Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-28 04:36 UTC
Detective-XH / DocGraph

Govern your documents like code. MCP server that indexes .md/.docx/.html/.pdf into a SQLite knowledge graph and runs drift audits — stale policies, conflicting research claims, superseded docs, undocumented code exports. 12 MCP tools incl. cross-reference graph, governance + provenance metadata, topic similarity. Single binary, zero runtime deps.
GoMIT★ 5 stars⑂ 0 forkssince May 2026View on GitHub ↗
#claude #documentation #golang #knowledge-graph #llm #markdown #mcp #mcp-server #obsidian #rag #semantic-search #sqlite #agent #docx #html #pdf #codex #hermes #opencode
Detective-XH/DocGraph holds a health index of 56 out of 100, placing it in the Moderate band. It scores highest on AI Readiness (78/100) and lowest on Community & Adoption (29/100). It was last updated 7 days ago. A single contributor accounts for most of its recent work.
overall / 100
Moderate
Software health index

Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile

Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership

Detective-XPersonal account
3 followers28 public repossince Mar 2024
This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.
Package ecosystems

Registry	Package	Version	Downloads / mo	Versions	Last publish
Go	github.com/Detective-XH/docgraph	v0.3.4	-	15	42 days ago
Metrics by category

Vitality

Is the project alive — is code being written and are releases shipping?
73Good · 22% of overall
Development activity

57Moderate
How it's scored
36/36	Push recency — last push 7 days ago
2.8/36	Commit cadence — 4/52 weeks with commits
18/18	Commit volume — 258 commits in the last year
0/10	OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully
Inputs used
commits_last_year	258
human_commit_share	0.98
days_since_last_push	7
active_weeks_last_year	4
Release discipline

98Excellent
How it's scored
27/27	Ships releases — 15 releases published
36/36	Release recency — latest release 42 days ago
27/27	Release cadence — a release every ~2.3 days
8/10	OpenSSF Scorecard: Signed-Releases — 5 out of the last 5 releases have a total of 5 signed artifacts.
Inputs used
releases_count	15
latest_release_tag	v0.3.4
releases_from_tags	no
days_since_latest_release	42
mean_days_between_releases	2.3
Community & Adoption

Does the project have users, downloads, attention, and a welcoming setup for contributors?
29Critical · 18% of overall
Popularity & adoption

10Critical
How it's scored
9.8/60	Stars — 5 stars
0/25	Forks — 0 forks
0/15	Watchers — 0 watchers
Inputs used
forks	0
stars	5
watchers	0
growth_state	unverified
growth_factor_pct	100
growth_unverified_reason	no_history
Community health

50Moderate
How it's scored
22.5/22.5	README
22.5/22.5	License — recognized license (MIT)
0/18	CONTRIBUTING guide
0/13.5	Code of conduct
0/7.2	Issue template
0/6.3	PR template
Inputs used
has_readme	yes
has_license	yes
has_contributing	no
has_issue_template	no
has_code_of_conduct	no
has_pull_request_template	no
Sustainability & Governance

Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
50Moderate · 24% of overall
Maintainer resilience (bus factor)

10Critical
How it's scored
9/54	Bus factor — 1 contributor(s) cover half of all commits
0/22.5	Commit distribution — top contributor authored 100% of commits
1.4/13.5	Contributor breadth — 1 contributors
0/10	OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0
Inputs used
bus_factor	1
contributors_sampled	1
top_contributor_share	1
Issue & PR responsiveness

70Good
How it's scored
0/46.8	Issue resolution — no issues or no data
37.1/38.3	PR acceptance — 95/98 decided PRs merged
0/15	OpenSSF Scorecard: Code-Review — Found 0/12 approved changesets -- score normalized to 0
Inputs used
merged_prs	95
open_issues	0
closed_issues	0
issue_closed_ratio	—
closed_unmerged_prs	3
Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.
Ownership & stewardship

37At risk
How it's scored
10/30	Ownership backing — personal (user) account
0/20	Verified domain — not applicable to user accounts
4.3/25	Owner reach — 3 followers of Detective-XH
15.4/25	Track record — 28 public repos, account ~2 yr old
Inputs used
followers	3
owner_type	User
is_verified	—
owner_login	Detective-XH
public_repos	28
account_age_days	862
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
Package maintenance

100Excellent
How it's scored
25/25	Published & resolvable — 1 package(s) on go
35/35	Publish recency — latest publish 42 days ago
20/20	Version history — 15 published versions
20/20	Not deprecated — active, not deprecated or yanked
Inputs used
packages	github.com/Detective-XH/docgraph
ecosystems	go
any_deprecated	no
min_days_since_publish	42
Engineering Quality

Are baseline engineering and documentation practices in place?
74Good · 20% of overall
Engineering practices

84Good
How it's scored
24/24	CI workflows — 1 workflow(s)
24/24	Tests present
16/16	Linter config — .golangci.yml
0/9.6	Pre-commit hooks
0/6.4	.editorconfig
20/20	OpenSSF Scorecard: CI-Tests — 12 out of 12 merged PRs checked by a CI test -- score normalized to 10
Inputs used
has_ci	yes
has_tests	yes
has_editorconfig	no
has_linter_config	yes
has_precommit_config	no
Documentation

60Moderate
How it's scored
30/30	README
0/25	Documentation directory
0/15	Documentation / homepage site
10/10	Repository description
10/10	Topics — 19 topics
10/10	Wiki
Inputs used
topics	claude, documentation, golang, knowledge-graph, llm, markdown, mcp, mcp-server, obsidian, rag, semantic-search, sqlite, agent, docx, html, pdf, codex, hermes, opencode
has_wiki	yes
homepage	—
has_readme	yes
has_docs_dir	no
has_description	yes
Security

Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
50Moderate · 16% of overall
Security posture

50Moderate
How it's scored
7.5/7.5	Binary-Artifacts — no binaries found in the repo
2.2/7.5	Branch-Protection — branch protection is not maximal on development and all release branches
2.5/2.5	CI-Tests — 12 out of 12 merged PRs checked by a CI test -- score normalized to 10
0/2.5	CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5	Code-Review — Found 0/12 approved changesets -- score normalized to 0
0/2.5	Contributors — project has 0 contributing companies or organizations -- score normalized to 0
10/10	Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5	Dependency-Update-Tool — update tool detected
5/5	Fuzzing — project is fuzzed
2.5/2.5	License — license file detected
0/7.5	Maintained — project was created within the last 90 days. Please review its contents carefully
0/5	Packaging — no data
0/5	Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5	SAST — SAST tool is not run on all commits -- score normalized to 0
0/5	Security-Policy — security policy file not detected
6/7.5	Signed-Releases — 5 out of the last 5 releases have a total of 5 signed artifacts.
0/7.5	Token-Permissions — detected GitHub workflow tokens with excessive permissions
6.8/7.5	Vulnerabilities — 1 existing vulnerabilities detected
Inputs used
source	openssf_scorecard
checks_evaluated	17
scorecard_version	v5.5.0
checks_inconclusive	1
scorecard_aggregate	5
Excluded from scoring (no data or not applicable): packaging. Remaining weights renormalized.
AI Readiness

How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
78Good · 0% of overall
Agent context & guidance

85Excellent
How it's scored
45/45	Agent instructions — AGENTS.md
0/15	Machine-readable docs (llms.txt)
40/40	Legible commit history — 98 of 98 human commits state their intent (structured subject or explanatory body)
Inputs used
has_llms_txt	no
legible_history_share	1
agent_instruction_files	AGENTS.md
agent_instruction_max_bytes	7,493
Verify loop (build / test / typecheck)

85Excellent
How it's scored
12.6/18	One-command bootstrap — go.mod (toolchain convention, no task runner)
22/22	Automated tests
11/11	Lint / format config — .golangci.yml
11/11	Static type checking — Go (statically typed)
10/10	Reproducible environment — lockfile
10/10	Demonstrated agent practice — 59 of the last 100 commits agent-authored or agent-credited
8/8	Automated maintenance — 2 of the last 100 commits are automated dependency updates
0/10	OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Inputs used
has_nix	no
has_tests	yes
lockfiles	go.sum
has_dockerfile	no
typed_language	yes
bootstrap_files	—
has_devcontainer	no
has_linter_config	yes
typecheck_configs	—
agent_commit_share	0.59
toolchain_manifests	go.mod
dependency_bot_commit_share	0.02
Code legibility for models

100Excellent
How it's scored
45/45	Type-checkable code — Go (statically typed)
55/55	Manageable file sizes — 0/222 source files over 60KB
Inputs used
primary_language	Go
largest_source_bytes	33,922
source_files_sampled	222
oversized_source_files	0
Machine-readable interfaces

20Critical
How it's scored
0/40	API schema (OpenAPI/GraphQL/proto)
20/20	MCP server
0/40	Runnable examples
Inputs used
example_dirs	—
has_mcp_signal	yes
api_schema_files	—
Key facts

5GitHub stars
1contributors
258commits, last 12 months
7days since last push
15releases
1bus factor
0open issues
Gopackage ecosystems
Data collection warnings

Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail

OpenSSF Scorecard 5.0 / 10
5.0aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-28 04:36 UTC
10	Binary-Artifacts	no binaries found in the repo
3	Branch-Protection	branch protection is not maximal on development and all release branches
10	CI-Tests	12 out of 12 merged PRs checked by a CI test -- score normalized to 10
0	CII-Best-Practices	no effort to earn an OpenSSF best practices badge detected
0	Code-Review	Found 0/12 approved changesets -- score normalized to 0
0	Contributors	project has 0 contributing companies or organizations -- score normalized to 0
10	Dangerous-Workflow	no dangerous workflow patterns detected
10	Dependency-Update-Tool	update tool detected
10	Fuzzing	project is fuzzed
10	License	license file detected
0	Maintained	project was created within the last 90 days. Please review its contents carefully
n/a	Packaging	packaging workflow not detected
0	Pinned-Dependencies	dependency not pinned by hash detected -- score normalized to 0
0	SAST	SAST tool is not run on all commits -- score normalized to 0
0	Security-Policy	security policy file not detected
8	Signed-Releases	5 out of the last 5 releases have a total of 5 signed artifacts.
0	Token-Permissions	detected GitHub workflow tokens with excessive permissions
9	Vulnerabilities	1 existing vulnerabilities detected
Direct dependencies 7
Registry	Package	Version constraint	Manifest
Go	github.com/Detective-XH/gopdf	`v0.8.0`	go.mod
Go	github.com/fsnotify/fsnotify	`v1.10.1`	go.mod
Go	github.com/mark3labs/mcp-go	`v0.54.1`	go.mod
Go	github.com/yuin/goldmark	`v1.8.2`	go.mod
Go	golang.org/x/net	`v0.56.0`	go.mod
Go	gopkg.in/yaml.v3	`v3.0.1`	go.mod
Go	modernc.org/sqlite	`v1.52.0`	go.mod
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
  "data": {
    "repo": {
      "topics": [
        "claude",
        "documentation",
        "golang",
        "knowledge-graph",
        "llm",
        "markdown",
        "mcp",
        "mcp-server",
        "obsidian",
        "rag",
        "semantic-search",
        "sqlite",
        "agent",
        "docx",
        "html",
        "pdf",
        "codex",
        "hermes",
        "opencode"
      ],
      "is_fork": false,
      "size_kb": 1207,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Go": 1717032
      },
      "pushed_at": "2026-07-20T08:12:17Z",
      "created_at": "2026-05-25T11:22:29Z",
      "owner_type": "User",
      "updated_at": "2026-07-11T03:48:26Z",
      "description": "Govern your documents like code. MCP server that indexes .md/.docx/.html/.pdf into a SQLite knowledge graph and runs drift audits — stale policies, conflicting research claims, superseded docs, undocumented code exports. 12 MCP tools incl. cross-reference graph, governance + provenance metadata, topic similarity. Single binary, zero runtime deps.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": null,
      "name": "Detective-X",
      "type": "User",
      "login": "Detective-XH",
      "company": null,
      "location": null,
      "followers": 3,
      "avatar_url": "https://avatars.githubusercontent.com/u/163795227?v=4",
      "created_at": "2024-03-18T01:44:03Z",
      "is_verified": null,
      "public_repos": 28,
      "account_age_days": 862
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.3.4",
          "kind": "patch",
          "published_at": "2026-06-15T20:00:18Z"
        },
        {
          "tag": "v0.3.3",
          "kind": "patch",
          "published_at": "2026-06-14T22:17:30Z"
        },
        {
          "tag": "v0.3.2",
          "kind": "patch",
          "published_at": "2026-06-14T14:43:14Z"
        },
        {
          "tag": "v0.3.1",
          "kind": "patch",
          "published_at": "2026-06-13T18:38:44Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2026-06-02T01:47:01Z"
        },
        {
          "tag": "v0.2.3",
          "kind": "patch",
          "published_at": "2026-05-29T00:24:37Z"
        },
        {
          "tag": "v0.2.2",
          "kind": "patch",
          "published_at": "2026-05-28T00:37:27Z"
        },
        {
          "tag": "v0.2.1",
          "kind": "patch",
          "published_at": "2026-05-27T01:14:31Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2026-05-27T00:57:44Z"
        },
        {
          "tag": "v0.1.9",
          "kind": "patch",
          "published_at": "2026-05-25T19:38:33Z"
        },
        {
          "tag": "v0.1.8",
          "kind": "patch",
          "published_at": "2026-05-25T19:23:38Z"
        },
        {
          "tag": "v0.1.7",
          "kind": "patch",
          "published_at": "2026-05-25T19:10:39Z"
        },
        {
          "tag": "v0.1.6",
          "kind": "patch",
          "published_at": "2026-05-25T18:42:35Z"
        },
        {
          "tag": "v0.1.5",
          "kind": "patch",
          "published_at": "2026-05-25T18:27:01Z"
        },
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2026-05-25T15:16:56Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "fd794aea38e3669336e9cc915541f85cd826cdc8",
          "body": "release: v0.3.4",
          "is_bot": false,
          "headline": "Merge pull request #97 from Detective-XH/release/v0.3.4",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-15T19:59:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "efe7d4380b20cc1583b4bbfb10d81482f515db78",
          "body": "Update SHA256 checksums built on Go 1.26.4 (darwin/arm64). Prior\nchecksums in the release/v0.3.4 branch were built on a different\nmachine; rebuilt from the same tagged source for reproducibility.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.3.4",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-15T19:55:15Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3aa4bd63b6eb4ac1a68d5736ef1d56ced202c756",
          "body": "fix(ax-assert): make A2 corpus-stable with dynamic zero-result probe",
          "is_bot": false,
          "headline": "Merge pull request #96 from Detective-XH/fix/ax-assert-a2-dynamic-probe",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-15T19:51:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e2d7680e33a409e380c895d983b0d88d87521879",
          "body": "CHANGELOG.md acquired a similar_to edge to plans/CHANGELOG-v0.3.x.md\n(TF-IDF 0.61), invalidating A2's static assumption. Replace hardcoded\ndocument with findDocWithNoSimilarityResults() that probes candidates\nat runtime and selects the first that renders the zero-result sentinel\n\"No similarity edges for this document\" — matching the existing\nfindDocWithSimilarityResults() pattern used by A1.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(ax-assert): make A2 corpus-stable with dynamic zero-result probe",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-15T19:47:34Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "51420f0dd9ac0c6d6a78b8387585f34f6264f2fc",
          "body": "release: v0.3.4",
          "is_bot": false,
          "headline": "Merge pull request #95 from Detective-XH/release/v0.3.4",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-15T02:00:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "507a188e2f373b306a65c61141dda4e8f248e6f2",
          "body": null,
          "is_bot": false,
          "headline": "release: v0.3.4",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-15T01:56:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "445bce442537c69c5b36cd6a60b9db78aa6cf101",
          "body": "Infers and patches missing status/owner governance fields in .md files.\nDry-run by default; --fix applies atomic writes. Uses yaml.Node to avoid\nre-encoding existing YAML content. HTML-comment-before-frontmatter files\nare reordered so --- is the first byte (Goldmark linenum==0 constraint).\nNon-mapping frontmatter and YAML-special-char values are handled safely.\n15 tests covering all plan edge cases + 2 adversarial-review regressions.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(heal): add docgraph heal CLI subcommand (Phase 1 MD frontmatter)",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-15T01:55:15Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "76fed26a84f45707116dc427f14a9da012bf4c1d",
          "body": "chore(lint): tighten cyclop max-complexity 40 -> 20",
          "is_bot": false,
          "headline": "Merge pull request #94 from Detective-XH/chore/tighten-cyclop-gate",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-15T00:06:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7b74ec8322518b30f8bef5068be35041a48bd6e4",
          "body": "The gocyclo campaign refactored away the old high-CC baseline (handleNode 55, indexStore 44, indexProjectOpts 43, extractHTML 40, all now <=14), so the cyclop backstop no longer needs the 40 slack. Lowered to 20, which sits just above the GoReportCard soft target (gocyclo <=13-15) without double-fir\n[…]\nthan //nolint.\n\nFull-tree golangci-lint lists exactly extractCStyle; gofmt -s clean; gosec exit 0; go build + go test -race green.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(lint): tighten cyclop max-complexity 40 -> 20",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-15T00:01:39Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6ec02dd4224048fd5b00232564decb3841176faa",
          "body": "refactor(gocyclo): reopen by-design-red — codedoc readability + prune/oracle file-greening",
          "is_bot": false,
          "headline": "Merge pull request #93 from Detective-XH/refactor/gocyclo-reduction",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T23:35:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e24e4330162eea5633e465b45e4f0ba19132f8de",
          "body": "…/oracle file-greening\n\nRe-assess and refactor the 3 files PR #89 left by-design-red, at the owner's\ndirection (knowingly overriding the post-advisor LEAVE verdicts).\n\ncodedoc_cstyle.go (readability only — file stays red on extractCStyle, ZERO\nfile-ratio gain): extractSymbol 25->5 (switch -> symbolF\n[…]\nreserving: go build + go test -race green; gofmt -s clean;\ngolangci-lint 0 issues; gosec exit 0; codex adversarial-review approve.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(gocyclo): reopen by-design-red — codedoc readability + prune…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T23:30:39Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c0fb6c128013b316710a6bf4e3b4880b359a5a86",
          "body": "test: fix misspell false positive in reconcile_ignore_test",
          "is_bot": false,
          "headline": "Merge pull request #92 from Detective-XH/fix/misspell-reconcile-test",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T22:37:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9e77cd172af8e0f23be1724db4ef2465567cc4d1",
          "body": "The string literal \"# Drop\\n\\nto be ignored.\\n\" tripped misspell: the\n\\n escape immediately followed by \"to\" reads as \"nto\", flagged as a\nmisspelling of \"not\". Reword the body to \"will be ignored.\" so the\nnewline escape is no longer adjacent to \"to\". No behavior change.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test: fix misspell false positive in reconcile_ignore_test",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T22:31:34Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c45ae4ed70cb9cfaabbf11d130fd29646f74683d",
          "body": "release: v0.3.3",
          "is_bot": false,
          "headline": "Merge pull request #91 from Detective-XH/release/v0.3.3",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T22:16:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2c93075f3e9337fe9f2b0ecbdac121b4b1feec3a",
          "body": "gocyclo decomposition + GetDriftFindings finder-table + modernize sweep + gopdf v0.8.0 bump. CHANGELOG.md + README.md SHA-256 checksums for v0.3.3.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.3.3",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T22:12:55Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1939b26649ac2e3e2281289118b9dafbad06f5ca",
          "body": "build(deps): bump gopdf v0.7.9 -> v0.8.0",
          "is_bot": false,
          "headline": "Merge pull request #90 from Detective-XH/chore/bump-gopdf-v0.8.0",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T22:05:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "06027ad20d2b76f9028f544988a0c84d5778a825",
          "body": "Additive/fix-only release, no breaking API changes. Only internal/extractor/pdf.go consumes gopdf (GetPlainText/Reader.Info/OpenBytes/raw Value traversal) — unaffected by v0.8.0's ToUnicode and TJ-separator fixes. go build + go test -race green (18 pkgs); govulncheck clean.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "build(deps): bump github.com/Detective-XH/gopdf v0.7.9 -> v0.8.0",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T22:01:24Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "65d70e22aa43138a29819ef272e529431cbb2d05",
          "body": "refactor: decompose gocyclo tail (21 test funcs + GetDriftFindings finder-table + modernize)",
          "is_bot": false,
          "headline": "Merge pull request #89 from Detective-XH/refactor/gocyclo-tail",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T21:55:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bf2e1b34103bb5ea49d84fb586172713fb75a1a4",
          "body": "…inder-table + modernize sweep\n\nLifts gocyclo file-ratio 91.3% -> 98.63% (GoReportCard sub-metric; A+ letter unchanged, gocyclo weight 0.10).\n\n- 21/23 over-cx-15 test funcs decomposed via genuine helper extraction (t.Helper assertion helpers, shared-harness de-dup, corpus-generator splits); 2 serial\n[…]\n go build + go test -race green; gofmt -s clean; golangci-lint 0 issues; gosec baseline unchanged; assertion-preservation audited.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor: decompose gocyclo tail — 21 test funcs + GetDriftFindings f…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T21:52:15Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "655bbb559b8ee40dbaa5cfcf0c79b05e9b1376cc",
          "body": "refactor: decompose 8 high-cyclo funcs to flip gocyclo to A+ (PR4)",
          "is_bot": false,
          "headline": "Merge pull request #88 from Detective-XH/refactor/gocyclo-pr4-aplus",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T18:32:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5fd65c325afbe46f76424bddf9c93c61336c18d9",
          "body": "Batch-4 \"A+ push\" of the gocyclo-reduction campaign: 8 honest flips take\nthe local gocyclo metric from 27/219 to 19/219 failed files (91.3%),\ncrossing the 90% A+ threshold with margin. All changes behavior-preserving.\n\nProduction (3):\n- remediationFor: 23 static cases -> remediationText map; CodeSta\n[…]\n -race green; golangci-lint\n--new-from-rev=HEAD 0 issues; gofmt -s clean; codex adversarial-review\napprove / no material findings.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor: decompose 8 high-cyclo funcs to flip gocyclo to A+ (PR4)",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T18:27:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a17e5402ca48c1d80ad4df8212588562fe2ea476",
          "body": "refactor: gocyclo Batch-3 core decomposition (PR3, 27/218 = 87.6% A)",
          "is_bot": false,
          "headline": "Merge pull request #87 from Detective-XH/refactor/gocyclo-pr3-core",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T17:42:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dc373ab9a8de1a8a0de4a0fc2d9b62a95f777dae",
          "body": "The new TestIndexProjectOpts_GitAndPlainCharacterization was itself cx19 ->\na freshly flagged _test.go file (test files are graded), which would have\nleft PR3 at 28 failed instead of the planned 27. Extract assertFileHistory /\nassertNoHistory to DRY the repeated err/nil/subject/count checks; the test\ndrops to cx10 and every helper is <=13. No assertion changed.\n\nFlip count now 27/218 (gocyclo 87.6%), matching the PR3 target.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test: keep characterization test under gocyclo via assertion helpers",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T17:28:57Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "284cc8576b0517588a55e8f26175b1fc1fa90c6e",
          "body": "Extract addRoots (synchronous per-root w.Add), classifyWatchEvent (pure\nevent filter), handleCreateDir (Create-dir addRecursive side effect), and a\ndebouncer{} struct with a schedule() method holding the former closure-over-\nlocals (mu/pending/timer/debounce/onChange). Concurrency-preserving: d.time\n[…]\ntchEvent -> schedule. gocyclo: every function <=12.\n\nGated green: watcher_test.go under go test -race -count=5 (timing-sensitive).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor: decompose WatchWithContext (cx24->12) into helpers",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T17:25:36Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b1b0f1c87c743689394c986f98ce2aa4d061df17",
          "body": "Split extractPDFMeta (Info-dict tuples + display name), extractPDFPages\n(per-page loop, font cache, U+FFFD security gate), and buildPDFNodes\n(page nodes/edges/chunks) out of extractPDF; a pdfPageResult struct carries\nthe page outputs. Behavior-preserving: the replacementCharRatio garbage gate\nsurviv\n[…]\nd green: existing pdf_test.go suite (Sample/Scanned/CreationDate/GBK/\nCJK x2, TestReplacementCharRatio, Fuzz) under go test -race.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor: decompose extractPDF (cx24->8) into 3 helpers",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T17:25:21Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "20809be973aa822cbb607ac63cbf748b0ef59a9f",
          "body": "Lift the flush closure to indexStoreFlush (batch[:0] + batchTextBytes reset\nmove to the caller) and split indexStoreSetupFTS / indexStoreDeleteStale /\nindexStorePrepareEntry / indexStoreTail out of the main function.\nBehavior-preserving: the force vs fullBuild delete gate, the FTS combined\nrebuild g\n[…]\ned green under go test -race (FTS bulk-rebuild + self-heal, force-guard\ncrash-recovery, 8 prune tests, force-rebuild integration).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor: decompose indexStore (cx44->12) into 5 helpers",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T17:10:55Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6fd28e6811b7e741b39fab1f56a89a3cd824b102",
          "body": "Lift the writeOne closure to projectWriteOne (nNew++ moves to the caller),\nand split projectSetupFTS / projectPrepareEntry / projectFlushGitBatch /\nprojectTail out of the main function. Behavior-preserving: baseEmpty/force\ndelete gating, fullBuild FTS gate, histories[idx]<->batch[idx] alignment,\ncha\n[…]\nus the full workspace\nsuite (coldstart FTS rebuild + crash-recovery, fanout, fd-leak git path)\ngreen under go test -race -count=2.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor: decompose indexProjectOpts (cx43→13) into 5 helpers",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T17:02:57Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "fd896950ba1fad91bb1cff5e282693e3ec7a96bf",
          "body": "…paths)\n\nLocks index OUTPUT (node/edge/unresolved counts, per-file git history\nalignment, workspace FTS hits) for the 2-project pipeline before the PR3\ndecomposition. Covers the buffered git path (projectFlushGitBatch target,\nleast-covered region: distinct-commit subjects pin histories[idx] alignment)\nand the streaming non-git path. Green on unmodified indexProjectOpts.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test: guardrail-8 characterization for indexProjectOpts (git + plain …",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T16:58:40Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "724a62958bdeea5e8030c25f7e273bfa5acb8afa",
          "body": "release: v0.3.2",
          "is_bot": false,
          "headline": "Merge pull request #86 from Detective-XH/release/v0.3.2",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T14:41:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8d242cecdeb9756e9011ae8cebff4bb4844f126f",
          "body": null,
          "is_bot": false,
          "headline": "release: v0.3.2",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T14:37:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bbe0bacf9a2e380c45f7195bc2cc89a6e6be78d7",
          "body": "refactor: decompose 10 medium-complexity functions, gocyclo A buffer (PR2)",
          "is_bot": false,
          "headline": "Merge pull request #85 from Detective-XH/refactor/gocyclo-pr2-medium",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T14:27:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "483023288bbbe3f6d078217fdac054ee1807f7fc",
          "body": "…(PR2)\n\nExtract cohesive helpers across 10 files so every refactored function lands at\ncyclomatic complexity ≤13, flipping 10 more files below the >15 gocyclo gate.\nDistinct flagged files 41→31 → gocyclo 81.1%→85.7% (grade A, buffer above the\n80% boundary). Behavior-preserving; equivalence/golden te\n[…]\nverified preserved.\n\nGates: go build ./... ok, go test -race ./... ok, gofmt -s clean,\ngolangci-lint --new-from-rev=main 0 issues.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor: decompose 10 medium-complexity functions, gocyclo A buffer …",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T14:23:12Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2da22bbdeaa06d63ee3ca6eee86a29080c81fb88",
          "body": "refactor: decompose high-complexity functions, lift gocyclo B→A (PR1)",
          "is_bot": false,
          "headline": "Merge pull request #84 from Detective-XH/refactor/gocyclo-pr1-lock-a",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T13:59:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "73871ff597e7f1fdc47adbfeb947e50f27ed324a",
          "body": "Extract cohesive helpers across 18 files so every refactored function lands at\ncyclomatic complexity ≤13, flipping 18 files below GoReportCard's >15 gocyclo\ngate. Distinct flagged files 59→41 → gocyclo 72.6%→81.1% (sub-grade B→A).\nOverall GoReportCard grade is unchanged (already A+; gocyclo weight 0\n[…]\nd ./... ok, go test -race ./... ok, gofmt -s clean,\ngolangci-lint --new-from-rev=main 0 issues, codex adversarial-review verified.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor: decompose high-complexity functions, lift gocyclo B→A (PR1)",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T13:54:54Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "92b75ab77b1e057d98e31f5a04c5d0692f7c6000",
          "body": "test(tools): cover MCP arg helpers (type-confusion fallback)",
          "is_bot": false,
          "headline": "Merge pull request #83 from Detective-XH/test/tools-arg-helper-coverage",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T12:30:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e6e3399d5d0d98fd03463834d00165f6c8eaded2",
          "body": "Add direct unit tests for getStringArg, getIntArg, getBoolArg, sanitizeArg, and truncateRunes, which had no direct coverage (getIntArgClamped is tested separately). The tests assert the security-relevant contract: a wrong-typed, nil, or missing argument returns the caller-supplied default instead of\n[…]\n bool wrong-type cases use a non-zero default so a regression that returned the zero value instead of the default would be caught.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test(tools): cover MCP arg helpers (type-confusion fallback)",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T12:26:23Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "67123a1585c9b27191ff2ed7115c197708b0f5f2",
          "body": "…rch-fts\n\nrefactor(store): split search + FTS into sub-stores (Lever B tranche-1)",
          "is_bot": false,
          "headline": "Merge pull request #82 from Detective-XH/refactor/store-substores-sea…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T04:20:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "70efd37cecb5beb90a2200aff341a02af2a6f109",
          "body": "Execute the documented \"Step 2 sub-store split\": move the search (24)\nand FTS (10) method groups off *Store onto domain sub-store types\nreached via Store.Searcher (*searchStore) and Store.Fts (*ftsStore),\neach embedding the shared *baseDB. A moved body is unchanged except\ns.db -> se.db/ft.db. GetSec\n[…]\nge. Migration\nused temporary forwarding shims (added, callers migrated under a green\ntree, then deleted) so the build never broke.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(store): split search + FTS into sub-stores (Lever B tranche-1)",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T04:16:01Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "bad1eac36dd3727741db8e78a6f7612870dbbc4f",
          "body": "…rfaces\n\nrefactor(store): decouple consumer packages from *store.Store via narrow interfaces",
          "is_bot": false,
          "headline": "Merge pull request #81 from Detective-XH/refactor/store-consumer-inte…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T00:44:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2391009de3128c6fc3e08b68fd3a9955cfd7b4a0",
          "body": "…row interfaces\n\nExtract narrow per-package interfaces so each consumer depends on a\nminimal store contract instead of the 125-method *store.Store god type\n(Lever A). *store.Store already satisfies every interface, so call sites\npass the concrete value unchanged.\n\n- RefResolver (resolver), Similarit\n[…]\ned resolver.ProjectRef.Store field deliberately keep the concrete\n*store.Store. Zero behavior change; full suite green with -race.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(store): decouple consumer packages from *store.Store via nar…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T00:40:32Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6dd0915244bea62bfb9e0502f21388cd4c389fc4",
          "body": "…ture\n\ntest(ax-assert): make A11 fixture stable and meaningful via dynamic discovery",
          "is_bot": false,
          "headline": "Merge pull request #80 from Detective-XH/fix/ax-assert-a11-stable-fix…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-13T23:35:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "939b43d4bab702859f04ee21467ab78577c08a0e",
          "body": "…iscovery\n\nA11 asserted the graph-outgoing \"all edges resolve to N distinct other\ndocuments\" footer against plans/PERF-METHODOLOGY.md, a gitignored doc whose\noutgoing reference edges drifted to all-distinct (9 -> 9), so the footer\n(rendered only when distinct != total) stopped firing and A11 failed.\n[…]\nly, not in CI or release).\nVerified: go run ./cmd/ax-assert/main.go --project-root . -> 14/14;\ngo test -race -count=1 ./... green.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test(ax-assert): make A11 fixture stable and meaningful via dynamic d…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-13T23:31:46Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6d6489c188a0f3ae0e1c04937b37513e042a62cc",
          "body": "…-to-8\n\nrefactor(mcp): reduce always-on tool surface 10 → 8 via two zero-loss merges",
          "is_bot": false,
          "headline": "Merge pull request #79 from Detective-XH/refactor/mcp-tool-surface-10…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-13T23:22:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "35334105d6b4fe9ea547ff3ab67eef1e1a9f1b95",
          "body": "…s merges\n\nDelete docgraph_explore (a strict subset of docgraph_context) and\ndocgraph_history (already rendered inline by docgraph_node's ### History\nsection). Top up handleNode's history block with Last author + First changed\nso the merge is field-complete versus the removed tool, and extract the b\n[…]\n, search, node, graph, files, similar, status, tags.\nOpt-in unchanged: docgraph_embeddings, docgraph_enrichment. No schema change.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(mcp): reduce always-on tool surface 10 -> 8 via two zero-los…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-13T23:17:41Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "738bf4568d9266df7bc05ee01d4a9da224d66e1e",
          "body": "…nt-drop\n\nfix(context): list docgraph_context overflow tail instead of dropping it",
          "is_bot": false,
          "headline": "Merge pull request #78 from Detective-XH/fix/context-overflow-list-do…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-13T20:04:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "99c2ad5cb20187277beb3298897202e5302b8a6d",
          "body": "Remove internal planning identifiers that had leaked into a public/tracked test comment, a test failure message, and a release note (hygiene policy: internal tracker codes must not appear in tracked sources or public docs).\n\nBehavior-neutral: comment / string-literal text only; the affected test still asserts the same serverInstructions substring. Pre-existing leaks, fixed.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(hygiene): drop internal tracker identifiers from tracked files",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-13T20:00:09Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "0226b78474a7adb10307cf731479f8365f57f1e9",
          "body": "docgraph_context's payload soft-cap (P-v6-2) emitted a count-only notice and dropped every omitted document on overflow, erasing their paths and forfeiting recall — a regression against P-v6-2's own \"Omitted: [list]\" intent. Degrade the tail instead: list each remaining document as a stub (path + re\n[…]\n... 18/18; golangci-lint --new-from-rev=HEAD 0. Also drops a stale internal roadmap-code ref from a comment in the same test file.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(context): list the overflow tail instead of dropping it, byte-capped",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-13T19:59:23Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e0f000dca6b983a5ba13c56bd349e6ed29808279",
          "body": "…-supply-chain-d902ad55bd\n\nchore(deps): bump modernc.org/sqlite from 1.51.0 to 1.52.0 in the sqlite-supply-chain group",
          "is_bot": false,
          "headline": "Merge pull request #73 from Detective-XH/dependabot/go_modules/sqlite…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-13T18:28:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c96e943ab6ddfb6005aa8443639142d52f8c480b",
          "body": "…or-patch-326ae5767f\n\nchore(deps): bump golang.org/x/net from 0.55.0 to 0.56.0 in the go-minor-patch group across 1 directory",
          "is_bot": false,
          "headline": "Merge pull request #76 from Detective-XH/dependabot/go_modules/go-min…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-13T18:28:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "77bcf3f16ff0de39c26df3151b7000697cafe9b5",
          "body": "release: v0.3.1",
          "is_bot": false,
          "headline": "Merge pull request #77 from Detective-XH/release/v0.3.1",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-13T18:27:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "35df57fda5a1a54a8b885979775f0e28be031b5d",
          "body": null,
          "is_bot": false,
          "headline": "release: v0.3.1",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-13T18:23:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d61240f66097c2442ab2ae2b9ea7f732e1c53fd1",
          "body": "Bumps the go-minor-patch group with 1 update in the / directory: [golang.org/x/net](https://github.com/golang/net).\n\n\nUpdates `golang.org/x/net` from 0.55.0 to 0.56.0\n- [Commits](https://github.com/golang/net/compare/v0.55.0...v0.56.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/net\n  dependency-version: 0.56.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: go-minor-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump golang.org/x/net",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-13T17:58:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5018832cc596f1f875beef6bc785c91ae93147c5",
          "body": "feat: actionable drift findings, binary governance exemption, .docgraphignore loop-close; bump gopdf v0.7.9",
          "is_bot": false,
          "headline": "Merge pull request #75 from Detective-XH/feat/drift-governance-ax-gopdf",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-13T17:56:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b6c75de1a5e5614d1895d63038f7be5a13355b8f",
          "body": "…phignore loop-close; bump gopdf v0.7.9\n\nDrift/governance AX-bug remediation (an MCP-only \"fix all drift\" run dead-ended —\nremediation existed but was undiscoverable/un-completable from the tool surface):\n- DriftFinding/MetadataQualityIssue gain a Remediation field (one-chokepoint\n  population + int\n[…]\n watcher passthrough, containsIgnoreRuleFile. Full\nsuite green under -race; 0 new golangci-lint/gosec. No MCP tool-surface change.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: actionable drift findings, binary governance exemption, .docgra…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-13T17:52:49Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "56908d95ef4c1794b651826b020e889566a74ad8",
          "body": "Bumps the sqlite-supply-chain group with 1 update: [modernc.org/sqlite](https://gitlab.com/cznic/sqlite).\n\n\nUpdates `modernc.org/sqlite` from 1.51.0 to 1.52.0\n- [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md)\n- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.51.0...v1.52.0\n[…]\nendency-version: 1.52.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: sqlite-supply-chain\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump modernc.org/sqlite in the sqlite-supply-chain group",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-08T08:12:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "af10f663e74f107302d850d4245b25b55d143831",
          "body": "…d-cyclop\n\nrefactor: cut complexity of 3 functions; gate cyclop at 40",
          "is_bot": false,
          "headline": "Merge pull request #72 from Detective-XH/chore/complexity-refactor-an…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-02T21:09:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3eda7a4eaf3aeaa633021ad5b1998e64cb0bc89e",
          "body": "Behavior-preserving extractions (verified: build, go test -race ./... all pass,\ngolangci-lint 0):\n- handleStatus 31->5: split workspace vs single-store bodies into appendWorkspaceStatus\n  / appendSingleStoreStatus (NOT unified — the two emit different output by design).\n- BuildImpactGraph 27->5: ext\n[…]\nrent, breadth\nnot depth) is grandfathered on unchanged lines and stays visible on local full runs as\na periodic-review list. A PR only trips cyclop by adding a new >40 function or growing\none past 40.",
          "is_bot": false,
          "headline": "refactor: cut complexity of 3 handlers/writers; gate cyclop at 40",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-02T21:05:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f12cfccc1519eda2d96636eccc8a3fb96117d36b",
          "body": "chore(gosec): annotate confirmed-safe findings with #nosec + rationale",
          "is_bot": false,
          "headline": "Merge pull request #71 from Detective-XH/chore/gosec-nosec-annotations",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-02T20:13:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a9d4ce2fa1b978049e7d5c774ff944682e245f98",
          "body": "A codegraph-armed investigation confirmed all 20 gosec findings (after the\nG104/G304/G301/G306 excludes) are safe-by-construction. Annotate each site with\n`#nosec <rule> -- <reason>` rather than excluding the rules globally, so\nG202/G204/G703/G706/G115 stay active for future code while the audited s\n[…]\n\n- G115 (x1): non-named zip entries counted but never decompressed; named\n  entries capped by readZipEntry's LimitReader.\n\ngosec (excl G104,G304,G301,G306) -> 0; gofmt, golangci-lint, build all clean.",
          "is_bot": false,
          "headline": "chore(gosec): annotate confirmed-safe findings with #nosec + rationale",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-02T20:09:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "42e30208400b2c1ab604522864f1cd6a6e7bc615",
          "body": "fix: resolve golangci-lint baseline (errcheck + staticcheck)",
          "is_bot": false,
          "headline": "Merge pull request #70 from Detective-XH/chore/golangci-lint-fixes",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-02T19:43:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "45d6503d3448f126d3151cd3dcdb4dde6dbcc278",
          "body": "Fix the 23 pre-existing golangci-lint findings the new CI job gates against:\n\n- errcheck: handle previously-dropped errors —\n  - store.GetStats: propagate Row.Scan errors\n  - parser.ParseFile: propagate ast.Walk error (extractText's Walk is\n    structurally error-free, so explicit discard with a com\n[…]\nrite De Morgan negations in search ranking + tests\n- staticcheck ST1018: escape literal U+200B as \\u200b in scanner/store tests\n\ngo build, go vet, golangci-lint (0 issues), and go test -race all pass.",
          "is_bot": false,
          "headline": "fix: resolve golangci-lint baseline (errcheck + staticcheck)",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-02T19:39:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a393b9c7ea7a743b4f2bf4f00a82ccda13cbdd98",
          "body": "ci: add golangci-lint config + new-issues-only CI job",
          "is_bot": false,
          "headline": "Merge pull request #69 from Detective-XH/chore/golangci-lint-cleanup",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-02T19:23:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8d9ba310297eed1b10c7224510107b361b275a5f",
          "body": "Drops golangci/golangci-lint-action (Node-20 deprecation warning + a\nthird-party action dependency) in favour of a pinned `go install` of\ngolangci-lint v2.12.2, diffing new issues against the PR base via\n--new-from-rev=FETCH_HEAD.",
          "is_bot": false,
          "headline": "ci: run golangci-lint via pinned go install, not the JS action",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-02T19:19:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "44d1fcaa9665228982eee83fb75554a2eb13c873",
          "body": "Add .golangci.yml (default linters; errcheck tuned to exclude conventional\ncleanup — sql/* and io.Closer Close, Tx.Rollback, fmt.Fprint*, flag.Parse,\nstore.Store/workspace.Workspace Close — and disabled on _test.go).\n\nAdd a golangci-lint CI job via golangci-lint-action with only-new-issues,\ngated to pull_request events so it flags issues a PR introduces without\nblocking on the pre-existing baseline (cleaned up in a follow-up PR).",
          "is_bot": false,
          "headline": "ci: add golangci-lint config + new-issues-only CI job",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-02T19:14:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0b91247af94774f822b3a58d1f5d106b0512a1c3",
          "body": "deps: adopt Detective-XH/gopdf v0.6.3 (renamed from Detective-XH/pdf)",
          "is_bot": false,
          "headline": "Merge pull request #68 from Detective-XH/deps/adopt-gopdf-v0.6.3",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-02T18:48:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ae9566d8b1fe5fe7dca799b0ec5a2914aaf188e1",
          "body": "The PDF extractor dependency was renamed: GitHub repo pdf → GoPDF and Go\nmodule path github.com/Detective-XH/pdf → github.com/Detective-XH/gopdf. The\npackage identifier is unchanged (still `pdf`), so only the import path,\ngo.mod/go.sum, and doc references change — no call-site edits.\n\nThis also bump\n[…]\ning word-space fix.\n\nAdd gitignored go.work (+ go.work.sum) for local co-development against ../GoPDF\nwithout a tag/bump round-trip.\n\ngo build ./... and go test -race ./... pass against pinned v0.6.3.",
          "is_bot": false,
          "headline": "deps: adopt Detective-XH/gopdf v0.6.3 (renamed from Detective-XH/pdf)",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-02T18:44:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b8da87dcfa7488f1bb45323a390b9f773dc4561d",
          "body": "Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.3.0 (#67)",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-02T01:46:15Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "fdf7f9db739eaee6871ea5891966db76468c96c3",
          "body": "- bump github.com/Detective-XH/pdf v0.5.0 -> v0.6.0. Public API unchanged\n  (OpenBytes/Page/Font/Value signatures identical), so no call-site changes.\n  Automatic gains: broader CJK CMap coverage (GB-EUC/GBKp-EUC/ETenms-B5/\n  KSC-EUC/KSCms-UHC) and upstream hardening (inline-image crash, zero-length\n[…]\nest: extend buildMinimalPDFEnc with an /Info dict param; add\n  TestExtractPDF_CreationDateNormalized pinning +05'00' -> 04:30:00Z.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(extractor): adopt Detective-XH/pdf v0.6.0 Metadata API (#65)",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-02T01:20:44Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "817b7e6571d35200e3a41e163e52e9229f8477ab",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: add Go Report Card badge to README",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-02T00:27:49Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "7865c17abb3a44aa781472d5cec432f1879b9795",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "style: gofmt fix struct literal alignment in context_arg_clamp_test.go",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T21:29:05Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4a2f6dfa9fcb0d9c025670f19fb93121edc2b08d",
          "body": "Broad cross-workspace queries (maxNodes=10, ~21 KB in workspace mode)\ncaused LLM runners to struggle with oversized payloads. Add a 20 KB\nsoft cap in the summary render loop: after rendering each document, if\nthe buffer exceeds maxContextResponseBytes and more docs remain, emit a\ntruncation notice a\n[…]\nntext_PayloadOverflowNotice_SmallQuery (negative,\n3-doc fixture ~4 KB).\nDiscovered: AX Probe v6 OPEN-W 2026-06-01 (context-payload-overflow).\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(context): soft-cap docgraph_context summary payload at 20 KB",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T21:23:21Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3fd7bc655d230472df845de1968348d0a64021f4",
          "body": "…ery (#64)\n\nThe isolated-docs query joined files.path against edges.source, but\nedges.source holds node IDs. Inline wikilinks are attributed to their\nnearest heading node (ID = path#heading:line), not the document node\n(ID = file path), so the old LEFT JOIN missed all heading-attributed\nlinks and fa\n[…]\nins through nodes.file_path\nso all edges — regardless of whether their source is the document node\nor a heading node — are counted correctly.\n\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(skills): correct docgraph-drift-audit Step 2b isolated-doc SQL qu…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T20:40:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "42aa176dabecdc47be8f9974c77b10c8b2be1d06",
          "body": "Add project=<name> parameter to docgraph_search, docgraph_context,\ndocgraph_explore, docgraph_similar, docgraph_files, docgraph_tags in\nworkspace mode. Passing project= scopes the fan-out to a single project DB\n(early-continue in workspace.SearchWithOptions, GetAllFiles, GetAllTopLevelDirs,\nand dire\n[…]\nructionsWorkspaceProjectFilter.\nfanout_test.go updated for GetAllFiles/GetAllTopLevelDirs new signatures.\ngo test -race 18/18 packages green.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(workspace): per-project filter for all workspace query tools",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T20:32:06Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7466c42b074a73322e8ae2ac0430a3548b0608bd",
          "body": "…012)\n\nReplaces all WriteString(fmt.Sprintf(...)) patterns with fmt.Fprintf\nacross internal/tools and internal/extractor, eliminating unnecessary\nintermediate string allocations.\n\nAlso resolves related pre-existing diagnostics found in the same files:\n- rangeint: modernise for-loop to range-over-int\n[…]\nn-memory parsing directly from the src bytes passed by the extractor.\nRemoves the os.CreateTemp/Write/Close/Remove dance and the \"os\" import.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(style): replace sb.WriteString(fmt.Sprintf) with fmt.Fprintf (QF1…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T20:30:43Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "016c31bd0c0979cd9d5d3a14f65b84f2e979afb7",
          "body": "PDF CJK Phases 1–6 shipped native decoders (Shift-JIS, UCS-2-BE, GBK,\nBig5-ETen, UHC) but AGENTS.md still described CJK as a \"trigram search\"\nsignal only. Updated the supporting signal to mention that CJK PDFs are\ndecoded natively rather than skipped or garbled — closing the fit-guide\ndrift surfaced in the Unreleased CHANGELOG review.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(agents): expand CJK supporting signal to cover PDF CJK extraction",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T20:06:46Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b8be6ddffba8e06e6bc98c565058d842d3cbbb9d",
          "body": "…t Layer-1b runner + S-6 supply-chain hardening (#63) (#63)\n\nAdd 6 new deploy-gate test functions + toolDescriptionsMap helper to tool_surface_test.go,\ncovering every un-guarded serverInstructions and tool-description AX assertion:\n  TestServerInstructionsNoSeedDocumentGuidance (A6)\n  TestServerInst\n[…]\n(debug.ReadBuildInfo),\ngo mod verify in CI (already present), GOFLAGS=-mod=readonly added to test job, /ax-assert\nbinary added to .gitignore.\n\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test(ax): golden-string CI guards (A6/A12/A13–A15/A18) + cmd/ax-asser…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T18:56:27Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f72abc9d49162450661bd81dd44f5ef06b92e5ab",
          "body": "…WorkspaceProjects (#62)\n\nCloses two residual gaps from the startup deletion-reconcile feature (#60/#61): the\n--workspace per-project reconcile path had no runtime coverage (this machine serves\n--path .), and no test asserted the reconcile is wired into a named, testable unit.\n\n- Extract the workspa\n[…]\nt\n  isolation, none of which the single-store reconcile tests covered.\n\ngo build / go vet / gofmt / go test -race ./... all green.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test(serve): cover the --workspace reconcile path + extract reconcile…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T16:43:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "1786ffa1d8194d34208c85120b6b193ed67b7784",
          "body": "…ncile-on-start) (#61)\n\nFollow-up to #60 (0959412), landed pre-deploy so no shipped binary ever carries the flag.\n\nThe escape hatch was redundant AND a footgun for the first-class user (the LLM). The one\ncase it nominally protected — a copied/portable .docgraph whose files don't exist at the\nlocal r\n[…]\n.\n\ngo build / go vet / gofmt / go test -race green; reconcileDeletedFiles + its T1–T5 tests\nare unchanged (they call it directly).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(serve): make startup deletion-reconcile always-on (drop --no-reco…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T16:20:33Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "09594122a8a91c65050edc42ffd36f1faa2be4a1",
          "body": "…atcher-gap staleness) (#60)\n\nDeletion-prune was purely watcher-event-driven (pruneDeletedFiles called only from\nthe serve watcher callback): a file deleted while serve was DOWN fired no fsnotify\nevent, and neither cold-start nor `sync`/`index` reconciles DB-vs-disk, so its nodes\npersisted until `in\n[…]\ndversarially verified via two CodeGraph-armed subagents; plan\nadvisor-signed-off (plans/startup-deletion-reconcile-2026-06-01.md).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(serve): reconcile downtime-deleted files on warm startup (close w…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T16:06:56Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "bc19a8961f51017ef487c2738e93850661c29268",
          "body": "…content-trust test guard (#59)\n\nhandleContext now reads impactDepth/referenceLimit via getIntArgClamped\n(1..3 / 1..20), matching the documented tool contract and the H-24 \"clamp\nevery MCP int arg at retrieval\" invariant — these were the last two\nuser-facing int args still relying solely on the down\n[…]\ne 2026-06-01 redteam security-audit (PASS WITH NOTES); both NOTEs were\ndefense-in-depth / regression-guard, no live vulnerability.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "harden(tools): clamp context-pack int args at retrieval (H-24) + S-1 …",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T14:54:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a92f092aa0886afffd74ce9ce2a536015c7b546c",
          "body": "…ore.WriteDependents (#58)\n\nindexStore (indexer.go) and indexProjectOpts (internal/workspace/indexing.go)\neach carried a byte-identical 8-step per-file dependent tail — document /\ngovernance / research metadata upserts, entitygraph.IndexFile, edge +\nunresolved-ref inserts, UpsertFile, git-history up\n[…]\nnit tests locking the contract\n(changedDocIDs append, UpsertFile persistence, metadata-failure-is-fatal +\nlogPrefix reproduction).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(indexing): extract shared per-file tail into internal/indexc…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T13:56:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8f254804bfd7328bcc911579378e2bf47dff958a",
          "body": "…ipeline to indexing.go (#57)\n\nworkspace.go conflated three concerns: the workspace/multi-project\nabstraction, the fan-out query facade, and the entire single-project\nindexing pipeline (indexProjectOpts, 283 lines). Move the indexing\npipeline (IndexAll, ReindexProject, indexProject, indexProjectOpts\n[…]\n decompose the 283-line indexProjectOpts or consolidate the\nindexStore (indexer.go) parallel-pipeline duplication — both deferred.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(workspace): split workspace.go god file — extract indexing p…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T12:49:12Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "1c5b8c0593987da4cc0f3415e69c03dd52b666a9",
          "body": "…c/pdf) (#56)\n\nThe PDF text extractor was forked ledongthuc/pdf -> Detective-XH/pdf v0.4.0\n(PR #52) for CJK CMap decoding, but README still credited the upstream in both\nthe dependency table and the extractor dispatch flow. Point both at the fork,\nkeeping upstream attribution. Doc-only; no code or go.mod change.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(readme): correct PDF dep to Detective-XH/pdf fork (was ledongthu…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T11:37:38Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "9a693ce072181b352406dd907ddfa6d2dabb1609",
          "body": "…ndlers (#55)\n\nClean-code-audit follow-up — raise coverage of two packages by testing\npreviously-uncovered behavior-bearing functions (registration glue left untested\nintentionally).\n\n- internal/workspace/fanout_test.go: GetAllStats / GetAllFiles (incl. prefix\n  filter) / GetAllTopLevelDirs / FindNo\n[…]\nHistory (incl. param-validation and not-found paths). 72.4% -> 76.6%.\n\ngo build / go vet / go test -race -count=1 ./... all green.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test(workspace,tools): cover fan-out queries + tag/explore/history ha…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T11:21:56Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "264b3c0f3a0cb2d6b6180ed05a0f3d9f019204f9",
          "body": "… (#54)\n\n- internal/codedoc/codedoc_jsts.go: remove the redundant `loc != nil &&` before\n  len(loc) in three FindStringSubmatchIndex guards (staticcheck S1009; len(nil)==0\n  makes `len(loc) >= 4` equivalent). Behavior-preserving.\n- gofmt -w across the tree: pdf.go, context_pack.go + 5 test files (wh\n[…]\nhub/workflows/test.yml: add a `gofmt` job so unformatted Go fails CI.\n\ngo build / go vet / go test -race -count=1 ./... all green.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "style: drop redundant S1009 nil-checks, gofmt repo, add CI gofmt gate…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T10:51:32Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b3e6e7b33b7d0fbda330a55fd53da4426aa14cba",
          "body": "…d (#53)\n\nReflects Detective-XH/pdf v0.4.0: all five predefined CMap families\n(Uni*-UCS2-*, Shift-JIS, GBK-EUC, ETen-B5, KSCms-UHC) now decoded.\nStatic unsupported-encoding blocklist removed; runtime encoding-garbage\nbackstop retained.\n\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: update PDF CMap support list — GBK / Big5-ETen / UHC now decode…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T10:03:33Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "803e5eb302060d51164c3fce8313f2e91c0613ab",
          "body": "…Detective-XH/pdf v0.4.0 (#52)\n\n* feat(extractor): Phase 3 — UniGB/UniCNS/UniJIS/UniKS-UCS2-H decoder via Detective-XH/pdf v0.3.0\n\nFork v0.3.0 adds ucs2BEEncoder: reads 2-byte big-endian Unicode code points\ndirectly (UCS-2/BMP, no x/text dep). Removes UniXX-UCS2-H/V from the Phase 0\nunsupported-enco\n[…]\ning no unsupported-encoding\nwarning is emitted for GBK-EUC-H documents.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(extractor): Phase 5+6 — GBK / Big5-ETen / UHC CMap decoders via …",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T09:49:42Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "372ba9b19075d19a2fd3d49cb2d8bf1ed91cb042",
          "body": "…ive-XH/pdf v0.2.0\n\n- Upgrade to Detective-XH/pdf v0.2.0 which adds multibyteCMapEncoder backed\n  by golang.org/x/text/encoding/japanese.ShiftJIS for 90ms-RKSJ-H/V and\n  90pv-RKSJ-H predefined CMaps.\n- Remove 90ms-RKSJ-H/V from isUnsupportedCMapName(): the fork now decodes them.\n- Rebuild cjk_sample\n[…]\nd as image-only.\n- Flip TestExtractPDF_RealModeB1: assert no warning, non-empty text, and that\n  both Japanese and ASCII content are present.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(extractor): Phase 2 — Shift-JIS (90ms-RKSJ-H) decoder via Detect…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T08:16:23Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c58f74016981762c4b381eb31b8940b0f1c13008",
          "body": "Replace github.com/ledongthuc/pdf with the Detective-XH/pdf fork at v0.1.0.\nNo behaviour changes; all 17 test packages pass with -race.\n\nPhase 2 (Shift-JIS / RKSJ decoder) and Phase 3 (UniGB-UCS2-H fixture +\nCJK gate) will follow in subsequent PRs against this fork.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(extractor): Phase 1 — swap pdf dep to Detective-XH/pdf fork",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T08:01:22Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "e6f44a473de399741a4e13a8dcc25d4b1508e42d",
          "body": "…ctPDF_RealModeB1 (#51)\n\nAdds a real-world Mode B1 PDF fixture (1039 bytes) from the mozilla/pdf.js\ntest corpus (Apache 2.0). Font HeiseiMin-W3 uses /90ms-RKSJ-H predefined CMap\nwith no /ToUnicode entry — the exact failure mode Phase 0 detects.\n\nTestExtractPDF_RealModeB1 confirms:\n- extraction-faile\n[…]\n — not\ncommitted; 1.4 MB). Fork of ledongthuc/pdf is justified.\n\nSource: github.com/mozilla/pdf.js/blob/master/test/pdfs/90ms_rksj_h_sample.pdf\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test(extractor): Phase -1 gate — real Mode B1 CJK fixture + TestExtra…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T07:52:20Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "09b9a69736abf58cbe23593329f2bd1c2d4c7dac",
          "body": "…ap encodings (#50)\n\nledongthuc/pdf silently passes fonts with unrecognised predefined CMap names\n(e.g. UniGB-UCS2-H) through a no-op encoder, producing U+FFFD-laden output\nwith a nil error. This makes utf8.ValidString useless as a guard.\n\nPhase 0 (detection/triage, not a CJK fix):\n- pageUnsupported\n[…]\nTests: TestExtractPDF_UnsupportedEncoding, TestReplacementCharRatio,\nTestSanitizeWarningDetail, FuzzExtractPDF CJK seed. All 17 packages green.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(extractor): Phase 0 PDF — surface errors + detect unsupported CM…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T07:20:58Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c2aaba7f0555ff4af5913006ace3a59f50ab1156",
          "body": "…footer + drift_audit/enumerate guidance (#49)\n\nP-v5-2 (reliability): the live serve watcher reindex never pruned files deleted from\ndisk — a deleted/moved/renamed doc's nodes, edges, FTS rows, metadata, entity mentions,\nand file-hash row persisted in the live index until `index --force`. New pruneD\n[…]\nuild/vet/test -race 17/17 green. Implemented via 3\nparallel CodeGraph-armed worktree subagents (disjoint files), advisor-reviewed.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(ax): AX v5 — deletion-staleness prune + search limit-instability …",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T01:05:15Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3647c9763faabab0b6f017c0ba44a05e6d8caf71",
          "body": "…cuments when enumerating (B mitigation) (#48)\n\nAX probe v4's B finding: weak agents asked to enumerate \"distinct work\nthreads\" over-counted 2-3x by treating each PR a document mentions in its\nbody as a separate thread (one file listing PR #19-24 → \"6 threads\").\n\nThis is a task-granularity gap, not \n[…]\n./... green.\n\nMITIGATION, not a verified fix — effect on weak agents is unverified;\nAX v5 must re-probe B before calling it fixed.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(mcp): serverInstructions granularity guidance — count distinct do…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-05-31T23:50:26Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5f58f2f0456c7d969c2d900f5fe510a9a9b30e39",
          "body": "…aude/ stay indexed (#46)\" (#47)\n\nThis reverts commit deb7f40b3532a1e3c3b0f4bf0dc86d91dcff327d.",
          "is_bot": false,
          "headline": "Revert \"fix(mcp): serve this repo with --no-gitignore so plans/ + .cl…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-05-31T23:43:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "deb7f40b3532a1e3c3b0f4bf0dc86d91dcff327d",
          "body": "…ay indexed (#46)\n\nThe tracked .mcp.json (serve --path .) overrides the global workspace config when\ncwd is inside the repo, and ran WITHOUT --no-gitignore — so the reindex pipeline\ncorrectly respected .gitignore and never maintained gitignored dirs (plans/,\n.claude/). A .docgraph force-built with -\n[…]\nthis repo in an MCP client\nnow indexes their own gitignored files into a local .docgraph (intended for this\nproject's dogfooding).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(mcp): serve this repo with --no-gitignore so plans/ + .claude/ st…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-05-31T23:36:37Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f71c9eede450bcd42309b12e9af502f2488d4caf",
          "body": "…tinct-file footer, missing_status clarity (#45)\n\nFrom the AX probe v4 behavioral audit (zero regressions; all v3 fixes held):\n\n- P-v4-1 (A′/H): the seeded-gather serverInstructions sentence over-promised\n  docgraph_context. Verified live, context is task/keyword-based and does not\n  compose the cit\n[…]\nield.\n\ngo build/vet + go test -race ./... 17/17 green. New: search_test.go\nTestHandleSearch_DistinctFileFooter*. No schema change.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(tools): AX v4 surface fixes — seeded-gather call-both, search dis…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-05-31T23:14:09Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a4bd2e38e92b0e23d18929e0937a673cd86f6bdd",
          "body": "…ve --workspace fd exhaustion) (#44)\n\n`serve --workspace` recursively watches the whole tree; on macOS (kqueue) every\nwatched dir/file is one fd, so a large workspace opens ~58K fds per process —\nmultiplied across every concurrent serve (one per connected MCP client), this\nexhausted the system file \n[…]\nlane\ntoo) + macOS fd-delta proof (uncapped 3072 → capped 524 on a 3068-entry tree) +\nreindex fd-leak guard (0 fds over 20 cycles).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(watcher): cap fsnotify watches per process to bound fd usage (ser…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-05-31T22:32:35Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3414ede78f8226e442c082e52dffb9e27fe75583",
          "body": "…strip guidance, trust notes (#43)\n\nRender/description-layer fixes for the AX-probe-v3 findings (no store/ranking\nchange; go build + go test -race ./... green, 17/17):\n\n- docgraph_context: collapse same-source-file result nodes to one entry per\n  document, listing additional matched sections inline \n[…]\ntency + K recount).\n\nLayer-1 A0/A4 live substrings preserved (\"distinct other documents\",\n\"incoming edges ←\", \"outgoing edges →\").\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(tools): AX v3 surface fixes — context dedup, tool-overlap & path-…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-05-31T21:43:07Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0e2471fc34c5929e999b6d7ab2e040f4f810a51f",
          "body": "…(P6/C2) (#42)\n\nsearch('README') now returns README.md itself, not just headings that mention the\ntoken. A new collectFilenameCandidates retrieves a DOCUMENT whose basename (extension\nstripped) exactly equals the query — the find-this-doc-by-name case FTS misses because a\ndocument node's indexed tex\n[…]\n Fires only on a single-token query that equals a basename; whitespace queries\nskip it. Closes the v2 AX-probe C2 deferred defect.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(search): exact filename match surfaces the named document first …",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-05-31T19:38:19Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "870efe645a65187e1584fd7574b7a7a4745e5659",
          "body": "…files honesty, topic-gather guidance (#41)\n\n* fix(tools): surface TF-IDF similarity score components + ground caveats (P1/P3a/P5b)\n\ndocgraph_similar render now labels the score as a 0-1 weighted blend and shows the\ntfidf/refs/tags signal components already persisted in edge metadata (closing the v2\n[…]\nnot a table row, so the table shape is unchanged.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(tools): AX surface follow-ups — similar provenance, node parity, …",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-05-31T19:11:54Z",
          "body_truncated": true,
          "is_coding_agent": true
        }
      ],
      "releases_count": 15,
      "commits_last_year": 258,
      "latest_release_at": "2026-06-15T20:00:18Z",
      "latest_release_tag": "v0.3.4",
      "releases_from_tags": false,
      "days_since_last_push": 7,
      "active_weeks_last_year": 4,
      "days_since_latest_release": 42,
      "mean_days_between_releases": 2.3
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 42,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/Detective-XH/docgraph",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/Detective-XH/docgraph",
          "is_deprecated": false,
          "latest_version": "v0.3.4",
          "repository_url": "https://github.com/Detective-XH/docgraph",
          "versions_count": 15,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-06-15T19:59:33Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 42
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 5,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": null,
      "open_issues_and_prs": 4
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": true,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 33922,
      "source_files_sampled": 222,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        "AGENTS.md"
      ],
      "agent_instruction_max_bytes": 7493
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": null,
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/Detective-XH/gopdf",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.8.0"
        },
        {
          "name": "github.com/fsnotify/fsnotify",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.1"
        },
        {
          "name": "github.com/mark3labs/mcp-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.54.1"
        },
        {
          "name": "github.com/yuin/goldmark",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.8.2"
        },
        {
          "name": "golang.org/x/net",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.56.0"
        },
        {
          "name": "gopkg.in/yaml.v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.0.1"
        },
        {
          "name": "modernc.org/sqlite",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.52.0"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 4,
        "merged_prs": 95,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 3
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "Detective-XH",
          "commits": 252,
          "avatar_url": "https://avatars.githubusercontent.com/u/163795227?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "test.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [
        ".golangci.yml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 3,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/12 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 10,
            "reason": "project is fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 8,
            "reason": "5 out of the last 5 releases have a total of 5 signed artifacts.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 9,
            "reason": "1 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "fd794aea38e3669336e9cc915541f85cd826cdc8",
        "ran_at": "2026-07-28T04:36:32Z",
        "aggregate_score": 5,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-27T08:13:01Z",
      "oldest_open_prs": [
        {
          "number": 98,
          "created_at": "2026-06-22T08:11:05Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 99,
          "created_at": "2026-06-22T08:12:25Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 101,
          "created_at": "2026-07-13T08:13:21Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 102,
          "created_at": "2026-07-20T08:12:18Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-06-15T19:59:33Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/Detective-XH/DocGraph",
    "host": "github.com",
    "name": "DocGraph",
    "owner": "Detective-XH"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 56,
      "inputs": {
        "security": 50,
        "vitality": 73,
        "community": 29,
        "governance": 50,
        "engineering": 74
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 73,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 57,
            "inputs": {
              "commits_last_year": 258,
              "human_commit_share": 0.98,
              "days_since_last_push": 7,
              "active_weeks_last_year": 4
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 7 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 7
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "4/52 weeks with commits",
                "points": 2.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 4
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "258 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 258
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 98,
            "inputs": {
              "releases_count": 15,
              "latest_release_tag": "v0.3.4",
              "releases_from_tags": false,
              "days_since_latest_release": 42,
              "mean_days_between_releases": 2.3
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "15 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 15
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 42 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 42
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~2.3 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 2.3
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
                "points": 8,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 29,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "forks": 0,
              "stars": 5,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "5 stars",
                "points": 9.8,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 50,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 70,
            "inputs": {
              "merged_prs": 95,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 3
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "95/98 decided PRs merged",
                "points": 37.1,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 95,
                      "decided": 98
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/12 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 37,
            "inputs": {
              "followers": 3,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "Detective-XH",
              "public_repos": 28,
              "account_age_days": 862
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "3 followers of Detective-XH",
                "points": 4.3,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 3,
                      "login": "Detective-XH"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "28 public repos, account ~2 yr old",
                "points": 15.4,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 28
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 2
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/Detective-XH/docgraph"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 42
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 42 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 42
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "15 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 15
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 74,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "1 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "topics": [
                "claude",
                "documentation",
                "golang",
                "knowledge-graph",
                "llm",
                "markdown",
                "mcp",
                "mcp-server",
                "obsidian",
                "rag",
                "semantic-search",
                "sqlite",
                "agent",
                "docx",
                "html",
                "pdf",
                "codex",
                "hermes",
                "opencode"
              ],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "19 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 19
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 50,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 50,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 5
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/12 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is fuzzed",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "1 existing vulnerabilities detected",
                "points": 6.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 78,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [
                "AGENTS.md"
              ],
              "agent_instruction_max_bytes": 7493
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "98 of 98 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 98,
                      "sampled": 98
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "excellent",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0.59,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0.02
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "go.mod (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "go.mod"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "59 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 59,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "2 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 2,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 33922,
              "source_files_sampled": 222,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/222 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 222,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "critical",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 20,
            "inputs": {
              "example_dirs": [],
              "has_mcp_signal": true,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-28T04:36:46.704543Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/d/Detective-XH/DocGraph.svg",
  "full_name": "Detective-XH/DocGraph",
  "license_state": "standard",
  "license_spdx": "MIT"
}
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Go.
Software health index

Score profile

Ownership

Package ecosystems

Metrics by category

Key facts

Data collection warnings

More detail

Related records
