sep 24, 2026

Status contract inconsistencies: a failed step enters the rank as a skip, app-context lands in both completed and skipped, and the envelope's vulnerable count carries no stage label

#726

· gadievron opened

on Sep 24, 2026

Caller/callee dedup can delete every finding in a cycle — removals are computed against the original set with no surviving representative

#725

· gadievron opened

on Sep 24, 2026

Navigation Menu

All issues

Stage-1 confidence is a free 0-1 field with no rubric and no decision consumer, yet it ships to the report and CSV as stage1_confidence — across 213 Stage-2-verified findings it barely separates agreed from refuted (AUC 0.57) — define it, consume it, or drop it

(likely cosmetic) The UNSUPPORTED remedy says 'create a manual OPENANT.md override file' but not what it must contain — and seven near-miss override shapes are skipped silently (only a missing key inside a parsed fence warns)

LR's 'unknown unit_id' skip label and counter describe out-of-batch ids as unknown — 113 of 210 campaign skips were real dataset units (likely cosmetic: no promotion was lost; 18/18 promotable skips were already reachable)

Dynamic-test single-container timeout kills the docker run client and leaves the container running — no --name/--cidfile, no docker kill; cleanup removes only image and network (the compose path tears down correctly)

The agent's read_file_section tool reads the whole file before slicing — a 2-line request against a 10 MB file allocates ~30 MB and a FIFO in the scanned tree blocks the enhance step; the bounded reader is not used here

The enhance agent discards all gathered context at the iteration limit — include_functions=[] sends the unit to analysis with no agent-gathered context

Swift lifecycle entry points are LLM-tier-gated with no structural seeding, and the unscoped gets-boundary heuristic over-seeds from comments

Disclosure generation abandons completed usages and leaks paid workers on one failure; refusal raises omit token usage and a stop-finished OpenAI refusal is misclassified

Usage history is lost across resume and retry: single-shot enhancement persists no per-unit usage and a verify retry overwrites the prior attempt's record

Status contract inconsistencies: a failed step enters the rank as a skip, app-context lands in both completed and skipped, and the envelope's vulnerable count carries no stage label

Caller/callee dedup can delete every finding in a cycle — removals are computed against the original set with no surviving representative

Search results