Registro públicoEn riesgo
Informe de salud del softwareesquema 0.27.0 · métricas 1.13.0 · 2026-07-26 01:17 UTC
stateforward / hsm.go
HSM implementation in Go
stateforward/hsm.go tiene un índice de salud de 49 sobre 100, lo que lo sitúa en la banda En riesgo. Su puntuación más alta es Vitality (82/100) y la más baja, Community & Adoption (24/100). Se actualizó por última vez hace 6 días. Una sola persona concentra la mayor parte del trabajo reciente.
49
global / 100Índice de salud del software
Las métricas se agrupan en categorías ponderadas sobre una escala de 1 a 100. El resultado global parte de su media; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe el límite 49 (En riesgo). Preparación para IA queda fuera.
49
Excelente85-100Ejemplar; cumple prácticamente todos los criterios evaluados
Bueno70-84Saludable; carencias menores
Moderado50-69Aceptable con carencias notables; se recomienda revisión
En riesgo30-49Debilidades significativas; su adopción exige cautela
Crítico1-29Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
Perfil de puntuación
Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.
Titularidad
StateForwardOrganización
2 seguidores29 repositorios públicosdesde nov 2023
Este repositorio está respaldado por una organización: una custodia compartida y responsable que puede sobrevivir a cualquier mantenedor individual.
Ecosistemas de paquetes
| Registro | Paquete | Versión | Descargas / mes | Versiones | Última publicación |
|---|---|---|---|---|---|
| Go | github.com/stateforward/hsm.go | v1.3.2 | - | 21 | hace 6 días |
| Go | github.com/stateforward/hsm.go/kind | v1.0.0 | - | 1 | hace 173 días |
| Go | github.com/stateforward/hsm.go/muid | v1.0.0 | - | 1 | hace 173 días |
Métricas por categoría
Vitalidad
¿Está vivo el proyecto: se escribe código y se publican versiones?
82
Actividad de desarrollo
70Bueno
Cómo se puntúa
| 36/36 | Recencia de push — último push hace 6 días |
| 8.3/36 | Cadencia de commits — 12/52 semanas con commits |
| 18/18 | Volumen de commits — 150 commits en el último año |
| 8/10 | OpenSSF Scorecard: Maintained — 10 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 8 |
Datos de entrada utilizados
| commits_last_year | 150 |
| human_commit_share | 1 |
| days_since_last_push | 6 |
| active_weeks_last_year | 12 |
Disciplina de publicación
100Excelente
Cómo se puntúa
| 27/27 | Publica versiones — 20 versiones publicadas |
| 36/36 | Recencia de las versiones — última versión hace 6 días |
| 27/27 | Cadencia de publicación — una versión cada ~14,5 días |
| 0/10 | OpenSSF Scorecard: Signed-Releases — sin datos |
Datos de entrada utilizados
| releases_count | 20 |
| latest_release_tag | v1.3.2 |
| releases_from_tags | no |
| days_since_latest_release | 6 |
| mean_days_between_releases | 14,5 |
Excluidos de la puntuación (sin datos o no aplicable): OpenSSF Scorecard: Signed-Releases. Los pesos restantes se han renormalizado.
Comunidad y Adopción
¿Tiene el proyecto usuarios, descargas, atención y unas condiciones acogedoras para quienes contribuyen?
24
Popularidad y adopción
1Crítico
Cómo se puntúa
| 0/60 | Estrellas — 0 estrellas |
| 0/25 | Forks — 0 forks |
| 0/15 | Observadores — 0 observadores |
Datos de entrada utilizados
| forks | 0 |
| stars | 0 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Salud de la comunidad
50Moderado
Cómo se puntúa
| 22.5/22.5 | README |
| 22.5/22.5 | Licencia — licencia reconocida (MIT) |
| 0/18 | Guía CONTRIBUTING |
| 0/13.5 | Código de conducta |
| 0/7.2 | Plantilla de issues |
| 0/6.3 | Plantilla de PR |
Datos de entrada utilizados
| has_readme | sí |
| has_license | sí |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Sostenibilidad y Gobernanza
¿Sobrevivirá el proyecto a sus personas: factor bus, capacidad de respuesta, quién lo respalda y mantenimiento del paquete?
36
Cómo se puntúa
| 9/54 | Factor bus — la mitad de los commits recae en 1 contribuyente(s) |
| 0/22.5 | Distribución de commits — el principal contribuyente firma el 100% de los commits |
| 1.4/13.5 | Amplitud de contribuyentes — 1 contribuyentes |
| 0/10 | OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
Datos de entrada utilizados
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
Cómo se puntúa
| 0/46.8 | Resolución de issues — sin issues o sin datos |
| 0/38.3 | Aceptación de PR — sin PR decididos o sin datos |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Datos de entrada utilizados
| merged_prs | 0 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
Excluidos de la puntuación (sin datos o no aplicable): Resolución de issues, Aceptación de PR. Los pesos restantes se han renormalizado.
Propiedad y custodia
50Moderado
Cómo se puntúa
| 30/30 | Respaldo de la propiedad — propiedad de una organización |
| 0/20 | Dominio verificado |
| 3.4/25 | Alcance del propietario — 2 seguidores de stateforward |
| 16.2/25 | Trayectoria — 29 repos públicos, cuenta de ~2 años |
Datos de entrada utilizados
| followers | 2 |
| owner_type | Organization |
| is_verified | — |
| owner_login | stateforward |
| public_repos | 29 |
| account_age_days | 990 |
Mantenimiento de paquetes
100Excelente
Cómo se puntúa
| 25/25 | Publicado y resoluble — 3 paquete(s) en go |
| 35/35 | Recencia de publicación — última publicación hace 6 días |
| 20/20 | Historial de versiones — 21 versiones en el registro |
| 20/20 | No obsoleto — activo, ni obsoleto ni retirado |
Datos de entrada utilizados
| packages | github.com/stateforward/hsm.go, github.com/stateforward/hsm.go/kind, github.com/stateforward/hsm.go/muid |
| ecosystems | go |
| any_deprecated | no |
| min_days_since_publish | 6 |
Calidad de Ingeniería
¿Existen unas prácticas mínimas de ingeniería y documentación?
56
Prácticas de ingeniería
60Moderado
Cómo se puntúa
| 24/24 | Flujos de trabajo de CI — 4 flujo(s) de trabajo |
| 24/24 | Pruebas presentes |
| 0/16 | Configuración de linter |
| 0/9.6 | Hooks de pre-commit |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — sin datos |
Datos de entrada utilizados
| has_ci | sí |
| has_tests | sí |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Excluidos de la puntuación (sin datos o no aplicable): OpenSSF Scorecard: CI-Tests. Los pesos restantes se han renormalizado.
Documentación
50Moderado
Cómo se puntúa
| 30/30 | README |
| 0/25 | Directorio de documentación |
| 0/15 | Sitio de documentación / página del proyecto |
| 10/10 | Descripción del repositorio |
| 0/10 | Topics |
| 10/10 | Wiki |
Datos de entrada utilizados
| topics | — |
| has_wiki | sí |
| homepage | — |
| has_readme | sí |
| has_docs_dir | no |
| has_description | sí |
Seguridad
¿Son sólidas las prácticas visibles de seguridad y de cadena de suministro, sin exposición jurisdiccional de alto riesgo sin resolver?
45
Postura de seguridad
45En riesgo
Cómo se puntúa
| 6.8/7.5 | Binary-Artifacts — binaries present in source code |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — sin datos |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 5/5 | Fuzzing — project is fuzzed |
| 2.5/2.5 | Licencia — license file detected |
| 6/7.5 | Maintained — 10 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 8 |
| 5/5 | Packaging — packaging workflow detected |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — no SAST tool detected |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — sin datos |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Datos de entrada utilizados
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 4,5 |
Excluidos de la puntuación (sin datos o no aplicable): ci_tests, signed_releases. Los pesos restantes se han renormalizado.
Preparación para IA
¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Es una insignia independiente y experimental — peso 0,0, de modo que se presenta por separado y no afecta a la puntuación de salud global.
57
Contexto y guía para agentes
40En riesgo
Cómo se puntúa
| 0/45 | Instrucciones para agentes — sin CLAUDE.md / AGENTS.md / reglas de editor |
| 0/15 | Documentación legible por máquinas (llms.txt) |
| 40/40 | Historial de commits legible — 92 de 100 commits humanos declaran su intención (asunto estructurado o cuerpo explicativo) |
Datos de entrada utilizados
| has_llms_txt | no |
| legible_history_share | 0,92 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Cómo se puntúa
| 12.6/18 | Arranque con un solo comando — go.mod, kind/go.mod, muid/go.mod (convención del toolchain, sin ejecutor de tareas) |
| 22/22 | Pruebas automatizadas |
| 0/11 | Configuración de lint / formato |
| 11/11 | Verificación estática de tipos — Go (tipado estático) |
| 10/10 | Entorno reproducible — lockfile |
| 0/10 | Práctica demostrada con agentes — ningún commit con autoría de agente entre los últimos 100 |
| 0/8 | Mantenimiento automatizado — no se observan actualizaciones automáticas de dependencias |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Datos de entrada utilizados
| has_nix | no |
| has_tests | sí |
| lockfiles | go.sum |
| has_dockerfile | no |
| typed_language | sí |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | go.mod, kind/go.mod, muid/go.mod |
| dependency_bot_commit_share | 0 |
Legibilidad del código para modelos
94Excelente
Cómo se puntúa
| 45/45 | Código verificable por tipos — Go (tipado estático) |
| 48.5/55 | Tamaños de archivo manejables — 4/34 archivos fuente de más de 60 KB |
Datos de entrada utilizados
| primary_language | Go |
| largest_source_bytes | 216.491 |
| source_files_sampled | 34 |
| oversized_source_files | 4 |
Datos clave
0estrellas de GitHub
1contribuidores
150commits en los últimos 12 meses
6días desde el último push
20versiones publicadas
1factor bus
0issues abiertas
Goecosistemas de paquetes
Advertencias de recopilación de datos
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Más detalle
OpenSSF Scorecard 4.5 / 10
4.5agregado
Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).
| 9 | Binary-Artifacts | binaries present in source code |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| n/d | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 10 | Fuzzing | project is fuzzed |
| 10 | License | license file detected |
| 8 | Maintained | 10 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 8 |
| 10 | Packaging | packaging workflow detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | no SAST tool detected |
| 0 | Security-Policy | security policy file not detected |
| n/d | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Dependencias directas 5
| Registro | Paquete | Restricción de versión | Manifiesto |
|---|---|---|---|
| Go | github.com/stateforward/hsm.go/kind | v1.0.0 | go.mod |
| Go | github.com/stateforward/hsm.go/muid | v1.0.0 | go.mod |
| Go | github.com/aidarkhanov/nanoid/v2 | v2.0.5 | muid/go.mod |
| Go | github.com/google/uuid | v1.6.0 | muid/go.mod |
| Go | github.com/oklog/ulid/v2 | v2.1.1 | muid/go.mod |
Todas las dependencias no recopilado
No fue posible recopilar el conjunto de dependencias resuelto para este informe: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Informe JSON sin procesar legible por máquina
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 4581,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 706567,
"Shell": 1287
},
"pushed_at": "2026-07-19T03:39:26Z",
"created_at": "2026-02-02T17:05:36Z",
"owner_type": "Organization",
"updated_at": "2026-07-19T03:39:28Z",
"description": "HSM implementation in Go",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": null,
"name": "StateForward",
"type": "Organization",
"login": "stateforward",
"company": null,
"location": null,
"followers": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/150265376?v=4",
"created_at": "2023-11-08T14:38:11Z",
"is_verified": null,
"public_repos": 29,
"account_age_days": 990
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.3.2",
"kind": "patch",
"published_at": "2026-07-19T03:40:27Z"
},
{
"tag": "v1.3.1",
"kind": "patch",
"published_at": "2026-07-06T16:47:12Z"
},
{
"tag": "v1.2.7",
"kind": "patch",
"published_at": "2026-05-24T03:59:41Z"
},
{
"tag": "v1.2.6",
"kind": "patch",
"published_at": "2026-05-23T02:34:18Z"
},
{
"tag": "v1.2.5",
"kind": "patch",
"published_at": "2026-05-23T02:24:27Z"
},
{
"tag": "v1.2.4",
"kind": "patch",
"published_at": "2026-05-22T19:26:09Z"
},
{
"tag": "v1.2.2",
"kind": "patch",
"published_at": "2026-03-19T08:36:00Z"
},
{
"tag": "v1.2.1",
"kind": "patch",
"published_at": "2026-03-19T08:19:27Z"
},
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2026-03-19T08:00:57Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2026-03-10T21:36:29Z"
},
{
"tag": "v1.0.8",
"kind": "patch",
"published_at": "2026-03-10T17:07:35Z"
},
{
"tag": "v1.0.7",
"kind": "patch",
"published_at": "2026-02-11T13:56:29Z"
},
{
"tag": "v1.0.6",
"kind": "patch",
"published_at": "2026-02-03T21:22:13Z"
},
{
"tag": "v1.0.5",
"kind": "patch",
"published_at": "2026-02-03T06:20:22Z"
},
{
"tag": "v1.0.4",
"kind": "patch",
"published_at": "2026-02-03T05:09:24Z"
},
{
"tag": "v1.0.3",
"kind": "patch",
"published_at": "2026-02-03T04:09:21Z"
},
{
"tag": "v1.0.2",
"kind": "patch",
"published_at": "2026-02-02T17:56:12Z"
},
{
"tag": "v1.0.1",
"kind": "patch",
"published_at": "2026-02-02T17:51:57Z"
},
{
"tag": "muid/v1.0.0",
"kind": "other",
"published_at": "2026-02-02T17:35:05Z"
},
{
"tag": "kind/v1.0.0",
"kind": "other",
"published_at": "2026-02-02T17:35:03Z"
}
],
"recent_commits": [
{
"oid": "cde280d872c9abbc20810a27fcbc18dcf4a6684c",
"body": null,
"is_bot": false,
"headline": "release: prepare 1.3.2",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-07-19T03:37:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca51be659508100de64df4f8d55782916890309e",
"body": null,
"is_bot": false,
"headline": "Release hsm.go v1.3.1",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-07-06T16:46:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eb042fb0a70e6a3948dc5c96c75563e5acac8ef8",
"body": null,
"is_bot": false,
"headline": "chore: sync hsm conformance updates",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-06-11T03:59:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "20ee8330e57f9d8fb6930f6f42306cae7d0f7e7c",
"body": null,
"is_bot": false,
"headline": "Return completion handles from dispatch and set",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-05-24T22:54:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd0b9d44c57c4f6f15c5f1b3c7b2391ba4f94056",
"body": null,
"is_bot": false,
"headline": "Propagate queue errors as error events",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-05-24T03:56:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82f118a3acfba6994526599d3234783a169ec878",
"body": null,
"is_bot": false,
"headline": "Bump Go package version to v1.2.6",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-05-23T02:33:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ebd4b96ace5be47cb63bfa980cc1cac8219961d",
"body": null,
"is_bot": false,
"headline": "Keep completion events in runtime queue",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-05-23T02:23:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8e6446bf5efe266331c76955f6dd41a934da52a8",
"body": null,
"is_bot": false,
"headline": "Fix GoReleaser repository",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-05-22T19:25:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a1b4d29ed920cca308ffd25857842796c2ac041",
"body": null,
"is_bot": false,
"headline": "Bump Go version to v1.2.3",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-05-22T19:23:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "540eb3652f28dc445cf85d9cd5f11c65806fc328",
"body": null,
"is_bot": false,
"headline": "Add runtime queue hooks",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-05-22T19:21:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e57fa12b5c3becaf0c48e7918be474f80a39b96d",
"body": null,
"is_bot": false,
"headline": "fix: add event kind to snapshot and increment version to v1.2.2",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-19T08:35:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "02acbbdc27fbdaf4c5c2e7740eb57a4227b82c45",
"body": "… v1.2.1",
"is_bot": false,
"headline": "fix: update event kind check in takeSnapshot and increment version to…",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-19T08:18:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03d7bdbba26dfc7c5c2756019853cfd83c2b91bc",
"body": "…1.2.0",
"is_bot": false,
"headline": "refactor: rename EventDetail to EventSnapshot and update version to v…",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-19T07:59:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec83d37ce8dcdb0f6272a280d60cbd0193f4f7de",
"body": "…validation documentation",
"is_bot": false,
"headline": "chore: update .gitignore, refactor HSM transition rules, and enhance …",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-18T01:47:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7074abf992c7e52c002cc5a88223340c53ff3e5a",
"body": null,
"is_bot": false,
"headline": "docs(phase-01): reconcile validation evidence",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-15T16:18:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d7c8590e413747cb7ee163b507697135fcab093",
"body": null,
"is_bot": false,
"headline": "docs(phase-08): complete phase execution",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-15T15:54:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fdefbbcd71010f79185b46a89ecc213af112bf76",
"body": null,
"is_bot": false,
"headline": "docs(08-03): complete VER-05 traceability backfill plan",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-15T15:52:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bcdcd5a01492e4a42e92c9b56ca1a5e3169dc5c1",
"body": null,
"is_bot": false,
"headline": "docs(08-03): close VER-05 traceability and regenerate milestone audit",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-15T15:51:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e888487a9a82c4a4d0953c28544a84e7ba1c58dd",
"body": null,
"is_bot": false,
"headline": "docs(08-02): complete phase 4 artifact backfill plan",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-15T15:49:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80e674fc8e87dfe26259f3aea8a3f224494e8d25",
"body": null,
"is_bot": false,
"headline": "docs(08-02): reconcile phase 4 validation evidence",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-15T15:48:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e18d05feb49645a3644f266adbffd47138526309",
"body": null,
"is_bot": false,
"headline": "docs(08-02): backfill phase 4 verification report",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-15T15:48:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "25304015688a53558ff524ed443e6a440bc634e3",
"body": null,
"is_bot": false,
"headline": "docs(08-01): re-verify Phase 4 adversarial slice",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-15T15:45:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "02bc130c606f8ff9380e2ffe125c54dfee69ddb0",
"body": null,
"is_bot": false,
"headline": "docs(08): plan adversarial verification backfill",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-15T01:40:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0df87023677489308c1ea769c2b6d208d193a890",
"body": null,
"is_bot": false,
"headline": "docs(phase-08): add validation strategy",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-15T01:40:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1b4de424172194669250e6353f0e108a61716e9",
"body": null,
"is_bot": false,
"headline": "docs(08): research adversarial verification backfill",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-15T01:40:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a489e4618a82bf1992029da63ba3203868677e8",
"body": null,
"is_bot": false,
"headline": "docs(phase-07): complete phase execution",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-14T19:34:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "65076f230638750a7367a72d5a153fcfe514ead6",
"body": "- record the Phase 7 plan summary and self-check results\n- update planning state and roadmap progress for the completed phase",
"is_bot": false,
"headline": "docs(07-03): complete VER-04 traceability backfill plan",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-14T19:29:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d34803c61dede6d7f662f134a1aeb87bbaea269",
"body": "- map VER-04 closure to the Phase 7 backfill artifact in REQUIREMENTS.md\n- regenerate the milestone audit so Phase 3 is verified and only VER-05 remains orphaned",
"is_bot": false,
"headline": "docs(07-03): close VER-04 traceability and regenerate milestone audit",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-14T19:27:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4847f62577f5277760a59fa38478425644622d86",
"body": "- record summary and self-check for the Phase 3 verification backfill\n- advance state, roadmap progress, and VER-04 traceability for the next plan",
"is_bot": false,
"headline": "docs(07-02): complete verification artifact backfill plan",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-14T19:23:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5410bd77fb58a82367685597d6c38258094e6109",
"body": "- convert 03-VALIDATION.md from draft intent to executed evidence\n- align rules verification commands to the copy-safe GOCACHE command family",
"is_bot": false,
"headline": "docs(07-02): reconcile phase 3 validation evidence",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-14T19:21:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eab2d7fc3959fb9c0086a053063982091dd31117",
"body": "- add milestone-grade 03-VERIFICATION.md for VER-04\n- tie matrix, suite, and canonical gate evidence to March 14 reruns",
"is_bot": false,
"headline": "docs(07-02): backfill phase 3 verification report",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-14T19:20:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b56e0c370708dcc88a200c14c3bb28076c4f8e58",
"body": "- add 07-01 summary with fresh VER-04 command evidence\n- advance planning state to Phase 7 Plan 2 and record decisions\n- mark roadmap progress for the completed Phase 7 verification rerun",
"is_bot": false,
"headline": "docs(07-01): complete re-verification plan",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-14T19:17:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0bf3c59f0e8b65db6ff2c37bce3486abaac1df5e",
"body": "- confirm TestModelRulesConformance and TestRuntimeRulesConformance pass on current code\n- confirm scripts/verify-workspace.sh passes before Phase 7 evidence backfill",
"is_bot": false,
"headline": "docs(07-01): re-verify Phase 3 rules slice",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-14T19:15:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6da8d8ff3f37a73e6229e2ceccdc33c0564f17de",
"body": null,
"is_bot": false,
"headline": "docs(07): plan rules conformance verification backfill",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-14T18:43:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e9b460e06f3b68a76f486d70bfb0cf6f4bc2d5d7",
"body": null,
"is_bot": false,
"headline": "docs(phase-07): add validation strategy",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-14T18:35:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b904954e35d35ed468e58806d85cb5d3954468ac",
"body": null,
"is_bot": false,
"headline": "docs(07): research rules conformance verification backfill",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-14T18:35:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ac3ac150e2496dae8035fa026c2c8bc43e7b0d9",
"body": null,
"is_bot": false,
"headline": "docs(phase-06): complete phase execution",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-14T15:09:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3de05a604ce948a5dd87f19cef18f7359b393636",
"body": null,
"is_bot": false,
"headline": "docs(06-03): complete milestone traceability closure plan",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-14T15:07:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "27874984dccfdee779e8e8f7edf9a654f12e7632",
"body": null,
"is_bot": false,
"headline": "docs(06-03): close ver-03 traceability gap",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-14T15:05:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0a8e4caa06ede6e8160b15de8e4d55e24a34102",
"body": "…kfill plan\n\n- record the 06-02 summary and self-check results\n- advance roadmap state and mark VER-03 complete for phase 6 backfill",
"is_bot": false,
"headline": "docs(06-02): complete deterministic runtime verification artifact bac…",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-14T14:56:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46f6e352e758632885c49749028a3b4d5f877cc5",
"body": "- replace draft validation commands with copy-safe deterministic runtime checks\n- mark phase 2 task rows complete from shipped summaries and phase 6 refresh evidence",
"is_bot": false,
"headline": "docs(06-02): reconcile phase 2 validation evidence",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-14T14:53:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3b7417aa0abe5676ddff337a957b980754ced7f",
"body": "- add milestone-grade VER-03 verification artifact for phase 2\n- tie timer concurrency lifecycle and gate claims to fresh runtime evidence",
"is_bot": false,
"headline": "docs(06-02): backfill phase 2 verification report",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-14T14:52:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "029067e3567e28f127072e63f8ce42df5dca73ca",
"body": null,
"is_bot": false,
"headline": "docs(06-01): record runtime verification evidence",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-14T14:49:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "013998e003cee63111f555889aea150c64931601",
"body": "- rerun targeted VER-03 deterministic runtime tests on current workspace\n- confirm canonical verify-workspace release gate passes unchanged runtime code",
"is_bot": false,
"headline": "docs(06-01): re-verify deterministic runtime slice",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-14T14:42:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72b672569ae3b5c2302585208dc6c9230734b4ba",
"body": null,
"is_bot": false,
"headline": "docs(06): plan deterministic runtime verification backfill",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-14T14:29:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0c618944b73591316435ca0c06108da1747417d",
"body": null,
"is_bot": false,
"headline": "docs(phase-06): add validation strategy",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-14T14:11:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "67a520edded21ad3ca935e426a43439d7fbd66fb",
"body": null,
"is_bot": false,
"headline": "docs(06): research deterministic runtime verification backfill",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-14T14:10:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b3dcfecb5af5877badf88724a3382600d8308c32",
"body": null,
"is_bot": false,
"headline": "docs(roadmap): add milestone gap closure phases 6-8",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-14T06:51:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f2a7179183b1a9b555e1a6487597c51c1503212",
"body": null,
"is_bot": false,
"headline": "docs: add v1.0 milestone audit",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-14T06:40:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9bb9c8a535625cb8d895a2e9c3a20fca37481cb1",
"body": null,
"is_bot": false,
"headline": "docs(phase-05): refresh verification evidence",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-14T03:39:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db41167155fa023c0209f6a454efd466f52d5899",
"body": null,
"is_bot": false,
"headline": "docs(phase-05): complete phase execution",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-14T03:31:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5bb66847ee6c088a65f2f9b556b14a23e6c49d65",
"body": "- add the phase 05-03 execution summary\n- update roadmap and state for completed phase 5 work",
"is_bot": false,
"headline": "docs(05-03): complete release gate closure plan",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-14T03:25:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc3c8d2884714b361709350d38f9881065803b24",
"body": "- make the canonical workspace verifier phase-neutral\n- remove stale Travis CI metadata",
"is_bot": false,
"headline": "chore(05-03): close release gate hygiene drift",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-14T03:23:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef01ed56776132b53d1c41ee480ab32e8f7b3f63",
"body": "- add the 05-02 execution summary with self-check results\n- advance planning state and roadmap progress to the next plan",
"is_bot": false,
"headline": "docs(05-02): complete contract alignment plan",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-14T03:21:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e650ea3e6989484ec3a8502c4ee68f42ed75efe6",
"body": "- align exported helper comments with the hardened completion-channel contract\n- update README guidance and track rules.md as the authoritative contract artifact",
"is_bot": false,
"headline": "fix(05-02): align public synchronization contract",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-14T03:19:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5912d74b18c6af76eae92466bf117f97f3955fae",
"body": "- record Phase 5 plan 01 summary and self-check\n- advance state, roadmap progress, and requirement tracking",
"is_bot": false,
"headline": "docs(05-01): complete stop nil helper consistency plan",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-14T03:15:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31ac8fe5690c147c0c5346097e0dc199d67d3f99",
"body": "- short-circuit Stop(nil) to the shared closed waiter contract\n- preserve existing stop lifecycle and timeout behavior unchanged",
"is_bot": false,
"headline": "fix(05-01): align nil stop helper contract",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-14T03:13:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b97cdc188a75f1addf0d751cbeb88449d1fa015e",
"body": "- assert Stop(nil) closes immediately without panicking\n- keep hostile helper regression focused on the nil-stop seam",
"is_bot": false,
"headline": "test(05-01): add failing test for nil stop helper contract",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-14T03:12:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b4f5642f4fbb4973dedaf720552bb71fb953799",
"body": null,
"is_bot": false,
"headline": "docs(05): plan hardening remediation closure",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T23:37:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "65200873b6789e51365cdb11d0cc782463a0289d",
"body": null,
"is_bot": false,
"headline": "docs(phase-05): add validation strategy",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T23:25:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "edb2ea150ed4fd48c384f8f8bfe9246e9bbc3101",
"body": null,
"is_bot": false,
"headline": "docs(05): research hardening remediation closure",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T23:24:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f70317e7e40518a6960ada428010f5d7521127fe",
"body": null,
"is_bot": false,
"headline": "docs(phase-04): correct post-execution state",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T21:19:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0bdc882998003463cbd3b510889e9f408dafb408",
"body": "- add the phase 4 plan 03 execution summary and self-check\n- sync state and roadmap progress for completed adversarial regression work",
"is_bot": false,
"headline": "docs(04-03): complete canonical adversarial gate plan",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T21:17:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "832df2d72d1cd4222b46dd85e4742c76e615c047",
"body": "- add explicit adversarial, fuzz-seed, alloc, and benchmark-smoke steps\n- keep baseline and race-short checks in the single release-blocking verifier",
"is_bot": false,
"headline": "feat(04-03): wire canonical verifier for adversarial matrix",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T21:15:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e81bc9cc18f60a6586d328729547a57d2acf4b2",
"body": "- lock root dispatch and set public paths to stable allocation ceilings\n- lock muid make and make string default paths to stable allocation ceilings",
"is_bot": false,
"headline": "feat(04-03): add allocation regression release gates",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T21:14:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a36862074a7dea2b0ba1bd828fa88f5acfe19e95",
"body": "- add root-package dispatch and set allocation regression tests\n- add muid make and make string allocation regression tests",
"is_bot": false,
"headline": "test(04-03): add failing test for allocation regression contracts",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T21:13:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da5f87473645536dbf8d23e10c2d53fd6f0e35cc",
"body": "- correct state progress to match 12 of 13 completed plans\n- update roadmap phase 4 progress to reflect both completed summaries",
"is_bot": false,
"headline": "docs(04-01): sync phase progress metadata",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T21:10:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "48c60247bc51d99c3331e9ec239cfac26656c0b8",
"body": "- add the phase 4 plan 01 execution summary and self-check results\n- update state tracking after the adversarial runtime and helper hardening work",
"is_bot": false,
"headline": "docs(04-01): complete adversarial fault-injection plan",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T21:09:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03b75e7a9ec3f8e420e2cd935010d66812d8bbec",
"body": "- treat typed nil contexts as missing helper context instead of panicking in FromContext lookups\n- return closed waiters for DispatchTo and DispatchAll when helper callers pass a nil context",
"is_bot": false,
"headline": "feat(04-01): harden nil context helper handling",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T21:07:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cc3eca99c185f053f99489f2df30a011cea3df95",
"body": "…seeds plan\n\n- add the 04-02 execution summary and self-check\n- update roadmap, state, and requirements tracking for the completed plan",
"is_bot": false,
"headline": "docs(04-adversarial-regression-matrix-02): complete bounded property …",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T21:07:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01faefa8eaab868bbccabef07e9ef9ffa1e74e4e",
"body": "- cover concurrent panic recovery, process panic recovery, and deterministic terminate timeout faults\n- lock down hostile public helper behavior including typed nil context handling",
"is_bot": false,
"headline": "test(04-01): add failing adversarial runtime suite",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T21:07:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c3836aa1ee9084795a8f3c590f4b440a9af1ec19",
"body": "…roperties\n\n- add bounded muid fuzz target for config, monotonicity, and round-trip invariants\n- assert default application, machine-id masking, and counter overflow behavior",
"is_bot": false,
"headline": "feat(04-adversarial-regression-matrix-02): implement muid generator p…",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T21:05:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c29b562d9ea0cba464eed18eee3b94fa297f9bbf",
"body": "…generator properties\n\n- add muid fuzz target scaffold for deterministic generator invariants\n- check in default and boundary seed corpus for ordinary go test replay",
"is_bot": false,
"headline": "test(04-adversarial-regression-matrix-02): add failing test for muid …",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T21:05:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ccc9f81c8206d8a966aff4c70a66cc118a8df239",
"body": "… properties\n\n- add bounded root fuzz target for deterministic event-script replay invariants\n- assert dispatch/process waiter completion, settled state, and single terminal entry",
"is_bot": false,
"headline": "feat(04-adversarial-regression-matrix-02): implement hsm event script…",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T21:04:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e1c6166cb99de8c8ac1d70ebf63ea50d52ca79a4",
"body": "- add reusable ErrorEvent recorder helpers for deterministic runtime fault assertions\n- add immediate waiter-closure assertion for hostile public helper paths",
"is_bot": false,
"headline": "feat(04-01): extend adversarial test helpers",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T21:04:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3cf377b46d1ec6cb9a71abafea90c561e764860d",
"body": "…vent script properties\n\n- add root fuzz target scaffold for deterministic event-script invariants\n- check in hostile seed corpus for ordinary go test replay",
"is_bot": false,
"headline": "test(04-adversarial-regression-matrix-02): add failing test for hsm e…",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T21:04:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b9f9206c0f36f7a2729c1df0adb4e58d55a92688",
"body": null,
"is_bot": false,
"headline": "docs(04): plan adversarial regression matrix",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T20:22:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4698df627266dfa641df44d3a094fe9479ac2486",
"body": null,
"is_bot": false,
"headline": "docs(phase-04): add validation strategy",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T20:12:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de55984e9691eb518cc976d45c3ac732354e84e2",
"body": null,
"is_bot": false,
"headline": "docs(04): research adversarial regression matrix",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T20:11:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82ad0b2042fdfed9b6d6dba7367540cf2aff103b",
"body": null,
"is_bot": false,
"headline": "docs(phase-03): correct post-execution state",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T18:59:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5129dd1004274821de7d259a92538f4a62cd3da5",
"body": "- add the Phase 3 closeout summary for plan 03-04\n- update roadmap and state tracking for the completed Phase 3 gate",
"is_bot": false,
"headline": "docs(03-04): complete rules matrix closeout plan",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T18:20:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "df8fb02fe5cc7db47b3966d8e8f859d154765fb0",
"body": "- stop asserting scheduler-sensitive call trace ordering under race-short\n- keep the HSM35 rule check focused on call protocol evidence",
"is_bot": false,
"headline": "test(03-04): stabilize HSM35 conformance gate",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T18:18:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b6f91e60e93cdebbe7d24b99cd3f0b4351a2029",
"body": "- point Phase 3 matrix rows at actual dedicated rule-ID subtests\n- mark the matrix artifact as finalized against implemented conformance suites",
"is_bot": false,
"headline": "docs(03-04): reconcile rules matrix evidence",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T18:17:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8397f66a008825102d1a604983fb1c404cdbae8c",
"body": "- add the 03-03 execution summary and self-check results\n- advance planning state and roadmap progress to 03-04",
"is_bot": false,
"headline": "docs(03-03): complete runtime rules conformance plan",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T18:15:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2467507ad5b044f946696dc3462eb94718460b8c",
"body": "- add 03-02 summary with TDD commits, deviations, and self-check\n- update phase state and roadmap progress for the next 03-03 execution target",
"is_bot": false,
"headline": "docs(03-02): complete define/build-time conformance suite plan",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T18:14:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d83aa3693d01c0a342b307cd35afa2fdce194798",
"body": "- add deterministic runtime and exemplar rule-ID coverage from the matrix\n- reuse waiter-based assertions for dispatch, attribute, lifecycle, history, and timing flows",
"is_bot": false,
"headline": "feat(03-03): add runtime rules conformance suite",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T18:13:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cdb550e20ffbd04c565c6229df83dd2d46974ff2",
"body": "- reject state behaviors nested inside transitions and top-level history pseudostates\n- require top-level transitions to specify both source and target or neither",
"is_bot": false,
"headline": "fix(03-02): enforce define-time model rule conformance",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T18:12:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd1eda586484b5432be3eb738f2ccf05fb6b2066",
"body": "- add TestModelRulesConformance for every define_panic matrix row\n- expose missing define-time enforcement for HSM09, HSM20, and HSM50",
"is_bot": false,
"headline": "test(03-02): add failing model rules conformance suite",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T18:09:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ca40ed0028ae0f99aee18af5ab42e732ce48d06",
"body": "- add the dedicated TestRuntimeRulesConformance entrypoint\n- enumerate every runtime_semantic and exemplar rule-ID subtest from the matrix",
"is_bot": false,
"headline": "test(03-03): add failing runtime rules conformance scaffold",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T18:06:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e1cf9609fb5cb9cbd3d3426d549933735440125",
"body": "- add the execution summary for plan 03-01\n- update roadmap, state, and requirement tracking for the completed plan",
"is_bot": false,
"headline": "docs(03-01): complete rules conformance matrix plan",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T18:04:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e664801986de7e096db073f5afaec65c8f7586a6",
"body": "- add panic substring assertions for define-time rule checks\n- preserve waiter-based deterministic helper surface for runtime suites",
"is_bot": false,
"headline": "test(03-01): add stable conformance assertion helper",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T18:02:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "325b70fc28c908b8f7d2d34ede52ff92139d0ead",
"body": "- classify HSM01-HSM54 by honest enforcement type\n- map each rule to a dedicated conformance evidence target",
"is_bot": false,
"headline": "docs(03-01): publish rules conformance matrix",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T18:02:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f799608e2cd576b4cf5f79ed89ae6ebff20c1c1c",
"body": null,
"is_bot": false,
"headline": "docs(phase-03): plan rules conformance matrix",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T04:43:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24158d07c545dc464a5df474744ff8a9a7005bd6",
"body": null,
"is_bot": false,
"headline": "docs(phase-03): add validation strategy",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T04:30:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa8513b49277cc01598247724cef0f420525a08d",
"body": null,
"is_bot": false,
"headline": "docs(phase-03): add rules conformance research",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T04:29:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d953fed3a69c563ff164ebec038dd9c9a781661",
"body": null,
"is_bot": false,
"headline": "docs(state): fix phase 2 completion metrics",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T04:00:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db4b39f9110cbeedba3ad6414e203d061c761199",
"body": "…me semantics plan\n\n- add execution summary for deterministic lifecycle and race-backed verification\n- advance planning state and mark phase 2 roadmap progress complete",
"is_bot": false,
"headline": "docs(02-deterministic-runtime-semantics-03): complete lifecycle runti…",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T03:58:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd16f63bc21e23b37037f4bfae3a59a90ab19a91",
"body": "…ycle events\n\n- close AfterExit waiters for stop-driven exits before restart or shutdown assertions\n- resume processing for lifecycle events queued while Stop holds the processing lock",
"is_bot": false,
"headline": "fix(02-deterministic-runtime-semantics-03): process stop-queued lifec…",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T03:56:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d924379cbeaaadffbd9436bf17e660ab06435aff",
"body": "…le runtime coverage\n\n- cover stop, restart, termination timeout, and activity execution waiters\n- close lifecycle waiters for stop-driven exits and direct state activities",
"is_bot": false,
"headline": "fix(02-deterministic-runtime-semantics-03): add deterministic lifecyc…",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T03:55:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3803d4f5c3a3119bb3fc98377c587169d35fd41c",
"body": "…atch semantics plan\n\n- add the 02-02 execution summary with verification and deviation details\n- update state and roadmap progress for the next phase plan",
"is_bot": false,
"headline": "docs(02-deterministic-runtime-semantics-02): complete concurrent disp…",
"author_name": "gabewillen",
"author_login": "gabewillen",
"committed_at": "2026-03-13T03:49:58Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 20,
"commits_last_year": 150,
"latest_release_at": "2026-07-19T03:40:27Z",
"latest_release_tag": "v1.3.2",
"releases_from_tags": false,
"days_since_last_push": 6,
"active_weeks_last_year": 12,
"days_since_latest_release": 6,
"mean_days_between_releases": 14.5
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/stateforward/hsm.go",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/stateforward/hsm.go",
"is_deprecated": false,
"latest_version": "v1.3.2",
"repository_url": "https://github.com/stateforward/hsm.go",
"versions_count": 21,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-19T03:37:52Z",
"latest_version_yanked": null,
"days_since_latest_publish": 6
},
{
"name": "github.com/stateforward/hsm.go/kind",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/stateforward/hsm.go/kind",
"is_deprecated": false,
"latest_version": "v1.0.0",
"repository_url": "https://github.com/stateforward/hsm.go",
"versions_count": 1,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-02-02T17:34:39Z",
"latest_version_yanked": null,
"days_since_latest_publish": 173
},
{
"name": "github.com/stateforward/hsm.go/muid",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/stateforward/hsm.go/muid",
"is_deprecated": false,
"latest_version": "v1.0.0",
"repository_url": "https://github.com/stateforward/hsm.go",
"versions_count": 1,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-02-02T17:34:39Z",
"latest_version_yanked": null,
"days_since_latest_publish": 173
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod",
"kind/go.mod",
"muid/go.mod"
],
"largest_source_bytes": 216491,
"source_files_sampled": 34,
"oversized_source_files": 4,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod",
"kind/go.mod",
"muid/go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/stateforward/hsm.go/kind",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.0"
},
{
"name": "github.com/stateforward/hsm.go/muid",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.0"
},
{
"name": "github.com/aidarkhanov/nanoid/v2",
"manifest": "muid/go.mod",
"ecosystem": "go",
"version_constraint": "v2.0.5"
},
{
"name": "github.com/google/uuid",
"manifest": "muid/go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.0"
},
{
"name": "github.com/oklog/ulid/v2",
"manifest": "muid/go.mod",
"ecosystem": "go",
"version_constraint": "v2.1.1"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "gabewillen",
"commits": 150,
"avatar_url": "https://avatars.githubusercontent.com/u/91307534?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"auto-release.yml",
"release.yml",
"unit-tests.yml",
"version-check.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 9,
"reason": "binaries present in source code",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 10,
"reason": "project is fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 8,
"reason": "10 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 8",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "cde280d872c9abbc20810a27fcbc18dcf4a6684c",
"ran_at": "2026-07-26T01:17:49Z",
"aggregate_score": 4.5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-19T03:40:33Z",
"oldest_open_prs": [],
"last_merged_pr_at": null,
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/stateforward/hsm.go",
"host": "github.com",
"name": "hsm.go",
"owner": "stateforward"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": null,
"notes": [],
"value": 49,
"inputs": {
"security": 45,
"vitality": 82,
"community": 24,
"governance": 36,
"engineering": 56
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 82,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"commits_last_year": 150,
"human_commit_share": 1,
"days_since_last_push": 6,
"active_weeks_last_year": 12
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 6 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 6
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "12/52 weeks with commits",
"points": 8.3,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 12
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "150 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 150
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "10 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 8",
"points": 8,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 20,
"latest_release_tag": "v1.3.2",
"releases_from_tags": false,
"days_since_latest_release": 6,
"mean_days_between_releases": 14.5
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "20 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 20
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 6 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 6
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~14.5 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 14.5
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 24,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 36,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution",
"pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "no decided pull requests or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_decided_prs_or_data",
"params": {}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"followers": 2,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "stateforward",
"public_repos": 29,
"account_age_days": 990
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "2 followers of stateforward",
"points": 3.4,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 2,
"login": "stateforward"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "29 public repos, account ~2 yr old",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 29
}
},
{
"code": "account_age_years",
"params": {
"years": 2
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/stateforward/hsm.go",
"github.com/stateforward/hsm.go/kind",
"github.com/stateforward/hsm.go/muid"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 6
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "3 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 3,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 6 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 6
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "21 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 21
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 56,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 45,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 45,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 4.5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "binaries present in source code",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is fuzzed",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "10 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 8",
"points": 6,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 57,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.92,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "92 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 92,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"go.mod",
"kind/go.mod",
"muid/go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "go.mod, kind/go.mod, muid/go.mod (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "go.mod, kind/go.mod, muid/go.mod"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 94,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 216491,
"source_files_sampled": 34,
"oversized_source_files": 4
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "4/34 source files over 60KB",
"points": 48.5,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 34,
"oversized": 4
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-26T01:17:55.815554Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/stateforward/hsm.go.svg",
"full_name": "stateforward/hsm.go",
"license_state": "standard",
"license_spdx": "MIT"
}Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.
Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v1.13.0, esquema v0.27.0 — metodología completa · wiki de métricas.
Cómo se sitúa un resultado dentro del registro general: estadísticas agregadas — Go.