waired-ai / waired-agent

来自 GitHub 依赖图的完整解析依赖集合：18 个直接依赖与 39 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。

安装 npm:docs-site@0.0.1 会引入 1,156 个包（直接与传递）：其中 4 个存在已知公告，0 个为直接依赖。

公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 62028,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "Go": 6008189,
        "MDX": 278583,
        "Astro": 21984,
        "Shell": 362554,
        "Python": 7484,
        "Makefile": 28806,
        "Inno Setup": 12794,
        "JavaScript": 14547,
        "PowerShell": 346775,
        "TypeScript": 6858,
        "Go Template": 8075,
        "Objective-C": 857
      },
      "pushed_at": "2026-07-25T18:22:25Z",
      "created_at": "2026-07-08T08:16:15Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-25T15:19:01Z",
      "description": null,
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": null,
      "name": null,
      "type": "Organization",
      "login": "waired-ai",
      "company": null,
      "location": null,
      "followers": 0,
      "avatar_url": "https://avatars.githubusercontent.com/u/300165914?v=4",
      "created_at": "2026-07-05T15:55:51Z",
      "is_verified": null,
      "public_repos": 2,
      "account_age_days": 20
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.0.2-rc6",
          "kind": "prerelease",
          "published_at": "2026-07-25T18:38:48Z"
        },
        {
          "tag": "v0.0.2-rc5",
          "kind": "prerelease",
          "published_at": "2026-07-25T08:24:46Z"
        },
        {
          "tag": "v0.0.2-rc4",
          "kind": "prerelease",
          "published_at": "2026-07-19T06:26:40Z"
        },
        {
          "tag": "v0.0.2-rc3",
          "kind": "prerelease",
          "published_at": "2026-07-15T16:30:43Z"
        },
        {
          "tag": "v0.0.2-rc1",
          "kind": "prerelease",
          "published_at": "2026-07-15T12:46:00Z"
        },
        {
          "tag": "v0.0.1-rc18",
          "kind": "prerelease",
          "published_at": "2026-07-11T15:13:26Z"
        },
        {
          "tag": "edge",
          "kind": "other",
          "published_at": "2026-07-11T14:28:30Z"
        },
        {
          "tag": "v0.0.1-rc17",
          "kind": "prerelease",
          "published_at": "2026-07-11T12:55:11Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "48ce3ae6f351be8e5c5493e1547cd6ce47b33be4",
          "body": "…ipt lacked (#170) (#172)\n\ninstall.sh and install.ps1 had drifted apart in three ways that only show up\non an unattended host, where nobody is watching.\n\n1. --yes meant different things per OS. install.sh --help has always said\n   --yes covers \"init non-interactive\", and install.sh does append it;\n \n[…]\ntalltest-windows.ps1 gains the -Yes and install.sh-spelling asserts.\n\nFixes #165\nFixes #166\n\nSigned-off-by: gen16k <gen16k@gmail.com>\nCo-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(installer): one non-interactive contract, and the knobs each scr…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-25T15:18:56Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a067d5e92d96c7080a21ea4018a34e64f32b2337",
          "body": "Every piece needed to file a useful bug report already existed, in four\ndifferent places -- and the one thing that was written down nowhere was the\norder to do them in. That order is not cosmetic: Waired logs only the\nimportant events by default, so turning on detail AFTER reproducing a\nproblem yiel\n[…]\naired logs` section, both\nlanguages. ja/ mirror translated and i18n:accept run.\n\nFixes #167\n\nSigned-off-by: gen16k <gen16k@gmail.com>\nCo-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: add a copy-pasteable \"Report a problem\" runbook (#171)",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-25T15:18:49Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8df16f3cf5d1a5410ee8697c1af3dab19bb6ca47",
          "body": "…he = form (#169)\n\nTwo flags on install.ps1 that looked wired up but did nothing.\n\n-LogLevel was dropped on the ordinary (self-elevating) install path.\ninstall.ps1 propagates parameters into the elevated Phase-2 child by\nexactly one of two mechanisms -- an explicit passthrough argument in\nInvoke-Sel\n[…]\nug. Tier 1 additionally\nasserts the level reached the SCM ExecStart.\n\nFixes #164\nFixes #168\n\nSigned-off-by: gen16k <gen16k@gmail.com>\nCo-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(installer/windows): -LogLevel survives UAC; init bool flags use t…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-25T13:51:32Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "eefc567633c8a816700e939f140785481e5fd3fa",
          "body": "Two gaps in what a user can discover without reading source:\n\nREADME.md had no installer options at all beyond the edge / clean /\nuninstall recipes, so the repo front page was silent on --no-init,\n--skip-ollama, --log-level, --mask-pii and the rest. Add a compact\noptions table (install.sh / install.\n[…]\nr than\nagainst the old docs. JA mirror updated and i18n:accept run, so\ni18n:check is green.\n\nSigned-off-by: gen16k <gen16k@gmail.com>\nCo-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: cover the installer and `waired init` option surface (#163)",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-25T13:51:04Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "dbac1ff83376fe624dc2c752a42463515619eeb4",
          "body": "`waired logs` (#159) collected the service + engine logs into a file for\nbug reports but only warned \"review before sharing\". Add --mask-pii so the\nbundle can be shared safely.\n\nWhen set (or WAIRED_PII_MASK=1, matching `waired init` and the installers'\n--mask-pii), the output file is wrapped in a ma\n[…]\n whole engine-log file, one formatted header line each), so\na masked token never straddles a Write.\n\nDocs (EN + ja) and a redaction test included.\n\nFixes #161\n\nSigned-off-by: gen16k <gen16k@gmail.com>",
          "is_bot": false,
          "headline": "feat(cli): add --mask-pii to `waired logs` (#162)",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-24T14:25:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6b721dfe37a5eb6d6769d7c6844221e4263b630c",
          "body": "…ired#898) (#158)\n\nConsumer-side Public Share held every grant forever. runPublicGrantLoop\nrenewed on a bare nextRenewAt schedule — gated only on netmap-presence and\nmode-on, never on whether the grant carried traffic — and topped up to K=3\non every periodic tick. So an online-but-idle consumer kept\n[…]\n\n\nFixes waired-ai/waired#898\n\n\nClaude-Session: https://claude.ai/code/session_01YAQpgtFd7TLxEQJuyPX1jn\n\nSigned-off-by: gen16k <gen16k@gmail.com>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(public-share): renew grants by traffic, acquire on demand K=1 (wa…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-24T14:25:01Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b3b062fd5e92df1a4b831accbb3da39f9db180f3",
          "body": "Now that log level is a live-toggleable knob (#159), fill in the packages\nthat had little or no debug logging so `waired config log-level debug`\nactually surfaces useful detail for pre-release debugging. 133 new\nslog.Debug calls, logging only — no behavior change, no new dependencies.\n\n- internal/ga\n[…]\nored value, secret, or byte length.\n\nVerified: gofmt, go vet, golangci-lint (0 issues), go test ./..., prod\nbuild, and make verify-cross all pass.\n\nFixes #157\n\nSigned-off-by: gen16k <gen16k@gmail.com>",
          "is_bot": false,
          "headline": "feat: add debug-level logging across the zero-coverage packages (#160)",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-24T13:37:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "19716b877edf5516892e44fe1bb53a58d199d5e0",
          "body": "…config CLI, log collection, installer flag (#159)\n\n* feat(agent): add Logging.Level config field (agent.json + WAIRED_LOG_LEVEL)\n\nIntroduce a persisted logging.level (debug/info/warn/error) on the\nagentconfig.Config root, with a LoggingConfig sub-struct and\nParseLogLevel / NormalizeLogLevel / SlogL\n[…]\ners that drop the write error — a\nlog bundle has nowhere useful to report a mid-write failure.\n\nRefs #157\n\nSigned-off-by: gen16k <gen16k@gmail.com>\n\n---------\n\nSigned-off-by: gen16k <gen16k@gmail.com>",
          "is_bot": false,
          "headline": "feat(agent): debug logging — live log-level toggle (service + tray), …",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-24T13:37:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7fffedf94093cdc71b73a2722a3371f400894372",
          "body": "… L4 (waired#835) (#156)\n\nThe \"GPU テスト実行義務\" decision has mandated since Step 2 that \"when CI\nis built, include a GPU lane that runs make e2e-vllm\" — but no such lane\nwas ever created (neither org repo's Actions history has a GPU workflow),\nso real vLLM install + serving has only ever been verified b\n[…]\ned-ai/waired#835, #153, #154\n\n\nClaude-Session: https://claude.ai/code/session_01A6vZkZDVWpdYLpapkQaVKF\n\nSigned-off-by: gen16k <gen16k@gmail.com>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci(installtest): nightly GPU vLLM install+serve lane on a self-hosted…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-24T13:28:28Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "817cc5cb8da255f3ef555197f8a0e77b05ce45a7",
          "body": "…wired (#153) (#155)\n\nrouter.VLLMAutoSelectable was left `false` with a \"flip to true when #557\nlands\" note, but #557 (local vLLM serving) is COMPLETED: the Linux\nadapter is registered (cmd/waired-agent/inference_vllm_linux.go) and\nbootstrapVLLM serves against a real venv. The stale gate kept vLLM\ni\n[…]\n53\nRefs waired-ai/waired#835\n\n\nClaude-Session: https://claude.ai/code/session_01A6vZkZDVWpdYLpapkQaVKF\n\nSigned-off-by: gen16k <gen16k@gmail.com>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(inference): enable vLLM auto-selection now that #557 serving is …",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-24T13:28:16Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "4804a040a3cecd8f357c446dbdaa1133b3bd4ffc",
          "body": "… (waired#835) (#154)\n\nThe daemon-path setup executor could only ever install ollama: the\nwizard's engine step hard-returned on any other desired engine\n(`if st.DesiredEngine != \"ollama\" { return }`), and the install seam was\nwired straight to installOllama. A device told to set up vLLM therefore\nsa\n[…]\ns that can already honor it.\n\n\nClaude-Session: https://claude.ai/code/session_01A6vZkZDVWpdYLpapkQaVKF\n\nSigned-off-by: gen16k <gen16k@gmail.com>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(agent): install vLLM from the setup executor, Linux+NVIDIA-gated…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-24T13:28:07Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6a2053488e1b9731ac272e58d8e4c86f450e00a3",
          "body": "…the guest limit; darwin tray gets a PR gate (waired#901) (#151)\n\n* fix(tray): make Cancel the default button on the public-share consent dialog\n\nConfirmWithLabels has exactly one caller: the consent flow that decides\nwhether this machine is offered to strangers (and whether this machine\nmay use the\n[…]\n artifact gate. Drop the\nunit-test step until #152 makes it safe to re-enable.\n\nRefs waired-ai/waired#901\n\nSigned-off-by: gen16k <gen16k@gmail.com>\n\n---------\n\nSigned-off-by: gen16k <gen16k@gmail.com>",
          "is_bot": false,
          "headline": "fix(public-share): consent dialog defaults to Cancel; status reports …",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-23T17:58:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "95b44774ef42b015c06cfb2fca48c517fd64a6bd",
          "body": "…n local inference (waired#899) (#149)\n\n* fix(inference): count the owner's local engine work in the shared admission counter\n\nThe owner-priority latch (public share spec §8.2) is raised only by\ncapacityGateAdapter, which sits in peerAuthChain — the overlay (WG)\nlistener's middleware stack. The owne\n[…]\nt is a no-op; nothing is serving peer or\npublic traffic in that window anyway.\n\nRefs waired-ai/waired#899\n\nSigned-off-by: gen16k <gen16k@gmail.com>\n\n---------\n\nSigned-off-by: gen16k <gen16k@gmail.com>",
          "is_bot": false,
          "headline": "fix(public-share): raise the owner-priority latch from the owner's ow…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-23T17:58:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4a1c6b1bdaf973a07e84190953db38adf2b7e454",
          "body": "…cs-site (#150)\n\nThe docs site was carried over from the monorepo as a CLI-first site,\nand the CLAUDE.md rule that keeps it current listed only CLI/installer\nexamples. The GUI fell outside the reader's scope entirely: the whole\nWaired-app surface — submenu restructure (#63), inference icon state\n(#6\n[…]\nrates surfaces rather than\nCLI-shaped examples, and says outright that GUI-only is not an\nexemption.\n\nSigned-off-by: gen16k <8107hatena8107@gmail.com>\nCo-authored-by: gen16k <8107hatena8107@gmail.com>",
          "is_bot": false,
          "headline": "ci: fail a PR that changes a user-visible surface without touching do…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-23T17:44:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "343fc42fe94cf83890e39cf4ef1d074767b7bbe0",
          "body": "…ney, and enforce the Japanese mirror in CI (#147)\n\n* docs(site): prototype the journey-first IA — quickstart, uninstall, model choice, glossary\n\nDirection prototype for the user-docs revision. Four new pages (EN + JA)\nplus a reordered sidebar, so the shape can be reviewed before the whole\nsite is c\n[…]\nre\nproduct names do not. Noted in site-links.ts and the config so the next\nperson does not \"fix\" it back.\n\nSigned-off-by: gen16k <gen16k@gmail.com>\n\n---------\n\nSigned-off-by: gen16k <gen16k@gmail.com>",
          "is_bot": false,
          "headline": "docs(site): rebuild the user documentation around the real setup jour…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-23T16:56:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d4e8e591acd06f6d807892330369f91fe5067175",
          "body": "…#145)\n\nThe onboarding wizard could not write its two instructions in one\ngesture. Writing desired_model alongside desired_engine fired PullModel\nagainst an engine that was not installed yet: the inference subsystem\nstarts inert on an engine-less host, so the pull failed immediately and\nthe one-shot\n[…]\nittedWhenEngineReappears to keep the no-engine and\nreinstall paths covered.\n\nRefs waired-ai/waired#904\n\nSigned-off-by: gen16k <gen16k@gmail.com>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(agent): hold the setup model pull until the engine is installed (…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-23T16:29:42Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "764f7e90e014dec54253345727e58c12a33a4c44",
          "body": "The control plane decides, per device, which catalog models and which\nserving engines first-run onboarding may offer. It already receives\nInferenceState.Hardware, but the broadcast summary omitted the three\nfacts the agent's own picker uses, so the CP could not reproduce the\nagent's budget — it woul\n[…]\n PR, per the rule that proto\nchanges ship as their own small PR.\n\nFixes #142\nRefs waired-ai/waired#903\n\nSigned-off-by: gen16k <gen16k@gmail.com>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(proto): publish host-fit facts on HardwareSummary (#143)",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-23T16:29:34Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "001eaf649fd221515e48b47c53db0a12f043da1c",
          "body": "…p leaking owner capacity on healthz (#148)\n\n* fix(public-share): stop serving before persisting on the kill switch\n\npublicShareController.transition wrote the desired-state file first and\nreturned on a write error, so a full disk, a read-only remount or a\npermission change left the OFF path unreach\n[…]\nrobe decision agree with the\nceiling its admission is actually judged against.\n\nRefs waired-ai/waired#901\n\nSigned-off-by: gen16k <gen16k@gmail.com>\n\n---------\n\nSigned-off-by: gen16k <gen16k@gmail.com>",
          "is_bot": false,
          "headline": "fix(public-share): make the kill switch actually stop everything; sto…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-23T14:06:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "16ed17c524413edd73b6aed0854398d224ec8539",
          "body": "… (#129)\n\nThe overlay serving gate chain classified foreign Public Share peers\nwith IsPublicConsumer() alone (Kind==\"public\" && Role==\"consumer\").\nA peer we BORROW inference from — Role \"provider\" in our netmap — is\ntherefore \"not public\" to every gate: publicShareGate and\npublicAdmissionGate skippe\n[…]\ne healthz surface, and that a foreign peer can no longer set the\nowner-priority latch. Verified failing against the pre-fix chain.\n\nFixes waired-ai/waired#896\n\nSigned-off-by: gen16k <gen16k@gmail.com>",
          "is_bot": false,
          "headline": "fix(inference): refuse serving requests from non-consumer grant peers…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-23T12:48:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c016204f6061c09df73471fce019aa3965ae22e3",
          "body": "… (waired#835 §9/§11) (#127)\n\nThe waired#835 §9/§11 setup executor engine install — the resident\n`sudo waired init` attaching a management-API lease and installing the\nengine the daemon-path first-run needs — was covered only by unit tests.\nNo installtest leg exercised it end to end, because the two\n[…]\n_dispatch run.\nshellcheck / pwsh-parse / actionlint all clean.\n\nRefs waired-ai/waired#835\n\nSigned-off-by: gen16k <gen16k@gmail.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test(installtest): 3-OS daemon-path setup-executor engine install leg…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-21T17:33:00Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e757633a28e40d9c95ca39ad4558b76b7fa99a5e",
          "body": "…Privacy rewrite (waired#834 E4) (#126)\n\n* docs(site): add Public share disclosure page (en + ja) (waired#834 E4)\n\nThe page the Public Share consent dialog links to as\ndocs.waired.ai/public-share. Full-disclosure structure: what the other\nside can and cannot see (owner visibility, cache traces, unve\n[…]\nof .github/workflows/deploy-docs.yml, which runs on every docs PR\neven when the deploy steps are skipped.\n\nSigned-off-by: gen16k <gen16k@gmail.com>\n\n---------\n\nSigned-off-by: gen16k <gen16k@gmail.com>",
          "is_bot": false,
          "headline": "docs(site): Public Share user docs — /public-share disclosure page + …",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-21T12:33:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e3c62519f1ca298d7bc703260c6ee11f227c0d3d",
          "body": "… (#124)\n\nComplete waired#832 E3a: the consumer-side Public Share CLI.\n\n`waired public use`:\n- No flags -> GET /waired/v1/public/use and print (a viewer, no write).\n- Any flag -> ensure consent first, then POST /waired/v1/public/use with\n  ONLY the changed fields (pointer = \"leave unchanged\"). Mode \n[…]\nish + ja mirror). All user copy is plain\nEnglish with no Waired internals.\n\nFixes waired-ai/waired#832\n\nSigned-off-by: gen16k <gen16k@gmail.com>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): first-use consent flow + `waired public use` settings verb…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-21T11:12:39Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "711ccba775b25270788c6907eafae2318665841a",
          "body": "Add the provider-side Public Share toggle to the CLI, stacked on the\n`waired public status` scaffolding (public.go / public_http.go).\n\n`waired public share [--max-clients N]` POSTs the enable route, echoing\nthe server-authored result (state, guest-pass revocations, and the\nmesh/pending notes verbati\n[…]\nan inventing one. A 404 from\neither route surfaces errPublicShareUnsupported (upgrade waired-agent).\n\ndocs-site is deferred to PR3.\n\nRefs waired-ai/waired#832\n\nSigned-off-by: gen16k <gen16k@gmail.com>",
          "is_bot": false,
          "headline": "feat(cli): add `waired public share` / `unshare` toggle (#122)",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-20T18:18:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c8cbd7a45787de9bb34217b475efecc3f1bad2ec",
          "body": "…#125)\n\n* feat(tray): Public share submenu + served consent dialog + kill switch\n\nAdd the \"Public share\" tray submenu (waired#833 E3b PR2), stacked on the\nmgmt_public.go client from PR1. A new top-level \"Public share\" parent\nholds flat level-2 rows (the Windows systray backend can't render three\nnes\n[…]\nnders the message verbatim without\nleaking \"no_candidate\" / \"all_overloaded\".\n\nFixes waired-ai/waired#833\n\nSigned-off-by: gen16k <gen16k@gmail.com>\n\n---------\n\nSigned-off-by: gen16k <gen16k@gmail.com>",
          "is_bot": false,
          "headline": "feat(tray): one-shot Public Share nudge toast (waired#833 E3b, PR3) (…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-20T18:18:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ccdd68b64a514ee95587a3d0b759f7b45472056d",
          "body": "…h (#123)\n\nAdd the \"Public share\" tray submenu (waired#833 E3b PR2), stacked on the\nmgmt_public.go client from PR1. A new top-level \"Public share\" parent\nholds flat level-2 rows (the Windows systray backend can't render three\nnesting levels): the provider share toggle, its state/note rows, a\n\"Use pu\n[…]\nender identical, internals-free copy, with a\n  guard test.\n\nThe pre-consent nudge toast is a separate later PR and is not included.\n\nRefs waired-ai/waired#833\n\nSigned-off-by: gen16k <gen16k@gmail.com>",
          "is_bot": false,
          "headline": "feat(tray): Public share submenu + served consent dialog + kill switc…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-20T18:17:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f03cf55ff98a90659ccdd62146928b162d90c36d",
          "body": "…takes the daemon path (waired#835 §11.2) (#119)\n\n`waired init` attaches to a running local agent and drives the browser-based\nfirst-run onboarding only when the daemon is already up (the daemon-path\nguard at cmd/waired/main.go); otherwise it falls through to the legacy\nstandalone terminal enroll. U\n[…]\nand CP login completion and edits\nscripts/dev/lib/installtest-enroll.sh, which is under concurrent\nmodification in another session.\n\nRefs waired-ai/waired#835\n\nSigned-off-by: gen16k <gen16k@gmail.com>",
          "is_bot": false,
          "headline": "build(installer): start the daemon before `waired init` so first-run …",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-20T17:48:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "60877ca2735729469af43510218aa4f990ed5fda",
          "body": "…121)\n\nIntroduce the `waired public` command tree (waired#832 E3a, PR1 of 3),\nthe read-only `waired public status` verb, and the shared HTTP + error\nplumbing the later mutating verbs (share on/off, use settings, consent)\nwill reuse.\n\nWhy the shared plumbing lands now:\n\n* The two Public Share route f\n[…]\nit binary-wide).\n\ndocs-site is intentionally untouched; a later PR consolidates the cli.md\nrows to avoid conflicts on that hot doc.\n\nRefs waired-ai/waired#832\n\nSigned-off-by: gen16k <gen16k@gmail.com>",
          "is_bot": false,
          "headline": "feat(cli): add `waired public` group and read-only `public status` (#…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-20T17:42:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b86e2010a6690390bfa181decbc6030934ed6196",
          "body": "…(#118)\n\nAdd a tray-side client for the six /waired/v1/public/* management routes\nand a cross-OS confirm dialog whose button labels come from the caller,\nso PR2's consent flow can render the server-authored accept/cancel\nlabels verbatim across desktops.\n\nmgmt_public.go adds PublicShareStatus/Enable/\n[…]\ntest seam.\n\nServer-side management code is left untouched (kill-switch text is\nclient-authored in PR2) to avoid colliding with E3a.\n\nRefs waired-ai/waired#833\n\nSigned-off-by: gen16k <gen16k@gmail.com>",
          "is_bot": false,
          "headline": "feat(tray): public-share management client + labelled confirm dialog …",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-20T17:42:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b060a4d4131f489f4b2ed9c517aac865c7eedd6d",
          "body": "…ard (waired#835 §11) (#117)\n\nwaired#835 #115 gave the daemon path an executor-driven engine install,\nbut gated it on setupActive — a browser wizard actually driving. Every\nterminal-only daemon-path install therefore still finishes with no\nengine: --non-interactive, --no-browser, no TTY, pressing En\n[…]\n the same path macOS is already on.\n\nRefs: https://github.com/waired-ai/waired/issues/835\n\nSigned-off-by: gen16k <gen16k@gmail.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(cli): install the engine on the daemon path without a browser wiz…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-20T17:09:38Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "124b4cdba495811c330fab96cfed948038a89a40",
          "body": "…h (waired#835 §11) (#115)\n\nOn the daemon-mediated path `waired init` returns early at main.go's\nrunInitViaDaemon branch and never reaches the standalone engine block, so\nnothing could install an engine there. The wizard's first step could only\never report permission_denied: the daemon cannot instal\n[…]\ntext already said this step exists.\n\nRefs: https://github.com/waired-ai/waired/issues/835\n\nSigned-off-by: gen16k <gen16k@gmail.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): install the engine as the setup executor on the daemon pat…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-20T11:19:36Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5dea3997755173eefd7df4691280e4e9267ed166",
          "body": "…29) (#113)\n\nProvider-side batcher, signed CP client, and the gateway/peer-auth\nbridge. Aggregates by (grant_id, model_id, class), flushes every 60s or\n50 pending triples, chunks to the CP's caps and paces to its rate limit.\n\nRetry classification is deliberately asymmetric: 429 and the clock-skew\n40\n[…]\nds.\n\nThe batch mutex is never held across a CP round trip or the inter-chunk\npacing sleep, so a serving request on :9474 can never block on the\ncontrol plane.\n\nSigned-off-by: gen16k <gen16k@gmail.com>",
          "is_bot": false,
          "headline": "feat(agent): report Public Share usage to the control plane (waired#8…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-20T11:17:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "940d5f41e58fca6319b6d91868b06b6cf8ef6471",
          "body": "…(waired#829) (#112)\n\nwip: capture layer + tests; cmd wiring lands in the reporting PR.\n\nSigned-off-by: gen16k <gen16k@gmail.com>",
          "is_bot": false,
          "headline": "feat(gateway): capture engine-reported token counts on every surface …",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-20T10:26:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ee37cf3c1ae296392c912a91cad9549e278e9019",
          "body": "…ring browser setup, hold residency (waired#835 N3) — re-land of #111 (#114)\n\n* feat(cli): attach as the setup executor, suppress terminal prompts during browser setup, hold residency for the setup window (waired#835 §4.2/§9)\n\nThe §9 defect, stated correctly for the first time. The 12-minute literal\n[…]\n (1M context) <noreply@anthropic.com>\nSigned-off-by: gen16k <gen16k@gmail.com>\n\n---------\n\nSigned-off-by: gen16k <gen16k@gmail.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): attach as the setup executor, suppress terminal prompts du…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-20T10:24:38Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0dbed23ddce98ce7cc7722777e00e9c558d053d3",
          "body": "…ring, pseudonyms, acquire demand, nudge (waired#827) (#110)\n\n* feat(router): Public Share public-candidate partitioning (waired#827)\n\nwip: gate + ordering + pseudonym scrub + demand/nudge seams. Tests for\nthe remaining wiring follow in this branch.\n\nSigned-off-by: gen16k <gen16k@gmail.com>\n\n* test(\n[…]\nor the all-overloaded shortfall exit, the\n  served-locally silence, and ownBestTier's local/self sources.\n\nSigned-off-by: gen16k <gen16k@gmail.com>\n\n---------\n\nSigned-off-by: gen16k <gen16k@gmail.com>",
          "is_bot": false,
          "headline": "feat(router): Public Share public-candidate partitioning — gate, orde…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-20T10:03:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ebbd73557b2b63b7e5f91428945f732b50b5f53e",
          "body": "…l statuses, disk-full classification, pull re-admission (waired#835 §9/§11) (#109)\n\nOn the NAVI onboarding path a fresh host has NO engine, and the agent\nreported that as a hard, permanent failure from its very first push.\nTwo independent bugs, both fixed here.\n\n1. engine_install was unconditionall\n[…]\nPR updates dev-docs-site/agent.md and reference/parameters.md.\n\nRefs waired-ai/waired#835\n\nSigned-off-by: gen16k <gen16k@gmail.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(agent): executor lease on the management API; real engine_instal…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-20T09:40:11Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0463ab36bb12a51ee0a58e6517612060dd6396f5",
          "body": "…a peer hop (#108)\n\nA request arriving from a mesh peer names the model the way the ENGINE\ndoes, not the way the catalog does: buildMeshCandidates matches the\npeer's advertised InferenceState.Models against Variant.Source.Tag\n(ollama) / Source.RepoID (vLLM), makeMeshCandidate carries the match as\nSe\n[…]\nevery engine-native\nidentifier the shipped catalog can put on the wire (34 across 21\nmanifests). Both fail on the pre-fix tree with the exact 404.\n\nFixes #107\n\nSigned-off-by: gen16k <gen16k@gmail.com>",
          "is_bot": false,
          "headline": "fix(router): resolve engine-native model names on the serving leg of …",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-20T09:03:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "47d8c915ea9e5c46fdcc62802eba3ac84d39cdf7",
          "body": "…side DstNetworkID stamping (waired#821) (#106)\n\nSecond half of B3 (spec §6/§7.2/§7.3/§10), completing waired#821. The\nfirst half (#93) wired foreign-peer handling; this adds the consumer-\nside grant lifecycle and the relay-frame addressing that makes\ncross-network public inference routable (relay s\n[…]\nears the engine table. All fixture IDs synthetic.\n\nFixes waired-ai/waired#821\nRefs waired-ai/waired#843\n\nSigned-off-by: gen16k <gen16k@gmail.com>\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(agent): background Public Share grant acquirer/renewer + sender-…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-20T06:33:42Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2719cedb73357700109e212a29a1f069e24979b3",
          "body": "…P push, revoke-on-disable, mesh auto-enable (waired#825) (#105)\n\nC2 of Public Share v1 (spec §4.1/§5.1/§6/§8.3): wire the C1\npublicShareController to its operator surfaces and the control plane.\n\n- internal/controlclient: PushPublicShare — the signed self-endpoint\n  push (POST /v1/devices/self/publ\n[…]\nader mode, non-200), and the streaming applySelf pin.\n\nRefs: waired-ai/waired#825, waired-ai/waired#843\n\nSigned-off-by: gen16k <gen16k@gmail.com>\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(agent): Public Share provider toggle sync — management routes, C…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-20T04:36:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "297276a072104ec3c8520c7ee58ffed51db0a630",
          "body": "…ross-network peers (waired#820) (#104)\n\nPublic Share B2 injects foreign-network peers into signed NetworkMaps,\nand the sender must stamp frame.EncryptedPacket.DstNetworkID to address\nrelay frames at them (public share spec §10). Neither NetworkMapPeer\nnor PeerGrant carried the peer's home network, \n[…]\ntive-only vs proto/v0.2.2; merging auto-tags proto/v0.2.3 (patch),\nwhich the CP repo pins in the B2 PR.\n\nSigned-off-by: gen16k <gen16k@gmail.com>\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(proto): NetworkMapPeer.NetworkID — home network of CP-injected c…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-20T04:35:56Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d3faacc8a3b27372cea88091098601fc4fa438f3",
          "body": "… onboarding (waired#835 §6/§7) (#103)\n\nConsume the declarative desired state the CP folds into this device's\nown Self map entry, and report typed step progress back:\n\n- Declare onboarding-v1 on the network-map poll (next to\n  public-share-v1) so the CP may emit desired_engine /\n  desired_model_id /\n[…]\nsence in the catalog state,\nso a mirror file could only desync from reality.\n\nRefs waired-ai/waired#835\n\nSigned-off-by: gen16k <gen16k@gmail.com>\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(agent): desired-state applier + setup-progress reporter for NAVI…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-19T18:43:09Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a647c4b7e2da79d92963067ba028081079b38676",
          "body": "…oT) (#101)\n\nPublic Share matchmaking (waired#819, spec §6.1-6) needs model→quality_tier\nresolution on the control plane, but tier data lived only in the agent's\ninternal/catalog — unimportable from the CP repo. Rather than duplicating a\ngenerated tier table on the private side, move the DATA layer \n[…]\nimport\n  internal/version).\n\nRefs waired-ai/waired#819, waired-ai/waired#843 (Public Share Wave 3 prep)\n\nSigned-off-by: gen16k <gen16k@gmail.com>\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(catalog): move the catalog data layer into proto/catalog (SS…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-19T17:37:27Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c9047da8f5b8670f7e02011bd8aaaa92533fc9d0",
          "body": "…ion, owner priority, kill switch (waired#824) (#102)\n\nAdds the public branch of the :9474 overlay gate chain (public share\nspec §8.1–8.3):\n\n- PeerIdentity carries the netmap PeerGrant (peerDirectory copies it\n  wholesale); IsPublicConsumer() classifies foreign public-grant\n  consumers. shareGate no\n[…]\nmanagement/CLI/Tray surfaces are C2 (waired#825).\n\nFixes waired-ai/waired#824\nRefs waired-ai/waired#843\n\nSigned-off-by: gen16k <gen16k@gmail.com>\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(inference): serving-side Public Share gate chain — public admiss…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-19T15:55:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ea97219b9db3d2b581787d37c0609c92aa5ae0a0",
          "body": "Model deletion is classified as in-UI-confirmation-only by the #845\ndesign review: the weights are re-downloadable, so an OS elevation\nprompt would be security theater — but silent one-shot deletion from a\nmistyped command still costs a multi-GB re-download. Prompt y/N before\nDELETE /waired/v1/model\n[…]\n-y explicitly, mirroring the pull\ncommand's over-spec flag and logout's abort convention.\n\nSigned-off-by: gen16k <gen16k@gmail.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): confirm before waired models rm (waired#845 §8.2) (#100)",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-19T14:45:19Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8449a7ea3fbf271a7701c889dc26b470a20b7650",
          "body": "…e-flight job (waired#835 §12) (#99)\n\nThe explicit benchmark ran inline on the request goroutine: a caller\ntimeout (the CLI's 240s budget is shorter than the 180s warm-up +\n120s measurement worst case) or a dropped connection cancelled the\nmeasurement and the result lived only in memory (SetLastBenc\n[…]\nnchmarkJob(gen) is the N2 applier's job; gen plumbing and\n  persistence are ready for it.\n\nSigned-off-by: gen16k <gen16k@gmail.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(inference): detach the explicit benchmark into a persisted singl…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-19T14:44:58Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3dc0765554f860a742d653f0244a4fc1b098bdfa",
          "body": "…rding (waired#835) (#98)\n\nFreeze the onboarding wire contract settled on waired#835 (spec §6/§7/§14):\n\n- InferenceState gains CP-injected DesiredEngine / DesiredModelID /\n  DesiredBenchmarkGen (all omitempty, zero in the common case) — the\n  declarative targets the NAVI setup flow drives. DesiredMo\n[…]\nt, keeping signed maps byte-identical\n  for older agents (canonical-JSON test pins this).\n\nSigned-off-by: gen16k <gen16k@gmail.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(proto): desired-state + setup-progress wire types for NAVI onboa…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-19T14:44:49Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2498cb1f0c370a8c8c9b85e3a8fb175b5f98059d",
          "body": "…teal a live one (#96)\n\nTwo related hazards in the waired#838 write endpoint, both found while\nimplementing it and neither reachable by a current caller (the e2e harness\ntalks to a single running agent).\n\n1. The endpoint was derived from the Mode alone, ignoring $WAIRED_STATE_DIR.\n   Worse, the daem\n[…]\nd, and a third agent on an already-served\nstate dir logging \"endpoint is already served by another instance\" while the\noriginal kept answering 200.\n\nFixes #81\n\nSigned-off-by: gen16k <gen16k@gmail.com>",
          "is_bot": false,
          "headline": "fix(mgmt): give each agent instance its own IPC endpoint, and never s…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-19T13:40:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8c646d1c959b53f352e0a90031e5a41c500f221e",
          "body": "…ndows (waired#838) (#95)\n\n* test(installtest): assert the management write socket on macOS and Windows (waired#838)\n\nPR #79 added the waired#838 write-socket assert to the Linux installtest\nonly. That gap matters more than a normal one because the daemon's\nwriteGuard fails OPEN: if the socket/pipe \n[…]\nON reply into a single line before\nembedding it in the assert message, so each assert stays one log line.\n\nSigned-off-by: gen16k <gen16k@gmail.com>\n\n---------\n\nSigned-off-by: gen16k <gen16k@gmail.com>",
          "is_bot": false,
          "headline": "test(installtest): assert the management write socket on macOS and Wi…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-19T13:40:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f776d70464bab5a2d45735abab2e697fb0451c27",
          "body": "…(waired#826) (#94)\n\nPersist the consumer-side Public Share settings and consent record in\n<StateDir>/inference/public_use.json (same atomic-secure-write posture as\npreferred-model.json). The consent warning text (spec §14, owner-approved,\nwarning_version 1) ships as data from the management API — t\n[…]\n7), CP AuditLog public.consent report\n(lands with the grant acquirer, B1/B3 second half).\n\nSigned-off-by: gen16k <gen16k@gmail.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(management): Public Share consumer settings + versioned consent …",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-19T12:11:02Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "74119b31b0cc98e610140afa370467ca13b6749a",
          "body": "… logs, bounded nonce cache, capability declaration (waired#821 first half) (#93)\n\nPlumb NetworkMapPeer.Grant into the inferencemesh snapshot (PeerView.Grant,\nfor D2's own-vs-public router partition) and the peer directory\n(PeerIdentity.Pseudonym + DisplayName, for serving-side attribution).\nLogs an\n[…]\n map and the\nEXISTING reconciler map-GC tears down the WG peering — no new teardown code.\n\nSigned-off-by: gen16k <gen16k@gmail.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(mesh): Public Share foreign-peer wiring — grant plumb, pseudonym…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-19T11:45:49Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0933a32477d7577f43a1283e12f55a88d562c0a5",
          "body": "…windows (#92)\n\n* ci(installtest): re-enable Defender before the AMSI canary on hosted windows\n\nwindows-latest ships with Defender real-time protection off, so after\nthe GH-hosted migration the AMSI canary's positive control never fired\nand every run soft-failed with 'no live AMSI provider' (waired#\n[…]\n.noreply.github.com>\n\n---------\n\nSigned-off-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci(installtest): re-enable Defender before the AMSI canary on hosted …",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-19T11:26:45Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "bdba663978612888959b7991077531e34943f3ea",
          "body": "…red#838, PR B: clients + enforcement) (#79)\n\n* feat(cli,tray): send management writes over the local IPC socket (waired#838)\n\nPR B of waired#838: migrate the clients onto the write socket PR A landed\nand turn enforcement on, so mutating requests can no longer arrive over the\nloopback TCP port. Brow\n[…]\n (1M context) <noreply@anthropic.com>\nSigned-off-by: gen16k <gen16k@gmail.com>\n\n---------\n\nSigned-off-by: gen16k <gen16k@gmail.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli,tray): send management writes over the local IPC socket (wai…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-19T11:26:36Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "694267091f05ca1989c63c3b35517c1704af7105",
          "body": "Same rules, half the lines: fold the five bullets into one paragraph,\ndrop the now-historical v0.2.0-dormancy note (the milestone tag exists;\nthe workflow comment still documents the floor) and the rationale\nasides that decisions.md 20260719 already records.\n\nSigned-off-by: gen16k <gen16k@gmail.com>",
          "is_bot": false,
          "headline": "docs: compress the concurrent-proto rules in CLAUDE.md (#91)",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-19T10:45:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5f32dc15c2619416f96dfe29d7e68fc7b900cb61",
          "body": "* ci: move CI off self-hosted runners now that the repo is public\n\nThe self-hosted offload existed purely to cut GH-hosted Actions billing\nwhile the repo was private (waired#516 macOS build leg, waired#547\nWindows legs). On a public repo, GitHub-hosted standard runners are\nfree, so that rationale is\n[…]\n.noreply.github.com>\n\n---------\n\nSigned-off-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: move CI off self-hosted runners now that the repo is public (#88)",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-19T10:40:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8487eaaa26952324e888b87a4d2ce84306b76953",
          "body": "…only guard (waired#843) (#89)\n\nConcurrent sessions kept serializing on the shared proto module: tag\nnumber allocation, manual tag pushes, and consumers waiting on tags.\nCodify the workflow that removes those bottlenecks while keeping semver\nsemantics (decisions.md entry):\n\n- proto-tag.yml: every ma\n[…]\nle, capability-gated new map fields.\n- docs/decisions.md: full rationale incl. rejected alternatives\n  (submodule pin, pseudo-version-only, source-copy sync).\n\nSigned-off-by: gen16k <gen16k@gmail.com>",
          "is_bot": false,
          "headline": "ci(proto): concurrent proto development — auto patch tags + additive-…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-19T10:31:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ddb504cca8df080d408589447a9d6f17c72b45f4",
          "body": "…ess mutex (#83) (#86)\n\nThe hosts-file Manager's Add/Remove do a non-atomic read -> render ->\nos.WriteFile(O_TRUNC). withHostsLock wraps that sequence, but it is a real flock\nonly on unix (lock_unix.go); on Windows/other it is a no-op stub (lock_other.go),\nand Manager carried no mutex. So two gorout\n[…]\nentry\ninvariant failure was deterministic without it.)\n\nFixes #83\n\nSigned-off-by: gen16k <38280986+gen16k@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(proxy/hostsfile): serialize concurrent Add/Remove with an in-proc…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-19T10:31:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "48f4425fa49ae92e335beb13e87264cc5198f5a6",
          "body": "…st is portable (#82) (#85)\n\nmigrateLegacyOllamaModels resolved the home directory with os.UserHomeDir(),\nwhich on Windows reads %USERPROFILE%, not $HOME. The unit test set only $HOME\nvia t.Setenv, so on a Windows host the override was inert: the code read the\nreal user profile, never found the test\n[…]\nows/Linux/macOS alike. Runtime\nbehaviour is unchanged.\n\nFixes #82\n\nSigned-off-by: gen16k <38280986+gen16k@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(inference): inject home dir into legacy-model migration so its te…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-19T10:31:23Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8fbad7994d75464bc389219e5503b8dd11d68dff",
          "body": "…16) (#84)\n\nAdd the frozen public share spec §9 field set to the shared proto\nmodule, ahead of the proto/v0.2.0 tag (public-first flow):\n\n- signer.NetworkMapPeer.Grant (*PeerGrant{ID, Kind, Role, Pseudonym})\n  — CP-injected cross-network peer annotation\n- signer.InferenceState.PublicShare / PublicCa\n[…]\nanonical bytes (sign/verify compatibility for non-capable\npollers) plus grant tamper rejection and usage-report round-trip.\nNo new dependencies (stdlib only).\n\nSigned-off-by: gen16k <gen16k@gmail.com>",
          "is_bot": false,
          "headline": "feat(proto): Public Share v1 wire contract for proto/v0.2.0 (waired#8…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-19T10:23:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "008636cbd9ffd04aba156e85b9ececbdc63afeb9",
          "body": "…40, #68) (#78)\n\nResolveOllamaBackend's `case \"amd\"` returned a bare ROCm step with no env\nfor every AMD GPU. On an integrated AMD iGPU this is wrong on both OSes:\nWindows Ollama's base package ships no ROCm (a separate overlay the\ninstaller adds only for supported discrete SKUs), and Ollama 0.30.x \n[…]\n-references\nthe Go/PS supported-list mirror.\n\nFixes #40\nFixes #68\n\nSigned-off-by: gen16k <38280986+gen16k@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(inference): route AMD integrated GPUs to Vulkan+igpu, not ROCm (#…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-19T09:43:30Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "37262bc61944d3ded0b63e427de35f15ff102c3b",
          "body": "…c route (#52) (#77)\n\n* feat(claude-proxy): advertise /model route-directives on the anthropic route (#52)\n\nThe #52 model-route-directive ids (anthropic-waired-local /\nclaude-waired-cloud[1m]) were advertised only on the local-serving\n/v1/models path. routeModels is route-aware (#623), so on the ant\n[…]\n-by: gen16k <38280986+gen16k@users.noreply.github.com>\n\n---------\n\nSigned-off-by: gen16k <38280986+gen16k@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(claude-proxy): advertise /model route-directives on the anthropi…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-19T09:43:22Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "85e95627729bd506ddfba30e5df364b455c3dc35",
          "body": "…8, PR A: transport) (#75)\n\n* feat(management): serve mutating API over a local IPC socket (waired#838)\n\nAdd a unix-domain socket (Linux/macOS) / named pipe (Windows) listener for\nthe Local Management API so mutating requests can move off the loopback TCP\nport onto a transport that browsers, DNS-reb\n[…]\n (1M context) <noreply@anthropic.com>\nSigned-off-by: gen16k <gen16k@gmail.com>\n\n---------\n\nSigned-off-by: gen16k <gen16k@gmail.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(management): local IPC socket for mutating API writes (waired#83…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-19T09:17:58Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d77596d6de33ea624a4619bd945de3cd90ab8614",
          "body": "… + hide empty Peers row (waired#808) (#74)\n\nSelecting a model in the tray was silent, and when a switch took the\nrestart-fallback path the tray flipped to the red \"agent not running\"\nstate for the ~25-35s supervised restart. waired#812 made the common\ncase an in-process swap (no restart), but the f\n[…]\nfflineModel, armSwitching, and peersRowVisible.\n\nRefs: waired#808\n\nSigned-off-by: gen16k <38280986+gen16k@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(tray): switch feedback + switching grace state + render StatusMsg…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-19T08:58:43Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "50d726868787fe119424b8352d8552e0cd4d6e86",
          "body": "…e routing; fix ollama version parse (#73)\n\n* feat(init): waired init owns the Ollama engine install; drop the installers' pre-install\n\nFixes the confusing double-Ollama first run on Windows and macOS: the\none-liner installers used to install Ollama BEFORE running `waired\ninit`, so init's DetectOlla\n[…]\ners.noreply.github.com>\nSigned-off-by: gen16k <38280986+gen16k@users.noreply.github.com>\nCo-authored-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(installer): re-land #55/#57/#58 onto main; waired init owns Claud…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-19T08:58:05Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b8758dbda40fd6c23ed18adbc3a501cb98fb8877",
          "body": "…y icons (waired#807) (#72)\n\nwaired-tray had no single-instance guard: the installer post-install\nlaunch, the Start-menu shortcut, and the next-logon HKCU Run autostart\ncould each register their own notification-area icon, leaving the user\nwith several identical Waired icons.\n\nAdd internal/platform/\n[…]\nlassify the new package as testnet-nonrelevant.\n\nRefs: waired#807\n\nSigned-off-by: gen16k <38280986+gen16k@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(tray): single-instance guard so repeated launches don't stack tra…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-19T08:57:46Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0686133ff6fc0ff35e093f4378e8c6124ee9a5c6",
          "body": "…(waired#836) (#66)\n\nThe Local Management API (127.0.0.1:9476) was guarded only by loopbackOnly,\nwhich checks the transport peer IP. That does not stop a web page the user\nvisits from reaching :9476 via DNS-rebinding (the browser's connection is\ngenuinely loopback; the attacker's hostname rides in H\n[…]\nts cross-user distribution design) is deferred to a follow-up.\n\nRefs waired-ai/waired#836\n\nSigned-off-by: gen16k <gen16k@gmail.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(management): harden loopback API against DNS-rebinding and CSRF …",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-19T07:35:51Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "04bd67348199af3abefd8fc4b5c4a36735dbbc6a",
          "body": "… -Clean (#65)\n\nollama-windows.ps1's Set-MachineVulkanFlag writes OLLAMA_VULKAN=1 and\nOLLAMA_IGPU_ENABLE=1 at Machine scope so Ollama uses the Vulkan/iGPU\nbackend. uninstall.ps1's Remove-Ollama cleared only OLLAMA_MODELS, so a\n-Clean uninstall left both flags at Machine scope forever, silently\nre-tu\n[…]\ndEnv), so uninstall.sh has\nnothing analogous to clear.\n\nFixes #45\n\nSigned-off-by: gen16k <38280986+gen16k@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(installer): clear OLLAMA_VULKAN / OLLAMA_IGPU_ENABLE on uninstall…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-19T05:44:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "1fcc2d8cb96f56065ea21731ad943797f705f1d4",
          "body": "…ent restart (waired#812) (#64)\n\n* feat(inference): apply preferred-model switch in process, no whole-agent restart (waired#812)\n\nSwitching the preferred model restarted the entire waired-agent to apply it\n(POST /inference/preferred-model -> SavePreference -> restart scheduler ->\nWindows os.Exit(1)/\n[…]\nb.com>\n\n---------\n\nSigned-off-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(inference): apply preferred-model switch in process, no whole-ag…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-16T18:18:43Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9927efcbe6a50653be364feabf0ca3196f6a97a0",
          "body": "…eader (waired#809) (#63)\n\n* refactor(tray): aggregate degraded cause into the top-level header (waired#809)\n\nFirst step of the menu restructure: when a connected menu is degraded, the\nsingle top-level status row now states the cause (\"⚠ Claude Code routing\ninactive\", \"⚠ Inference fell back recently\n[…]\nt-only, no behaviour change. Fixes the lint (gofmt) gate.\n\nSigned-off-by: gen16k <38280986+gen16k@users.noreply.github.com>\n\n---------\n\nSigned-off-by: gen16k <38280986+gen16k@users.noreply.github.com>",
          "is_bot": false,
          "headline": "refactor(tray): declutter the menu into submenus + aggregate status h…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-16T17:57:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ad87e14faa0b200f88bd8e4b56901f8789192e92",
          "body": "…ence-time 422 (#61) (#62)\n\n* fix(inference): serve over-spec models instead of a 422; round RAM (#61)\n\nThe RAM gate blocked `waired infer` at inference time on a 32 GB Windows\nbox: \"needs 32GB RAM, have 31GB\" (422 hardware_insufficient). Three\nproblems, fixed here:\n\n1. Wrong basis + not UMA-aware. \n[…]\nn over-spec pick\n  and `--yes` / `-y` skips it.\n\nRefs #61\n\nSigned-off-by: gen16k <38280986+gen16k@users.noreply.github.com>\n\n---------\n\nSigned-off-by: gen16k <38280986+gen16k@users.noreply.github.com>",
          "is_bot": false,
          "headline": "fix(inference): selection-time confirm for over-spec models; no infer…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-16T17:57:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4d320eaa9ef2ddc8079fd9dd11b663ea5524809a",
          "body": "…red#811) (#60)\n\nThe tray had no way to show that the local engine is actively serving —\nusers couldn't tell \"Waired is working right now\" (and got no hint why the\nfans spun up). The daemon already exports the signal\n(waired_inference_inflight -> ObservabilityState.Agent.Inflight) and the\ntray alrea\n[…]\nude Code through Waired, so exercising the engine here is risky;\nthe state machine is covered by unit tests instead.\n\nRefs: waired#811\n\nSigned-off-by: gen16k <38280986+gen16k@users.noreply.github.com>",
          "is_bot": false,
          "headline": "feat(tray): light the tray icon while local inference is running (wai…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-16T17:09:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "05383cc76ceb8946cd67108ae412477ebe1167a1",
          "body": "…waired#810) (#59)\n\nThe internal build-target name waired-tray leaked into every user-facing\nsurface even though the tray *is* Waired's UI. Unify the display name to\n\"Waired\" while keeping the binary/process name waired-tray(.exe) (the CLI\nowns waired.exe in the same dir) and every internal identifi\n[…]\nships a bare Mach-O with no .app/Info.plist, so it has no\ndisplay-name surface (About already says \"Waired\") -- N/A.\n\nRefs: waired#810\n\nSigned-off-by: gen16k <38280986+gen16k@users.noreply.github.com>",
          "is_bot": false,
          "headline": "fix(tray): surface the tray to users as \"Waired\", not \"waired-tray\" (…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-16T17:09:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "23c9118c51d966ff8a578932cbda3a0b9d5e590c",
          "body": "… browser on Enter (#56)\n\n* feat(init): gcloud-style sign-in gate — print the URL first, open the browser on Enter\n\nThe sign-in used to fling the browser open the moment the login URL\nexisted, with the URL printed only as an after-the-fact fallback — a\nfirst-run surprise (\"why did a browser just ope\n[…]\n.noreply.github.com>\n\n---------\n\nSigned-off-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(init): gcloud-style sign-in gate — print the URL first, open the…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-16T16:49:52Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5f06e94f84387b6d7c6bf2630756dde659049823",
          "body": "…ickEdit fix, uninstall visibility (#54)\n\nInstaller/uninstaller UX foundation across all three OSes, from user\nfeedback that the one-liners start doing privileged work instantly with\nno confirmation, unstructured output, and a Windows elevated window that\nis unusable (QuickEdit freeze) and vanishes \n[…]\n\npending a copy-review session.\n\nSigned-off-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(installer): pre-run confirmation, section rules, -InstallDir, Qu…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-16T16:08:23Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "93d7dd44777439eff8a703b39c40ad8e174b69e5",
          "body": "…t window in-session (#52) (#53)\n\n* feat(claude): opt-in /model route directives — switch backend + honest window in-session (#52)\n\nClaude Code resolves its context window from the model-id string alone,\nrefreshed only on a /model switch, and never reflects the /waired-route\nbackend in its UI. So on\n[…]\nm>\nSigned-off-by: gen16k <38280986+gen16k@users.noreply.github.com>\n\n---------\n\nSigned-off-by: gen16k <38280986+gen16k@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(claude): opt-in /model route directives — switch backend + hones…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-16T16:08:12Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "47c61865db35f9f988166f64051953c91933d1ca",
          "body": "…install (wipe, then reinstall) (#51)\n\n* feat(installer): install.sh --clean / WAIRED_CLEAN — full wipe, then fresh install\n\nDelegates the wipe to the published sibling uninstall.sh (--clean --yes,\nconsent collected up front via a /dev/tty prompt mirroring uninstall.sh's\nconfirm_clean; non-interacti\n[…]\n.noreply.github.com>\n\n---------\n\nSigned-off-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(installer): --clean / -Clean / WAIRED_CLEAN — one-command clean …",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-15T15:57:51Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ccfd06f59527a84a21ec2113e6e19ad99d46dbeb",
          "body": "… of hanging (waired#757) (#49)\n\nA Claude Code request routed to a mesh PEER had no time-to-first-byte bound: the\npeer inference client is Timeout:0 and the stream is governed only by Claude\nCode's own connection, and the auto fallback only fires on a pre-first-byte\n*error*. So a peer that passes th\n[…]\n#757\n\n\nClaude-Session: https://claude.ai/code/session_019wospVaanVy1kepgtRy4oE\n\nSigned-off-by: gen16k <38280986+gen16k@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(inference): reroute a Claude turn off a stalled mesh peer instead…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-15T15:18:55Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b4869979c1a252aaf8a915e52d7d418e98df6e81",
          "body": "…ng (waired#752) (#48)\n\n* fix(agent): route remaining sudo hints through per-OS elevation wording (waired#752)\n\nThree user-facing `sudo waired …` literals still reached Windows, where sudo is\nmeaningless. Two of the issue's cited sites were already fixed (#749 routed\ncmd/waired/main.go; #751 rewrote\n[…]\noE\nSigned-off-by: gen16k <38280986+gen16k@users.noreply.github.com>\n\n---------\n\nSigned-off-by: gen16k <38280986+gen16k@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(agent): route remaining sudo hints through per-OS elevation wordi…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-15T15:18:45Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "759488b67186c9c2159204657d66bbf3aeeaa85f",
          "body": "…s to a reference page (#47)\n\n* docs(readme): spell out edge-channel install and uninstall one-liners\n\nThe README's install section compressed the edge channel and uninstall\ninto one prose paragraph. Give each its own subsection with the exact\ncopy-pasteable commands, matching the docs-site install \n[…]\nb.com>\n\n---------\n\nSigned-off-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: README uninstall/edge one-liners + move advanced install option…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-15T11:42:45Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "88d83993611c78d4d39a84269b9c222d83865ac6",
          "body": "…del (waired#756) (#39)\n\n* fix(init): daemon-mediated init shows model progress + picks a fit model (waired#756)\n\nThe daemon-mediated `waired init` path (runInitViaDaemon, taken when a\nwaired-agent daemon is already up) returned right after login: it never\nshowed the model-download progress bar, and\n[…]\n-by: gen16k <38280986+gen16k@users.noreply.github.com>\n\n---------\n\nSigned-off-by: gen16k <38280986+gen16k@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(init): daemon-mediated init shows model progress + picks a fit mo…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-15T10:20:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f7f36fb5af9808768a5a9c6225d58960368aabbb",
          "body": "…load progress (waired#747) (#38)\n\ninstall.ps1 diverged from install.sh in three ways that left a plain\n`.\\install.ps1` with no inference engine and no feedback (observed on\nsv-evox2):\n\n- Install-OllamaIfRequested returned early when no Control Plane URL was\n  resolved, so a bare `.\\install.ps1` nev\n[…]\nSkipOllama /\nalready-installed paths.\n\nFixes waired-ai/waired#747\n\nSigned-off-by: gen16k <38280986+gen16k@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(installer): install.ps1 installs Ollama by default + streams down…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-15T10:18:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ccf097b3aba51d4ca6da5cfaa0b944826add4281",
          "body": "…(#34)\n\nOn a host with no usable IPv6 route every udp6 STUN send fails, and\nfirstObservedV6At never lands, so the observe loop stays pinned to the\n10s \"learning\" cadence. observeOne logged the send failure at Warn on\nevery attempt, and observeOnce sweeps two DiscoUDPPorts, so the log\nfilled with ~2 \n[…]\n-Session: https://claude.ai/code/session_019wospVaanVy1kepgtRy4oE\n\nSigned-off-by: gen16k <38280986+gen16k@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(disco): dedup the udp6 STUN send-failure WARN flood (waired#758) …",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-15T10:18:48Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5e9d5475b962429e1ca09f0a25c30b1f19cca687",
          "body": "…753) (#33)\n\nEach coding-agent adapter's Detect() set Found via DirExists(configDir),\nbut every Apply() MkdirAll's a child of (openclaw: equal to) that same\nconfigDir as force-apply pre-provisioning. So after one apply the dir\nalways exists and Detect self-poisons -- reporting the agent \"installed\"\n\n[…]\n-Session: https://claude.ai/code/session_019wospVaanVy1kepgtRy4oE\n\nSigned-off-by: gen16k <38280986+gen16k@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(integration): base agent detection on non-waired content (waired#…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-14T17:51:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9458821d101bdfc6f03fbe7346fd9c520a8798a6",
          "body": "…2) (#32)\n\n* fix(agent): close macOS launch-environment + service-posture parity gaps\n\nPost-#22 audit of the macOS surface found the earlier cross-OS parity\nsweep unified the static axes (build tags, euid gates, path resolution)\nbut not the process launch environment / OS-service posture — the axis\n\n[…]\nassert to the system/ LaunchDaemon domain.\n\nSigned-off-by: gen16k <gen16k@sv-macmini.local>\n\n---------\n\nSigned-off-by: gen16k <gen16k@sv-macmini.local>\nCo-authored-by: gen16k <gen16k@sv-macmini.local>",
          "is_bot": false,
          "headline": "fix: close remaining macOS OS-parity gaps (agent + installer, post-#2…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-14T17:51:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "45a7244e6b73631b38f71720ac0e007a9e4028a5",
          "body": "…ai/waired#799) (#31)\n\nThe cross-repo testnet release gate (testnet-require-green-remote.sh) failed a\ngenuinely-green testnet run for waired-agent#24 (agent 5e6821d). The dispatched\nmonorepo run's `testnet` job succeeded at 16:00:51 and the run finalized green\nat 16:00:52, but the gate's next poll a\n[…]\nhout dispatching.\n\nSigned-off-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: settle-grace re-check before the testnet gate hard-fails (waired-…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-14T17:05:30Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "325f757f221129328b2c72be13bb69ae75eb83d2",
          "body": "…n the right hive (waired#754) (#30)\n\nuninstall.ps1 -Clean left per-user artifacts behind and (post-UAC) deleted the\nWRONG user's tray autostart:\n  - Remove-Proxy shelled out to the REMOVED `waired proxy uninstall` (an\n    error-stub), so managed-settings.json + ~/.claude were never cleaned;\n  - it \n[…]\n-Session: https://claude.ai/code/session_019wospVaanVy1kepgtRy4oE\n\nSigned-off-by: gen16k <38280986+gen16k@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(uninstaller): uninstall.ps1 -Clean removes per-user integration i…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-14T17:02:06Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "417bf51bc9d66cc4194acd1c033ca02b3d3e4578",
          "body": "…ed launch) (waired#755) (#28)\n\ninstall.ps1 never created a Start Menu entry and never launched the tray, so\nthe tray's per-user autostart (HKCU\\...\\Run\\waired-tray, written on its first\nrun) never registered -- users had to know to launch waired-tray.exe by hand.\nThe .exe (Inno) installer already d\n[…]\n-Session: https://claude.ai/code/session_019wospVaanVy1kepgtRy4oE\n\nSigned-off-by: gen16k <38280986+gen16k@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(installer): install.ps1 surfaces the tray (Start Menu + de-elevat…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-14T16:36:49Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b22475269316a5cc0e78c10fd5f90bdc704a2c7b",
          "body": "…ettings (waired#750) (#27)\n\nThe Inno installer (waired-setup.iss) still shelled out to `waired proxy\ninstall --confirm-anthropic` and `waired proxy uninstall` — commands retired\nwhen the transparent MITM Claude proxy was replaced by managed settings. Both\nare now error-stubs (cmd/waired/root.go new\n[…]\n-Session: https://claude.ai/code/session_019wospVaanVy1kepgtRy4oE\n\nSigned-off-by: gen16k <38280986+gen16k@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(installer): converge Windows Inno installer onto Claude managed s…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-14T16:36:37Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "41b62b55c450f1b5b2c8e5e132e411e0f9a353d4",
          "body": "…I (#22) (#24)\n\n* fix(inference): surface ollama serve startup stderr in last_error + CI (#22)\n\nThe nightly installtest-inference macOS legs fail because the spawned\nollama engine exits status 1 during startup on the self-hosted runner,\nbut the real reason is invisible: the child's stdout+stderr is \n[…]\n-by: gen16k <38280986+gen16k@users.noreply.github.com>\n\n---------\n\nSigned-off-by: gen16k <38280986+gen16k@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(inference): surface ollama serve startup stderr in last_error + C…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-14T16:17:51Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a8a6ba2a34b09dcc1cc85c655d72a3dd4f56b722",
          "body": "The production control plane is live at https://app.waired.ai. Flip the\nclient's baked-in defaultControlURL from https://waired.net (the dev apex,\nwhich is not a deployed control plane) to https://app.waired.ai, so a bare\n`waired init` (or the installer's auto-init) with no --control /\n$WAIRED_CONTR\n[…]\nle from the\nunreachable-CP first-run hint.\n\nRefs: waired#656 / waired#308 / waired#570\n\nSigned-off-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: gen16k <gen16k@users.noreply.github.com>",
          "is_bot": false,
          "headline": "feat(#656): bake app.waired.ai as the default control URL (#26)",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-14T15:35:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "507824ba56eaece97de3712048c13b5891dd7491",
          "body": "…ir (waired#751) (#25)\n\nOn Windows an enrolled service install locks the whole %ProgramData%\\waired\nstate dir (identity.json included) to SYSTEM+Administrators via\nsecrets.SecureDir (service/service_windows.go), and on Windows even an elevated\n`waired status` first resolves the admin's empty %AppDat\n[…]\n-Session: https://claude.ai/code/session_019wospVaanVy1kepgtRy4oE\n\nSigned-off-by: gen16k <38280986+gen16k@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(agent): waired status/auth status fall back to the system state d…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-14T15:35:25Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a188bbcbc5cfb90aa73be52ce3fff6528b2743a1",
          "body": "… elevation hints (waired#749, waired#752) (#23)\n\nwaired#749 — on Windows an elevated `waired init` never auto-enabled the\nsystem-wide Claude Code managed settings. The eligibility gate keyed on\n`os.Geteuid()==0` (which is -1 on Windows) AND restricted goos to\nlinux/darwin, so enrollment finished wi\n[…]\n-Session: https://claude.ai/code/session_019wospVaanVy1kepgtRy4oE\n\nSigned-off-by: gen16k <38280986+gen16k@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(agent): elevated Windows init enables Claude routing + OS-correct…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-14T13:38:30Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "1964cd67a232d8705104a15fbcf599ff6d7304a0",
          "body": "…-np (waired#763) (#21)\n\n* inference: verify ollama tuning per-model + report the runner's real -np (waired#763)\n\nThe post-load tuning verify assumed OLLAMA_CONTEXT_LENGTH was server-global and\ninspected /api/ps.Models[0]. Right after a model swap — while the previous model\nwas still resident — it c\n[…]\nb.com>\n\n---------\n\nSigned-off-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "inference: verify ollama tuning per-model + report the runner's real …",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-14T13:38:18Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a14299a7e2a5d080c72fdf8d7e38340aa55473cc",
          "body": "…ifacts (#18)\n\nThe release page already carries the license notices as standalone assets and\nthe .deb ships them in-package (#666), but the Windows zip, macOS tarballs, and\nInno Setup installer did not include them in-archive — a user who only downloads\na binary archive got no offline notices.\n\n- Ma\n[…]\n the .iss green).\n\nSigned-off-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "build(#4): bundle LICENSE + THIRD_PARTY_LICENSES in Windows/macOS art…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-14T12:44:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d1a47ef3469eaaa602dc9bf278664519e5961e9e",
          "body": "…tics (waired#746, waired#748) (#20)\n\nwaired#746: a bare `--dev` (or any `--`-style token) invoked in-session\n(`& install.ps1 --dev` / iwr|iex) is a positional VALUE that bound to\nposition-0 `[string]$Control`, so enrolment ran `waired init --control --dev`\nand sign-in died at `https://--dev`. Set P\n[…]\n-Session: https://claude.ai/code/session_019wospVaanVy1kepgtRy4oE\n\nSigned-off-by: gen16k <38280986+gen16k@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(installer): harden install.ps1 arg parsing + elevated-run diagnos…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-14T12:33:37Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0e06cb55b307cf75a5e1129c019e4da769b73e6a",
          "body": "…es (#19)\n\nThe four client quality gates were retired from the monorepo at the #184\ncutover; installtest.yml + installtest-inference.yml were rebuilt in #17. This\nports the remaining three from the pre-cutover monorepo history (waired\nea96bd04^):\n\n- .github/workflows/codeui-multios.yml — 3-OS bundle\n[…]\n the PR's checks.\n\nSigned-off-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci(#1): re-home the codeui-multios / amsi-scan / routing-sentinel gat…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-14T12:33:24Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "eacc9e9fef8a65b690b54594f99d8e0cde075df5",
          "body": "…ly re-home) (#17)\n\n* fix(installtest): repair post-split bit-rot in the harness scripts\n\nThe installtest harness has not run since the #184 monorepo split, and\nthe -ldflags -X targets still pointed at the old module path\ngithub.com/gen16k/waired/internal/buildinfo — a silent no-op under the\ncurrent\n[…]\n.noreply.github.com>\n\n---------\n\nSigned-off-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: rebuild the 3-OS installtest as an always-on per-PR gate (+ night…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-13T19:01:50Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c2f4acc5eb13ec4279ee301268e2e3c2467b8b58",
          "body": "…) (#13)\n\n* inference: measure true decode rate in the boot benchmark (waired#764)\n\nThe boot benchmark computed completion_tokens / wall_clock over a\nsingle 200-token request, attributing ~1.4 s of fixed overhead (HTTP,\nscheduling, prefill, first-token latency) to decode. The bias is\ninversely propo\n[…]\noreply.github.com>\nCo-authored-by: gen16k <gen16k@users.noreply.github.com>\n\n---------\n\nSigned-off-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: gen16k <gen16k@users.noreply.github.com>",
          "is_bot": false,
          "headline": "inference: measure true decode rate in the boot benchmark (waired#764…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-13T18:54:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "554da2cd786c23139e07ee070271b114af8327ba",
          "body": "…wait, deferred routing consent (#16)\n\n* cli: name models, from→to pair, and catalog quality in benchmark output\n\nEvery benchmark/recommendation line now names the model it talks about,\nwith its catalog quality tier, so the user can judge the speed/quality\ntrade-off of a switch:\n\n- slow headline nam\n[…]\n.noreply.github.com>\n\n---------\n\nSigned-off-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "cli: benchmark/installer UX — name models+quality, foreground switch …",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-13T18:09:21Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "84e93b586c6700a861e20cb502499ccae6d23a86",
          "body": "… auto-compact pin (waired#771) (#11)\n\n* fix(claude): stop pinning CLAUDE_CODE_AUTO_COMPACT_WINDOW=200000 (waired#771)\n\nThe static backstop waired#623/#721 wrote into managed settings is Claude\nCode's highest-precedence auto-compact override (window = min(model window,\nenv value), frozen at process \n[…]\n.noreply.github.com>\n\n---------\n\nSigned-off-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "claude: follow the model's real context window — drop the static 200k…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-13T18:04:23Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "99e8b03a63062c89b30ddcb4692157ff2d8648c0",
          "body": "…#12)\n\nA parallel session working in this repo without a git worktree collided\nwith another concurrent session. The private monorepo's CLAUDE.md already\nmandates worktree-first branching and origin/main sync at session start;\nthis repo's CLAUDE.md had neither, nor most of the surrounding dev-process\n[…]\n(internal\nenvironment details).\n\nSigned-off-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: port session-start, worktree, and workflow rules to CLAUDE.md (…",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-13T17:37:38Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3b407749c5c89a2396eb50f8ea3b3d0b3b40cfe9",
          "body": "* ci: add testnet gate path lists, matcher, and classification guard\n\nGroundwork for the per-PR cross-repo testnet gate (#2): an agent-side\njudgement-based allowlist (testnet-relevant-paths.txt, headed by the\nshared proto/ module) with the same matcher + guard design as the\nmonorepo gate (waired#738\n[…]\n.noreply.github.com>\n\n---------\n\nSigned-off-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: gen16k <gen16k@users.noreply.github.com>\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci(#2): per-PR real-NAT testnet gate via cross-repo dispatch (#10)",
          "author_name": "gen16k",
          "author_login": "gen16k",
          "committed_at": "2026-07-13T17:17:54Z",
          "body_truncated": true,
          "is_coding_agent": true
        }
      ],
      "releases_count": 8,
      "commits_last_year": 110,
      "latest_release_at": "2026-07-25T18:38:48Z",
      "latest_release_tag": "v0.0.2-rc6",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 3,
      "days_since_latest_release": 0,
      "mean_days_between_releases": 2
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": false,
      "has_contributing": true,
      "health_percentage": 50,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/waired-ai/waired-agent",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/waired-ai/waired-agent",
          "is_deprecated": false,
          "latest_version": "v0.0.2-rc6",
          "repository_url": "https://github.com/waired-ai/waired-agent",
          "versions_count": 7,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-25T15:18:56Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 0
        },
        {
          "name": "github.com/waired-ai/waired-agent/proto",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/waired-ai/waired-agent/proto",
          "is_deprecated": false,
          "latest_version": "v0.2.4",
          "repository_url": "https://github.com/waired-ai/waired-agent",
          "versions_count": 6,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-23T16:29:34Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 2
        },
        {
          "name": "docs-site",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": null,
          "registry_url": "https://www.npmjs.com/package/docs-site",
          "is_deprecated": false,
          "latest_version": "0.0.1",
          "repository_url": null,
          "versions_count": 2,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 56,
          "first_published_at": "2025-05-21T08:06:30.630000Z",
          "latest_published_at": "2025-05-22T06:26:13.866000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 430
        }
      ]
    },
    "popularity": {
      "forks": 1,
      "stars": 0,
      "watchers": 0,
      "fork_history": {
        "days": [
          {
            "date": "2026-07-23",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 1,
        "total_forks": 1
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 40
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "docs-site/tsconfig.json"
      ],
      "toolchain_manifests": [
        "go.mod",
        "proto/go.mod"
      ],
      "largest_source_bytes": 116769,
      "source_files_sampled": 938,
      "oversized_source_files": 6,
      "agent_instruction_files": [
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 11573
    },
    "dependencies": {
      "manifests": [
        "docs-site/package.json",
        "go.mod",
        "proto/go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [
          {
            "name": "brace-expansion",
            "direct": false,
            "version": "1.1.16",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-mh99-v99m-4gvg"
            ],
            "fixed_version": "5.0.8",
            "advisory_count": 1,
            "oldest_advisory_days": 1
          },
          {
            "name": "serialize-javascript",
            "direct": false,
            "version": "6.0.2",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 8.1,
            "advisory_ids": [
              "GHSA-5c6j-r48x-rmvq",
              "GHSA-qj8w-gfj5-8c6v"
            ],
            "fixed_version": "7.0.5",
            "advisory_count": 2,
            "oldest_advisory_days": 148
          },
          {
            "name": "uuid",
            "direct": false,
            "version": "8.3.2",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-w5hq-g745-h8pq"
            ],
            "fixed_version": "13.0.1",
            "advisory_count": 1,
            "oldest_advisory_days": 94
          },
          {
            "name": "webpack-dev-server",
            "direct": false,
            "version": "4.15.2",
            "severity": "moderate",
            "ecosystem": "npm",
            "cvss_score": 6.5,
            "advisory_ids": [
              "GHSA-4v9v-hfq4-rm2v",
              "GHSA-79cf-xcqc-c78w",
              "GHSA-9jgg-88mc-972h",
              "GHSA-f5vj-f2hx-8m93",
              "GHSA-m28w-2pqf-7qgj",
              "GHSA-mx8g-39q3-5c79"
            ],
            "fixed_version": "5.2.6",
            "advisory_count": 6,
            "oldest_advisory_days": 416
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "high": 3,
          "moderate": 1
        },
        "advisory_count": 10,
        "affected_count": 4,
        "assessed_count": 1156,
        "malicious_count": 0,
        "assessed_package": "npm:docs-site@0.0.1",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go",
        "npm"
      ],
      "dependencies": [
        {
          "name": "@astrojs/starlight",
          "manifest": "docs-site/package.json",
          "ecosystem": "npm",
          "version_constraint": "^0.41.3"
        },
        {
          "name": "astro",
          "manifest": "docs-site/package.json",
          "ecosystem": "npm",
          "version_constraint": "^7.0.6"
        },
        {
          "name": "sharp",
          "manifest": "docs-site/package.json",
          "ecosystem": "npm",
          "version_constraint": "^0.35.0"
        },
        {
          "name": "cloud.google.com/go/compute/metadata",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.9.0"
        },
        {
          "name": "cloud.google.com/go/logging",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.18.0"
        },
        {
          "name": "fyne.io/systray",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.12.2"
        },
        {
          "name": "github.com/Microsoft/go-winio",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.6.2"
        },
        {
          "name": "github.com/coder/websocket",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.8.15"
        },
        {
          "name": "github.com/godbus/dbus/v5",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v5.2.2"
        },
        {
          "name": "github.com/klauspost/compress",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.19.0"
        },
        {
          "name": "github.com/prometheus/client_golang",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.23.2"
        },
        {
          "name": "github.com/prometheus/client_model",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.6.2"
        },
        {
          "name": "github.com/spf13/cobra",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.2"
        },
        {
          "name": "github.com/tailscale/hujson",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20260302212456-ecc657c15afd"
        },
        {
          "name": "golang.org/x/crypto",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.54.0"
        },
        {
          "name": "golang.org/x/sys",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.47.0"
        },
        {
          "name": "golang.org/x/term",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.45.0"
        },
        {
          "name": "golang.zx2c4.com/wireguard",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20260522210424-ecfc5a8d5446"
        },
        {
          "name": "github.com/waired-ai/waired-agent/proto",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-00010101000000-000000000000"
        },
        {
          "name": "golang.org/x/crypto",
          "manifest": "proto/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.54.0"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "cloud.google.com/go/compute/metadata",
            "direct": true,
            "version": "v0.9.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/logging",
            "direct": true,
            "version": "v1.18.0",
            "ecosystem": "go"
          },
          {
            "name": "fyne.io/systray",
            "direct": true,
            "version": "v1.12.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/coder/websocket",
            "direct": true,
            "version": "v1.8.15",
            "ecosystem": "go"
          },
          {
            "name": "github.com/godbus/dbus/v5",
            "direct": true,
            "version": "v5.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/compress",
            "direct": true,
            "version": "v1.19.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/microsoft/go-winio",
            "direct": true,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_golang",
            "direct": true,
            "version": "v1.23.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_model",
            "direct": true,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cobra",
            "direct": true,
            "version": "v1.10.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tailscale/hujson",
            "direct": true,
            "version": "v0.0.0-20260302212456-ecc657c15afd",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": true,
            "version": "v0.54.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": true,
            "version": "v0.47.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/term",
            "direct": true,
            "version": "v0.45.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.zx2c4.com/wireguard",
            "direct": true,
            "version": "v0.0.0-20260522210424-ecfc5a8d5446",
            "ecosystem": "go"
          },
          {
            "name": "@astrojs/starlight",
            "direct": true,
            "version": "^0.41.3",
            "ecosystem": "npm"
          },
          {
            "name": "astro",
            "direct": true,
            "version": "^7.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "sharp",
            "direct": true,
            "version": "^0.35.0",
            "ecosystem": "npm"
          },
          {
            "name": "cloud.google.com/go",
            "direct": false,
            "version": "v0.123.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/auth",
            "direct": false,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/auth/oauth2adapt",
            "direct": false,
            "version": "v0.2.8",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/longrunning",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/beorn7/perks",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/xxhash/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davecgh/go-spew",
            "direct": false,
            "version": "v1.1.2-0.20180830191138-d8f796af33cc",
            "ecosystem": "go"
          },
          {
            "name": "github.com/felixge/httpsnoop",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/logr",
            "direct": false,
            "version": "v1.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/stdr",
            "direct": false,
            "version": "v1.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/btree",
            "direct": false,
            "version": "v1.1.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/s2a-go",
            "direct": false,
            "version": "v0.1.9",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googleapis/enterprise-certificate-proxy",
            "direct": false,
            "version": "v0.3.17",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googleapis/gax-go/v2",
            "direct": false,
            "version": "v2.22.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/inconshreveable/mousetrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/munnerz/goautoneg",
            "direct": false,
            "version": "v0.0.0-20191010083416-a7dc8b61c822",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pmezard/go-difflib",
            "direct": false,
            "version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/common",
            "direct": false,
            "version": "v0.69.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/procfs",
            "direct": false,
            "version": "v0.21.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/pflag",
            "direct": false,
            "version": "v1.0.10",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/auto/sdk",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc",
            "direct": false,
            "version": "v0.69.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
            "direct": false,
            "version": "v0.69.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/metric",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/trace",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.56.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/oauth2",
            "direct": false,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": false,
            "version": "v0.22.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.40.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/time",
            "direct": false,
            "version": "v0.15.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.zx2c4.com/wintun",
            "direct": false,
            "version": "v0.0.0-20230126152724-0fa3db229ce2",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/api",
            "direct": false,
            "version": "v0.287.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto",
            "direct": false,
            "version": "v0.0.0-20260630182238-925bb5da69e7",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/api",
            "direct": false,
            "version": "v0.0.0-20260630182238-925bb5da69e7",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/rpc",
            "direct": false,
            "version": "v0.0.0-20260630182238-925bb5da69e7",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "v1.82.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": false,
            "version": "v1.36.11",
            "ecosystem": "go"
          },
          {
            "name": "gvisor.dev/gvisor",
            "direct": false,
            "version": "v0.0.0-20250503011706-39ed1f5ac29c",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 57,
        "direct_count": 18,
        "indirect_count": 39
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 2,
        "merged_prs": 110,
        "open_issues": 38,
        "closed_ratio": 0.387,
        "closed_issues": 24,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "gen16k",
          "commits": 110,
          "avatar_url": "https://avatars.githubusercontent.com/u/38280986?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "amsi-scan.yml",
        "catalog-radar.yml",
        "ci.yml",
        "claude-code-canary.yml",
        "codeui-multios.yml",
        "deploy-docs.yml",
        "docs-guard.yml",
        "edge.yml",
        "installtest-inference.yml",
        "installtest.yml",
        "proto-guard.yml",
        "proto-tag.yml",
        "release.yml",
        "renovate-review.yml",
        "renovate.yml",
        "reusable-build-artifacts.yml",
        "routing-sentinel.yml",
        "testnet-nightly.yml",
        "testnet-pr.yml",
        "tray-darwin.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".golangci.yml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum",
        "package-lock.json"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 9,
            "reason": "binaries present in source code",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 3,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 5,
            "reason": "5 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "48ce3ae6f351be8e5c5493e1547cd6ce47b33be4",
        "ran_at": "2026-07-26T09:49:08Z",
        "aggregate_score": 4,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-25T20:30:11Z",
      "oldest_open_prs": [
        {
          "number": 128,
          "created_at": "2026-07-23T09:45:26Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 173,
          "created_at": "2026-07-25T18:22:59Z",
          "last_comment_at": "2026-07-25T18:24:14Z",
          "last_comment_author": "github-actions"
        }
      ],
      "last_merged_pr_at": "2026-07-25T15:18:57Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 3,
          "created_at": "2026-07-11T13:30:24Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 5,
          "created_at": "2026-07-11T15:56:30Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 6,
          "created_at": "2026-07-13T02:43:32Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 29,
          "created_at": "2026-07-14T16:19:58Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 35,
          "created_at": "2026-07-14T17:48:39Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 36,
          "created_at": "2026-07-14T17:48:41Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 37,
          "created_at": "2026-07-14T17:48:42Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 41,
          "created_at": "2026-07-15T10:51:24Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 42,
          "created_at": "2026-07-15T10:51:26Z",
          "last_comment_at": "2026-07-25T09:36:07Z",
          "last_comment_author": "gen16k"
        },
        {
          "number": 43,
          "created_at": "2026-07-15T10:51:28Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 44,
          "created_at": "2026-07-15T10:51:37Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 46,
          "created_at": "2026-07-15T10:51:40Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 50,
          "created_at": "2026-07-15T13:25:35Z",
          "last_comment_at": "2026-07-15T13:34:10Z",
          "last_comment_author": "koooo0413"
        },
        {
          "number": 61,
          "created_at": "2026-07-16T17:14:44Z",
          "last_comment_at": "2026-07-16T17:36:19Z",
          "last_comment_author": "gen16k"
        },
        {
          "number": 67,
          "created_at": "2026-07-19T08:14:51Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 69,
          "created_at": "2026-07-19T08:14:54Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 70,
          "created_at": "2026-07-19T08:15:07Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 71,
          "created_at": "2026-07-19T08:15:18Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 87,
          "created_at": "2026-07-19T10:11:11Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 90,
          "created_at": "2026-07-19T10:27:39Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/waired-ai/waired-agent",
    "host": "github.com",
    "name": "waired-agent",
    "owner": "waired-ai"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 54,
      "inputs": {
        "security": 45,
        "vitality": 70,
        "community": 32,
        "governance": 46,
        "engineering": 72
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 70,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 56,
            "inputs": {
              "commits_last_year": 110,
              "human_commit_share": 1,
              "days_since_last_push": 0,
              "active_weeks_last_year": 3
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "3/52 weeks with commits",
                "points": 2.1,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 3
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "110 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 110
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 8,
              "latest_release_tag": "v0.0.2-rc6",
              "releases_from_tags": false,
              "days_since_latest_release": 0,
              "mean_days_between_releases": 2
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "8 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~2 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 2
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 32,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 1,
              "stars": 0,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "1 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "good",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "critical",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 29,
            "inputs": {
              "packages": [
                "github.com/waired-ai/waired-agent",
                "github.com/waired-ai/waired-agent/proto",
                "docs-site"
              ],
              "dependents": null,
              "ecosystems": "go, npm",
              "total_downloads": null,
              "monthly_downloads": 56
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "56 downloads/month across go, npm",
                "points": 23.4,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 56,
                      "ecosystems": "go, npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "at_risk",
        "name": "Sustainability & Governance",
        "value": 46,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "moderate",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 56,
            "inputs": {
              "merged_prs": 110,
              "open_issues": 38,
              "closed_issues": 24,
              "issue_closed_ratio": 0.387,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "39% of issues closed",
                "points": 18.1,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 39
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "110/110 decided PRs merged",
                "points": 38.2,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 110,
                      "decided": 110
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 34,
            "inputs": {
              "followers": 0,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "waired-ai",
              "public_repos": 2,
              "account_age_days": 20
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "0 followers of waired-ai",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 0,
                      "login": "waired-ai"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "2 public repos, account ~0 yr old",
                "points": 3.6,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 2
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 0
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/waired-ai/waired-agent",
                "github.com/waired-ai/waired-agent/proto",
                "docs-site"
              ],
              "ecosystems": "go, npm",
              "any_deprecated": false,
              "min_days_since_publish": 0
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "3 package(s) on go, npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 3,
                      "ecosystems": "go, npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 0 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "7 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 7
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 72,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "20 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 20
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 55,
            "inputs": {
              "topics": [],
              "has_wiki": false,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 45,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 40,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 4
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "binaries present in source code",
                "points": 6.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "5 existing vulnerabilities detected",
                "points": 3.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "moderate",
            "name": "Dependency advisories",
            "note": "Matched the npm:docs-site@0.0.1 runtime dependency closure — what installing the published package pulls in — 1156 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "npm:docs-site@0.0.1",
                  "assessed": 1156
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 66,
            "inputs": {
              "source": "osv",
              "advisories": 10,
              "affected_packages": 4,
              "assessed_packages": 1156,
              "unassessed_packages": 0,
              "affected_by_severity": "high 3, moderate 1",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "4 affected: brace-expansion 1.1.16 (high 7.5), serialize-javascript 6.0.2 (high 8.1), uuid 8.3.2 (high 7.5), +1 more",
                "points": 5.7,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 4,
                      "packages": "brace-expansion 1.1.16 (high 7.5), serialize-javascript 6.0.2 (high 8.1), uuid 8.3.2 (high 7.5)"
                    }
                  },
                  {
                    "code": "advisories_affected_more",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "3 advisory-carrying package(s) unaddressed past 90 days; oldest published 416 days ago",
                "points": 25.8,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_stale",
                    "params": {
                      "days": 90,
                      "count": 3,
                      "oldest": 416
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 1156,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "excellent",
        "name": "AI Readiness",
        "value": 86,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 11573
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "100 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 100,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 82,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum",
                "package-lock.json"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [
                "docs-site/tsconfig.json"
              ],
              "agent_commit_share": 0.68,
              "toolchain_manifests": [
                "go.mod",
                "proto/go.mod"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "docs-site/tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "docs-site/tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "68 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 68,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 116769,
              "source_files_sampled": 938,
              "oversized_source_files": 6
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "6/938 source files over 60KB",
                "points": 54.6,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 938,
                      "oversized": 6
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [],
  "report_type": "repository",
  "generated_at": "2026-07-26T09:49:24.558745Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/w/waired-ai/waired-agent.svg",
  "full_name": "waired-ai/waired-agent",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}