Публічний реєстр
Звіт про здоров'я програмного забезпеченнясхема 0.27.0 · метрики 1.13.0 · 2026-07-28 04:36 UTC

Detective-XH / DocGraph

Govern your documents like code. MCP server that indexes .md/.docx/.html/.pdf into a SQLite knowledge graph and runs drift audits — stale policies, conflicting research claims, superseded docs, undocumented code exports. 12 MCP tools incl. cross-reference graph, governance + provenance metadata, topic similarity. Single binary, zero runtime deps.

GoMIT★ 5 зірок⑂ 0 форківз трав. 2026 р.Переглянути на GitHub ↗

Detective-XH/DocGraph має індекс здоров’я 56 зі 100, що відповідає смузі «Помірний». Найвищий показник — AI Readiness (78/100), найнижчий — Community & Adoption (29/100). Останнє оновлення було 7 днів тому. Більшість нещодавньої роботи виконує один учасник.

56
загалом / 100
Помірний

Індекс здоров'я програмного забезпечення

Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє середнє; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 49 («Під ризиком»). Готовність до ШІ не входить до індексу.

56
Відмінний85-100Зразковий; відповідає практично всім перевіреним критеріям
Добрий70-84Здоровий; незначні прогалини
Помірний50-69Прийнятний, але з помітними прогалинами; рекомендовано перевірку
У зоні ризику30-49Суттєві слабкі місця; впровадження потребує обережності
Критичний1-29Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
ЖиттєздатністьСпільнота тавпровадженняСталість таврядуванняІнженернаякістьБезпекаГотовність доШІ

Профіль оцінок

Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.

Власність

Detective-XОсобистий обліковий запис
3 підписники28 публічних репозиторіївз бер. 2024 р.

Цей репозиторій належить особистому обліковому запису. Проєкт з єдиним власником несе більший ризик безперервності, ніж підтримуваний організацією.

Пакетні екосистеми

РеєстрПакетВерсіяЗавантажень / місВерсіїОстання публікація
Gogithub.com/Detective-XH/docgraphv0.3.4-1542 дні тому

Метрики за категоріями

Життєздатність

Чи живий проєкт — чи пишеться код і чи виходять релізи?

73Добрий · 22% загального індексу
Як обчислюється оцінка
36/36Свіжість push — останній push 7 дн. тому
2.8/36Ритм комітів — 4/52 тижнів із комітами
18/18Обсяг комітів — 258 комітів за останній рік
0/10OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully
Використані вхідні дані
commits_last_year258
human_commit_share0,98
days_since_last_push7
active_weeks_last_year4
Як обчислюється оцінка
27/27Випускає релізи — опубліковано 15 релізів
36/36Свіжість релізів — останній реліз 42 дн. тому
27/27Ритм релізів — реліз кожні ~2,3 дн.
8/10OpenSSF Scorecard: Signed-Releases — 5 out of the last 5 releases have a total of 5 signed artifacts.
Використані вхідні дані
releases_count15
latest_release_tagv0.3.4
releases_from_tagsні
days_since_latest_release42
mean_days_between_releases2,3

Спільнота та впровадження

Чи має проєкт користувачів, завантаження, увагу та влаштовані умови для контриб’юторів?

29Критичний · 18% загального індексу
Як обчислюється оцінка
9.8/60Зірки — 5 зірок
0/25Форки — 0 форків
0/15Спостерігачі — 0 спостерігачів
Використані вхідні дані
forks0
stars5
watchers0
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
Як обчислюється оцінка
22.5/22.5README
22.5/22.5Ліцензія — визнана ліцензія (MIT)
0/18Настанови CONTRIBUTING
0/13.5Кодекс поведінки
0/7.2Шаблон issue
0/6.3Шаблон PR
Використані вхідні дані
has_readmeтак
has_licenseтак
has_contributingні
has_issue_templateні
has_code_of_conductні
has_pull_request_templateні

Сталість та врядування

Чи переживе проєкт своїх людей — бас-фактор, реактивність, хто за ним стоїть і як супроводжуються пакети?

50Помірний · 24% загального індексу
Як обчислюється оцінка
9/54Бас-фактор — на 1 контриб’ютор(ів) припадає половина всіх комітів
0/22.5Розподіл комітів — головний контриб’ютор — автор 100% комітів
1.4/13.5Широта контриб’юторів — 1 контриб’юторів
0/10OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0
Використані вхідні дані
bus_factor1
contributors_sampled1
top_contributor_share1
Як обчислюється оцінка
0/46.8Вирішення issue — немає issue або даних
37.1/38.3Прийняття PR — злито 95/98 вирішених PR
0/15OpenSSF Scorecard: Code-Review — Found 0/12 approved changesets -- score normalized to 0
Використані вхідні дані
merged_prs95
open_issues0
closed_issues0
issue_closed_ratio
closed_unmerged_prs3
Виключено з оцінювання (немає даних або не застосовно): Вирішення issue. Залишкові ваги перенормовано.

Власність та опіка

37У зоні ризику
Як обчислюється оцінка
10/30Підтримка власника — особистий (користувацький) обліковий запис
0/20Верифікований домен — не застосовно до користувацьких облікових записів
4.3/25Охоплення власника — 3 підписників у Detective-XH
15.4/25Послужний список — 28 публічних репозиторіїв, вік облікового запису ~2 р.
Використані вхідні дані
followers3
owner_typeUser
is_verified
owner_loginDetective-XH
public_repos28
account_age_days862
Виключено з оцінювання (немає даних або не застосовно): Верифікований домен. Залишкові ваги перенормовано.

Супровід пакетів

100Відмінний
Як обчислюється оцінка
25/25Опубліковано й доступно — 1 пакет(ів) у go
35/35Свіжість публікацій — остання публікація 42 дн. тому
20/20Історія версій — 15 опублікованих версій
20/20Не застарілий — активний, не deprecated і не yanked
Використані вхідні дані
packagesgithub.com/Detective-XH/docgraph
ecosystemsgo
any_deprecatedні
min_days_since_publish42

Інженерна якість

Чи наявні базові інженерні практики та документація?

74Добрий · 20% загального індексу
Як обчислюється оцінка
24/24Процеси CI — 1 процес(ів) CI
24/24Наявні тести
16/16Конфігурація лінтера — .golangci.yml
0/9.6Pre-commit-хуки
0/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 12 out of 12 merged PRs checked by a CI test -- score normalized to 10
Використані вхідні дані
has_ciтак
has_testsтак
has_editorconfigні
has_linter_configтак
has_precommit_configні

Документація

60Помірний
Як обчислюється оцінка
30/30README
0/25Каталог документації
0/15Сайт документації / домашня сторінка
10/10Опис репозиторію
10/10Теми — 19 тем
10/10Wiki
Використані вхідні дані
topicsclaude, documentation, golang, knowledge-graph, llm, markdown, mcp, mcp-server, obsidian, rag, semantic-search, sqlite, agent, docx, html, pdf, codex, hermes, opencode
has_wikiтак
homepage
has_readmeтак
has_docs_dirні
has_descriptionтак

Безпека

Чи міцні видимі практики безпеки й ланцюга постачання, без непослабленої пов’язаності з юрисдикціями високого ризику?

50Помірний · 16% загального індексу

Стан безпеки

50Помірний
Як обчислюється оцінка
7.5/7.5Binary-Artifacts — no binaries found in the repo
2.2/7.5Branch-Protection — branch protection is not maximal on development and all release branches
2.5/2.5CI-Tests — 12 out of 12 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/12 approved changesets -- score normalized to 0
0/2.5Contributors — project has 0 contributing companies or organizations -- score normalized to 0
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
5/5Fuzzing — project is fuzzed
2.5/2.5Ліцензія — license file detected
0/7.5Maintained — project was created within the last 90 days. Please review its contents carefully
0/5Packaging — немає даних
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
0/5Security-Policy — security policy file not detected
6/7.5Signed-Releases — 5 out of the last 5 releases have a total of 5 signed artifacts.
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
6.8/7.5Vulnerabilities — 1 existing vulnerabilities detected
Використані вхідні дані
sourceopenssf_scorecard
checks_evaluated17
scorecard_versionv5.5.0
checks_inconclusive1
scorecard_aggregate5
Виключено з оцінювання (немає даних або не застосовно): packaging. Залишкові ваги перенормовано.

Готовність до ШІ

Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Незалежний, експериментальний бейдж — вага 0.0, тож він подається окремо і не впливає на загальний індекс здоров'я.

78Добрий · 0% загального індексу
Як обчислюється оцінка
45/45Інструкції для агентів — AGENTS.md
0/15Машиночитана документація (llms.txt)
40/40Читабельна історія комітів — намір зазначено у 98 з 98 людських комітів (структурований заголовок або пояснювальний текст)
Використані вхідні дані
has_llms_txtні
legible_history_share1
agent_instruction_filesAGENTS.md
agent_instruction_max_bytes7 493
Як обчислюється оцінка
12.6/18Розгортання однією командою — go.mod (домовленість інструментарію, без раннера задач)
22/22Автоматизовані тести
11/11Конфігурація лінтера / форматера — .golangci.yml
11/11Статична перевірка типів — Go (статично типізована)
10/10Відтворюване середовище — lockfile
10/10Підтверджена практика роботи з агентами — 59 з останніх 100 комітів створено агентом або з його зазначенням
8/8Автоматизоване супроводження — 2 з останніх 100 комітів — автоматичні оновлення залежностей
0/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Використані вхідні дані
has_nixні
has_testsтак
lockfilesgo.sum
has_dockerfileні
typed_languageтак
bootstrap_files
has_devcontainerні
has_linter_configтак
typecheck_configs
agent_commit_share0,59
toolchain_manifestsgo.mod
dependency_bot_commit_share0,02
Як обчислюється оцінка
45/45Типізований код — Go (статично типізована)
55/55Керовані розміри файлів — 0/222 файлів вихідного коду понад 60 КБ
Використані вхідні дані
primary_languageGo
largest_source_bytes33 922
source_files_sampled222
oversized_source_files0
Як обчислюється оцінка
0/40Схема API (OpenAPI/GraphQL/proto)
20/20Сервер MCP
0/40Придатні до запуску приклади
Використані вхідні дані
example_dirs
has_mcp_signalтак
api_schema_files

Ключові факти

5зірок GitHub
1контриб'юторів
258комітів за останні 12 місяців
7днів від останнього пушу
15релізів
1бас-фактор
0відкритих issue
Goпакетних екосистем

Попередження щодо збору даних

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
  • GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Докладніше

OpenSSF Scorecard 5.0 / 10
5.0сукупно

Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).Scorecard v5.5.0 · 2026-07-28 04:36 UTC

10Binary-Artifactsno binaries found in the repo
3Branch-Protectionbranch protection is not maximal on development and all release branches
10CI-Tests12 out of 12 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/12 approved changesets -- score normalized to 0
0Contributorsproject has 0 contributing companies or organizations -- score normalized to 0
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
10Fuzzingproject is fuzzed
10Licenselicense file detected
0Maintainedproject was created within the last 90 days. Please review its contents carefully
н/дPackagingpackaging workflow not detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
0SASTSAST tool is not run on all commits -- score normalized to 0
0Security-Policysecurity policy file not detected
8Signed-Releases5 out of the last 5 releases have a total of 5 signed artifacts.
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
9Vulnerabilities1 existing vulnerabilities detected
Прямі залежності 7
РеєстрПакетОбмеження версіїМаніфест
Gogithub.com/Detective-XH/gopdfv0.8.0go.mod
Gogithub.com/fsnotify/fsnotifyv1.10.1go.mod
Gogithub.com/mark3labs/mcp-gov0.54.1go.mod
Gogithub.com/yuin/goldmarkv1.8.2go.mod
Gogolang.org/x/netv0.56.0go.mod
Gogopkg.in/yaml.v3v3.0.1go.mod
Gomodernc.org/sqlitev1.52.0go.mod
Усі залежності не зібрано

Не вдалося зібрати розв'язаний набір залежностей для цього звіту: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Звіт у форматі JSON машиночитний
{
  "data": {
    "repo": {
      "topics": [
        "claude",
        "documentation",
        "golang",
        "knowledge-graph",
        "llm",
        "markdown",
        "mcp",
        "mcp-server",
        "obsidian",
        "rag",
        "semantic-search",
        "sqlite",
        "agent",
        "docx",
        "html",
        "pdf",
        "codex",
        "hermes",
        "opencode"
      ],
      "is_fork": false,
      "size_kb": 1207,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Go": 1717032
      },
      "pushed_at": "2026-07-20T08:12:17Z",
      "created_at": "2026-05-25T11:22:29Z",
      "owner_type": "User",
      "updated_at": "2026-07-11T03:48:26Z",
      "description": "Govern your documents like code. MCP server that indexes .md/.docx/.html/.pdf into a SQLite knowledge graph and runs drift audits — stale policies, conflicting research claims, superseded docs, undocumented code exports. 12 MCP tools incl. cross-reference graph, governance + provenance metadata, topic similarity. Single binary, zero runtime deps.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": null,
      "name": "Detective-X",
      "type": "User",
      "login": "Detective-XH",
      "company": null,
      "location": null,
      "followers": 3,
      "avatar_url": "https://avatars.githubusercontent.com/u/163795227?v=4",
      "created_at": "2024-03-18T01:44:03Z",
      "is_verified": null,
      "public_repos": 28,
      "account_age_days": 862
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.3.4",
          "kind": "patch",
          "published_at": "2026-06-15T20:00:18Z"
        },
        {
          "tag": "v0.3.3",
          "kind": "patch",
          "published_at": "2026-06-14T22:17:30Z"
        },
        {
          "tag": "v0.3.2",
          "kind": "patch",
          "published_at": "2026-06-14T14:43:14Z"
        },
        {
          "tag": "v0.3.1",
          "kind": "patch",
          "published_at": "2026-06-13T18:38:44Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2026-06-02T01:47:01Z"
        },
        {
          "tag": "v0.2.3",
          "kind": "patch",
          "published_at": "2026-05-29T00:24:37Z"
        },
        {
          "tag": "v0.2.2",
          "kind": "patch",
          "published_at": "2026-05-28T00:37:27Z"
        },
        {
          "tag": "v0.2.1",
          "kind": "patch",
          "published_at": "2026-05-27T01:14:31Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2026-05-27T00:57:44Z"
        },
        {
          "tag": "v0.1.9",
          "kind": "patch",
          "published_at": "2026-05-25T19:38:33Z"
        },
        {
          "tag": "v0.1.8",
          "kind": "patch",
          "published_at": "2026-05-25T19:23:38Z"
        },
        {
          "tag": "v0.1.7",
          "kind": "patch",
          "published_at": "2026-05-25T19:10:39Z"
        },
        {
          "tag": "v0.1.6",
          "kind": "patch",
          "published_at": "2026-05-25T18:42:35Z"
        },
        {
          "tag": "v0.1.5",
          "kind": "patch",
          "published_at": "2026-05-25T18:27:01Z"
        },
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2026-05-25T15:16:56Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "fd794aea38e3669336e9cc915541f85cd826cdc8",
          "body": "release: v0.3.4",
          "is_bot": false,
          "headline": "Merge pull request #97 from Detective-XH/release/v0.3.4",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-15T19:59:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "efe7d4380b20cc1583b4bbfb10d81482f515db78",
          "body": "Update SHA256 checksums built on Go 1.26.4 (darwin/arm64). Prior\nchecksums in the release/v0.3.4 branch were built on a different\nmachine; rebuilt from the same tagged source for reproducibility.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.3.4",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-15T19:55:15Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3aa4bd63b6eb4ac1a68d5736ef1d56ced202c756",
          "body": "fix(ax-assert): make A2 corpus-stable with dynamic zero-result probe",
          "is_bot": false,
          "headline": "Merge pull request #96 from Detective-XH/fix/ax-assert-a2-dynamic-probe",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-15T19:51:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e2d7680e33a409e380c895d983b0d88d87521879",
          "body": "CHANGELOG.md acquired a similar_to edge to plans/CHANGELOG-v0.3.x.md\n(TF-IDF 0.61), invalidating A2's static assumption. Replace hardcoded\ndocument with findDocWithNoSimilarityResults() that probes candidates\nat runtime and selects the first that renders the zero-result sentinel\n\"No similarity edges for this document\" — matching the existing\nfindDocWithSimilarityResults() pattern used by A1.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(ax-assert): make A2 corpus-stable with dynamic zero-result probe",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-15T19:47:34Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "51420f0dd9ac0c6d6a78b8387585f34f6264f2fc",
          "body": "release: v0.3.4",
          "is_bot": false,
          "headline": "Merge pull request #95 from Detective-XH/release/v0.3.4",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-15T02:00:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "507a188e2f373b306a65c61141dda4e8f248e6f2",
          "body": null,
          "is_bot": false,
          "headline": "release: v0.3.4",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-15T01:56:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "445bce442537c69c5b36cd6a60b9db78aa6cf101",
          "body": "Infers and patches missing status/owner governance fields in .md files.\nDry-run by default; --fix applies atomic writes. Uses yaml.Node to avoid\nre-encoding existing YAML content. HTML-comment-before-frontmatter files\nare reordered so --- is the first byte (Goldmark linenum==0 constraint).\nNon-mapping frontmatter and YAML-special-char values are handled safely.\n15 tests covering all plan edge cases + 2 adversarial-review regressions.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(heal): add docgraph heal CLI subcommand (Phase 1 MD frontmatter)",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-15T01:55:15Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "76fed26a84f45707116dc427f14a9da012bf4c1d",
          "body": "chore(lint): tighten cyclop max-complexity 40 -> 20",
          "is_bot": false,
          "headline": "Merge pull request #94 from Detective-XH/chore/tighten-cyclop-gate",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-15T00:06:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7b74ec8322518b30f8bef5068be35041a48bd6e4",
          "body": "The gocyclo campaign refactored away the old high-CC baseline (handleNode 55, indexStore 44, indexProjectOpts 43, extractHTML 40, all now <=14), so the cyclop backstop no longer needs the 40 slack. Lowered to 20, which sits just above the GoReportCard soft target (gocyclo <=13-15) without double-fir\n[…]\nthan //nolint.\n\nFull-tree golangci-lint lists exactly extractCStyle; gofmt -s clean; gosec exit 0; go build + go test -race green.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(lint): tighten cyclop max-complexity 40 -> 20",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-15T00:01:39Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6ec02dd4224048fd5b00232564decb3841176faa",
          "body": "refactor(gocyclo): reopen by-design-red — codedoc readability + prune/oracle file-greening",
          "is_bot": false,
          "headline": "Merge pull request #93 from Detective-XH/refactor/gocyclo-reduction",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T23:35:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e24e4330162eea5633e465b45e4f0ba19132f8de",
          "body": "…/oracle file-greening\n\nRe-assess and refactor the 3 files PR #89 left by-design-red, at the owner's\ndirection (knowingly overriding the post-advisor LEAVE verdicts).\n\ncodedoc_cstyle.go (readability only — file stays red on extractCStyle, ZERO\nfile-ratio gain): extractSymbol 25->5 (switch -> symbolF\n[…]\nreserving: go build + go test -race green; gofmt -s clean;\ngolangci-lint 0 issues; gosec exit 0; codex adversarial-review approve.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(gocyclo): reopen by-design-red — codedoc readability + prune…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T23:30:39Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c0fb6c128013b316710a6bf4e3b4880b359a5a86",
          "body": "test: fix misspell false positive in reconcile_ignore_test",
          "is_bot": false,
          "headline": "Merge pull request #92 from Detective-XH/fix/misspell-reconcile-test",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T22:37:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9e77cd172af8e0f23be1724db4ef2465567cc4d1",
          "body": "The string literal \"# Drop\\n\\nto be ignored.\\n\" tripped misspell: the\n\\n escape immediately followed by \"to\" reads as \"nto\", flagged as a\nmisspelling of \"not\". Reword the body to \"will be ignored.\" so the\nnewline escape is no longer adjacent to \"to\". No behavior change.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test: fix misspell false positive in reconcile_ignore_test",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T22:31:34Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c45ae4ed70cb9cfaabbf11d130fd29646f74683d",
          "body": "release: v0.3.3",
          "is_bot": false,
          "headline": "Merge pull request #91 from Detective-XH/release/v0.3.3",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T22:16:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2c93075f3e9337fe9f2b0ecbdac121b4b1feec3a",
          "body": "gocyclo decomposition + GetDriftFindings finder-table + modernize sweep + gopdf v0.8.0 bump. CHANGELOG.md + README.md SHA-256 checksums for v0.3.3.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.3.3",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T22:12:55Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1939b26649ac2e3e2281289118b9dafbad06f5ca",
          "body": "build(deps): bump gopdf v0.7.9 -> v0.8.0",
          "is_bot": false,
          "headline": "Merge pull request #90 from Detective-XH/chore/bump-gopdf-v0.8.0",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T22:05:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "06027ad20d2b76f9028f544988a0c84d5778a825",
          "body": "Additive/fix-only release, no breaking API changes. Only internal/extractor/pdf.go consumes gopdf (GetPlainText/Reader.Info/OpenBytes/raw Value traversal) — unaffected by v0.8.0's ToUnicode and TJ-separator fixes. go build + go test -race green (18 pkgs); govulncheck clean.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "build(deps): bump github.com/Detective-XH/gopdf v0.7.9 -> v0.8.0",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T22:01:24Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "65d70e22aa43138a29819ef272e529431cbb2d05",
          "body": "refactor: decompose gocyclo tail (21 test funcs + GetDriftFindings finder-table + modernize)",
          "is_bot": false,
          "headline": "Merge pull request #89 from Detective-XH/refactor/gocyclo-tail",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T21:55:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bf2e1b34103bb5ea49d84fb586172713fb75a1a4",
          "body": "…inder-table + modernize sweep\n\nLifts gocyclo file-ratio 91.3% -> 98.63% (GoReportCard sub-metric; A+ letter unchanged, gocyclo weight 0.10).\n\n- 21/23 over-cx-15 test funcs decomposed via genuine helper extraction (t.Helper assertion helpers, shared-harness de-dup, corpus-generator splits); 2 serial\n[…]\n go build + go test -race green; gofmt -s clean; golangci-lint 0 issues; gosec baseline unchanged; assertion-preservation audited.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor: decompose gocyclo tail — 21 test funcs + GetDriftFindings f…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T21:52:15Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "655bbb559b8ee40dbaa5cfcf0c79b05e9b1376cc",
          "body": "refactor: decompose 8 high-cyclo funcs to flip gocyclo to A+ (PR4)",
          "is_bot": false,
          "headline": "Merge pull request #88 from Detective-XH/refactor/gocyclo-pr4-aplus",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T18:32:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5fd65c325afbe46f76424bddf9c93c61336c18d9",
          "body": "Batch-4 \"A+ push\" of the gocyclo-reduction campaign: 8 honest flips take\nthe local gocyclo metric from 27/219 to 19/219 failed files (91.3%),\ncrossing the 90% A+ threshold with margin. All changes behavior-preserving.\n\nProduction (3):\n- remediationFor: 23 static cases -> remediationText map; CodeSta\n[…]\n -race green; golangci-lint\n--new-from-rev=HEAD 0 issues; gofmt -s clean; codex adversarial-review\napprove / no material findings.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor: decompose 8 high-cyclo funcs to flip gocyclo to A+ (PR4)",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T18:27:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a17e5402ca48c1d80ad4df8212588562fe2ea476",
          "body": "refactor: gocyclo Batch-3 core decomposition (PR3, 27/218 = 87.6% A)",
          "is_bot": false,
          "headline": "Merge pull request #87 from Detective-XH/refactor/gocyclo-pr3-core",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T17:42:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dc373ab9a8de1a8a0de4a0fc2d9b62a95f777dae",
          "body": "The new TestIndexProjectOpts_GitAndPlainCharacterization was itself cx19 ->\na freshly flagged _test.go file (test files are graded), which would have\nleft PR3 at 28 failed instead of the planned 27. Extract assertFileHistory /\nassertNoHistory to DRY the repeated err/nil/subject/count checks; the test\ndrops to cx10 and every helper is <=13. No assertion changed.\n\nFlip count now 27/218 (gocyclo 87.6%), matching the PR3 target.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test: keep characterization test under gocyclo via assertion helpers",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T17:28:57Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "284cc8576b0517588a55e8f26175b1fc1fa90c6e",
          "body": "Extract addRoots (synchronous per-root w.Add), classifyWatchEvent (pure\nevent filter), handleCreateDir (Create-dir addRecursive side effect), and a\ndebouncer{} struct with a schedule() method holding the former closure-over-\nlocals (mu/pending/timer/debounce/onChange). Concurrency-preserving: d.time\n[…]\ntchEvent -> schedule. gocyclo: every function <=12.\n\nGated green: watcher_test.go under go test -race -count=5 (timing-sensitive).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor: decompose WatchWithContext (cx24->12) into helpers",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T17:25:36Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b1b0f1c87c743689394c986f98ce2aa4d061df17",
          "body": "Split extractPDFMeta (Info-dict tuples + display name), extractPDFPages\n(per-page loop, font cache, U+FFFD security gate), and buildPDFNodes\n(page nodes/edges/chunks) out of extractPDF; a pdfPageResult struct carries\nthe page outputs. Behavior-preserving: the replacementCharRatio garbage gate\nsurviv\n[…]\nd green: existing pdf_test.go suite (Sample/Scanned/CreationDate/GBK/\nCJK x2, TestReplacementCharRatio, Fuzz) under go test -race.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor: decompose extractPDF (cx24->8) into 3 helpers",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T17:25:21Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "20809be973aa822cbb607ac63cbf748b0ef59a9f",
          "body": "Lift the flush closure to indexStoreFlush (batch[:0] + batchTextBytes reset\nmove to the caller) and split indexStoreSetupFTS / indexStoreDeleteStale /\nindexStorePrepareEntry / indexStoreTail out of the main function.\nBehavior-preserving: the force vs fullBuild delete gate, the FTS combined\nrebuild g\n[…]\ned green under go test -race (FTS bulk-rebuild + self-heal, force-guard\ncrash-recovery, 8 prune tests, force-rebuild integration).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor: decompose indexStore (cx44->12) into 5 helpers",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T17:10:55Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6fd28e6811b7e741b39fab1f56a89a3cd824b102",
          "body": "Lift the writeOne closure to projectWriteOne (nNew++ moves to the caller),\nand split projectSetupFTS / projectPrepareEntry / projectFlushGitBatch /\nprojectTail out of the main function. Behavior-preserving: baseEmpty/force\ndelete gating, fullBuild FTS gate, histories[idx]<->batch[idx] alignment,\ncha\n[…]\nus the full workspace\nsuite (coldstart FTS rebuild + crash-recovery, fanout, fd-leak git path)\ngreen under go test -race -count=2.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor: decompose indexProjectOpts (cx43→13) into 5 helpers",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T17:02:57Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "fd896950ba1fad91bb1cff5e282693e3ec7a96bf",
          "body": "…paths)\n\nLocks index OUTPUT (node/edge/unresolved counts, per-file git history\nalignment, workspace FTS hits) for the 2-project pipeline before the PR3\ndecomposition. Covers the buffered git path (projectFlushGitBatch target,\nleast-covered region: distinct-commit subjects pin histories[idx] alignment)\nand the streaming non-git path. Green on unmodified indexProjectOpts.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test: guardrail-8 characterization for indexProjectOpts (git + plain …",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T16:58:40Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "724a62958bdeea5e8030c25f7e273bfa5acb8afa",
          "body": "release: v0.3.2",
          "is_bot": false,
          "headline": "Merge pull request #86 from Detective-XH/release/v0.3.2",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T14:41:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8d242cecdeb9756e9011ae8cebff4bb4844f126f",
          "body": null,
          "is_bot": false,
          "headline": "release: v0.3.2",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T14:37:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bbe0bacf9a2e380c45f7195bc2cc89a6e6be78d7",
          "body": "refactor: decompose 10 medium-complexity functions, gocyclo A buffer (PR2)",
          "is_bot": false,
          "headline": "Merge pull request #85 from Detective-XH/refactor/gocyclo-pr2-medium",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T14:27:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "483023288bbbe3f6d078217fdac054ee1807f7fc",
          "body": "…(PR2)\n\nExtract cohesive helpers across 10 files so every refactored function lands at\ncyclomatic complexity ≤13, flipping 10 more files below the >15 gocyclo gate.\nDistinct flagged files 41→31 → gocyclo 81.1%→85.7% (grade A, buffer above the\n80% boundary). Behavior-preserving; equivalence/golden te\n[…]\nverified preserved.\n\nGates: go build ./... ok, go test -race ./... ok, gofmt -s clean,\ngolangci-lint --new-from-rev=main 0 issues.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor: decompose 10 medium-complexity functions, gocyclo A buffer …",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T14:23:12Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2da22bbdeaa06d63ee3ca6eee86a29080c81fb88",
          "body": "refactor: decompose high-complexity functions, lift gocyclo B→A (PR1)",
          "is_bot": false,
          "headline": "Merge pull request #84 from Detective-XH/refactor/gocyclo-pr1-lock-a",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T13:59:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "73871ff597e7f1fdc47adbfeb947e50f27ed324a",
          "body": "Extract cohesive helpers across 18 files so every refactored function lands at\ncyclomatic complexity ≤13, flipping 18 files below GoReportCard's >15 gocyclo\ngate. Distinct flagged files 59→41 → gocyclo 72.6%→81.1% (sub-grade B→A).\nOverall GoReportCard grade is unchanged (already A+; gocyclo weight 0\n[…]\nd ./... ok, go test -race ./... ok, gofmt -s clean,\ngolangci-lint --new-from-rev=main 0 issues, codex adversarial-review verified.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor: decompose high-complexity functions, lift gocyclo B→A (PR1)",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T13:54:54Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "92b75ab77b1e057d98e31f5a04c5d0692f7c6000",
          "body": "test(tools): cover MCP arg helpers (type-confusion fallback)",
          "is_bot": false,
          "headline": "Merge pull request #83 from Detective-XH/test/tools-arg-helper-coverage",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T12:30:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e6e3399d5d0d98fd03463834d00165f6c8eaded2",
          "body": "Add direct unit tests for getStringArg, getIntArg, getBoolArg, sanitizeArg, and truncateRunes, which had no direct coverage (getIntArgClamped is tested separately). The tests assert the security-relevant contract: a wrong-typed, nil, or missing argument returns the caller-supplied default instead of\n[…]\n bool wrong-type cases use a non-zero default so a regression that returned the zero value instead of the default would be caught.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test(tools): cover MCP arg helpers (type-confusion fallback)",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T12:26:23Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "67123a1585c9b27191ff2ed7115c197708b0f5f2",
          "body": "…rch-fts\n\nrefactor(store): split search + FTS into sub-stores (Lever B tranche-1)",
          "is_bot": false,
          "headline": "Merge pull request #82 from Detective-XH/refactor/store-substores-sea…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T04:20:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "70efd37cecb5beb90a2200aff341a02af2a6f109",
          "body": "Execute the documented \"Step 2 sub-store split\": move the search (24)\nand FTS (10) method groups off *Store onto domain sub-store types\nreached via Store.Searcher (*searchStore) and Store.Fts (*ftsStore),\neach embedding the shared *baseDB. A moved body is unchanged except\ns.db -> se.db/ft.db. GetSec\n[…]\nge. Migration\nused temporary forwarding shims (added, callers migrated under a green\ntree, then deleted) so the build never broke.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(store): split search + FTS into sub-stores (Lever B tranche-1)",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T04:16:01Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "bad1eac36dd3727741db8e78a6f7612870dbbc4f",
          "body": "…rfaces\n\nrefactor(store): decouple consumer packages from *store.Store via narrow interfaces",
          "is_bot": false,
          "headline": "Merge pull request #81 from Detective-XH/refactor/store-consumer-inte…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T00:44:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2391009de3128c6fc3e08b68fd3a9955cfd7b4a0",
          "body": "…row interfaces\n\nExtract narrow per-package interfaces so each consumer depends on a\nminimal store contract instead of the 125-method *store.Store god type\n(Lever A). *store.Store already satisfies every interface, so call sites\npass the concrete value unchanged.\n\n- RefResolver (resolver), Similarit\n[…]\ned resolver.ProjectRef.Store field deliberately keep the concrete\n*store.Store. Zero behavior change; full suite green with -race.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(store): decouple consumer packages from *store.Store via nar…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-14T00:40:32Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6dd0915244bea62bfb9e0502f21388cd4c389fc4",
          "body": "…ture\n\ntest(ax-assert): make A11 fixture stable and meaningful via dynamic discovery",
          "is_bot": false,
          "headline": "Merge pull request #80 from Detective-XH/fix/ax-assert-a11-stable-fix…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-13T23:35:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "939b43d4bab702859f04ee21467ab78577c08a0e",
          "body": "…iscovery\n\nA11 asserted the graph-outgoing \"all edges resolve to N distinct other\ndocuments\" footer against plans/PERF-METHODOLOGY.md, a gitignored doc whose\noutgoing reference edges drifted to all-distinct (9 -> 9), so the footer\n(rendered only when distinct != total) stopped firing and A11 failed.\n[…]\nly, not in CI or release).\nVerified: go run ./cmd/ax-assert/main.go --project-root . -> 14/14;\ngo test -race -count=1 ./... green.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test(ax-assert): make A11 fixture stable and meaningful via dynamic d…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-13T23:31:46Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6d6489c188a0f3ae0e1c04937b37513e042a62cc",
          "body": "…-to-8\n\nrefactor(mcp): reduce always-on tool surface 10 → 8 via two zero-loss merges",
          "is_bot": false,
          "headline": "Merge pull request #79 from Detective-XH/refactor/mcp-tool-surface-10…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-13T23:22:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "35334105d6b4fe9ea547ff3ab67eef1e1a9f1b95",
          "body": "…s merges\n\nDelete docgraph_explore (a strict subset of docgraph_context) and\ndocgraph_history (already rendered inline by docgraph_node's ### History\nsection). Top up handleNode's history block with Last author + First changed\nso the merge is field-complete versus the removed tool, and extract the b\n[…]\n, search, node, graph, files, similar, status, tags.\nOpt-in unchanged: docgraph_embeddings, docgraph_enrichment. No schema change.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(mcp): reduce always-on tool surface 10 -> 8 via two zero-los…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-13T23:17:41Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "738bf4568d9266df7bc05ee01d4a9da224d66e1e",
          "body": "…nt-drop\n\nfix(context): list docgraph_context overflow tail instead of dropping it",
          "is_bot": false,
          "headline": "Merge pull request #78 from Detective-XH/fix/context-overflow-list-do…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-13T20:04:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "99c2ad5cb20187277beb3298897202e5302b8a6d",
          "body": "Remove internal planning identifiers that had leaked into a public/tracked test comment, a test failure message, and a release note (hygiene policy: internal tracker codes must not appear in tracked sources or public docs).\n\nBehavior-neutral: comment / string-literal text only; the affected test still asserts the same serverInstructions substring. Pre-existing leaks, fixed.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(hygiene): drop internal tracker identifiers from tracked files",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-13T20:00:09Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "0226b78474a7adb10307cf731479f8365f57f1e9",
          "body": "docgraph_context's payload soft-cap (P-v6-2) emitted a count-only notice and dropped every omitted document on overflow, erasing their paths and forfeiting recall — a regression against P-v6-2's own \"Omitted: [list]\" intent. Degrade the tail instead: list each remaining document as a stub (path + re\n[…]\n... 18/18; golangci-lint --new-from-rev=HEAD 0. Also drops a stale internal roadmap-code ref from a comment in the same test file.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(context): list the overflow tail instead of dropping it, byte-capped",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-13T19:59:23Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e0f000dca6b983a5ba13c56bd349e6ed29808279",
          "body": "…-supply-chain-d902ad55bd\n\nchore(deps): bump modernc.org/sqlite from 1.51.0 to 1.52.0 in the sqlite-supply-chain group",
          "is_bot": false,
          "headline": "Merge pull request #73 from Detective-XH/dependabot/go_modules/sqlite…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-13T18:28:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c96e943ab6ddfb6005aa8443639142d52f8c480b",
          "body": "…or-patch-326ae5767f\n\nchore(deps): bump golang.org/x/net from 0.55.0 to 0.56.0 in the go-minor-patch group across 1 directory",
          "is_bot": false,
          "headline": "Merge pull request #76 from Detective-XH/dependabot/go_modules/go-min…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-13T18:28:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "77bcf3f16ff0de39c26df3151b7000697cafe9b5",
          "body": "release: v0.3.1",
          "is_bot": false,
          "headline": "Merge pull request #77 from Detective-XH/release/v0.3.1",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-13T18:27:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "35df57fda5a1a54a8b885979775f0e28be031b5d",
          "body": null,
          "is_bot": false,
          "headline": "release: v0.3.1",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-13T18:23:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d61240f66097c2442ab2ae2b9ea7f732e1c53fd1",
          "body": "Bumps the go-minor-patch group with 1 update in the / directory: [golang.org/x/net](https://github.com/golang/net).\n\n\nUpdates `golang.org/x/net` from 0.55.0 to 0.56.0\n- [Commits](https://github.com/golang/net/compare/v0.55.0...v0.56.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/net\n  dependency-version: 0.56.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: go-minor-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump golang.org/x/net",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-13T17:58:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5018832cc596f1f875beef6bc785c91ae93147c5",
          "body": "feat: actionable drift findings, binary governance exemption, .docgraphignore loop-close; bump gopdf v0.7.9",
          "is_bot": false,
          "headline": "Merge pull request #75 from Detective-XH/feat/drift-governance-ax-gopdf",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-13T17:56:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b6c75de1a5e5614d1895d63038f7be5a13355b8f",
          "body": "…phignore loop-close; bump gopdf v0.7.9\n\nDrift/governance AX-bug remediation (an MCP-only \"fix all drift\" run dead-ended —\nremediation existed but was undiscoverable/un-completable from the tool surface):\n- DriftFinding/MetadataQualityIssue gain a Remediation field (one-chokepoint\n  population + int\n[…]\n watcher passthrough, containsIgnoreRuleFile. Full\nsuite green under -race; 0 new golangci-lint/gosec. No MCP tool-surface change.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: actionable drift findings, binary governance exemption, .docgra…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-13T17:52:49Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "56908d95ef4c1794b651826b020e889566a74ad8",
          "body": "Bumps the sqlite-supply-chain group with 1 update: [modernc.org/sqlite](https://gitlab.com/cznic/sqlite).\n\n\nUpdates `modernc.org/sqlite` from 1.51.0 to 1.52.0\n- [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md)\n- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.51.0...v1.52.0\n[…]\nendency-version: 1.52.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: sqlite-supply-chain\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump modernc.org/sqlite in the sqlite-supply-chain group",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-08T08:12:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "af10f663e74f107302d850d4245b25b55d143831",
          "body": "…d-cyclop\n\nrefactor: cut complexity of 3 functions; gate cyclop at 40",
          "is_bot": false,
          "headline": "Merge pull request #72 from Detective-XH/chore/complexity-refactor-an…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-02T21:09:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3eda7a4eaf3aeaa633021ad5b1998e64cb0bc89e",
          "body": "Behavior-preserving extractions (verified: build, go test -race ./... all pass,\ngolangci-lint 0):\n- handleStatus 31->5: split workspace vs single-store bodies into appendWorkspaceStatus\n  / appendSingleStoreStatus (NOT unified — the two emit different output by design).\n- BuildImpactGraph 27->5: ext\n[…]\nrent, breadth\nnot depth) is grandfathered on unchanged lines and stays visible on local full runs as\na periodic-review list. A PR only trips cyclop by adding a new >40 function or growing\none past 40.",
          "is_bot": false,
          "headline": "refactor: cut complexity of 3 handlers/writers; gate cyclop at 40",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-02T21:05:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f12cfccc1519eda2d96636eccc8a3fb96117d36b",
          "body": "chore(gosec): annotate confirmed-safe findings with #nosec + rationale",
          "is_bot": false,
          "headline": "Merge pull request #71 from Detective-XH/chore/gosec-nosec-annotations",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-02T20:13:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a9d4ce2fa1b978049e7d5c774ff944682e245f98",
          "body": "A codegraph-armed investigation confirmed all 20 gosec findings (after the\nG104/G304/G301/G306 excludes) are safe-by-construction. Annotate each site with\n`#nosec <rule> -- <reason>` rather than excluding the rules globally, so\nG202/G204/G703/G706/G115 stay active for future code while the audited s\n[…]\n\n- G115 (x1): non-named zip entries counted but never decompressed; named\n  entries capped by readZipEntry's LimitReader.\n\ngosec (excl G104,G304,G301,G306) -> 0; gofmt, golangci-lint, build all clean.",
          "is_bot": false,
          "headline": "chore(gosec): annotate confirmed-safe findings with #nosec + rationale",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-02T20:09:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "42e30208400b2c1ab604522864f1cd6a6e7bc615",
          "body": "fix: resolve golangci-lint baseline (errcheck + staticcheck)",
          "is_bot": false,
          "headline": "Merge pull request #70 from Detective-XH/chore/golangci-lint-fixes",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-02T19:43:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "45d6503d3448f126d3151cd3dcdb4dde6dbcc278",
          "body": "Fix the 23 pre-existing golangci-lint findings the new CI job gates against:\n\n- errcheck: handle previously-dropped errors —\n  - store.GetStats: propagate Row.Scan errors\n  - parser.ParseFile: propagate ast.Walk error (extractText's Walk is\n    structurally error-free, so explicit discard with a com\n[…]\nrite De Morgan negations in search ranking + tests\n- staticcheck ST1018: escape literal U+200B as \\u200b in scanner/store tests\n\ngo build, go vet, golangci-lint (0 issues), and go test -race all pass.",
          "is_bot": false,
          "headline": "fix: resolve golangci-lint baseline (errcheck + staticcheck)",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-02T19:39:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a393b9c7ea7a743b4f2bf4f00a82ccda13cbdd98",
          "body": "ci: add golangci-lint config + new-issues-only CI job",
          "is_bot": false,
          "headline": "Merge pull request #69 from Detective-XH/chore/golangci-lint-cleanup",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-02T19:23:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8d9ba310297eed1b10c7224510107b361b275a5f",
          "body": "Drops golangci/golangci-lint-action (Node-20 deprecation warning + a\nthird-party action dependency) in favour of a pinned `go install` of\ngolangci-lint v2.12.2, diffing new issues against the PR base via\n--new-from-rev=FETCH_HEAD.",
          "is_bot": false,
          "headline": "ci: run golangci-lint via pinned go install, not the JS action",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-02T19:19:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "44d1fcaa9665228982eee83fb75554a2eb13c873",
          "body": "Add .golangci.yml (default linters; errcheck tuned to exclude conventional\ncleanup — sql/* and io.Closer Close, Tx.Rollback, fmt.Fprint*, flag.Parse,\nstore.Store/workspace.Workspace Close — and disabled on _test.go).\n\nAdd a golangci-lint CI job via golangci-lint-action with only-new-issues,\ngated to pull_request events so it flags issues a PR introduces without\nblocking on the pre-existing baseline (cleaned up in a follow-up PR).",
          "is_bot": false,
          "headline": "ci: add golangci-lint config + new-issues-only CI job",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-02T19:14:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0b91247af94774f822b3a58d1f5d106b0512a1c3",
          "body": "deps: adopt Detective-XH/gopdf v0.6.3 (renamed from Detective-XH/pdf)",
          "is_bot": false,
          "headline": "Merge pull request #68 from Detective-XH/deps/adopt-gopdf-v0.6.3",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-02T18:48:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ae9566d8b1fe5fe7dca799b0ec5a2914aaf188e1",
          "body": "The PDF extractor dependency was renamed: GitHub repo pdf → GoPDF and Go\nmodule path github.com/Detective-XH/pdf → github.com/Detective-XH/gopdf. The\npackage identifier is unchanged (still `pdf`), so only the import path,\ngo.mod/go.sum, and doc references change — no call-site edits.\n\nThis also bump\n[…]\ning word-space fix.\n\nAdd gitignored go.work (+ go.work.sum) for local co-development against ../GoPDF\nwithout a tag/bump round-trip.\n\ngo build ./... and go test -race ./... pass against pinned v0.6.3.",
          "is_bot": false,
          "headline": "deps: adopt Detective-XH/gopdf v0.6.3 (renamed from Detective-XH/pdf)",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-02T18:44:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b8da87dcfa7488f1bb45323a390b9f773dc4561d",
          "body": "Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.3.0 (#67)",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-02T01:46:15Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "fdf7f9db739eaee6871ea5891966db76468c96c3",
          "body": "- bump github.com/Detective-XH/pdf v0.5.0 -> v0.6.0. Public API unchanged\n  (OpenBytes/Page/Font/Value signatures identical), so no call-site changes.\n  Automatic gains: broader CJK CMap coverage (GB-EUC/GBKp-EUC/ETenms-B5/\n  KSC-EUC/KSCms-UHC) and upstream hardening (inline-image crash, zero-length\n[…]\nest: extend buildMinimalPDFEnc with an /Info dict param; add\n  TestExtractPDF_CreationDateNormalized pinning +05'00' -> 04:30:00Z.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(extractor): adopt Detective-XH/pdf v0.6.0 Metadata API (#65)",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-02T01:20:44Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "817b7e6571d35200e3a41e163e52e9229f8477ab",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: add Go Report Card badge to README",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-02T00:27:49Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "7865c17abb3a44aa781472d5cec432f1879b9795",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "style: gofmt fix struct literal alignment in context_arg_clamp_test.go",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T21:29:05Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4a2f6dfa9fcb0d9c025670f19fb93121edc2b08d",
          "body": "Broad cross-workspace queries (maxNodes=10, ~21 KB in workspace mode)\ncaused LLM runners to struggle with oversized payloads. Add a 20 KB\nsoft cap in the summary render loop: after rendering each document, if\nthe buffer exceeds maxContextResponseBytes and more docs remain, emit a\ntruncation notice a\n[…]\nntext_PayloadOverflowNotice_SmallQuery (negative,\n3-doc fixture ~4 KB).\nDiscovered: AX Probe v6 OPEN-W 2026-06-01 (context-payload-overflow).\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(context): soft-cap docgraph_context summary payload at 20 KB",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T21:23:21Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3fd7bc655d230472df845de1968348d0a64021f4",
          "body": "…ery (#64)\n\nThe isolated-docs query joined files.path against edges.source, but\nedges.source holds node IDs. Inline wikilinks are attributed to their\nnearest heading node (ID = path#heading:line), not the document node\n(ID = file path), so the old LEFT JOIN missed all heading-attributed\nlinks and fa\n[…]\nins through nodes.file_path\nso all edges — regardless of whether their source is the document node\nor a heading node — are counted correctly.\n\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(skills): correct docgraph-drift-audit Step 2b isolated-doc SQL qu…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T20:40:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "42aa176dabecdc47be8f9974c77b10c8b2be1d06",
          "body": "Add project=<name> parameter to docgraph_search, docgraph_context,\ndocgraph_explore, docgraph_similar, docgraph_files, docgraph_tags in\nworkspace mode. Passing project= scopes the fan-out to a single project DB\n(early-continue in workspace.SearchWithOptions, GetAllFiles, GetAllTopLevelDirs,\nand dire\n[…]\nructionsWorkspaceProjectFilter.\nfanout_test.go updated for GetAllFiles/GetAllTopLevelDirs new signatures.\ngo test -race 18/18 packages green.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(workspace): per-project filter for all workspace query tools",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T20:32:06Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7466c42b074a73322e8ae2ac0430a3548b0608bd",
          "body": "…012)\n\nReplaces all WriteString(fmt.Sprintf(...)) patterns with fmt.Fprintf\nacross internal/tools and internal/extractor, eliminating unnecessary\nintermediate string allocations.\n\nAlso resolves related pre-existing diagnostics found in the same files:\n- rangeint: modernise for-loop to range-over-int\n[…]\nn-memory parsing directly from the src bytes passed by the extractor.\nRemoves the os.CreateTemp/Write/Close/Remove dance and the \"os\" import.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(style): replace sb.WriteString(fmt.Sprintf) with fmt.Fprintf (QF1…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T20:30:43Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "016c31bd0c0979cd9d5d3a14f65b84f2e979afb7",
          "body": "PDF CJK Phases 1–6 shipped native decoders (Shift-JIS, UCS-2-BE, GBK,\nBig5-ETen, UHC) but AGENTS.md still described CJK as a \"trigram search\"\nsignal only. Updated the supporting signal to mention that CJK PDFs are\ndecoded natively rather than skipped or garbled — closing the fit-guide\ndrift surfaced in the Unreleased CHANGELOG review.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(agents): expand CJK supporting signal to cover PDF CJK extraction",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T20:06:46Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b8be6ddffba8e06e6bc98c565058d842d3cbbb9d",
          "body": "…t Layer-1b runner + S-6 supply-chain hardening (#63) (#63)\n\nAdd 6 new deploy-gate test functions + toolDescriptionsMap helper to tool_surface_test.go,\ncovering every un-guarded serverInstructions and tool-description AX assertion:\n  TestServerInstructionsNoSeedDocumentGuidance (A6)\n  TestServerInst\n[…]\n(debug.ReadBuildInfo),\ngo mod verify in CI (already present), GOFLAGS=-mod=readonly added to test job, /ax-assert\nbinary added to .gitignore.\n\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test(ax): golden-string CI guards (A6/A12/A13–A15/A18) + cmd/ax-asser…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T18:56:27Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f72abc9d49162450661bd81dd44f5ef06b92e5ab",
          "body": "…WorkspaceProjects (#62)\n\nCloses two residual gaps from the startup deletion-reconcile feature (#60/#61): the\n--workspace per-project reconcile path had no runtime coverage (this machine serves\n--path .), and no test asserted the reconcile is wired into a named, testable unit.\n\n- Extract the workspa\n[…]\nt\n  isolation, none of which the single-store reconcile tests covered.\n\ngo build / go vet / gofmt / go test -race ./... all green.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test(serve): cover the --workspace reconcile path + extract reconcile…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T16:43:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "1786ffa1d8194d34208c85120b6b193ed67b7784",
          "body": "…ncile-on-start) (#61)\n\nFollow-up to #60 (0959412), landed pre-deploy so no shipped binary ever carries the flag.\n\nThe escape hatch was redundant AND a footgun for the first-class user (the LLM). The one\ncase it nominally protected — a copied/portable .docgraph whose files don't exist at the\nlocal r\n[…]\n.\n\ngo build / go vet / gofmt / go test -race green; reconcileDeletedFiles + its T1–T5 tests\nare unchanged (they call it directly).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(serve): make startup deletion-reconcile always-on (drop --no-reco…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T16:20:33Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "09594122a8a91c65050edc42ffd36f1faa2be4a1",
          "body": "…atcher-gap staleness) (#60)\n\nDeletion-prune was purely watcher-event-driven (pruneDeletedFiles called only from\nthe serve watcher callback): a file deleted while serve was DOWN fired no fsnotify\nevent, and neither cold-start nor `sync`/`index` reconciles DB-vs-disk, so its nodes\npersisted until `in\n[…]\ndversarially verified via two CodeGraph-armed subagents; plan\nadvisor-signed-off (plans/startup-deletion-reconcile-2026-06-01.md).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(serve): reconcile downtime-deleted files on warm startup (close w…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T16:06:56Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "bc19a8961f51017ef487c2738e93850661c29268",
          "body": "…content-trust test guard (#59)\n\nhandleContext now reads impactDepth/referenceLimit via getIntArgClamped\n(1..3 / 1..20), matching the documented tool contract and the H-24 \"clamp\nevery MCP int arg at retrieval\" invariant — these were the last two\nuser-facing int args still relying solely on the down\n[…]\ne 2026-06-01 redteam security-audit (PASS WITH NOTES); both NOTEs were\ndefense-in-depth / regression-guard, no live vulnerability.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "harden(tools): clamp context-pack int args at retrieval (H-24) + S-1 …",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T14:54:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a92f092aa0886afffd74ce9ce2a536015c7b546c",
          "body": "…ore.WriteDependents (#58)\n\nindexStore (indexer.go) and indexProjectOpts (internal/workspace/indexing.go)\neach carried a byte-identical 8-step per-file dependent tail — document /\ngovernance / research metadata upserts, entitygraph.IndexFile, edge +\nunresolved-ref inserts, UpsertFile, git-history up\n[…]\nnit tests locking the contract\n(changedDocIDs append, UpsertFile persistence, metadata-failure-is-fatal +\nlogPrefix reproduction).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(indexing): extract shared per-file tail into internal/indexc…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T13:56:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8f254804bfd7328bcc911579378e2bf47dff958a",
          "body": "…ipeline to indexing.go (#57)\n\nworkspace.go conflated three concerns: the workspace/multi-project\nabstraction, the fan-out query facade, and the entire single-project\nindexing pipeline (indexProjectOpts, 283 lines). Move the indexing\npipeline (IndexAll, ReindexProject, indexProject, indexProjectOpts\n[…]\n decompose the 283-line indexProjectOpts or consolidate the\nindexStore (indexer.go) parallel-pipeline duplication — both deferred.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(workspace): split workspace.go god file — extract indexing p…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T12:49:12Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "1c5b8c0593987da4cc0f3415e69c03dd52b666a9",
          "body": "…c/pdf) (#56)\n\nThe PDF text extractor was forked ledongthuc/pdf -> Detective-XH/pdf v0.4.0\n(PR #52) for CJK CMap decoding, but README still credited the upstream in both\nthe dependency table and the extractor dispatch flow. Point both at the fork,\nkeeping upstream attribution. Doc-only; no code or go.mod change.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(readme): correct PDF dep to Detective-XH/pdf fork (was ledongthu…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T11:37:38Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "9a693ce072181b352406dd907ddfa6d2dabb1609",
          "body": "…ndlers (#55)\n\nClean-code-audit follow-up — raise coverage of two packages by testing\npreviously-uncovered behavior-bearing functions (registration glue left untested\nintentionally).\n\n- internal/workspace/fanout_test.go: GetAllStats / GetAllFiles (incl. prefix\n  filter) / GetAllTopLevelDirs / FindNo\n[…]\nHistory (incl. param-validation and not-found paths). 72.4% -> 76.6%.\n\ngo build / go vet / go test -race -count=1 ./... all green.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test(workspace,tools): cover fan-out queries + tag/explore/history ha…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T11:21:56Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "264b3c0f3a0cb2d6b6180ed05a0f3d9f019204f9",
          "body": "… (#54)\n\n- internal/codedoc/codedoc_jsts.go: remove the redundant `loc != nil &&` before\n  len(loc) in three FindStringSubmatchIndex guards (staticcheck S1009; len(nil)==0\n  makes `len(loc) >= 4` equivalent). Behavior-preserving.\n- gofmt -w across the tree: pdf.go, context_pack.go + 5 test files (wh\n[…]\nhub/workflows/test.yml: add a `gofmt` job so unformatted Go fails CI.\n\ngo build / go vet / go test -race -count=1 ./... all green.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "style: drop redundant S1009 nil-checks, gofmt repo, add CI gofmt gate…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T10:51:32Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b3e6e7b33b7d0fbda330a55fd53da4426aa14cba",
          "body": "…d (#53)\n\nReflects Detective-XH/pdf v0.4.0: all five predefined CMap families\n(Uni*-UCS2-*, Shift-JIS, GBK-EUC, ETen-B5, KSCms-UHC) now decoded.\nStatic unsupported-encoding blocklist removed; runtime encoding-garbage\nbackstop retained.\n\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: update PDF CMap support list — GBK / Big5-ETen / UHC now decode…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T10:03:33Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "803e5eb302060d51164c3fce8313f2e91c0613ab",
          "body": "…Detective-XH/pdf v0.4.0 (#52)\n\n* feat(extractor): Phase 3 — UniGB/UniCNS/UniJIS/UniKS-UCS2-H decoder via Detective-XH/pdf v0.3.0\n\nFork v0.3.0 adds ucs2BEEncoder: reads 2-byte big-endian Unicode code points\ndirectly (UCS-2/BMP, no x/text dep). Removes UniXX-UCS2-H/V from the Phase 0\nunsupported-enco\n[…]\ning no unsupported-encoding\nwarning is emitted for GBK-EUC-H documents.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(extractor): Phase 5+6 — GBK / Big5-ETen / UHC CMap decoders via …",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T09:49:42Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "372ba9b19075d19a2fd3d49cb2d8bf1ed91cb042",
          "body": "…ive-XH/pdf v0.2.0\n\n- Upgrade to Detective-XH/pdf v0.2.0 which adds multibyteCMapEncoder backed\n  by golang.org/x/text/encoding/japanese.ShiftJIS for 90ms-RKSJ-H/V and\n  90pv-RKSJ-H predefined CMaps.\n- Remove 90ms-RKSJ-H/V from isUnsupportedCMapName(): the fork now decodes them.\n- Rebuild cjk_sample\n[…]\nd as image-only.\n- Flip TestExtractPDF_RealModeB1: assert no warning, non-empty text, and that\n  both Japanese and ASCII content are present.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(extractor): Phase 2 — Shift-JIS (90ms-RKSJ-H) decoder via Detect…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T08:16:23Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c58f74016981762c4b381eb31b8940b0f1c13008",
          "body": "Replace github.com/ledongthuc/pdf with the Detective-XH/pdf fork at v0.1.0.\nNo behaviour changes; all 17 test packages pass with -race.\n\nPhase 2 (Shift-JIS / RKSJ decoder) and Phase 3 (UniGB-UCS2-H fixture +\nCJK gate) will follow in subsequent PRs against this fork.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(extractor): Phase 1 — swap pdf dep to Detective-XH/pdf fork",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T08:01:22Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "e6f44a473de399741a4e13a8dcc25d4b1508e42d",
          "body": "…ctPDF_RealModeB1 (#51)\n\nAdds a real-world Mode B1 PDF fixture (1039 bytes) from the mozilla/pdf.js\ntest corpus (Apache 2.0). Font HeiseiMin-W3 uses /90ms-RKSJ-H predefined CMap\nwith no /ToUnicode entry — the exact failure mode Phase 0 detects.\n\nTestExtractPDF_RealModeB1 confirms:\n- extraction-faile\n[…]\n — not\ncommitted; 1.4 MB). Fork of ledongthuc/pdf is justified.\n\nSource: github.com/mozilla/pdf.js/blob/master/test/pdfs/90ms_rksj_h_sample.pdf\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test(extractor): Phase -1 gate — real Mode B1 CJK fixture + TestExtra…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T07:52:20Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "09b9a69736abf58cbe23593329f2bd1c2d4c7dac",
          "body": "…ap encodings (#50)\n\nledongthuc/pdf silently passes fonts with unrecognised predefined CMap names\n(e.g. UniGB-UCS2-H) through a no-op encoder, producing U+FFFD-laden output\nwith a nil error. This makes utf8.ValidString useless as a guard.\n\nPhase 0 (detection/triage, not a CJK fix):\n- pageUnsupported\n[…]\nTests: TestExtractPDF_UnsupportedEncoding, TestReplacementCharRatio,\nTestSanitizeWarningDetail, FuzzExtractPDF CJK seed. All 17 packages green.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(extractor): Phase 0 PDF — surface errors + detect unsupported CM…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T07:20:58Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c2aaba7f0555ff4af5913006ace3a59f50ab1156",
          "body": "…footer + drift_audit/enumerate guidance (#49)\n\nP-v5-2 (reliability): the live serve watcher reindex never pruned files deleted from\ndisk — a deleted/moved/renamed doc's nodes, edges, FTS rows, metadata, entity mentions,\nand file-hash row persisted in the live index until `index --force`. New pruneD\n[…]\nuild/vet/test -race 17/17 green. Implemented via 3\nparallel CodeGraph-armed worktree subagents (disjoint files), advisor-reviewed.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(ax): AX v5 — deletion-staleness prune + search limit-instability …",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-06-01T01:05:15Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3647c9763faabab0b6f017c0ba44a05e6d8caf71",
          "body": "…cuments when enumerating (B mitigation) (#48)\n\nAX probe v4's B finding: weak agents asked to enumerate \"distinct work\nthreads\" over-counted 2-3x by treating each PR a document mentions in its\nbody as a separate thread (one file listing PR #19-24 → \"6 threads\").\n\nThis is a task-granularity gap, not \n[…]\n./... green.\n\nMITIGATION, not a verified fix — effect on weak agents is unverified;\nAX v5 must re-probe B before calling it fixed.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(mcp): serverInstructions granularity guidance — count distinct do…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-05-31T23:50:26Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5f58f2f0456c7d969c2d900f5fe510a9a9b30e39",
          "body": "…aude/ stay indexed (#46)\" (#47)\n\nThis reverts commit deb7f40b3532a1e3c3b0f4bf0dc86d91dcff327d.",
          "is_bot": false,
          "headline": "Revert \"fix(mcp): serve this repo with --no-gitignore so plans/ + .cl…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-05-31T23:43:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "deb7f40b3532a1e3c3b0f4bf0dc86d91dcff327d",
          "body": "…ay indexed (#46)\n\nThe tracked .mcp.json (serve --path .) overrides the global workspace config when\ncwd is inside the repo, and ran WITHOUT --no-gitignore — so the reindex pipeline\ncorrectly respected .gitignore and never maintained gitignored dirs (plans/,\n.claude/). A .docgraph force-built with -\n[…]\nthis repo in an MCP client\nnow indexes their own gitignored files into a local .docgraph (intended for this\nproject's dogfooding).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(mcp): serve this repo with --no-gitignore so plans/ + .claude/ st…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-05-31T23:36:37Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f71c9eede450bcd42309b12e9af502f2488d4caf",
          "body": "…tinct-file footer, missing_status clarity (#45)\n\nFrom the AX probe v4 behavioral audit (zero regressions; all v3 fixes held):\n\n- P-v4-1 (A′/H): the seeded-gather serverInstructions sentence over-promised\n  docgraph_context. Verified live, context is task/keyword-based and does not\n  compose the cit\n[…]\nield.\n\ngo build/vet + go test -race ./... 17/17 green. New: search_test.go\nTestHandleSearch_DistinctFileFooter*. No schema change.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(tools): AX v4 surface fixes — seeded-gather call-both, search dis…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-05-31T23:14:09Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a4bd2e38e92b0e23d18929e0937a673cd86f6bdd",
          "body": "…ve --workspace fd exhaustion) (#44)\n\n`serve --workspace` recursively watches the whole tree; on macOS (kqueue) every\nwatched dir/file is one fd, so a large workspace opens ~58K fds per process —\nmultiplied across every concurrent serve (one per connected MCP client), this\nexhausted the system file \n[…]\nlane\ntoo) + macOS fd-delta proof (uncapped 3072 → capped 524 on a 3068-entry tree) +\nreindex fd-leak guard (0 fds over 20 cycles).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(watcher): cap fsnotify watches per process to bound fd usage (ser…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-05-31T22:32:35Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3414ede78f8226e442c082e52dffb9e27fe75583",
          "body": "…strip guidance, trust notes (#43)\n\nRender/description-layer fixes for the AX-probe-v3 findings (no store/ranking\nchange; go build + go test -race ./... green, 17/17):\n\n- docgraph_context: collapse same-source-file result nodes to one entry per\n  document, listing additional matched sections inline \n[…]\ntency + K recount).\n\nLayer-1 A0/A4 live substrings preserved (\"distinct other documents\",\n\"incoming edges ←\", \"outgoing edges →\").\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(tools): AX v3 surface fixes — context dedup, tool-overlap & path-…",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-05-31T21:43:07Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0e2471fc34c5929e999b6d7ab2e040f4f810a51f",
          "body": "…(P6/C2) (#42)\n\nsearch('README') now returns README.md itself, not just headings that mention the\ntoken. A new collectFilenameCandidates retrieves a DOCUMENT whose basename (extension\nstripped) exactly equals the query — the find-this-doc-by-name case FTS misses because a\ndocument node's indexed tex\n[…]\n Fires only on a single-token query that equals a basename; whitespace queries\nskip it. Closes the v2 AX-probe C2 deferred defect.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(search): exact filename match surfaces the named document first …",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-05-31T19:38:19Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "870efe645a65187e1584fd7574b7a7a4745e5659",
          "body": "…files honesty, topic-gather guidance (#41)\n\n* fix(tools): surface TF-IDF similarity score components + ground caveats (P1/P3a/P5b)\n\ndocgraph_similar render now labels the score as a 0-1 weighted blend and shows the\ntfidf/refs/tags signal components already persisted in edge metadata (closing the v2\n[…]\nnot a table row, so the table shape is unchanged.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(tools): AX surface follow-ups — similar provenance, node parity, …",
          "author_name": "Detective-X",
          "author_login": "Detective-XH",
          "committed_at": "2026-05-31T19:11:54Z",
          "body_truncated": true,
          "is_coding_agent": true
        }
      ],
      "releases_count": 15,
      "commits_last_year": 258,
      "latest_release_at": "2026-06-15T20:00:18Z",
      "latest_release_tag": "v0.3.4",
      "releases_from_tags": false,
      "days_since_last_push": 7,
      "active_weeks_last_year": 4,
      "days_since_latest_release": 42,
      "mean_days_between_releases": 2.3
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 42,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/Detective-XH/docgraph",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/Detective-XH/docgraph",
          "is_deprecated": false,
          "latest_version": "v0.3.4",
          "repository_url": "https://github.com/Detective-XH/docgraph",
          "versions_count": 15,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-06-15T19:59:33Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 42
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 5,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": null,
      "open_issues_and_prs": 4
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": true,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 33922,
      "source_files_sampled": 222,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        "AGENTS.md"
      ],
      "agent_instruction_max_bytes": 7493
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": null,
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/Detective-XH/gopdf",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.8.0"
        },
        {
          "name": "github.com/fsnotify/fsnotify",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.1"
        },
        {
          "name": "github.com/mark3labs/mcp-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.54.1"
        },
        {
          "name": "github.com/yuin/goldmark",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.8.2"
        },
        {
          "name": "golang.org/x/net",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.56.0"
        },
        {
          "name": "gopkg.in/yaml.v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.0.1"
        },
        {
          "name": "modernc.org/sqlite",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.52.0"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 4,
        "merged_prs": 95,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 3
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "Detective-XH",
          "commits": 252,
          "avatar_url": "https://avatars.githubusercontent.com/u/163795227?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "test.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [
        ".golangci.yml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 3,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/12 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 10,
            "reason": "project is fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 8,
            "reason": "5 out of the last 5 releases have a total of 5 signed artifacts.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 9,
            "reason": "1 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "fd794aea38e3669336e9cc915541f85cd826cdc8",
        "ran_at": "2026-07-28T04:36:32Z",
        "aggregate_score": 5,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-27T08:13:01Z",
      "oldest_open_prs": [
        {
          "number": 98,
          "created_at": "2026-06-22T08:11:05Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 99,
          "created_at": "2026-06-22T08:12:25Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 101,
          "created_at": "2026-07-13T08:13:21Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 102,
          "created_at": "2026-07-20T08:12:18Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-06-15T19:59:33Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/Detective-XH/DocGraph",
    "host": "github.com",
    "name": "DocGraph",
    "owner": "Detective-XH"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 56,
      "inputs": {
        "security": 50,
        "vitality": 73,
        "community": 29,
        "governance": 50,
        "engineering": 74
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 73,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 57,
            "inputs": {
              "commits_last_year": 258,
              "human_commit_share": 0.98,
              "days_since_last_push": 7,
              "active_weeks_last_year": 4
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 7 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 7
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "4/52 weeks with commits",
                "points": 2.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 4
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "258 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 258
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 98,
            "inputs": {
              "releases_count": 15,
              "latest_release_tag": "v0.3.4",
              "releases_from_tags": false,
              "days_since_latest_release": 42,
              "mean_days_between_releases": 2.3
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "15 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 15
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 42 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 42
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~2.3 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 2.3
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
                "points": 8,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 29,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "forks": 0,
              "stars": 5,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "5 stars",
                "points": 9.8,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 50,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 70,
            "inputs": {
              "merged_prs": 95,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 3
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "95/98 decided PRs merged",
                "points": 37.1,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 95,
                      "decided": 98
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/12 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 37,
            "inputs": {
              "followers": 3,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "Detective-XH",
              "public_repos": 28,
              "account_age_days": 862
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "3 followers of Detective-XH",
                "points": 4.3,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 3,
                      "login": "Detective-XH"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "28 public repos, account ~2 yr old",
                "points": 15.4,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 28
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 2
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/Detective-XH/docgraph"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 42
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 42 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 42
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "15 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 15
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 74,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "1 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "topics": [
                "claude",
                "documentation",
                "golang",
                "knowledge-graph",
                "llm",
                "markdown",
                "mcp",
                "mcp-server",
                "obsidian",
                "rag",
                "semantic-search",
                "sqlite",
                "agent",
                "docx",
                "html",
                "pdf",
                "codex",
                "hermes",
                "opencode"
              ],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "19 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 19
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 50,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 50,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 5
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/12 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is fuzzed",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "1 existing vulnerabilities detected",
                "points": 6.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 78,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [
                "AGENTS.md"
              ],
              "agent_instruction_max_bytes": 7493
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "98 of 98 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 98,
                      "sampled": 98
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "excellent",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0.59,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0.02
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "go.mod (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "go.mod"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "59 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 59,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "2 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 2,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 33922,
              "source_files_sampled": 222,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/222 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 222,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "critical",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 20,
            "inputs": {
              "example_dirs": [],
              "has_mcp_signal": true,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-28T04:36:46.704543Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/d/Detective-XH/DocGraph.svg",
  "full_name": "Detective-XH/DocGraph",
  "license_state": "standard",
  "license_spdx": "MIT"
}

Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.

Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v1.13.0, схема v0.27.0 — повна методологія · вікі метрик.

Як окремий результат виглядає на тлі всього реєстру: сукупна статистикаGo.