voodoomods/hypgraph

No problems traced to this repository code in these checks.

Reviewed as expected for a test run: attempted writes that failed, so nothing was written.

OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check.

A short run cannot establish that code is safe.

Connections show IP addresses; proxies can hide the final hostname.

Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.

Full safety evidence →

• bound reports what 0 of 50 supports for a never claim: Real input produced the expected result: 0 of 50

  Source: `hypgraph bound 0 50 --exposure 1e6` (or the MCP tool `bound`) answers

  Input: {"tool": "bound", "arguments": {"k": 0, "n": 50, "exposure": 1000000}}

  Expected: rate 0% with 95% interval up to 5.8%

  Command: <guest-path> --db <guest-path> --as claude mcp tools/call {"tool": "bound", "arguments": {"k": 0, "n": 50, "exposure": 1000000}}

  Observed: …0 of 50 observed: rate 0% (95% interval 0% to 5.8%)\n'never' here means: at most 5.8% — 1 in 20 — at 95% confidence\n to bound it below 1 in 100: about 299 trials with none\n to bound it below 1 in 1,000: about 2,995 trials with none\n to bound it below 1 in 10,000: about 29,956 trials with none\nacross 1,000,000 uses: up to 58,155 not ruled out (95%)", "type": "text"}], "isError": false, "structuredContent": {"result": "0 of 50 observed: rate 0% (95% interval 0% to 5.8%)\n'never' here means: at most 5.8% — 1 in 20 — at 95% confidence\n to bound it below 1 in 100: about 299 trials with non

• hypgraph bound prints the 95% upper bound for 0 of 50: Real input produced the expected result: 0 of 50 observed: rate 0% (95% interval 0% to 5.8%)

  Source: `hypgraph bound 0 50 --exposure 1e6` (or the MCP tool `bound`) answers

  Input: 0 50 --exposure 1e6

  Expected: 0 of 50 observed with interval up to 5.8%

  Command: <guest-path> bound 0 50 --exposure 1e6

  Observed: 0 of 50 observed: rate 0% (95% interval 0% to 5.8%) 'never' here means: at most 5.8% — 1 in 20 — at 95% confidence to bound it below 1 in 100: about 299 trials with none to bound it below 1 in 1,000: about 2,995 trials with none to bound it below 1 in 10,000: about 29,956 trials with none across 1,000,000 uses: up to 58,155 not ruled out (95%)

• hypgraph report generates the facts from the record: Real input produced the expected result: Facts from the research graph

  Source: hypgraph report # the facts, generated from the record

  Input: research.hypgraph from demo

  Expected: a facts section listing claims and results

  Command: <guest-path> --db <guest-path> report

  Observed: …Facts from the research graph — INV1 How does cholera spread? Broad Street, 1854 (active) _Generated from the record at event 59; do not edit — regenerate it from the graph. Interpretation goes below this section._ ### Claims | claim | standing | review | verdicts | statement | |---|---|---|---|---| | CL1 v2 | active | checked | whitehead: objection (RV1, on v1); whitehead: resolved (RV2, on v1); whitehead: replicated (RV3, on v1); whitehead: checked (RV4, on v2) | The Golden Square outbreak was spread by water from the Broad Street pump: those who drank it died, while 5 of the 535 workhouse

Examples

• demo builds a worked investigation, and refusals are logged: command completed successfully

  Source: README.md Try it / Every refusal is also logged

  Input: research.hypgraph from hypgraph demo

  Expected: refusals listed per author

  Command: <guest-path> --db <guest-path> refusals

  Observed: EXCLUSION_WITHOUT_POWER ×1, EVIDENCE_MISSING ×1, SCOPE_MISSING ×1 | | rule | times | |---|---| | `EXCLUSION_WITHOUT_POWER` | 1 | | `EVIDENCE_MISSING` | 1 | | `SCOPE_MISSING` | 1 | | `ABSOLUTE_WITHOUT_COUNT` | 1 | ### Latest - 1854-11-20T10:00 **you**: “The water-company comparison rules out the miasma theory.” — EXCLUSION_WITHOUT_POWER → not fixed - 1854-09-08T10:00 **you**: “Removing the pump handle ended the epidemic.” — EVIDENCE_MISSING, SCOPE_MISSING → not fixed - 1854-09-07T10:00 **you**: “Every death in the outbreak was near the Broad Street pump.” — ABSOLUTE_WITHOUT_COUNT → not fixed

Local or hosted: local

Install HypGraph from the pinned source and run its README quickstart: hypgraph demo, report, bound, refusals, and the MCP bound tool

cd <guest-path> && pwd && ls -la && git status 2>&1 | head -3; id -u; python3 --version; cat README.md 2>/dev/null | head -150
echo $CDP_URL; curl -s -m 10 -i $CDP_URL/json/version; echo; ls <guest-path>; ls /inputs 2>&1
cd <guest-path> && sed -n 150,400p README.md | cut -c1-400
cd <guest-path> && grep -n -i "install\|quick\|pip \|python" README.md | cut -c1-300 | head -40; grep -n "requires-python" pyproject.toml; ls .coldpass dev src tests
mkdir -p <guest-path> && cd <guest-path> && python3 -m venv <guest-path> && <guest-path> install -q --upgrade pip 2>&1 | tail -3; <guest-path> install "<guest-path>" 2>&1 | tail -5; <guest-path> --help 2>&1 | head -60
mkdir -p <guest-path> && cd <guest-path> && <guest-path> demo 2>&1 | head -40; echo "rc=${PIPESTATUS[0]}"; ls -la <guest-path>
cd <guest-path> && H=<guest-path>; $H --db research.hypgraph report 2>&1 | head -30; echo ---; $H bound 0 50 --exposure 1e6 2>&1; echo "rc=$?"; echo ---; $H --db research.hypgraph refusals 2>&1 | head -15
cd <guest-path> && grep -n "hypgraph bound\|hypgraph demo  \|no dependencies\|pip install hypgraph" README.md | cat -A | cut -c1-250; echo ---; grep -rn "def bound\|def _bound\|\"bound\"" src/hypgraph/*.py | head; echo ---; grep -rln -i "cron\|schedule\|webhook\|while True\|--once\|--now" src | head
cd <guest-path> && grep -n -i "cron\|schedule\|webhook\|while True\|--once\|--now" src/hypgraph/server.py src/hypgraph/coord.py src/hypgraph/bundle.py | cut -c1-220 | head -20; echo ---; grep -n "^def \|^async def " src/hypgraph/mcp.py | head -5; sed -n 440,460p src/hypgraph/mcp.py | cut -c1-200
cd <guest-path> && sed -n 1,12p src/hypgraph/coord.py | cut -c1-200; sed -n 232,250p src/hypgraph/coord.py | cut -c1-200; grep -n "coord" src/hypgraph/cli.py | head -5
cd <guest-path> && grep -n "hypgraph report  \|hypgraph refusals" README.md | cat -A | cut -c1-200; cat > .coldpass/probe.json <<'EOF'
{"kind":"mcp","argv":["<guest-path>","--db","<guest-path>","--as","claude","mcp"],"cwd":"<guest-path>","tool":"bound","arguments":{"k":0,"n":50,"exposure":1000000},"expected_text":"0 of 50"}
EOF
python3 -I -c 'import json;print(json.load(open("<guest-path>"))["tool"])'
cd <guest-path> && cat > .coldpass/claims.json <<'EOF'
[{"kind":"claim","claim":"bound reports what 0 of 50 supports for a never claim","source":"`hypgraph bound 0 50 --exposure 1e6` (or the MCP tool `bound`) answers","input":"k=0 n=50 exposure=1e6","expected":"rate 0% with 95% interval up to 5.8%","probe_kind":"mcp","argv":["<guest-path>","--db","<guest-path>","--as","claude","mcp"],"tool":"bound","arguments":{"k":0,"n":50,"exposure":1000000},"expected_text":"0 of 50","cwd":"<guest-path>"},
{"kind":"claim","claim":"hypgraph bound prints the 95% upper bound for 0 of 50","source":"`hypgraph bound 0 50 --exposure 1e6` (or the MCP tool `bound`) answers","input":"0 50 --exposure 1e6","expected":"0 of 50 observed with interval up to 5.8%","probe_kind":"cli","argv":["<guest-path>","bound","0","50","--exposure","1e6"],"cwd":"<guest-path>","expected_text":"0 of 50 observed: rate 0% (95% interval 0% to 5.8%)"},
{"kind":"claim","claim":"hypgraph report generates the facts from the record","source":"hypgraph report      # the facts, generated from the record","input":"research.hypgraph from demo","expected":"a facts section listing claims and results","probe_kind":"cli","argv":["<guest-path>","--db","<guest-path>","report"],"cwd":"<guest-path>","expected_text":"Facts from the research graph"}]
EOF
cat > .coldpass/examples.json <<'EOF'
[{"kind":"example","claim":"demo builds a worked investigation, and refusals are logged","source":"README.md Try it / Every refusal is also logged","input":"research.hypgraph from hypgraph demo","expected":"refusals listed per author","argv":["<guest-path>","--db","<guest-path>","refusals"],"cwd":"<guest-path>","expected_text":"Overclaims caught"}]
EOF
<env-var>=<guest-path> python3 -I <guest-path> --validate --replay 2>&1 | tail -60
cd <guest-path> && cat > .coldpass/cycles.json <<'EOF'
{"detected":false,"reason":"Inspected README.md and src/hypgraph entry points (cli.py commands, mcp.py tools, server.py, coord.py). No cron, scheduler, --once/--now, or polling loop is documented. The only while-True loops are the SSE stream in server.py (GET /api/graph/stream), a helper walking supersedes chains in coord.py, and a coord.py loop over replaced orders; none is a product trigger cycle.","checks":[]}
EOF
cat > .coldpass/report.json <<'EOF'
{"outcome":"working","fault_owner":null,"operation":"Install HypGraph from the pinned source and run its README quickstart: hypgraph demo, report, bound, refusals, and the MCP bound tool","operation_scope":"Linux guest, Python 3.12.3 venv at <guest-path> (README requires Python >=3.10). Read-only operations on the demo graph; no external services, browser, or credentials used. CDP endpoint responded HTTP 200 but was not needed.","steps":["python3 -m venv <guest-path>","pip install \"hypgraph[mcp]\" (from pinned checkout <guest-path>)","hypgraph demo (built research.hypgraph in <guest-path>, exit 0)","hypgraph --db research.hypgraph report","hypgraph bound 0 50 --exposure 1e6","hypgraph --db research.hypgraph refusals","hypgraph --db research.hypgraph --as claude mcp, MCP tool bound(k=0,n=50,exposure=1000000)"],"deviations":["README says pip install hypgraph (PyPI); installed the pinned local checkout with the [mcp] extra instead so the tested code is the pinned commit.","hypgraph demo writes to the current directory, so it was run in <guest-path> rather than the checkout to keep the workspace clean.","hypgraph serve (the web UI) was not started; the README quickstart lists it but it is an interactive long-running server and was not needed to exercise the product."],"stuck_step":null,"main_blocker":null,"plain_failure":null,"suggested_fix":"None required for this run. No README-documented cycle or scheduler exists, so no cycle check was run."}
EOF
python3 -I -c 'import json;[json.load(open("<guest-path>"+f)) for f in ["report.json","cycles.json","examples.json","claims.json","probe.json"]];print("json ok")'; <env-var>=<guest-path> python3 -I <guest-path> --validate --replay 2>&1 | python3 -I -c 'import json,sys; d=json.load(sys.stdin); print(d["valid"], d["problems"], d["replay"]["status"])' 2>&1 | tail -5