# Cejel Trust Report - alfred - Product: alfred - Rubric: witan-rubric-v17-2026-07-24 - Generated: undefined - Repository: . @ 7535f625253cc29aed17486e5eae229306459fb9 ## Criterion Profile | ID | Criterion | Category | Score | Status | Measurement signals | |---|---|---|---:|---|---| | A1 | Test integrity and regression signal | Code trust | 2.3 | verified | Test-to-source file ratio: 504/846 ratio; Static coverage percentage: 0/100 percent; Verification script ratio: 4 ratio (capped; 6 raw); Non-hollow test share: 497/504 ratio | | A2 | Data-layer isolation and secrets posture | Code trust | 4.0 | verified | Secret cleanliness: 1/1 clean; Environment handling depth: 3/3 practices | | A3 | Production readiness | Code trust | 3.6 | verified | Production-readiness basic checks: 5/6 checks; Production workflow depth: 6 signals (capped; 39 raw); Observability depth: 4 signals (capped; 63 raw); Rollback and migration-safety depth: 4 signals (capped; 803 raw) | | A4 | Dependency hygiene | Code trust | 2.7 | verified | Pinned dependency ratio: 64/214 ratio; Lockfile coverage: 1/1 present; Dependency automation ratio: 1/2 ratio | | A5 | Claim-vs-reality reconciliation | Code trust | 3.0 | info | Claim match rate: 12/20 ratio; Claim source depth: 4 docs (capped; 15 raw); Reconciliation artifact depth: 2/3 artifacts | | B1 | Internal process dimension | Process trust | N/A | not_applicable | N/A | | B2 | PR outcome traceability | Process trust | 4.0 | verified | PR trace basic checks: 2 signals (capped; 36 raw); Recent PR merge ratio: 12/12 ratio | | B3 | CI and QA discipline | Process trust | 4.0 | verified | CI verification depth: 4 signals (capped; 5 raw); PR-gate CI workflow count: 4 workflows (capped; 16 raw) | | B4 | Audit trail and report-up completeness | Process trust | 3.9 | verified | Audit artifact depth: 3 files (capped; 87 raw); Audit freshness depth: 78/87 ratio | | B5 | Internal process dimension | Process trust | N/A | not_applicable | N/A | | B6 | Privileged-operation human gating | Process trust | 1.4 | critical | Human gate documented: 1/1 present; Fail-closed privilege check present: 1/1 present; Privilege-escalation cleanliness: 0/1 clean; Protected-path review gate: 1/1 present; Un-overridable kill-switch present: 1/1 present | ## Summary Scores - Code trust: 3.1/4.0 - Process trust: 3.3/4.0 - Overall: 3.2/4.0 - Measured coverage: code trust 5/5, process trust 4/6, overall 9/11 dimensions measured — a dimension counts as measured only when it produced a real score; not-applicable and insufficient-data dimensions are unmeasured. A score reflects only its measured dimensions, and unmeasured is not good — it is unknown. - Not applicable: B1, B5 — substrate-specific criteria excluded from composite (N/A for external code). ## Evidence - A1: Detected test file (path withheld — private repository, sha256:4089241dc743) - A1: Detected test file (path withheld — private repository, sha256:c69ab62efd1c) - A1: Detected test file (path withheld — private repository, sha256:923de0fe9f61) - A1: Detected test file (path withheld — private repository, sha256:8155ae18fdad) - A1: Detected test file (path withheld — private repository, sha256:a2f2a4b5c7d5) - A1: Detected test file (path withheld — private repository, sha256:8a44073a93d5) - A1: Detected test file (path withheld — private repository, sha256:bf838e8a54ac) - A1: Detected test file (path withheld — private repository, sha256:5423edb4ca38) - A1: Configured test runner (path withheld — private repository, sha256:bb3758e12fb9) - A1: Configured test runner (path withheld — private repository, sha256:6034215528e2) - A1: Configured test runner (path withheld — private repository, sha256:6034215528e2) - A1: CI workflow runs the test suite (path withheld — private repository, sha256:0c35d020b482) - A1: Detected test file (path withheld — private repository, sha256:4089241dc743) (info) - A2: .env path detected in git history (path withheld — private repository, sha256:7535f625253c) - A2: .env files are gitignored (path withheld — private repository, sha256:8e464ca67fbf) - A2: Environment template (path withheld — private repository, sha256:04442048a76f) - A2: Environment template (path withheld — private repository, sha256:60cae38769ab) - A2: RLS or tenant migration (path withheld — private repository, sha256:eafff306bfd6) - A3: Build or typecheck script (path withheld — private repository, sha256:6e1b2a1616e7) - A3: CI workflow (path withheld — private repository, sha256:d90a520a3cf7) - A3: Release deploy configuration (path withheld — private repository, sha256:eb4a78361685) - A3: Container build configuration (path withheld — private repository, sha256:69daf8e18330) - A3: Environment template (path withheld — private repository, sha256:04442048a76f) - A3: Error boundary (path withheld — private repository, sha256:cca56c0018e5) - A4: Dependency manifest (path withheld — private repository, sha256:41c598eef759) - A4: Dependency lockfile (path withheld — private repository, sha256:0290f23350c7) - A5: Repository claim source (path withheld — private repository, sha256:e2bf98bc4697) - A5: Code presence for claim reconciliation (path withheld — private repository, sha256:62f086165db3) - A5: Dedicated claim-reality reconciliation artifact (path withheld — private repository, sha256:f28bdbe5970d) - A5: Dedicated claim-reality reconciliation artifact (path withheld — private repository, sha256:e23d16fb7574) - B1: N/A — Substrate-specific: an internal process dimension is not applicable to external code. - B2: Pull-request CI workflow (path withheld — private repository, sha256:d90a520a3cf7) - B2: Pull-request CI workflow (path withheld — private repository, sha256:c879fd252e4d) - B2: Pull-request CI workflow (path withheld — private repository, sha256:93839ac0380b) - B2: Review gate configuration (path withheld — private repository, sha256:016304abf410) - B3: Test script (path withheld — private repository, sha256:6e1b2a1616e7) - B3: Lint script (path withheld — private repository, sha256:6e1b2a1616e7) - B3: CI workflow (path withheld — private repository, sha256:d90a520a3cf7) - B4: Audit or changelog artifact (path withheld — private repository, sha256:b71d90871d8b) - B4: Audit or changelog artifact (path withheld — private repository, sha256:f7f031449857) - B4: Audit or changelog artifact (path withheld — private repository, sha256:d14484199d1a) - B4: Audit or changelog artifact (path withheld — private repository, sha256:ef234e3bb333) - B4: Audit or changelog artifact (path withheld — private repository, sha256:160074df8986) - B5: N/A — Substrate-specific: an internal process dimension is not applicable to external code. - B6: Documents privileged operations as human-executed/gated (path withheld — private repository, sha256:9170f0e81c3d) - B6: Fail-closed privilege-membership check before role elevation (path withheld — private repository, sha256:64df9a44b3e6) - B6: Un-overridable kill-switch / fail-safe governance toggle (path withheld — private repository, sha256:1b7cb4b2b414) - B6: CODEOWNERS/required-review gate on protected paths (path withheld — private repository, sha256:f7f031449857) - B6: Ungated privilege-escalation statement (path withheld — private repository, sha256:c839412291f3) (critical) - B6: Ungated privilege-escalation statement (path withheld — private repository, sha256:8fdd968fd2ed) (critical) ## Findings - A1 finding severity info (dimension band verified): Test suite files are present, but no coverage configuration was detected. (Detected test file (path withheld — private repository, sha256:4089241dc743)) - B6 finding severity critical (dimension band critical): Role-membership GRANT or SUPERUSER escalation executes in code with no documented human gate. (Ungated privilege-escalation statement (path withheld — private repository, sha256:c839412291f3)) - B6 finding severity critical (dimension band critical): Role-membership GRANT or SUPERUSER escalation executes in code with no documented human gate. (Ungated privilege-escalation statement (path withheld — private repository, sha256:8fdd968fd2ed))