{
  "run_id": "carelessdept--ci-guard-mcp-gpt-6-luna-1792805076633917582",
  "date": "2026-10-24T01:36:13.940638+00:00",
  "repo": "carelessdept/ci-guard-mcp",
  "kind": "mcp",
  "source": "https://github.com/carelessdept/ci-guard-mcp",
  "commit": "11f7635d3c67081aeebcd0ffe133db043ea03b7b",
  "model": "gpt-6-luna",
  "model_version": "gpt-6-luna",
  "test_version": "readme-f72312298d35d84837d4fc5f6f22b138d54d456600b5ed431e36e8f5db931dbf",
  "pass": true,
  "outcome": "pass",
  "time_to_working_s": 657.1643009310355,
  "total_s": 697.3066401481628,
  "steps": [
    "cd <guest-path> && vault-search 'ci-guard-mcp README setup operation' 2>&1; cat <host-path> 2>&1; rg --files -g 'README*' -g 'AGENTS.md' -g 'pyproject.toml' -g 'package.json' -g '*.yml' -g '*.yaml' -g 'Makefile' | head -80; pwd; id -u; python3 --version; cat README.md",
    "cd <guest-path> && ls -la; cat package.json; node --version; npm --version; which sudo && sudo -n true; ",
    "sudo -n apt-get update && sudo -n apt-get install -y nodejs npm",
    "node --version; npm --version;",
    "cd <guest-path> && cat .coldpass/* 2>/dev/null; sudo -n apt-get install -y curl ca-certificates; curl -fsSL https://deb.nodesource.com/setup_20.x | sudo -n -E bash -; sudo -n apt-get install -y nodejs; node --version",
    "cd <guest-path> && npm ci --ignore-scripts && npm run build && node dist/cli.js scan . --format json > <guest-path>; rc=$?; cat <guest-path>; echo scan_rc=$rc; cat src/cli.ts; find src -maxdepth 3 -type f",
    "cd <guest-path> && sed -n '1,260p' src/mcp-server.ts; node -e 'const p=require(\"./package-lock.json\"); console.log(p.packages[\"node_modules/typescript\"]?.version)'",
    "cd <guest-path> && mkdir -p .coldpass && node dist/cli.js --mcp --root <guest-path> <<'EOF'\n{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"initialize\",\"params\":{\"protocolVersion\":\"2025-11-25\",\"capabilities\":{},\"clientInfo\":{\"name\":\"coldpass\",\"version\":\"1\"}}}\n{\"jsonrpc\":\"2.0\",\"method\":\"notifications/initialized\"}\n{\"jsonrpc\":\"2.0\",\"id\":2,\"method\":\"tools/call\",\"params\":{\"name\":\"scan_repo\",\"arguments\":{\"path\":\".\",\"noGit\":true}}}\nEOF",
    "cd <guest-path> && cat > .coldpass/probe.json <<'EOF'\n{\"kind\":\"cli\",\"argv\":[\"node\",\"dist/cli.js\",\"scan\",\".\",\"--format\",\"json\"],\"cwd\":\"<guest-path>\",\"expected_text\":\"\\\"filesScanned\\\": 44\"}\nEOF\ncat > .coldpass/claims.json <<'EOF'\n[{\"kind\":\"claim\",\"claim\":\"The scan returns deterministic findings and summary counts as JSON.\",\"source\":\"Audits are deterministic, read-only, and run without sending source code to a service.\",\"input\":\"node dist/cli.js scan . --format json\",\"expected\":\"JSON scan report with summary and filesScanned\",\"probe_kind\":\"cli\",\"argv\":[\"node\",\"dist/cli.js\",\"scan\",\".\",\"--format\",\"json\"],\"expected_text\":\"\\\"filesScanned\\\": 44\",\"cwd\":\"<guest-path>\"}]\nEOF\ncat > .coldpass/examples.json <<'EOF'\n[{\"kind\":\"example\",\"claim\":\"Build and scan the source checkout\",\"source\":\"README.md / Run locally / Or from a local source checkout\",\"input\":\"npm ci --ignore-scripts; npm run build; node dist/cli.js scan .\",\"expected\":\"Successful build and scan report\",\"argv\":[\"node\",\"dist/cli.js\",\"scan\",\".\"],\"cwd\":\"<guest-path>\",\"expected_text\":\"0 errors\"}]\nEOF\ncat > .coldpass/cycles.json <<'EOF'\n{\"detected\":false,\"reason\":\"Inspected README product entry points: CLI scans and MCP tool calls run on demand; no scheduler, loop, webhook, or cycle trigger is documented.\" ,\"checks\":[]}\nEOF\n<env-var>=<guest-path> python3 -I <guest-path> --validate --replay",
    "cd <guest-path> && python3 - <<'PY'\nimport json\nfor f in ['.coldpass/probe.json','.coldpass/claims.json']:\n d=json.load(open(f))\n if isinstance(d,list): d[0]['expected_text']='\"error\": 0'\n else: d['expected_text']='\"error\": 0'\n open(f,'w').write(json.dumps(d,indent=2)+'\\n')\nPY\ncat > .coldpass/report.json <<'EOF'\n{\"outcome\":\"working\",\"fault_owner\":null,\"operation\":\"Build the TypeScript CLI and audit the repository as JSON\",\"operation_scope\":\"Node.js 20.20.2; source checkout, local read-only audit\",\"steps\":[\"Installed Node.js 20 with the NodeSource setup script and apt.\",\"npm ci --ignore-scripts\",\"npm run build\",\"node dist/cli.js scan . --format json\"],\"deviations\":[\"Initial Ubuntu nodejs package supplied Node 18.19.1, below the README minimum; replaced it with Node.js 20.\"],\"stuck_step\":null,\"main_blocker\":null,\"plain_failure\":null,\"suggested_fix\":null}\nEOF\n<env-var>=<guest-path> python3 -I <guest-path> --validate --replay"
  ],
  "stuck_step": null,
  "error_excerpt": null,
  "what_it_did": "Build the TypeScript CLI and audit the repository as JSON",
  "suggested_fix": null,
  "tokens_in": 351448,
  "tokens_out": 1770,
  "cost_usd": null,
  "usage_complete": true,
  "checks": [
    {
      "check": "operation",
      "status": "PASS",
      "details": {
        "working": true,
        "argv": [
          "node",
          "dist/cli.js",
          "scan",
          ".",
          "--format",
          "json"
        ],
        "kind": "cli",
        "returncode": 0,
        "stdout": "{\n  \"version\": \"0.2.0\",\n  \"findings\": [],\n  \"summary\": {\n    \"error\": 0,\n    \"warn\": 0,\n    \"info\": 0\n  },\n  \"filesScanned\": 50\n}",
        "stderr": "",
        "needs_credentials": false,
        "needs_browser": false,
        "scope": "product operation"
      }
    }
  ],
  "safety": {
    "version": "z2x-1",
    "rules_version": "z2x-1",
    "summary": "No problems traced to this repository code in these checks.",
    "findings": [],
    "context": [],
    "limitations": [
      "A short run cannot establish that code is safe.",
      "Connections show IP addresses; proxies can hide the final hostname.",
      "Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing."
    ],
    "static": {
      "dependency_note": "OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check."
    },
    "evidence_url": "/safety/?run=carelessdept--ci-guard-mcp-gpt-6-luna-1792805076633917582",
    "evidence_file": "/data/safety/carelessdept--ci-guard-mcp-gpt-6-luna-1792805076633917582.json.gz"
  },
  "agent_execution": "native_agent",
  "agent_runtime": "codex",
  "agent_runtime_version": "codex-cli 0.163.0",
  "tool_transport": "mcp-assigned-vm",
  "platform": "linux",
  "reasoning": "low",
  "service_tier": "standard",
  "resources": {
    "cpus": 2,
    "memory_mib": 4096,
    "disk_mib": 32768
  },
  "native_tool_calls": 10,
  "native_bundle": null,
  "architecture": null,
  "backend": "hyperv",
  "platform_details": {
    "backend": "hyperv",
    "os": "linux"
  },
  "platform_conflicts": null,
  "sandbox_source": null,
  "source_pin": {
    "commit": "11f7635d3c67081aeebcd0ffe133db043ea03b7b",
    "url": "https://github.com/carelessdept/ci-guard-mcp"
  },
  "purpose": "initial",
  "profile": {
    "model": "gpt-6-luna",
    "reasoning": "low"
  },
  "fault": {
    "owner": null,
    "status": "resolved",
    "reason": null
  },
  "fix_id": null,
  "verifies_run_id": null,
  "hosting": null,
  "operation_scope": "product operation",
  "tool_calls": 10,
  "guest_setup": null,
  "runtime": null,
  "runtime_version": null,
  "runtime_revision": null,
  "source_revision": null,
  "evidence_version": null,
  "failure_origin": null,
  "evidence_strength": "readme_checked",
  "works": "yes",
  "install_s": null,
  "first_use_s": null,
  "mcp": "unknown",
  "needs": [],
  "needs_which": null,
  "agent_interface": [
    "cli"
  ],
  "license": "MIT",
  "repo_url": "https://github.com/carelessdept/ci-guard-mcp",
  "cost_to_try": "free",
  "hardware": null,
  "what_failed": null,
  "local_or_hosted": "local",
  "cycle_checks": [
    {
      "kind": "cycle",
      "claim": "Scheduled or looping main behavior",
      "source": "repository entry points",
      "input": "source inspection",
      "expected": "identify the product trigger",
      "verdict": "yes",
      "outcome": "Inspected README product entry points: CLI scans and MCP tool calls run on demand; no scheduler, loop, webhook, or cycle trigger is documented.",
      "evidence": "Inspected README product entry points: CLI scans and MCP tool calls run on demand; no scheduler, loop, webhook, or cycle trigger is documented.",
      "command": ""
    }
  ],
  "claims": [
    {
      "kind": "claim",
      "claim": "The scan returns deterministic findings and summary counts as JSON.",
      "source": "Audits are deterministic, read-only, and run without sending source code to a service.",
      "input": "node dist/cli.js scan . --format json",
      "expected": "JSON scan report with summary and filesScanned",
      "command": "node dist/cli.js scan . --format json",
      "verdict": "yes",
      "outcome": "Real input produced the expected result: \"error\": 0",
      "evidence": "\"error\": 0,\n    \"warn\": 0,\n    \"info\": 0\n  },\n  \"filesScanned\": 50\n}\n",
      "returncode": 0,
      "source_checked": true,
      "source_file": "README.md"
    }
  ],
  "claims_note": null,
  "example_checks": [
    {
      "kind": "example",
      "claim": "Build and scan the source checkout",
      "source": "README.md / Run locally / Or from a local source checkout",
      "input": "npm ci --ignore-scripts; npm run build; node dist/cli.js scan .",
      "command": "node dist/cli.js scan .",
      "evidence": "50 files scanned \u00b7 0 errors \u00b7 0 warnings \u00b7 0 informational",
      "deferred": false,
      "expected": "Successful build and scan report",
      "returncode": 0,
      "verdict": "yes",
      "outcome": "command completed successfully"
    }
  ],
  "does_what_it_says": "yes",
  "maintenance": {
    "archived": false,
    "commits_90d": 10,
    "last_commit_at": "2026-10-22T09:55:07Z",
    "last_release_at": "2026-10-22T09:55:14Z",
    "median_reply_hours": null,
    "merged_prs_90d": 0,
    "note": "actively maintained: last commit 1 days ago; 10 commits and 0 merged PRs in 90 days; 0 open issues, 0 open PRs; latest release 2026-10-22",
    "open_issues": 0,
    "open_prs": 0,
    "reply_share": null,
    "reply_threads": 0,
    "verdict": "maintained"
  },
  "maintenance_verdict": "maintained",
  "maintenance_note": "actively maintained: last commit 1 days ago; 10 commits and 0 merged PRs in 90 days; 0 open issues, 0 open PRs; latest release 2026-10-22",
  "maintained": "active",
  "maintained_note": "last commit 1 days ago",
  "last_commit_at": "2026-10-22T09:55:09Z",
  "last_release_at": "2026-10-22T09:55:14Z",
  "open_issues": null,
  "answered_issues": null,
  "platforms_claimed": [
    "linux",
    "mac",
    "windows"
  ],
  "topic": "mcp-server",
  "agent_interfaces": [
    {
      "interface": "mcp",
      "evidence": "README metadata",
      "observed": false,
      "operation_checked": false
    },
    {
      "interface": "cli",
      "evidence": "independent checker",
      "observed": true,
      "operation_checked": true
    }
  ],
  "agent_interfaces_note": "README metadata is a discovery hint, not pinned documentation proof. Observed interfaces were exercised in this run. An empty list means unknown.",
  "mcp_context": null,
  "tested_at": "2026-10-24T01:36:13.940638+00:00",
  "tested_commit": "11f7635d3c67081aeebcd0ffe133db043ea03b7b",
  "tested_with": {
    "agent": "codex",
    "agent_version": "codex-cli 0.163.0",
    "model": "gpt-6-luna",
    "model_route": "gpt-6-luna",
    "reasoning": "low",
    "os": "linux",
    "backend": "hyperv",
    "transport": "mcp-assigned-vm"
  },
  "setup_identity": {
    "repo": "carelessdept/ci-guard-mcp",
    "source": "https://github.com/carelessdept/ci-guard-mcp",
    "commit": "11f7635d3c67081aeebcd0ffe133db043ea03b7b",
    "source_revision": null,
    "os": "linux",
    "architecture": null,
    "backend": "hyperv",
    "model": "gpt-6-luna",
    "model_version": "gpt-6-luna",
    "agent_execution": "native_agent",
    "agent_runtime": "codex",
    "agent_runtime_version": "codex-cli 0.163.0",
    "tool_transport": "mcp-assigned-vm",
    "runtime": null,
    "runtime_version": null,
    "runtime_revision": null,
    "sandbox_source": null,
    "guest_setup": null,
    "source_pin": {
      "commit": "11f7635d3c67081aeebcd0ffe133db043ea03b7b",
      "url": "https://github.com/carelessdept/ci-guard-mcp"
    },
    "platform_details": {
      "os": "linux",
      "backend": "hyperv"
    },
    "platform_conflicts": null,
    "reasoning": "low",
    "service_tier": "standard",
    "resources": {
      "cpus": 2,
      "memory_mib": 4096,
      "disk_mib": 32768
    },
    "operation": "Build the TypeScript CLI and audit the repository as JSON",
    "operation_scope": "product operation",
    "hosting": null,
    "kind": "mcp",
    "test_version": "readme-f72312298d35d84837d4fc5f6f22b138d54d456600b5ed431e36e8f5db931dbf",
    "evidence_version": null
  },
  "other_model": null,
  "other_run_id": null,
  "models_agree": null,
  "furthest_model": null,
  "transcript_url": null,
  "report_url": "/reports/carelessdept--ci-guard-mcp-gpt-6-luna-1792805076633917582.json"
}