[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill-trail-of-bits-c-review":3,"mdc--uw8h9y-key":38,"related-org-trail-of-bits-c-review":7700,"related-repo-trail-of-bits-c-review":7846},{"slug":4,"name":4,"fn":5,"description":6,"org":7,"tags":12,"stars":26,"repoUrl":27,"updatedAt":28,"license":29,"forks":30,"topics":31,"repo":33,"sourceUrl":36,"mdContent":37},"c-review","audit C and C++ code","Performs comprehensive C\u002FC++ security review for memory corruption, integer overflows, race conditions, and platform-specific vulnerabilities. Use when auditing native C\u002FC++ applications, reviewing daemons or services for memory safety, or hunting integer overflow \u002F use-after-free \u002F race conditions in userspace code.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},"trail-of-bits","Trail of Bits","https:\u002F\u002Fpexgzepcugksgbtrxkhf.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Forg-logos\u002Ftrail-of-bits.png","trailofbits",[13,17,20,23],{"name":14,"slug":15,"type":16},"Security","security","tag",{"name":18,"slug":19,"type":16},"Audit","audit",{"name":21,"slug":22,"type":16},"C#","c",{"name":24,"slug":25,"type":16},"Code Analysis","code-analysis",6139,"https:\u002F\u002Fgithub.com\u002Ftrailofbits\u002Fskills","2026-07-17T06:05:11.333374",null,541,[32],"agent-skills",{"repoUrl":27,"stars":26,"forks":30,"topics":34,"description":35},[32],"Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows","https:\u002F\u002Fgithub.com\u002Ftrailofbits\u002Fskills\u002Ftree\u002FHEAD\u002Fplugins\u002Fc-review\u002Fskills\u002Fc-review","---\nname: c-review\ndescription: Performs comprehensive C\u002FC++ security review for memory corruption, integer overflows, race conditions, and platform-specific vulnerabilities. Use when auditing native C\u002FC++ applications, reviewing daemons or services for memory safety, or hunting integer overflow \u002F use-after-free \u002F race conditions in userspace code.\nallowed-tools: Agent AskUserQuestion SendMessage TaskCreate TaskUpdate TaskList Read Write Bash\n---\n\n# C\u002FC++ Security Review\n\nRuns in the main conversation (invoke via `\u002Fc-review:c-review`). Orchestrator owns the `Task*` ledger as bookkeeping for retries; workers and judges have no Task tools. Workers and judges are named plugin subagents (`c-review:c-review-worker`, `c-review:c-review-dedup-judge`, `c-review:c-review-fp-judge`); tool sets are declared in `plugins\u002Fc-review\u002Fagents\u002F*.md`. Findings are exchanged via markdown-with-YAML files in a shared output directory.\n\n## When to Use\n\nNative C\u002FC++ application security review: memory safety, integer overflow, races, type confusion, Linux\u002FmacOS daemons, Windows userspace services.\n\n## When NOT to Use\n\n- Kernel drivers\u002Fmodules (Linux, Windows, macOS).\n- Managed languages (Java, C#, Python, Go, Rust).\n- Embedded\u002Fbare-metal code without libc.\n\n## Subagents\n\n| Subagent type | Purpose | Tool set |\n|---|---|---|\n| `c-review:c-review-worker` | Run assigned cluster, write findings | Read, Write, Edit, Bash |\n| `c-review:c-review-dedup-judge` | Merge duplicates (runs **first**) | Read, Write, Edit, Glob |\n| `c-review:c-review-fp-judge` | FP + severity + final reports (runs **second**) | Read, Write, Edit, Bash |\n\nTools come from each agent's frontmatter at spawn time. The orchestrator's `Task*`\u002F`Agent`\u002F`Bash`\u002Fetc. come from this skill's `allowed-tools`. **Search-tool \u002F `Bash` interaction:** in current Claude Code, an agent granted `Bash` is **not** also granted the dedicated `Glob` **or `Grep`** tools (the calls return `No such tool available`; the harness expects `find`\u002F`grep`\u002F`rg` via `Bash` instead). So only the dedup-judge — the one agent that holds **no** `Bash` — uses `Glob`; the worker, fp-judge, and the orchestrator resolve and search paths with `Read` \u002F `Bash` `find` \u002F `rg` \u002F `grep` \u002F `test -f` instead. Because the cluster\u002Ffinder prompt seeds are written in ripgrep regex syntax (`\\s`, `\\d`, `\\b`), `Bash`-holding agents must run them with **`rg`** — a plain `grep -E` may silently mishandle `\\s` and return a false-empty (a bad `cleared`). If `rg` is not installed its call fails *loudly* (`command not found`) — fall back to `grep -E` with POSIX classes (`\\s`→`[[:space:]]`, drop `\\b`), never a raw-`\\s` `grep`. Do **not** reintroduce `Glob`\u002F`Grep` into a `Bash`-holding agent's protocol.\n\n---\n\n## Architecture\n\n```\ncoordinator: write context.md → build_run_plan.py → TaskCreate × M\n          → spawn primer (foreground) → spawn M workers (parallel)\n          → classify Phase-7 outcomes + write findings-index.txt\n          → dedup-judge → fp-judge → report safety net (SARIF + REPORT.md) → return REPORT.md\n```\n\nOutput directory contains: `context.md`, `plan.json`, `worker-prompts\u002F`, `findings\u002F`, `findings-index.d\u002F` (per-worker shards), `findings-index.txt`, `coverage\u002F` (per-worker coverage-gate files), `run-summary.md`, `dedup-summary.md`, `fp-summary.md`, `REPORT.md`, `REPORT.sarif`.\n\n**Path convention:** every later phase shells out to `${C_REVIEW_PLUGIN_ROOT}\u002Fscripts\u002F*.py`, so resolve that variable first to the plugin directory that contains `prompts\u002Fclusters\u002Fbuffer-write-sinks.md` (and `scripts\u002Fbuild_run_plan.py`). Try in order, first hit wins:\n\n1. **Native Claude Code** — `${CLAUDE_PLUGIN_ROOT}`, accepted if `Bash: ls \"${CLAUDE_PLUGIN_ROOT}\u002Fprompts\u002Fclusters\u002Fbuffer-write-sinks.md\"` resolves.\n2. **Codex** — `${CODEX_PLUGIN_ROOT}` (set it the same way if that var is present and resolves the marker).\n3. **Fallback search** — covers Codex installs under `~\u002F.codex`, Claude installs under `~\u002F.claude`, and a local checkout \u002F repo run: `Bash: find ~\u002F.claude ~\u002F.codex . -path '*\u002Fplugins\u002Fc-review\u002Fprompts\u002Fclusters\u002Fbuffer-write-sinks.md' -print -quit 2>\u002Fdev\u002Fnull`. Take the match and strip the trailing `\u002Fprompts\u002Fclusters\u002Fbuffer-write-sinks.md` to get the root (the home dirs are searched before `.` so an installed copy wins over any vendored copy in the audited repo).\n\nSet `C_REVIEW_PLUGIN_ROOT` to the resolved root. If all three fail, **abort** with a message naming the roots searched — do not enter Phase 4 with an empty variable (every `python3 \"${C_REVIEW_PLUGIN_ROOT}\u002Fscripts\u002F...\"` call would fail with a confusing path error).\n\n**Scope convention:** keep two scopes separate throughout the run:\n\n- `finding_scope_root` — the user-requested audit subtree. Workers may only file findings whose vulnerable location is inside this subtree.\n- `context_roots` — read-only repo roots\u002Ffiles workers and judges may inspect to verify reachability, callers, wrappers, build flags, mitigations, and threat-model details. Default to `.` unless the user explicitly forbids broader context. Reading context outside `finding_scope_root` is allowed; filing findings there is not.\n\n---\n\n## Rationalizations to Reject\n\n- **\"Background spawns parallelize the workers.\"** They do not — `Agent` calls in a single assistant message already run concurrently. `run_in_background=true` defeats the Phase 6a primer cache, so every worker pays full cache-creation (`cache_read_input_tokens=0`) and the ~15 K-token primer is wasted M times. This is the single most common defect — multiple recent runs spawned 7-of-8 (or all) workers with `bg=true`. Default: omit `run_in_background` from worker spawns.\n- **\"I'll re-derive the cluster list \u002F paths \u002F pass prefixes inline instead of running `build_run_plan.py`.\"** The script is the only authority for selection and rendering. Paraphrasing it drops fields that the worker self-check requires, producing `worker-N abort: spawn prompt malformed`. Always run the script and `Read plan.json`.\n- **\"The run partially succeeded — I'll just write `REPORT.md` from what completed.\"** Hiding partial runs behind a successful report is a correctness bug. If any Phase-5 cluster task is not `completed`, surface it prominently in `run-summary.md` and the final response.\n- **\"Zero findings — skip Phase 8.\"** Always run both judges and Phase 8b: dedup-judge writes a minimal no-op `dedup-summary.md` on an empty index, fp-judge writes empty `REPORT.md`\u002F`REPORT.sarif`, and Phase 8b's SARIF generator emits `results: []` for the empty case. SARIF consumers depend on a stable artifact set.\n- **\"`Bash: ls README*` is fine for the preflight.\"** Under zsh, an unmatched glob aborts the whole compound command before `2>\u002Fdev\u002Fnull` runs. Use `find` (never fails on no-match) — and not `Glob`, which is unavailable to an agent that also holds `Bash`.\n\n---\n\n## Orchestration Workflow\n\nRun these phases **in the main conversation**.\n\n### Phase 0: Parameter Collection\n\n**Entry:** skill invoked. **Exit:** `threat_model`, `worker_model`, `severity_filter` resolved; `scope_subpath` resolved or set to `\".\"`; `finding_scope_root=scope_subpath`; `context_roots` resolved.\n\nThe skill is invoked directly (no command wrapper). Parse any free-text arguments the user passed on the `\u002Fc-review:c-review` line (e.g. `flamenco only`, `high severity only`, `use haiku`) and pre-fill the answers they imply — then ask for any missing required parameters with **one** `AskUserQuestion` call. Never silently default the required parameters.\n\nRequired parameters:\n\n| Parameter | Values | How to infer from args |\n|---|---|---|\n| `threat_model` | `REMOTE` \u002F `LOCAL_UNPRIVILEGED` \u002F `BOTH` | Words like \"remote\", \"network\", \"attacker\" → `REMOTE`; \"local\", \"unprivileged\" → `LOCAL_UNPRIVILEGED`; otherwise ask. |\n| `worker_model` | `haiku` \u002F `sonnet` \u002F `opus` | Explicit model name in args. Otherwise ask (no silent default). |\n| `severity_filter` | `all` \u002F `medium` \u002F `high` | \"all\", \"every\", \"noisy\" → `all`; \"medium and above\" → `medium`; \"high only\", \"criticals only\" → `high`. Otherwise ask — **no silent default**. |\n| `scope_subpath` | repo-relative directory (optional) | Phrases like \"X only\", \"just audit X\u002F\", \"review subdirectory X\" → `src\u002FX\u002F` or the matching subdir. Apply fuzzy matching against top-level subdirectories of the repo. If absent, set `\".\"`; if ambiguous, ask. |\n\nCall `AskUserQuestion` exactly once with only unresolved required parameters (`threat_model`, `worker_model`, `severity_filter`) plus `scope_subpath` only when the user explicitly requested a narrowed scope but it is ambiguous. If the required parameters were all pre-filled and scope is absent or resolved, skip the question.\n\nAfter resolving `scope_subpath`, set `finding_scope_root=\"${scope_subpath:-.}\"`. Set `context_roots=\".\"` by default so workers can verify callers\u002Fbuild settings outside a narrowed subtree without filing out-of-scope findings. If the user explicitly asks to forbid broader context, set `context_roots=\"${finding_scope_root}\"` and note that reachability confidence may be lower.\n\n### Phase 1: Prerequisites\n\n**Entry:** Phase 0 complete. **Exit:** `is_cpp`, `is_posix`, `is_windows` flags determined.\n\nProbe within `${finding_scope_root:-.}` with the `Bash` commands below (non-empty output ⇒ flag true). The dedicated `Grep`\u002F`Glob` tools are unavailable to this orchestrator because it holds `Bash` — use `grep`\u002F`rg`\u002F`find` via `Bash`. (If a probe regex uses `\\s`\u002F`\\b` and your `grep` lacks GNU `\\s` support, run it with `rg -uu` — which honors `\\s` and still searches ignored files — or replace `\\s`→`[[:space:]]` and drop `\\b`. Widening is safe: a false-positive flag only adds a harmless worker, a missed match would skip a pass.):\n\n```bash\n# is_cpp\nfind \"${finding_scope_root:-.}\" -type f \\( -name '*.cpp' -o -name '*.cxx' -o -name '*.cc' -o -name '*.hpp' -o -name '*.hh' \\) -print -quit\n# is_posix\ngrep -rlE '#include[[:space:]]*\u003C(pthread|signal|sys\u002F(socket|stat|types|wait)|unistd|errno)\\.h>' \\\n  --include='*.c' --include='*.h' \\\n  --include='*.cpp' --include='*.cxx' --include='*.cc' --include='*.hpp' --include='*.hh' \\\n  \"${finding_scope_root:-.}\" | head -1\n# is_windows\ngrep -rlE '#include[[:space:]]*\u003C(windows|winbase|winnt|winuser|winsock|ntdef|ntstatus)\\.h>' \\\n  --include='*.c' --include='*.h' \\\n  --include='*.cpp' --include='*.cxx' --include='*.cc' --include='*.hpp' --include='*.hh' \\\n  \"${finding_scope_root:-.}\" | head -1\n```\n\n`compile_commands.json` is informational (no agent currently uses LSP), but the probe is mandatory so the run summary records whether richer local tooling is available. Probe via `Glob: **\u002Fcompile_commands.json` under `${context_roots}`. If `Glob` is unavailable, use:\n\n```bash\nprintf '%s\\n' \"${context_roots:-.}\" | tr ',' '\\n' | while IFS= read -r root; do\n  [ -n \"$root\" ] && find \"$root\" -name compile_commands.json -print -quit\ndone | head -1\n# `find \"$root\"` is quoted intentionally so a context root containing spaces\n# (e.g. \"\u002FUsers\u002Fme\u002FMy Repo\") survives word-splitting. Do not unquote it.\n```\n\nIf absent, suggest CMake `-DCMAKE_EXPORT_COMPILE_COMMANDS=ON`\u002FBear\u002Fcompiledb to the user but continue.\n\n### Phase 2: Output Directory\n\n**Entry:** Phase 1 flags set. **Exit:** absolute `output_dir` resolved; `${output_dir}\u002Ffindings\u002F` and `${output_dir}\u002Fcoverage\u002F` exist.\n\nResolve an absolute path for `output_dir` (default: `$(pwd)\u002F.c-review-results\u002F$(date -u +%Y%m%dT%H%M%SZ)\u002F`):\n\n```bash\nmkdir -p \"${output_dir}\u002Ffindings\" \"${output_dir}\u002Fcoverage\"\n```\n\nThe `coverage\u002F` subdirectory holds per-worker coverage-gate audit files (`coverage\u002Fworker-{N}.md`). Workers write to it instead of embedding the table in their reply — see `agents\u002Fc-review-worker.md` step 5.\n\n### Phase 3: Codebase Context\n\n**Entry:** `${output_dir}` exists. **Exit:** `${output_dir}\u002Fcontext.md` written.\n\nSkim `README.{md,rst,txt}` and any build file (`Makefile`, `CMakeLists.txt`, `meson.build`, `configure.ac`) — preflight with `find` (via `Bash`) before any `Read` (a `Read` on a missing file aborts the turn; `Glob` is unavailable to this orchestrator because it holds `Bash`). Do **not** use `Bash: ls README*` for the preflight: under zsh, an unmatched glob aborts the whole compound command before `2>\u002Fdev\u002Fnull` runs (observed: a Phase-3 `ls src\u002FX\u002FREADME*` call failed with `no matches found` and dropped the entire preflight). Use `find . -maxdepth 2 -name 'README*' -o -name 'Makefile' -o -name 'CMakeLists.txt' -o -name 'meson.build'`, which never fails on no-match.\n\nWrite `${output_dir}\u002Fcontext.md` with: YAML frontmatter (`threat_model`, `severity_filter`, `scope_subpath`, `finding_scope_root`, `context_roots`, `is_cpp`, `is_posix`, `is_windows`, `output_dir`, `compile_commands` as `present`\u002F`absent` plus path when present), then a short markdown body with five sections — **Purpose** (1-3 sentences), **Scope** (what's in `finding_scope_root`, and that findings outside it are out of scope), **Entry points** (where untrusted data enters: network, files, CLI, IPC), **Trust boundaries** (sandboxed vs trusted peers vs arbitrary remote), **Existing hardening** (fuzzing corpora, sanitizers, privilege separation).\n\n### Phase 4: Build Run Plan (deterministic)\n\n**Entry:** language flags + `threat_model` known; `${output_dir}\u002Ffindings\u002F` exists. **Exit:** `${output_dir}\u002Fplan.json` and `${output_dir}\u002Fworker-prompts\u002F*.txt` written; `M = worker_count` known.\n\nSelection, filtering, path resolution, and spawn-prompt rendering are **delegated to the script** to prevent the \"orchestrator paraphrases the spawn template and drops fields\" failure mode:\n\n```bash\npython3 \"${C_REVIEW_PLUGIN_ROOT}\u002Fscripts\u002Fbuild_run_plan.py\" \\\n  --plugin-root \"${C_REVIEW_PLUGIN_ROOT}\" --output-dir \"${output_dir}\" \\\n  --threat-model \"${threat_model}\" --severity-filter \"${severity_filter}\" \\\n  --scope-subpath \"${finding_scope_root:-.}\" --context-roots \"${context_roots:-.}\" \\\n  --is-cpp \"${is_cpp}\" --is-posix \"${is_posix}\" --is-windows \"${is_windows}\" \\\n  --max-passes-per-worker 4\n```\n\nThe script writes `plan.json` + `worker-prompts\u002Fworker-N.txt` + (if `--cache-primer=true`, the default) `worker-prompts\u002Fcache-primer.txt`, and prints a JSON summary on stdout. Exits non-zero on any missing prompt — surface the message and stop. Typical M with the default `--max-passes-per-worker 4` (REMOTE, `is_posix=true`): 13 (C POSIX), 15 (C++ POSIX), 16 (C POSIX + Windows), 18 (C++ POSIX + Windows); `LOCAL_UNPRIVILEGED` adds ~1 because `ambient-state` keeps its two REMOTE-skipped passes. After it returns, `Read plan.json` for the structured selection — never re-derive filtering or paths.\n\n`--max-passes-per-worker N` caps the per-worker pass count. The planner deterministically splits any **non-consolidated** cluster with more than `N` passes into `ceil(K\u002FN)` contiguous chunks; each chunk becomes its own `c-review-worker` spawn with a `-{i}`-suffixed `cluster_id` (e.g. `arithmetic-type-1`, `arithmetic-type-2`). **The consolidated cluster `buffer-write-sinks` (13 passes) is exempt — never chunked, regardless of pass count or override — so one worker builds its shared Phase-A inventory once and runs every phase** (chunking a consolidated cluster would force each chunk to rebuild that inventory, which workers skip in practice). The shared prompt-cache prefix and `Cluster prompt:` path are byte-identical across chunks, so the cache primer still warms every worker. Default 4 is calibrated against the heavy non-consolidated clusters in `manifest.json`. Some output-heavy non-consolidated clusters may declare a smaller manifest-level `max_passes_per_worker` override so each expensive pass group gets a smaller worker. Pass `--max-passes-per-worker 0` to disable all chunking, including manifest overrides (one worker per cluster). Because `buffer-write-sinks` runs all 13 passes in one worker, it is the heaviest worker in the fan-out; if it ever hits the soft tool-call cap on a large codebase, surface its truncation note rather than splitting it (splitting re-introduces the inventory-skip).\n\n### Phase 5: Create Bookkeeping Tasks (orchestrator-internal)\n\n**Entry:** `${output_dir}\u002Fplan.json` exists; `M = plan.workers.length`. **Exit:** `cluster_task_ids[]` created (1:1 with `plan.workers`), all `pending`.\n\nThe task ledger is **orchestrator bookkeeping only** (TUI visibility + Phase-7 retry tracking) — workers never read or write it. One `TaskCreate` per worker, populating `metadata` with `kind=\"cluster\"`, `worker_n`, `cluster_id`, `spawn_prompt_path`, `pass_prefixes`, `attempt=1` — all values copied verbatim from `plan.workers[i]`. Track `cluster_task_ids[]` in `plan.workers` order.\n\n### Phase 6: Spawn workers (optional cache-primer first, then M in parallel)\n\n**Entry:** `cluster_task_ids[]` populated; per-worker spawn prompt files exist at `${output_dir}\u002Fworker-prompts\u002Fworker-N.txt`. **Exit:** all M `Agent` calls — across every wave — have returned (the parallel spawn block(s) completed).\n\n#### Phase 6a: Cache primer (gated on `plan.run.cache_primer`)\n\nA parallel batch from cold start cannot share cache (all M requests dispatch simultaneously, none has finished writing). To warm the prefix, spawn a tiny primer first — **foreground** (background spawns don't share cache with subsequent foreground spawns).\n\nIf `plan.run.cache_primer == true`, `build_run_plan.py` has written `${output_dir}\u002Fworker-prompts\u002Fcache-primer.txt`. Spawn it in its own assistant message: `Read` the file, pass verbatim as `Agent` `prompt` with `subagent_type=c-review:c-review-worker`, `model=${worker_model}`, `description=\"C review cache primer\"`, no `run_in_background`. The script wrote the prefix byte-identical to `worker-1.txt` through the `\u003Ccontext>` block — that byte-identity is what gives the parallel workers their cache hit. The primer trailer contains `Cache primer: true`, which the worker system prompt treats as a first-class mode and returns exactly `worker-PRIMER abort: cache primer (no analysis performed)` in one text response with zero tool calls. Discard the abort line — Phase 7 ignores it (no `worker-N` id).\n\nForeground spawn already serializes — no `sleep` needed before Phase 6b. Skip Phase 6a entirely if `plan.run.cache_primer == false`.\n\n#### Phase 6b: Spawn M real workers in parallel (one message per wave of ≤16)\n\n> **STOP — read this before composing the spawn message.**\n>\n> Workers MUST be spawned **foreground** (no `run_in_background` field, or `run_in_background=false`).\n> \"Parallel\" here means *one assistant message containing the wave's `Agent` calls* — that already runs them concurrently. (For large `M`, split into consecutive waves of ≤16 calls, one message per wave — see \"Required spawn shape\" below.) **Background spawns are NOT how you parallelize this skill.**\n>\n> Background spawns defeat Phase 6a's primer cache: every worker pays full cache-creation on its first turn (`cache_read_input_tokens=0`), and the primer's ~15 K tokens are wasted M times over. Two real runs (audit logs available) had exactly this symptom — every worker started with `first_cr=0`.\n>\n> Before sending the spawn message, audit your draft: every `Agent` call must have **no** `run_in_background` key. If you wrote `run_in_background=true`, delete it.\n\n**Required spawn shape:** emit a single assistant message containing the wave's `Agent` tool invocations — that one message is what runs them concurrently. Sequential spawning (one `Agent` call per message) serializes the review and is also wrong, but that failure is loud (timing); the background-spawn failure is silent (cost).\n\n**Waves when `M` exceeds the per-message cap.** The harness caps the number of `Agent` calls it will dispatch from a single assistant message (observed: ~20 in Claude Code — a real 25-worker run silently kept only the first 20 and had to spawn the rest in a second message). So when `M > 16`, **plan the waves up front**: split the workers into consecutive waves of **≤16 `Agent` calls**, each wave its own single assistant message. Rules:\n\n- **Within a wave:** all `Agent` calls in **one** message, **foreground** (no `run_in_background`) — identical shape to a single-wave run.\n- **Across waves:** wave _k+1_ is a **separate** message that can only be sent after wave _k_'s `Agent` calls all return (a tool-use message ends the turn). Waves are therefore serialized with respect to each other — that is correct and loud; accept it.\n- **Never** reach for `run_in_background=true` to fit more workers in one message. More *waves*, never background — background defeats the primer cache (see the STOP box) and is the cardinal error this skill guards against.\n- **Cache across waves:** the primer prefix has a ~5-minute cache TTL that refreshes on every hit, so back-to-back waves keep hitting it. If a later wave will start more than ~5 minutes after the previous one (very large `M`), re-spawn the Phase-6a primer in its own message first to re-warm the prefix.\n- **Balance the waves** (e.g. `M=25` → 13+12, not 20+5) so no wave hugs the cap and the last wave isn't a tiny straggler.\n- After every wave has returned, proceed to Phase 7 with the **full** set of M worker results.\n\nFor each worker `N ∈ [1..M]` (in its assigned wave):\n\n1. `Read: ${output_dir}\u002Fworker-prompts\u002Fworker-N.txt`\n2. Pass the file contents **verbatim** as the `Agent` tool's `prompt` argument:\n\n| Parameter | Value |\n|-----------|-------|\n| `subagent_type` | `c-review:c-review-worker` |\n| `model` | `${worker_model}` (haiku \u002F sonnet \u002F opus) |\n| `description` | `C review worker N` |\n| `prompt` | the full text of `worker-N.txt` (no edits) |\n| `run_in_background` | **field MUST be omitted, OR set to `false`.** Never `true`. See the foreground-spawn warning above. |\n\nThe spawn prompt is the single authority. Pass it verbatim — every field is required by the worker's self-check; any deviation triggers `worker-N abort: spawn prompt malformed`.\n\n**Anti-patterns to reject:**\n\n- **Passing `run_in_background=true`** (the dominant historical defect — see warning above).\n- **Cramming more than ~16 `Agent` calls into one message** when `M` is large — the harness silently keeps only the first ~20 and drops the rest. Use balanced waves of ≤16, never background spawns, to cover all M.\n- Hand-typing the spawn prompt instead of reading `worker-N.txt`.\n- Inserting Task-related instructions (\"first call TaskList\", \"Assigned task id: \u003CN>\"). Workers have no Task tools.\n- Editing the rendered prompt before passing it (trimming \"redundant\" fields, collapsing pass lists).\n\n### Phase 7: Wait for Workers and Classify Outcomes\n\n**Entry:** all M Phase-6 `Agent` calls have returned. **Exit:** every cluster has either succeeded or been retried up to the cap; `${output_dir}\u002Ffindings-index.txt` written.\n\nThe Phase-6 `Agent` invocations block until each worker returns. Inspect each worker's return text and apply this classifier in order — first match wins:\n\n| # | Match (in return text) | Outcome | Action |\n|---|---|---|---|\n| 1 | `worker-N complete:` | **provisional success** | Parse the `wrote N finding files` count, then run the artifact validator below before `TaskUpdate` to `completed`. |\n| 2 | `abort: spawn prompt malformed`, `abort: pre-work budget exceeded`, or `abort: TaskList unavailable` (legacy) | **non-retryable orchestrator bug** | Stop the run, surface the abort + spawn-prompt path. Re-running the same prompt repeats the failure — pre-work-budget exhaustion always means the worker couldn't pass its self-check, which a retry won't fix. |\n| 3 | other `worker-N abort:` | **retryable** | Mark `pending`, set `metadata.abort_reason`, `needs_respawn=true`, increment `attempt`. |\n| 4 | `Agent` errored or no `complete:`\u002F`abort:` token | **retryable** | Same as #3 (transient worker crash). |\n\nIf any non-retryable, stop. Otherwise, **before re-spawning, clear each retryable worker's prefix-space on disk** — the Phase-7 index is built from disk, so a crashed attempt's higher-id stragglers (files the replacement never re-emits) would otherwise be resurrected into the report. Loop over the worker's actual `pass_prefixes` (from its task `metadata`), substituting each real prefix for `${pfx}` — do **not** run the command with a literal `PREFIX`:\n\n```bash\n# zsh-safe: `find … -delete` never aborts on no-match (an `rm PREFIX-*.md` glob would).\n# Replace `PREFIX1 PREFIX2` with the worker's actual space-separated pass_prefixes.\nfor pfx in PREFIX1 PREFIX2; do\n  find \"${output_dir}\u002Ffindings\" -maxdepth 1 -type f -name \"${pfx}-*.md\" -delete\ndone\n```\n\nThen re-spawn each `pending` retryable with `attempt \u003C= 2` in one parallel block (cap = 2 attempts per cluster). `attempt` was just incremented to `2` on the first failure, so the guard must admit `2` to allow the single retry — `attempt \u003C 2` would block every retry. A second failure increments to `3`, which fails `\u003C= 2` and ends retries. Replacement workers reuse deterministic finding IDs per prefix, so a cleared prefix-space plus a fresh write yields a consistent shard \u002F coverage \u002F disk set.\n\n#### Sanity-check + write index\n\nFor every provisional `complete:` cluster, validate the worker-owned shard, coverage file, coverage rows, filed IDs, and claimed finding count against `plan.json` before marking the task completed. Run one command per completed worker, or one command with repeated flags for all provisional completions:\n\n```bash\npython3 \"${C_REVIEW_PLUGIN_ROOT}\u002Fscripts\u002Fvalidate_artifacts.py\" \"${output_dir}\u002Fplan.json\" \\\n  --worker worker-N --claimed-count worker-N=\u003Cclaimed_count_from_complete_line>\n```\n\nGrouped claimed-count values are valid:\n\n```bash\npython3 \"${C_REVIEW_PLUGIN_ROOT}\u002Fscripts\u002Fvalidate_artifacts.py\" \"${output_dir}\u002Fplan.json\" \\\n  --claimed-count worker-1=0 worker-2=3\n```\n\nRepeated `--claimed-count` flags are also valid:\n\n```bash\npython3 \"${C_REVIEW_PLUGIN_ROOT}\u002Fscripts\u002Fvalidate_artifacts.py\" \"${output_dir}\u002Fplan.json\" \\\n  --claimed-count worker-1=0 --claimed-count worker-2=3\n```\n\nDo not pass bare `worker-N=N` arguments unless they are grouped after `--claimed-count` or preceded by their own repeated `--claimed-count` flag.\n\nIf validation exits non-zero, treat the completion as malformed and retryable (classifier row #4): mark the task `pending`, store the validator output in `metadata.abort_reason`, set `needs_respawn=true`, and increment `attempt`. Missing `findings-index.d\u002Fworker-N.txt`, missing `coverage\u002Fworker-N.md`, missing coverage rows, invalid `skipped:` rows, filed IDs absent from the shard or disk, and claimed-count mismatches are all malformed completions. After the retry cap, leave the cluster task incomplete and surface the validator output in `run-summary.md` and the final response. Only validation-clean provisional completions may be `TaskUpdate`d to `completed`.\n\nThen build the index. The canonical index is the set of finding files **actually on disk**, not the shard union — building from disk guarantees that a finding written without a matching shard entry (a worker that crashed between its `Write` and its shard-append, or the single-prefix empty-shard trap the worker prompt warns about) is still picked up by dedup → fp-judge → REPORT\u002FSARIF instead of silently vanishing, and that every index entry resolves to a real file:\n\n```bash\n# Canonical index = every finding file on disk. `find` never fails on no-match\n# (an empty findings\u002F yields an empty index — the unambiguous \"zero findings\"\n# signal). `sort -u` collapses Phase-7 retry duplicates: replacement workers reuse\n# deterministic ids, so the same path appears once.\nfind \"${output_dir}\u002Ffindings\" -maxdepth 1 -type f -name '*.md' 2>\u002Fdev\u002Fnull \\\n  | sort -u > \"${output_dir}\u002Ffindings-index.txt\"\n\n# Reconcile against the per-worker shards: any path on disk but in NO shard is an\n# orphan whose worker failed to record it. It is already in the index above (so it\n# is NOT dropped) — print it so the bookkeeping gap can be surfaced. Non-fatal.\nif [ -d \"${output_dir}\u002Ffindings-index.d\" ]; then\n  # Reconcile by basename (finding ids are unique), so a path-format difference\n  # between the worker `find` and this one (trailing slash, \u002Fvar↔\u002Fprivate\u002Fvar)\n  # cannot manufacture false orphans. Any basename on disk but in no shard is an\n  # orphan whose worker failed to record it.\n  comm -13 \\\n    \u003C(find \"${output_dir}\u002Ffindings-index.d\" -maxdepth 1 -type f -name 'worker-*.txt' -exec awk 1 {} + 2>\u002Fdev\u002Fnull | sed 's#.*\u002F##; \u002F^[[:space:]]*$\u002Fd' | sort -u) \\\n    \u003C(find \"${output_dir}\u002Ffindings\" -maxdepth 1 -type f -name '*.md' 2>\u002Fdev\u002Fnull | sed 's#.*\u002F##' | sort -u)\nfi\n```\n\nThe shards stay the per-worker audit trail (`validate_artifacts.py` checks them) and the dedup-judge's crash-recovery fallback, but they no longer gate what reaches the pipeline. For each orphan basename the reconcile prints, map its `\u003CPREFIX>` to the owning worker via `plan.json` and note in `run-summary.md` that that worker's shard was incomplete — the finding is already in the index (so it is not lost), but the bookkeeping gap should be visible. Still cross-check the index line count against the sum of `wrote N` worker claims; log mismatches but don't abort.\n\nAfter task updates and index creation, run `TaskList` and write `${output_dir}\u002Frun-summary.md` with:\n\n- resolved parameters (`threat_model`, `severity_filter`, `finding_scope_root`, `context_roots`, language\u002Fplatform flags, compile-commands status)\n- worker outcome table (`worker_n`, `cluster_id`, claimed finding count, shard line count, coverage-file path (`coverage\u002Fworker-{N}.md`), task status, retry\u002Fabort state)\n- `findings-index.txt` line count and any mismatch against worker claims\n- judge status once Phase 8 finishes, or the reason a judge was skipped\u002Ffailed\n\nIf any Phase-5 cluster task is not `completed` — **or** any worker returned a `complete:` line carrying the `truncated at hard cap` token (it hit the tool-call cap before searching every pass; its coverage file will show one or more `cleared (NOT SEARCHED — truncated at hard cap)` rows) — include it prominently in `run-summary.md` and the final response. A hard-cap-truncated worker is marked `completed` for ledger purposes but is a **partial** result: do not let that `completed` status hide the incomplete coverage behind a successful report.\n\n**Always run Phase 8 even on zero findings** — both judges short-circuit on an empty index: dedup-judge writes a minimal no-op `dedup-summary.md`, and fp-judge writes empty `REPORT.md`\u002F`REPORT.sarif` so SARIF consumers get a stable artifact set.\n\n### Phase 8: Judge Pipeline (sequential, dedup → fp+severity)\n\n**Entry:** `findings-index.txt` exists. **Exit:** dedup-judge and fp-judge have returned; `dedup-summary.md`, `fp-summary.md`, `REPORT.md`, and ideally `REPORT.sarif` are written.\n\nEach judge's full protocol is its system prompt (`agents\u002Fc-review-{dedup,fp}-judge.md`); spawn prompts pass only per-run variables. Do **not** reference `prompts\u002Finternal\u002Fjudges\u002F` — those files don't exist.\n\n> **STOP — these two judges run in SEQUENCE, not in parallel.** Unlike the Phase-6b workers (which you spawn as M `Agent` calls in *one* message precisely because that runs them concurrently), the judges have a hard data dependency: fp-judge must see the `merged_into` \u002F `also_known_as` annotations dedup-judge writes, and it only skips files already carrying `merged_into`. If you emit both `Agent` calls in one message they run concurrently — fp-judge reads findings before any merge annotations exist, judges every duplicate as a separate primary, and (because `dedup-summary.md` doesn't exist yet) trips its \"dedup did not run\" fallback, producing an inflated, duplicated `REPORT.md`\u002FSARIF.\n>\n> Spawn dedup-judge in its **own** assistant message, wait for its `dedup-judge complete:` (or `abort:`) return, **then** spawn fp-judge in a **separate** message. Before composing the fp-judge spawn, confirm dedup finished — `Bash: test -f ${output_dir}\u002Fdedup-summary.md` must succeed (or you saw the dedup `complete:` token). **Never put both judge `Agent` calls in the same message.**\n\n1. **First message** — `Agent(subagent_type=\"c-review:c-review-dedup-judge\", description=\"Dedup judge\", prompt=f\"output_dir: {output_dir}\")`. Wait for its return and classify it (below) before continuing.\n2. **Then, in a separate message** — `Agent(subagent_type=\"c-review:c-review-fp-judge\", description=\"FP + severity judge\", prompt=f\"output_dir: {output_dir}\\nsarif_generator_path: {sarif_generator_path}\")` — resolve `sarif_generator_path` to `${C_REVIEW_PLUGIN_ROOT}\u002Fscripts\u002Fgenerate_sarif.py`.\n\n**Judge failure handling.** Same shape as Phase 7's classifier, applied to judge return text:\n\n- `… complete:` → **success.**\n- `… abort:` → **non-retryable for that judge.** Surface the abort line plus `ls -l ${output_dir}\u002Ffindings-index.txt`, then **still run Phase 8b** (its SARIF + `REPORT.md` safety net guarantees the artifact set even when a judge aborts), and stop without spawning further judges. \"Stop\" means do not continue the judge pipeline — it does **not** mean skip Phase 8b.\n- No `complete:` (help message \u002F error \u002F question) → **retryable once.** `SendMessage(to=\u003CagentId>, …)` rather than a fresh spawn (the agent already paid the protocol-parse cost). Include the explicit finding paths from `findings-index.txt`. If the second try still fails, surface the transcript and continue to Phase 8b.\n\n### Phase 8b: Report safety net (SARIF + REPORT.md)\n\n**Entry:** fp-judge returned, or the run aborted early. **Exit:** `${output_dir}\u002FREPORT.sarif` and `${output_dir}\u002FREPORT.md` both exist.\n\n```bash\ntest -d \"${output_dir}\u002Ffindings\" && python3 \"${C_REVIEW_PLUGIN_ROOT}\u002Fscripts\u002Fgenerate_sarif.py\" \"${output_dir}\"\n```\n\nRun the SARIF generator unconditionally whenever `findings\u002F` exists — it is idempotent (full overwrite), emits `results: []` for zero-survivor runs, and handles partial runs (findings without `fp_verdict` are emitted as `LIKELY_TP`, **exempt from the `severity_filter`** since their severity was never judge-validated, and marked `unjudged: true` \u002F `severity_validated: false` with an `[UNVALIDATED SEVERITY — not judged]` message prefix — so an inferred severity guess can never silently drop them under a `medium`\u002F`high` filter). Always overwriting protects against an fp-judge that crashed mid-write and left a corrupt `REPORT.sarif` on disk.\n\nIf the generator prints a `WARNING: skipped N …` line on stdout (it also records `invocations[].properties.skipped_findings` in the SARIF and a `warning` notification per dropped file), one or more finding files were unreadable or had no parseable frontmatter and were **excluded from the report**. This is a dropped result — surface it prominently in `run-summary.md` and the final response with the count and paths, the same way a non-`completed` cluster task is surfaced. Do not let the otherwise-clean SARIF hide the loss.\n\nThen guarantee `REPORT.md` exists. Unlike SARIF (mechanical), `REPORT.md` is the fp-judge's **curated** artifact, so do **not** overwrite a judge-written one. (The fp-judge writes `REPORT.md` with a `Bash` heredoc, not the `Write` tool, because the harness blocks the `Write` tool for subagent report files — do not \"fix\" the judge by re-mandating `Write`. The orchestrator is the main agent and is **not** subject to that block, so its own `Write` below works.) Check for it, and if it is missing (the judge crashed, even its `Bash`-heredoc write failed, or it returned the report as chat text instead of writing the file), **the orchestrator writes `REPORT.md` itself** rather than failing the run:\n\n- If the fp-judge returned the report body in its transcript, `Write` that text verbatim to `${output_dir}\u002FREPORT.md`.\n- Otherwise synthesize it from the on-disk findings: take the survivor primaries (`fp_verdict ∈ {TRUE_POSITIVE, LIKELY_TP}`, no `merged_into`; if the judge never ran, treat a finding with no `fp_verdict` as a survivor) listed in `findings-index.txt`, apply `severity_filter` from `context.md` **to judged survivors only** — unjudged findings (no `fp_verdict`) are included regardless of filter and rendered under an `Unvalidated (severity not judged)` section with a `[UNVALIDATED SEVERITY — not judged]` label, mirroring the SARIF behavior so a strict filter never silently drops them — and `Write` a `REPORT.md` mirroring the fp-judge template — YAML frontmatter (`stage: final-report`, `threat_model`, `severity_filter`, `total_primaries`, `reported_findings`), a severity-distribution table, then one section per reported finding grouped by severity (embed the Description \u002F Code \u002F Data flow \u002F Impact \u002F Recommendation body for CRITICAL\u002FHIGH; reference the finding file for MEDIUM\u002FLOW).\n\nEither way, note in `${output_dir}\u002Frun-summary.md` that `REPORT.md` was orchestrator-synthesized (not judge-authored). Skip the SARIF generator and this check only if `${output_dir}\u002Ffindings\u002F` doesn't exist (Phase 2 failed). After this phase, update `${output_dir}\u002Frun-summary.md` with judge \u002F SARIF \u002F report status.\n\n### Phase 9: Return Report\n\n**Entry:** Phase 8b complete. **Exit:** every item in [Success Criteria](#success-criteria) verified true; `REPORT.md` returned to the caller.\n\nBefore composing the response, walk the [Success Criteria](#success-criteria) checklist below and confirm each bullet against on-disk artifacts (`TaskList` for cluster tasks, `ls`\u002F`Read` for the files). If any criterion fails, surface the failure prominently in the response — do **not** hide a partial run behind a successful report.\n\nThen `Read ${output_dir}\u002FREPORT.md` and return its content to the caller. Append an Artifacts list pointing at `findings\u002F`, `findings-index.txt`, `run-summary.md`, `dedup-summary.md`, `fp-summary.md`, `REPORT.md`, `REPORT.sarif`.\n\n---\n\n## Finding file frontmatter — three stages\n\nAuthoritative schema: `agents\u002Fc-review-worker.md` (\"Finding File Format\"). Three-stage write:\n\n1. **Worker** — base fields (`id`, `bug_class`, `title`, `location`, `function`, `confidence`, `worker`) + seven body sections.\n2. **Dedup-judge** — adds `merged_into` on duplicates, or `also_known_as` + `locations` on primaries that absorbed.\n3. **FP+Severity judge** — adds `fp_verdict` + `fp_rationale` on every primary; on survivors (`TRUE_POSITIVE`\u002F`LIKELY_TP`) also adds `severity`, `attack_vector`, `exploitability`, `severity_rationale`.\n\n## Bug classes \u002F clusters\n\nAuthoritative: `prompts\u002Fclusters\u002Fmanifest.json`. 47 always-on bug classes, up to 64 with all conditional clusters enabled. `buffer-write-sinks` is fully consolidated (its sub-prompts are not re-read at runtime).\n\n---\n\n## Success Criteria\n\nThe phase exits already cover most of this; the orchestrator-visible end-state is:\n\n- Every Phase-5 cluster task is `completed` (verify via `TaskList`).\n- `${output_dir}\u002Frun-summary.md` exists and records resolved scope\u002Fcontext, compile-commands probe result, worker claims vs index count, task status, and judge\u002FSARIF status.\n- Every primary finding (no `merged_into`) has `fp_verdict` + `fp_rationale`; every survivor (`TRUE_POSITIVE`\u002F`LIKELY_TP`) also has `severity`, `attack_vector`, `exploitability`, `severity_rationale`.\n- `REPORT.md` exists, severity-filtered per `severity_filter` (Phase 8b safety net guarantees this even when the fp-judge fails to write it).\n- `REPORT.sarif` exists (Phase 8b safety net guarantees this).\n",{"data":39,"body":41},{"name":4,"description":6,"allowed-tools":40},"Agent AskUserQuestion SendMessage TaskCreate TaskUpdate TaskList Read Write Bash",{"type":42,"children":43},"root",[44,53,107,114,119,125,145,151,260,594,598,604,616,708,742,838,866,876,915,918,924,1125,1128,1134,1145,1152,1220,1268,1273,1494,1532,1568,1574,1610,1737,2343,2377,2614,2627,2633,2671,2691,2755,2783,2789,2818,2946,3076,3082,3132,3144,3395,3469,3596,3602,3652,3744,3750,3785,3799,3811,3927,3947,3953,4068,4092,4143,4289,4302,4340,4485,4496,4504,4573,4579,4608,4620,4856,4904,5048,5112,5118,5137,5240,5245,5331,5344,5429,5456,5532,5552,6082,6125,6146,6219,6288,6318,6324,6370,6397,6532,6583,6593,6690,6696,6725,6807,6896,6946,7047,7191,7224,7230,7261,7299,7354,7357,7363,7375,7534,7540,7560,7563,7568,7573,7694],{"type":45,"tag":46,"props":47,"children":49},"element","h1",{"id":48},"cc-security-review",[50],{"type":51,"value":52},"text","C\u002FC++ Security Review",{"type":45,"tag":54,"props":55,"children":56},"p",{},[57,59,66,68,74,76,82,84,90,91,97,99,105],{"type":51,"value":58},"Runs in the main conversation (invoke via ",{"type":45,"tag":60,"props":61,"children":63},"code",{"className":62},[],[64],{"type":51,"value":65},"\u002Fc-review:c-review",{"type":51,"value":67},"). Orchestrator owns the ",{"type":45,"tag":60,"props":69,"children":71},{"className":70},[],[72],{"type":51,"value":73},"Task*",{"type":51,"value":75}," ledger as bookkeeping for retries; workers and judges have no Task tools. Workers and judges are named plugin subagents (",{"type":45,"tag":60,"props":77,"children":79},{"className":78},[],[80],{"type":51,"value":81},"c-review:c-review-worker",{"type":51,"value":83},", ",{"type":45,"tag":60,"props":85,"children":87},{"className":86},[],[88],{"type":51,"value":89},"c-review:c-review-dedup-judge",{"type":51,"value":83},{"type":45,"tag":60,"props":92,"children":94},{"className":93},[],[95],{"type":51,"value":96},"c-review:c-review-fp-judge",{"type":51,"value":98},"); tool sets are declared in ",{"type":45,"tag":60,"props":100,"children":102},{"className":101},[],[103],{"type":51,"value":104},"plugins\u002Fc-review\u002Fagents\u002F*.md",{"type":51,"value":106},". Findings are exchanged via markdown-with-YAML files in a shared output directory.",{"type":45,"tag":108,"props":109,"children":111},"h2",{"id":110},"when-to-use",[112],{"type":51,"value":113},"When to Use",{"type":45,"tag":54,"props":115,"children":116},{},[117],{"type":51,"value":118},"Native C\u002FC++ application security review: memory safety, integer overflow, races, type confusion, Linux\u002FmacOS daemons, Windows userspace services.",{"type":45,"tag":108,"props":120,"children":122},{"id":121},"when-not-to-use",[123],{"type":51,"value":124},"When NOT to Use",{"type":45,"tag":126,"props":127,"children":128},"ul",{},[129,135,140],{"type":45,"tag":130,"props":131,"children":132},"li",{},[133],{"type":51,"value":134},"Kernel drivers\u002Fmodules (Linux, Windows, macOS).",{"type":45,"tag":130,"props":136,"children":137},{},[138],{"type":51,"value":139},"Managed languages (Java, C#, Python, Go, Rust).",{"type":45,"tag":130,"props":141,"children":142},{},[143],{"type":51,"value":144},"Embedded\u002Fbare-metal code without libc.",{"type":45,"tag":108,"props":146,"children":148},{"id":147},"subagents",[149],{"type":51,"value":150},"Subagents",{"type":45,"tag":152,"props":153,"children":154},"table",{},[155,179],{"type":45,"tag":156,"props":157,"children":158},"thead",{},[159],{"type":45,"tag":160,"props":161,"children":162},"tr",{},[163,169,174],{"type":45,"tag":164,"props":165,"children":166},"th",{},[167],{"type":51,"value":168},"Subagent type",{"type":45,"tag":164,"props":170,"children":171},{},[172],{"type":51,"value":173},"Purpose",{"type":45,"tag":164,"props":175,"children":176},{},[177],{"type":51,"value":178},"Tool set",{"type":45,"tag":180,"props":181,"children":182},"tbody",{},[183,205,234],{"type":45,"tag":160,"props":184,"children":185},{},[186,195,200],{"type":45,"tag":187,"props":188,"children":189},"td",{},[190],{"type":45,"tag":60,"props":191,"children":193},{"className":192},[],[194],{"type":51,"value":81},{"type":45,"tag":187,"props":196,"children":197},{},[198],{"type":51,"value":199},"Run assigned cluster, write findings",{"type":45,"tag":187,"props":201,"children":202},{},[203],{"type":51,"value":204},"Read, Write, Edit, Bash",{"type":45,"tag":160,"props":206,"children":207},{},[208,216,229],{"type":45,"tag":187,"props":209,"children":210},{},[211],{"type":45,"tag":60,"props":212,"children":214},{"className":213},[],[215],{"type":51,"value":89},{"type":45,"tag":187,"props":217,"children":218},{},[219,221,227],{"type":51,"value":220},"Merge duplicates (runs ",{"type":45,"tag":222,"props":223,"children":224},"strong",{},[225],{"type":51,"value":226},"first",{"type":51,"value":228},")",{"type":45,"tag":187,"props":230,"children":231},{},[232],{"type":51,"value":233},"Read, Write, Edit, Glob",{"type":45,"tag":160,"props":235,"children":236},{},[237,245,256],{"type":45,"tag":187,"props":238,"children":239},{},[240],{"type":45,"tag":60,"props":241,"children":243},{"className":242},[],[244],{"type":51,"value":96},{"type":45,"tag":187,"props":246,"children":247},{},[248,250,255],{"type":51,"value":249},"FP + severity + final reports (runs ",{"type":45,"tag":222,"props":251,"children":252},{},[253],{"type":51,"value":254},"second",{"type":51,"value":228},{"type":45,"tag":187,"props":257,"children":258},{},[259],{"type":51,"value":204},{"type":45,"tag":54,"props":261,"children":262},{},[263,265,270,272,278,279,285,287,293,295,307,309,314,316,321,323,329,331,342,344,350,352,358,359,365,366,372,374,379,381,386,387,392,394,399,401,407,409,414,415,420,421,426,427,432,433,439,441,447,448,454,455,461,463,468,470,478,480,486,488,493,495,501,503,508,510,516,518,524,526,531,533,538,540,546,548,553,555,560,561,566,568,572,574,579,580,585,587,592],{"type":51,"value":264},"Tools come from each agent's frontmatter at spawn time. The orchestrator's ",{"type":45,"tag":60,"props":266,"children":268},{"className":267},[],[269],{"type":51,"value":73},{"type":51,"value":271},"\u002F",{"type":45,"tag":60,"props":273,"children":275},{"className":274},[],[276],{"type":51,"value":277},"Agent",{"type":51,"value":271},{"type":45,"tag":60,"props":280,"children":282},{"className":281},[],[283],{"type":51,"value":284},"Bash",{"type":51,"value":286},"\u002Fetc. come from this skill's ",{"type":45,"tag":60,"props":288,"children":290},{"className":289},[],[291],{"type":51,"value":292},"allowed-tools",{"type":51,"value":294},". ",{"type":45,"tag":222,"props":296,"children":297},{},[298,300,305],{"type":51,"value":299},"Search-tool \u002F ",{"type":45,"tag":60,"props":301,"children":303},{"className":302},[],[304],{"type":51,"value":284},{"type":51,"value":306}," interaction:",{"type":51,"value":308}," in current Claude Code, an agent granted ",{"type":45,"tag":60,"props":310,"children":312},{"className":311},[],[313],{"type":51,"value":284},{"type":51,"value":315}," is ",{"type":45,"tag":222,"props":317,"children":318},{},[319],{"type":51,"value":320},"not",{"type":51,"value":322}," also granted the dedicated ",{"type":45,"tag":60,"props":324,"children":326},{"className":325},[],[327],{"type":51,"value":328},"Glob",{"type":51,"value":330}," ",{"type":45,"tag":222,"props":332,"children":333},{},[334,336],{"type":51,"value":335},"or ",{"type":45,"tag":60,"props":337,"children":339},{"className":338},[],[340],{"type":51,"value":341},"Grep",{"type":51,"value":343}," tools (the calls return ",{"type":45,"tag":60,"props":345,"children":347},{"className":346},[],[348],{"type":51,"value":349},"No such tool available",{"type":51,"value":351},"; the harness expects ",{"type":45,"tag":60,"props":353,"children":355},{"className":354},[],[356],{"type":51,"value":357},"find",{"type":51,"value":271},{"type":45,"tag":60,"props":360,"children":362},{"className":361},[],[363],{"type":51,"value":364},"grep",{"type":51,"value":271},{"type":45,"tag":60,"props":367,"children":369},{"className":368},[],[370],{"type":51,"value":371},"rg",{"type":51,"value":373}," via ",{"type":45,"tag":60,"props":375,"children":377},{"className":376},[],[378],{"type":51,"value":284},{"type":51,"value":380}," instead). So only the dedup-judge — the one agent that holds ",{"type":45,"tag":222,"props":382,"children":383},{},[384],{"type":51,"value":385},"no",{"type":51,"value":330},{"type":45,"tag":60,"props":388,"children":390},{"className":389},[],[391],{"type":51,"value":284},{"type":51,"value":393}," — uses ",{"type":45,"tag":60,"props":395,"children":397},{"className":396},[],[398],{"type":51,"value":328},{"type":51,"value":400},"; the worker, fp-judge, and the orchestrator resolve and search paths with ",{"type":45,"tag":60,"props":402,"children":404},{"className":403},[],[405],{"type":51,"value":406},"Read",{"type":51,"value":408}," \u002F ",{"type":45,"tag":60,"props":410,"children":412},{"className":411},[],[413],{"type":51,"value":284},{"type":51,"value":330},{"type":45,"tag":60,"props":416,"children":418},{"className":417},[],[419],{"type":51,"value":357},{"type":51,"value":408},{"type":45,"tag":60,"props":422,"children":424},{"className":423},[],[425],{"type":51,"value":371},{"type":51,"value":408},{"type":45,"tag":60,"props":428,"children":430},{"className":429},[],[431],{"type":51,"value":364},{"type":51,"value":408},{"type":45,"tag":60,"props":434,"children":436},{"className":435},[],[437],{"type":51,"value":438},"test -f",{"type":51,"value":440}," instead. Because the cluster\u002Ffinder prompt seeds are written in ripgrep regex syntax (",{"type":45,"tag":60,"props":442,"children":444},{"className":443},[],[445],{"type":51,"value":446},"\\s",{"type":51,"value":83},{"type":45,"tag":60,"props":449,"children":451},{"className":450},[],[452],{"type":51,"value":453},"\\d",{"type":51,"value":83},{"type":45,"tag":60,"props":456,"children":458},{"className":457},[],[459],{"type":51,"value":460},"\\b",{"type":51,"value":462},"), ",{"type":45,"tag":60,"props":464,"children":466},{"className":465},[],[467],{"type":51,"value":284},{"type":51,"value":469},"-holding agents must run them with ",{"type":45,"tag":222,"props":471,"children":472},{},[473],{"type":45,"tag":60,"props":474,"children":476},{"className":475},[],[477],{"type":51,"value":371},{"type":51,"value":479}," — a plain ",{"type":45,"tag":60,"props":481,"children":483},{"className":482},[],[484],{"type":51,"value":485},"grep -E",{"type":51,"value":487}," may silently mishandle ",{"type":45,"tag":60,"props":489,"children":491},{"className":490},[],[492],{"type":51,"value":446},{"type":51,"value":494}," and return a false-empty (a bad ",{"type":45,"tag":60,"props":496,"children":498},{"className":497},[],[499],{"type":51,"value":500},"cleared",{"type":51,"value":502},"). If ",{"type":45,"tag":60,"props":504,"children":506},{"className":505},[],[507],{"type":51,"value":371},{"type":51,"value":509}," is not installed its call fails ",{"type":45,"tag":511,"props":512,"children":513},"em",{},[514],{"type":51,"value":515},"loudly",{"type":51,"value":517}," (",{"type":45,"tag":60,"props":519,"children":521},{"className":520},[],[522],{"type":51,"value":523},"command not found",{"type":51,"value":525},") — fall back to ",{"type":45,"tag":60,"props":527,"children":529},{"className":528},[],[530],{"type":51,"value":485},{"type":51,"value":532}," with POSIX classes (",{"type":45,"tag":60,"props":534,"children":536},{"className":535},[],[537],{"type":51,"value":446},{"type":51,"value":539},"→",{"type":45,"tag":60,"props":541,"children":543},{"className":542},[],[544],{"type":51,"value":545},"[[:space:]]",{"type":51,"value":547},", drop ",{"type":45,"tag":60,"props":549,"children":551},{"className":550},[],[552],{"type":51,"value":460},{"type":51,"value":554},"), never a raw-",{"type":45,"tag":60,"props":556,"children":558},{"className":557},[],[559],{"type":51,"value":446},{"type":51,"value":330},{"type":45,"tag":60,"props":562,"children":564},{"className":563},[],[565],{"type":51,"value":364},{"type":51,"value":567},". Do ",{"type":45,"tag":222,"props":569,"children":570},{},[571],{"type":51,"value":320},{"type":51,"value":573}," reintroduce ",{"type":45,"tag":60,"props":575,"children":577},{"className":576},[],[578],{"type":51,"value":328},{"type":51,"value":271},{"type":45,"tag":60,"props":581,"children":583},{"className":582},[],[584],{"type":51,"value":341},{"type":51,"value":586}," into a ",{"type":45,"tag":60,"props":588,"children":590},{"className":589},[],[591],{"type":51,"value":284},{"type":51,"value":593},"-holding agent's protocol.",{"type":45,"tag":595,"props":596,"children":597},"hr",{},[],{"type":45,"tag":108,"props":599,"children":601},{"id":600},"architecture",[602],{"type":51,"value":603},"Architecture",{"type":45,"tag":605,"props":606,"children":610},"pre",{"className":607,"code":609,"language":51},[608],"language-text","coordinator: write context.md → build_run_plan.py → TaskCreate × M\n          → spawn primer (foreground) → spawn M workers (parallel)\n          → classify Phase-7 outcomes + write findings-index.txt\n          → dedup-judge → fp-judge → report safety net (SARIF + REPORT.md) → return REPORT.md\n",[611],{"type":45,"tag":60,"props":612,"children":614},{"__ignoreMap":613},"",[615],{"type":51,"value":609},{"type":45,"tag":54,"props":617,"children":618},{},[619,621,627,628,634,635,641,642,648,649,655,657,663,664,670,672,678,679,685,686,692,693,699,700,706],{"type":51,"value":620},"Output directory contains: ",{"type":45,"tag":60,"props":622,"children":624},{"className":623},[],[625],{"type":51,"value":626},"context.md",{"type":51,"value":83},{"type":45,"tag":60,"props":629,"children":631},{"className":630},[],[632],{"type":51,"value":633},"plan.json",{"type":51,"value":83},{"type":45,"tag":60,"props":636,"children":638},{"className":637},[],[639],{"type":51,"value":640},"worker-prompts\u002F",{"type":51,"value":83},{"type":45,"tag":60,"props":643,"children":645},{"className":644},[],[646],{"type":51,"value":647},"findings\u002F",{"type":51,"value":83},{"type":45,"tag":60,"props":650,"children":652},{"className":651},[],[653],{"type":51,"value":654},"findings-index.d\u002F",{"type":51,"value":656}," (per-worker shards), ",{"type":45,"tag":60,"props":658,"children":660},{"className":659},[],[661],{"type":51,"value":662},"findings-index.txt",{"type":51,"value":83},{"type":45,"tag":60,"props":665,"children":667},{"className":666},[],[668],{"type":51,"value":669},"coverage\u002F",{"type":51,"value":671}," (per-worker coverage-gate files), ",{"type":45,"tag":60,"props":673,"children":675},{"className":674},[],[676],{"type":51,"value":677},"run-summary.md",{"type":51,"value":83},{"type":45,"tag":60,"props":680,"children":682},{"className":681},[],[683],{"type":51,"value":684},"dedup-summary.md",{"type":51,"value":83},{"type":45,"tag":60,"props":687,"children":689},{"className":688},[],[690],{"type":51,"value":691},"fp-summary.md",{"type":51,"value":83},{"type":45,"tag":60,"props":694,"children":696},{"className":695},[],[697],{"type":51,"value":698},"REPORT.md",{"type":51,"value":83},{"type":45,"tag":60,"props":701,"children":703},{"className":702},[],[704],{"type":51,"value":705},"REPORT.sarif",{"type":51,"value":707},".",{"type":45,"tag":54,"props":709,"children":710},{},[711,716,718,724,726,732,734,740],{"type":45,"tag":222,"props":712,"children":713},{},[714],{"type":51,"value":715},"Path convention:",{"type":51,"value":717}," every later phase shells out to ",{"type":45,"tag":60,"props":719,"children":721},{"className":720},[],[722],{"type":51,"value":723},"${C_REVIEW_PLUGIN_ROOT}\u002Fscripts\u002F*.py",{"type":51,"value":725},", so resolve that variable first to the plugin directory that contains ",{"type":45,"tag":60,"props":727,"children":729},{"className":728},[],[730],{"type":51,"value":731},"prompts\u002Fclusters\u002Fbuffer-write-sinks.md",{"type":51,"value":733}," (and ",{"type":45,"tag":60,"props":735,"children":737},{"className":736},[],[738],{"type":51,"value":739},"scripts\u002Fbuild_run_plan.py",{"type":51,"value":741},"). Try in order, first hit wins:",{"type":45,"tag":743,"props":744,"children":745},"ol",{},[746,772,789],{"type":45,"tag":130,"props":747,"children":748},{},[749,754,756,762,764,770],{"type":45,"tag":222,"props":750,"children":751},{},[752],{"type":51,"value":753},"Native Claude Code",{"type":51,"value":755}," — ",{"type":45,"tag":60,"props":757,"children":759},{"className":758},[],[760],{"type":51,"value":761},"${CLAUDE_PLUGIN_ROOT}",{"type":51,"value":763},", accepted if ",{"type":45,"tag":60,"props":765,"children":767},{"className":766},[],[768],{"type":51,"value":769},"Bash: ls \"${CLAUDE_PLUGIN_ROOT}\u002Fprompts\u002Fclusters\u002Fbuffer-write-sinks.md\"",{"type":51,"value":771}," resolves.",{"type":45,"tag":130,"props":773,"children":774},{},[775,780,781,787],{"type":45,"tag":222,"props":776,"children":777},{},[778],{"type":51,"value":779},"Codex",{"type":51,"value":755},{"type":45,"tag":60,"props":782,"children":784},{"className":783},[],[785],{"type":51,"value":786},"${CODEX_PLUGIN_ROOT}",{"type":51,"value":788}," (set it the same way if that var is present and resolves the marker).",{"type":45,"tag":130,"props":790,"children":791},{},[792,797,799,805,807,813,815,821,823,829,831,836],{"type":45,"tag":222,"props":793,"children":794},{},[795],{"type":51,"value":796},"Fallback search",{"type":51,"value":798}," — covers Codex installs under ",{"type":45,"tag":60,"props":800,"children":802},{"className":801},[],[803],{"type":51,"value":804},"~\u002F.codex",{"type":51,"value":806},", Claude installs under ",{"type":45,"tag":60,"props":808,"children":810},{"className":809},[],[811],{"type":51,"value":812},"~\u002F.claude",{"type":51,"value":814},", and a local checkout \u002F repo run: ",{"type":45,"tag":60,"props":816,"children":818},{"className":817},[],[819],{"type":51,"value":820},"Bash: find ~\u002F.claude ~\u002F.codex . -path '*\u002Fplugins\u002Fc-review\u002Fprompts\u002Fclusters\u002Fbuffer-write-sinks.md' -print -quit 2>\u002Fdev\u002Fnull",{"type":51,"value":822},". Take the match and strip the trailing ",{"type":45,"tag":60,"props":824,"children":826},{"className":825},[],[827],{"type":51,"value":828},"\u002Fprompts\u002Fclusters\u002Fbuffer-write-sinks.md",{"type":51,"value":830}," to get the root (the home dirs are searched before ",{"type":45,"tag":60,"props":832,"children":834},{"className":833},[],[835],{"type":51,"value":707},{"type":51,"value":837}," so an installed copy wins over any vendored copy in the audited repo).",{"type":45,"tag":54,"props":839,"children":840},{},[841,843,849,851,856,858,864],{"type":51,"value":842},"Set ",{"type":45,"tag":60,"props":844,"children":846},{"className":845},[],[847],{"type":51,"value":848},"C_REVIEW_PLUGIN_ROOT",{"type":51,"value":850}," to the resolved root. If all three fail, ",{"type":45,"tag":222,"props":852,"children":853},{},[854],{"type":51,"value":855},"abort",{"type":51,"value":857}," with a message naming the roots searched — do not enter Phase 4 with an empty variable (every ",{"type":45,"tag":60,"props":859,"children":861},{"className":860},[],[862],{"type":51,"value":863},"python3 \"${C_REVIEW_PLUGIN_ROOT}\u002Fscripts\u002F...\"",{"type":51,"value":865}," call would fail with a confusing path error).",{"type":45,"tag":54,"props":867,"children":868},{},[869,874],{"type":45,"tag":222,"props":870,"children":871},{},[872],{"type":51,"value":873},"Scope convention:",{"type":51,"value":875}," keep two scopes separate throughout the run:",{"type":45,"tag":126,"props":877,"children":878},{},[879,890],{"type":45,"tag":130,"props":880,"children":881},{},[882,888],{"type":45,"tag":60,"props":883,"children":885},{"className":884},[],[886],{"type":51,"value":887},"finding_scope_root",{"type":51,"value":889}," — the user-requested audit subtree. Workers may only file findings whose vulnerable location is inside this subtree.",{"type":45,"tag":130,"props":891,"children":892},{},[893,899,901,906,908,913],{"type":45,"tag":60,"props":894,"children":896},{"className":895},[],[897],{"type":51,"value":898},"context_roots",{"type":51,"value":900}," — read-only repo roots\u002Ffiles workers and judges may inspect to verify reachability, callers, wrappers, build flags, mitigations, and threat-model details. Default to ",{"type":45,"tag":60,"props":902,"children":904},{"className":903},[],[905],{"type":51,"value":707},{"type":51,"value":907}," unless the user explicitly forbids broader context. Reading context outside ",{"type":45,"tag":60,"props":909,"children":911},{"className":910},[],[912],{"type":51,"value":887},{"type":51,"value":914}," is allowed; filing findings there is not.",{"type":45,"tag":595,"props":916,"children":917},{},[],{"type":45,"tag":108,"props":919,"children":921},{"id":920},"rationalizations-to-reject",[922],{"type":51,"value":923},"Rationalizations to Reject",{"type":45,"tag":126,"props":925,"children":926},{},[927,976,1009,1041,1079],{"type":45,"tag":130,"props":928,"children":929},{},[930,935,937,942,944,950,952,958,960,966,968,974],{"type":45,"tag":222,"props":931,"children":932},{},[933],{"type":51,"value":934},"\"Background spawns parallelize the workers.\"",{"type":51,"value":936}," They do not — ",{"type":45,"tag":60,"props":938,"children":940},{"className":939},[],[941],{"type":51,"value":277},{"type":51,"value":943}," calls in a single assistant message already run concurrently. ",{"type":45,"tag":60,"props":945,"children":947},{"className":946},[],[948],{"type":51,"value":949},"run_in_background=true",{"type":51,"value":951}," defeats the Phase 6a primer cache, so every worker pays full cache-creation (",{"type":45,"tag":60,"props":953,"children":955},{"className":954},[],[956],{"type":51,"value":957},"cache_read_input_tokens=0",{"type":51,"value":959},") and the ~15 K-token primer is wasted M times. This is the single most common defect — multiple recent runs spawned 7-of-8 (or all) workers with ",{"type":45,"tag":60,"props":961,"children":963},{"className":962},[],[964],{"type":51,"value":965},"bg=true",{"type":51,"value":967},". Default: omit ",{"type":45,"tag":60,"props":969,"children":971},{"className":970},[],[972],{"type":51,"value":973},"run_in_background",{"type":51,"value":975}," from worker spawns.",{"type":45,"tag":130,"props":977,"children":978},{},[979,992,994,1000,1002,1008],{"type":45,"tag":222,"props":980,"children":981},{},[982,984,990],{"type":51,"value":983},"\"I'll re-derive the cluster list \u002F paths \u002F pass prefixes inline instead of running ",{"type":45,"tag":60,"props":985,"children":987},{"className":986},[],[988],{"type":51,"value":989},"build_run_plan.py",{"type":51,"value":991},".\"",{"type":51,"value":993}," The script is the only authority for selection and rendering. Paraphrasing it drops fields that the worker self-check requires, producing ",{"type":45,"tag":60,"props":995,"children":997},{"className":996},[],[998],{"type":51,"value":999},"worker-N abort: spawn prompt malformed",{"type":51,"value":1001},". Always run the script and ",{"type":45,"tag":60,"props":1003,"children":1005},{"className":1004},[],[1006],{"type":51,"value":1007},"Read plan.json",{"type":51,"value":707},{"type":45,"tag":130,"props":1010,"children":1011},{},[1012,1024,1026,1032,1034,1039],{"type":45,"tag":222,"props":1013,"children":1014},{},[1015,1017,1022],{"type":51,"value":1016},"\"The run partially succeeded — I'll just write ",{"type":45,"tag":60,"props":1018,"children":1020},{"className":1019},[],[1021],{"type":51,"value":698},{"type":51,"value":1023}," from what completed.\"",{"type":51,"value":1025}," Hiding partial runs behind a successful report is a correctness bug. If any Phase-5 cluster task is not ",{"type":45,"tag":60,"props":1027,"children":1029},{"className":1028},[],[1030],{"type":51,"value":1031},"completed",{"type":51,"value":1033},", surface it prominently in ",{"type":45,"tag":60,"props":1035,"children":1037},{"className":1036},[],[1038],{"type":51,"value":677},{"type":51,"value":1040}," and the final response.",{"type":45,"tag":130,"props":1042,"children":1043},{},[1044,1049,1051,1056,1058,1063,1064,1069,1071,1077],{"type":45,"tag":222,"props":1045,"children":1046},{},[1047],{"type":51,"value":1048},"\"Zero findings — skip Phase 8.\"",{"type":51,"value":1050}," Always run both judges and Phase 8b: dedup-judge writes a minimal no-op ",{"type":45,"tag":60,"props":1052,"children":1054},{"className":1053},[],[1055],{"type":51,"value":684},{"type":51,"value":1057}," on an empty index, fp-judge writes empty ",{"type":45,"tag":60,"props":1059,"children":1061},{"className":1060},[],[1062],{"type":51,"value":698},{"type":51,"value":271},{"type":45,"tag":60,"props":1065,"children":1067},{"className":1066},[],[1068],{"type":51,"value":705},{"type":51,"value":1070},", and Phase 8b's SARIF generator emits ",{"type":45,"tag":60,"props":1072,"children":1074},{"className":1073},[],[1075],{"type":51,"value":1076},"results: []",{"type":51,"value":1078}," for the empty case. SARIF consumers depend on a stable artifact set.",{"type":45,"tag":130,"props":1080,"children":1081},{},[1082,1095,1097,1103,1105,1110,1112,1117,1119,1124],{"type":45,"tag":222,"props":1083,"children":1084},{},[1085,1087,1093],{"type":51,"value":1086},"\"",{"type":45,"tag":60,"props":1088,"children":1090},{"className":1089},[],[1091],{"type":51,"value":1092},"Bash: ls README*",{"type":51,"value":1094}," is fine for the preflight.\"",{"type":51,"value":1096}," Under zsh, an unmatched glob aborts the whole compound command before ",{"type":45,"tag":60,"props":1098,"children":1100},{"className":1099},[],[1101],{"type":51,"value":1102},"2>\u002Fdev\u002Fnull",{"type":51,"value":1104}," runs. Use ",{"type":45,"tag":60,"props":1106,"children":1108},{"className":1107},[],[1109],{"type":51,"value":357},{"type":51,"value":1111}," (never fails on no-match) — and not ",{"type":45,"tag":60,"props":1113,"children":1115},{"className":1114},[],[1116],{"type":51,"value":328},{"type":51,"value":1118},", which is unavailable to an agent that also holds ",{"type":45,"tag":60,"props":1120,"children":1122},{"className":1121},[],[1123],{"type":51,"value":284},{"type":51,"value":707},{"type":45,"tag":595,"props":1126,"children":1127},{},[],{"type":45,"tag":108,"props":1129,"children":1131},{"id":1130},"orchestration-workflow",[1132],{"type":51,"value":1133},"Orchestration Workflow",{"type":45,"tag":54,"props":1135,"children":1136},{},[1137,1139,1144],{"type":51,"value":1138},"Run these phases ",{"type":45,"tag":222,"props":1140,"children":1141},{},[1142],{"type":51,"value":1143},"in the main conversation",{"type":51,"value":707},{"type":45,"tag":1146,"props":1147,"children":1149},"h3",{"id":1148},"phase-0-parameter-collection",[1150],{"type":51,"value":1151},"Phase 0: Parameter Collection",{"type":45,"tag":54,"props":1153,"children":1154},{},[1155,1160,1162,1167,1168,1174,1175,1181,1182,1188,1190,1196,1198,1204,1206,1212,1213,1218],{"type":45,"tag":222,"props":1156,"children":1157},{},[1158],{"type":51,"value":1159},"Entry:",{"type":51,"value":1161}," skill invoked. ",{"type":45,"tag":222,"props":1163,"children":1164},{},[1165],{"type":51,"value":1166},"Exit:",{"type":51,"value":330},{"type":45,"tag":60,"props":1169,"children":1171},{"className":1170},[],[1172],{"type":51,"value":1173},"threat_model",{"type":51,"value":83},{"type":45,"tag":60,"props":1176,"children":1178},{"className":1177},[],[1179],{"type":51,"value":1180},"worker_model",{"type":51,"value":83},{"type":45,"tag":60,"props":1183,"children":1185},{"className":1184},[],[1186],{"type":51,"value":1187},"severity_filter",{"type":51,"value":1189}," resolved; ",{"type":45,"tag":60,"props":1191,"children":1193},{"className":1192},[],[1194],{"type":51,"value":1195},"scope_subpath",{"type":51,"value":1197}," resolved or set to ",{"type":45,"tag":60,"props":1199,"children":1201},{"className":1200},[],[1202],{"type":51,"value":1203},"\".\"",{"type":51,"value":1205},"; ",{"type":45,"tag":60,"props":1207,"children":1209},{"className":1208},[],[1210],{"type":51,"value":1211},"finding_scope_root=scope_subpath",{"type":51,"value":1205},{"type":45,"tag":60,"props":1214,"children":1216},{"className":1215},[],[1217],{"type":51,"value":898},{"type":51,"value":1219}," resolved.",{"type":45,"tag":54,"props":1221,"children":1222},{},[1223,1225,1230,1232,1238,1239,1245,1246,1252,1254,1259,1260,1266],{"type":51,"value":1224},"The skill is invoked directly (no command wrapper). Parse any free-text arguments the user passed on the ",{"type":45,"tag":60,"props":1226,"children":1228},{"className":1227},[],[1229],{"type":51,"value":65},{"type":51,"value":1231}," line (e.g. ",{"type":45,"tag":60,"props":1233,"children":1235},{"className":1234},[],[1236],{"type":51,"value":1237},"flamenco only",{"type":51,"value":83},{"type":45,"tag":60,"props":1240,"children":1242},{"className":1241},[],[1243],{"type":51,"value":1244},"high severity only",{"type":51,"value":83},{"type":45,"tag":60,"props":1247,"children":1249},{"className":1248},[],[1250],{"type":51,"value":1251},"use haiku",{"type":51,"value":1253},") and pre-fill the answers they imply — then ask for any missing required parameters with ",{"type":45,"tag":222,"props":1255,"children":1256},{},[1257],{"type":51,"value":1258},"one",{"type":51,"value":330},{"type":45,"tag":60,"props":1261,"children":1263},{"className":1262},[],[1264],{"type":51,"value":1265},"AskUserQuestion",{"type":51,"value":1267}," call. Never silently default the required parameters.",{"type":45,"tag":54,"props":1269,"children":1270},{},[1271],{"type":51,"value":1272},"Required parameters:",{"type":45,"tag":152,"props":1274,"children":1275},{},[1276,1297],{"type":45,"tag":156,"props":1277,"children":1278},{},[1279],{"type":45,"tag":160,"props":1280,"children":1281},{},[1282,1287,1292],{"type":45,"tag":164,"props":1283,"children":1284},{},[1285],{"type":51,"value":1286},"Parameter",{"type":45,"tag":164,"props":1288,"children":1289},{},[1290],{"type":51,"value":1291},"Values",{"type":45,"tag":164,"props":1293,"children":1294},{},[1295],{"type":51,"value":1296},"How to infer from args",{"type":45,"tag":180,"props":1298,"children":1299},{},[1300,1353,1392,1458],{"type":45,"tag":160,"props":1301,"children":1302},{},[1303,1311,1334],{"type":45,"tag":187,"props":1304,"children":1305},{},[1306],{"type":45,"tag":60,"props":1307,"children":1309},{"className":1308},[],[1310],{"type":51,"value":1173},{"type":45,"tag":187,"props":1312,"children":1313},{},[1314,1320,1321,1327,1328],{"type":45,"tag":60,"props":1315,"children":1317},{"className":1316},[],[1318],{"type":51,"value":1319},"REMOTE",{"type":51,"value":408},{"type":45,"tag":60,"props":1322,"children":1324},{"className":1323},[],[1325],{"type":51,"value":1326},"LOCAL_UNPRIVILEGED",{"type":51,"value":408},{"type":45,"tag":60,"props":1329,"children":1331},{"className":1330},[],[1332],{"type":51,"value":1333},"BOTH",{"type":45,"tag":187,"props":1335,"children":1336},{},[1337,1339,1344,1346,1351],{"type":51,"value":1338},"Words like \"remote\", \"network\", \"attacker\" → ",{"type":45,"tag":60,"props":1340,"children":1342},{"className":1341},[],[1343],{"type":51,"value":1319},{"type":51,"value":1345},"; \"local\", \"unprivileged\" → ",{"type":45,"tag":60,"props":1347,"children":1349},{"className":1348},[],[1350],{"type":51,"value":1326},{"type":51,"value":1352},"; otherwise ask.",{"type":45,"tag":160,"props":1354,"children":1355},{},[1356,1364,1387],{"type":45,"tag":187,"props":1357,"children":1358},{},[1359],{"type":45,"tag":60,"props":1360,"children":1362},{"className":1361},[],[1363],{"type":51,"value":1180},{"type":45,"tag":187,"props":1365,"children":1366},{},[1367,1373,1374,1380,1381],{"type":45,"tag":60,"props":1368,"children":1370},{"className":1369},[],[1371],{"type":51,"value":1372},"haiku",{"type":51,"value":408},{"type":45,"tag":60,"props":1375,"children":1377},{"className":1376},[],[1378],{"type":51,"value":1379},"sonnet",{"type":51,"value":408},{"type":45,"tag":60,"props":1382,"children":1384},{"className":1383},[],[1385],{"type":51,"value":1386},"opus",{"type":45,"tag":187,"props":1388,"children":1389},{},[1390],{"type":51,"value":1391},"Explicit model name in args. Otherwise ask (no silent default).",{"type":45,"tag":160,"props":1393,"children":1394},{},[1395,1403,1426],{"type":45,"tag":187,"props":1396,"children":1397},{},[1398],{"type":45,"tag":60,"props":1399,"children":1401},{"className":1400},[],[1402],{"type":51,"value":1187},{"type":45,"tag":187,"props":1404,"children":1405},{},[1406,1412,1413,1419,1420],{"type":45,"tag":60,"props":1407,"children":1409},{"className":1408},[],[1410],{"type":51,"value":1411},"all",{"type":51,"value":408},{"type":45,"tag":60,"props":1414,"children":1416},{"className":1415},[],[1417],{"type":51,"value":1418},"medium",{"type":51,"value":408},{"type":45,"tag":60,"props":1421,"children":1423},{"className":1422},[],[1424],{"type":51,"value":1425},"high",{"type":45,"tag":187,"props":1427,"children":1428},{},[1429,1431,1436,1438,1443,1445,1450,1452,1457],{"type":51,"value":1430},"\"all\", \"every\", \"noisy\" → ",{"type":45,"tag":60,"props":1432,"children":1434},{"className":1433},[],[1435],{"type":51,"value":1411},{"type":51,"value":1437},"; \"medium and above\" → ",{"type":45,"tag":60,"props":1439,"children":1441},{"className":1440},[],[1442],{"type":51,"value":1418},{"type":51,"value":1444},"; \"high only\", \"criticals only\" → ",{"type":45,"tag":60,"props":1446,"children":1448},{"className":1447},[],[1449],{"type":51,"value":1425},{"type":51,"value":1451},". Otherwise ask — ",{"type":45,"tag":222,"props":1453,"children":1454},{},[1455],{"type":51,"value":1456},"no silent default",{"type":51,"value":707},{"type":45,"tag":160,"props":1459,"children":1460},{},[1461,1469,1474],{"type":45,"tag":187,"props":1462,"children":1463},{},[1464],{"type":45,"tag":60,"props":1465,"children":1467},{"className":1466},[],[1468],{"type":51,"value":1195},{"type":45,"tag":187,"props":1470,"children":1471},{},[1472],{"type":51,"value":1473},"repo-relative directory (optional)",{"type":45,"tag":187,"props":1475,"children":1476},{},[1477,1479,1485,1487,1492],{"type":51,"value":1478},"Phrases like \"X only\", \"just audit X\u002F\", \"review subdirectory X\" → ",{"type":45,"tag":60,"props":1480,"children":1482},{"className":1481},[],[1483],{"type":51,"value":1484},"src\u002FX\u002F",{"type":51,"value":1486}," or the matching subdir. Apply fuzzy matching against top-level subdirectories of the repo. If absent, set ",{"type":45,"tag":60,"props":1488,"children":1490},{"className":1489},[],[1491],{"type":51,"value":1203},{"type":51,"value":1493},"; if ambiguous, ask.",{"type":45,"tag":54,"props":1495,"children":1496},{},[1497,1499,1504,1506,1511,1512,1517,1518,1523,1525,1530],{"type":51,"value":1498},"Call ",{"type":45,"tag":60,"props":1500,"children":1502},{"className":1501},[],[1503],{"type":51,"value":1265},{"type":51,"value":1505}," exactly once with only unresolved required parameters (",{"type":45,"tag":60,"props":1507,"children":1509},{"className":1508},[],[1510],{"type":51,"value":1173},{"type":51,"value":83},{"type":45,"tag":60,"props":1513,"children":1515},{"className":1514},[],[1516],{"type":51,"value":1180},{"type":51,"value":83},{"type":45,"tag":60,"props":1519,"children":1521},{"className":1520},[],[1522],{"type":51,"value":1187},{"type":51,"value":1524},") plus ",{"type":45,"tag":60,"props":1526,"children":1528},{"className":1527},[],[1529],{"type":51,"value":1195},{"type":51,"value":1531}," only when the user explicitly requested a narrowed scope but it is ambiguous. If the required parameters were all pre-filled and scope is absent or resolved, skip the question.",{"type":45,"tag":54,"props":1533,"children":1534},{},[1535,1537,1542,1544,1550,1552,1558,1560,1566],{"type":51,"value":1536},"After resolving ",{"type":45,"tag":60,"props":1538,"children":1540},{"className":1539},[],[1541],{"type":51,"value":1195},{"type":51,"value":1543},", set ",{"type":45,"tag":60,"props":1545,"children":1547},{"className":1546},[],[1548],{"type":51,"value":1549},"finding_scope_root=\"${scope_subpath:-.}\"",{"type":51,"value":1551},". Set ",{"type":45,"tag":60,"props":1553,"children":1555},{"className":1554},[],[1556],{"type":51,"value":1557},"context_roots=\".\"",{"type":51,"value":1559}," by default so workers can verify callers\u002Fbuild settings outside a narrowed subtree without filing out-of-scope findings. If the user explicitly asks to forbid broader context, set ",{"type":45,"tag":60,"props":1561,"children":1563},{"className":1562},[],[1564],{"type":51,"value":1565},"context_roots=\"${finding_scope_root}\"",{"type":51,"value":1567}," and note that reachability confidence may be lower.",{"type":45,"tag":1146,"props":1569,"children":1571},{"id":1570},"phase-1-prerequisites",[1572],{"type":51,"value":1573},"Phase 1: Prerequisites",{"type":45,"tag":54,"props":1575,"children":1576},{},[1577,1581,1583,1587,1588,1594,1595,1601,1602,1608],{"type":45,"tag":222,"props":1578,"children":1579},{},[1580],{"type":51,"value":1159},{"type":51,"value":1582}," Phase 0 complete. ",{"type":45,"tag":222,"props":1584,"children":1585},{},[1586],{"type":51,"value":1166},{"type":51,"value":330},{"type":45,"tag":60,"props":1589,"children":1591},{"className":1590},[],[1592],{"type":51,"value":1593},"is_cpp",{"type":51,"value":83},{"type":45,"tag":60,"props":1596,"children":1598},{"className":1597},[],[1599],{"type":51,"value":1600},"is_posix",{"type":51,"value":83},{"type":45,"tag":60,"props":1603,"children":1605},{"className":1604},[],[1606],{"type":51,"value":1607},"is_windows",{"type":51,"value":1609}," flags determined.",{"type":45,"tag":54,"props":1611,"children":1612},{},[1613,1615,1621,1623,1628,1630,1635,1636,1641,1643,1648,1650,1655,1656,1661,1662,1667,1668,1673,1675,1680,1681,1686,1688,1693,1695,1700,1702,1708,1710,1715,1717,1722,1723,1728,1730,1735],{"type":51,"value":1614},"Probe within ",{"type":45,"tag":60,"props":1616,"children":1618},{"className":1617},[],[1619],{"type":51,"value":1620},"${finding_scope_root:-.}",{"type":51,"value":1622}," with the ",{"type":45,"tag":60,"props":1624,"children":1626},{"className":1625},[],[1627],{"type":51,"value":284},{"type":51,"value":1629}," commands below (non-empty output ⇒ flag true). The dedicated ",{"type":45,"tag":60,"props":1631,"children":1633},{"className":1632},[],[1634],{"type":51,"value":341},{"type":51,"value":271},{"type":45,"tag":60,"props":1637,"children":1639},{"className":1638},[],[1640],{"type":51,"value":328},{"type":51,"value":1642}," tools are unavailable to this orchestrator because it holds ",{"type":45,"tag":60,"props":1644,"children":1646},{"className":1645},[],[1647],{"type":51,"value":284},{"type":51,"value":1649}," — use ",{"type":45,"tag":60,"props":1651,"children":1653},{"className":1652},[],[1654],{"type":51,"value":364},{"type":51,"value":271},{"type":45,"tag":60,"props":1657,"children":1659},{"className":1658},[],[1660],{"type":51,"value":371},{"type":51,"value":271},{"type":45,"tag":60,"props":1663,"children":1665},{"className":1664},[],[1666],{"type":51,"value":357},{"type":51,"value":373},{"type":45,"tag":60,"props":1669,"children":1671},{"className":1670},[],[1672],{"type":51,"value":284},{"type":51,"value":1674},". (If a probe regex uses ",{"type":45,"tag":60,"props":1676,"children":1678},{"className":1677},[],[1679],{"type":51,"value":446},{"type":51,"value":271},{"type":45,"tag":60,"props":1682,"children":1684},{"className":1683},[],[1685],{"type":51,"value":460},{"type":51,"value":1687}," and your ",{"type":45,"tag":60,"props":1689,"children":1691},{"className":1690},[],[1692],{"type":51,"value":364},{"type":51,"value":1694}," lacks GNU ",{"type":45,"tag":60,"props":1696,"children":1698},{"className":1697},[],[1699],{"type":51,"value":446},{"type":51,"value":1701}," support, run it with ",{"type":45,"tag":60,"props":1703,"children":1705},{"className":1704},[],[1706],{"type":51,"value":1707},"rg -uu",{"type":51,"value":1709}," — which honors ",{"type":45,"tag":60,"props":1711,"children":1713},{"className":1712},[],[1714],{"type":51,"value":446},{"type":51,"value":1716}," and still searches ignored files — or replace ",{"type":45,"tag":60,"props":1718,"children":1720},{"className":1719},[],[1721],{"type":51,"value":446},{"type":51,"value":539},{"type":45,"tag":60,"props":1724,"children":1726},{"className":1725},[],[1727],{"type":51,"value":545},{"type":51,"value":1729}," and drop ",{"type":45,"tag":60,"props":1731,"children":1733},{"className":1732},[],[1734],{"type":51,"value":460},{"type":51,"value":1736},". Widening is safe: a false-positive flag only adds a harmless worker, a missed match would skip a pass.):",{"type":45,"tag":605,"props":1738,"children":1742},{"className":1739,"code":1740,"language":1741,"meta":613,"style":613},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","# is_cpp\nfind \"${finding_scope_root:-.}\" -type f \\( -name '*.cpp' -o -name '*.cxx' -o -name '*.cc' -o -name '*.hpp' -o -name '*.hh' \\) -print -quit\n# is_posix\ngrep -rlE '#include[[:space:]]*\u003C(pthread|signal|sys\u002F(socket|stat|types|wait)|unistd|errno)\\.h>' \\\n  --include='*.c' --include='*.h' \\\n  --include='*.cpp' --include='*.cxx' --include='*.cc' --include='*.hpp' --include='*.hh' \\\n  \"${finding_scope_root:-.}\" | head -1\n# is_windows\ngrep -rlE '#include[[:space:]]*\u003C(windows|winbase|winnt|winuser|winsock|ntdef|ntstatus)\\.h>' \\\n  --include='*.c' --include='*.h' \\\n  --include='*.cpp' --include='*.cxx' --include='*.cc' --include='*.hpp' --include='*.hh' \\\n  \"${finding_scope_root:-.}\" | head -1\n","bash",[1743],{"type":45,"tag":60,"props":1744,"children":1745},{"__ignoreMap":613},[1746,1758,1929,1938,1969,2013,2101,2141,2150,2179,2219,2307],{"type":45,"tag":1747,"props":1748,"children":1751},"span",{"class":1749,"line":1750},"line",1,[1752],{"type":45,"tag":1747,"props":1753,"children":1755},{"style":1754},"--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic",[1756],{"type":51,"value":1757},"# is_cpp\n",{"type":45,"tag":1747,"props":1759,"children":1761},{"class":1749,"line":1760},2,[1762,1767,1773,1778,1783,1788,1793,1798,1803,1808,1813,1818,1823,1828,1833,1838,1842,1847,1851,1855,1859,1863,1868,1872,1876,1880,1884,1889,1893,1897,1901,1905,1910,1914,1919,1924],{"type":45,"tag":1747,"props":1763,"children":1765},{"style":1764},"--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B",[1766],{"type":51,"value":357},{"type":45,"tag":1747,"props":1768,"children":1770},{"style":1769},"--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF",[1771],{"type":51,"value":1772}," \"${",{"type":45,"tag":1747,"props":1774,"children":1776},{"style":1775},"--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8",[1777],{"type":51,"value":887},{"type":45,"tag":1747,"props":1779,"children":1780},{"style":1769},[1781],{"type":51,"value":1782},":-",{"type":45,"tag":1747,"props":1784,"children":1786},{"style":1785},"--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D",[1787],{"type":51,"value":707},{"type":45,"tag":1747,"props":1789,"children":1790},{"style":1769},[1791],{"type":51,"value":1792},"}\"",{"type":45,"tag":1747,"props":1794,"children":1795},{"style":1785},[1796],{"type":51,"value":1797}," -type",{"type":45,"tag":1747,"props":1799,"children":1800},{"style":1785},[1801],{"type":51,"value":1802}," f",{"type":45,"tag":1747,"props":1804,"children":1805},{"style":1775},[1806],{"type":51,"value":1807}," \\( ",{"type":45,"tag":1747,"props":1809,"children":1810},{"style":1785},[1811],{"type":51,"value":1812},"-name",{"type":45,"tag":1747,"props":1814,"children":1815},{"style":1769},[1816],{"type":51,"value":1817}," '",{"type":45,"tag":1747,"props":1819,"children":1820},{"style":1785},[1821],{"type":51,"value":1822},"*.cpp",{"type":45,"tag":1747,"props":1824,"children":1825},{"style":1769},[1826],{"type":51,"value":1827},"'",{"type":45,"tag":1747,"props":1829,"children":1830},{"style":1785},[1831],{"type":51,"value":1832}," -o",{"type":45,"tag":1747,"props":1834,"children":1835},{"style":1785},[1836],{"type":51,"value":1837}," -name",{"type":45,"tag":1747,"props":1839,"children":1840},{"style":1769},[1841],{"type":51,"value":1817},{"type":45,"tag":1747,"props":1843,"children":1844},{"style":1785},[1845],{"type":51,"value":1846},"*.cxx",{"type":45,"tag":1747,"props":1848,"children":1849},{"style":1769},[1850],{"type":51,"value":1827},{"type":45,"tag":1747,"props":1852,"children":1853},{"style":1785},[1854],{"type":51,"value":1832},{"type":45,"tag":1747,"props":1856,"children":1857},{"style":1785},[1858],{"type":51,"value":1837},{"type":45,"tag":1747,"props":1860,"children":1861},{"style":1769},[1862],{"type":51,"value":1817},{"type":45,"tag":1747,"props":1864,"children":1865},{"style":1785},[1866],{"type":51,"value":1867},"*.cc",{"type":45,"tag":1747,"props":1869,"children":1870},{"style":1769},[1871],{"type":51,"value":1827},{"type":45,"tag":1747,"props":1873,"children":1874},{"style":1785},[1875],{"type":51,"value":1832},{"type":45,"tag":1747,"props":1877,"children":1878},{"style":1785},[1879],{"type":51,"value":1837},{"type":45,"tag":1747,"props":1881,"children":1882},{"style":1769},[1883],{"type":51,"value":1817},{"type":45,"tag":1747,"props":1885,"children":1886},{"style":1785},[1887],{"type":51,"value":1888},"*.hpp",{"type":45,"tag":1747,"props":1890,"children":1891},{"style":1769},[1892],{"type":51,"value":1827},{"type":45,"tag":1747,"props":1894,"children":1895},{"style":1785},[1896],{"type":51,"value":1832},{"type":45,"tag":1747,"props":1898,"children":1899},{"style":1785},[1900],{"type":51,"value":1837},{"type":45,"tag":1747,"props":1902,"children":1903},{"style":1769},[1904],{"type":51,"value":1817},{"type":45,"tag":1747,"props":1906,"children":1907},{"style":1785},[1908],{"type":51,"value":1909},"*.hh",{"type":45,"tag":1747,"props":1911,"children":1912},{"style":1769},[1913],{"type":51,"value":1827},{"type":45,"tag":1747,"props":1915,"children":1916},{"style":1775},[1917],{"type":51,"value":1918}," \\) ",{"type":45,"tag":1747,"props":1920,"children":1921},{"style":1785},[1922],{"type":51,"value":1923},"-print",{"type":45,"tag":1747,"props":1925,"children":1926},{"style":1785},[1927],{"type":51,"value":1928}," -quit\n",{"type":45,"tag":1747,"props":1930,"children":1932},{"class":1749,"line":1931},3,[1933],{"type":45,"tag":1747,"props":1934,"children":1935},{"style":1754},[1936],{"type":51,"value":1937},"# is_posix\n",{"type":45,"tag":1747,"props":1939,"children":1941},{"class":1749,"line":1940},4,[1942,1946,1951,1955,1960,1964],{"type":45,"tag":1747,"props":1943,"children":1944},{"style":1764},[1945],{"type":51,"value":364},{"type":45,"tag":1747,"props":1947,"children":1948},{"style":1785},[1949],{"type":51,"value":1950}," -rlE",{"type":45,"tag":1747,"props":1952,"children":1953},{"style":1769},[1954],{"type":51,"value":1817},{"type":45,"tag":1747,"props":1956,"children":1957},{"style":1785},[1958],{"type":51,"value":1959},"#include[[:space:]]*\u003C(pthread|signal|sys\u002F(socket|stat|types|wait)|unistd|errno)\\.h>",{"type":45,"tag":1747,"props":1961,"children":1962},{"style":1769},[1963],{"type":51,"value":1827},{"type":45,"tag":1747,"props":1965,"children":1966},{"style":1775},[1967],{"type":51,"value":1968}," \\\n",{"type":45,"tag":1747,"props":1970,"children":1972},{"class":1749,"line":1971},5,[1973,1978,1982,1987,1991,1996,2000,2005,2009],{"type":45,"tag":1747,"props":1974,"children":1975},{"style":1785},[1976],{"type":51,"value":1977},"  --include=",{"type":45,"tag":1747,"props":1979,"children":1980},{"style":1769},[1981],{"type":51,"value":1827},{"type":45,"tag":1747,"props":1983,"children":1984},{"style":1785},[1985],{"type":51,"value":1986},"*.c",{"type":45,"tag":1747,"props":1988,"children":1989},{"style":1769},[1990],{"type":51,"value":1827},{"type":45,"tag":1747,"props":1992,"children":1993},{"style":1785},[1994],{"type":51,"value":1995}," --include=",{"type":45,"tag":1747,"props":1997,"children":1998},{"style":1769},[1999],{"type":51,"value":1827},{"type":45,"tag":1747,"props":2001,"children":2002},{"style":1785},[2003],{"type":51,"value":2004},"*.h",{"type":45,"tag":1747,"props":2006,"children":2007},{"style":1769},[2008],{"type":51,"value":1827},{"type":45,"tag":1747,"props":2010,"children":2011},{"style":1775},[2012],{"type":51,"value":1968},{"type":45,"tag":1747,"props":2014,"children":2016},{"class":1749,"line":2015},6,[2017,2021,2025,2029,2033,2037,2041,2045,2049,2053,2057,2061,2065,2069,2073,2077,2081,2085,2089,2093,2097],{"type":45,"tag":1747,"props":2018,"children":2019},{"style":1785},[2020],{"type":51,"value":1977},{"type":45,"tag":1747,"props":2022,"children":2023},{"style":1769},[2024],{"type":51,"value":1827},{"type":45,"tag":1747,"props":2026,"children":2027},{"style":1785},[2028],{"type":51,"value":1822},{"type":45,"tag":1747,"props":2030,"children":2031},{"style":1769},[2032],{"type":51,"value":1827},{"type":45,"tag":1747,"props":2034,"children":2035},{"style":1785},[2036],{"type":51,"value":1995},{"type":45,"tag":1747,"props":2038,"children":2039},{"style":1769},[2040],{"type":51,"value":1827},{"type":45,"tag":1747,"props":2042,"children":2043},{"style":1785},[2044],{"type":51,"value":1846},{"type":45,"tag":1747,"props":2046,"children":2047},{"style":1769},[2048],{"type":51,"value":1827},{"type":45,"tag":1747,"props":2050,"children":2051},{"style":1785},[2052],{"type":51,"value":1995},{"type":45,"tag":1747,"props":2054,"children":2055},{"style":1769},[2056],{"type":51,"value":1827},{"type":45,"tag":1747,"props":2058,"children":2059},{"style":1785},[2060],{"type":51,"value":1867},{"type":45,"tag":1747,"props":2062,"children":2063},{"style":1769},[2064],{"type":51,"value":1827},{"type":45,"tag":1747,"props":2066,"children":2067},{"style":1785},[2068],{"type":51,"value":1995},{"type":45,"tag":1747,"props":2070,"children":2071},{"style":1769},[2072],{"type":51,"value":1827},{"type":45,"tag":1747,"props":2074,"children":2075},{"style":1785},[2076],{"type":51,"value":1888},{"type":45,"tag":1747,"props":2078,"children":2079},{"style":1769},[2080],{"type":51,"value":1827},{"type":45,"tag":1747,"props":2082,"children":2083},{"style":1785},[2084],{"type":51,"value":1995},{"type":45,"tag":1747,"props":2086,"children":2087},{"style":1769},[2088],{"type":51,"value":1827},{"type":45,"tag":1747,"props":2090,"children":2091},{"style":1785},[2092],{"type":51,"value":1909},{"type":45,"tag":1747,"props":2094,"children":2095},{"style":1769},[2096],{"type":51,"value":1827},{"type":45,"tag":1747,"props":2098,"children":2099},{"style":1775},[2100],{"type":51,"value":1968},{"type":45,"tag":1747,"props":2102,"children":2104},{"class":1749,"line":2103},7,[2105,2110,2114,2118,2122,2126,2131,2136],{"type":45,"tag":1747,"props":2106,"children":2107},{"style":1769},[2108],{"type":51,"value":2109},"  \"${",{"type":45,"tag":1747,"props":2111,"children":2112},{"style":1775},[2113],{"type":51,"value":887},{"type":45,"tag":1747,"props":2115,"children":2116},{"style":1769},[2117],{"type":51,"value":1782},{"type":45,"tag":1747,"props":2119,"children":2120},{"style":1785},[2121],{"type":51,"value":707},{"type":45,"tag":1747,"props":2123,"children":2124},{"style":1769},[2125],{"type":51,"value":1792},{"type":45,"tag":1747,"props":2127,"children":2128},{"style":1769},[2129],{"type":51,"value":2130}," |",{"type":45,"tag":1747,"props":2132,"children":2133},{"style":1764},[2134],{"type":51,"value":2135}," head",{"type":45,"tag":1747,"props":2137,"children":2138},{"style":1785},[2139],{"type":51,"value":2140}," -1\n",{"type":45,"tag":1747,"props":2142,"children":2144},{"class":1749,"line":2143},8,[2145],{"type":45,"tag":1747,"props":2146,"children":2147},{"style":1754},[2148],{"type":51,"value":2149},"# is_windows\n",{"type":45,"tag":1747,"props":2151,"children":2153},{"class":1749,"line":2152},9,[2154,2158,2162,2166,2171,2175],{"type":45,"tag":1747,"props":2155,"children":2156},{"style":1764},[2157],{"type":51,"value":364},{"type":45,"tag":1747,"props":2159,"children":2160},{"style":1785},[2161],{"type":51,"value":1950},{"type":45,"tag":1747,"props":2163,"children":2164},{"style":1769},[2165],{"type":51,"value":1817},{"type":45,"tag":1747,"props":2167,"children":2168},{"style":1785},[2169],{"type":51,"value":2170},"#include[[:space:]]*\u003C(windows|winbase|winnt|winuser|winsock|ntdef|ntstatus)\\.h>",{"type":45,"tag":1747,"props":2172,"children":2173},{"style":1769},[2174],{"type":51,"value":1827},{"type":45,"tag":1747,"props":2176,"children":2177},{"style":1775},[2178],{"type":51,"value":1968},{"type":45,"tag":1747,"props":2180,"children":2182},{"class":1749,"line":2181},10,[2183,2187,2191,2195,2199,2203,2207,2211,2215],{"type":45,"tag":1747,"props":2184,"children":2185},{"style":1785},[2186],{"type":51,"value":1977},{"type":45,"tag":1747,"props":2188,"children":2189},{"style":1769},[2190],{"type":51,"value":1827},{"type":45,"tag":1747,"props":2192,"children":2193},{"style":1785},[2194],{"type":51,"value":1986},{"type":45,"tag":1747,"props":2196,"children":2197},{"style":1769},[2198],{"type":51,"value":1827},{"type":45,"tag":1747,"props":2200,"children":2201},{"style":1785},[2202],{"type":51,"value":1995},{"type":45,"tag":1747,"props":2204,"children":2205},{"style":1769},[2206],{"type":51,"value":1827},{"type":45,"tag":1747,"props":2208,"children":2209},{"style":1785},[2210],{"type":51,"value":2004},{"type":45,"tag":1747,"props":2212,"children":2213},{"style":1769},[2214],{"type":51,"value":1827},{"type":45,"tag":1747,"props":2216,"children":2217},{"style":1775},[2218],{"type":51,"value":1968},{"type":45,"tag":1747,"props":2220,"children":2222},{"class":1749,"line":2221},11,[2223,2227,2231,2235,2239,2243,2247,2251,2255,2259,2263,2267,2271,2275,2279,2283,2287,2291,2295,2299,2303],{"type":45,"tag":1747,"props":2224,"children":2225},{"style":1785},[2226],{"type":51,"value":1977},{"type":45,"tag":1747,"props":2228,"children":2229},{"style":1769},[2230],{"type":51,"value":1827},{"type":45,"tag":1747,"props":2232,"children":2233},{"style":1785},[2234],{"type":51,"value":1822},{"type":45,"tag":1747,"props":2236,"children":2237},{"style":1769},[2238],{"type":51,"value":1827},{"type":45,"tag":1747,"props":2240,"children":2241},{"style":1785},[2242],{"type":51,"value":1995},{"type":45,"tag":1747,"props":2244,"children":2245},{"style":1769},[2246],{"type":51,"value":1827},{"type":45,"tag":1747,"props":2248,"children":2249},{"style":1785},[2250],{"type":51,"value":1846},{"type":45,"tag":1747,"props":2252,"children":2253},{"style":1769},[2254],{"type":51,"value":1827},{"type":45,"tag":1747,"props":2256,"children":2257},{"style":1785},[2258],{"type":51,"value":1995},{"type":45,"tag":1747,"props":2260,"children":2261},{"style":1769},[2262],{"type":51,"value":1827},{"type":45,"tag":1747,"props":2264,"children":2265},{"style":1785},[2266],{"type":51,"value":1867},{"type":45,"tag":1747,"props":2268,"children":2269},{"style":1769},[2270],{"type":51,"value":1827},{"type":45,"tag":1747,"props":2272,"children":2273},{"style":1785},[2274],{"type":51,"value":1995},{"type":45,"tag":1747,"props":2276,"children":2277},{"style":1769},[2278],{"type":51,"value":1827},{"type":45,"tag":1747,"props":2280,"children":2281},{"style":1785},[2282],{"type":51,"value":1888},{"type":45,"tag":1747,"props":2284,"children":2285},{"style":1769},[2286],{"type":51,"value":1827},{"type":45,"tag":1747,"props":2288,"children":2289},{"style":1785},[2290],{"type":51,"value":1995},{"type":45,"tag":1747,"props":2292,"children":2293},{"style":1769},[2294],{"type":51,"value":1827},{"type":45,"tag":1747,"props":2296,"children":2297},{"style":1785},[2298],{"type":51,"value":1909},{"type":45,"tag":1747,"props":2300,"children":2301},{"style":1769},[2302],{"type":51,"value":1827},{"type":45,"tag":1747,"props":2304,"children":2305},{"style":1775},[2306],{"type":51,"value":1968},{"type":45,"tag":1747,"props":2308,"children":2310},{"class":1749,"line":2309},12,[2311,2315,2319,2323,2327,2331,2335,2339],{"type":45,"tag":1747,"props":2312,"children":2313},{"style":1769},[2314],{"type":51,"value":2109},{"type":45,"tag":1747,"props":2316,"children":2317},{"style":1775},[2318],{"type":51,"value":887},{"type":45,"tag":1747,"props":2320,"children":2321},{"style":1769},[2322],{"type":51,"value":1782},{"type":45,"tag":1747,"props":2324,"children":2325},{"style":1785},[2326],{"type":51,"value":707},{"type":45,"tag":1747,"props":2328,"children":2329},{"style":1769},[2330],{"type":51,"value":1792},{"type":45,"tag":1747,"props":2332,"children":2333},{"style":1769},[2334],{"type":51,"value":2130},{"type":45,"tag":1747,"props":2336,"children":2337},{"style":1764},[2338],{"type":51,"value":2135},{"type":45,"tag":1747,"props":2340,"children":2341},{"style":1785},[2342],{"type":51,"value":2140},{"type":45,"tag":54,"props":2344,"children":2345},{},[2346,2352,2354,2360,2362,2368,2370,2375],{"type":45,"tag":60,"props":2347,"children":2349},{"className":2348},[],[2350],{"type":51,"value":2351},"compile_commands.json",{"type":51,"value":2353}," is informational (no agent currently uses LSP), but the probe is mandatory so the run summary records whether richer local tooling is available. Probe via ",{"type":45,"tag":60,"props":2355,"children":2357},{"className":2356},[],[2358],{"type":51,"value":2359},"Glob: **\u002Fcompile_commands.json",{"type":51,"value":2361}," under ",{"type":45,"tag":60,"props":2363,"children":2365},{"className":2364},[],[2366],{"type":51,"value":2367},"${context_roots}",{"type":51,"value":2369},". If ",{"type":45,"tag":60,"props":2371,"children":2373},{"className":2372},[],[2374],{"type":51,"value":328},{"type":51,"value":2376}," is unavailable, use:",{"type":45,"tag":605,"props":2378,"children":2380},{"className":1739,"code":2379,"language":1741,"meta":613,"style":613},"printf '%s\\n' \"${context_roots:-.}\" | tr ',' '\\n' | while IFS= read -r root; do\n  [ -n \"$root\" ] && find \"$root\" -name compile_commands.json -print -quit\ndone | head -1\n# `find \"$root\"` is quoted intentionally so a context root containing spaces\n# (e.g. \"\u002FUsers\u002Fme\u002FMy Repo\") survives word-splitting. Do not unquote it.\n",[2381],{"type":45,"tag":60,"props":2382,"children":2383},{"__ignoreMap":613},[2384,2506,2578,2598,2606],{"type":45,"tag":1747,"props":2385,"children":2386},{"class":1749,"line":1750},[2387,2393,2397,2402,2406,2410,2414,2418,2422,2426,2430,2435,2439,2444,2448,2452,2457,2461,2465,2471,2476,2481,2486,2491,2496,2501],{"type":45,"tag":1747,"props":2388,"children":2390},{"style":2389},"--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF",[2391],{"type":51,"value":2392},"printf",{"type":45,"tag":1747,"props":2394,"children":2395},{"style":1769},[2396],{"type":51,"value":1817},{"type":45,"tag":1747,"props":2398,"children":2399},{"style":1785},[2400],{"type":51,"value":2401},"%s\\n",{"type":45,"tag":1747,"props":2403,"children":2404},{"style":1769},[2405],{"type":51,"value":1827},{"type":45,"tag":1747,"props":2407,"children":2408},{"style":1769},[2409],{"type":51,"value":1772},{"type":45,"tag":1747,"props":2411,"children":2412},{"style":1775},[2413],{"type":51,"value":898},{"type":45,"tag":1747,"props":2415,"children":2416},{"style":1769},[2417],{"type":51,"value":1782},{"type":45,"tag":1747,"props":2419,"children":2420},{"style":1785},[2421],{"type":51,"value":707},{"type":45,"tag":1747,"props":2423,"children":2424},{"style":1769},[2425],{"type":51,"value":1792},{"type":45,"tag":1747,"props":2427,"children":2428},{"style":1769},[2429],{"type":51,"value":2130},{"type":45,"tag":1747,"props":2431,"children":2432},{"style":1764},[2433],{"type":51,"value":2434}," tr",{"type":45,"tag":1747,"props":2436,"children":2437},{"style":1769},[2438],{"type":51,"value":1817},{"type":45,"tag":1747,"props":2440,"children":2441},{"style":1785},[2442],{"type":51,"value":2443},",",{"type":45,"tag":1747,"props":2445,"children":2446},{"style":1769},[2447],{"type":51,"value":1827},{"type":45,"tag":1747,"props":2449,"children":2450},{"style":1769},[2451],{"type":51,"value":1817},{"type":45,"tag":1747,"props":2453,"children":2454},{"style":1785},[2455],{"type":51,"value":2456},"\\n",{"type":45,"tag":1747,"props":2458,"children":2459},{"style":1769},[2460],{"type":51,"value":1827},{"type":45,"tag":1747,"props":2462,"children":2463},{"style":1769},[2464],{"type":51,"value":2130},{"type":45,"tag":1747,"props":2466,"children":2468},{"style":2467},"--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic",[2469],{"type":51,"value":2470}," while",{"type":45,"tag":1747,"props":2472,"children":2473},{"style":1775},[2474],{"type":51,"value":2475}," IFS",{"type":45,"tag":1747,"props":2477,"children":2478},{"style":1769},[2479],{"type":51,"value":2480},"=",{"type":45,"tag":1747,"props":2482,"children":2483},{"style":2389},[2484],{"type":51,"value":2485}," read",{"type":45,"tag":1747,"props":2487,"children":2488},{"style":1785},[2489],{"type":51,"value":2490}," -r",{"type":45,"tag":1747,"props":2492,"children":2493},{"style":1785},[2494],{"type":51,"value":2495}," root",{"type":45,"tag":1747,"props":2497,"children":2498},{"style":1769},[2499],{"type":51,"value":2500},";",{"type":45,"tag":1747,"props":2502,"children":2503},{"style":2467},[2504],{"type":51,"value":2505}," do\n",{"type":45,"tag":1747,"props":2507,"children":2508},{"class":1749,"line":1760},[2509,2514,2519,2524,2529,2533,2538,2543,2548,2552,2556,2560,2564,2569,2574],{"type":45,"tag":1747,"props":2510,"children":2511},{"style":1769},[2512],{"type":51,"value":2513},"  [",{"type":45,"tag":1747,"props":2515,"children":2516},{"style":1769},[2517],{"type":51,"value":2518}," -n",{"type":45,"tag":1747,"props":2520,"children":2521},{"style":1769},[2522],{"type":51,"value":2523}," \"",{"type":45,"tag":1747,"props":2525,"children":2526},{"style":1775},[2527],{"type":51,"value":2528},"$root",{"type":45,"tag":1747,"props":2530,"children":2531},{"style":1769},[2532],{"type":51,"value":1086},{"type":45,"tag":1747,"props":2534,"children":2535},{"style":1769},[2536],{"type":51,"value":2537}," ]",{"type":45,"tag":1747,"props":2539,"children":2540},{"style":1769},[2541],{"type":51,"value":2542}," &&",{"type":45,"tag":1747,"props":2544,"children":2545},{"style":1764},[2546],{"type":51,"value":2547}," find",{"type":45,"tag":1747,"props":2549,"children":2550},{"style":1769},[2551],{"type":51,"value":2523},{"type":45,"tag":1747,"props":2553,"children":2554},{"style":1775},[2555],{"type":51,"value":2528},{"type":45,"tag":1747,"props":2557,"children":2558},{"style":1769},[2559],{"type":51,"value":1086},{"type":45,"tag":1747,"props":2561,"children":2562},{"style":1785},[2563],{"type":51,"value":1837},{"type":45,"tag":1747,"props":2565,"children":2566},{"style":1785},[2567],{"type":51,"value":2568}," compile_commands.json",{"type":45,"tag":1747,"props":2570,"children":2571},{"style":1785},[2572],{"type":51,"value":2573}," -print",{"type":45,"tag":1747,"props":2575,"children":2576},{"style":1785},[2577],{"type":51,"value":1928},{"type":45,"tag":1747,"props":2579,"children":2580},{"class":1749,"line":1931},[2581,2586,2590,2594],{"type":45,"tag":1747,"props":2582,"children":2583},{"style":2467},[2584],{"type":51,"value":2585},"done",{"type":45,"tag":1747,"props":2587,"children":2588},{"style":1769},[2589],{"type":51,"value":2130},{"type":45,"tag":1747,"props":2591,"children":2592},{"style":1764},[2593],{"type":51,"value":2135},{"type":45,"tag":1747,"props":2595,"children":2596},{"style":1785},[2597],{"type":51,"value":2140},{"type":45,"tag":1747,"props":2599,"children":2600},{"class":1749,"line":1940},[2601],{"type":45,"tag":1747,"props":2602,"children":2603},{"style":1754},[2604],{"type":51,"value":2605},"# `find \"$root\"` is quoted intentionally so a context root containing spaces\n",{"type":45,"tag":1747,"props":2607,"children":2608},{"class":1749,"line":1971},[2609],{"type":45,"tag":1747,"props":2610,"children":2611},{"style":1754},[2612],{"type":51,"value":2613},"# (e.g. \"\u002FUsers\u002Fme\u002FMy Repo\") survives word-splitting. Do not unquote it.\n",{"type":45,"tag":54,"props":2615,"children":2616},{},[2617,2619,2625],{"type":51,"value":2618},"If absent, suggest CMake ",{"type":45,"tag":60,"props":2620,"children":2622},{"className":2621},[],[2623],{"type":51,"value":2624},"-DCMAKE_EXPORT_COMPILE_COMMANDS=ON",{"type":51,"value":2626},"\u002FBear\u002Fcompiledb to the user but continue.",{"type":45,"tag":1146,"props":2628,"children":2630},{"id":2629},"phase-2-output-directory",[2631],{"type":51,"value":2632},"Phase 2: Output Directory",{"type":45,"tag":54,"props":2634,"children":2635},{},[2636,2640,2642,2646,2648,2654,2655,2661,2663,2669],{"type":45,"tag":222,"props":2637,"children":2638},{},[2639],{"type":51,"value":1159},{"type":51,"value":2641}," Phase 1 flags set. ",{"type":45,"tag":222,"props":2643,"children":2644},{},[2645],{"type":51,"value":1166},{"type":51,"value":2647}," absolute ",{"type":45,"tag":60,"props":2649,"children":2651},{"className":2650},[],[2652],{"type":51,"value":2653},"output_dir",{"type":51,"value":1189},{"type":45,"tag":60,"props":2656,"children":2658},{"className":2657},[],[2659],{"type":51,"value":2660},"${output_dir}\u002Ffindings\u002F",{"type":51,"value":2662}," and ",{"type":45,"tag":60,"props":2664,"children":2666},{"className":2665},[],[2667],{"type":51,"value":2668},"${output_dir}\u002Fcoverage\u002F",{"type":51,"value":2670}," exist.",{"type":45,"tag":54,"props":2672,"children":2673},{},[2674,2676,2681,2683,2689],{"type":51,"value":2675},"Resolve an absolute path for ",{"type":45,"tag":60,"props":2677,"children":2679},{"className":2678},[],[2680],{"type":51,"value":2653},{"type":51,"value":2682}," (default: ",{"type":45,"tag":60,"props":2684,"children":2686},{"className":2685},[],[2687],{"type":51,"value":2688},"$(pwd)\u002F.c-review-results\u002F$(date -u +%Y%m%dT%H%M%SZ)\u002F",{"type":51,"value":2690},"):",{"type":45,"tag":605,"props":2692,"children":2694},{"className":1739,"code":2693,"language":1741,"meta":613,"style":613},"mkdir -p \"${output_dir}\u002Ffindings\" \"${output_dir}\u002Fcoverage\"\n",[2695],{"type":45,"tag":60,"props":2696,"children":2697},{"__ignoreMap":613},[2698],{"type":45,"tag":1747,"props":2699,"children":2700},{"class":1749,"line":1750},[2701,2706,2711,2715,2719,2724,2729,2733,2737,2741,2745,2750],{"type":45,"tag":1747,"props":2702,"children":2703},{"style":1764},[2704],{"type":51,"value":2705},"mkdir",{"type":45,"tag":1747,"props":2707,"children":2708},{"style":1785},[2709],{"type":51,"value":2710}," -p",{"type":45,"tag":1747,"props":2712,"children":2713},{"style":1769},[2714],{"type":51,"value":1772},{"type":45,"tag":1747,"props":2716,"children":2717},{"style":1775},[2718],{"type":51,"value":2653},{"type":45,"tag":1747,"props":2720,"children":2721},{"style":1769},[2722],{"type":51,"value":2723},"}",{"type":45,"tag":1747,"props":2725,"children":2726},{"style":1785},[2727],{"type":51,"value":2728},"\u002Ffindings",{"type":45,"tag":1747,"props":2730,"children":2731},{"style":1769},[2732],{"type":51,"value":1086},{"type":45,"tag":1747,"props":2734,"children":2735},{"style":1769},[2736],{"type":51,"value":1772},{"type":45,"tag":1747,"props":2738,"children":2739},{"style":1775},[2740],{"type":51,"value":2653},{"type":45,"tag":1747,"props":2742,"children":2743},{"style":1769},[2744],{"type":51,"value":2723},{"type":45,"tag":1747,"props":2746,"children":2747},{"style":1785},[2748],{"type":51,"value":2749},"\u002Fcoverage",{"type":45,"tag":1747,"props":2751,"children":2752},{"style":1769},[2753],{"type":51,"value":2754},"\"\n",{"type":45,"tag":54,"props":2756,"children":2757},{},[2758,2760,2765,2767,2773,2775,2781],{"type":51,"value":2759},"The ",{"type":45,"tag":60,"props":2761,"children":2763},{"className":2762},[],[2764],{"type":51,"value":669},{"type":51,"value":2766}," subdirectory holds per-worker coverage-gate audit files (",{"type":45,"tag":60,"props":2768,"children":2770},{"className":2769},[],[2771],{"type":51,"value":2772},"coverage\u002Fworker-{N}.md",{"type":51,"value":2774},"). Workers write to it instead of embedding the table in their reply — see ",{"type":45,"tag":60,"props":2776,"children":2778},{"className":2777},[],[2779],{"type":51,"value":2780},"agents\u002Fc-review-worker.md",{"type":51,"value":2782}," step 5.",{"type":45,"tag":1146,"props":2784,"children":2786},{"id":2785},"phase-3-codebase-context",[2787],{"type":51,"value":2788},"Phase 3: Codebase Context",{"type":45,"tag":54,"props":2790,"children":2791},{},[2792,2796,2797,2803,2805,2809,2810,2816],{"type":45,"tag":222,"props":2793,"children":2794},{},[2795],{"type":51,"value":1159},{"type":51,"value":330},{"type":45,"tag":60,"props":2798,"children":2800},{"className":2799},[],[2801],{"type":51,"value":2802},"${output_dir}",{"type":51,"value":2804}," exists. ",{"type":45,"tag":222,"props":2806,"children":2807},{},[2808],{"type":51,"value":1166},{"type":51,"value":330},{"type":45,"tag":60,"props":2811,"children":2813},{"className":2812},[],[2814],{"type":51,"value":2815},"${output_dir}\u002Fcontext.md",{"type":51,"value":2817}," written.",{"type":45,"tag":54,"props":2819,"children":2820},{},[2821,2823,2829,2831,2837,2838,2844,2845,2851,2852,2858,2860,2865,2867,2872,2874,2879,2881,2886,2888,2893,2895,2900,2902,2906,2908,2913,2915,2920,2922,2928,2930,2936,2938,2944],{"type":51,"value":2822},"Skim ",{"type":45,"tag":60,"props":2824,"children":2826},{"className":2825},[],[2827],{"type":51,"value":2828},"README.{md,rst,txt}",{"type":51,"value":2830}," and any build file (",{"type":45,"tag":60,"props":2832,"children":2834},{"className":2833},[],[2835],{"type":51,"value":2836},"Makefile",{"type":51,"value":83},{"type":45,"tag":60,"props":2839,"children":2841},{"className":2840},[],[2842],{"type":51,"value":2843},"CMakeLists.txt",{"type":51,"value":83},{"type":45,"tag":60,"props":2846,"children":2848},{"className":2847},[],[2849],{"type":51,"value":2850},"meson.build",{"type":51,"value":83},{"type":45,"tag":60,"props":2853,"children":2855},{"className":2854},[],[2856],{"type":51,"value":2857},"configure.ac",{"type":51,"value":2859},") — preflight with ",{"type":45,"tag":60,"props":2861,"children":2863},{"className":2862},[],[2864],{"type":51,"value":357},{"type":51,"value":2866}," (via ",{"type":45,"tag":60,"props":2868,"children":2870},{"className":2869},[],[2871],{"type":51,"value":284},{"type":51,"value":2873},") before any ",{"type":45,"tag":60,"props":2875,"children":2877},{"className":2876},[],[2878],{"type":51,"value":406},{"type":51,"value":2880}," (a ",{"type":45,"tag":60,"props":2882,"children":2884},{"className":2883},[],[2885],{"type":51,"value":406},{"type":51,"value":2887}," on a missing file aborts the turn; ",{"type":45,"tag":60,"props":2889,"children":2891},{"className":2890},[],[2892],{"type":51,"value":328},{"type":51,"value":2894}," is unavailable to this orchestrator because it holds ",{"type":45,"tag":60,"props":2896,"children":2898},{"className":2897},[],[2899],{"type":51,"value":284},{"type":51,"value":2901},"). Do ",{"type":45,"tag":222,"props":2903,"children":2904},{},[2905],{"type":51,"value":320},{"type":51,"value":2907}," use ",{"type":45,"tag":60,"props":2909,"children":2911},{"className":2910},[],[2912],{"type":51,"value":1092},{"type":51,"value":2914}," for the preflight: under zsh, an unmatched glob aborts the whole compound command before ",{"type":45,"tag":60,"props":2916,"children":2918},{"className":2917},[],[2919],{"type":51,"value":1102},{"type":51,"value":2921}," runs (observed: a Phase-3 ",{"type":45,"tag":60,"props":2923,"children":2925},{"className":2924},[],[2926],{"type":51,"value":2927},"ls src\u002FX\u002FREADME*",{"type":51,"value":2929}," call failed with ",{"type":45,"tag":60,"props":2931,"children":2933},{"className":2932},[],[2934],{"type":51,"value":2935},"no matches found",{"type":51,"value":2937}," and dropped the entire preflight). Use ",{"type":45,"tag":60,"props":2939,"children":2941},{"className":2940},[],[2942],{"type":51,"value":2943},"find . -maxdepth 2 -name 'README*' -o -name 'Makefile' -o -name 'CMakeLists.txt' -o -name 'meson.build'",{"type":51,"value":2945},", which never fails on no-match.",{"type":45,"tag":54,"props":2947,"children":2948},{},[2949,2951,2956,2958,2963,2964,2969,2970,2975,2976,2981,2982,2987,2988,2993,2994,2999,3000,3005,3006,3011,3012,3018,3020,3026,3027,3033,3035,3039,3041,3046,3048,3053,3055,3060,3062,3067,3069,3074],{"type":51,"value":2950},"Write ",{"type":45,"tag":60,"props":2952,"children":2954},{"className":2953},[],[2955],{"type":51,"value":2815},{"type":51,"value":2957}," with: YAML frontmatter (",{"type":45,"tag":60,"props":2959,"children":2961},{"className":2960},[],[2962],{"type":51,"value":1173},{"type":51,"value":83},{"type":45,"tag":60,"props":2965,"children":2967},{"className":2966},[],[2968],{"type":51,"value":1187},{"type":51,"value":83},{"type":45,"tag":60,"props":2971,"children":2973},{"className":2972},[],[2974],{"type":51,"value":1195},{"type":51,"value":83},{"type":45,"tag":60,"props":2977,"children":2979},{"className":2978},[],[2980],{"type":51,"value":887},{"type":51,"value":83},{"type":45,"tag":60,"props":2983,"children":2985},{"className":2984},[],[2986],{"type":51,"value":898},{"type":51,"value":83},{"type":45,"tag":60,"props":2989,"children":2991},{"className":2990},[],[2992],{"type":51,"value":1593},{"type":51,"value":83},{"type":45,"tag":60,"props":2995,"children":2997},{"className":2996},[],[2998],{"type":51,"value":1600},{"type":51,"value":83},{"type":45,"tag":60,"props":3001,"children":3003},{"className":3002},[],[3004],{"type":51,"value":1607},{"type":51,"value":83},{"type":45,"tag":60,"props":3007,"children":3009},{"className":3008},[],[3010],{"type":51,"value":2653},{"type":51,"value":83},{"type":45,"tag":60,"props":3013,"children":3015},{"className":3014},[],[3016],{"type":51,"value":3017},"compile_commands",{"type":51,"value":3019}," as ",{"type":45,"tag":60,"props":3021,"children":3023},{"className":3022},[],[3024],{"type":51,"value":3025},"present",{"type":51,"value":271},{"type":45,"tag":60,"props":3028,"children":3030},{"className":3029},[],[3031],{"type":51,"value":3032},"absent",{"type":51,"value":3034}," plus path when present), then a short markdown body with five sections — ",{"type":45,"tag":222,"props":3036,"children":3037},{},[3038],{"type":51,"value":173},{"type":51,"value":3040}," (1-3 sentences), ",{"type":45,"tag":222,"props":3042,"children":3043},{},[3044],{"type":51,"value":3045},"Scope",{"type":51,"value":3047}," (what's in ",{"type":45,"tag":60,"props":3049,"children":3051},{"className":3050},[],[3052],{"type":51,"value":887},{"type":51,"value":3054},", and that findings outside it are out of scope), ",{"type":45,"tag":222,"props":3056,"children":3057},{},[3058],{"type":51,"value":3059},"Entry points",{"type":51,"value":3061}," (where untrusted data enters: network, files, CLI, IPC), ",{"type":45,"tag":222,"props":3063,"children":3064},{},[3065],{"type":51,"value":3066},"Trust boundaries",{"type":51,"value":3068}," (sandboxed vs trusted peers vs arbitrary remote), ",{"type":45,"tag":222,"props":3070,"children":3071},{},[3072],{"type":51,"value":3073},"Existing hardening",{"type":51,"value":3075}," (fuzzing corpora, sanitizers, privilege separation).",{"type":45,"tag":1146,"props":3077,"children":3079},{"id":3078},"phase-4-build-run-plan-deterministic",[3080],{"type":51,"value":3081},"Phase 4: Build Run Plan (deterministic)",{"type":45,"tag":54,"props":3083,"children":3084},{},[3085,3089,3091,3096,3098,3103,3104,3108,3109,3115,3116,3122,3124,3130],{"type":45,"tag":222,"props":3086,"children":3087},{},[3088],{"type":51,"value":1159},{"type":51,"value":3090}," language flags + ",{"type":45,"tag":60,"props":3092,"children":3094},{"className":3093},[],[3095],{"type":51,"value":1173},{"type":51,"value":3097}," known; ",{"type":45,"tag":60,"props":3099,"children":3101},{"className":3100},[],[3102],{"type":51,"value":2660},{"type":51,"value":2804},{"type":45,"tag":222,"props":3105,"children":3106},{},[3107],{"type":51,"value":1166},{"type":51,"value":330},{"type":45,"tag":60,"props":3110,"children":3112},{"className":3111},[],[3113],{"type":51,"value":3114},"${output_dir}\u002Fplan.json",{"type":51,"value":2662},{"type":45,"tag":60,"props":3117,"children":3119},{"className":3118},[],[3120],{"type":51,"value":3121},"${output_dir}\u002Fworker-prompts\u002F*.txt",{"type":51,"value":3123}," written; ",{"type":45,"tag":60,"props":3125,"children":3127},{"className":3126},[],[3128],{"type":51,"value":3129},"M = worker_count",{"type":51,"value":3131}," known.",{"type":45,"tag":54,"props":3133,"children":3134},{},[3135,3137,3142],{"type":51,"value":3136},"Selection, filtering, path resolution, and spawn-prompt rendering are ",{"type":45,"tag":222,"props":3138,"children":3139},{},[3140],{"type":51,"value":3141},"delegated to the script",{"type":51,"value":3143}," to prevent the \"orchestrator paraphrases the spawn template and drops fields\" failure mode:",{"type":45,"tag":605,"props":3145,"children":3147},{"className":1739,"code":3146,"language":1741,"meta":613,"style":613},"python3 \"${C_REVIEW_PLUGIN_ROOT}\u002Fscripts\u002Fbuild_run_plan.py\" \\\n  --plugin-root \"${C_REVIEW_PLUGIN_ROOT}\" --output-dir \"${output_dir}\" \\\n  --threat-model \"${threat_model}\" --severity-filter \"${severity_filter}\" \\\n  --scope-subpath \"${finding_scope_root:-.}\" --context-roots \"${context_roots:-.}\" \\\n  --is-cpp \"${is_cpp}\" --is-posix \"${is_posix}\" --is-windows \"${is_windows}\" \\\n  --max-passes-per-worker 4\n",[3148],{"type":45,"tag":60,"props":3149,"children":3150},{"__ignoreMap":613},[3151,3184,3225,3266,3323,3381],{"type":45,"tag":1747,"props":3152,"children":3153},{"class":1749,"line":1750},[3154,3159,3163,3167,3171,3176,3180],{"type":45,"tag":1747,"props":3155,"children":3156},{"style":1764},[3157],{"type":51,"value":3158},"python3",{"type":45,"tag":1747,"props":3160,"children":3161},{"style":1769},[3162],{"type":51,"value":1772},{"type":45,"tag":1747,"props":3164,"children":3165},{"style":1775},[3166],{"type":51,"value":848},{"type":45,"tag":1747,"props":3168,"children":3169},{"style":1769},[3170],{"type":51,"value":2723},{"type":45,"tag":1747,"props":3172,"children":3173},{"style":1785},[3174],{"type":51,"value":3175},"\u002Fscripts\u002Fbuild_run_plan.py",{"type":45,"tag":1747,"props":3177,"children":3178},{"style":1769},[3179],{"type":51,"value":1086},{"type":45,"tag":1747,"props":3181,"children":3182},{"style":1775},[3183],{"type":51,"value":1968},{"type":45,"tag":1747,"props":3185,"children":3186},{"class":1749,"line":1760},[3187,3192,3196,3200,3204,3209,3213,3217,3221],{"type":45,"tag":1747,"props":3188,"children":3189},{"style":1785},[3190],{"type":51,"value":3191},"  --plugin-root",{"type":45,"tag":1747,"props":3193,"children":3194},{"style":1769},[3195],{"type":51,"value":1772},{"type":45,"tag":1747,"props":3197,"children":3198},{"style":1775},[3199],{"type":51,"value":848},{"type":45,"tag":1747,"props":3201,"children":3202},{"style":1769},[3203],{"type":51,"value":1792},{"type":45,"tag":1747,"props":3205,"children":3206},{"style":1785},[3207],{"type":51,"value":3208}," --output-dir",{"type":45,"tag":1747,"props":3210,"children":3211},{"style":1769},[3212],{"type":51,"value":1772},{"type":45,"tag":1747,"props":3214,"children":3215},{"style":1775},[3216],{"type":51,"value":2653},{"type":45,"tag":1747,"props":3218,"children":3219},{"style":1769},[3220],{"type":51,"value":1792},{"type":45,"tag":1747,"props":3222,"children":3223},{"style":1775},[3224],{"type":51,"value":1968},{"type":45,"tag":1747,"props":3226,"children":3227},{"class":1749,"line":1931},[3228,3233,3237,3241,3245,3250,3254,3258,3262],{"type":45,"tag":1747,"props":3229,"children":3230},{"style":1785},[3231],{"type":51,"value":3232},"  --threat-model",{"type":45,"tag":1747,"props":3234,"children":3235},{"style":1769},[3236],{"type":51,"value":1772},{"type":45,"tag":1747,"props":3238,"children":3239},{"style":1775},[3240],{"type":51,"value":1173},{"type":45,"tag":1747,"props":3242,"children":3243},{"style":1769},[3244],{"type":51,"value":1792},{"type":45,"tag":1747,"props":3246,"children":3247},{"style":1785},[3248],{"type":51,"value":3249}," --severity-filter",{"type":45,"tag":1747,"props":3251,"children":3252},{"style":1769},[3253],{"type":51,"value":1772},{"type":45,"tag":1747,"props":3255,"children":3256},{"style":1775},[3257],{"type":51,"value":1187},{"type":45,"tag":1747,"props":3259,"children":3260},{"style":1769},[3261],{"type":51,"value":1792},{"type":45,"tag":1747,"props":3263,"children":3264},{"style":1775},[3265],{"type":51,"value":1968},{"type":45,"tag":1747,"props":3267,"children":3268},{"class":1749,"line":1940},[3269,3274,3278,3282,3286,3290,3294,3299,3303,3307,3311,3315,3319],{"type":45,"tag":1747,"props":3270,"children":3271},{"style":1785},[3272],{"type":51,"value":3273},"  --scope-subpath",{"type":45,"tag":1747,"props":3275,"children":3276},{"style":1769},[3277],{"type":51,"value":1772},{"type":45,"tag":1747,"props":3279,"children":3280},{"style":1775},[3281],{"type":51,"value":887},{"type":45,"tag":1747,"props":3283,"children":3284},{"style":1769},[3285],{"type":51,"value":1782},{"type":45,"tag":1747,"props":3287,"children":3288},{"style":1785},[3289],{"type":51,"value":707},{"type":45,"tag":1747,"props":3291,"children":3292},{"style":1769},[3293],{"type":51,"value":1792},{"type":45,"tag":1747,"props":3295,"children":3296},{"style":1785},[3297],{"type":51,"value":3298}," --context-roots",{"type":45,"tag":1747,"props":3300,"children":3301},{"style":1769},[3302],{"type":51,"value":1772},{"type":45,"tag":1747,"props":3304,"children":3305},{"style":1775},[3306],{"type":51,"value":898},{"type":45,"tag":1747,"props":3308,"children":3309},{"style":1769},[3310],{"type":51,"value":1782},{"type":45,"tag":1747,"props":3312,"children":3313},{"style":1785},[3314],{"type":51,"value":707},{"type":45,"tag":1747,"props":3316,"children":3317},{"style":1769},[3318],{"type":51,"value":1792},{"type":45,"tag":1747,"props":3320,"children":3321},{"style":1775},[3322],{"type":51,"value":1968},{"type":45,"tag":1747,"props":3324,"children":3325},{"class":1749,"line":1971},[3326,3331,3335,3339,3343,3348,3352,3356,3360,3365,3369,3373,3377],{"type":45,"tag":1747,"props":3327,"children":3328},{"style":1785},[3329],{"type":51,"value":3330},"  --is-cpp",{"type":45,"tag":1747,"props":3332,"children":3333},{"style":1769},[3334],{"type":51,"value":1772},{"type":45,"tag":1747,"props":3336,"children":3337},{"style":1775},[3338],{"type":51,"value":1593},{"type":45,"tag":1747,"props":3340,"children":3341},{"style":1769},[3342],{"type":51,"value":1792},{"type":45,"tag":1747,"props":3344,"children":3345},{"style":1785},[3346],{"type":51,"value":3347}," --is-posix",{"type":45,"tag":1747,"props":3349,"children":3350},{"style":1769},[3351],{"type":51,"value":1772},{"type":45,"tag":1747,"props":3353,"children":3354},{"style":1775},[3355],{"type":51,"value":1600},{"type":45,"tag":1747,"props":3357,"children":3358},{"style":1769},[3359],{"type":51,"value":1792},{"type":45,"tag":1747,"props":3361,"children":3362},{"style":1785},[3363],{"type":51,"value":3364}," --is-windows",{"type":45,"tag":1747,"props":3366,"children":3367},{"style":1769},[3368],{"type":51,"value":1772},{"type":45,"tag":1747,"props":3370,"children":3371},{"style":1775},[3372],{"type":51,"value":1607},{"type":45,"tag":1747,"props":3374,"children":3375},{"style":1769},[3376],{"type":51,"value":1792},{"type":45,"tag":1747,"props":3378,"children":3379},{"style":1775},[3380],{"type":51,"value":1968},{"type":45,"tag":1747,"props":3382,"children":3383},{"class":1749,"line":2015},[3384,3389],{"type":45,"tag":1747,"props":3385,"children":3386},{"style":1785},[3387],{"type":51,"value":3388},"  --max-passes-per-worker",{"type":45,"tag":1747,"props":3390,"children":3392},{"style":3391},"--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C",[3393],{"type":51,"value":3394}," 4\n",{"type":45,"tag":54,"props":3396,"children":3397},{},[3398,3400,3405,3407,3413,3415,3421,3423,3429,3431,3437,3439,3445,3447,3452,3454,3460,3462,3467],{"type":51,"value":3399},"The script writes ",{"type":45,"tag":60,"props":3401,"children":3403},{"className":3402},[],[3404],{"type":51,"value":633},{"type":51,"value":3406}," + ",{"type":45,"tag":60,"props":3408,"children":3410},{"className":3409},[],[3411],{"type":51,"value":3412},"worker-prompts\u002Fworker-N.txt",{"type":51,"value":3414}," + (if ",{"type":45,"tag":60,"props":3416,"children":3418},{"className":3417},[],[3419],{"type":51,"value":3420},"--cache-primer=true",{"type":51,"value":3422},", the default) ",{"type":45,"tag":60,"props":3424,"children":3426},{"className":3425},[],[3427],{"type":51,"value":3428},"worker-prompts\u002Fcache-primer.txt",{"type":51,"value":3430},", and prints a JSON summary on stdout. Exits non-zero on any missing prompt — surface the message and stop. Typical M with the default ",{"type":45,"tag":60,"props":3432,"children":3434},{"className":3433},[],[3435],{"type":51,"value":3436},"--max-passes-per-worker 4",{"type":51,"value":3438}," (REMOTE, ",{"type":45,"tag":60,"props":3440,"children":3442},{"className":3441},[],[3443],{"type":51,"value":3444},"is_posix=true",{"type":51,"value":3446},"): 13 (C POSIX), 15 (C++ POSIX), 16 (C POSIX + Windows), 18 (C++ POSIX + Windows); ",{"type":45,"tag":60,"props":3448,"children":3450},{"className":3449},[],[3451],{"type":51,"value":1326},{"type":51,"value":3453}," adds ~1 because ",{"type":45,"tag":60,"props":3455,"children":3457},{"className":3456},[],[3458],{"type":51,"value":3459},"ambient-state",{"type":51,"value":3461}," keeps its two REMOTE-skipped passes. After it returns, ",{"type":45,"tag":60,"props":3463,"children":3465},{"className":3464},[],[3466],{"type":51,"value":1007},{"type":51,"value":3468}," for the structured selection — never re-derive filtering or paths.",{"type":45,"tag":54,"props":3470,"children":3471},{},[3472,3478,3480,3485,3487,3493,3495,3501,3503,3509,3511,3517,3519,3525,3527,3533,3534,3540,3542,3555,3557,3563,3565,3571,3573,3579,3581,3587,3589,3594],{"type":45,"tag":60,"props":3473,"children":3475},{"className":3474},[],[3476],{"type":51,"value":3477},"--max-passes-per-worker N",{"type":51,"value":3479}," caps the per-worker pass count. The planner deterministically splits any ",{"type":45,"tag":222,"props":3481,"children":3482},{},[3483],{"type":51,"value":3484},"non-consolidated",{"type":51,"value":3486}," cluster with more than ",{"type":45,"tag":60,"props":3488,"children":3490},{"className":3489},[],[3491],{"type":51,"value":3492},"N",{"type":51,"value":3494}," passes into ",{"type":45,"tag":60,"props":3496,"children":3498},{"className":3497},[],[3499],{"type":51,"value":3500},"ceil(K\u002FN)",{"type":51,"value":3502}," contiguous chunks; each chunk becomes its own ",{"type":45,"tag":60,"props":3504,"children":3506},{"className":3505},[],[3507],{"type":51,"value":3508},"c-review-worker",{"type":51,"value":3510}," spawn with a ",{"type":45,"tag":60,"props":3512,"children":3514},{"className":3513},[],[3515],{"type":51,"value":3516},"-{i}",{"type":51,"value":3518},"-suffixed ",{"type":45,"tag":60,"props":3520,"children":3522},{"className":3521},[],[3523],{"type":51,"value":3524},"cluster_id",{"type":51,"value":3526}," (e.g. ",{"type":45,"tag":60,"props":3528,"children":3530},{"className":3529},[],[3531],{"type":51,"value":3532},"arithmetic-type-1",{"type":51,"value":83},{"type":45,"tag":60,"props":3535,"children":3537},{"className":3536},[],[3538],{"type":51,"value":3539},"arithmetic-type-2",{"type":51,"value":3541},"). ",{"type":45,"tag":222,"props":3543,"children":3544},{},[3545,3547,3553],{"type":51,"value":3546},"The consolidated cluster ",{"type":45,"tag":60,"props":3548,"children":3550},{"className":3549},[],[3551],{"type":51,"value":3552},"buffer-write-sinks",{"type":51,"value":3554}," (13 passes) is exempt — never chunked, regardless of pass count or override — so one worker builds its shared Phase-A inventory once and runs every phase",{"type":51,"value":3556}," (chunking a consolidated cluster would force each chunk to rebuild that inventory, which workers skip in practice). The shared prompt-cache prefix and ",{"type":45,"tag":60,"props":3558,"children":3560},{"className":3559},[],[3561],{"type":51,"value":3562},"Cluster prompt:",{"type":51,"value":3564}," path are byte-identical across chunks, so the cache primer still warms every worker. Default 4 is calibrated against the heavy non-consolidated clusters in ",{"type":45,"tag":60,"props":3566,"children":3568},{"className":3567},[],[3569],{"type":51,"value":3570},"manifest.json",{"type":51,"value":3572},". Some output-heavy non-consolidated clusters may declare a smaller manifest-level ",{"type":45,"tag":60,"props":3574,"children":3576},{"className":3575},[],[3577],{"type":51,"value":3578},"max_passes_per_worker",{"type":51,"value":3580}," override so each expensive pass group gets a smaller worker. Pass ",{"type":45,"tag":60,"props":3582,"children":3584},{"className":3583},[],[3585],{"type":51,"value":3586},"--max-passes-per-worker 0",{"type":51,"value":3588}," to disable all chunking, including manifest overrides (one worker per cluster). Because ",{"type":45,"tag":60,"props":3590,"children":3592},{"className":3591},[],[3593],{"type":51,"value":3552},{"type":51,"value":3595}," runs all 13 passes in one worker, it is the heaviest worker in the fan-out; if it ever hits the soft tool-call cap on a large codebase, surface its truncation note rather than splitting it (splitting re-introduces the inventory-skip).",{"type":45,"tag":1146,"props":3597,"children":3599},{"id":3598},"phase-5-create-bookkeeping-tasks-orchestrator-internal",[3600],{"type":51,"value":3601},"Phase 5: Create Bookkeeping Tasks (orchestrator-internal)",{"type":45,"tag":54,"props":3603,"children":3604},{},[3605,3609,3610,3615,3617,3623,3624,3628,3629,3635,3637,3643,3645,3651],{"type":45,"tag":222,"props":3606,"children":3607},{},[3608],{"type":51,"value":1159},{"type":51,"value":330},{"type":45,"tag":60,"props":3611,"children":3613},{"className":3612},[],[3614],{"type":51,"value":3114},{"type":51,"value":3616}," exists; ",{"type":45,"tag":60,"props":3618,"children":3620},{"className":3619},[],[3621],{"type":51,"value":3622},"M = plan.workers.length",{"type":51,"value":294},{"type":45,"tag":222,"props":3625,"children":3626},{},[3627],{"type":51,"value":1166},{"type":51,"value":330},{"type":45,"tag":60,"props":3630,"children":3632},{"className":3631},[],[3633],{"type":51,"value":3634},"cluster_task_ids[]",{"type":51,"value":3636}," created (1:1 with ",{"type":45,"tag":60,"props":3638,"children":3640},{"className":3639},[],[3641],{"type":51,"value":3642},"plan.workers",{"type":51,"value":3644},"), all ",{"type":45,"tag":60,"props":3646,"children":3648},{"className":3647},[],[3649],{"type":51,"value":3650},"pending",{"type":51,"value":707},{"type":45,"tag":54,"props":3653,"children":3654},{},[3655,3657,3662,3664,3670,3672,3678,3680,3686,3687,3693,3694,3699,3700,3706,3707,3713,3714,3720,3722,3728,3730,3735,3737,3742],{"type":51,"value":3656},"The task ledger is ",{"type":45,"tag":222,"props":3658,"children":3659},{},[3660],{"type":51,"value":3661},"orchestrator bookkeeping only",{"type":51,"value":3663}," (TUI visibility + Phase-7 retry tracking) — workers never read or write it. One ",{"type":45,"tag":60,"props":3665,"children":3667},{"className":3666},[],[3668],{"type":51,"value":3669},"TaskCreate",{"type":51,"value":3671}," per worker, populating ",{"type":45,"tag":60,"props":3673,"children":3675},{"className":3674},[],[3676],{"type":51,"value":3677},"metadata",{"type":51,"value":3679}," with ",{"type":45,"tag":60,"props":3681,"children":3683},{"className":3682},[],[3684],{"type":51,"value":3685},"kind=\"cluster\"",{"type":51,"value":83},{"type":45,"tag":60,"props":3688,"children":3690},{"className":3689},[],[3691],{"type":51,"value":3692},"worker_n",{"type":51,"value":83},{"type":45,"tag":60,"props":3695,"children":3697},{"className":3696},[],[3698],{"type":51,"value":3524},{"type":51,"value":83},{"type":45,"tag":60,"props":3701,"children":3703},{"className":3702},[],[3704],{"type":51,"value":3705},"spawn_prompt_path",{"type":51,"value":83},{"type":45,"tag":60,"props":3708,"children":3710},{"className":3709},[],[3711],{"type":51,"value":3712},"pass_prefixes",{"type":51,"value":83},{"type":45,"tag":60,"props":3715,"children":3717},{"className":3716},[],[3718],{"type":51,"value":3719},"attempt=1",{"type":51,"value":3721}," — all values copied verbatim from ",{"type":45,"tag":60,"props":3723,"children":3725},{"className":3724},[],[3726],{"type":51,"value":3727},"plan.workers[i]",{"type":51,"value":3729},". Track ",{"type":45,"tag":60,"props":3731,"children":3733},{"className":3732},[],[3734],{"type":51,"value":3634},{"type":51,"value":3736}," in ",{"type":45,"tag":60,"props":3738,"children":3740},{"className":3739},[],[3741],{"type":51,"value":3642},{"type":51,"value":3743}," order.",{"type":45,"tag":1146,"props":3745,"children":3747},{"id":3746},"phase-6-spawn-workers-optional-cache-primer-first-then-m-in-parallel",[3748],{"type":51,"value":3749},"Phase 6: Spawn workers (optional cache-primer first, then M in parallel)",{"type":45,"tag":54,"props":3751,"children":3752},{},[3753,3757,3758,3763,3765,3771,3772,3776,3778,3783],{"type":45,"tag":222,"props":3754,"children":3755},{},[3756],{"type":51,"value":1159},{"type":51,"value":330},{"type":45,"tag":60,"props":3759,"children":3761},{"className":3760},[],[3762],{"type":51,"value":3634},{"type":51,"value":3764}," populated; per-worker spawn prompt files exist at ",{"type":45,"tag":60,"props":3766,"children":3768},{"className":3767},[],[3769],{"type":51,"value":3770},"${output_dir}\u002Fworker-prompts\u002Fworker-N.txt",{"type":51,"value":294},{"type":45,"tag":222,"props":3773,"children":3774},{},[3775],{"type":51,"value":1166},{"type":51,"value":3777}," all M ",{"type":45,"tag":60,"props":3779,"children":3781},{"className":3780},[],[3782],{"type":51,"value":277},{"type":51,"value":3784}," calls — across every wave — have returned (the parallel spawn block(s) completed).",{"type":45,"tag":3786,"props":3787,"children":3789},"h4",{"id":3788},"phase-6a-cache-primer-gated-on-planruncache_primer",[3790,3792,3798],{"type":51,"value":3791},"Phase 6a: Cache primer (gated on ",{"type":45,"tag":60,"props":3793,"children":3795},{"className":3794},[],[3796],{"type":51,"value":3797},"plan.run.cache_primer",{"type":51,"value":228},{"type":45,"tag":54,"props":3800,"children":3801},{},[3802,3804,3809],{"type":51,"value":3803},"A parallel batch from cold start cannot share cache (all M requests dispatch simultaneously, none has finished writing). To warm the prefix, spawn a tiny primer first — ",{"type":45,"tag":222,"props":3805,"children":3806},{},[3807],{"type":51,"value":3808},"foreground",{"type":51,"value":3810}," (background spawns don't share cache with subsequent foreground spawns).",{"type":45,"tag":54,"props":3812,"children":3813},{},[3814,3816,3822,3823,3828,3830,3836,3838,3843,3845,3850,3851,3857,3858,3864,3865,3871,3872,3878,3880,3885,3887,3893,3895,3901,3903,3909,3911,3917,3919,3925],{"type":51,"value":3815},"If ",{"type":45,"tag":60,"props":3817,"children":3819},{"className":3818},[],[3820],{"type":51,"value":3821},"plan.run.cache_primer == true",{"type":51,"value":83},{"type":45,"tag":60,"props":3824,"children":3826},{"className":3825},[],[3827],{"type":51,"value":989},{"type":51,"value":3829}," has written ",{"type":45,"tag":60,"props":3831,"children":3833},{"className":3832},[],[3834],{"type":51,"value":3835},"${output_dir}\u002Fworker-prompts\u002Fcache-primer.txt",{"type":51,"value":3837},". Spawn it in its own assistant message: ",{"type":45,"tag":60,"props":3839,"children":3841},{"className":3840},[],[3842],{"type":51,"value":406},{"type":51,"value":3844}," the file, pass verbatim as ",{"type":45,"tag":60,"props":3846,"children":3848},{"className":3847},[],[3849],{"type":51,"value":277},{"type":51,"value":330},{"type":45,"tag":60,"props":3852,"children":3854},{"className":3853},[],[3855],{"type":51,"value":3856},"prompt",{"type":51,"value":3679},{"type":45,"tag":60,"props":3859,"children":3861},{"className":3860},[],[3862],{"type":51,"value":3863},"subagent_type=c-review:c-review-worker",{"type":51,"value":83},{"type":45,"tag":60,"props":3866,"children":3868},{"className":3867},[],[3869],{"type":51,"value":3870},"model=${worker_model}",{"type":51,"value":83},{"type":45,"tag":60,"props":3873,"children":3875},{"className":3874},[],[3876],{"type":51,"value":3877},"description=\"C review cache primer\"",{"type":51,"value":3879},", no ",{"type":45,"tag":60,"props":3881,"children":3883},{"className":3882},[],[3884],{"type":51,"value":973},{"type":51,"value":3886},". The script wrote the prefix byte-identical to ",{"type":45,"tag":60,"props":3888,"children":3890},{"className":3889},[],[3891],{"type":51,"value":3892},"worker-1.txt",{"type":51,"value":3894}," through the ",{"type":45,"tag":60,"props":3896,"children":3898},{"className":3897},[],[3899],{"type":51,"value":3900},"\u003Ccontext>",{"type":51,"value":3902}," block — that byte-identity is what gives the parallel workers their cache hit. The primer trailer contains ",{"type":45,"tag":60,"props":3904,"children":3906},{"className":3905},[],[3907],{"type":51,"value":3908},"Cache primer: true",{"type":51,"value":3910},", which the worker system prompt treats as a first-class mode and returns exactly ",{"type":45,"tag":60,"props":3912,"children":3914},{"className":3913},[],[3915],{"type":51,"value":3916},"worker-PRIMER abort: cache primer (no analysis performed)",{"type":51,"value":3918}," in one text response with zero tool calls. Discard the abort line — Phase 7 ignores it (no ",{"type":45,"tag":60,"props":3920,"children":3922},{"className":3921},[],[3923],{"type":51,"value":3924},"worker-N",{"type":51,"value":3926}," id).",{"type":45,"tag":54,"props":3928,"children":3929},{},[3930,3932,3938,3940,3946],{"type":51,"value":3931},"Foreground spawn already serializes — no ",{"type":45,"tag":60,"props":3933,"children":3935},{"className":3934},[],[3936],{"type":51,"value":3937},"sleep",{"type":51,"value":3939}," needed before Phase 6b. Skip Phase 6a entirely if ",{"type":45,"tag":60,"props":3941,"children":3943},{"className":3942},[],[3944],{"type":51,"value":3945},"plan.run.cache_primer == false",{"type":51,"value":707},{"type":45,"tag":3786,"props":3948,"children":3950},{"id":3949},"phase-6b-spawn-m-real-workers-in-parallel-one-message-per-wave-of-16",[3951],{"type":51,"value":3952},"Phase 6b: Spawn M real workers in parallel (one message per wave of ≤16)",{"type":45,"tag":3954,"props":3955,"children":3956},"blockquote",{},[3957,3965,4018,4037],{"type":45,"tag":54,"props":3958,"children":3959},{},[3960],{"type":45,"tag":222,"props":3961,"children":3962},{},[3963],{"type":51,"value":3964},"STOP — read this before composing the spawn message.",{"type":45,"tag":54,"props":3966,"children":3967},{},[3968,3970,3974,3976,3981,3983,3989,3991,4003,4005,4011,4013],{"type":51,"value":3969},"Workers MUST be spawned ",{"type":45,"tag":222,"props":3971,"children":3972},{},[3973],{"type":51,"value":3808},{"type":51,"value":3975}," (no ",{"type":45,"tag":60,"props":3977,"children":3979},{"className":3978},[],[3980],{"type":51,"value":973},{"type":51,"value":3982}," field, or ",{"type":45,"tag":60,"props":3984,"children":3986},{"className":3985},[],[3987],{"type":51,"value":3988},"run_in_background=false",{"type":51,"value":3990},").\n\"Parallel\" here means ",{"type":45,"tag":511,"props":3992,"children":3993},{},[3994,3996,4001],{"type":51,"value":3995},"one assistant message containing the wave's ",{"type":45,"tag":60,"props":3997,"children":3999},{"className":3998},[],[4000],{"type":51,"value":277},{"type":51,"value":4002}," calls",{"type":51,"value":4004}," — that already runs them concurrently. (For large ",{"type":45,"tag":60,"props":4006,"children":4008},{"className":4007},[],[4009],{"type":51,"value":4010},"M",{"type":51,"value":4012},", split into consecutive waves of ≤16 calls, one message per wave — see \"Required spawn shape\" below.) ",{"type":45,"tag":222,"props":4014,"children":4015},{},[4016],{"type":51,"value":4017},"Background spawns are NOT how you parallelize this skill.",{"type":45,"tag":54,"props":4019,"children":4020},{},[4021,4023,4028,4030,4036],{"type":51,"value":4022},"Background spawns defeat Phase 6a's primer cache: every worker pays full cache-creation on its first turn (",{"type":45,"tag":60,"props":4024,"children":4026},{"className":4025},[],[4027],{"type":51,"value":957},{"type":51,"value":4029},"), and the primer's ~15 K tokens are wasted M times over. Two real runs (audit logs available) had exactly this symptom — every worker started with ",{"type":45,"tag":60,"props":4031,"children":4033},{"className":4032},[],[4034],{"type":51,"value":4035},"first_cr=0",{"type":51,"value":707},{"type":45,"tag":54,"props":4038,"children":4039},{},[4040,4042,4047,4049,4053,4054,4059,4061,4066],{"type":51,"value":4041},"Before sending the spawn message, audit your draft: every ",{"type":45,"tag":60,"props":4043,"children":4045},{"className":4044},[],[4046],{"type":51,"value":277},{"type":51,"value":4048}," call must have ",{"type":45,"tag":222,"props":4050,"children":4051},{},[4052],{"type":51,"value":385},{"type":51,"value":330},{"type":45,"tag":60,"props":4055,"children":4057},{"className":4056},[],[4058],{"type":51,"value":973},{"type":51,"value":4060}," key. If you wrote ",{"type":45,"tag":60,"props":4062,"children":4064},{"className":4063},[],[4065],{"type":51,"value":949},{"type":51,"value":4067},", delete it.",{"type":45,"tag":54,"props":4069,"children":4070},{},[4071,4076,4078,4083,4085,4090],{"type":45,"tag":222,"props":4072,"children":4073},{},[4074],{"type":51,"value":4075},"Required spawn shape:",{"type":51,"value":4077}," emit a single assistant message containing the wave's ",{"type":45,"tag":60,"props":4079,"children":4081},{"className":4080},[],[4082],{"type":51,"value":277},{"type":51,"value":4084}," tool invocations — that one message is what runs them concurrently. Sequential spawning (one ",{"type":45,"tag":60,"props":4086,"children":4088},{"className":4087},[],[4089],{"type":51,"value":277},{"type":51,"value":4091}," call per message) serializes the review and is also wrong, but that failure is loud (timing); the background-spawn failure is silent (cost).",{"type":45,"tag":54,"props":4093,"children":4094},{},[4095,4107,4109,4114,4116,4122,4123,4128,4130,4141],{"type":45,"tag":222,"props":4096,"children":4097},{},[4098,4100,4105],{"type":51,"value":4099},"Waves when ",{"type":45,"tag":60,"props":4101,"children":4103},{"className":4102},[],[4104],{"type":51,"value":4010},{"type":51,"value":4106}," exceeds the per-message cap.",{"type":51,"value":4108}," The harness caps the number of ",{"type":45,"tag":60,"props":4110,"children":4112},{"className":4111},[],[4113],{"type":51,"value":277},{"type":51,"value":4115}," calls it will dispatch from a single assistant message (observed: ~20 in Claude Code — a real 25-worker run silently kept only the first 20 and had to spawn the rest in a second message). So when ",{"type":45,"tag":60,"props":4117,"children":4119},{"className":4118},[],[4120],{"type":51,"value":4121},"M > 16",{"type":51,"value":83},{"type":45,"tag":222,"props":4124,"children":4125},{},[4126],{"type":51,"value":4127},"plan the waves up front",{"type":51,"value":4129},": split the workers into consecutive waves of ",{"type":45,"tag":222,"props":4131,"children":4132},{},[4133,4135,4140],{"type":51,"value":4134},"≤16 ",{"type":45,"tag":60,"props":4136,"children":4138},{"className":4137},[],[4139],{"type":51,"value":277},{"type":51,"value":4002},{"type":51,"value":4142},", each wave its own single assistant message. Rules:",{"type":45,"tag":126,"props":4144,"children":4145},{},[4146,4181,4219,4243,4260,4277],{"type":45,"tag":130,"props":4147,"children":4148},{},[4149,4154,4156,4161,4163,4167,4169,4173,4174,4179],{"type":45,"tag":222,"props":4150,"children":4151},{},[4152],{"type":51,"value":4153},"Within a wave:",{"type":51,"value":4155}," all ",{"type":45,"tag":60,"props":4157,"children":4159},{"className":4158},[],[4160],{"type":51,"value":277},{"type":51,"value":4162}," calls in ",{"type":45,"tag":222,"props":4164,"children":4165},{},[4166],{"type":51,"value":1258},{"type":51,"value":4168}," message, ",{"type":45,"tag":222,"props":4170,"children":4171},{},[4172],{"type":51,"value":3808},{"type":51,"value":3975},{"type":45,"tag":60,"props":4175,"children":4177},{"className":4176},[],[4178],{"type":51,"value":973},{"type":51,"value":4180},") — identical shape to a single-wave run.",{"type":45,"tag":130,"props":4182,"children":4183},{},[4184,4189,4191,4196,4198,4203,4205,4210,4212,4217],{"type":45,"tag":222,"props":4185,"children":4186},{},[4187],{"type":51,"value":4188},"Across waves:",{"type":51,"value":4190}," wave ",{"type":45,"tag":511,"props":4192,"children":4193},{},[4194],{"type":51,"value":4195},"k+1",{"type":51,"value":4197}," is a ",{"type":45,"tag":222,"props":4199,"children":4200},{},[4201],{"type":51,"value":4202},"separate",{"type":51,"value":4204}," message that can only be sent after wave ",{"type":45,"tag":511,"props":4206,"children":4207},{},[4208],{"type":51,"value":4209},"k",{"type":51,"value":4211},"'s ",{"type":45,"tag":60,"props":4213,"children":4215},{"className":4214},[],[4216],{"type":51,"value":277},{"type":51,"value":4218}," calls all return (a tool-use message ends the turn). Waves are therefore serialized with respect to each other — that is correct and loud; accept it.",{"type":45,"tag":130,"props":4220,"children":4221},{},[4222,4227,4229,4234,4236,4241],{"type":45,"tag":222,"props":4223,"children":4224},{},[4225],{"type":51,"value":4226},"Never",{"type":51,"value":4228}," reach for ",{"type":45,"tag":60,"props":4230,"children":4232},{"className":4231},[],[4233],{"type":51,"value":949},{"type":51,"value":4235}," to fit more workers in one message. More ",{"type":45,"tag":511,"props":4237,"children":4238},{},[4239],{"type":51,"value":4240},"waves",{"type":51,"value":4242},", never background — background defeats the primer cache (see the STOP box) and is the cardinal error this skill guards against.",{"type":45,"tag":130,"props":4244,"children":4245},{},[4246,4251,4253,4258],{"type":45,"tag":222,"props":4247,"children":4248},{},[4249],{"type":51,"value":4250},"Cache across waves:",{"type":51,"value":4252}," the primer prefix has a ~5-minute cache TTL that refreshes on every hit, so back-to-back waves keep hitting it. If a later wave will start more than ~5 minutes after the previous one (very large ",{"type":45,"tag":60,"props":4254,"children":4256},{"className":4255},[],[4257],{"type":51,"value":4010},{"type":51,"value":4259},"), re-spawn the Phase-6a primer in its own message first to re-warm the prefix.",{"type":45,"tag":130,"props":4261,"children":4262},{},[4263,4268,4269,4275],{"type":45,"tag":222,"props":4264,"children":4265},{},[4266],{"type":51,"value":4267},"Balance the waves",{"type":51,"value":3526},{"type":45,"tag":60,"props":4270,"children":4272},{"className":4271},[],[4273],{"type":51,"value":4274},"M=25",{"type":51,"value":4276}," → 13+12, not 20+5) so no wave hugs the cap and the last wave isn't a tiny straggler.",{"type":45,"tag":130,"props":4278,"children":4279},{},[4280,4282,4287],{"type":51,"value":4281},"After every wave has returned, proceed to Phase 7 with the ",{"type":45,"tag":222,"props":4283,"children":4284},{},[4285],{"type":51,"value":4286},"full",{"type":51,"value":4288}," set of M worker results.",{"type":45,"tag":54,"props":4290,"children":4291},{},[4292,4294,4300],{"type":51,"value":4293},"For each worker ",{"type":45,"tag":60,"props":4295,"children":4297},{"className":4296},[],[4298],{"type":51,"value":4299},"N ∈ [1..M]",{"type":51,"value":4301}," (in its assigned wave):",{"type":45,"tag":743,"props":4303,"children":4304},{},[4305,4314],{"type":45,"tag":130,"props":4306,"children":4307},{},[4308],{"type":45,"tag":60,"props":4309,"children":4311},{"className":4310},[],[4312],{"type":51,"value":4313},"Read: ${output_dir}\u002Fworker-prompts\u002Fworker-N.txt",{"type":45,"tag":130,"props":4315,"children":4316},{},[4317,4319,4324,4326,4331,4333,4338],{"type":51,"value":4318},"Pass the file contents ",{"type":45,"tag":222,"props":4320,"children":4321},{},[4322],{"type":51,"value":4323},"verbatim",{"type":51,"value":4325}," as the ",{"type":45,"tag":60,"props":4327,"children":4329},{"className":4328},[],[4330],{"type":51,"value":277},{"type":51,"value":4332}," tool's ",{"type":45,"tag":60,"props":4334,"children":4336},{"className":4335},[],[4337],{"type":51,"value":3856},{"type":51,"value":4339}," argument:",{"type":45,"tag":152,"props":4341,"children":4342},{},[4343,4358],{"type":45,"tag":156,"props":4344,"children":4345},{},[4346],{"type":45,"tag":160,"props":4347,"children":4348},{},[4349,4353],{"type":45,"tag":164,"props":4350,"children":4351},{},[4352],{"type":51,"value":1286},{"type":45,"tag":164,"props":4354,"children":4355},{},[4356],{"type":51,"value":4357},"Value",{"type":45,"tag":180,"props":4359,"children":4360},{},[4361,4381,4404,4425,4449],{"type":45,"tag":160,"props":4362,"children":4363},{},[4364,4373],{"type":45,"tag":187,"props":4365,"children":4366},{},[4367],{"type":45,"tag":60,"props":4368,"children":4370},{"className":4369},[],[4371],{"type":51,"value":4372},"subagent_type",{"type":45,"tag":187,"props":4374,"children":4375},{},[4376],{"type":45,"tag":60,"props":4377,"children":4379},{"className":4378},[],[4380],{"type":51,"value":81},{"type":45,"tag":160,"props":4382,"children":4383},{},[4384,4393],{"type":45,"tag":187,"props":4385,"children":4386},{},[4387],{"type":45,"tag":60,"props":4388,"children":4390},{"className":4389},[],[4391],{"type":51,"value":4392},"model",{"type":45,"tag":187,"props":4394,"children":4395},{},[4396,4402],{"type":45,"tag":60,"props":4397,"children":4399},{"className":4398},[],[4400],{"type":51,"value":4401},"${worker_model}",{"type":51,"value":4403}," (haiku \u002F sonnet \u002F opus)",{"type":45,"tag":160,"props":4405,"children":4406},{},[4407,4416],{"type":45,"tag":187,"props":4408,"children":4409},{},[4410],{"type":45,"tag":60,"props":4411,"children":4413},{"className":4412},[],[4414],{"type":51,"value":4415},"description",{"type":45,"tag":187,"props":4417,"children":4418},{},[4419],{"type":45,"tag":60,"props":4420,"children":4422},{"className":4421},[],[4423],{"type":51,"value":4424},"C review worker N",{"type":45,"tag":160,"props":4426,"children":4427},{},[4428,4436],{"type":45,"tag":187,"props":4429,"children":4430},{},[4431],{"type":45,"tag":60,"props":4432,"children":4434},{"className":4433},[],[4435],{"type":51,"value":3856},{"type":45,"tag":187,"props":4437,"children":4438},{},[4439,4441,4447],{"type":51,"value":4440},"the full text of ",{"type":45,"tag":60,"props":4442,"children":4444},{"className":4443},[],[4445],{"type":51,"value":4446},"worker-N.txt",{"type":51,"value":4448}," (no edits)",{"type":45,"tag":160,"props":4450,"children":4451},{},[4452,4460],{"type":45,"tag":187,"props":4453,"children":4454},{},[4455],{"type":45,"tag":60,"props":4456,"children":4458},{"className":4457},[],[4459],{"type":51,"value":973},{"type":45,"tag":187,"props":4461,"children":4462},{},[4463,4475,4477,4483],{"type":45,"tag":222,"props":4464,"children":4465},{},[4466,4468,4474],{"type":51,"value":4467},"field MUST be omitted, OR set to ",{"type":45,"tag":60,"props":4469,"children":4471},{"className":4470},[],[4472],{"type":51,"value":4473},"false",{"type":51,"value":707},{"type":51,"value":4476}," Never ",{"type":45,"tag":60,"props":4478,"children":4480},{"className":4479},[],[4481],{"type":51,"value":4482},"true",{"type":51,"value":4484},". See the foreground-spawn warning above.",{"type":45,"tag":54,"props":4486,"children":4487},{},[4488,4490,4495],{"type":51,"value":4489},"The spawn prompt is the single authority. Pass it verbatim — every field is required by the worker's self-check; any deviation triggers ",{"type":45,"tag":60,"props":4491,"children":4493},{"className":4492},[],[4494],{"type":51,"value":999},{"type":51,"value":707},{"type":45,"tag":54,"props":4497,"children":4498},{},[4499],{"type":45,"tag":222,"props":4500,"children":4501},{},[4502],{"type":51,"value":4503},"Anti-patterns to reject:",{"type":45,"tag":126,"props":4505,"children":4506},{},[4507,4522,4546,4557,4568],{"type":45,"tag":130,"props":4508,"children":4509},{},[4510,4520],{"type":45,"tag":222,"props":4511,"children":4512},{},[4513,4515],{"type":51,"value":4514},"Passing ",{"type":45,"tag":60,"props":4516,"children":4518},{"className":4517},[],[4519],{"type":51,"value":949},{"type":51,"value":4521}," (the dominant historical defect — see warning above).",{"type":45,"tag":130,"props":4523,"children":4524},{},[4525,4537,4539,4544],{"type":45,"tag":222,"props":4526,"children":4527},{},[4528,4530,4535],{"type":51,"value":4529},"Cramming more than ~16 ",{"type":45,"tag":60,"props":4531,"children":4533},{"className":4532},[],[4534],{"type":51,"value":277},{"type":51,"value":4536}," calls into one message",{"type":51,"value":4538}," when ",{"type":45,"tag":60,"props":4540,"children":4542},{"className":4541},[],[4543],{"type":51,"value":4010},{"type":51,"value":4545}," is large — the harness silently keeps only the first ~20 and drops the rest. Use balanced waves of ≤16, never background spawns, to cover all M.",{"type":45,"tag":130,"props":4547,"children":4548},{},[4549,4551,4556],{"type":51,"value":4550},"Hand-typing the spawn prompt instead of reading ",{"type":45,"tag":60,"props":4552,"children":4554},{"className":4553},[],[4555],{"type":51,"value":4446},{"type":51,"value":707},{"type":45,"tag":130,"props":4558,"children":4559},{},[4560,4562],{"type":51,"value":4561},"Inserting Task-related instructions (\"first call TaskList\", \"Assigned task id: ",{"type":45,"tag":4563,"props":4564,"children":4565},"n",{},[4566],{"type":51,"value":4567},"\"). Workers have no Task tools.",{"type":45,"tag":130,"props":4569,"children":4570},{},[4571],{"type":51,"value":4572},"Editing the rendered prompt before passing it (trimming \"redundant\" fields, collapsing pass lists).",{"type":45,"tag":1146,"props":4574,"children":4576},{"id":4575},"phase-7-wait-for-workers-and-classify-outcomes",[4577],{"type":51,"value":4578},"Phase 7: Wait for Workers and Classify Outcomes",{"type":45,"tag":54,"props":4580,"children":4581},{},[4582,4586,4588,4593,4595,4599,4601,4607],{"type":45,"tag":222,"props":4583,"children":4584},{},[4585],{"type":51,"value":1159},{"type":51,"value":4587}," all M Phase-6 ",{"type":45,"tag":60,"props":4589,"children":4591},{"className":4590},[],[4592],{"type":51,"value":277},{"type":51,"value":4594}," calls have returned. ",{"type":45,"tag":222,"props":4596,"children":4597},{},[4598],{"type":51,"value":1166},{"type":51,"value":4600}," every cluster has either succeeded or been retried up to the cap; ",{"type":45,"tag":60,"props":4602,"children":4604},{"className":4603},[],[4605],{"type":51,"value":4606},"${output_dir}\u002Ffindings-index.txt",{"type":51,"value":2817},{"type":45,"tag":54,"props":4609,"children":4610},{},[4611,4613,4618],{"type":51,"value":4612},"The Phase-6 ",{"type":45,"tag":60,"props":4614,"children":4616},{"className":4615},[],[4617],{"type":51,"value":277},{"type":51,"value":4619}," invocations block until each worker returns. Inspect each worker's return text and apply this classifier in order — first match wins:",{"type":45,"tag":152,"props":4621,"children":4622},{},[4623,4649],{"type":45,"tag":156,"props":4624,"children":4625},{},[4626],{"type":45,"tag":160,"props":4627,"children":4628},{},[4629,4634,4639,4644],{"type":45,"tag":164,"props":4630,"children":4631},{},[4632],{"type":51,"value":4633},"#",{"type":45,"tag":164,"props":4635,"children":4636},{},[4637],{"type":51,"value":4638},"Match (in return text)",{"type":45,"tag":164,"props":4640,"children":4641},{},[4642],{"type":51,"value":4643},"Outcome",{"type":45,"tag":164,"props":4645,"children":4646},{},[4647],{"type":51,"value":4648},"Action",{"type":45,"tag":180,"props":4650,"children":4651},{},[4652,4704,4751,4811],{"type":45,"tag":160,"props":4653,"children":4654},{},[4655,4660,4669,4677],{"type":45,"tag":187,"props":4656,"children":4657},{},[4658],{"type":51,"value":4659},"1",{"type":45,"tag":187,"props":4661,"children":4662},{},[4663],{"type":45,"tag":60,"props":4664,"children":4666},{"className":4665},[],[4667],{"type":51,"value":4668},"worker-N complete:",{"type":45,"tag":187,"props":4670,"children":4671},{},[4672],{"type":45,"tag":222,"props":4673,"children":4674},{},[4675],{"type":51,"value":4676},"provisional success",{"type":45,"tag":187,"props":4678,"children":4679},{},[4680,4682,4688,4690,4696,4698,4703],{"type":51,"value":4681},"Parse the ",{"type":45,"tag":60,"props":4683,"children":4685},{"className":4684},[],[4686],{"type":51,"value":4687},"wrote N finding files",{"type":51,"value":4689}," count, then run the artifact validator below before ",{"type":45,"tag":60,"props":4691,"children":4693},{"className":4692},[],[4694],{"type":51,"value":4695},"TaskUpdate",{"type":51,"value":4697}," to ",{"type":45,"tag":60,"props":4699,"children":4701},{"className":4700},[],[4702],{"type":51,"value":1031},{"type":51,"value":707},{"type":45,"tag":160,"props":4705,"children":4706},{},[4707,4712,4738,4746],{"type":45,"tag":187,"props":4708,"children":4709},{},[4710],{"type":51,"value":4711},"2",{"type":45,"tag":187,"props":4713,"children":4714},{},[4715,4721,4722,4728,4730,4736],{"type":45,"tag":60,"props":4716,"children":4718},{"className":4717},[],[4719],{"type":51,"value":4720},"abort: spawn prompt malformed",{"type":51,"value":83},{"type":45,"tag":60,"props":4723,"children":4725},{"className":4724},[],[4726],{"type":51,"value":4727},"abort: pre-work budget exceeded",{"type":51,"value":4729},", or ",{"type":45,"tag":60,"props":4731,"children":4733},{"className":4732},[],[4734],{"type":51,"value":4735},"abort: TaskList unavailable",{"type":51,"value":4737}," (legacy)",{"type":45,"tag":187,"props":4739,"children":4740},{},[4741],{"type":45,"tag":222,"props":4742,"children":4743},{},[4744],{"type":51,"value":4745},"non-retryable orchestrator bug",{"type":45,"tag":187,"props":4747,"children":4748},{},[4749],{"type":51,"value":4750},"Stop the run, surface the abort + spawn-prompt path. Re-running the same prompt repeats the failure — pre-work-budget exhaustion always means the worker couldn't pass its self-check, which a retry won't fix.",{"type":45,"tag":160,"props":4752,"children":4753},{},[4754,4759,4770,4778],{"type":45,"tag":187,"props":4755,"children":4756},{},[4757],{"type":51,"value":4758},"3",{"type":45,"tag":187,"props":4760,"children":4761},{},[4762,4764],{"type":51,"value":4763},"other ",{"type":45,"tag":60,"props":4765,"children":4767},{"className":4766},[],[4768],{"type":51,"value":4769},"worker-N abort:",{"type":45,"tag":187,"props":4771,"children":4772},{},[4773],{"type":45,"tag":222,"props":4774,"children":4775},{},[4776],{"type":51,"value":4777},"retryable",{"type":45,"tag":187,"props":4779,"children":4780},{},[4781,4783,4788,4789,4795,4796,4802,4804,4810],{"type":51,"value":4782},"Mark ",{"type":45,"tag":60,"props":4784,"children":4786},{"className":4785},[],[4787],{"type":51,"value":3650},{"type":51,"value":1543},{"type":45,"tag":60,"props":4790,"children":4792},{"className":4791},[],[4793],{"type":51,"value":4794},"metadata.abort_reason",{"type":51,"value":83},{"type":45,"tag":60,"props":4797,"children":4799},{"className":4798},[],[4800],{"type":51,"value":4801},"needs_respawn=true",{"type":51,"value":4803},", increment ",{"type":45,"tag":60,"props":4805,"children":4807},{"className":4806},[],[4808],{"type":51,"value":4809},"attempt",{"type":51,"value":707},{"type":45,"tag":160,"props":4812,"children":4813},{},[4814,4819,4844,4851],{"type":45,"tag":187,"props":4815,"children":4816},{},[4817],{"type":51,"value":4818},"4",{"type":45,"tag":187,"props":4820,"children":4821},{},[4822,4827,4829,4835,4836,4842],{"type":45,"tag":60,"props":4823,"children":4825},{"className":4824},[],[4826],{"type":51,"value":277},{"type":51,"value":4828}," errored or no ",{"type":45,"tag":60,"props":4830,"children":4832},{"className":4831},[],[4833],{"type":51,"value":4834},"complete:",{"type":51,"value":271},{"type":45,"tag":60,"props":4837,"children":4839},{"className":4838},[],[4840],{"type":51,"value":4841},"abort:",{"type":51,"value":4843}," token",{"type":45,"tag":187,"props":4845,"children":4846},{},[4847],{"type":45,"tag":222,"props":4848,"children":4849},{},[4850],{"type":51,"value":4777},{"type":45,"tag":187,"props":4852,"children":4853},{},[4854],{"type":51,"value":4855},"Same as #3 (transient worker crash).",{"type":45,"tag":54,"props":4857,"children":4858},{},[4859,4861,4866,4868,4873,4875,4880,4882,4888,4890,4894,4896,4902],{"type":51,"value":4860},"If any non-retryable, stop. Otherwise, ",{"type":45,"tag":222,"props":4862,"children":4863},{},[4864],{"type":51,"value":4865},"before re-spawning, clear each retryable worker's prefix-space on disk",{"type":51,"value":4867}," — the Phase-7 index is built from disk, so a crashed attempt's higher-id stragglers (files the replacement never re-emits) would otherwise be resurrected into the report. Loop over the worker's actual ",{"type":45,"tag":60,"props":4869,"children":4871},{"className":4870},[],[4872],{"type":51,"value":3712},{"type":51,"value":4874}," (from its task ",{"type":45,"tag":60,"props":4876,"children":4878},{"className":4877},[],[4879],{"type":51,"value":3677},{"type":51,"value":4881},"), substituting each real prefix for ",{"type":45,"tag":60,"props":4883,"children":4885},{"className":4884},[],[4886],{"type":51,"value":4887},"${pfx}",{"type":51,"value":4889}," — do ",{"type":45,"tag":222,"props":4891,"children":4892},{},[4893],{"type":51,"value":320},{"type":51,"value":4895}," run the command with a literal ",{"type":45,"tag":60,"props":4897,"children":4899},{"className":4898},[],[4900],{"type":51,"value":4901},"PREFIX",{"type":51,"value":4903},":",{"type":45,"tag":605,"props":4905,"children":4907},{"className":1739,"code":4906,"language":1741,"meta":613,"style":613},"# zsh-safe: `find … -delete` never aborts on no-match (an `rm PREFIX-*.md` glob would).\n# Replace `PREFIX1 PREFIX2` with the worker's actual space-separated pass_prefixes.\nfor pfx in PREFIX1 PREFIX2; do\n  find \"${output_dir}\u002Ffindings\" -maxdepth 1 -type f -name \"${pfx}-*.md\" -delete\ndone\n",[4908],{"type":45,"tag":60,"props":4909,"children":4910},{"__ignoreMap":613},[4911,4919,4927,4963,5040],{"type":45,"tag":1747,"props":4912,"children":4913},{"class":1749,"line":1750},[4914],{"type":45,"tag":1747,"props":4915,"children":4916},{"style":1754},[4917],{"type":51,"value":4918},"# zsh-safe: `find … -delete` never aborts on no-match (an `rm PREFIX-*.md` glob would).\n",{"type":45,"tag":1747,"props":4920,"children":4921},{"class":1749,"line":1760},[4922],{"type":45,"tag":1747,"props":4923,"children":4924},{"style":1754},[4925],{"type":51,"value":4926},"# Replace `PREFIX1 PREFIX2` with the worker's actual space-separated pass_prefixes.\n",{"type":45,"tag":1747,"props":4928,"children":4929},{"class":1749,"line":1931},[4930,4935,4940,4945,4950,4955,4959],{"type":45,"tag":1747,"props":4931,"children":4932},{"style":2467},[4933],{"type":51,"value":4934},"for",{"type":45,"tag":1747,"props":4936,"children":4937},{"style":1775},[4938],{"type":51,"value":4939}," pfx ",{"type":45,"tag":1747,"props":4941,"children":4942},{"style":2467},[4943],{"type":51,"value":4944},"in",{"type":45,"tag":1747,"props":4946,"children":4947},{"style":1785},[4948],{"type":51,"value":4949}," PREFIX1",{"type":45,"tag":1747,"props":4951,"children":4952},{"style":1785},[4953],{"type":51,"value":4954}," PREFIX2",{"type":45,"tag":1747,"props":4956,"children":4957},{"style":1769},[4958],{"type":51,"value":2500},{"type":45,"tag":1747,"props":4960,"children":4961},{"style":2467},[4962],{"type":51,"value":2505},{"type":45,"tag":1747,"props":4964,"children":4965},{"class":1749,"line":1940},[4966,4971,4975,4979,4983,4987,4991,4996,5001,5005,5009,5013,5017,5022,5026,5031,5035],{"type":45,"tag":1747,"props":4967,"children":4968},{"style":1764},[4969],{"type":51,"value":4970},"  find",{"type":45,"tag":1747,"props":4972,"children":4973},{"style":1769},[4974],{"type":51,"value":1772},{"type":45,"tag":1747,"props":4976,"children":4977},{"style":1775},[4978],{"type":51,"value":2653},{"type":45,"tag":1747,"props":4980,"children":4981},{"style":1769},[4982],{"type":51,"value":2723},{"type":45,"tag":1747,"props":4984,"children":4985},{"style":1785},[4986],{"type":51,"value":2728},{"type":45,"tag":1747,"props":4988,"children":4989},{"style":1769},[4990],{"type":51,"value":1086},{"type":45,"tag":1747,"props":4992,"children":4993},{"style":1785},[4994],{"type":51,"value":4995}," -maxdepth",{"type":45,"tag":1747,"props":4997,"children":4998},{"style":3391},[4999],{"type":51,"value":5000}," 1",{"type":45,"tag":1747,"props":5002,"children":5003},{"style":1785},[5004],{"type":51,"value":1797},{"type":45,"tag":1747,"props":5006,"children":5007},{"style":1785},[5008],{"type":51,"value":1802},{"type":45,"tag":1747,"props":5010,"children":5011},{"style":1785},[5012],{"type":51,"value":1837},{"type":45,"tag":1747,"props":5014,"children":5015},{"style":1769},[5016],{"type":51,"value":1772},{"type":45,"tag":1747,"props":5018,"children":5019},{"style":1775},[5020],{"type":51,"value":5021},"pfx",{"type":45,"tag":1747,"props":5023,"children":5024},{"style":1769},[5025],{"type":51,"value":2723},{"type":45,"tag":1747,"props":5027,"children":5028},{"style":1785},[5029],{"type":51,"value":5030},"-*.md",{"type":45,"tag":1747,"props":5032,"children":5033},{"style":1769},[5034],{"type":51,"value":1086},{"type":45,"tag":1747,"props":5036,"children":5037},{"style":1785},[5038],{"type":51,"value":5039}," -delete\n",{"type":45,"tag":1747,"props":5041,"children":5042},{"class":1749,"line":1971},[5043],{"type":45,"tag":1747,"props":5044,"children":5045},{"style":2467},[5046],{"type":51,"value":5047},"done\n",{"type":45,"tag":54,"props":5049,"children":5050},{},[5051,5053,5058,5060,5066,5068,5073,5075,5080,5082,5087,5089,5095,5097,5102,5104,5110],{"type":51,"value":5052},"Then re-spawn each ",{"type":45,"tag":60,"props":5054,"children":5056},{"className":5055},[],[5057],{"type":51,"value":3650},{"type":51,"value":5059}," retryable with ",{"type":45,"tag":60,"props":5061,"children":5063},{"className":5062},[],[5064],{"type":51,"value":5065},"attempt \u003C= 2",{"type":51,"value":5067}," in one parallel block (cap = 2 attempts per cluster). ",{"type":45,"tag":60,"props":5069,"children":5071},{"className":5070},[],[5072],{"type":51,"value":4809},{"type":51,"value":5074}," was just incremented to ",{"type":45,"tag":60,"props":5076,"children":5078},{"className":5077},[],[5079],{"type":51,"value":4711},{"type":51,"value":5081}," on the first failure, so the guard must admit ",{"type":45,"tag":60,"props":5083,"children":5085},{"className":5084},[],[5086],{"type":51,"value":4711},{"type":51,"value":5088}," to allow the single retry — ",{"type":45,"tag":60,"props":5090,"children":5092},{"className":5091},[],[5093],{"type":51,"value":5094},"attempt \u003C 2",{"type":51,"value":5096}," would block every retry. A second failure increments to ",{"type":45,"tag":60,"props":5098,"children":5100},{"className":5099},[],[5101],{"type":51,"value":4758},{"type":51,"value":5103},", which fails ",{"type":45,"tag":60,"props":5105,"children":5107},{"className":5106},[],[5108],{"type":51,"value":5109},"\u003C= 2",{"type":51,"value":5111}," and ends retries. Replacement workers reuse deterministic finding IDs per prefix, so a cleared prefix-space plus a fresh write yields a consistent shard \u002F coverage \u002F disk set.",{"type":45,"tag":3786,"props":5113,"children":5115},{"id":5114},"sanity-check-write-index",[5116],{"type":51,"value":5117},"Sanity-check + write index",{"type":45,"tag":54,"props":5119,"children":5120},{},[5121,5123,5128,5130,5135],{"type":51,"value":5122},"For every provisional ",{"type":45,"tag":60,"props":5124,"children":5126},{"className":5125},[],[5127],{"type":51,"value":4834},{"type":51,"value":5129}," cluster, validate the worker-owned shard, coverage file, coverage rows, filed IDs, and claimed finding count against ",{"type":45,"tag":60,"props":5131,"children":5133},{"className":5132},[],[5134],{"type":51,"value":633},{"type":51,"value":5136}," before marking the task completed. Run one command per completed worker, or one command with repeated flags for all provisional completions:",{"type":45,"tag":605,"props":5138,"children":5140},{"className":1739,"code":5139,"language":1741,"meta":613,"style":613},"python3 \"${C_REVIEW_PLUGIN_ROOT}\u002Fscripts\u002Fvalidate_artifacts.py\" \"${output_dir}\u002Fplan.json\" \\\n  --worker worker-N --claimed-count worker-N=\u003Cclaimed_count_from_complete_line>\n",[5141],{"type":45,"tag":60,"props":5142,"children":5143},{"__ignoreMap":613},[5144,5197],{"type":45,"tag":1747,"props":5145,"children":5146},{"class":1749,"line":1750},[5147,5151,5155,5159,5163,5168,5172,5176,5180,5184,5189,5193],{"type":45,"tag":1747,"props":5148,"children":5149},{"style":1764},[5150],{"type":51,"value":3158},{"type":45,"tag":1747,"props":5152,"children":5153},{"style":1769},[5154],{"type":51,"value":1772},{"type":45,"tag":1747,"props":5156,"children":5157},{"style":1775},[5158],{"type":51,"value":848},{"type":45,"tag":1747,"props":5160,"children":5161},{"style":1769},[5162],{"type":51,"value":2723},{"type":45,"tag":1747,"props":5164,"children":5165},{"style":1785},[5166],{"type":51,"value":5167},"\u002Fscripts\u002Fvalidate_artifacts.py",{"type":45,"tag":1747,"props":5169,"children":5170},{"style":1769},[5171],{"type":51,"value":1086},{"type":45,"tag":1747,"props":5173,"children":5174},{"style":1769},[5175],{"type":51,"value":1772},{"type":45,"tag":1747,"props":5177,"children":5178},{"style":1775},[5179],{"type":51,"value":2653},{"type":45,"tag":1747,"props":5181,"children":5182},{"style":1769},[5183],{"type":51,"value":2723},{"type":45,"tag":1747,"props":5185,"children":5186},{"style":1785},[5187],{"type":51,"value":5188},"\u002Fplan.json",{"type":45,"tag":1747,"props":5190,"children":5191},{"style":1769},[5192],{"type":51,"value":1086},{"type":45,"tag":1747,"props":5194,"children":5195},{"style":1775},[5196],{"type":51,"value":1968},{"type":45,"tag":1747,"props":5198,"children":5199},{"class":1749,"line":1760},[5200,5205,5210,5215,5220,5225,5230,5235],{"type":45,"tag":1747,"props":5201,"children":5202},{"style":1785},[5203],{"type":51,"value":5204},"  --worker",{"type":45,"tag":1747,"props":5206,"children":5207},{"style":1785},[5208],{"type":51,"value":5209}," worker-N",{"type":45,"tag":1747,"props":5211,"children":5212},{"style":1785},[5213],{"type":51,"value":5214}," --claimed-count",{"type":45,"tag":1747,"props":5216,"children":5217},{"style":1785},[5218],{"type":51,"value":5219}," worker-N=",{"type":45,"tag":1747,"props":5221,"children":5222},{"style":1769},[5223],{"type":51,"value":5224},"\u003C",{"type":45,"tag":1747,"props":5226,"children":5227},{"style":1785},[5228],{"type":51,"value":5229},"claimed_count_from_complete_lin",{"type":45,"tag":1747,"props":5231,"children":5232},{"style":1775},[5233],{"type":51,"value":5234},"e",{"type":45,"tag":1747,"props":5236,"children":5237},{"style":1769},[5238],{"type":51,"value":5239},">\n",{"type":45,"tag":54,"props":5241,"children":5242},{},[5243],{"type":51,"value":5244},"Grouped claimed-count values are valid:",{"type":45,"tag":605,"props":5246,"children":5248},{"className":1739,"code":5247,"language":1741,"meta":613,"style":613},"python3 \"${C_REVIEW_PLUGIN_ROOT}\u002Fscripts\u002Fvalidate_artifacts.py\" \"${output_dir}\u002Fplan.json\" \\\n  --claimed-count worker-1=0 worker-2=3\n",[5249],{"type":45,"tag":60,"props":5250,"children":5251},{"__ignoreMap":613},[5252,5303],{"type":45,"tag":1747,"props":5253,"children":5254},{"class":1749,"line":1750},[5255,5259,5263,5267,5271,5275,5279,5283,5287,5291,5295,5299],{"type":45,"tag":1747,"props":5256,"children":5257},{"style":1764},[5258],{"type":51,"value":3158},{"type":45,"tag":1747,"props":5260,"children":5261},{"style":1769},[5262],{"type":51,"value":1772},{"type":45,"tag":1747,"props":5264,"children":5265},{"style":1775},[5266],{"type":51,"value":848},{"type":45,"tag":1747,"props":5268,"children":5269},{"style":1769},[5270],{"type":51,"value":2723},{"type":45,"tag":1747,"props":5272,"children":5273},{"style":1785},[5274],{"type":51,"value":5167},{"type":45,"tag":1747,"props":5276,"children":5277},{"style":1769},[5278],{"type":51,"value":1086},{"type":45,"tag":1747,"props":5280,"children":5281},{"style":1769},[5282],{"type":51,"value":1772},{"type":45,"tag":1747,"props":5284,"children":5285},{"style":1775},[5286],{"type":51,"value":2653},{"type":45,"tag":1747,"props":5288,"children":5289},{"style":1769},[5290],{"type":51,"value":2723},{"type":45,"tag":1747,"props":5292,"children":5293},{"style":1785},[5294],{"type":51,"value":5188},{"type":45,"tag":1747,"props":5296,"children":5297},{"style":1769},[5298],{"type":51,"value":1086},{"type":45,"tag":1747,"props":5300,"children":5301},{"style":1775},[5302],{"type":51,"value":1968},{"type":45,"tag":1747,"props":5304,"children":5305},{"class":1749,"line":1760},[5306,5311,5316,5321,5326],{"type":45,"tag":1747,"props":5307,"children":5308},{"style":1785},[5309],{"type":51,"value":5310},"  --claimed-count",{"type":45,"tag":1747,"props":5312,"children":5313},{"style":1785},[5314],{"type":51,"value":5315}," worker-1=",{"type":45,"tag":1747,"props":5317,"children":5318},{"style":3391},[5319],{"type":51,"value":5320},"0",{"type":45,"tag":1747,"props":5322,"children":5323},{"style":1785},[5324],{"type":51,"value":5325}," worker-2=",{"type":45,"tag":1747,"props":5327,"children":5328},{"style":3391},[5329],{"type":51,"value":5330},"3\n",{"type":45,"tag":54,"props":5332,"children":5333},{},[5334,5336,5342],{"type":51,"value":5335},"Repeated ",{"type":45,"tag":60,"props":5337,"children":5339},{"className":5338},[],[5340],{"type":51,"value":5341},"--claimed-count",{"type":51,"value":5343}," flags are also valid:",{"type":45,"tag":605,"props":5345,"children":5347},{"className":1739,"code":5346,"language":1741,"meta":613,"style":613},"python3 \"${C_REVIEW_PLUGIN_ROOT}\u002Fscripts\u002Fvalidate_artifacts.py\" \"${output_dir}\u002Fplan.json\" \\\n  --claimed-count worker-1=0 --claimed-count worker-2=3\n",[5348],{"type":45,"tag":60,"props":5349,"children":5350},{"__ignoreMap":613},[5351,5402],{"type":45,"tag":1747,"props":5352,"children":5353},{"class":1749,"line":1750},[5354,5358,5362,5366,5370,5374,5378,5382,5386,5390,5394,5398],{"type":45,"tag":1747,"props":5355,"children":5356},{"style":1764},[5357],{"type":51,"value":3158},{"type":45,"tag":1747,"props":5359,"children":5360},{"style":1769},[5361],{"type":51,"value":1772},{"type":45,"tag":1747,"props":5363,"children":5364},{"style":1775},[5365],{"type":51,"value":848},{"type":45,"tag":1747,"props":5367,"children":5368},{"style":1769},[5369],{"type":51,"value":2723},{"type":45,"tag":1747,"props":5371,"children":5372},{"style":1785},[5373],{"type":51,"value":5167},{"type":45,"tag":1747,"props":5375,"children":5376},{"style":1769},[5377],{"type":51,"value":1086},{"type":45,"tag":1747,"props":5379,"children":5380},{"style":1769},[5381],{"type":51,"value":1772},{"type":45,"tag":1747,"props":5383,"children":5384},{"style":1775},[5385],{"type":51,"value":2653},{"type":45,"tag":1747,"props":5387,"children":5388},{"style":1769},[5389],{"type":51,"value":2723},{"type":45,"tag":1747,"props":5391,"children":5392},{"style":1785},[5393],{"type":51,"value":5188},{"type":45,"tag":1747,"props":5395,"children":5396},{"style":1769},[5397],{"type":51,"value":1086},{"type":45,"tag":1747,"props":5399,"children":5400},{"style":1775},[5401],{"type":51,"value":1968},{"type":45,"tag":1747,"props":5403,"children":5404},{"class":1749,"line":1760},[5405,5409,5413,5417,5421,5425],{"type":45,"tag":1747,"props":5406,"children":5407},{"style":1785},[5408],{"type":51,"value":5310},{"type":45,"tag":1747,"props":5410,"children":5411},{"style":1785},[5412],{"type":51,"value":5315},{"type":45,"tag":1747,"props":5414,"children":5415},{"style":3391},[5416],{"type":51,"value":5320},{"type":45,"tag":1747,"props":5418,"children":5419},{"style":1785},[5420],{"type":51,"value":5214},{"type":45,"tag":1747,"props":5422,"children":5423},{"style":1785},[5424],{"type":51,"value":5325},{"type":45,"tag":1747,"props":5426,"children":5427},{"style":3391},[5428],{"type":51,"value":5330},{"type":45,"tag":54,"props":5430,"children":5431},{},[5432,5434,5440,5442,5447,5449,5454],{"type":51,"value":5433},"Do not pass bare ",{"type":45,"tag":60,"props":5435,"children":5437},{"className":5436},[],[5438],{"type":51,"value":5439},"worker-N=N",{"type":51,"value":5441}," arguments unless they are grouped after ",{"type":45,"tag":60,"props":5443,"children":5445},{"className":5444},[],[5446],{"type":51,"value":5341},{"type":51,"value":5448}," or preceded by their own repeated ",{"type":45,"tag":60,"props":5450,"children":5452},{"className":5451},[],[5453],{"type":51,"value":5341},{"type":51,"value":5455}," flag.",{"type":45,"tag":54,"props":5457,"children":5458},{},[5459,5461,5466,5468,5473,5474,5479,5481,5486,5488,5494,5496,5502,5504,5510,5512,5517,5519,5524,5526,5531],{"type":51,"value":5460},"If validation exits non-zero, treat the completion as malformed and retryable (classifier row #4): mark the task ",{"type":45,"tag":60,"props":5462,"children":5464},{"className":5463},[],[5465],{"type":51,"value":3650},{"type":51,"value":5467},", store the validator output in ",{"type":45,"tag":60,"props":5469,"children":5471},{"className":5470},[],[5472],{"type":51,"value":4794},{"type":51,"value":1543},{"type":45,"tag":60,"props":5475,"children":5477},{"className":5476},[],[5478],{"type":51,"value":4801},{"type":51,"value":5480},", and increment ",{"type":45,"tag":60,"props":5482,"children":5484},{"className":5483},[],[5485],{"type":51,"value":4809},{"type":51,"value":5487},". Missing ",{"type":45,"tag":60,"props":5489,"children":5491},{"className":5490},[],[5492],{"type":51,"value":5493},"findings-index.d\u002Fworker-N.txt",{"type":51,"value":5495},", missing ",{"type":45,"tag":60,"props":5497,"children":5499},{"className":5498},[],[5500],{"type":51,"value":5501},"coverage\u002Fworker-N.md",{"type":51,"value":5503},", missing coverage rows, invalid ",{"type":45,"tag":60,"props":5505,"children":5507},{"className":5506},[],[5508],{"type":51,"value":5509},"skipped:",{"type":51,"value":5511}," rows, filed IDs absent from the shard or disk, and claimed-count mismatches are all malformed completions. After the retry cap, leave the cluster task incomplete and surface the validator output in ",{"type":45,"tag":60,"props":5513,"children":5515},{"className":5514},[],[5516],{"type":51,"value":677},{"type":51,"value":5518}," and the final response. Only validation-clean provisional completions may be ",{"type":45,"tag":60,"props":5520,"children":5522},{"className":5521},[],[5523],{"type":51,"value":4695},{"type":51,"value":5525},"d to ",{"type":45,"tag":60,"props":5527,"children":5529},{"className":5528},[],[5530],{"type":51,"value":1031},{"type":51,"value":707},{"type":45,"tag":54,"props":5533,"children":5534},{},[5535,5537,5542,5544,5550],{"type":51,"value":5536},"Then build the index. The canonical index is the set of finding files ",{"type":45,"tag":222,"props":5538,"children":5539},{},[5540],{"type":51,"value":5541},"actually on disk",{"type":51,"value":5543},", not the shard union — building from disk guarantees that a finding written without a matching shard entry (a worker that crashed between its ",{"type":45,"tag":60,"props":5545,"children":5547},{"className":5546},[],[5548],{"type":51,"value":5549},"Write",{"type":51,"value":5551}," and its shard-append, or the single-prefix empty-shard trap the worker prompt warns about) is still picked up by dedup → fp-judge → REPORT\u002FSARIF instead of silently vanishing, and that every index entry resolves to a real file:",{"type":45,"tag":605,"props":5553,"children":5555},{"className":1739,"code":5554,"language":1741,"meta":613,"style":613},"# Canonical index = every finding file on disk. `find` never fails on no-match\n# (an empty findings\u002F yields an empty index — the unambiguous \"zero findings\"\n# signal). `sort -u` collapses Phase-7 retry duplicates: replacement workers reuse\n# deterministic ids, so the same path appears once.\nfind \"${output_dir}\u002Ffindings\" -maxdepth 1 -type f -name '*.md' 2>\u002Fdev\u002Fnull \\\n  | sort -u > \"${output_dir}\u002Ffindings-index.txt\"\n\n# Reconcile against the per-worker shards: any path on disk but in NO shard is an\n# orphan whose worker failed to record it. It is already in the index above (so it\n# is NOT dropped) — print it so the bookkeeping gap can be surfaced. Non-fatal.\nif [ -d \"${output_dir}\u002Ffindings-index.d\" ]; then\n  # Reconcile by basename (finding ids are unique), so a path-format difference\n  # between the worker `find` and this one (trailing slash, \u002Fvar↔\u002Fprivate\u002Fvar)\n  # cannot manufacture false orphans. Any basename on disk but in no shard is an\n  # orphan whose worker failed to record it.\n  comm -13 \\\n    \u003C(find \"${output_dir}\u002Ffindings-index.d\" -maxdepth 1 -type f -name 'worker-*.txt' -exec awk 1 {} + 2>\u002Fdev\u002Fnull | sed 's#.*\u002F##; \u002F^[[:space:]]*$\u002Fd' | sort -u) \\\n    \u003C(find \"${output_dir}\u002Ffindings\" -maxdepth 1 -type f -name '*.md' 2>\u002Fdev\u002Fnull | sed 's#.*\u002F##' | sort -u)\nfi\n",[5556],{"type":45,"tag":60,"props":5557,"children":5558},{"__ignoreMap":613},[5559,5567,5575,5583,5591,5665,5709,5718,5726,5734,5742,5791,5799,5808,5817,5826,5844,5971,6073],{"type":45,"tag":1747,"props":5560,"children":5561},{"class":1749,"line":1750},[5562],{"type":45,"tag":1747,"props":5563,"children":5564},{"style":1754},[5565],{"type":51,"value":5566},"# Canonical index = every finding file on disk. `find` never fails on no-match\n",{"type":45,"tag":1747,"props":5568,"children":5569},{"class":1749,"line":1760},[5570],{"type":45,"tag":1747,"props":5571,"children":5572},{"style":1754},[5573],{"type":51,"value":5574},"# (an empty findings\u002F yields an empty index — the unambiguous \"zero findings\"\n",{"type":45,"tag":1747,"props":5576,"children":5577},{"class":1749,"line":1931},[5578],{"type":45,"tag":1747,"props":5579,"children":5580},{"style":1754},[5581],{"type":51,"value":5582},"# signal). `sort -u` collapses Phase-7 retry duplicates: replacement workers reuse\n",{"type":45,"tag":1747,"props":5584,"children":5585},{"class":1749,"line":1940},[5586],{"type":45,"tag":1747,"props":5587,"children":5588},{"style":1754},[5589],{"type":51,"value":5590},"# deterministic ids, so the same path appears once.\n",{"type":45,"tag":1747,"props":5592,"children":5593},{"class":1749,"line":1971},[5594,5598,5602,5606,5610,5614,5618,5622,5626,5630,5634,5638,5642,5647,5651,5656,5661],{"type":45,"tag":1747,"props":5595,"children":5596},{"style":1764},[5597],{"type":51,"value":357},{"type":45,"tag":1747,"props":5599,"children":5600},{"style":1769},[5601],{"type":51,"value":1772},{"type":45,"tag":1747,"props":5603,"children":5604},{"style":1775},[5605],{"type":51,"value":2653},{"type":45,"tag":1747,"props":5607,"children":5608},{"style":1769},[5609],{"type":51,"value":2723},{"type":45,"tag":1747,"props":5611,"children":5612},{"style":1785},[5613],{"type":51,"value":2728},{"type":45,"tag":1747,"props":5615,"children":5616},{"style":1769},[5617],{"type":51,"value":1086},{"type":45,"tag":1747,"props":5619,"children":5620},{"style":1785},[5621],{"type":51,"value":4995},{"type":45,"tag":1747,"props":5623,"children":5624},{"style":3391},[5625],{"type":51,"value":5000},{"type":45,"tag":1747,"props":5627,"children":5628},{"style":1785},[5629],{"type":51,"value":1797},{"type":45,"tag":1747,"props":5631,"children":5632},{"style":1785},[5633],{"type":51,"value":1802},{"type":45,"tag":1747,"props":5635,"children":5636},{"style":1785},[5637],{"type":51,"value":1837},{"type":45,"tag":1747,"props":5639,"children":5640},{"style":1769},[5641],{"type":51,"value":1817},{"type":45,"tag":1747,"props":5643,"children":5644},{"style":1785},[5645],{"type":51,"value":5646},"*.md",{"type":45,"tag":1747,"props":5648,"children":5649},{"style":1769},[5650],{"type":51,"value":1827},{"type":45,"tag":1747,"props":5652,"children":5653},{"style":1769},[5654],{"type":51,"value":5655}," 2>",{"type":45,"tag":1747,"props":5657,"children":5658},{"style":1785},[5659],{"type":51,"value":5660},"\u002Fdev\u002Fnull",{"type":45,"tag":1747,"props":5662,"children":5663},{"style":1775},[5664],{"type":51,"value":1968},{"type":45,"tag":1747,"props":5666,"children":5667},{"class":1749,"line":2015},[5668,5673,5678,5683,5688,5692,5696,5700,5705],{"type":45,"tag":1747,"props":5669,"children":5670},{"style":1769},[5671],{"type":51,"value":5672},"  |",{"type":45,"tag":1747,"props":5674,"children":5675},{"style":1764},[5676],{"type":51,"value":5677}," sort",{"type":45,"tag":1747,"props":5679,"children":5680},{"style":1785},[5681],{"type":51,"value":5682}," -u",{"type":45,"tag":1747,"props":5684,"children":5685},{"style":1769},[5686],{"type":51,"value":5687}," >",{"type":45,"tag":1747,"props":5689,"children":5690},{"style":1769},[5691],{"type":51,"value":1772},{"type":45,"tag":1747,"props":5693,"children":5694},{"style":1775},[5695],{"type":51,"value":2653},{"type":45,"tag":1747,"props":5697,"children":5698},{"style":1769},[5699],{"type":51,"value":2723},{"type":45,"tag":1747,"props":5701,"children":5702},{"style":1785},[5703],{"type":51,"value":5704},"\u002Ffindings-index.txt",{"type":45,"tag":1747,"props":5706,"children":5707},{"style":1769},[5708],{"type":51,"value":2754},{"type":45,"tag":1747,"props":5710,"children":5711},{"class":1749,"line":2103},[5712],{"type":45,"tag":1747,"props":5713,"children":5715},{"emptyLinePlaceholder":5714},true,[5716],{"type":51,"value":5717},"\n",{"type":45,"tag":1747,"props":5719,"children":5720},{"class":1749,"line":2143},[5721],{"type":45,"tag":1747,"props":5722,"children":5723},{"style":1754},[5724],{"type":51,"value":5725},"# Reconcile against the per-worker shards: any path on disk but in NO shard is an\n",{"type":45,"tag":1747,"props":5727,"children":5728},{"class":1749,"line":2152},[5729],{"type":45,"tag":1747,"props":5730,"children":5731},{"style":1754},[5732],{"type":51,"value":5733},"# orphan whose worker failed to record it. It is already in the index above (so it\n",{"type":45,"tag":1747,"props":5735,"children":5736},{"class":1749,"line":2181},[5737],{"type":45,"tag":1747,"props":5738,"children":5739},{"style":1754},[5740],{"type":51,"value":5741},"# is NOT dropped) — print it so the bookkeeping gap can be surfaced. Non-fatal.\n",{"type":45,"tag":1747,"props":5743,"children":5744},{"class":1749,"line":2221},[5745,5750,5755,5760,5764,5768,5772,5777,5781,5786],{"type":45,"tag":1747,"props":5746,"children":5747},{"style":2467},[5748],{"type":51,"value":5749},"if",{"type":45,"tag":1747,"props":5751,"children":5752},{"style":1769},[5753],{"type":51,"value":5754}," [",{"type":45,"tag":1747,"props":5756,"children":5757},{"style":1769},[5758],{"type":51,"value":5759}," -d",{"type":45,"tag":1747,"props":5761,"children":5762},{"style":1769},[5763],{"type":51,"value":1772},{"type":45,"tag":1747,"props":5765,"children":5766},{"style":1775},[5767],{"type":51,"value":2653},{"type":45,"tag":1747,"props":5769,"children":5770},{"style":1769},[5771],{"type":51,"value":2723},{"type":45,"tag":1747,"props":5773,"children":5774},{"style":1785},[5775],{"type":51,"value":5776},"\u002Ffindings-index.d",{"type":45,"tag":1747,"props":5778,"children":5779},{"style":1769},[5780],{"type":51,"value":1086},{"type":45,"tag":1747,"props":5782,"children":5783},{"style":1769},[5784],{"type":51,"value":5785}," ];",{"type":45,"tag":1747,"props":5787,"children":5788},{"style":2467},[5789],{"type":51,"value":5790}," then\n",{"type":45,"tag":1747,"props":5792,"children":5793},{"class":1749,"line":2309},[5794],{"type":45,"tag":1747,"props":5795,"children":5796},{"style":1754},[5797],{"type":51,"value":5798},"  # Reconcile by basename (finding ids are unique), so a path-format difference\n",{"type":45,"tag":1747,"props":5800,"children":5802},{"class":1749,"line":5801},13,[5803],{"type":45,"tag":1747,"props":5804,"children":5805},{"style":1754},[5806],{"type":51,"value":5807},"  # between the worker `find` and this one (trailing slash, \u002Fvar↔\u002Fprivate\u002Fvar)\n",{"type":45,"tag":1747,"props":5809,"children":5811},{"class":1749,"line":5810},14,[5812],{"type":45,"tag":1747,"props":5813,"children":5814},{"style":1754},[5815],{"type":51,"value":5816},"  # cannot manufacture false orphans. Any basename on disk but in no shard is an\n",{"type":45,"tag":1747,"props":5818,"children":5820},{"class":1749,"line":5819},15,[5821],{"type":45,"tag":1747,"props":5822,"children":5823},{"style":1754},[5824],{"type":51,"value":5825},"  # orphan whose worker failed to record it.\n",{"type":45,"tag":1747,"props":5827,"children":5829},{"class":1749,"line":5828},16,[5830,5835,5840],{"type":45,"tag":1747,"props":5831,"children":5832},{"style":1764},[5833],{"type":51,"value":5834},"  comm",{"type":45,"tag":1747,"props":5836,"children":5837},{"style":1785},[5838],{"type":51,"value":5839}," -13",{"type":45,"tag":1747,"props":5841,"children":5842},{"style":1775},[5843],{"type":51,"value":1968},{"type":45,"tag":1747,"props":5845,"children":5847},{"class":1749,"line":5846},17,[5848,5853,5857,5861,5865,5869,5873,5877,5882,5886,5891,5895,5900,5904,5909,5913,5918,5923,5928,5933,5938,5942,5947,5951,5955,5959,5963,5967],{"type":45,"tag":1747,"props":5849,"children":5850},{"style":1769},[5851],{"type":51,"value":5852},"    \u003C(",{"type":45,"tag":1747,"props":5854,"children":5855},{"style":1764},[5856],{"type":51,"value":357},{"type":45,"tag":1747,"props":5858,"children":5859},{"style":1769},[5860],{"type":51,"value":1772},{"type":45,"tag":1747,"props":5862,"children":5863},{"style":1775},[5864],{"type":51,"value":2653},{"type":45,"tag":1747,"props":5866,"children":5867},{"style":1769},[5868],{"type":51,"value":2723},{"type":45,"tag":1747,"props":5870,"children":5871},{"style":1785},[5872],{"type":51,"value":5776},{"type":45,"tag":1747,"props":5874,"children":5875},{"style":1769},[5876],{"type":51,"value":1086},{"type":45,"tag":1747,"props":5878,"children":5879},{"style":1785},[5880],{"type":51,"value":5881}," -maxdepth ",{"type":45,"tag":1747,"props":5883,"children":5884},{"style":3391},[5885],{"type":51,"value":4659},{"type":45,"tag":1747,"props":5887,"children":5888},{"style":1785},[5889],{"type":51,"value":5890}," -type f -name ",{"type":45,"tag":1747,"props":5892,"children":5893},{"style":1769},[5894],{"type":51,"value":1827},{"type":45,"tag":1747,"props":5896,"children":5897},{"style":1785},[5898],{"type":51,"value":5899},"worker-*.txt",{"type":45,"tag":1747,"props":5901,"children":5902},{"style":1769},[5903],{"type":51,"value":1827},{"type":45,"tag":1747,"props":5905,"children":5906},{"style":1785},[5907],{"type":51,"value":5908}," -exec awk ",{"type":45,"tag":1747,"props":5910,"children":5911},{"style":3391},[5912],{"type":51,"value":4659},{"type":45,"tag":1747,"props":5914,"children":5915},{"style":1785},[5916],{"type":51,"value":5917}," {} + ",{"type":45,"tag":1747,"props":5919,"children":5920},{"style":1769},[5921],{"type":51,"value":5922},"2>",{"type":45,"tag":1747,"props":5924,"children":5925},{"style":1785},[5926],{"type":51,"value":5927},"\u002Fdev\u002Fnull ",{"type":45,"tag":1747,"props":5929,"children":5930},{"style":1769},[5931],{"type":51,"value":5932},"|",{"type":45,"tag":1747,"props":5934,"children":5935},{"style":1764},[5936],{"type":51,"value":5937}," sed",{"type":45,"tag":1747,"props":5939,"children":5940},{"style":1769},[5941],{"type":51,"value":1817},{"type":45,"tag":1747,"props":5943,"children":5944},{"style":1785},[5945],{"type":51,"value":5946},"s#.*\u002F##; \u002F^[[:space:]]*$\u002Fd",{"type":45,"tag":1747,"props":5948,"children":5949},{"style":1769},[5950],{"type":51,"value":1827},{"type":45,"tag":1747,"props":5952,"children":5953},{"style":1769},[5954],{"type":51,"value":2130},{"type":45,"tag":1747,"props":5956,"children":5957},{"style":1764},[5958],{"type":51,"value":5677},{"type":45,"tag":1747,"props":5960,"children":5961},{"style":1785},[5962],{"type":51,"value":5682},{"type":45,"tag":1747,"props":5964,"children":5965},{"style":1769},[5966],{"type":51,"value":228},{"type":45,"tag":1747,"props":5968,"children":5969},{"style":1775},[5970],{"type":51,"value":1968},{"type":45,"tag":1747,"props":5972,"children":5974},{"class":1749,"line":5973},18,[5975,5979,5983,5987,5991,5995,5999,6003,6007,6011,6015,6019,6023,6027,6031,6035,6039,6043,6047,6052,6056,6060,6064,6068],{"type":45,"tag":1747,"props":5976,"children":5977},{"style":1769},[5978],{"type":51,"value":5852},{"type":45,"tag":1747,"props":5980,"children":5981},{"style":1764},[5982],{"type":51,"value":357},{"type":45,"tag":1747,"props":5984,"children":5985},{"style":1769},[5986],{"type":51,"value":1772},{"type":45,"tag":1747,"props":5988,"children":5989},{"style":1775},[5990],{"type":51,"value":2653},{"type":45,"tag":1747,"props":5992,"children":5993},{"style":1769},[5994],{"type":51,"value":2723},{"type":45,"tag":1747,"props":5996,"children":5997},{"style":1785},[5998],{"type":51,"value":2728},{"type":45,"tag":1747,"props":6000,"children":6001},{"style":1769},[6002],{"type":51,"value":1086},{"type":45,"tag":1747,"props":6004,"children":6005},{"style":1785},[6006],{"type":51,"value":5881},{"type":45,"tag":1747,"props":6008,"children":6009},{"style":3391},[6010],{"type":51,"value":4659},{"type":45,"tag":1747,"props":6012,"children":6013},{"style":1785},[6014],{"type":51,"value":5890},{"type":45,"tag":1747,"props":6016,"children":6017},{"style":1769},[6018],{"type":51,"value":1827},{"type":45,"tag":1747,"props":6020,"children":6021},{"style":1785},[6022],{"type":51,"value":5646},{"type":45,"tag":1747,"props":6024,"children":6025},{"style":1769},[6026],{"type":51,"value":1827},{"type":45,"tag":1747,"props":6028,"children":6029},{"style":1769},[6030],{"type":51,"value":5655},{"type":45,"tag":1747,"props":6032,"children":6033},{"style":1785},[6034],{"type":51,"value":5927},{"type":45,"tag":1747,"props":6036,"children":6037},{"style":1769},[6038],{"type":51,"value":5932},{"type":45,"tag":1747,"props":6040,"children":6041},{"style":1764},[6042],{"type":51,"value":5937},{"type":45,"tag":1747,"props":6044,"children":6045},{"style":1769},[6046],{"type":51,"value":1817},{"type":45,"tag":1747,"props":6048,"children":6049},{"style":1785},[6050],{"type":51,"value":6051},"s#.*\u002F##",{"type":45,"tag":1747,"props":6053,"children":6054},{"style":1769},[6055],{"type":51,"value":1827},{"type":45,"tag":1747,"props":6057,"children":6058},{"style":1769},[6059],{"type":51,"value":2130},{"type":45,"tag":1747,"props":6061,"children":6062},{"style":1764},[6063],{"type":51,"value":5677},{"type":45,"tag":1747,"props":6065,"children":6066},{"style":1785},[6067],{"type":51,"value":5682},{"type":45,"tag":1747,"props":6069,"children":6070},{"style":1769},[6071],{"type":51,"value":6072},")\n",{"type":45,"tag":1747,"props":6074,"children":6076},{"class":1749,"line":6075},19,[6077],{"type":45,"tag":1747,"props":6078,"children":6079},{"style":2467},[6080],{"type":51,"value":6081},"fi\n",{"type":45,"tag":54,"props":6083,"children":6084},{},[6085,6087,6093,6095,6101,6103,6108,6110,6115,6117,6123],{"type":51,"value":6086},"The shards stay the per-worker audit trail (",{"type":45,"tag":60,"props":6088,"children":6090},{"className":6089},[],[6091],{"type":51,"value":6092},"validate_artifacts.py",{"type":51,"value":6094}," checks them) and the dedup-judge's crash-recovery fallback, but they no longer gate what reaches the pipeline. For each orphan basename the reconcile prints, map its ",{"type":45,"tag":60,"props":6096,"children":6098},{"className":6097},[],[6099],{"type":51,"value":6100},"\u003CPREFIX>",{"type":51,"value":6102}," to the owning worker via ",{"type":45,"tag":60,"props":6104,"children":6106},{"className":6105},[],[6107],{"type":51,"value":633},{"type":51,"value":6109}," and note in ",{"type":45,"tag":60,"props":6111,"children":6113},{"className":6112},[],[6114],{"type":51,"value":677},{"type":51,"value":6116}," that that worker's shard was incomplete — the finding is already in the index (so it is not lost), but the bookkeeping gap should be visible. Still cross-check the index line count against the sum of ",{"type":45,"tag":60,"props":6118,"children":6120},{"className":6119},[],[6121],{"type":51,"value":6122},"wrote N",{"type":51,"value":6124}," worker claims; log mismatches but don't abort.",{"type":45,"tag":54,"props":6126,"children":6127},{},[6128,6130,6136,6138,6144],{"type":51,"value":6129},"After task updates and index creation, run ",{"type":45,"tag":60,"props":6131,"children":6133},{"className":6132},[],[6134],{"type":51,"value":6135},"TaskList",{"type":51,"value":6137}," and write ",{"type":45,"tag":60,"props":6139,"children":6141},{"className":6140},[],[6142],{"type":51,"value":6143},"${output_dir}\u002Frun-summary.md",{"type":51,"value":6145}," with:",{"type":45,"tag":126,"props":6147,"children":6148},{},[6149,6179,6204,6214],{"type":45,"tag":130,"props":6150,"children":6151},{},[6152,6154,6159,6160,6165,6166,6171,6172,6177],{"type":51,"value":6153},"resolved parameters (",{"type":45,"tag":60,"props":6155,"children":6157},{"className":6156},[],[6158],{"type":51,"value":1173},{"type":51,"value":83},{"type":45,"tag":60,"props":6161,"children":6163},{"className":6162},[],[6164],{"type":51,"value":1187},{"type":51,"value":83},{"type":45,"tag":60,"props":6167,"children":6169},{"className":6168},[],[6170],{"type":51,"value":887},{"type":51,"value":83},{"type":45,"tag":60,"props":6173,"children":6175},{"className":6174},[],[6176],{"type":51,"value":898},{"type":51,"value":6178},", language\u002Fplatform flags, compile-commands status)",{"type":45,"tag":130,"props":6180,"children":6181},{},[6182,6184,6189,6190,6195,6197,6202],{"type":51,"value":6183},"worker outcome table (",{"type":45,"tag":60,"props":6185,"children":6187},{"className":6186},[],[6188],{"type":51,"value":3692},{"type":51,"value":83},{"type":45,"tag":60,"props":6191,"children":6193},{"className":6192},[],[6194],{"type":51,"value":3524},{"type":51,"value":6196},", claimed finding count, shard line count, coverage-file path (",{"type":45,"tag":60,"props":6198,"children":6200},{"className":6199},[],[6201],{"type":51,"value":2772},{"type":51,"value":6203},"), task status, retry\u002Fabort state)",{"type":45,"tag":130,"props":6205,"children":6206},{},[6207,6212],{"type":45,"tag":60,"props":6208,"children":6210},{"className":6209},[],[6211],{"type":51,"value":662},{"type":51,"value":6213}," line count and any mismatch against worker claims",{"type":45,"tag":130,"props":6215,"children":6216},{},[6217],{"type":51,"value":6218},"judge status once Phase 8 finishes, or the reason a judge was skipped\u002Ffailed",{"type":45,"tag":54,"props":6220,"children":6221},{},[6222,6224,6229,6230,6235,6237,6242,6244,6250,6252,6258,6260,6265,6267,6272,6274,6279,6281,6286],{"type":51,"value":6223},"If any Phase-5 cluster task is not ",{"type":45,"tag":60,"props":6225,"children":6227},{"className":6226},[],[6228],{"type":51,"value":1031},{"type":51,"value":755},{"type":45,"tag":222,"props":6231,"children":6232},{},[6233],{"type":51,"value":6234},"or",{"type":51,"value":6236}," any worker returned a ",{"type":45,"tag":60,"props":6238,"children":6240},{"className":6239},[],[6241],{"type":51,"value":4834},{"type":51,"value":6243}," line carrying the ",{"type":45,"tag":60,"props":6245,"children":6247},{"className":6246},[],[6248],{"type":51,"value":6249},"truncated at hard cap",{"type":51,"value":6251}," token (it hit the tool-call cap before searching every pass; its coverage file will show one or more ",{"type":45,"tag":60,"props":6253,"children":6255},{"className":6254},[],[6256],{"type":51,"value":6257},"cleared (NOT SEARCHED — truncated at hard cap)",{"type":51,"value":6259}," rows) — include it prominently in ",{"type":45,"tag":60,"props":6261,"children":6263},{"className":6262},[],[6264],{"type":51,"value":677},{"type":51,"value":6266}," and the final response. A hard-cap-truncated worker is marked ",{"type":45,"tag":60,"props":6268,"children":6270},{"className":6269},[],[6271],{"type":51,"value":1031},{"type":51,"value":6273}," for ledger purposes but is a ",{"type":45,"tag":222,"props":6275,"children":6276},{},[6277],{"type":51,"value":6278},"partial",{"type":51,"value":6280}," result: do not let that ",{"type":45,"tag":60,"props":6282,"children":6284},{"className":6283},[],[6285],{"type":51,"value":1031},{"type":51,"value":6287}," status hide the incomplete coverage behind a successful report.",{"type":45,"tag":54,"props":6289,"children":6290},{},[6291,6296,6298,6303,6305,6310,6311,6316],{"type":45,"tag":222,"props":6292,"children":6293},{},[6294],{"type":51,"value":6295},"Always run Phase 8 even on zero findings",{"type":51,"value":6297}," — both judges short-circuit on an empty index: dedup-judge writes a minimal no-op ",{"type":45,"tag":60,"props":6299,"children":6301},{"className":6300},[],[6302],{"type":51,"value":684},{"type":51,"value":6304},", and fp-judge writes empty ",{"type":45,"tag":60,"props":6306,"children":6308},{"className":6307},[],[6309],{"type":51,"value":698},{"type":51,"value":271},{"type":45,"tag":60,"props":6312,"children":6314},{"className":6313},[],[6315],{"type":51,"value":705},{"type":51,"value":6317}," so SARIF consumers get a stable artifact set.",{"type":45,"tag":1146,"props":6319,"children":6321},{"id":6320},"phase-8-judge-pipeline-sequential-dedup-fpseverity",[6322],{"type":51,"value":6323},"Phase 8: Judge Pipeline (sequential, dedup → fp+severity)",{"type":45,"tag":54,"props":6325,"children":6326},{},[6327,6331,6332,6337,6338,6342,6344,6349,6350,6355,6356,6361,6363,6368],{"type":45,"tag":222,"props":6328,"children":6329},{},[6330],{"type":51,"value":1159},{"type":51,"value":330},{"type":45,"tag":60,"props":6333,"children":6335},{"className":6334},[],[6336],{"type":51,"value":662},{"type":51,"value":2804},{"type":45,"tag":222,"props":6339,"children":6340},{},[6341],{"type":51,"value":1166},{"type":51,"value":6343}," dedup-judge and fp-judge have returned; ",{"type":45,"tag":60,"props":6345,"children":6347},{"className":6346},[],[6348],{"type":51,"value":684},{"type":51,"value":83},{"type":45,"tag":60,"props":6351,"children":6353},{"className":6352},[],[6354],{"type":51,"value":691},{"type":51,"value":83},{"type":45,"tag":60,"props":6357,"children":6359},{"className":6358},[],[6360],{"type":51,"value":698},{"type":51,"value":6362},", and ideally ",{"type":45,"tag":60,"props":6364,"children":6366},{"className":6365},[],[6367],{"type":51,"value":705},{"type":51,"value":6369}," are written.",{"type":45,"tag":54,"props":6371,"children":6372},{},[6373,6375,6381,6383,6387,6389,6395],{"type":51,"value":6374},"Each judge's full protocol is its system prompt (",{"type":45,"tag":60,"props":6376,"children":6378},{"className":6377},[],[6379],{"type":51,"value":6380},"agents\u002Fc-review-{dedup,fp}-judge.md",{"type":51,"value":6382},"); spawn prompts pass only per-run variables. Do ",{"type":45,"tag":222,"props":6384,"children":6385},{},[6386],{"type":51,"value":320},{"type":51,"value":6388}," reference ",{"type":45,"tag":60,"props":6390,"children":6392},{"className":6391},[],[6393],{"type":51,"value":6394},"prompts\u002Finternal\u002Fjudges\u002F",{"type":51,"value":6396}," — those files don't exist.",{"type":45,"tag":3954,"props":6398,"children":6399},{},[6400,6465],{"type":45,"tag":54,"props":6401,"children":6402},{},[6403,6408,6410,6415,6416,6420,6422,6428,6429,6435,6437,6442,6444,6449,6451,6456,6458,6463],{"type":45,"tag":222,"props":6404,"children":6405},{},[6406],{"type":51,"value":6407},"STOP — these two judges run in SEQUENCE, not in parallel.",{"type":51,"value":6409}," Unlike the Phase-6b workers (which you spawn as M ",{"type":45,"tag":60,"props":6411,"children":6413},{"className":6412},[],[6414],{"type":51,"value":277},{"type":51,"value":4162},{"type":45,"tag":511,"props":6417,"children":6418},{},[6419],{"type":51,"value":1258},{"type":51,"value":6421}," message precisely because that runs them concurrently), the judges have a hard data dependency: fp-judge must see the ",{"type":45,"tag":60,"props":6423,"children":6425},{"className":6424},[],[6426],{"type":51,"value":6427},"merged_into",{"type":51,"value":408},{"type":45,"tag":60,"props":6430,"children":6432},{"className":6431},[],[6433],{"type":51,"value":6434},"also_known_as",{"type":51,"value":6436}," annotations dedup-judge writes, and it only skips files already carrying ",{"type":45,"tag":60,"props":6438,"children":6440},{"className":6439},[],[6441],{"type":51,"value":6427},{"type":51,"value":6443},". If you emit both ",{"type":45,"tag":60,"props":6445,"children":6447},{"className":6446},[],[6448],{"type":51,"value":277},{"type":51,"value":6450}," calls in one message they run concurrently — fp-judge reads findings before any merge annotations exist, judges every duplicate as a separate primary, and (because ",{"type":45,"tag":60,"props":6452,"children":6454},{"className":6453},[],[6455],{"type":51,"value":684},{"type":51,"value":6457}," doesn't exist yet) trips its \"dedup did not run\" fallback, producing an inflated, duplicated ",{"type":45,"tag":60,"props":6459,"children":6461},{"className":6460},[],[6462],{"type":51,"value":698},{"type":51,"value":6464},"\u002FSARIF.",{"type":45,"tag":54,"props":6466,"children":6467},{},[6468,6470,6475,6477,6483,6485,6490,6492,6497,6499,6503,6505,6511,6513,6518,6520],{"type":51,"value":6469},"Spawn dedup-judge in its ",{"type":45,"tag":222,"props":6471,"children":6472},{},[6473],{"type":51,"value":6474},"own",{"type":51,"value":6476}," assistant message, wait for its ",{"type":45,"tag":60,"props":6478,"children":6480},{"className":6479},[],[6481],{"type":51,"value":6482},"dedup-judge complete:",{"type":51,"value":6484}," (or ",{"type":45,"tag":60,"props":6486,"children":6488},{"className":6487},[],[6489],{"type":51,"value":4841},{"type":51,"value":6491},") return, ",{"type":45,"tag":222,"props":6493,"children":6494},{},[6495],{"type":51,"value":6496},"then",{"type":51,"value":6498}," spawn fp-judge in a ",{"type":45,"tag":222,"props":6500,"children":6501},{},[6502],{"type":51,"value":4202},{"type":51,"value":6504}," message. Before composing the fp-judge spawn, confirm dedup finished — ",{"type":45,"tag":60,"props":6506,"children":6508},{"className":6507},[],[6509],{"type":51,"value":6510},"Bash: test -f ${output_dir}\u002Fdedup-summary.md",{"type":51,"value":6512}," must succeed (or you saw the dedup ",{"type":45,"tag":60,"props":6514,"children":6516},{"className":6515},[],[6517],{"type":51,"value":4834},{"type":51,"value":6519}," token). ",{"type":45,"tag":222,"props":6521,"children":6522},{},[6523,6525,6530],{"type":51,"value":6524},"Never put both judge ",{"type":45,"tag":60,"props":6526,"children":6528},{"className":6527},[],[6529],{"type":51,"value":277},{"type":51,"value":6531}," calls in the same message.",{"type":45,"tag":743,"props":6533,"children":6534},{},[6535,6552],{"type":45,"tag":130,"props":6536,"children":6537},{},[6538,6543,6544,6550],{"type":45,"tag":222,"props":6539,"children":6540},{},[6541],{"type":51,"value":6542},"First message",{"type":51,"value":755},{"type":45,"tag":60,"props":6545,"children":6547},{"className":6546},[],[6548],{"type":51,"value":6549},"Agent(subagent_type=\"c-review:c-review-dedup-judge\", description=\"Dedup judge\", prompt=f\"output_dir: {output_dir}\")",{"type":51,"value":6551},". Wait for its return and classify it (below) before continuing.",{"type":45,"tag":130,"props":6553,"children":6554},{},[6555,6560,6561,6567,6569,6575,6576,6582],{"type":45,"tag":222,"props":6556,"children":6557},{},[6558],{"type":51,"value":6559},"Then, in a separate message",{"type":51,"value":755},{"type":45,"tag":60,"props":6562,"children":6564},{"className":6563},[],[6565],{"type":51,"value":6566},"Agent(subagent_type=\"c-review:c-review-fp-judge\", description=\"FP + severity judge\", prompt=f\"output_dir: {output_dir}\\nsarif_generator_path: {sarif_generator_path}\")",{"type":51,"value":6568}," — resolve ",{"type":45,"tag":60,"props":6570,"children":6572},{"className":6571},[],[6573],{"type":51,"value":6574},"sarif_generator_path",{"type":51,"value":4697},{"type":45,"tag":60,"props":6577,"children":6579},{"className":6578},[],[6580],{"type":51,"value":6581},"${C_REVIEW_PLUGIN_ROOT}\u002Fscripts\u002Fgenerate_sarif.py",{"type":51,"value":707},{"type":45,"tag":54,"props":6584,"children":6585},{},[6586,6591],{"type":45,"tag":222,"props":6587,"children":6588},{},[6589],{"type":51,"value":6590},"Judge failure handling.",{"type":51,"value":6592}," Same shape as Phase 7's classifier, applied to judge return text:",{"type":45,"tag":126,"props":6594,"children":6595},{},[6596,6612,6657],{"type":45,"tag":130,"props":6597,"children":6598},{},[6599,6605,6607],{"type":45,"tag":60,"props":6600,"children":6602},{"className":6601},[],[6603],{"type":51,"value":6604},"… complete:",{"type":51,"value":6606}," → ",{"type":45,"tag":222,"props":6608,"children":6609},{},[6610],{"type":51,"value":6611},"success.",{"type":45,"tag":130,"props":6613,"children":6614},{},[6615,6621,6622,6627,6629,6635,6637,6642,6644,6649,6651,6655],{"type":45,"tag":60,"props":6616,"children":6618},{"className":6617},[],[6619],{"type":51,"value":6620},"… abort:",{"type":51,"value":6606},{"type":45,"tag":222,"props":6623,"children":6624},{},[6625],{"type":51,"value":6626},"non-retryable for that judge.",{"type":51,"value":6628}," Surface the abort line plus ",{"type":45,"tag":60,"props":6630,"children":6632},{"className":6631},[],[6633],{"type":51,"value":6634},"ls -l ${output_dir}\u002Ffindings-index.txt",{"type":51,"value":6636},", then ",{"type":45,"tag":222,"props":6638,"children":6639},{},[6640],{"type":51,"value":6641},"still run Phase 8b",{"type":51,"value":6643}," (its SARIF + ",{"type":45,"tag":60,"props":6645,"children":6647},{"className":6646},[],[6648],{"type":51,"value":698},{"type":51,"value":6650}," safety net guarantees the artifact set even when a judge aborts), and stop without spawning further judges. \"Stop\" means do not continue the judge pipeline — it does ",{"type":45,"tag":222,"props":6652,"children":6653},{},[6654],{"type":51,"value":320},{"type":51,"value":6656}," mean skip Phase 8b.",{"type":45,"tag":130,"props":6658,"children":6659},{},[6660,6662,6667,6669,6674,6675,6681,6683,6688],{"type":51,"value":6661},"No ",{"type":45,"tag":60,"props":6663,"children":6665},{"className":6664},[],[6666],{"type":51,"value":4834},{"type":51,"value":6668}," (help message \u002F error \u002F question) → ",{"type":45,"tag":222,"props":6670,"children":6671},{},[6672],{"type":51,"value":6673},"retryable once.",{"type":51,"value":330},{"type":45,"tag":60,"props":6676,"children":6678},{"className":6677},[],[6679],{"type":51,"value":6680},"SendMessage(to=\u003CagentId>, …)",{"type":51,"value":6682}," rather than a fresh spawn (the agent already paid the protocol-parse cost). Include the explicit finding paths from ",{"type":45,"tag":60,"props":6684,"children":6686},{"className":6685},[],[6687],{"type":51,"value":662},{"type":51,"value":6689},". If the second try still fails, surface the transcript and continue to Phase 8b.",{"type":45,"tag":1146,"props":6691,"children":6693},{"id":6692},"phase-8b-report-safety-net-sarif-reportmd",[6694],{"type":51,"value":6695},"Phase 8b: Report safety net (SARIF + REPORT.md)",{"type":45,"tag":54,"props":6697,"children":6698},{},[6699,6703,6705,6709,6710,6716,6717,6723],{"type":45,"tag":222,"props":6700,"children":6701},{},[6702],{"type":51,"value":1159},{"type":51,"value":6704}," fp-judge returned, or the run aborted early. ",{"type":45,"tag":222,"props":6706,"children":6707},{},[6708],{"type":51,"value":1166},{"type":51,"value":330},{"type":45,"tag":60,"props":6711,"children":6713},{"className":6712},[],[6714],{"type":51,"value":6715},"${output_dir}\u002FREPORT.sarif",{"type":51,"value":2662},{"type":45,"tag":60,"props":6718,"children":6720},{"className":6719},[],[6721],{"type":51,"value":6722},"${output_dir}\u002FREPORT.md",{"type":51,"value":6724}," both exist.",{"type":45,"tag":605,"props":6726,"children":6728},{"className":1739,"code":6727,"language":1741,"meta":613,"style":613},"test -d \"${output_dir}\u002Ffindings\" && python3 \"${C_REVIEW_PLUGIN_ROOT}\u002Fscripts\u002Fgenerate_sarif.py\" \"${output_dir}\"\n",[6729],{"type":45,"tag":60,"props":6730,"children":6731},{"__ignoreMap":613},[6732],{"type":45,"tag":1747,"props":6733,"children":6734},{"class":1749,"line":1750},[6735,6740,6744,6748,6752,6756,6760,6764,6768,6773,6777,6781,6785,6790,6794,6798,6802],{"type":45,"tag":1747,"props":6736,"children":6737},{"style":2389},[6738],{"type":51,"value":6739},"test",{"type":45,"tag":1747,"props":6741,"children":6742},{"style":1785},[6743],{"type":51,"value":5759},{"type":45,"tag":1747,"props":6745,"children":6746},{"style":1769},[6747],{"type":51,"value":1772},{"type":45,"tag":1747,"props":6749,"children":6750},{"style":1775},[6751],{"type":51,"value":2653},{"type":45,"tag":1747,"props":6753,"children":6754},{"style":1769},[6755],{"type":51,"value":2723},{"type":45,"tag":1747,"props":6757,"children":6758},{"style":1785},[6759],{"type":51,"value":2728},{"type":45,"tag":1747,"props":6761,"children":6762},{"style":1769},[6763],{"type":51,"value":1086},{"type":45,"tag":1747,"props":6765,"children":6766},{"style":1769},[6767],{"type":51,"value":2542},{"type":45,"tag":1747,"props":6769,"children":6770},{"style":1764},[6771],{"type":51,"value":6772}," python3",{"type":45,"tag":1747,"props":6774,"children":6775},{"style":1769},[6776],{"type":51,"value":1772},{"type":45,"tag":1747,"props":6778,"children":6779},{"style":1775},[6780],{"type":51,"value":848},{"type":45,"tag":1747,"props":6782,"children":6783},{"style":1769},[6784],{"type":51,"value":2723},{"type":45,"tag":1747,"props":6786,"children":6787},{"style":1785},[6788],{"type":51,"value":6789},"\u002Fscripts\u002Fgenerate_sarif.py",{"type":45,"tag":1747,"props":6791,"children":6792},{"style":1769},[6793],{"type":51,"value":1086},{"type":45,"tag":1747,"props":6795,"children":6796},{"style":1769},[6797],{"type":51,"value":1772},{"type":45,"tag":1747,"props":6799,"children":6800},{"style":1775},[6801],{"type":51,"value":2653},{"type":45,"tag":1747,"props":6803,"children":6804},{"style":1769},[6805],{"type":51,"value":6806},"}\"\n",{"type":45,"tag":54,"props":6808,"children":6809},{},[6810,6812,6817,6819,6824,6826,6832,6834,6840,6841,6851,6853,6859,6860,6866,6868,6874,6876,6881,6882,6887,6889,6894],{"type":51,"value":6811},"Run the SARIF generator unconditionally whenever ",{"type":45,"tag":60,"props":6813,"children":6815},{"className":6814},[],[6816],{"type":51,"value":647},{"type":51,"value":6818}," exists — it is idempotent (full overwrite), emits ",{"type":45,"tag":60,"props":6820,"children":6822},{"className":6821},[],[6823],{"type":51,"value":1076},{"type":51,"value":6825}," for zero-survivor runs, and handles partial runs (findings without ",{"type":45,"tag":60,"props":6827,"children":6829},{"className":6828},[],[6830],{"type":51,"value":6831},"fp_verdict",{"type":51,"value":6833}," are emitted as ",{"type":45,"tag":60,"props":6835,"children":6837},{"className":6836},[],[6838],{"type":51,"value":6839},"LIKELY_TP",{"type":51,"value":83},{"type":45,"tag":222,"props":6842,"children":6843},{},[6844,6846],{"type":51,"value":6845},"exempt from the ",{"type":45,"tag":60,"props":6847,"children":6849},{"className":6848},[],[6850],{"type":51,"value":1187},{"type":51,"value":6852}," since their severity was never judge-validated, and marked ",{"type":45,"tag":60,"props":6854,"children":6856},{"className":6855},[],[6857],{"type":51,"value":6858},"unjudged: true",{"type":51,"value":408},{"type":45,"tag":60,"props":6861,"children":6863},{"className":6862},[],[6864],{"type":51,"value":6865},"severity_validated: false",{"type":51,"value":6867}," with an ",{"type":45,"tag":60,"props":6869,"children":6871},{"className":6870},[],[6872],{"type":51,"value":6873},"[UNVALIDATED SEVERITY — not judged]",{"type":51,"value":6875}," message prefix — so an inferred severity guess can never silently drop them under a ",{"type":45,"tag":60,"props":6877,"children":6879},{"className":6878},[],[6880],{"type":51,"value":1418},{"type":51,"value":271},{"type":45,"tag":60,"props":6883,"children":6885},{"className":6884},[],[6886],{"type":51,"value":1425},{"type":51,"value":6888}," filter). Always overwriting protects against an fp-judge that crashed mid-write and left a corrupt ",{"type":45,"tag":60,"props":6890,"children":6892},{"className":6891},[],[6893],{"type":51,"value":705},{"type":51,"value":6895}," on disk.",{"type":45,"tag":54,"props":6897,"children":6898},{},[6899,6901,6907,6909,6915,6917,6923,6925,6930,6932,6937,6939,6944],{"type":51,"value":6900},"If the generator prints a ",{"type":45,"tag":60,"props":6902,"children":6904},{"className":6903},[],[6905],{"type":51,"value":6906},"WARNING: skipped N …",{"type":51,"value":6908}," line on stdout (it also records ",{"type":45,"tag":60,"props":6910,"children":6912},{"className":6911},[],[6913],{"type":51,"value":6914},"invocations[].properties.skipped_findings",{"type":51,"value":6916}," in the SARIF and a ",{"type":45,"tag":60,"props":6918,"children":6920},{"className":6919},[],[6921],{"type":51,"value":6922},"warning",{"type":51,"value":6924}," notification per dropped file), one or more finding files were unreadable or had no parseable frontmatter and were ",{"type":45,"tag":222,"props":6926,"children":6927},{},[6928],{"type":51,"value":6929},"excluded from the report",{"type":51,"value":6931},". This is a dropped result — surface it prominently in ",{"type":45,"tag":60,"props":6933,"children":6935},{"className":6934},[],[6936],{"type":51,"value":677},{"type":51,"value":6938}," and the final response with the count and paths, the same way a non-",{"type":45,"tag":60,"props":6940,"children":6942},{"className":6941},[],[6943],{"type":51,"value":1031},{"type":51,"value":6945}," cluster task is surfaced. Do not let the otherwise-clean SARIF hide the loss.",{"type":45,"tag":54,"props":6947,"children":6948},{},[6949,6951,6956,6958,6963,6965,6970,6972,6976,6978,6983,6985,6990,6992,6997,6999,7004,7006,7011,7013,7017,7019,7024,7026,7031,7033,7045],{"type":51,"value":6950},"Then guarantee ",{"type":45,"tag":60,"props":6952,"children":6954},{"className":6953},[],[6955],{"type":51,"value":698},{"type":51,"value":6957}," exists. Unlike SARIF (mechanical), ",{"type":45,"tag":60,"props":6959,"children":6961},{"className":6960},[],[6962],{"type":51,"value":698},{"type":51,"value":6964}," is the fp-judge's ",{"type":45,"tag":222,"props":6966,"children":6967},{},[6968],{"type":51,"value":6969},"curated",{"type":51,"value":6971}," artifact, so do ",{"type":45,"tag":222,"props":6973,"children":6974},{},[6975],{"type":51,"value":320},{"type":51,"value":6977}," overwrite a judge-written one. (The fp-judge writes ",{"type":45,"tag":60,"props":6979,"children":6981},{"className":6980},[],[6982],{"type":51,"value":698},{"type":51,"value":6984}," with a ",{"type":45,"tag":60,"props":6986,"children":6988},{"className":6987},[],[6989],{"type":51,"value":284},{"type":51,"value":6991}," heredoc, not the ",{"type":45,"tag":60,"props":6993,"children":6995},{"className":6994},[],[6996],{"type":51,"value":5549},{"type":51,"value":6998}," tool, because the harness blocks the ",{"type":45,"tag":60,"props":7000,"children":7002},{"className":7001},[],[7003],{"type":51,"value":5549},{"type":51,"value":7005}," tool for subagent report files — do not \"fix\" the judge by re-mandating ",{"type":45,"tag":60,"props":7007,"children":7009},{"className":7008},[],[7010],{"type":51,"value":5549},{"type":51,"value":7012},". The orchestrator is the main agent and is ",{"type":45,"tag":222,"props":7014,"children":7015},{},[7016],{"type":51,"value":320},{"type":51,"value":7018}," subject to that block, so its own ",{"type":45,"tag":60,"props":7020,"children":7022},{"className":7021},[],[7023],{"type":51,"value":5549},{"type":51,"value":7025}," below works.) Check for it, and if it is missing (the judge crashed, even its ",{"type":45,"tag":60,"props":7027,"children":7029},{"className":7028},[],[7030],{"type":51,"value":284},{"type":51,"value":7032},"-heredoc write failed, or it returned the report as chat text instead of writing the file), ",{"type":45,"tag":222,"props":7034,"children":7035},{},[7036,7038,7043],{"type":51,"value":7037},"the orchestrator writes ",{"type":45,"tag":60,"props":7039,"children":7041},{"className":7040},[],[7042],{"type":51,"value":698},{"type":51,"value":7044}," itself",{"type":51,"value":7046}," rather than failing the run:",{"type":45,"tag":126,"props":7048,"children":7049},{},[7050,7068],{"type":45,"tag":130,"props":7051,"children":7052},{},[7053,7055,7060,7062,7067],{"type":51,"value":7054},"If the fp-judge returned the report body in its transcript, ",{"type":45,"tag":60,"props":7056,"children":7058},{"className":7057},[],[7059],{"type":51,"value":5549},{"type":51,"value":7061}," that text verbatim to ",{"type":45,"tag":60,"props":7063,"children":7065},{"className":7064},[],[7066],{"type":51,"value":6722},{"type":51,"value":707},{"type":45,"tag":130,"props":7069,"children":7070},{},[7071,7073,7079,7080,7085,7087,7092,7094,7099,7101,7106,7108,7113,7114,7119,7121,7126,7128,7134,7136,7141,7143,7148,7150,7155,7157,7163,7164,7169,7170,7175,7176,7182,7183,7189],{"type":51,"value":7072},"Otherwise synthesize it from the on-disk findings: take the survivor primaries (",{"type":45,"tag":60,"props":7074,"children":7076},{"className":7075},[],[7077],{"type":51,"value":7078},"fp_verdict ∈ {TRUE_POSITIVE, LIKELY_TP}",{"type":51,"value":3879},{"type":45,"tag":60,"props":7081,"children":7083},{"className":7082},[],[7084],{"type":51,"value":6427},{"type":51,"value":7086},"; if the judge never ran, treat a finding with no ",{"type":45,"tag":60,"props":7088,"children":7090},{"className":7089},[],[7091],{"type":51,"value":6831},{"type":51,"value":7093}," as a survivor) listed in ",{"type":45,"tag":60,"props":7095,"children":7097},{"className":7096},[],[7098],{"type":51,"value":662},{"type":51,"value":7100},", apply ",{"type":45,"tag":60,"props":7102,"children":7104},{"className":7103},[],[7105],{"type":51,"value":1187},{"type":51,"value":7107}," from ",{"type":45,"tag":60,"props":7109,"children":7111},{"className":7110},[],[7112],{"type":51,"value":626},{"type":51,"value":330},{"type":45,"tag":222,"props":7115,"children":7116},{},[7117],{"type":51,"value":7118},"to judged survivors only",{"type":51,"value":7120}," — unjudged findings (no ",{"type":45,"tag":60,"props":7122,"children":7124},{"className":7123},[],[7125],{"type":51,"value":6831},{"type":51,"value":7127},") are included regardless of filter and rendered under an ",{"type":45,"tag":60,"props":7129,"children":7131},{"className":7130},[],[7132],{"type":51,"value":7133},"Unvalidated (severity not judged)",{"type":51,"value":7135}," section with a ",{"type":45,"tag":60,"props":7137,"children":7139},{"className":7138},[],[7140],{"type":51,"value":6873},{"type":51,"value":7142}," label, mirroring the SARIF behavior so a strict filter never silently drops them — and ",{"type":45,"tag":60,"props":7144,"children":7146},{"className":7145},[],[7147],{"type":51,"value":5549},{"type":51,"value":7149}," a ",{"type":45,"tag":60,"props":7151,"children":7153},{"className":7152},[],[7154],{"type":51,"value":698},{"type":51,"value":7156}," mirroring the fp-judge template — YAML frontmatter (",{"type":45,"tag":60,"props":7158,"children":7160},{"className":7159},[],[7161],{"type":51,"value":7162},"stage: final-report",{"type":51,"value":83},{"type":45,"tag":60,"props":7165,"children":7167},{"className":7166},[],[7168],{"type":51,"value":1173},{"type":51,"value":83},{"type":45,"tag":60,"props":7171,"children":7173},{"className":7172},[],[7174],{"type":51,"value":1187},{"type":51,"value":83},{"type":45,"tag":60,"props":7177,"children":7179},{"className":7178},[],[7180],{"type":51,"value":7181},"total_primaries",{"type":51,"value":83},{"type":45,"tag":60,"props":7184,"children":7186},{"className":7185},[],[7187],{"type":51,"value":7188},"reported_findings",{"type":51,"value":7190},"), a severity-distribution table, then one section per reported finding grouped by severity (embed the Description \u002F Code \u002F Data flow \u002F Impact \u002F Recommendation body for CRITICAL\u002FHIGH; reference the finding file for MEDIUM\u002FLOW).",{"type":45,"tag":54,"props":7192,"children":7193},{},[7194,7196,7201,7203,7208,7210,7215,7217,7222],{"type":51,"value":7195},"Either way, note in ",{"type":45,"tag":60,"props":7197,"children":7199},{"className":7198},[],[7200],{"type":51,"value":6143},{"type":51,"value":7202}," that ",{"type":45,"tag":60,"props":7204,"children":7206},{"className":7205},[],[7207],{"type":51,"value":698},{"type":51,"value":7209}," was orchestrator-synthesized (not judge-authored). Skip the SARIF generator and this check only if ",{"type":45,"tag":60,"props":7211,"children":7213},{"className":7212},[],[7214],{"type":51,"value":2660},{"type":51,"value":7216}," doesn't exist (Phase 2 failed). After this phase, update ",{"type":45,"tag":60,"props":7218,"children":7220},{"className":7219},[],[7221],{"type":51,"value":6143},{"type":51,"value":7223}," with judge \u002F SARIF \u002F report status.",{"type":45,"tag":1146,"props":7225,"children":7227},{"id":7226},"phase-9-return-report",[7228],{"type":51,"value":7229},"Phase 9: Return Report",{"type":45,"tag":54,"props":7231,"children":7232},{},[7233,7237,7239,7243,7245,7252,7254,7259],{"type":45,"tag":222,"props":7234,"children":7235},{},[7236],{"type":51,"value":1159},{"type":51,"value":7238}," Phase 8b complete. ",{"type":45,"tag":222,"props":7240,"children":7241},{},[7242],{"type":51,"value":1166},{"type":51,"value":7244}," every item in ",{"type":45,"tag":7246,"props":7247,"children":7249},"a",{"href":7248},"#success-criteria",[7250],{"type":51,"value":7251},"Success Criteria",{"type":51,"value":7253}," verified true; ",{"type":45,"tag":60,"props":7255,"children":7257},{"className":7256},[],[7258],{"type":51,"value":698},{"type":51,"value":7260}," returned to the caller.",{"type":45,"tag":54,"props":7262,"children":7263},{},[7264,7266,7270,7272,7277,7279,7285,7286,7291,7293,7297],{"type":51,"value":7265},"Before composing the response, walk the ",{"type":45,"tag":7246,"props":7267,"children":7268},{"href":7248},[7269],{"type":51,"value":7251},{"type":51,"value":7271}," checklist below and confirm each bullet against on-disk artifacts (",{"type":45,"tag":60,"props":7273,"children":7275},{"className":7274},[],[7276],{"type":51,"value":6135},{"type":51,"value":7278}," for cluster tasks, ",{"type":45,"tag":60,"props":7280,"children":7282},{"className":7281},[],[7283],{"type":51,"value":7284},"ls",{"type":51,"value":271},{"type":45,"tag":60,"props":7287,"children":7289},{"className":7288},[],[7290],{"type":51,"value":406},{"type":51,"value":7292}," for the files). If any criterion fails, surface the failure prominently in the response — do ",{"type":45,"tag":222,"props":7294,"children":7295},{},[7296],{"type":51,"value":320},{"type":51,"value":7298}," hide a partial run behind a successful report.",{"type":45,"tag":54,"props":7300,"children":7301},{},[7302,7304,7310,7312,7317,7318,7323,7324,7329,7330,7335,7336,7341,7342,7347,7348,7353],{"type":51,"value":7303},"Then ",{"type":45,"tag":60,"props":7305,"children":7307},{"className":7306},[],[7308],{"type":51,"value":7309},"Read ${output_dir}\u002FREPORT.md",{"type":51,"value":7311}," and return its content to the caller. Append an Artifacts list pointing at ",{"type":45,"tag":60,"props":7313,"children":7315},{"className":7314},[],[7316],{"type":51,"value":647},{"type":51,"value":83},{"type":45,"tag":60,"props":7319,"children":7321},{"className":7320},[],[7322],{"type":51,"value":662},{"type":51,"value":83},{"type":45,"tag":60,"props":7325,"children":7327},{"className":7326},[],[7328],{"type":51,"value":677},{"type":51,"value":83},{"type":45,"tag":60,"props":7331,"children":7333},{"className":7332},[],[7334],{"type":51,"value":684},{"type":51,"value":83},{"type":45,"tag":60,"props":7337,"children":7339},{"className":7338},[],[7340],{"type":51,"value":691},{"type":51,"value":83},{"type":45,"tag":60,"props":7343,"children":7345},{"className":7344},[],[7346],{"type":51,"value":698},{"type":51,"value":83},{"type":45,"tag":60,"props":7349,"children":7351},{"className":7350},[],[7352],{"type":51,"value":705},{"type":51,"value":707},{"type":45,"tag":595,"props":7355,"children":7356},{},[],{"type":45,"tag":108,"props":7358,"children":7360},{"id":7359},"finding-file-frontmatter-three-stages",[7361],{"type":51,"value":7362},"Finding file frontmatter — three stages",{"type":45,"tag":54,"props":7364,"children":7365},{},[7366,7368,7373],{"type":51,"value":7367},"Authoritative schema: ",{"type":45,"tag":60,"props":7369,"children":7371},{"className":7370},[],[7372],{"type":51,"value":2780},{"type":51,"value":7374}," (\"Finding File Format\"). Three-stage write:",{"type":45,"tag":743,"props":7376,"children":7377},{},[7378,7438,7469],{"type":45,"tag":130,"props":7379,"children":7380},{},[7381,7386,7388,7394,7395,7401,7402,7408,7409,7415,7416,7422,7423,7429,7430,7436],{"type":45,"tag":222,"props":7382,"children":7383},{},[7384],{"type":51,"value":7385},"Worker",{"type":51,"value":7387}," — base fields (",{"type":45,"tag":60,"props":7389,"children":7391},{"className":7390},[],[7392],{"type":51,"value":7393},"id",{"type":51,"value":83},{"type":45,"tag":60,"props":7396,"children":7398},{"className":7397},[],[7399],{"type":51,"value":7400},"bug_class",{"type":51,"value":83},{"type":45,"tag":60,"props":7403,"children":7405},{"className":7404},[],[7406],{"type":51,"value":7407},"title",{"type":51,"value":83},{"type":45,"tag":60,"props":7410,"children":7412},{"className":7411},[],[7413],{"type":51,"value":7414},"location",{"type":51,"value":83},{"type":45,"tag":60,"props":7417,"children":7419},{"className":7418},[],[7420],{"type":51,"value":7421},"function",{"type":51,"value":83},{"type":45,"tag":60,"props":7424,"children":7426},{"className":7425},[],[7427],{"type":51,"value":7428},"confidence",{"type":51,"value":83},{"type":45,"tag":60,"props":7431,"children":7433},{"className":7432},[],[7434],{"type":51,"value":7435},"worker",{"type":51,"value":7437},") + seven body sections.",{"type":45,"tag":130,"props":7439,"children":7440},{},[7441,7446,7448,7453,7455,7460,7461,7467],{"type":45,"tag":222,"props":7442,"children":7443},{},[7444],{"type":51,"value":7445},"Dedup-judge",{"type":51,"value":7447}," — adds ",{"type":45,"tag":60,"props":7449,"children":7451},{"className":7450},[],[7452],{"type":51,"value":6427},{"type":51,"value":7454}," on duplicates, or ",{"type":45,"tag":60,"props":7456,"children":7458},{"className":7457},[],[7459],{"type":51,"value":6434},{"type":51,"value":3406},{"type":45,"tag":60,"props":7462,"children":7464},{"className":7463},[],[7465],{"type":51,"value":7466},"locations",{"type":51,"value":7468}," on primaries that absorbed.",{"type":45,"tag":130,"props":7470,"children":7471},{},[7472,7477,7478,7483,7484,7490,7492,7498,7499,7504,7506,7512,7513,7519,7520,7526,7527,7533],{"type":45,"tag":222,"props":7473,"children":7474},{},[7475],{"type":51,"value":7476},"FP+Severity judge",{"type":51,"value":7447},{"type":45,"tag":60,"props":7479,"children":7481},{"className":7480},[],[7482],{"type":51,"value":6831},{"type":51,"value":3406},{"type":45,"tag":60,"props":7485,"children":7487},{"className":7486},[],[7488],{"type":51,"value":7489},"fp_rationale",{"type":51,"value":7491}," on every primary; on survivors (",{"type":45,"tag":60,"props":7493,"children":7495},{"className":7494},[],[7496],{"type":51,"value":7497},"TRUE_POSITIVE",{"type":51,"value":271},{"type":45,"tag":60,"props":7500,"children":7502},{"className":7501},[],[7503],{"type":51,"value":6839},{"type":51,"value":7505},") also adds ",{"type":45,"tag":60,"props":7507,"children":7509},{"className":7508},[],[7510],{"type":51,"value":7511},"severity",{"type":51,"value":83},{"type":45,"tag":60,"props":7514,"children":7516},{"className":7515},[],[7517],{"type":51,"value":7518},"attack_vector",{"type":51,"value":83},{"type":45,"tag":60,"props":7521,"children":7523},{"className":7522},[],[7524],{"type":51,"value":7525},"exploitability",{"type":51,"value":83},{"type":45,"tag":60,"props":7528,"children":7530},{"className":7529},[],[7531],{"type":51,"value":7532},"severity_rationale",{"type":51,"value":707},{"type":45,"tag":108,"props":7535,"children":7537},{"id":7536},"bug-classes-clusters",[7538],{"type":51,"value":7539},"Bug classes \u002F clusters",{"type":45,"tag":54,"props":7541,"children":7542},{},[7543,7545,7551,7553,7558],{"type":51,"value":7544},"Authoritative: ",{"type":45,"tag":60,"props":7546,"children":7548},{"className":7547},[],[7549],{"type":51,"value":7550},"prompts\u002Fclusters\u002Fmanifest.json",{"type":51,"value":7552},". 47 always-on bug classes, up to 64 with all conditional clusters enabled. ",{"type":45,"tag":60,"props":7554,"children":7556},{"className":7555},[],[7557],{"type":51,"value":3552},{"type":51,"value":7559}," is fully consolidated (its sub-prompts are not re-read at runtime).",{"type":45,"tag":595,"props":7561,"children":7562},{},[],{"type":45,"tag":108,"props":7564,"children":7566},{"id":7565},"success-criteria",[7567],{"type":51,"value":7251},{"type":45,"tag":54,"props":7569,"children":7570},{},[7571],{"type":51,"value":7572},"The phase exits already cover most of this; the orchestrator-visible end-state is:",{"type":45,"tag":126,"props":7574,"children":7575},{},[7576,7595,7605,7667,7684],{"type":45,"tag":130,"props":7577,"children":7578},{},[7579,7581,7586,7588,7593],{"type":51,"value":7580},"Every Phase-5 cluster task is ",{"type":45,"tag":60,"props":7582,"children":7584},{"className":7583},[],[7585],{"type":51,"value":1031},{"type":51,"value":7587}," (verify via ",{"type":45,"tag":60,"props":7589,"children":7591},{"className":7590},[],[7592],{"type":51,"value":6135},{"type":51,"value":7594},").",{"type":45,"tag":130,"props":7596,"children":7597},{},[7598,7603],{"type":45,"tag":60,"props":7599,"children":7601},{"className":7600},[],[7602],{"type":51,"value":6143},{"type":51,"value":7604}," exists and records resolved scope\u002Fcontext, compile-commands probe result, worker claims vs index count, task status, and judge\u002FSARIF status.",{"type":45,"tag":130,"props":7606,"children":7607},{},[7608,7610,7615,7617,7622,7623,7628,7630,7635,7636,7641,7643,7648,7649,7654,7655,7660,7661,7666],{"type":51,"value":7609},"Every primary finding (no ",{"type":45,"tag":60,"props":7611,"children":7613},{"className":7612},[],[7614],{"type":51,"value":6427},{"type":51,"value":7616},") has ",{"type":45,"tag":60,"props":7618,"children":7620},{"className":7619},[],[7621],{"type":51,"value":6831},{"type":51,"value":3406},{"type":45,"tag":60,"props":7624,"children":7626},{"className":7625},[],[7627],{"type":51,"value":7489},{"type":51,"value":7629},"; every survivor (",{"type":45,"tag":60,"props":7631,"children":7633},{"className":7632},[],[7634],{"type":51,"value":7497},{"type":51,"value":271},{"type":45,"tag":60,"props":7637,"children":7639},{"className":7638},[],[7640],{"type":51,"value":6839},{"type":51,"value":7642},") also has ",{"type":45,"tag":60,"props":7644,"children":7646},{"className":7645},[],[7647],{"type":51,"value":7511},{"type":51,"value":83},{"type":45,"tag":60,"props":7650,"children":7652},{"className":7651},[],[7653],{"type":51,"value":7518},{"type":51,"value":83},{"type":45,"tag":60,"props":7656,"children":7658},{"className":7657},[],[7659],{"type":51,"value":7525},{"type":51,"value":83},{"type":45,"tag":60,"props":7662,"children":7664},{"className":7663},[],[7665],{"type":51,"value":7532},{"type":51,"value":707},{"type":45,"tag":130,"props":7668,"children":7669},{},[7670,7675,7677,7682],{"type":45,"tag":60,"props":7671,"children":7673},{"className":7672},[],[7674],{"type":51,"value":698},{"type":51,"value":7676}," exists, severity-filtered per ",{"type":45,"tag":60,"props":7678,"children":7680},{"className":7679},[],[7681],{"type":51,"value":1187},{"type":51,"value":7683}," (Phase 8b safety net guarantees this even when the fp-judge fails to write it).",{"type":45,"tag":130,"props":7685,"children":7686},{},[7687,7692],{"type":45,"tag":60,"props":7688,"children":7690},{"className":7689},[],[7691],{"type":51,"value":705},{"type":51,"value":7693}," exists (Phase 8b safety net guarantees this).",{"type":45,"tag":7695,"props":7696,"children":7697},"style",{},[7698],{"type":51,"value":7699},"html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"items":7701,"total":7845},[7702,7717,7727,7745,7758,7771,7783,7793,7804,7815,7827,7834],{"slug":7703,"name":7703,"fn":7704,"description":7705,"org":7706,"tags":7707,"stars":26,"repoUrl":27,"updatedAt":7716},"address-sanitizer","detect memory errors during fuzzing","AddressSanitizer detects memory errors during fuzzing. Use when fuzzing C\u002FC++ code to find buffer overflows and use-after-free bugs.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[7708,7709,7712,7713],{"name":21,"slug":22,"type":16},{"name":7710,"slug":7711,"type":16},"Debugging","debugging",{"name":14,"slug":15,"type":16},{"name":7714,"slug":7715,"type":16},"Testing","testing","2026-07-17T06:05:14.925095",{"slug":7718,"name":7718,"fn":7719,"description":7720,"org":7721,"tags":7722,"stars":26,"repoUrl":27,"updatedAt":7726},"aflpp","perform multi-core fuzzing of C\u002FC++ projects","AFL++ is a fork of AFL with better fuzzing performance and advanced features. Use for multi-core fuzzing of C\u002FC++ projects.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[7723,7724,7725],{"name":21,"slug":22,"type":16},{"name":14,"slug":15,"type":16},{"name":7714,"slug":7715,"type":16},"2026-07-17T06:05:12.433192",{"slug":7728,"name":7728,"fn":7729,"description":7730,"org":7731,"tags":7732,"stars":26,"repoUrl":27,"updatedAt":7744},"agentic-actions-auditor","audit GitHub Actions for security vulnerabilities","Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled input reaches AI agents running in CI\u002FCD pipelines, including env var intermediary patterns, direct expression injection, dangerous sandbox configurations, and wildcard user allowlists. Use when reviewing workflow files that invoke AI coding agents, auditing CI\u002FCD pipeline security for prompt injection risks, or evaluating agentic action configurations.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[7733,7736,7739,7740,7743],{"name":7734,"slug":7735,"type":16},"Agents","agents",{"name":7737,"slug":7738,"type":16},"CI\u002FCD","ci-cd",{"name":24,"slug":25,"type":16},{"name":7741,"slug":7742,"type":16},"GitHub Actions","github-actions",{"name":14,"slug":15,"type":16},"2026-07-18T05:47:48.564744",{"slug":7746,"name":7746,"fn":7747,"description":7748,"org":7749,"tags":7750,"stars":26,"repoUrl":27,"updatedAt":7757},"algorand-vulnerability-scanner","scan Algorand smart contracts for vulnerabilities","Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, missing field validations, and access control issues. Use when auditing Algorand projects (TEAL\u002FPyTeal).",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[7751,7752,7753,7754],{"name":18,"slug":19,"type":16},{"name":24,"slug":25,"type":16},{"name":14,"slug":15,"type":16},{"name":7755,"slug":7756,"type":16},"Smart Contracts","smart-contracts","2026-07-18T05:47:43.989063",{"slug":7759,"name":7759,"fn":7760,"description":7761,"org":7762,"tags":7763,"stars":26,"repoUrl":27,"updatedAt":7770},"ask-questions-if-underspecified","clarify requirements before implementation","Clarify requirements before implementing. Use when serious doubts arise.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[7764,7767],{"name":7765,"slug":7766,"type":16},"Engineering","engineering",{"name":7768,"slug":7769,"type":16},"Productivity","productivity","2026-07-17T06:05:33.543262",{"slug":7772,"name":7772,"fn":7773,"description":7774,"org":7775,"tags":7776,"stars":26,"repoUrl":27,"updatedAt":7782},"atheris","fuzz Python code with Atheris","Atheris is a coverage-guided Python fuzzer based on libFuzzer. Use for fuzzing pure Python code and Python C extensions.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[7777,7780,7781],{"name":7778,"slug":7779,"type":16},"Python","python",{"name":14,"slug":15,"type":16},{"name":7714,"slug":7715,"type":16},"2026-07-17T06:05:14.575191",{"slug":7784,"name":7784,"fn":7785,"description":7786,"org":7787,"tags":7788,"stars":26,"repoUrl":27,"updatedAt":7792},"audit-augmentation","augment code graphs with audit findings","Augments Trailmark code graphs with external audit findings from SARIF static analysis results, weAudit annotation files, and version-gated Trailmark 0.4.x binary-analysis graph exports. Maps findings to graph nodes by file and line overlap, creates severity-based subgraphs, and enables cross-referencing findings with pre-analysis data (blast radius, taint, etc.). Use when projecting SARIF results onto a code graph, overlaying weAudit annotations, importing binary graph findings, cross-referencing Semgrep, CodeQL, or binary-analysis findings with call graph data, or visualizing audit findings in the context of code structure.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[7789,7790,7791],{"name":18,"slug":19,"type":16},{"name":24,"slug":25,"type":16},{"name":14,"slug":15,"type":16},"2026-08-01T05:44:54.920542",{"slug":7794,"name":7794,"fn":7795,"description":7796,"org":7797,"tags":7798,"stars":26,"repoUrl":27,"updatedAt":7803},"audit-context-building","build architectural context for code analysis","Enables ultra-granular, line-by-line code analysis to build deep architectural context before vulnerability or bug finding.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[7799,7800,7801,7802],{"name":603,"slug":600,"type":16},{"name":18,"slug":19,"type":16},{"name":24,"slug":25,"type":16},{"name":7765,"slug":7766,"type":16},"2026-07-18T05:47:40.122449",{"slug":7805,"name":7805,"fn":7806,"description":7807,"org":7808,"tags":7809,"stars":26,"repoUrl":27,"updatedAt":7814},"audit-prep-assistant","prepare codebases for security audits","Prepares codebases for security review using Trail of Bits' checklist. Helps set review goals, runs static analysis tools, increases test coverage, removes dead code, ensures accessibility, and generates documentation (flowcharts, user stories, inline comments).",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[7810,7811,7812,7813],{"name":18,"slug":19,"type":16},{"name":24,"slug":25,"type":16},{"name":7765,"slug":7766,"type":16},{"name":14,"slug":15,"type":16},"2026-07-18T05:47:39.210985",{"slug":7816,"name":7816,"fn":7817,"description":7818,"org":7819,"tags":7820,"stars":26,"repoUrl":27,"updatedAt":7826},"burpsuite-project-parser","parse Burp Suite project files","Searches and explores Burp Suite project files (.burp) from the command line. Use when searching response headers or bodies with regex patterns, extracting security audit findings, dumping proxy history or site map data, or analyzing HTTP traffic captured in a Burp project.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[7821,7822,7825],{"name":18,"slug":19,"type":16},{"name":7823,"slug":7824,"type":16},"CLI","cli",{"name":14,"slug":15,"type":16},"2026-07-17T06:05:33.198077",{"slug":4,"name":4,"fn":5,"description":6,"org":7828,"tags":7829,"stars":26,"repoUrl":27,"updatedAt":28},{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[7830,7831,7832,7833],{"name":18,"slug":19,"type":16},{"name":21,"slug":22,"type":16},{"name":24,"slug":25,"type":16},{"name":14,"slug":15,"type":16},{"slug":7835,"name":7835,"fn":7836,"description":7837,"org":7838,"tags":7839,"stars":26,"repoUrl":27,"updatedAt":7844},"cairo-vulnerability-scanner","scan Cairo and StarkNet contracts for vulnerabilities","Scans Cairo\u002FStarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messaging issues, address conversion problems, and signature replay. Use when auditing StarkNet projects.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[7840,7841,7842,7843],{"name":18,"slug":19,"type":16},{"name":24,"slug":25,"type":16},{"name":14,"slug":15,"type":16},{"name":7755,"slug":7756,"type":16},"2026-07-18T05:47:42.84568",111,{"items":7847,"total":7893},[7848,7855,7861,7869,7876,7881,7887],{"slug":7703,"name":7703,"fn":7704,"description":7705,"org":7849,"tags":7850,"stars":26,"repoUrl":27,"updatedAt":7716},{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[7851,7852,7853,7854],{"name":21,"slug":22,"type":16},{"name":7710,"slug":7711,"type":16},{"name":14,"slug":15,"type":16},{"name":7714,"slug":7715,"type":16},{"slug":7718,"name":7718,"fn":7719,"description":7720,"org":7856,"tags":7857,"stars":26,"repoUrl":27,"updatedAt":7726},{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[7858,7859,7860],{"name":21,"slug":22,"type":16},{"name":14,"slug":15,"type":16},{"name":7714,"slug":7715,"type":16},{"slug":7728,"name":7728,"fn":7729,"description":7730,"org":7862,"tags":7863,"stars":26,"repoUrl":27,"updatedAt":7744},{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[7864,7865,7866,7867,7868],{"name":7734,"slug":7735,"type":16},{"name":7737,"slug":7738,"type":16},{"name":24,"slug":25,"type":16},{"name":7741,"slug":7742,"type":16},{"name":14,"slug":15,"type":16},{"slug":7746,"name":7746,"fn":7747,"description":7748,"org":7870,"tags":7871,"stars":26,"repoUrl":27,"updatedAt":7757},{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[7872,7873,7874,7875],{"name":18,"slug":19,"type":16},{"name":24,"slug":25,"type":16},{"name":14,"slug":15,"type":16},{"name":7755,"slug":7756,"type":16},{"slug":7759,"name":7759,"fn":7760,"description":7761,"org":7877,"tags":7878,"stars":26,"repoUrl":27,"updatedAt":7770},{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[7879,7880],{"name":7765,"slug":7766,"type":16},{"name":7768,"slug":7769,"type":16},{"slug":7772,"name":7772,"fn":7773,"description":7774,"org":7882,"tags":7883,"stars":26,"repoUrl":27,"updatedAt":7782},{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[7884,7885,7886],{"name":7778,"slug":7779,"type":16},{"name":14,"slug":15,"type":16},{"name":7714,"slug":7715,"type":16},{"slug":7784,"name":7784,"fn":7785,"description":7786,"org":7888,"tags":7889,"stars":26,"repoUrl":27,"updatedAt":7792},{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[7890,7891,7892],{"name":18,"slug":19,"type":16},{"name":24,"slug":25,"type":16},{"name":14,"slug":15,"type":16},77]