GrayCodeAI / hawk-core-contracts

Der aufgelöste Abhängigkeitssatz konnte für diesen Bericht nicht erhoben werden: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

{
  "data": {
    "repo": {
      "topics": [
        "contracts",
        "events",
        "findings",
        "go",
        "policy",
        "protobuf",
        "shared-library",
        "types",
        "zero-dependency",
        "ai",
        "graycode"
      ],
      "is_fork": false,
      "size_kb": 118,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Go": 100812,
        "Shell": 2208,
        "Makefile": 6103
      },
      "pushed_at": "2026-07-28T06:13:35Z",
      "created_at": "2026-06-21T04:31:45Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-28T06:09:32Z",
      "description": "Zero-dependency shared type definitions for the hawk ecosystem: findings, severity, events, policy verdicts, session state.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": null,
      "name": "GrayCode",
      "type": "Organization",
      "login": "GrayCodeAI",
      "company": null,
      "location": "India",
      "followers": 8,
      "avatar_url": "https://avatars.githubusercontent.com/u/260990539?v=4",
      "created_at": "2026-02-11T17:56:21Z",
      "is_verified": null,
      "public_repos": 23,
      "account_age_days": 166
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.1.9",
          "kind": "patch",
          "published_at": "2026-07-25T15:39:06Z"
        },
        {
          "tag": "v0.1.8",
          "kind": "patch",
          "published_at": "2026-07-22T17:31:22Z"
        },
        {
          "tag": "v0.1.7",
          "kind": "patch",
          "published_at": "2026-07-22T06:15:02Z"
        },
        {
          "tag": "v0.1.6",
          "kind": "patch",
          "published_at": "2026-07-16T17:04:15Z"
        },
        {
          "tag": "v0.1.4",
          "kind": "patch",
          "published_at": "2026-07-11T05:16:02Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "79dc0bd1751e7353a3fc04a48615487b810b0863",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'main' of https://github.com/GrayCodeAI/hawk-core-contracts",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-26T09:18:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d7514ea969f38317ff5d9d3b5a2df55423786d7e",
          "body": "Automated merge of feature branch into main",
          "is_bot": false,
          "headline": "Merge feature branch into main",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-26T08:57:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6a2e082132d0eb4e4ab2448e23ccb6bb7bb95c01",
          "body": null,
          "is_bot": false,
          "headline": "Merge main",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-26T08:19:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "273c510f557b102f5143ee27a42b9f62fd99fa18",
          "body": null,
          "is_bot": false,
          "headline": "feat: add NodeTypeSystem alias for backward compatibility",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-26T06:02:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a38dc3d53702109718199cd672a329bb4f424e06",
          "body": null,
          "is_bot": false,
          "headline": "feat: add NodeTypeOperations constant to graph contracts",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-26T03:59:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9516c8990e2b9f3c93a71c330718f7fa72188673",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'main' of https://github.com/GrayCodeAI/hawk-core-contracts",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-25T15:17:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7e468e0b9caa9180367745ac6cf859ea9f8927e8",
          "body": "Adds new NodeType constants for quality analysis and execution journal\nnodes used by the ecosystem architecture enhancements across inspect,\nsight, tok, and trace.",
          "is_bot": false,
          "headline": "feat(graph): add NodeTypeQuality and NodeTypeExecution constants (#20)",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-25T15:15:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1326373871408468b9300edd2023d34aa646b627",
          "body": "Adds new NodeType constants for quality analysis and execution journal\nnodes used by the ecosystem architecture enhancements across inspect,\nsight, tok, and trace.",
          "is_bot": false,
          "headline": "feat(graph): add NodeTypeQuality and NodeTypeExecution constants",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-25T14:44:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5937a10319fca0221f379ec2009f6820b3ff218d",
          "body": null,
          "is_bot": false,
          "headline": "fix: graph syntax error and type conversion (#19)",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-25T10:53:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "65be6c089f124aca990a092b9d0959ad97d92d70",
          "body": "feat: ecosystem architecture enhancements (Graph, Loop, Context, Harness)",
          "is_bot": false,
          "headline": "Merge pull request #18 from GrayCodeAI/feat/contract-test-coverage",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-25T10:14:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "267e0cae2ef095c9c9cb350b3259f9474652dde7",
          "body": "- Add robust Prompt Template engine with Go template support\n- Isolate prompt engineering logic into a core portable contract package",
          "is_bot": false,
          "headline": "feat: add prompt engineering template engine",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-25T07:45:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ddfc92ac4610d6e82a5f9e32fa6d0eb10f01cd1d",
          "body": "- Add NodeType enum (agent, tool, function, start, end, router)\n- Add NodeSpec, EdgeSpec, EdgeCondition, GraphSpec types\n- Update proto definitions to match\n- Add validation methods for new types",
          "is_bot": false,
          "headline": "feat: enhance graph contracts with LangGraph patterns",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-25T07:35:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d5b66713bed4073ff6ef008d29923b4a81d1b2cf",
          "body": "- Add graph/ package with graph implementation\n- Add proto/hawk/contracts/v1/graph.proto\n- Update README",
          "is_bot": false,
          "headline": "feat: add graph package and proto",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-25T07:01:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fb6d8c670b9d1449dad5bb520ca3542301d0b1bd",
          "body": "- types/severity_test.go: add TestSeverityString (all severity levels +\n  out-of-range → \"unknown\") and TestSeverityAtLeast (ordering comparisons).\n- types/finding_test.go: add TestFindingSliceSortOrder (severity-desc then\n  confidence-desc), TestFindingSliceFilterBySource,\n  TestFindingSliceFilterB\n[…]\ndence),\n  TestFindingSliceSummaryEmpty (zero-value guard), TestFindingFromSight,\n  TestFindingFromInspect.\n\nAll package tests pass (agent, events, llm, policy, review, sessions,\ntools, types, verify).",
          "is_bot": false,
          "headline": "feat(contracts): add tests for untested pure functions in types package",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-24T07:15:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "73de5a949518a1d8b37001f8662c0ba9a846dc02",
          "body": "…hods\n\nBoth Severity.String() and FinalizeErrorCode.String() checked only the upper\nbound (int(x) < len(names)) without a lower-bound check, so a negative enum\nvalue would pass the guard and panic on array indexing. Add int(x) >= 0 check.",
          "is_bot": false,
          "headline": "fix(types,tools): guard against negative-index panics in String() met…",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-23T14:44:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "05e19925c09ec1a40c56eda0c531c88b91f5e753",
          "body": "chore(release): hawk-core-contracts 0.1.8",
          "is_bot": false,
          "headline": "Merge pull request #17 from GrayCodeAI/release/v0.1.8",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-22T17:31:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dfb7088e79ba69c49b8c74ddd982456682e7d479",
          "body": "Tag the host-port alignment (EventStreamer, ToolCall aliases, llm.proto)\nas a proper module version so consumers can pin without pseudo-version\nunshallow issues in CI.",
          "is_bot": false,
          "headline": "chore(release): hawk-core-contracts 0.1.8",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-22T17:28:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fb8043eeb2265ccb0fb57195da2ef354d0ee951c",
          "body": "fix(llm): align host port, unify ToolCall, bump VERSION to 0.1.7",
          "is_bot": false,
          "headline": "Merge pull request #16 from GrayCodeAI/feat/llm-contract-alignment",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-22T17:24:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c6856529b230dcd71d20dfb06a6138b79c6875b2",
          "body": "Use helper parameters for type identity checks so staticcheck does not\nflag redundant typed var declarations.",
          "is_bot": false,
          "headline": "fix(llm): avoid ST1023 in ToolCall alias tests",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-22T17:22:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e6e6a41798bdfdb35393ee35f1cc2d25b5fd1971",
          "body": "Omit redundant typed var declarations so golangci-lint/staticcheck passes.",
          "is_bot": false,
          "headline": "fix(llm): satisfy staticcheck ST1023 in alias tests",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-22T17:17:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c65ecd3bf3a025fd787b7efc6c33d22a98bd3008",
          "body": "Correct VERSION (was stuck at 0.1.6 after the llm package release), alias\nToolCall/ToolResult to tools/, align CatalogHealth/DeploymentSummary/\nPreflight/ProviderStateSecurity with the eyrie facade, introduce pull-based\nEventStreamer on Generator.Stream, add llm.proto + unit tests, and document\nthe hawk↔eyrie port.",
          "is_bot": false,
          "headline": "fix(llm): align host port, unify ToolCall, bump VERSION to 0.1.7",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-22T16:53:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ee9a873ca9dd5fc3e88f284d53335a57810c937c",
          "body": null,
          "is_bot": false,
          "headline": "chore: add v0.1.7 changelog entry for llm/ package (#15)",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-22T06:14:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0a2bc991b9fc037dc444cf616cde2c69f7f1e737",
          "body": null,
          "is_bot": false,
          "headline": "chore(release): add tag-release.sh helper script (#14)",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-22T00:58:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "847e236343174e5dbfb1ac6cf60bc862eb0f171b",
          "body": null,
          "is_bot": false,
          "headline": "docs: add submodule workflow note (#13)",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-20T23:49:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1ec6be65e7d580433011259deb372ceaaba92c85",
          "body": "… (#12)\n\n* feat(llm): add canonical provider port contract\n\nSingle source of truth for the conversation DTOs and Provider interface\nthat hawk (product face) and eyrie (provider engine) speak across their\nboundary. Both sides alias to these types, eliminating the duplicated\nDTO definitions and the pe\n[…]\nch the engine's boundary form.\n\n\n* feat: add provider port interface and update types\n\n- Add ProviderPort interface for LLM provider abstraction\n- Update types for alias pattern consistency\n\n---------",
          "is_bot": false,
          "headline": "Merge feat/llm-port-contract: grow contract to subsume engine surface…",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-20T23:29:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "52b9e9ab31f7a5a46345eb5f35ad5d936082a77b",
          "body": "* Graphify integration: AGENTS.md + CLAUDE.md\n\n* fix: demote GitNexus heading to H2 (markdownlint MD025)",
          "is_bot": false,
          "headline": "Graphify integration: AGENTS.md + CLAUDE.md (#11)",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-18T17:27:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7bc9bc1a019ca04c33e0b05063cd6086eab84c6d",
          "body": "Ported from grok tools.proto finalization lifecycle and tool_meta identity\nenvelope. Hand-written Go stays source of truth; gen/ opt-in.\n\n- tool.proto: closed ToolNamespace enum (incl. ACP reserved), ToolMeta envelope,\n  FinalizeErrorCode, VersionWarning, FinalizeConfigViolation, and the\n  FinalizeT\n[…]\nhaviorPreset (Current/Legacy) back-compat, FinalizeResult,\n  ToolMeta, closed ToolNamespace with forward-safety parse (unknown ns errors).\n- additive-only version bump rule documented in proto header.",
          "is_bot": false,
          "headline": "feat(contracts): tool contract versioning + finalization (W1B)",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-16T13:31:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c8ec0fdcfa004cdeae74af94a58746bb738f8f55",
          "body": "Add stdlib-only agent package with SpawnRequest/SpawnResult, capability\nand isolation parse helpers, Normalize/Validate, and canonical hook event\nnames with vendor aliases. Bump to v0.1.6 and mirror types in\nproto/hawk/contracts/v1/agent.proto.",
          "is_bot": false,
          "headline": "feat(agent): add typed subagent spawn contracts (Year 0 PACK-01)",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-16T08:37:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b9d81300264b7ac936f5f67791e586caa150df5b",
          "body": "Only 3 consumers of this package exist today, all Go, already importing it\ndirectly — but the same class of drift this is meant to prevent has already\nhappened once: hawk-sdk-go independently hand-rolled its own ToolResult\nwith a field named tool_call_id, diverging from this repo's tool_use_id,\nbeca\n[…]\n.1.1 — and fixes\na real inaccuracy found while doing it: the v0.1.0 entry claimed sessions/\nexisted at initial release, but git history (git log --diff-filter=A) shows\nit was actually added in v0.1.2.",
          "is_bot": false,
          "headline": "Push local changes to main",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-16T00:55:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3cb72904b1987a2f78125a760473135170a8b9d4",
          "body": null,
          "is_bot": false,
          "headline": "docs: add development workflow instructions to AGENTS.md",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-14T12:02:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "31da33efbe3c99f47215df5f607797a0327ff6f0",
          "body": "chore(release): hawk-core-contracts 0.1.5",
          "is_bot": false,
          "headline": "chore(release): hawk-core-contracts 0.1.5",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-14T11:10:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c204482e28d98f1ce53ea8e18e677c00d1aff5ee",
          "body": null,
          "is_bot": false,
          "headline": "chore(release): hawk-core-contracts 0.1.5",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-14T03:48:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dc5c86869d636cc3e23d1c37d6fd11769968148b",
          "body": "The shared workflow template pinned trufflesecurity/trufflehog to a\ncommit SHA labeled \"main 2026-05-18\" — a floating branch reference\ndisguised as a pin, not an actual release. Repins to v3.95.9, the\ncurrent real trufflehog release. Companion fix to GrayCodeAI/hawk#96,\nwhich fixes the same issue at the template source.",
          "is_bot": false,
          "headline": "fix(ci): repin trufflehog to a real release tag (#7)",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-13T23:39:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e4670e951e1ee8eb9129ac81d841ae45849b19f8",
          "body": null,
          "is_bot": false,
          "headline": "ci: set coverage threshold to 60% (matches current suite)",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-11T05:44:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e054dc6894928918f5bf18941e0a47dd7d88bc7f",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump VERSION to 0.1.4",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-11T05:15:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f0e4373df738853fce50c9cd1a695ae7a49f9c80",
          "body": "refactor(docs): trim AGENTS.md to repo-specific conventions only",
          "is_bot": false,
          "headline": "chore: bump Go to 1.26.5, add 90% coverage threshold in CI",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-10T22:08:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f2479529bd3ad38c5ebe098dac9ba73eae5c8728",
          "body": "… single source of truth (#6)",
          "is_bot": false,
          "headline": "feat: add VERSION file and root version.go with //go:embed VERSION as…",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-08T17:40:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b5b837157fd7ea48fbeb567f371f8c4cf05b53a6",
          "body": "* chore: commit wip changes on feature/wip-20260705\n\n* chore: add missing documentation and standardize across ecosystem\n\n- Create AGENTS.md with 7 contract packages, scope rules, package guidelines\n- Create CODE_OF_CONDUCT.md (Contributor Covenant 2.1)\n- Create SECURITY.md with comprehensive securi\n[…]\nll instructions, package reference, migration history\n\n\n* feat: add VERSION file and root version.go with //go:embed VERSION as single source of truth\n\n* Policy and session contract updates\n\n---------",
          "is_bot": false,
          "headline": "Policy and session contract updates (#5)",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-08T17:40:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "04f1f54cd26fe05885926a4604c7dfee4bf5c0b7",
          "body": "chore: add MIT LICENSE",
          "is_bot": false,
          "headline": "Merge pull request #4 from GrayCodeAI/chore/add-license",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-04T23:30:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b0199c748b83193cf41d9ef9ba9d80d7bf9f2ee0",
          "body": "Contracts module is consumed by hawk, inspect, and sight but shipped\nwithout a license; adds MIT matching the rest of the ecosystem.",
          "is_bot": false,
          "headline": "chore: add MIT LICENSE",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-07-04T17:41:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "15dfbf357b125909580ce674c154cee91dcfe97c",
          "body": null,
          "is_bot": false,
          "headline": "ci: add github actions test workflow",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-06-29T17:58:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "562e4ccd2e8dbb132065580428d0e7c03302035c",
          "body": null,
          "is_bot": false,
          "headline": "feat(contracts): add sessions directory",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-06-28T16:21:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1369e558fa103dcf57c4059e45c168c56de652aa",
          "body": null,
          "is_bot": false,
          "headline": "chore: merge quality-hardening into main",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-06-26T13:16:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e52db7b3fbef7a8e24408ccb3e77c6e0d3ee7335",
          "body": "* ci: add CODEOWNERS and dependabot.yml\n\n* chore: remove dependabot.yml",
          "is_bot": false,
          "headline": "chore: add CODEOWNERS and dependabot.yml (#3)",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-06-26T01:13:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "75853a76d8faf639bc0413eebc4ada1c5abac060",
          "body": null,
          "is_bot": false,
          "headline": "chore: remove dependabot.yml",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-06-26T01:05:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c8eacd28ee49bf1854165d504bd8eb7454a2053b",
          "body": null,
          "is_bot": false,
          "headline": "ci: add CODEOWNERS and dependabot.yml",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-06-26T00:53:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d586806b139e72334dfac517120c37523ea3043d",
          "body": "Bumped go directive from 1.26 to 1.26.4 for ecosystem consistency",
          "is_bot": false,
          "headline": "chore: align Go version to 1.26.4 (#2)",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-06-25T09:13:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3d0a559206dc13e9bc57f4107c39cb37c94a2ee9",
          "body": "Adds SASTFusionResult type and SASTFusion field to Result so sight's\nSAST-LLM fusion outcome is preserved when crossing the contract boundary\ninstead of being silently dropped.",
          "is_bot": false,
          "headline": "feat(review): add SASTFusionResult to review contract (#1)",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-06-23T15:17:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f9989e563ef3931754ff4d197d49ee154fcc7391",
          "body": "Replace migration-era README framing with the current contract model and\nwhen engines should depend on this module.",
          "is_bot": false,
          "headline": "docs: describe hawk-core-contracts as the live cross-repo API",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-06-21T10:06:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "56b861964337df60aa786f83dae82a30abc6f927",
          "body": "Standalone leaf module holding the shared contracts for the Hawk ecosystem:\ntypes, review, verify, events, policy, and tools. Depends on nothing; consumed\nby hawk and the support engines by version.",
          "is_bot": false,
          "headline": "chore: initial commit of hawk-core-contracts module",
          "author_name": "Lakshman Patel",
          "author_login": "Patel230",
          "committed_at": "2026-06-21T04:13:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 5,
      "commits_last_year": 50,
      "latest_release_at": "2026-07-25T15:39:06Z",
      "latest_release_tag": "v0.1.9",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 6,
      "days_since_latest_release": 2,
      "mean_days_between_releases": 3.6
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 75,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/GrayCodeAI/hawk-core-contracts",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/GrayCodeAI/hawk-core-contracts",
          "is_deprecated": false,
          "latest_version": "v0.1.9",
          "repository_url": "https://github.com/GrayCodeAI/hawk-core-contracts",
          "versions_count": 9,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-25T15:15:18Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 2
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [
        "proto/hawk/contracts/v1/agent.proto",
        "proto/hawk/contracts/v1/events.proto",
        "proto/hawk/contracts/v1/finding.proto",
        "proto/hawk/contracts/v1/graph.proto",
        "proto/hawk/contracts/v1/llm.proto",
        "proto/hawk/contracts/v1/policy.proto",
        "proto/hawk/contracts/v1/review.proto",
        "proto/hawk/contracts/v1/sessions.proto",
        "proto/hawk/contracts/v1/severity.proto",
        "proto/hawk/contracts/v1/tool.proto",
        "proto/hawk/contracts/v1/verify.proto"
      ],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 14923,
      "source_files_sampled": 29,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        "AGENTS.md",
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 5524
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": null,
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 21,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "Patel230",
          "commits": 50,
          "avatar_url": "https://avatars.githubusercontent.com/u/17196758?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "release.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": null,
            "reason": "no pull request found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 6,
            "reason": "project has 2 contributing companies or organizations -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 10,
            "reason": "all dependencies are pinned",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "no SAST tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "79dc0bd1751e7353a3fc04a48615487b810b0863",
        "ran_at": "2026-07-28T07:44:13Z",
        "aggregate_score": 4.7,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-28T06:11:10Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-26T08:57:12Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/GrayCodeAI/hawk-core-contracts",
    "host": "github.com",
    "name": "hawk-core-contracts",
    "owner": "GrayCodeAI"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 55,
      "inputs": {
        "security": 47,
        "vitality": 74,
        "community": 31,
        "governance": 55,
        "engineering": 60
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 74,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 56,
            "inputs": {
              "commits_last_year": 50,
              "human_commit_share": 1,
              "days_since_last_push": 0,
              "active_weeks_last_year": 6
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "6/52 weeks with commits",
                "points": 4.2,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 6
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "50 commits in the last year",
                "points": 15.3,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 50
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 5,
              "latest_release_tag": "v0.1.9",
              "releases_from_tags": false,
              "days_since_latest_release": 2,
              "mean_days_between_releases": 3.6
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "5 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 2 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 2
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~3.6 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 3.6
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 31,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 55,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 16,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 72,
            "inputs": {
              "merged_prs": 21,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "21/21 decided PRs merged",
                "points": 38.2,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 21,
                      "decided": 21
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 48,
            "inputs": {
              "followers": 8,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "GrayCodeAI",
              "public_repos": 23,
              "account_age_days": 166
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "8 followers of GrayCodeAI",
                "points": 6.9,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 8,
                      "login": "GrayCodeAI"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "23 public repos, account ~0 yr old",
                "points": 11,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 23
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 0
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/GrayCodeAI/hawk-core-contracts"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 2
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 2 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 2
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "9 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 9
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 60,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 60,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "2 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "topics": [
                "contracts",
                "events",
                "findings",
                "go",
                "policy",
                "protobuf",
                "shared-library",
                "types",
                "zero-dependency",
                "ai",
                "graycode"
              ],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "11 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 11
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 47,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "ci_tests",
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 47,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 14,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 4,
              "scorecard_aggregate": 4.7
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "all dependencies are pinned",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "no SAST tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 3
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 71,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.92,
              "agent_instruction_files": [
                "AGENTS.md",
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 5524
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md, CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md, CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "46 of 50 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 46,
                      "sampled": 50
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 61,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 50",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 50
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "all dependencies are pinned",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 14923,
              "source_files_sampled": 29,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/29 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 29,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [],
              "has_mcp_signal": false,
              "api_schema_files": [
                "proto/hawk/contracts/v1/agent.proto",
                "proto/hawk/contracts/v1/events.proto",
                "proto/hawk/contracts/v1/finding.proto",
                "proto/hawk/contracts/v1/graph.proto",
                "proto/hawk/contracts/v1/llm.proto",
                "proto/hawk/contracts/v1/policy.proto",
                "proto/hawk/contracts/v1/review.proto",
                "proto/hawk/contracts/v1/sessions.proto",
                "proto/hawk/contracts/v1/severity.proto",
                "proto/hawk/contracts/v1/tool.proto",
                "proto/hawk/contracts/v1/verify.proto"
              ]
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": "proto/hawk/contracts/v1/agent.proto, proto/hawk/contracts/v1/events.proto, proto/hawk/contracts/v1/finding.proto, proto/hawk/contracts/v1/graph.proto, proto/hawk/contracts/v1/llm.proto, proto/hawk/contracts/v1/policy.proto, proto/hawk/contracts/v1/review.proto, proto/hawk/contracts/v1/sessions.proto, proto/hawk/contracts/v1/severity.proto, proto/hawk/contracts/v1/tool.proto, proto/hawk/contracts/v1/verify.proto",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "proto/hawk/contracts/v1/agent.proto, proto/hawk/contracts/v1/events.proto, proto/hawk/contracts/v1/finding.proto, proto/hawk/contracts/v1/graph.proto, proto/hawk/contracts/v1/llm.proto, proto/hawk/contracts/v1/policy.proto, proto/hawk/contracts/v1/review.proto, proto/hawk/contracts/v1/sessions.proto, proto/hawk/contracts/v1/severity.proto, proto/hawk/contracts/v1/tool.proto, proto/hawk/contracts/v1/verify.proto"
                    }
                  }
                ],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-28T07:44:19.313994Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/g/GrayCodeAI/hawk-core-contracts.svg",
  "full_name": "GrayCodeAI/hawk-core-contracts",
  "license_state": "standard",
  "license_spdx": "MIT"
}