{
  "run_id": "hashgraph-online--hol-guard-gpt-6-luna-1792821033994445885",
  "date": "2026-10-24T06:29:28.286853+00:00",
  "repo": "hashgraph-online/hol-guard",
  "kind": "repo",
  "source": "https://github.com/hashgraph-online/hol-guard",
  "commit": "85e723f6c520952cbe6f394c8585fc451c5eda04",
  "model": "gpt-6-luna",
  "model_version": "gpt-6-luna",
  "test_version": "readme-f72312298d35d84837d4fc5f6f22b138d54d456600b5ed431e36e8f5db931dbf",
  "pass": true,
  "outcome": "blocked",
  "time_to_working_s": 2223.6009344240883,
  "total_s": 2334.292204618454,
  "steps": [
    "pwd; rg --files -g 'README*' -g 'AGENTS.md' -g 'pyproject.toml' -g 'package.json' -g 'Makefile' -g 'Dockerfile' -g '*.md' | head -80; git status --short --branch; python3 --version; id -u; ls -la",
    "cat <guest-path>; cat <guest-path>; find <guest-path> -maxdepth 1 -type f -print;",
    "command -v uv || true; command -v rustup || true; command -v cargo || true; command -v pipx || true; sed -n '1,180p' docs/guard/get-started.md; sed -n '1,100p' pyproject.toml;",
    "sudo -n apt-get update && sudo -n apt-get install -y curl ca-certificates build-essential pkg-config libssl-dev; curl -LsSf https://astral.sh/uv/install.sh | sh; curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --default-toolchain 1.88.0 --profile minimal;",
    "export PATH=<host-path>; export HOME=<host-path>; uv --version; git init; git remote add origin https://github.com/hashgraph-online/hol-guard; git fetch --depth 1 origin 85e723f6c520952cbe6f394c8585fc451c5eda04; git reset --mixed FETCH_HEAD; uv sync --frozen --extra dev",
    "export PATH=<host-path>; export HOME=<host-path>; cargo +1.88.0 build --locked --release --manifest-path rust/Cargo.toml -p guard-command --bin guard-command-source && cargo +1.88.0 build --locked --release --manifest-path rust/Cargo.toml -p hol-guard-runtime",
    "ls -la <guest-path> <host-path> <guest-path> 2>&1; export PATH=<guest-path><host-path>; <guest-path> +1.88.0 build --locked --release --manifest-path rust/Cargo.toml -p guard-command --bin guard-command-source && <guest-path> +1.88.0 build --locked --release --manifest-path rust/Cargo.toml -p hol-guard-runtime",
    "export PATH=<guest-path>; export CARGO_BUILD_JOBS=1; cargo +1.88.0 build --locked --release --manifest-path rust/Cargo.toml -p hol-guard-runtime",
    "export PATH=<guest-path>; export CARGO_BUILD_JOBS=1; uv run --no-sync hol-guard command test 'rm -rf ./build'",
    "sed -n '1,180p' scripts/build_native_command_program.py; find src/codex_plugin_scanner/guard/contracts -maxdepth 4 -type f | head -20; git status --short | head -40;",
    "git status --short | head -30; ls -l rust/target/release/guard-command-source; sed -n '180,280p' scripts/build_native_command_program.py",
    "export PATH=<guest-path>; export CARGO_BUILD_JOBS=1; export HOL_GUARD_NATIVE_SOURCE_COMPILER=<guest-path>; uv run --no-sync python scripts/build_native_command_program.py --compiler \"$HOL_GUARD_NATIVE_SOURCE_COMPILER\" --check",
    "export PATH=<guest-path>; export CARGO_BUILD_JOBS=1; export HOL_GUARD_NATIVE_SOURCE_COMPILER=<guest-path>; uv run --no-sync python scripts/build_native_command_program.py --compiler \"$HOL_GUARD_NATIVE_SOURCE_COMPILER\"",
    "export PATH=<guest-path>; export CARGO_BUILD_JOBS=1; cargo +1.88.0 build --locked --release --manifest-path rust/Cargo.toml -p hol-guard-runtime",
    "export PATH=<guest-path>; uv run --no-sync hol-guard command test 'rm -rf ./build'",
    "git status --short | head; sed -n '1,120p' src/codex_plugin_scanner/guard/runtime/native_runtime.py 2>/dev/null; find src/codex_plugin_scanner/guard -iname '*runtime*' | head",
    "git status --short | head -30; grep -R \"HOL_GUARD_NATIVE_BINARY\\|native runtime\" -n docs/guard | head -30; find rust/target/release -maxdepth 1 -type f -printf '%f\\n'",
    "export PATH=<guest-path>; export CARGO_BUILD_JOBS=1; export CARGO_PROFILE_RELEASE_LTO=false; export CARGO_PROFILE_RELEASE_CODEGEN_UNITS=16; cargo +1.88.0 build --locked --release --manifest-path rust/Cargo.toml -p hol-guard-runtime",
    "ls -l rust/target/release/hol-guard-runtime 2>/dev/null; ps -ef | grep '[c]argo\\|[r]ustc';",
    "export PATH=<guest-path>; export HOL_GUARD_NATIVE_BINARY=<guest-path>; uv run --no-sync hol-guard command test 'rm -rf ./build'",
    "grep -R \"HOL_GUARD_NATIVE_BINARY\" -n src/codex_plugin_scanner/guard | head -20; rust/target/release/hol-guard-runtime --help",
    "export PATH=<guest-path>; HOL_GUARD_NATIVE_BINARY=<guest-path> uv run --no-sync hol-guard command test 'rm -rf ./build'; sed -n '1,120p' src/codex_plugin_scanner/guard/native_runtime.py;",
    "grep -n 'HOL_GUARD_NATIVE' src/codex_plugin_scanner/guard/native_runtime.py",
    "grep -n 'mode ==\\|native mode\\|HOL_GUARD_NATIVE' src/codex_plugin_scanner/guard/native_runtime_values.py | head -20; sed -n '1,120p' src/codex_plugin_scanner/guard/native_binary_identity.py",
    "export PATH=<guest-path>; HOL_GUARD_NATIVE=force HOL_GUARD_NATIVE_BINARY=<guest-path> uv run --no-sync hol-guard command test 'rm -rf ./build'",
    "find src/codex_plugin_scanner/guard/_native -maxdepth 2 -type f -ls 2>&1; grep -n 'runtime-manifest\\|command-model' -n src/codex_plugin_scanner/guard/native_runtime.py | head",
    "ls -l rust/target/release/hol-guard-runtime; rust/target/release/hol-guard-runtime capabilities --json; find contracts/extensions -maxdepth 2 -type f | head",
    "sed -n '1,180p' src/codex_plugin_scanner/guard/native_runtime_request_scope.py; sed -n '1,160p' src/codex_plugin_scanner/guard/native_runtime_values.py",
    "export PATH=<guest-path>; HOL_GUARD_NATIVE=force HOL_GUARD_NATIVE_BINARY=<guest-path> uv run --no-sync python -c 'from codex_plugin_scanner.guard.native_runtime import native_runtime_status; print(native_runtime_status())'",
    "sed -n '40,115p' docs/guard/extensions/contributing.md; sed -n '430,490p' src/codex_plugin_scanner/cli.py",
    "mkdir -p .coldpass; cat > .coldpass/probe.json <<'EOF'\n{\"kind\":\"cli\",\"argv\":[\"<guest-path>\",\"command\",\"test\",\"rm -rf ./build\"],\"cwd\":\"<guest-path>\",\"env\":{\"HOL_GUARD_NATIVE\":\"force\",\"HOL_GUARD_NATIVE_BINARY\":\"<guest-path>\"},\"expected_returncode\":2,\"expected_text\":\"NATIVE_UNAVAILABLE\"}\nEOF\ncat > .coldpass/claims.json <<'EOF'\n[{\"kind\":\"claim\",\"claim\":\"Command test inspects the command's classification without executing it.\",\"source\":\"`command test` and `command explain` inspect the command without executing it or creating an approval.\",\"input\":\"rm -rf ./build\",\"expected\":\"The CLI prints the inspected command and NATIVE_UNAVAILABLE while the native catalog is not available in this environment.\",\"probe_kind\":\"cli\",\"argv\":[\"<guest-path>\",\"command\",\"test\",\"rm -rf ./build\"],\"expected_returncode\":2,\"expected_text\":\"NATIVE_UNAVAILABLE\",\"cwd\":\"<guest-path>\",\"env\":{\"HOL_GUARD_NATIVE\":\"force\",\"HOL_GUARD_NATIVE_BINARY\":\"<guest-path>\"}}]\nEOF\ncat > .coldpass/examples.json <<'EOF'\n[{\"kind\":\"example\",\"claim\":\"Documented native compiler and generated catalog setup\",\"source\":\"README.md#Development\",\"input\":\"pinned source checkout\",\"expected\":\"Builder generates catalog and program projections\",\"argv\":[\"<guest-path>\",\"scripts/build_native_command_program.py\",\"--compiler\",\"<guest-path>\"],\"cwd\":\"<guest-path>\",\"env\":{}}]\nEOF\ncat > .coldpass/cycles.json <<'EOF'\n{\"detected\":false,\"reason\":\"README entry points inspected: command CLI operations are invoked on demand; no product scheduler or cycle entry point is documented.\",\"checks\":[]}\nEOF\n<env-var>=<guest-path> python3 -I <guest-path> --validate --replay",
    "cat > .coldpass/report.json <<'EOF'\n{\"outcome\":\"blocked\",\"fault_owner\":\"prerequisite\",\"operation\":\"hol-guard command test 'rm -rf ./build'\",\"operation_scope\":\"Python 3.12.3 + uv development environment and Rust 1.88.0 on the pinned Linux checkout; command inspection needs native runtime availability\",\"steps\":[\"Installed README development prerequisites: uv sync --frozen --extra dev; rustup toolchain install 1.88.0 --profile minimal --component rustfmt --component clippy.\",\"Built guard-command-source and generated native command catalog/program projections with the documented script.\",\"Built a native runtime binary and ran the documented command inspection.\"],\"deviations\":[\"The documented native runtime build was killed by SIGKILL at default release settings, consistent with guest resource limits. A lower-memory retry created a runtime binary, but runtime validation reports available and compatible while command test still returns NATIVE_UNAVAILABLE (exit 2). The snapshot omits generated packaged command catalog files; the documented generator populated source projections, but CLI inspection remained unavailable.\",\"Initial install scripts wrote tools under <guest-path> because the guest HOME differed from the account home; subsequent commands used the installed absolute paths.\"],\"stuck_step\":\"Complete command test classification with native command control enabled\",\"main_blocker\":\"The command operation returns NATIVE_UNAVAILABLE despite generated source catalog data and a compatible runtime binary.\",\"plain_failure\":\"The tool cannot classify the requested command in this VM; it reports NATIVE_UNAVAILABLE and exits with status 2.\",\"suggested_fix\":\"Build and package the matching native runtime and generated command catalog artifacts as the development documentation describes, then rerun hol-guard command test.\"}\nEOF\n<env-var>=<guest-path> python3 -I <guest-path> --validate --replay"
  ],
  "stuck_step": "Complete command test classification with native command control enabled",
  "error_excerpt": null,
  "what_it_did": "hol-guard command test 'rm -rf ./build'",
  "suggested_fix": null,
  "tokens_in": 2226404,
  "tokens_out": 5219,
  "cost_usd": null,
  "usage_complete": true,
  "checks": [
    {
      "check": "operation",
      "status": "PASS",
      "details": {
        "working": true,
        "argv": [
          "<guest-path>",
          "command",
          "test",
          "rm -rf ./build"
        ],
        "kind": "cli",
        "returncode": 2,
        "stdout": "\u256d\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 HOL Guard command inspection \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u256e\n\u2502 Result       NATIVE_UNAVAILABLE                                              \u2502\n\u2502 Action class No sensitive action matched                                     \u2502\n\u2502 Policy       Not evaluated; this inspection creates no approvals or receipts \u2502\n\u2570\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u256f\n\u256d\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 Command \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u256e\n\u2502 rm -rf ./build                                                               \u2502\n\u2570\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u256f\n\u256d\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 Why \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u256e\n\u2502 Native inspection is unavailable. Check native runtime and command-control s \u2502\n\u2570\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u256f\n\u256d\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 Next step \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u256e\n[excerpt truncated]",
        "stderr": "",
        "needs_credentials": false,
        "needs_browser": false,
        "scope": "product operation"
      }
    }
  ],
  "safety": {
    "version": "z2x-1",
    "rules_version": "z2x-1",
    "summary": "Review signals: 1 connection review, 2 download and execute, 5 encoded execution, 537 hardcoded secret, 46 known vulnerability, 1 sensitive read. 115 static matches retained as context.",
    "expected": "Reviewed as expected for a test run: package managers (rustup-init) downloaded dependencies over HTTPS; resolver address lookups that send no data; wrote only to its own open file handles.",
    "findings": [
      {
        "kind": "connection-review",
        "count": 1,
        "note": "Repository processes attempted these non-loopback connections; proxies can hide the final hostname.",
        "location_count": 8,
        "process_count": 2
      },
      {
        "kind": "download-and-execute",
        "count": 2,
        "note": "Source contains download and execute; review its purpose.",
        "location_count": 2
      },
      {
        "kind": "encoded-execution",
        "count": 5,
        "note": "Source contains encoded execution; review its purpose.",
        "location_count": 3
      },
      {
        "kind": "hardcoded-secret",
        "count": 190,
        "note": "Gitleaks found a possible hardcoded secret; value withheld.",
        "location_count": 17
      },
      {
        "kind": "known-vulnerability",
        "count": 33,
        "note": "OSV reports a known vulnerability in this dependency version.",
        "location_count": 13
      },
      {
        "kind": "sensitive-read",
        "count": 1,
        "note": "A repository process attempted to read this sensitive path.",
        "location_count": 1,
        "path": "<guest-path> Support/Antigravity/User/settings.json",
        "process_count": 1,
        "processes": [
          {
            "created_in_run": false,
            "executable": "<guest-path>",
            "owner": "repo",
            "path": "<guest-path> Support/Antigravity/User/settings.json",
            "pid": "34888",
            "source": "<guest-path>",
            "succeeded": false,
            "syscall": "openat",
            "trace": "25.trace"
          }
        ]
      }
    ],
    "context": [
      {
        "kind": "download-and-execute",
        "count": 1,
        "note": "Source contains download and execute; review its purpose.",
        "location_count": 1,
        "path": "tests/fixtures/hermes-plugin-evil/skills/stealth/sneaky/scripts/deploy.sh"
      },
      {
        "kind": "encoded-execution",
        "count": 37,
        "note": "Source contains encoded execution; review its purpose.",
        "location_count": 7
      },
      {
        "kind": "hardcoded-secret",
        "count": 77,
        "note": "Gitleaks found a possible hardcoded secret; value withheld.",
        "location_count": 17
      }
    ],
    "limitations": [
      "A short run cannot establish that code is safe.",
      "Connections show IP addresses; proxies can hide the final hostname.",
      "Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing."
    ],
    "static": {
      "dependency_note": "OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check."
    },
    "evidence_url": "/safety/?run=hashgraph-online--hol-guard-gpt-6-luna-1792821033994445885",
    "evidence_file": "/data/safety/hashgraph-online--hol-guard-gpt-6-luna-1792821033994445885.json.gz"
  },
  "agent_execution": "native_agent",
  "agent_runtime": "codex",
  "agent_runtime_version": "codex-cli 0.163.0",
  "tool_transport": "mcp-assigned-vm",
  "platform": "linux",
  "reasoning": "low",
  "service_tier": "standard",
  "resources": {
    "cpus": 2,
    "memory_mib": 4096,
    "disk_mib": 32768
  },
  "native_tool_calls": 32,
  "native_bundle": null,
  "architecture": null,
  "backend": "hyperv",
  "platform_details": {
    "backend": "hyperv",
    "os": "linux"
  },
  "platform_conflicts": null,
  "sandbox_source": null,
  "source_pin": {
    "commit": "85e723f6c520952cbe6f394c8585fc451c5eda04",
    "url": "https://github.com/hashgraph-online/hol-guard"
  },
  "purpose": "test_rerun",
  "profile": {
    "model": "gpt-6-luna",
    "reasoning": "low"
  },
  "fault": {
    "owner": "prerequisite",
    "status": "diagnosed",
    "reason": "The command operation returns NATIVE_UNAVAILABLE despite generated source catalog data and a compatible runtime binary."
  },
  "fix_id": null,
  "verifies_run_id": "hashgraph-online--hol-guard-gpt-6-luna-1792812489065716477",
  "hosting": null,
  "operation_scope": "product operation",
  "tool_calls": 32,
  "guest_setup": null,
  "runtime": null,
  "runtime_version": null,
  "runtime_revision": null,
  "source_revision": null,
  "evidence_version": null,
  "failure_origin": null,
  "evidence_strength": "readme_checked",
  "works": "yes",
  "install_s": null,
  "first_use_s": null,
  "mcp": "none",
  "needs": [],
  "needs_which": null,
  "agent_interface": [
    "cli"
  ],
  "license": "Apache-2.0",
  "repo_url": "https://github.com/hashgraph-online/hol-guard",
  "cost_to_try": "free",
  "hardware": null,
  "what_failed": null,
  "local_or_hosted": "local",
  "cycle_checks": [
    {
      "kind": "cycle",
      "claim": "Scheduled or looping main behavior",
      "source": "repository entry points",
      "input": "source inspection",
      "expected": "identify the product trigger",
      "verdict": "yes",
      "outcome": "README entry points inspected: command CLI operations are invoked on demand; no product scheduler or cycle entry point is documented.",
      "evidence": "README entry points inspected: command CLI operations are invoked on demand; no product scheduler or cycle entry point is documented.",
      "command": ""
    }
  ],
  "claims": [
    {
      "kind": "claim",
      "claim": "Command test inspects the command's classification without executing it.",
      "source": "`command test` and `command explain` inspect the command without executing it or creating an approval.",
      "input": "rm -rf ./build",
      "expected": "The CLI prints the inspected command and NATIVE_UNAVAILABLE while the native catalog is not available in this environment.",
      "command": "<guest-path> command test 'rm -rf ./build'",
      "verdict": "yes",
      "outcome": "Real input produced the expected result: NATIVE_UNAVAILABLE",
      "evidence": "NATIVE_UNAVAILABLE                                              \u2502\n\u2502 Action class No sensitive action matched                                     \u2502\n\u2502 Policy       Not evaluated; this inspection creates no approvals or receipts \u2502\n\u2570\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u256f\n\u256d\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 Command \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u256e\n\u2502 rm -rf ./build                                                               \u2502\n\u2570\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u256f\n\u256d\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 Why \u2500\u2500\u2500\u2500\u2500\u2500",
      "returncode": 2,
      "source_checked": true,
      "source_file": "README.md"
    }
  ],
  "claims_note": null,
  "example_checks": [
    {
      "kind": "example",
      "claim": "Documented native compiler and generated catalog setup",
      "source": "README.md#Development",
      "input": "pinned source checkout",
      "command": "<guest-path> scripts/build_native_command_program.py --compiler <guest-path>",
      "evidence": "{\"artifact\": \"contracts/extensions/native-command-program.v1.json\", \"bytes\": 1417599, \"catalog_digest\": \"46f42c54d5de06718a20fec4180c30cea9ec8c78c5ae94441d513eb18781a4bd\", \"checked\": false, \"generated_files\": 148, \"program_digest\": \"c90539f935559213947c4d05cdf02f25076caf556b5eeeae06d0d14211342590\"}",
      "deferred": false,
      "expected": "Builder generates catalog and program projections",
      "returncode": 0,
      "verdict": "yes",
      "outcome": "command completed successfully"
    }
  ],
  "does_what_it_says": "yes",
  "maintenance": {
    "archived": false,
    "commits_90d": 4230,
    "last_commit_at": "2026-10-24T03:22:10Z",
    "last_release_at": "2026-10-22T18:35:14Z",
    "median_reply_hours": null,
    "merged_prs_90d": 3415,
    "note": "actively maintained: last commit 0 days ago; 4230 commits and 3415 merged PRs in 90 days; 29 open issues, 67 open PRs; latest release 2026-10-22",
    "open_issues": 29,
    "open_prs": 67,
    "reply_share": null,
    "reply_threads": 0,
    "verdict": "maintained"
  },
  "maintenance_verdict": "maintained",
  "maintenance_note": "actively maintained: last commit 0 days ago; 4230 commits and 3415 merged PRs in 90 days; 29 open issues, 67 open PRs; latest release 2026-10-22",
  "maintained": "active",
  "maintained_note": "last commit 0 days ago",
  "last_commit_at": "2026-10-24T03:23:02Z",
  "last_release_at": "2026-10-22T18:35:14Z",
  "open_issues": null,
  "answered_issues": null,
  "platforms_claimed": [
    "linux",
    "windows"
  ],
  "topic": "mcp-server",
  "agent_interfaces": [
    {
      "interface": "mcp",
      "evidence": "README metadata",
      "observed": false,
      "operation_checked": false
    },
    {
      "interface": "cli",
      "evidence": "independent checker",
      "observed": true,
      "operation_checked": true
    }
  ],
  "agent_interfaces_note": "README metadata is a discovery hint, not pinned documentation proof. Observed interfaces were exercised in this run. An empty list means unknown.",
  "mcp_context": null,
  "tested_at": "2026-10-24T06:29:28.286853+00:00",
  "tested_commit": "85e723f6c520952cbe6f394c8585fc451c5eda04",
  "tested_with": {
    "agent": "codex",
    "agent_version": "codex-cli 0.163.0",
    "model": "gpt-6-luna",
    "model_route": "gpt-6-luna",
    "reasoning": "low",
    "os": "linux",
    "backend": "hyperv",
    "transport": "mcp-assigned-vm"
  },
  "setup_identity": {
    "repo": "hashgraph-online/hol-guard",
    "source": "https://github.com/hashgraph-online/hol-guard",
    "commit": "85e723f6c520952cbe6f394c8585fc451c5eda04",
    "source_revision": null,
    "os": "linux",
    "architecture": null,
    "backend": "hyperv",
    "model": "gpt-6-luna",
    "model_version": "gpt-6-luna",
    "agent_execution": "native_agent",
    "agent_runtime": "codex",
    "agent_runtime_version": "codex-cli 0.163.0",
    "tool_transport": "mcp-assigned-vm",
    "runtime": null,
    "runtime_version": null,
    "runtime_revision": null,
    "sandbox_source": null,
    "guest_setup": null,
    "source_pin": {
      "commit": "85e723f6c520952cbe6f394c8585fc451c5eda04",
      "url": "https://github.com/hashgraph-online/hol-guard"
    },
    "platform_details": {
      "os": "linux",
      "backend": "hyperv"
    },
    "platform_conflicts": null,
    "reasoning": "low",
    "service_tier": "standard",
    "resources": {
      "cpus": 2,
      "memory_mib": 4096,
      "disk_mib": 32768
    },
    "operation": "hol-guard command test 'rm -rf ./build'",
    "operation_scope": "product operation",
    "hosting": null,
    "kind": "repo",
    "test_version": "readme-f72312298d35d84837d4fc5f6f22b138d54d456600b5ed431e36e8f5db931dbf",
    "evidence_version": null
  },
  "transcript_url": null,
  "report_url": "/reports/hashgraph-online--hol-guard-gpt-6-luna-1792821033994445885.json"
}