From b1254bdafbc20dc3c1d64fe5e4fa439a097078cf Mon Sep 17 00:00:00 2001 From: "nlpm-auditor[bot]" Date: Mon, 6 Jul 2026 03:51:14 +0000 Subject: [PATCH] =?UTF-8?q?track:=202026-07-06=20=E2=80=94=2037=20tracked,?= =?UTF-8?q?=2041=20case-study=20ready,=203=20rule-adopted?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- auditor/disagreements.jsonl | 1 + auditor/logs/events.jsonl | 3 +++ auditor/registry/repos.json | 23 ++++++++++++----------- 3 files changed, 16 insertions(+), 11 deletions(-) diff --git a/auditor/disagreements.jsonl b/auditor/disagreements.jsonl index ed5b1a893..810f9ac29 100644 --- a/auditor/disagreements.jsonl +++ b/auditor/disagreements.jsonl @@ -194,3 +194,4 @@ {"event":"self_false_positive","timestamp":"2026-07-04T19:20:59Z","repo":"volcengine/OpenViking","fingerprint":"sha256:577c4ea0e5762164c12321e221724802062e2f2169893fd7cb3d4b970ca43964","rule_id":"SEC-postinstall-script","reason":"Content verified line-by-line; no download-execute, no network call, only local --version checks and a printed usage banner","rule_gap":"Postinstall-presence pattern matching should distinguish diagnostic-only scripts (execFileSync with fixed args, no network) from actual install/fetch logic"} {"event": "downstream_suppression", "timestamp": "2026-07-05T00:24:16Z", "repo": "xiaolai/cc-suite", "commit_sha": "29f58387b23e58e0efd846bd3cbe1530ff705fc3", "rule_id": "R31", "suppression_type": "threshold_adjustment", "fingerprint": "sha256:5e4e112690bf8b8438cde784b04570ad30da2c286829c215ddbfc5cf2d29144d", "file_fingerprint": "sha256:6fbc70dd29953c20605dc8220ab33daa85634bc2ea192ae89a4c3a4430020e77", "path": ".claude/nlpm.local.md", "override_value": {"threshold": 900}, "reason_given": ""} {"event": "downstream_suppression", "timestamp": "2026-07-05T00:24:16Z", "repo": "xiaolai/cc-suite", "commit_sha": "29f58387b23e58e0efd846bd3cbe1530ff705fc3", "rule_id": "R51", "suppression_type": "rule_override", "fingerprint": "sha256:4b14fb660f7b4dd470c7d01eb5a2df95caf1f7b4ae22fdc6a8381407c2813118", "file_fingerprint": "sha256:6fbc70dd29953c20605dc8220ab33daa85634bc2ea192ae89a4c3a4430020e77", "path": ".claude/nlpm.local.md", "override_value": {"enabled": true, "vocabulary_skill": "skills/cc-suite/vocabulary/"}, "reason_given": ""} +{"event":"pr_comments_snapshot","timestamp":"2026-07-06T03:46:53Z","pr":"fivetaku/fablize#7","pr_state":"closed_unmerged","comments_hash":"sha256:f1533ac41ee0cd6807e6a8da79dc36c730fc92c4e5be2a991786f14c21d0e71c","fingerprints":["sha256:ffe6da25c7de61c78fc3a13bdab8492a24ba108f67d5ba57b7d55990608f654f"],"rule_ids":["BUG-missing-frontmatter"],"comments":[{"id":"IC_kwDOS6KUxs8AAAABI11jDQ","author":{"login":"fivetaku"},"authorAssociation":"OWNER","body":"Thanks for the PR. I checked the premise on a live install before deciding: on a session running this exact `plugin.json` (no `commands` entry, installed via a local marketplace path), `/fablize:setup` is loaded and reachable — Claude Code auto-discovers commands from the `commands/` directory, so explicit registration isn't required.\n\nClosing as not needed. If a Claude Code version stops auto-discovering (or this turns out to differ for remote marketplace installs), happy to revisit — reproduction steps welcome.","createdAt":"2026-07-06T01:05:14Z","includesCreatedEdit":false,"isMinimized":false,"minimizedReason":"","reactionGroups":[],"url":"https://github.com/fivetaku/fablize/pull/7#issuecomment-4888290061","viewerDidAuthor":false}]} diff --git a/auditor/logs/events.jsonl b/auditor/logs/events.jsonl index 718daa605..2e34ab7df 100644 --- a/auditor/logs/events.jsonl +++ b/auditor/logs/events.jsonl @@ -3122,3 +3122,6 @@ {"timestamp":"2026-07-05T21:10:50Z","workflow":"track","event":"status_check","run_id":"28754792220","run_number":472,"data":{"contributed":53,"tracked":36,"case_study_ready":40,"rule_adopted":3}} {"timestamp":"2026-07-05T22:55:45Z","workflow":"daily-report","event":"report_generated","run_id":"28757745713","run_number":93,"data":{"total_repos":264}} {"timestamp":"2026-07-05T23:32:58Z","workflow":"dashboard","event":"dashboard_rendered","run_id":"28758719083","run_number":49,"data":{"repos":264,"findings":4256,"advisories":22}} +{"timestamp":"2026-07-06T03:46:53Z","workflow":"track","event":"finding_outcome","run_id":"28766288075","run_number":473,"data":{"pr":"fivetaku/fablize#7","pr_state":"closed_unmerged","fingerprints":["sha256:ffe6da25c7de61c78fc3a13bdab8492a24ba108f67d5ba57b7d55990608f654f"],"rule_ids":["BUG-missing-frontmatter"]}} +{"timestamp":"2026-07-06T03:46:54Z","workflow":"track","event":"finding_outcome","run_id":"28766288075","run_number":473,"data":{"pr":"fivetaku/fablize#8","pr_state":"merged","fingerprints":[],"rule_ids":[]}} +{"timestamp":"2026-07-06T03:51:14Z","workflow":"track","event":"status_check","run_id":"28766288075","run_number":473,"data":{"contributed":52,"tracked":37,"case_study_ready":41,"rule_adopted":3}} diff --git a/auditor/registry/repos.json b/auditor/registry/repos.json index ab6360529..92d337446 100644 --- a/auditor/registry/repos.json +++ b/auditor/registry/repos.json @@ -4180,13 +4180,13 @@ "prs": [ { "number": 7, - "state": "OPEN", + "state": "CLOSED", "mergedAt": null, - "closedAt": null, + "closedAt": "2026-07-06T01:05:15Z", "title": "fix: register setup command in plugin.json", - "updatedAt": "2026-06-27T01:46:39Z", + "updatedAt": "2026-07-06T01:05:15Z", "createdAt": "2026-06-27T01:46:39Z", - "outcome": "open", + "outcome": "rejected", "fingerprints": [ "sha256:ffe6da25c7de61c78fc3a13bdab8492a24ba108f67d5ba57b7d55990608f654f" ], @@ -4197,13 +4197,13 @@ }, { "number": 8, - "state": "OPEN", - "mergedAt": null, - "closedAt": null, + "state": "MERGED", + "mergedAt": "2026-07-06T00:37:41Z", + "closedAt": "2026-07-06T00:37:41Z", "title": "fix: validate transcript_path prefix before opening in finish-the-work.sh", - "updatedAt": "2026-06-27T01:50:07Z", + "updatedAt": "2026-07-06T00:37:41Z", "createdAt": "2026-06-27T01:47:57Z", - "outcome": "open", + "outcome": "merged", "fingerprints": [], "rule_ids": [], "stale_90d_emitted": false @@ -4213,8 +4213,9 @@ "score": 95, "security": "CLEAR", "stars": 648, - "status": "contributed", - "strategy": "single" + "status": "tracked", + "strategy": "single", + "case_study_candidate": true }, "forrestchang/andrej-karpathy-skills": { "artifacts": null,