legendteddy/scan

No problems traced to this repository code in these checks. 3 static matches retained as context.

Reviewed as expected for a test run: attempted writes that failed, so nothing was written.

3 hardcoded secret matches retained as context; full list in the evidence.

OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check.

A short run cannot establish that code is safe.

Connections show IP addresses; proxies can hide the final hostname.

Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.

Full safety evidence →

• Egress preview performs no network action: Real input produced the expected result: "network_action":"none"

  Source: `scan egress` is preview-only: it reports selected/omitted files, selected bytes and redaction counts, and performs **no network action**.

  Input: scan egress . --privacy controlled-remote --redact strict --json

  Expected: JSON reports network_action none

  Command: <guest-path> egress . --privacy controlled-remote --redact strict --json

  Observed: …"network_action":"none","privacy_mode":"controlled-remote","redaction_count":63,"sensitive_paths_omitted":0}

• Render writes an HTML report from canonical state: Real input produced the expected result: project-anatomy-state

  Source: scan render .scan/state.json --output .scan/rerendered.html

  Input: .scan/state.json rendered to <guest-path>

  Expected: HTML file contains the inert project-anatomy-state block

  Command: <guest-path> render .scan/state.json --output <guest-path>

  Observed: …project-anatomy-state</code>. It preserves the documented snapshot; original source bytes may still be needed.</p></footer> </main> <script type="application/json" id="project-anatomy-state">{"actions":[],"artifacts":[{"content_identity":"directory","evidence_ids":["evidence:69077515d46a71d80b78"],"id":"artifact:2a8e53b184b6a5e7d8d6","inspected_at":"2026-10-28T11:15:45Z","inspection_origin":"fresh","locator":".coldpass","media_type":"inode/directory","path_kind":"directory","reason":"filesystem metadata inventoried","redaction_count":0,"redaction_state":"none","size_bytes":0,"status":"metadata

• SARIF export writes SARIF 2.1.0 from canonical state: Real input produced the expected result: "version":"2.1.0"

  Source: scan sarif .scan/state.json --output .scan/results.sarif

  Input: .scan/state.json exported to <guest-path>

  Expected: SARIF file declares version 2.1.0

  Command: <guest-path> sarif .scan/state.json --output <guest-path>

  Observed: …"version":"2.1.0"}

Examples

• ScanBench runs the 12 mandatory adversarial fixtures: command completed successfully

  Source: README.md / Scan modes and ScanBench v1

  Input: scan bench

  Expected: dimension results PASS

  Command: <guest-path> bench

  Observed: PASS clean-minimal PASS hidden-files PASS symlink-escape PASS prompt-injection PASS secret-redaction PASS malformed-filename PASS unreadable-artifact PASS archive-boundary PASS unsupported-binary PASS generated-and-vendor PASS incomplete-discovery PASS false-runtime-claim Dimensions PASS inventory completeness PASS state integrity PASS evidence correctness PASS privacy integrity PASS safety-boundary compliance No blended overall quality score is calculated.

• Historical demo report passes the structural contract: command completed successfully

  Source: README.md / Historical synthetic proof

  Input: examples/demo-report.html

  Expected: PASS structure check

  Command: <guest-path> scripts/validate_report.py examples/demo-report.html

  Observed: PASS: Scan 1.2 structure, typed references, artifact/check coverage, reuse and control evidence; semantic/visual review still required

• Generated demo HTML matches the committed version: command completed successfully

  Source: README.md / Historical synthetic proof

  Input: --check

  Expected: generated demo matches committed HTML

  Command: <guest-path> scripts/build_demo_report.py --check

  Observed: PASS: generated demo matches committed HTML PASS: Scan 1.2 structure, typed references, artifact/check coverage, reuse and control evidence; semantic/visual review still required

Local or hosted: local

Install Scan 0.4.0 from the pinned source and run its offline inspection CLI, including the preview-only egress command, state-driven HTML render and SARIF export, ScanBench, and the documented report validator and demo checks.

cd <guest-path> && ls -la && git status 2>&1 | head -3; cat README.md 2>/dev/null | head -150; python3 --version
cd <guest-path> && sed -n 150,400p README.md | cut -c1-400
cd <guest-path> && ls -la .coldpass; cat pyproject.toml | head -60; ls /inputs 2>&1; ls <guest-path> 2>&1
cd /tmp && python3 -m venv <guest-path> 2>&1 | tail -5; ls <guest-path> 2>&1 | head; <guest-path> --version
cd <guest-path> && <guest-path> -m pip install . 2>&1 | tail -8
cd <guest-path> && <guest-path> doctor . 2>&1 | tail -30; echo "EXIT=$?"
cd <guest-path> && <guest-path> . --offline 2>&1 | tail -30; echo "EXIT=${PIPESTATUS[0]}"; ls -la .scan 2>&1
cd <guest-path> && <guest-path> validate .scan/state.json 2>&1 | tail -15; echo "EXIT=${PIPESTATUS[0]}"; <guest-path> validate .scan/report.html 2>&1 | tail -5; echo "EXIT=${PIPESTATUS[0]}"; <guest-path> bench 2>&1 | tail -15; echo "EXIT=${PIPESTATUS[0]}"
cd <guest-path> && <guest-path> --help 2>&1 | head -60; <guest-path> compare --help 2>&1 | head -30
cd <guest-path> && S=<guest-path>; $S schema --version 1.4 2>&1 | head -c 400; echo; echo ---; $S egress . --privacy controlled-remote --redact strict --json 2>&1 | head -c 800; echo; echo "EXIT=${PIPESTATUS[0]}"; echo ---; $S compare .scan/state.json .scan/state.json --json 2>&1 | head -c 600; echo; echo "EXIT=${PIPESTATUS[0]}"
mkdir -p <guest-path> && cd <guest-path> && S=<guest-path>; $S render .scan/state.json --output <guest-path>; echo "EXIT=$?"; grep -o 'project-anatomy-state' <guest-path> | head -2; $S sarif .scan/state.json --output <guest-path>; echo "EXIT=$?"; head -c 300 <guest-path>; echo; ls -la <guest-path>
cd <guest-path> && grep -c 'performs \*\*no network action\*\*' README.md; grep -c '^scan render .scan/state.json --output .scan/rerendered.html$' README.md; grep -c 'scan sarif .scan/state.json --output .scan/results.sarif' README.md; grep -n 'scan compare previous-state.json' README.md | cut -c1-120; grep -o '"version":"2.1.0"' <guest-path>; grep -c 'Scan does not invent line numbers' README.md; grep -n 'network action' README.md | cut -c1-80
rm -f <guest-path> <guest-path> && cd <guest-path> && python3 -I scripts/validate_report.py examples/demo-report.html 2>&1 | tail -5; echo "EXIT=$?"; <guest-path> -m unittest discover -s scripts -p "test_*.py" 2>&1 | tail -4; echo "EXIT=${PIPESTATUS[0]}"; <guest-path> scripts/build_demo_report.py --check 2>&1 | tail -3; echo "EXIT=${PIPESTATUS[0]}"
cd <guest-path> && grep -rniE 'cron|schedul|--once|--now|webhook|while True|daemon|watch' src scripts README.md docs references 2>/dev/null | cut -c1-160 | head -20; echo ---; grep -n 'def main' -A3 src/scan_core/cli.py | head; grep -c "" src/scan_core/cli.py
cd <guest-path> && mkdir -p .coldpass && cat > .coldpass/claims.json <<'EOF'
[
  {"kind":"claim","claim":"Egress preview performs no network action","source":"`scan egress` is preview-only: it reports selected/omitted files, selected bytes and redaction counts, and performs **no network action**.","input":"scan egress . --privacy controlled-remote --redact strict --json","expected":"JSON reports network_action none","probe_kind":"cli","argv":["<guest-path>","egress",".","--privacy","controlled-remote","--redact","strict","--json"],"expected_text":"\"network_action\":\"none\"","cwd":"<guest-path>"},
  {"kind":"claim","claim":"Render writes an HTML report from canonical state","source":"scan render .scan/state.json --output .scan/rerendered.html","input":".scan/state.json rendered to <guest-path>","expected":"HTML file contains the inert project-anatomy-state block","probe_kind":"cli","argv":["<guest-path>","render",".scan/state.json","--output","<guest-path>"],"expected_file":"<guest-path>","expected_text":"project-anatomy-state","cwd":"<guest-path>"},
  {"kind":"claim","claim":"SARIF export writes SARIF 2.1.0 from canonical state","source":"scan sarif .scan/state.json --output .scan/results.sarif","input":".scan/state.json exported to <guest-path>","expected":"SARIF file declares version 2.1.0","probe_kind":"cli","argv":["<guest-path>","sarif",".scan/state.json","--output","<guest-path>"],"expected_file":"<guest-path>","expected_text":"\"version\":\"2.1.0\"","cwd":"<guest-path>"}
]
EOF
<guest-path> -m json.tool .coldpass/claims.json >/dev/null && echo OK
cd <guest-path> && cat > .coldpass/probe.json <<'EOF'
{"kind":"cli","argv":["<guest-path>","egress",".","--privacy","controlled-remote","--redact","strict","--json"],"cwd":"<guest-path>","expected_text":"\"network_action\":\"none\""}
EOF
cat > .coldpass/examples.json <<'EOF'
[
  {"kind":"example","claim":"ScanBench runs the 12 mandatory adversarial fixtures","source":"README.md / Scan modes and ScanBench v1","input":"scan bench","expected":"dimension results PASS","argv":["<guest-path>","bench"],"cwd":"<guest-path>","env":{},"expected_text":"PASS inventory completeness"},
  {"kind":"example","claim":"Historical demo report passes the structural contract","source":"README.md / Historical synthetic proof","input":"examples/demo-report.html","expected":"PASS structure check","argv":["<guest-path>","scripts/validate_report.py","examples/demo-report.html"],"cwd":"<guest-path>","env":{},"expected_text":"PASS: Scan 1.2 structure"},
  {"kind":"example","claim":"Generated demo HTML matches the committed version","source":"README.md / Historical synthetic proof","input":"--check","expected":"generated demo matches committed HTML","argv":["<guest-path>","scripts/build_demo_report.py","--check"],"cwd":"<guest-path>","env":{},"expected_text":"PASS: generated demo matches committed HTML"}
]
EOF
cat > .coldpass/cycles.json <<'EOF'
{"detected":false,"checks":[],"reason":"Inspected README.md and src/scan_core/cli.py, pyproject.toml scripts, and grepped src/scripts/docs/references for cron, schedule, --once, --now, webhook, daemon and watch. Scan is a one-shot CLI with no scheduler, loop or webhook trigger, so no product cycle exists to trigger."}
EOF
for f in probe examples cycles; do <guest-path> -m json.tool .coldpass/$f.json >/dev/null && echo "$f OK"; done
cd <guest-path> && <env-var>=<guest-path> python3 -I <guest-path> --validate --replay 2>&1 | tail -60; echo "EXIT=${PIPESTATUS[0]}"
cd <guest-path> && git init -q . && git remote add origin https://github.com/legendteddy/scan 2>&1; timeout 200 git fetch --depth 1 origin 864770cba43d91bd1997e074a7056c3246c3cf8d 2>&1 | tail -5; echo "FETCH=${PIPESTATUS[0]}"; git reset --mixed FETCH_HEAD 2>&1 | tail -3; git rev-parse HEAD 2>&1; git status --short 2>&1 | head -10
cd <guest-path> && cat > .coldpass/report.json <<'EOF'
{"outcome":"working","fault_owner":null,"operation":"Install Scan 0.4.0 from the pinned source and run its offline inspection CLI, including the preview-only egress command, state-driven HTML render and SARIF export, ScanBench, and the documented report validator and demo checks.","operation_scope":"Local Linux guest, Python 3.12.3 venv at <guest-path> (README requires Python 3.11+); no network, browser, credentials, optional MCP extra, or scheduler used. Scan is a one-shot CLI so no cycle exists.","steps":["python3 -m venv <guest-path>","<guest-path> -m pip install .","scan doctor . (PASS except expected WARN git-worktree before git init)","scan . --offline (385 artifacts, deep mode, partial completion, wrote .scan/state.json and report.html)","scan validate .scan/state.json (silent, exit 0)","scan egress . --privacy controlled-remote --redact strict --json (network_action none)","scan render .scan/state.json --output <fresh path> (HTML with project-anatomy-state)","scan sarif .scan/state.json --output <fresh path> (version 2.1.0)","scan bench (12 fixtures PASS)","python scripts/validate_report.py examples/demo-report.html (PASS)","python scripts/build_demo_report.py --check (PASS)","python -m unittest discover -s scripts -p test_*.py (28 tests OK)"],"deviations":["Source was already present, so the README git clone was replaced by the required git init, remote add, fetch --depth 1 of pinned commit 864770cb, and reset --mixed FETCH_HEAD.","pip install used a venv at <guest-path> because system Python is externally managed; product argv uses the absolute venv scan path.","Render and SARIF claims write to <guest-path> instead of the README's .scan paths so replay gets fresh destinations; the README command text is quoted as the source.","Optional MCP bridge (scan-mcp, [mcp] extra) was not installed or exercised; the CLI is the documented primary entrypoint.","The checker path given as /inputs/coldpass-preflight.py does not exist; used <guest-path> instead."],"stuck_step":null,"main_blocker":null,"plain_failure":null,"suggested_fix":"None required for this run."}
EOF
<guest-path> -m json.tool .coldpass/report.json >/dev/null && echo REPORT_OK; <env-var>=<guest-path> python3 -I <guest-path> --validate --replay 2>&1 | python3 -c 'import sys,json; d=json.loads(sys.stdin.read()); print("valid=",d["valid"],"problems=",d["problems"],"replay=",d["replay"]["status"])'