{
  "run_id": "legendteddy--scan-gpt-6-luna-1793186381647759932",
  "date": "2026-10-28T11:22:03.200375+00:00",
  "repo": "legendteddy/scan",
  "kind": "repo",
  "source": "https://github.com/legendteddy/scan",
  "commit": "864770cba43d91bd1997e074a7056c3246c3cf8d",
  "model": "gpt-6-luna",
  "model_version": "gpt-6-luna",
  "test_version": "readme-604d73685be33b2939b2632791fb1de37972f659febb28a139c60d6e81057c18",
  "pass": true,
  "outcome": "pass",
  "time_to_working_s": 70.92128498500097,
  "total_s": 141.5525097846985,
  "steps": [
    "pwd; ls -la; rg --files -g 'README*' -g 'pyproject.toml' -g 'package.json' -g 'requirements*.txt' -g 'setup.py' -g 'Dockerfile' -g '*.yml' -g '*.yaml' | head -80",
    "python3 --version; sed -n '1,240p' README.md; cat pyproject.toml",
    "python3 -m pip --version; python3 -m pip install -e '.[mcp]'",
    "python3 -m venv /tmp/scan-venv && /tmp/scan-venv/bin/python -m pip install -e '.[mcp]'",
    ". /tmp/scan-venv/bin/activate; scan doctor .; mkdir -p /tmp/scan-target; printf 'sample\\n' > /tmp/scan-target/note.txt; scan /tmp/scan-target --offline",
    "sed -n '1,260p' src/scan_core/mcp_entry.py; sed -n '1,160p' src/scan_core/mcp_server.py; ls -la .coldpass; sed -n '1,45p' README.md",
    "sed -n '1,240p' src/scan_core/mcp_cli.py; sed -n '1,160p' src/scan_core/mcp_app.py",
    "rg -n 'list_tools|@.*tool|def scan_' src/scan_core/mcp_server.py; mkdir -p .coldpass; scan-mcp doctor /tmp/scan-target",
    "grep -nE 'list_tools|@.*tool|def scan_' src/scan_core/mcp_server.py; /tmp/scan-venv/bin/scan-mcp doctor /tmp/scan-target",
    "sed -n '180,212p' src/scan_core/mcp_server.py; ls <guest-path>; ls <guest-path>",
    "sed -n '1,120p' <guest-path>",
    "mkdir -p .coldpass; cat > .coldpass/probe.json <<'EOF'\n{\"kind\":\"cli\",\"argv\":[\"/tmp/scan-venv/bin/scan\",\"/tmp/scan-target\",\"--offline\"],\"cwd\":\"<guest-path>\",\"expected_text\":\"Scan state 1.4 written to .scan/state.json\"}\nEOF\ncat > .coldpass/claims.json <<'EOF'\n[{\"kind\":\"claim\",\"claim\":\"Scan inventories a local project and creates canonical Scan state and an HTML report.\",\"source\":\"It can inventory a local project, create canonical Scan 1.4 JSON\",\"input\":\"/tmp/scan-target\",\"expected\":\"Scan state 1.4 written to .scan/state.json\",\"probe_kind\":\"cli\",\"argv\":[\"/tmp/scan-venv/bin/scan\",\"/tmp/scan-target\",\"--offline\"],\"expected_text\":\"Scan state 1.4 written to .scan/state.json\",\"cwd\":\"<guest-path>\"}]\nEOF\ncat > .coldpass/examples.json <<'EOF'\n[{\"kind\":\"example\",\"claim\":\"Run an offline scan of a local project\",\"source\":\"README.md / Start here: run Scan locally\",\"input\":\"/tmp/scan-target\",\"expected\":\"state and report written\",\"argv\":[\"/tmp/scan-venv/bin/scan\",\"/tmp/scan-target\",\"--offline\"],\"cwd\":\"<guest-path>\",\"expected_text\":\"Report written to .scan/report.html\"}]\nEOF\ncat > .coldpass/cycles.json <<'EOF'\n{\"detected\":false,\"checks\":[],\"reason\":\"Inspected README.md and CLI entrypoints; Scan runs on explicit command invocation and documents no scheduler, recurring loop, webhook, or cycle trigger.\"}\nEOF\n",
    "<env-var>=<guest-path> python3 -I <guest-path> --validate --replay",
    "cat > .coldpass/report.json <<'EOF'\n{\"outcome\":\"working\",\"fault_owner\":null,\"operation\":\"Offline scan of a local project, plus optional MCP bridge readiness\",\"operation_scope\":\"Python 3.12.3; source checkout installed in /tmp/scan-venv with the documented [mcp] extra\",\"steps\":[\"python3 -m venv /tmp/scan-venv\",\"/tmp/scan-venv/bin/python -m pip install -e '.[mcp]'\",\"/tmp/scan-venv/bin/scan doctor .\",\"/tmp/scan-venv/bin/scan /tmp/scan-target --offline\",\"/tmp/scan-venv/bin/scan-mcp doctor /tmp/scan-target\",\"Coldpass validation and replay passed\"],\"deviations\":[\"Initial system pip install was blocked by the externally-managed-environment policy; installation succeeded in a virtual environment.\",\"The documented MCP doctor/readiness command passed; no live MCP tool call was recorded.\"],\"stuck_step\":null,\"main_blocker\":null,\"plain_failure\":null,\"suggested_fix\":null}\nEOF\nls -l .coldpass/probe.json .coldpass/claims.json .coldpass/examples.json .coldpass/cycles.json .coldpass/report.json"
  ],
  "stuck_step": null,
  "error_excerpt": null,
  "what_it_did": "Offline scan of a local project, plus optional MCP bridge readiness",
  "suggested_fix": null,
  "tokens_in": 320644,
  "tokens_out": 1720,
  "cost_usd": null,
  "usage_complete": true,
  "checks": [
    {
      "check": "operation",
      "status": "PASS",
      "details": {
        "working": true,
        "argv": [
          "/tmp/scan-venv/bin/scan",
          "/tmp/scan-target",
          "--offline"
        ],
        "kind": "cli",
        "returncode": 0,
        "stdout": "Scan state 1.4 written to .scan/state.json\nReport written to .scan/report.html\nSnapshot: sha256:de814f7663a36828fe3ad305c210aa7e1c14e257e12cbdd4af2bb1e36af395ac\nMode: deep | artifacts: 1 | completion: partial\nBaseline: used\nEvidence: 1 fresh | 0 reused | 0 reuse rejected\nSince baseline: artifacts +0 ~0 -0 =1; findings +0 -0; unknowns +0 -0",
        "stderr": "",
        "needs_credentials": false,
        "needs_browser": false,
        "scope": "product operation"
      }
    }
  ],
  "safety": {
    "version": "z2x-1",
    "rules_version": "z2x-1",
    "summary": "No problems traced to this repository code in these checks. 3 static matches retained as context.",
    "expected": "Reviewed as expected for a test run: attempted writes that failed, so nothing was written.",
    "findings": [],
    "context": [
      {
        "kind": "hardcoded-secret",
        "count": 3,
        "note": "Gitleaks found a possible hardcoded secret; value withheld.",
        "location_count": 3
      }
    ],
    "limitations": [
      "A short run cannot establish that code is safe.",
      "Connections show IP addresses; proxies can hide the final hostname.",
      "Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing."
    ],
    "static": {
      "dependency_note": "OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check."
    },
    "evidence_url": "/safety/?run=legendteddy--scan-gpt-6-luna-1793186381647759932",
    "evidence_file": "/data/safety/legendteddy--scan-gpt-6-luna-1793186381647759932.json.gz"
  },
  "agent_execution": "native_agent",
  "agent_runtime": "codex",
  "agent_runtime_version": "codex-cli 0.164.0",
  "tool_transport": "mcp-assigned-vm",
  "platform": "linux",
  "reasoning": "low",
  "service_tier": "standard",
  "resources": {
    "cpus": 2,
    "memory_mib": 4096,
    "disk_mib": 32768
  },
  "native_tool_calls": 14,
  "native_bundle": null,
  "architecture": null,
  "backend": "hyperv",
  "platform_details": {
    "backend": "hyperv",
    "os": "linux"
  },
  "platform_conflicts": null,
  "sandbox_source": null,
  "source_pin": {
    "commit": "864770cba43d91bd1997e074a7056c3246c3cf8d",
    "url": "https://github.com/legendteddy/scan"
  },
  "purpose": "initial",
  "profile": {
    "model": "gpt-6-luna",
    "reasoning": "low"
  },
  "fault": {
    "owner": null,
    "status": "resolved",
    "reason": null
  },
  "fix_id": null,
  "verifies_run_id": null,
  "hosting": null,
  "operation_scope": "product operation",
  "tool_calls": 14,
  "guest_setup": null,
  "runtime": null,
  "runtime_version": null,
  "runtime_revision": null,
  "source_revision": null,
  "evidence_version": null,
  "failure_origin": null,
  "evidence_strength": "readme_checked",
  "works": "yes",
  "install_s": null,
  "first_use_s": null,
  "mcp": "none",
  "needs": [],
  "needs_which": null,
  "agent_interface": [
    "cli"
  ],
  "license": "MIT",
  "repo_url": "https://github.com/legendteddy/scan",
  "cost_to_try": "free",
  "hardware": null,
  "what_failed": null,
  "local_or_hosted": "local",
  "cycle_checks": [
    {
      "kind": "cycle",
      "claim": "Scheduled or looping main behavior",
      "source": "repository entry points",
      "input": "source inspection",
      "expected": "identify the product trigger",
      "verdict": "yes",
      "outcome": "Inspected README.md and CLI entrypoints; Scan runs on explicit command invocation and documents no scheduler, recurring loop, webhook, or cycle trigger.",
      "evidence": "Inspected README.md and CLI entrypoints; Scan runs on explicit command invocation and documents no scheduler, recurring loop, webhook, or cycle trigger.",
      "command": ""
    }
  ],
  "claims": [
    {
      "kind": "claim",
      "claim": "Scan inventories a local project and creates canonical Scan state and an HTML report.",
      "source": "It can inventory a local project, create canonical Scan 1.4 JSON",
      "input": "/tmp/scan-target",
      "expected": "Scan state 1.4 written to .scan/state.json",
      "command": "/tmp/scan-venv/bin/scan /tmp/scan-target --offline",
      "verdict": "yes",
      "outcome": "Real input produced the expected result: Scan state 1.4 written to .scan/state.json",
      "evidence": "Scan state 1.4 written to .scan/state.json\nReport written to .scan/report.html\nSnapshot: sha256:de814f7663a36828fe3ad305c210aa7e1c14e257e12cbdd4af2bb1e36af395ac\nMode: deep | artifacts: 1 | completion: partial\nBaseline: used\nEvidence: 1 fresh | 0 reused | 0 reuse rejected\nSince baseline: artifacts +0 ~0 -0 =1; findings +0 -0; unknowns +0 -0\n",
      "returncode": 0,
      "source_checked": true,
      "source_file": "README.md"
    }
  ],
  "claims_note": null,
  "example_checks": [
    {
      "kind": "example",
      "claim": "Run an offline scan of a local project",
      "source": "README.md / Start here: run Scan locally",
      "input": "/tmp/scan-target",
      "command": "/tmp/scan-venv/bin/scan /tmp/scan-target --offline",
      "evidence": "Scan state 1.4 written to .scan/state.json\nReport written to .scan/report.html\nSnapshot: sha256:de814f7663a36828fe3ad305c210aa7e1c14e257e12cbdd4af2bb1e36af395ac\nMode: deep | artifacts: 1 | completion: partial\nBaseline: used\nEvidence: 1 fresh | 0 reused | 0 reuse rejected\nSince baseline: artifacts +0 ~0 -0 =1; findings +0 -0; unknowns +0 -0",
      "deferred": false,
      "expected": "state and report written",
      "returncode": 0,
      "verdict": "yes",
      "outcome": "command completed successfully"
    }
  ],
  "does_what_it_says": "yes",
  "maintenance": {
    "archived": false,
    "commits_90d": 73,
    "last_commit_at": "2026-10-28T11:07:49Z",
    "last_release_at": "2026-10-28T10:38:16Z",
    "median_reply_hours": null,
    "merged_prs_90d": 27,
    "note": "actively maintained: last commit 0 days ago; 73 commits and 27 merged PRs in 90 days; 0 open issues, 0 open PRs; latest release 2026-10-28",
    "open_issues": 0,
    "open_prs": 0,
    "reply_share": null,
    "reply_threads": 0,
    "verdict": "maintained"
  },
  "maintenance_verdict": "maintained",
  "maintenance_note": "actively maintained: last commit 0 days ago; 73 commits and 27 merged PRs in 90 days; 0 open issues, 0 open PRs; latest release 2026-10-28",
  "maintained": "active",
  "maintained_note": "last commit 0 days ago; 0 open issues, 7 answered or closed",
  "last_commit_at": "2026-10-28T11:07:49Z",
  "last_release_at": "2026-10-28T10:38:16Z",
  "open_issues": 0,
  "answered_issues": 7,
  "platforms_claimed": [
    "windows"
  ],
  "topic": "agent-harness",
  "agent_interfaces": [
    {
      "interface": "mcp",
      "evidence": "README metadata",
      "observed": false,
      "operation_checked": false
    },
    {
      "interface": "cli",
      "evidence": "independent checker",
      "observed": true,
      "operation_checked": true
    }
  ],
  "agent_interfaces_note": "README metadata is a discovery hint, not pinned documentation proof. Observed interfaces were exercised in this run. An empty list means unknown.",
  "mcp_context": null,
  "tested_at": "2026-10-28T11:22:03.200375+00:00",
  "tested_commit": "864770cba43d91bd1997e074a7056c3246c3cf8d",
  "tested_with": {
    "agent": "codex",
    "agent_version": "codex-cli 0.164.0",
    "model": "gpt-6-luna",
    "model_route": "gpt-6-luna",
    "reasoning": "low",
    "os": "linux",
    "backend": "hyperv",
    "transport": "mcp-assigned-vm"
  },
  "setup_identity": {
    "repo": "legendteddy/scan",
    "source": "https://github.com/legendteddy/scan",
    "commit": "864770cba43d91bd1997e074a7056c3246c3cf8d",
    "source_revision": null,
    "os": "linux",
    "architecture": null,
    "backend": "hyperv",
    "model": "gpt-6-luna",
    "model_version": "gpt-6-luna",
    "agent_execution": "native_agent",
    "agent_runtime": "codex",
    "agent_runtime_version": "codex-cli 0.164.0",
    "tool_transport": "mcp-assigned-vm",
    "runtime": null,
    "runtime_version": null,
    "runtime_revision": null,
    "sandbox_source": null,
    "guest_setup": null,
    "source_pin": {
      "commit": "864770cba43d91bd1997e074a7056c3246c3cf8d",
      "url": "https://github.com/legendteddy/scan"
    },
    "platform_details": {
      "os": "linux",
      "backend": "hyperv"
    },
    "platform_conflicts": null,
    "reasoning": "low",
    "service_tier": "standard",
    "resources": {
      "cpus": 2,
      "memory_mib": 4096,
      "disk_mib": 32768
    },
    "operation": "Offline scan of a local project, plus optional MCP bridge readiness",
    "operation_scope": "product operation",
    "hosting": null,
    "kind": "repo",
    "test_version": "readme-604d73685be33b2939b2632791fb1de37972f659febb28a139c60d6e81057c18",
    "evidence_version": null
  },
  "other_model": null,
  "other_run_id": null,
  "models_agree": null,
  "furthest_model": null,
  "transcript_url": "/transcripts/legendteddy--scan-gpt-6-luna-1793186381647759932.txt",
  "report_url": "/reports/legendteddy--scan-gpt-6-luna-1793186381647759932.json"
}