track: 2026-07-06 — 37 tracked, 41 case-study ready, 3 rule-adopted

auditor/disagreements.jsonl

@@ -194,3 +194,4 @@
 {"event":"self_false_positive","timestamp":"2026-07-04T19:20:59Z","repo":"volcengine/OpenViking","fingerprint":"sha256:577c4ea0e5762164c12321e221724802062e2f2169893fd7cb3d4b970ca43964","rule_id":"SEC-postinstall-script","reason":"Content verified line-by-line; no download-execute, no network call, only local --version checks and a printed usage banner","rule_gap":"Postinstall-presence pattern matching should distinguish diagnostic-only scripts (execFileSync with fixed args, no network) from actual install/fetch logic"}
 {"event": "downstream_suppression", "timestamp": "2026-07-05T00:24:16Z", "repo": "xiaolai/cc-suite", "commit_sha": "29f58387b23e58e0efd846bd3cbe1530ff705fc3", "rule_id": "R31", "suppression_type": "threshold_adjustment", "fingerprint": "sha256:5e4e112690bf8b8438cde784b04570ad30da2c286829c215ddbfc5cf2d29144d", "file_fingerprint": "sha256:6fbc70dd29953c20605dc8220ab33daa85634bc2ea192ae89a4c3a4430020e77", "path": ".claude/nlpm.local.md", "override_value": {"threshold": 900}, "reason_given": ""}
 {"event": "downstream_suppression", "timestamp": "2026-07-05T00:24:16Z", "repo": "xiaolai/cc-suite", "commit_sha": "29f58387b23e58e0efd846bd3cbe1530ff705fc3", "rule_id": "R51", "suppression_type": "rule_override", "fingerprint": "sha256:4b14fb660f7b4dd470c7d01eb5a2df95caf1f7b4ae22fdc6a8381407c2813118", "file_fingerprint": "sha256:6fbc70dd29953c20605dc8220ab33daa85634bc2ea192ae89a4c3a4430020e77", "path": ".claude/nlpm.local.md", "override_value": {"enabled": true, "vocabulary_skill": "skills/cc-suite/vocabulary/"}, "reason_given": ""}
+{"event":"pr_comments_snapshot","timestamp":"2026-07-06T03:46:53Z","pr":"fivetaku/fablize#7","pr_state":"closed_unmerged","comments_hash":"sha256:f1533ac41ee0cd6807e6a8da79dc36c730fc92c4e5be2a991786f14c21d0e71c","fingerprints":["sha256:ffe6da25c7de61c78fc3a13bdab8492a24ba108f67d5ba57b7d55990608f654f"],"rule_ids":["BUG-missing-frontmatter"],"comments":[{"id":"IC_kwDOS6KUxs8AAAABI11jDQ","author":{"login":"fivetaku"},"authorAssociation":"OWNER","body":"Thanks for the PR. I checked the premise on a live install before deciding: on a session running this exact `plugin.json` (no `commands` entry, installed via a local marketplace path), `/fablize:setup` is loaded and reachable — Claude Code auto-discovers commands from the `commands/` directory, so explicit registration isn't required.\n\nClosing as not needed. If a Claude Code version stops auto-discovering (or this turns out to differ for remote marketplace installs), happy to revisit — reproduction steps welcome.","createdAt":"2026-07-06T01:05:14Z","includesCreatedEdit":false,"isMinimized":false,"minimizedReason":"","reactionGroups":[],"url":"https://github.com/fivetaku/fablize/pull/7#issuecomment-4888290061","viewerDidAuthor":false}]}

auditor/logs/events.jsonl

@@ -3122,3 +3122,6 @@
 {"timestamp":"2026-07-05T21:10:50Z","workflow":"track","event":"status_check","run_id":"28754792220","run_number":472,"data":{"contributed":53,"tracked":36,"case_study_ready":40,"rule_adopted":3}}
 {"timestamp":"2026-07-05T22:55:45Z","workflow":"daily-report","event":"report_generated","run_id":"28757745713","run_number":93,"data":{"total_repos":264}}
 {"timestamp":"2026-07-05T23:32:58Z","workflow":"dashboard","event":"dashboard_rendered","run_id":"28758719083","run_number":49,"data":{"repos":264,"findings":4256,"advisories":22}}
+{"timestamp":"2026-07-06T03:46:53Z","workflow":"track","event":"finding_outcome","run_id":"28766288075","run_number":473,"data":{"pr":"fivetaku/fablize#7","pr_state":"closed_unmerged","fingerprints":["sha256:ffe6da25c7de61c78fc3a13bdab8492a24ba108f67d5ba57b7d55990608f654f"],"rule_ids":["BUG-missing-frontmatter"]}}
+{"timestamp":"2026-07-06T03:46:54Z","workflow":"track","event":"finding_outcome","run_id":"28766288075","run_number":473,"data":{"pr":"fivetaku/fablize#8","pr_state":"merged","fingerprints":[],"rule_ids":[]}}
+{"timestamp":"2026-07-06T03:51:14Z","workflow":"track","event":"status_check","run_id":"28766288075","run_number":473,"data":{"contributed":52,"tracked":37,"case_study_ready":41,"rule_adopted":3}}

auditor/registry/repos.json

@@ -4180,13 +4180,13 @@
       "prs": [
         {
           "number": 7,
-          "state": "OPEN",
+          "state": "CLOSED",
           "mergedAt": null,
-          "closedAt": null,
+          "closedAt": "2026-07-06T01:05:15Z",
           "title": "fix: register setup command in plugin.json",
-          "updatedAt": "2026-06-27T01:46:39Z",
+          "updatedAt": "2026-07-06T01:05:15Z",
           "createdAt": "2026-06-27T01:46:39Z",
-          "outcome": "open",
+          "outcome": "rejected",
           "fingerprints": [
             "sha256:ffe6da25c7de61c78fc3a13bdab8492a24ba108f67d5ba57b7d55990608f654f"
           ],
@@ -4197,13 +4197,13 @@
         },
         {
           "number": 8,
-          "state": "OPEN",
-          "mergedAt": null,
-          "closedAt": null,
+          "state": "MERGED",
+          "mergedAt": "2026-07-06T00:37:41Z",
+          "closedAt": "2026-07-06T00:37:41Z",
           "title": "fix: validate transcript_path prefix before opening in finish-the-work.sh",
-          "updatedAt": "2026-06-27T01:50:07Z",
+          "updatedAt": "2026-07-06T00:37:41Z",
           "createdAt": "2026-06-27T01:47:57Z",
-          "outcome": "open",
+          "outcome": "merged",
           "fingerprints": [],
           "rule_ids": [],
           "stale_90d_emitted": false
@@ -4213,8 +4213,9 @@
       "score": 95,
       "security": "CLEAR",
       "stars": 648,
-      "status": "contributed",
-      "strategy": "single"
+      "status": "tracked",
+      "strategy": "single",
+      "case_study_candidate": true
     },
     "forrestchang/andrej-karpathy-skills": {
       "artifacts": null,