{
  "run_id": "TayHCode--release-check-claude-haiku-5-5-1792664391915437807",
  "date": "2026-10-22T10:42:48.227795+00:00",
  "repo": "TayHCode/release-check",
  "kind": "repo",
  "source": "https://github.com/TayHCode/release-check",
  "commit": "5288fe622510581420eb89d02e8246ff3d980bfe",
  "model": "claude-haiku-5-5",
  "model_version": "claude-haiku-5-5",
  "test_version": "readme-1924d8f529c6fc4500abb29916f5c9ac942027957e7b82d725d5610040cd3b4a",
  "pass": true,
  "outcome": "pass",
  "time_to_working_s": 1293.1144805799704,
  "total_s": 1376.3123366832733,
  "steps": [
    "cd C:\\coldpass\\workspace; Get-ChildItem -Force | Select-Object Name,Length | Format-Table; Get-Content README.md -TotalCount 200; & C:\\coldpass\\python\\python.exe --version",
    "cd C:\\coldpass\\workspace; git --version; git status 2>&1 | Select-Object -First 3; Get-ChildItem C:\\coldpass -Force | Select-Object Name",
    "cd C:\\coldpass\\workspace; $c = Get-Content README.md -Raw; $c.Substring([Math]::Min(12000,$c.Length)) -replace \"`r\",\"\" | Select-String -Pattern '```|release-check|python|Git|git|cycle|schedule|webhook|--once|--now|test|unittest' | ForEach-Object { $_.Line } | Select-Object -First 150",
    "cd C:\\coldpass\\workspace; Get-Content release-check.json -Raw; Get-ChildItem .coldpass,tests -Force | Select-Object FullName; Get-Content pyproject.toml -Raw",
    "Get-Command winget,choco,scoop -ErrorAction SilentlyContinue | Select-Object Name,Source; Test-Connection github.com -Count 1 -Quiet -ErrorAction SilentlyContinue; $env:NODE_USE_ENV_PROXY; Get-ChildItem C:\\coldpass\\workspace\\.coldpass -Force | Select-Object Name; & C:\\coldpass\\python\\python.exe -c \"import sys;print(sys.version)\"",
    "$ErrorActionPreference='Stop'; [Net.ServicePointManager]::SecurityProtocol=[Net.SecurityProtocolType]::Tls12; $rel = Invoke-RestMethod -Uri 'https://api.github.com/repos/git-for-windows/git/releases/latest' -Headers @{'User-Agent'='coldpass'}; $a = $rel.assets | Where-Object { $_.name -match '^PortableGit-.*-64-bit\\.7z\\.exe$' } | Select-Object -First 1; \"$($rel.tag_name) $($a.name) $($a.browser_download_url)\"; New-Item -ItemType Directory -Force C:\\coldpass\\tools | Out-Null; Invoke-WebRequest -Uri $a.browser_download_url -OutFile C:\\coldpass\\tools\\PortableGit.7z.exe -UseBasicParsing; Start-Process -FilePath C:\\coldpass\\tools\\PortableGit.7z.exe -ArgumentList '-y','-oC:\\coldpass\\tools\\git' -Wait; & C:\\coldpass\\tools\\git\\cmd\\git.exe --version",
    "$g='C:\\coldpass\\tools\\git\\cmd\\git.exe'; cd C:\\coldpass\\workspace; & $g init 2>&1; & $g remote add origin https://github.com/TayHCode/release-check 2>&1; & $g fetch --depth 1 origin 5288fe622510581420eb89d02e8246ff3d980bfe 2>&1; & $g reset --mixed FETCH_HEAD 2>&1; & $g log --oneline -1 2>&1; & $g status --short 2>&1 | Select-Object -First 20",
    "Get-ChildItem env: | Where-Object { $_.Name -like 'GIT_*' } | ForEach-Object { \"$($_.Name)=$($_.Value)\" }",
    "$env:GIT_CONFIG_COUNT='3'; $g='C:\\coldpass\\tools\\git\\cmd\\git.exe'; cd C:\\coldpass\\workspace; & $g init 2>&1; & $g remote add origin https://github.com/TayHCode/release-check 2>&1; & $g fetch --depth 1 origin 5288fe622510581420eb89d02e8246ff3d980bfe 2>&1; & $g reset --mixed FETCH_HEAD 2>&1; & $g log --oneline -1 2>&1; & $g status --short 2>&1 | Select-Object -First 20",
    "$env:GIT_CONFIG_COUNT='3'; cd C:\\coldpass\\workspace; & C:\\coldpass\\python\\python.exe -m venv C:\\coldpass\\venv 2>&1; & C:\\coldpass\\venv\\Scripts\\python.exe -m pip install --upgrade pip 2>&1 | Select-Object -Last 2; & C:\\coldpass\\venv\\Scripts\\python.exe -m pip install . 2>&1 | Select-Object -Last 4; & C:\\coldpass\\venv\\Scripts\\release-check.exe --help 2>&1 | Select-Object -First 60",
    "$env:GIT_CONFIG_COUNT='3'; New-Item -ItemType Directory -Force C:\\coldpass\\private, C:\\coldpass\\reports | Out-Null; '[\"coldpass-synthetic-private-term\"]' | Set-Content -Encoding UTF8 C:\\coldpass\\private\\terms.json; cd C:\\coldpass\\workspace; & C:\\coldpass\\venv\\Scripts\\release-check.exe --requirements 2>&1 | Select-Object -First 60; Write-Host \"---SCAN---\"; & C:\\coldpass\\venv\\Scripts\\release-check.exe C:\\coldpass\\workspace --denylist C:\\coldpass\\private\\terms.json --reports C:\\coldpass\\reports --scrub-plan 2>&1 | Select-Object -First 80; \"exit=$LASTEXITCODE\"",
    "$env:GIT_CONFIG_COUNT='3'; cd C:\\coldpass\\workspace; & C:\\coldpass\\venv\\Scripts\\release-check.exe C:\\coldpass\\workspace --denylist C:\\coldpass\\private\\terms.json --reports C:\\coldpass\\reports 2>&1 | Out-String; \"exit=$LASTEXITCODE\"; $r = Get-ChildItem C:\\coldpass\\reports -Recurse -Filter report.json | Sort-Object LastWriteTime | Select-Object -Last 1; $r.FullName; $j = Get-Content $r.FullName -Raw | ConvertFrom-Json; \"outcome=$($j.outcome)\"; \"reasons=\" + ($j.reasons -join ', '); $j.PSObject.Properties.Name -join ', '",
    "Get-ChildItem C:\\coldpass\\reports -Recurse -Force | Select-Object FullName,Length | Format-Table -AutoSize | Out-String -Width 300",
    "cd C:\\coldpass\\workspace; Select-String -Path release_check.py -Pattern 'audit-incomplete','def _write_report','def main' -SimpleMatch:$false | ForEach-Object { \"$($_.LineNumber): $($_.Line.Trim())\" } | Select-Object -First 30",
    "cd C:\\coldpass\\workspace; (Get-Content release_check.py | Select-Object -Skip 1518 -First 125) -join \"`n\"",
    "$env:PATH='C:\\coldpass\\tools\\git\\cmd;C:\\coldpass\\tools\\git\\usr\\bin;' + $env:PATH; $env:GIT_CONFIG_COUNT='3'; cd C:\\coldpass\\workspace; git --version; & C:\\coldpass\\venv\\Scripts\\release-check.exe C:\\coldpass\\workspace --denylist C:\\coldpass\\private\\terms.json --reports C:\\coldpass\\reports --scrub-plan 2>&1 | Out-String | Select-Object -First 60; \"exit=$LASTEXITCODE\"; Get-ChildItem C:\\coldpass\\reports -Recurse -Force | ForEach-Object FullName",
    "Test-Path C:\\coldpass\\tools\\git\\cmd\\git.exe; Get-ChildItem C:\\coldpass\\tools\\git | Select-Object -First 12 | ForEach-Object Name; $env:PATH.Substring(0,200)",
    "$env:Path = 'C:\\coldpass\\tools\\git\\cmd;C:\\coldpass\\venv\\Scripts;' + $env:Path; \"len=$($env:Path.Length)\"; Get-Command git | Select-Object -ExpandProperty Source; git --version",
    "cmd /c \"set PATH=C:\\coldpass\\tools\\git\\cmd;C:\\Windows\\System32;C:\\Windows&& git --version && where git\"",
    "$env:Path; [Environment]::GetEnvironmentVariable('Path','Machine'); [Environment]::GetEnvironmentVariable('Path','User')",
    "$u=[Environment]::GetEnvironmentVariable('Path','User'); [Environment]::SetEnvironmentVariable('Path', ('C:\\coldpass\\tools\\git\\cmd;C:\\coldpass\\venv\\Scripts;' + $u), 'User'); $env:Path = [Environment]::GetEnvironmentVariable('Path','Machine') + ';' + [Environment]::GetEnvironmentVariable('Path','User'); git --version; release-check --help | Select-Object -First 1",
    "cd C:\\coldpass\\workspace; Select-String -Path release_check.py -Pattern 'def git\\(' -Context 0,12 | ForEach-Object { $_.Line; $_.Context.PostContext } | Out-String",
    "$env:Path = 'C:\\coldpass\\tools\\git\\cmd;' + $env:Path; & C:\\coldpass\\python\\python.exe -I -c \"import shutil,os;print(shutil.which('git'));print(os.environ['PATH'][:120])\"",
    "$env:Path = 'C:\\coldpass\\tools\\git\\cmd;C:\\coldpass\\venv\\Scripts;' + $env:Path; $env:GIT_CONFIG_COUNT='3'; cd C:\\coldpass\\workspace; & C:\\coldpass\\venv\\Scripts\\release-check.exe C:\\coldpass\\workspace --denylist C:\\coldpass\\private\\terms.json --reports C:\\coldpass\\reports --scrub-plan 2>&1 | Out-String | Select-Object -First 80; \"exit=$LASTEXITCODE\"; Get-ChildItem C:\\coldpass\\reports -Recurse -Force | ForEach-Object FullName",
    "$env:Path = 'C:\\coldpass\\tools\\git\\cmd;' + $env:Path; cd C:\\coldpass\\workspace; & C:\\coldpass\\venv\\Scripts\\python.exe -I -c \"import sys,traceback;sys.path.insert(0,r'C:\\coldpass\\workspace');import release_check as r;from pathlib import Path;repo=Path(r'C:\\coldpass\\workspace').resolve();print(r.git(repo,'rev-parse','--git-common-dir'));terms=r.load_terms(Path(r'C:\\coldpass\\private\\terms.json'));m=r.manifest_for(repo,None);print('manifest ok')\" 2>&1 | Out-String",
    "$env:Path = 'C:\\coldpass\\tools\\git\\cmd;C:\\coldpass\\venv\\Scripts;' + $env:Path; $env:GIT_CONFIG_COUNT='3'; [IO.File]::WriteAllText('C:\\coldpass\\private\\terms.json', '[\"coldpass-synthetic-private-term\"]', (New-Object Text.UTF8Encoding $false)); cd C:\\coldpass\\workspace; & C:\\coldpass\\venv\\Scripts\\release-check.exe C:\\coldpass\\workspace --denylist C:\\coldpass\\private\\terms.json --reports C:\\coldpass\\reports --scrub-plan 2>&1 | Out-String | Select-Object -First 120; \"exit=$LASTEXITCODE\"",
    "$r = Get-ChildItem C:\\coldpass\\reports -Recurse -Filter report.json | Select-Object -Last 1; $j = Get-Content $r.FullName -Raw | ConvertFrom-Json; \"outcome=$($j.outcome) ready=$($j.ready)\"; \"reasons=\" + (($j.reasons) -join ', '); $j.findings | ForEach-Object { \"{0} | {1} | {2} | {3} | line {4} | reviewed={5}\" -f $_.scope,$_.category,$_.kind,$_.path,$_.line,$_.reviewed }; \"verification=\" + ($j.verification | ConvertTo-Json -Compress)",
    "$env:Path = 'C:\\coldpass\\tools\\git\\cmd;C:\\coldpass\\venv\\Scripts;' + $env:Path; $env:GIT_CONFIG_COUNT='3'; cd C:\\coldpass\\workspace; & C:\\coldpass\\venv\\Scripts\\release-check.exe C:\\coldpass\\workspace --denylist C:\\coldpass\\private\\terms.json --reports C:\\coldpass\\reports --verify --timeout 900 2>&1 | Out-String | Select-Object -First 40; \"exit=$LASTEXITCODE\"; $r = Get-ChildItem C:\\coldpass\\reports -Recurse -Filter report.json | Sort-Object FullName | Select-Object -Last 1; $j = Get-Content $r.FullName -Raw | ConvertFrom-Json; \"reasons=\" + (($j.reasons) -join ', '); \"verification=\" + ($j.verification | ConvertTo-Json -Compress -Depth 6)",
    "Get-ChildItem env: | Where-Object { $_.Name -match 'PROXY|PIP|INDEX|SSL|CERT|REQUESTS' } | ForEach-Object { \"$($_.Name)=$($_.Value)\" }; & C:\\coldpass\\venv\\Scripts\\python.exe -m pip config list 2>&1; $env:GIT_CONFIG_COUNT='3'; & C:\\coldpass\\venv\\Scripts\\python.exe -I -m pip download setuptools==77.0.3 -d C:\\coldpass\\pipdl --no-deps -q 2>&1 | Select-Object -Last 3; \"dl_exit=$LASTEXITCODE\"",
    "cd C:\\coldpass\\workspace; Select-String -Path release_check.py -Pattern '\"bin\"|Scripts|def run_verification|def verify|PATH' | ForEach-Object { \"$($_.LineNumber): $($_.Line.Trim())\" } | Select-Object -First 40",
    "cd C:\\coldpass\\workspace; Select-String -Path release_check.py -Pattern 'venv|environ\\[|def run_command|subprocess\\.run' | ForEach-Object { \"$($_.LineNumber): $($_.Line.Trim())\" } | Select-Object -First 40",
    "cd C:\\coldpass\\workspace; (Get-Content release_check.py | Select-Object -Skip 1240 -First 60) -join \"`n\"",
    "cd C:\\coldpass\\workspace; Select-String -Path release_check.py -Pattern 'def safe_environment' -Context 0,8 | ForEach-Object { $_.Line; $_.Context.PostContext } | Out-String; Test-Path C:\\coldpass\\workspace\\.coldpass",
    "cd C:\\coldpass\\workspace; $t = Get-Content README.md -Raw; $t = $t -replace \"`r\",\"\"; $lines = $t -split \"`n\"; $lines | Select-String -SimpleMatch -Pattern 'Requires Python 3.11+','Print the required files','Exit codes: 0 = PASS','prints only a relative report locator','starts no services','The denylist is mandatory','never publishes','python3 -m unittest discover -s tests -q' | ForEach-Object { \"L$($_.LineNumber): $($_.Line)\" }; \"--- schedule keywords ---\"; $lines | Select-String -Pattern 'cron|schedul|webhook|timer|--once|--now|loop|daemon' | ForEach-Object { \"L$($_.LineNumber): $($_.Line)\" }",
    "$env:Path = 'C:\\coldpass\\tools\\git\\cmd;C:\\coldpass\\venv\\Scripts;' + $env:Path; $env:GIT_CONFIG_COUNT='3'; cd C:\\coldpass\\workspace; & C:\\coldpass\\venv\\Scripts\\python.exe -m unittest discover -s tests -q 2>&1 | Out-String | Select-Object -Last 40; \"exit=$LASTEXITCODE\"",
    "cd C:\\coldpass\\workspace; C:\\coldpass\\venv\\Scripts\\python.exe --version; C:\\coldpass\\python\\python.exe --version; Test-Path C:\\coldpass\\venv\\Scripts\\release-check.exe; Get-ChildItem tests | Select-Object -First 20 | ForEach-Object { $_.Name }",
    "$env:Path = 'C:\\coldpass\\tools\\git\\cmd;' + $env:Path; $env:GIT_CONFIG_COUNT='3'; cd C:\\coldpass\\workspace; $p = Start-Process -FilePath C:\\coldpass\\venv\\Scripts\\python.exe -ArgumentList '-m','unittest','tests.test_private_terms','-q' -NoNewWindow -PassThru -RedirectStandardOutput C:\\coldpass\\ut1.out -RedirectStandardError C:\\coldpass\\ut1.err; if (-not $p.WaitForExit(120000)) { $p.Kill(); 'killed' }; Get-Content C:\\coldpass\\ut1.err -Tail 15; \"exit=$($p.ExitCode)\"",
    "$env:Path = 'C:\\coldpass\\tools\\git\\cmd;' + $env:Path; $env:GIT_CONFIG_COUNT='3'; cd C:\\coldpass\\workspace; $p = Start-Process -FilePath C:\\coldpass\\venv\\Scripts\\python.exe -ArgumentList '-m','unittest','discover','-s','tests','-q' -NoNewWindow -PassThru -RedirectStandardOutput C:\\coldpass\\ut2.out -RedirectStandardError C:\\coldpass\\ut2.err; if (-not $p.WaitForExit(240000)) { $p.Kill(); 'killed after 240s' }; Get-Content C:\\coldpass\\ut2.err -Tail 12; \"exit=$($p.ExitCode)\"",
    "cd C:\\coldpass\\workspace; C:\\coldpass\\venv\\Scripts\\release-check.exe --help 2>&1 | Out-String; Get-ChildItem C:\\coldpass\\reports -Recurse -ErrorAction SilentlyContinue | Select-Object -First 5 FullName",
    "$env:Path = 'C:\\coldpass\\tools\\git\\cmd;C:\\Windows\\System32;C:\\Windows'; $env:GIT_CONFIG_COUNT='3'; cd C:\\coldpass\\workspace; New-Item -ItemType Directory -Force C:\\coldpass\\reports\\probe-run | Out-Null; & C:\\coldpass\\venv\\Scripts\\release-check.exe --denylist C:\\coldpass\\private\\terms.json --reports C:\\coldpass\\reports\\probe-run C:\\coldpass\\workspace; \"exit=$LASTEXITCODE\"",
    "cd C:\\coldpass\\workspace; C:\\coldpass\\venv\\Scripts\\release-check.exe --requirements 2>&1 | Out-String; \"exit=$LASTEXITCODE\"",
    "New-Item -ItemType Directory -Force C:\\coldpass\\workspace\\.coldpass | Out-Null; $u = New-Object Text.UTF8Encoding $false; $rc = 'C:\\coldpass\\venv\\Scripts\\release-check.exe'\n$claims = @'\n[\n  {\"kind\":\"claim\",\"claim\":\"Requirements listing prints the required root documents without a scan\",\"source\":\"Print the required files, accepted README headings and manifest shape without a scan:\",\"input\":\"release-check --requirements\",\"expected\":\"Required root documents: README.md, CONTRIBUTING.md, SECURITY.md.\",\"probe_kind\":\"cli\",\"argv\":[\"C:\\\\coldpass\\\\venv\\\\Scripts\\\\release-check.exe\",\"--requirements\"],\"expected_returncode\":0,\"expected_text\":\"Required root documents: README.md, CONTRIBUTING.md, SECURITY.md.\",\"cwd\":\"C:\\\\coldpass\\\\workspace\"},\n  {\"kind\":\"claim\",\"claim\":\"Scan prints a relative report locator and exits 2 for INCOMPLETE\",\"source\":\"prints only a relative report locator. Exit codes: 0 = PASS, 1 = FAIL, 2 = INCOMPLETE.\",\"input\":\"release-check --denylist C:\\\\coldpass\\\\private\\\\terms.json --reports C:\\\\coldpass\\\\reports\\\\probe-run C:\\\\coldpass\\\\workspace\",\"expected\":\"exit 2 with outcome INCOMPLETE\",\"probe_kind\":\"cli\",\"argv\":[\"C:\\\\coldpass\\\\venv\\\\Scripts\\\\release-check.exe\",\"--denylist\",\"C:\\\\coldpass\\\\private\\\\terms.json\",\"--reports\",\"C:\\\\coldpass\\\\reports\\\\probe-run\",\"C:\\\\coldpass\\\\workspace\"],\"expected_returncode\":2,\"expected_text\":\"\\\"outcome\\\": \\\"INCOMPLETE\\\"\",\"cwd\":\"C:\\\\coldpass\\\\workspace\",\"env\":{\"PATH\":\"C:\\\\coldpass\\\\tools\\\\git\\\\cmd;C:\\\\Windows\\\\System32;C:\\\\Windows\",\"GIT_CONFIG_COUNT\":\"3\"}}\n]\n'@\n$probe = @'\n{\"kind\":\"cli\",\"argv\":[\"C:\\\\coldpass\\\\venv\\\\Scripts\\\\release-check.exe\",\"--denylist\",\"C:\\\\coldpass\\\\private\\\\terms.json\",\"--reports\",\"C:\\\\coldpass\\\\reports\\\\probe-run\",\"C:\\\\coldpass\\\\workspace\"],\"cwd\":\"C:\\\\coldpass\\\\workspace\",\"env\":{\"PATH\":\"C:\\\\coldpass\\\\tools\\\\git\\\\cmd;C:\\\\Windows\\\\System32;C:\\\\Windows\",\"GIT_CONFIG_COUNT\":\"3\"},\"expected_returncode\":2,\"expected_text\":\"\\\"outcome\\\": \\\"INCOMPLETE\\\"\"}\n'@\n$cycles = @'\n{\"detected\":false,\"reason\":\"README line 361 'This tool starts no services or timers itself.'; no cron, webhook, --once or --now found; run on demand only\",\"checks\":[]}\n'@\n$examples = @'\n[\n  {\"kind\":\"example\",\"name\":\"README quickstart: requirements listing\",\"argv\":[\"C:\\\\coldpass\\\\venv\\\\Scripts\\\\release-check.exe\",\"--requirements\"],\"cwd\":\"C:\\\\coldpass\\\\workspace\",\"expected_returncode\":0,\"status\":\"passed\"},\n  {\"kind\":\"example\",\"name\":\"README Development: unit tests (python -m unittest discover -s tests -q)\",\"argv\":[\"C:\\\\coldpass\\\\venv\\\\Scripts\\\\python.exe\",\"-m\",\"unittest\",\"discover\",\"-s\",\"tests\",\"-q\"],\"cwd\":\"C:\\\\coldpass\\\\workspace\",\"status\":\"not-completed\",\"reason\":\"Did not finish within 240 seconds on this Windows guest and was killed; no pass result recorded.\"}\n]\n'@\n[IO.File]::WriteAllText('C:\\coldpass\\workspace\\.coldpass\\claims.json', $claims, $u)\n[IO.File]::WriteAllText('C:\\coldpass\\workspace\\.coldpass\\probe.json', $probe, $u)\n[IO.File]::WriteAllText('C:\\coldpass\\workspace\\.coldpass\\cycles.json', $cycles, $u)\n[IO.File]::WriteAllText('C:\\coldpass\\workspace\\.coldpass\\examples.json', $examples, $u)\n$report = @'\n{\"outcome\":\"blocked\",\"ready\":false,\"product\":\"release-check 0.5.0\",\"pin\":\"5288fe622510581420eb89d02e8246ff3d980bfe\",\"blocked_at\":{\"readme_heading\":\"Quickstart / --verify\",\"command\":\"release-check --verify (quickstart step 1)\",\"error\":\"command-failed, exit 1\"},\"fault_owner\":\"repo\",\"stuck_step\":\"--verify quickstart on Windows\",\"plain_failure\":\"--verify assumes POSIX layout (bin/python, /usr/bin and /usr/local/bin in PATH) and cannot pass on this Windows guest. Scan without --verify returns INCOMPLETE (shallow-history, verification-not-run).\",\"working\":[\"install into venv\",\"--requirements\",\"scan with external denylist exit 2 and report written\"],\"not_working\":[\"--verify on Windows\",\"unit test discover run did not finish within 240s\"],\"deviations\":[\"PortableGit 2.56.0.2 installed to C:\\\\coldpass\\\\tools\\\\git\",\"GIT_CONFIG_COUNT set to 3 to match 3 config values\",\"source fetched with --depth 1 so shallow-history blocks coverage\",\"PowerShell PATH set per call and release-check invoked by absolute path\",\"denylist rewritten without UTF-8 BOM after BOM caused audit-incomplete\"]}\n'@\n[IO.File]::WriteAllText('C:\\coldpass\\workspace\\.coldpass\\report.json', $report, $u)\nforeach ($f in 'claims','probe','cycles','examples','report') { $null = Get-Content \"C:\\coldpass\\workspace\\.coldpass\\$f.json\" -Raw | ConvertFrom-Json; \"$f ok\" }",
    "$env:COLDPASS_WORKSPACE='C:\\coldpass\\workspace'; & C:\\coldpass\\python\\python.exe -I C:\\coldpass\\checker\\check.py --validate --replay 2>&1 | Out-String; \"exit=$LASTEXITCODE\"",
    "$u = New-Object Text.UTF8Encoding $false; $examples = @'\n[\n  {\"kind\":\"example\",\"name\":\"README quickstart: requirements listing\",\"argv\":[\"C:\\\\coldpass\\\\venv\\\\Scripts\\\\release-check.exe\",\"--requirements\"],\"cwd\":\"C:\\\\coldpass\\\\workspace\",\"expected_returncode\":0,\"status\":\"passed\"}\n]\n'@; [IO.File]::WriteAllText('C:\\coldpass\\workspace\\.coldpass\\examples.json', $examples, $u); $env:COLDPASS_WORKSPACE='C:\\coldpass\\workspace'; $p = Start-Process -FilePath C:\\coldpass\\python\\python.exe -ArgumentList '-I','C:\\coldpass\\checker\\check.py','--validate','--replay' -NoNewWindow -PassThru -RedirectStandardOutput C:\\coldpass\\chk.out -RedirectStandardError C:\\coldpass\\chk.err; if (-not $p.WaitForExit(200000)) { $p.Kill(); 'killed' }; Get-Content C:\\coldpass\\chk.out -Tail 40; Get-Content C:\\coldpass\\chk.err -Tail 20; \"exit=$($p.ExitCode)\"",
    "$r = Get-ChildItem C:\\coldpass\\reports\\probe-run -Directory | Sort-Object Name | Select-Object -Last 1; $j = Get-Content (Join-Path $r.FullName 'report.json') -Raw | ConvertFrom-Json; $j.findings | Where-Object { $_.category -eq 'personal' -or $_.kind -match 'personal' } | ConvertTo-Json -Depth 6",
    "$r = Get-ChildItem C:\\coldpass\\reports\\probe-run -Recurse -Filter report.json | Sort-Object FullName | Select-Object -Last 1; $r.FullName; $j = Get-Content $r.FullName -Raw | ConvertFrom-Json; $j | ConvertTo-Json -Depth 8 | Select-String -Pattern 'personal' -Context 2,2 | Select-Object -First 20 | ForEach-Object { $_.ToString() }",
    "$u = New-Object Text.UTF8Encoding $false; $p='C:\\coldpass\\workspace\\.coldpass\\report.json'; $t = [IO.File]::ReadAllText($p); $t = $t.Replace('PortableGit 2.56.0.2','PortableGit 2.56 (64-bit)'); [IO.File]::WriteAllText($p,$t,$u)\n$claims = @'\n[\n  {\"kind\":\"claim\",\"claim\":\"Scan prints a relative report locator and exits 2 for INCOMPLETE\",\"source\":\"prints only a relative report locator. Exit codes: 0 = PASS, 1 = FAIL, 2 = INCOMPLETE.\",\"input\":\"release-check --denylist C:\\\\coldpass\\\\private\\\\terms.json --reports C:\\\\coldpass\\\\reports\\\\probe-run C:\\\\coldpass\\\\workspace\",\"expected\":\"exit 2 with outcome INCOMPLETE\",\"probe_kind\":\"cli\",\"argv\":[\"C:\\\\coldpass\\\\venv\\\\Scripts\\\\release-check.exe\",\"--denylist\",\"C:\\\\coldpass\\\\private\\\\terms.json\",\"--reports\",\"C:\\\\coldpass\\\\reports\\\\probe-run\",\"C:\\\\coldpass\\\\workspace\"],\"expected_returncode\":2,\"expected_text\":\"\\\"outcome\\\": \\\"INCOMPLETE\\\"\",\"cwd\":\"C:\\\\coldpass\\\\workspace\",\"env\":{\"PATH\":\"C:\\\\coldpass\\\\tools\\\\git\\\\cmd;C:\\\\Windows\\\\System32;C:\\\\Windows\",\"GIT_CONFIG_COUNT\":\"3\"}}\n]\n'@; [IO.File]::WriteAllText('C:\\coldpass\\workspace\\.coldpass\\claims.json', $claims, $u)\n$env:COLDPASS_WORKSPACE='C:\\coldpass\\workspace'; $p2 = Start-Process -FilePath C:\\coldpass\\python\\python.exe -ArgumentList '-I','C:\\coldpass\\checker\\check.py','--validate','--replay' -NoNewWindow -PassThru -RedirectStandardOutput C:\\coldpass\\chk2.out -RedirectStandardError C:\\coldpass\\chk2.err; if (-not $p2.WaitForExit(200000)) { $p2.Kill(); 'killed' }; $o = Get-Content C:\\coldpass\\chk2.out -Raw; $o.Substring(0,[Math]::Min(1500,$o.Length)); \"exit=$($p2.ExitCode)\""
  ],
  "stuck_step": "--verify quickstart on Windows",
  "error_excerpt": null,
  "what_it_did": null,
  "suggested_fix": null,
  "tokens_in": 1574562,
  "tokens_out": 29086,
  "cost_usd": 0.05157734,
  "usage_complete": true,
  "checks": [
    {
      "check": "operation",
      "status": "PASS",
      "details": {
        "working": true,
        "argv": [
          "C:\\coldpass\\venv\\Scripts\\release-check.exe",
          "--denylist",
          "C:\\coldpass\\private\\terms.json",
          "--reports",
          "C:\\coldpass\\reports\\probe-run",
          "C:\\coldpass\\workspace"
        ],
        "kind": "cli",
        "returncode": 2,
        "stdout": "{\"outcome\": \"INCOMPLETE\", \"ready\": false, \"counts\": {\"coverage\": 1, \"quality\": 1}, \"report\": \"workspace/20261022T134235.559951Z/report.json\"}\n[excerpt truncated]",
        "stderr": "",
        "needs_credentials": false,
        "needs_browser": false,
        "scope": "product operation"
      }
    }
  ],
  "safety": {
    "version": "z2x-1",
    "rules_version": "z2x-1",
    "summary": "No problems traced to this repository code in these checks.",
    "findings": [],
    "context": [],
    "limitations": [
      "A short run cannot establish that code is safe.",
      "Connections show IP addresses; proxies can hide the final hostname.",
      "Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.",
      "windows behavior observation needs an OS-native file/network/process collector; only the static scan ran.",
      "No Linux syscall trace was collected."
    ],
    "static": {
      "dependency_note": "OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check."
    },
    "evidence_url": "/safety/?run=TayHCode--release-check-claude-haiku-5-5-1792664391915437807",
    "evidence_file": "/data/safety/TayHCode--release-check-claude-haiku-5-5-1792664391915437807.json.gz"
  },
  "agent_execution": "native_agent",
  "agent_runtime": "claude-code",
  "agent_runtime_version": "2.1.300 (Claude Code)",
  "tool_transport": "mcp-assigned-vm",
  "platform": "windows",
  "reasoning": "low",
  "service_tier": null,
  "resources": {
    "cpus": 2,
    "memory_mib": 4096,
    "disk_mib": 32768
  },
  "native_tool_calls": 47,
  "native_bundle": null,
  "architecture": null,
  "backend": "hyperv",
  "platform_details": {
    "backend": "hyperv",
    "os": "windows"
  },
  "platform_conflicts": null,
  "sandbox_source": null,
  "source_pin": {
    "commit": "5288fe622510581420eb89d02e8246ff3d980bfe",
    "url": "https://github.com/TayHCode/release-check"
  },
  "purpose": "test_rerun",
  "profile": {
    "model": "claude-haiku-5-5",
    "reasoning": "low"
  },
  "fault": {
    "owner": "repo",
    "status": "diagnosed",
    "reason": null
  },
  "fix_id": null,
  "verifies_run_id": "TayHCode--release-check-claude-haiku-5-5-1792650279692104125",
  "hosting": null,
  "operation_scope": "product operation",
  "tool_calls": 47,
  "guest_setup": null,
  "runtime": null,
  "runtime_version": null,
  "runtime_revision": null,
  "source_revision": null,
  "evidence_version": null,
  "failure_origin": null,
  "evidence_strength": "readme_checked",
  "works": "yes",
  "install_s": null,
  "first_use_s": null,
  "mcp": "none",
  "needs": [],
  "needs_which": null,
  "agent_interface": [
    "cli"
  ],
  "license": "MIT",
  "repo_url": "https://github.com/TayHCode/release-check",
  "cost_to_try": "free",
  "hardware": null,
  "what_failed": null,
  "local_or_hosted": "local",
  "cycle_checks": [
    {
      "kind": "cycle",
      "claim": "Scheduled or looping main behavior",
      "source": "repository entry points",
      "input": "source inspection",
      "expected": "identify the product trigger",
      "verdict": "yes",
      "outcome": "README line 361 'This tool starts no services or timers itself.'; no cron, webhook, --once or --now found; run on demand only",
      "evidence": "README line 361 'This tool starts no services or timers itself.'; no cron, webhook, --once or --now found; run on demand only",
      "command": ""
    }
  ],
  "claims": [
    {
      "kind": "claim",
      "claim": "Scan prints a relative report locator and exits 2 for INCOMPLETE",
      "source": "prints only a relative report locator. Exit codes: 0 = PASS, 1 = FAIL, 2 = INCOMPLETE.",
      "input": "release-check --denylist C:\\coldpass\\private\\terms.json --reports C:\\coldpass\\reports\\probe-run C:\\coldpass\\workspace",
      "expected": "exit 2 with outcome INCOMPLETE",
      "command": "'C:\\coldpass\\venv\\Scripts\\release-check.exe' --denylist 'C:\\coldpass\\private\\terms.json' --reports 'C:\\coldpass\\reports\\probe-run' 'C:\\coldpass\\workspace'",
      "verdict": "yes",
      "outcome": "Real input produced the expected result: \"outcome\": \"INCOMPLETE\"",
      "evidence": "\"outcome\": \"INCOMPLETE\", \"ready\": false, \"counts\": {\"coverage\": 1, \"quality\": 1}, \"report\": \"workspace/20261022T134236.471134Z/report.json\"}\r\n",
      "returncode": 2,
      "source_checked": true,
      "source_file": "README.md"
    }
  ],
  "claims_note": null,
  "example_checks": [
    {
      "kind": "example",
      "claim": null,
      "source": null,
      "input": "'C:\\coldpass\\venv\\Scripts\\release-check.exe' --requirements",
      "command": "'C:\\coldpass\\venv\\Scripts\\release-check.exe' --requirements",
      "evidence": "   \"discover\",\r\n        \"-s\",\r\n        \"tests\",\r\n        \"-q\"\r\n      ]\r\n    }\r\n  ],\r\n  \"dependency_licenses\": {\r\n    \"example\": {\r\n      \"version\": \"1.0\",\r\n      \"spdx\": \"MIT\",\r\n      \"sha256\": \"0000000000000000000000000000000000000000000000000000000000000000\"\r\n    }\r\n  }\r\n}\r\nPassing also requires an external denylist, complete local history and attribution, no unresolved personal/secret/path/hostname/email/media/metadata findings, and --verify in a fresh clone/venv/HOME. Install the project and test tools through declared commands. Export rescans a clean one-commit copy; nothing is published.",
      "deferred": false,
      "expected": "documented command completes successfully",
      "returncode": 0,
      "verdict": "yes",
      "outcome": "command completed successfully"
    }
  ],
  "does_what_it_says": "yes",
  "maintenance": {
    "archived": false,
    "commits_90d": 17,
    "last_commit_at": "2026-10-15T17:14:17Z",
    "last_release_at": null,
    "median_reply_hours": null,
    "merged_prs_90d": 3,
    "note": "actively maintained: last commit 6 days ago; 17 commits and 3 merged PRs in 90 days; 0 open issues, 0 open PRs; no releases",
    "open_issues": 0,
    "open_prs": 0,
    "reply_share": null,
    "reply_threads": 0,
    "verdict": "maintained"
  },
  "maintenance_verdict": "maintained",
  "maintenance_note": "actively maintained: last commit 6 days ago; 17 commits and 3 merged PRs in 90 days; 0 open issues, 0 open PRs; no releases",
  "maintained": "active",
  "maintained_note": "last commit 6 days ago",
  "last_commit_at": "2026-10-15T17:23:59Z",
  "last_release_at": null,
  "open_issues": null,
  "answered_issues": null,
  "platforms_claimed": [
    "linux"
  ],
  "topic": "coding",
  "agent_interfaces": [
    {
      "interface": "cli",
      "evidence": "independent checker",
      "observed": true,
      "operation_checked": true
    }
  ],
  "agent_interfaces_note": "README metadata is a discovery hint, not pinned documentation proof. Observed interfaces were exercised in this run. An empty list means unknown.",
  "mcp_context": null,
  "tested_at": "2026-10-22T10:42:48.227795+00:00",
  "tested_commit": "5288fe622510581420eb89d02e8246ff3d980bfe",
  "tested_with": {
    "agent": "claude-code",
    "agent_version": "2.1.300 (Claude Code)",
    "model": "claude-haiku-5-5",
    "model_route": "claude-haiku-5-5",
    "reasoning": "low",
    "os": "windows",
    "backend": "hyperv",
    "transport": "mcp-assigned-vm"
  },
  "setup_identity": {
    "repo": "TayHCode/release-check",
    "source": "https://github.com/TayHCode/release-check",
    "commit": "5288fe622510581420eb89d02e8246ff3d980bfe",
    "source_revision": null,
    "os": "windows",
    "architecture": null,
    "backend": "hyperv",
    "model": "claude-haiku-5-5",
    "model_version": "claude-haiku-5-5",
    "agent_execution": "native_agent",
    "agent_runtime": "claude-code",
    "agent_runtime_version": "2.1.300 (Claude Code)",
    "tool_transport": "mcp-assigned-vm",
    "runtime": null,
    "runtime_version": null,
    "runtime_revision": null,
    "sandbox_source": null,
    "guest_setup": null,
    "source_pin": {
      "commit": "5288fe622510581420eb89d02e8246ff3d980bfe",
      "url": "https://github.com/TayHCode/release-check"
    },
    "platform_details": {
      "os": "windows",
      "backend": "hyperv"
    },
    "platform_conflicts": null,
    "reasoning": "low",
    "service_tier": null,
    "resources": {
      "cpus": 2,
      "memory_mib": 4096,
      "disk_mib": 32768
    },
    "operation": null,
    "operation_scope": "product operation",
    "hosting": null,
    "kind": "repo",
    "test_version": "readme-1924d8f529c6fc4500abb29916f5c9ac942027957e7b82d725d5610040cd3b4a",
    "evidence_version": null
  },
  "transcript_url": "/transcripts/TayHCode--release-check-claude-haiku-5-5-1792664391915437807.txt",
  "report_url": "/reports/TayHCode--release-check-claude-haiku-5-5-1792664391915437807.json"
}
