witan-batch-1787098836366-483713

Date
Run
unknown @ f59e929c999e8b2efc7b12fd0bc1685c1a186be3
Rubric
witan-rubric-v17-2026-07-24
3.2/4.0 overall

Conditional

Code 2.9 · Process 3.5

code 3/5 · process 3/6 measured

Criterion profile

Measured scores are plotted on a 0–4 scale. Unknown and not-applicable dimensions remain explicit.

6 measured 0 no data 5 N/A

Code trust

A1Test integrity and regression signal
2.8
A2Data-layer isolation and secrets posture
N/A
A3Production readiness
N/A
A4Dependency hygiene
3.6
A5Claim-vs-reality reconciliation
2.4

Process trust

B1Internal process dimension
N/A
B2PR outcome traceability
4.0
B3CI and QA discipline
3.6
B4Audit trail and report-up completeness
2.9
B5Internal process dimension
N/A
B6Privileged-operation human gating
N/A

Code trust

A1

Test integrity and regression signal

dimension band: verified
2.8
  • Test-to-source file ratio125 ratio (capped; 292 raw)
  • Static coverage percentage0/100 percent
  • Verification script ratio4 ratio (capped; 6 raw)
  • Non-hollow test share213/225 ratio
  • Detected test file pydantic-core/tests/__init__.py
  • Detected test file pydantic-core/tests/benchmarks/__init__.py
  • Detected test file pydantic-core/tests/benchmarks/complete_schema.py:1 · sha256:67fbb9f86ee1
  • Detected test file pydantic-core/tests/benchmarks/nested_schema.py:1 · sha256:5dd7f39830db
  • Detected test file pydantic-core/tests/benchmarks/test_complete_benchmark.py:1 · sha256:93af73fdd79c
  • Detected test file pydantic-core/tests/benchmarks/test_micro_benchmarks.py:1 · sha256:4a88116cb64c
  • Detected test file pydantic-core/tests/benchmarks/test_nested_benchmark.py:1 · sha256:b257d008f043
  • Detected test file pydantic-core/tests/benchmarks/test_serialization_micro.py:1 · sha256:52fce052ee06
  • Configured test runner Makefile:1 · sha256:0e9d9400ee80
  • Configured test runner pydantic-core/Makefile:1 · sha256:4ac502de0f82
  • Configured test runner pydantic-core/pyproject.toml:1 · sha256:99dd772c656a
  • Configured test runner pyproject.toml:1 · sha256:8375abce73bf
  • Coverage configuration .github/workflows/coverage.yml:1 · sha256:778ab27e94bf
  • Coverage configuration pydantic-core/pyproject.toml:1 · sha256:99dd772c656a
  • Coverage configuration pyproject.toml:1 · sha256:8375abce73bf
  • CI workflow runs the test suite .github/workflows/ci.yml:1 · sha256:b84e54ec0671
A4

Dependency hygiene

dimension band: verified
3.6
  • Declared version range ratio28/28 ratio
  • Lockfile coverage1/1 present
  • Dependency automation ratio1/2 ratio
  • Dependency count sanity1/1 sane
  • Dependency manifest pydantic-core/Cargo.toml:1 · sha256:e0dfda4bea74
  • Dependency lockfile pydantic-core/Cargo.lock:1 · sha256:79e859286a1b
  • Dependency update config .github/dependabot.yml:1 · sha256:62040a26dfec
A5

Claim-vs-reality reconciliation

dimension band: warning
2.4
  • Claim match rate12/20 ratio
  • Claim source depth4 docs (capped; 9 raw)
  • Reconciliation artifact depth0/3 artifacts
  • Repository claim source README.md:1 · sha256:b5e7970366d9
  • Code presence for claim reconciliation pydantic-core/src/argument_markers.rs:1 · sha256:71fe74ddc7fe
  • finding severity warning: Claim source and implementation files are present, but no dedicated claim-reality report artifact was supplied. (Repository claim source README.md:1 · sha256:b5e7970366d9)

Not applicable to this repository

  • A2 Data-layer isolation and secrets posture — No data layer (DB/ORM/migrations) or ratable secrets surface detected — A2 not applicable to this repo archetype. A ratable surface requires .env* files, .gitignore .env rule, committed/history .env path, or detected signing/HMAC/secret-comparison code; bare env reads (process.env / os.environ / std::env::) do not qualify.
  • A3 Production readiness — No deployable-service surface detected — production-readiness not applicable to this library/CLI archetype. Signals checked: production server entrypoint (HTTP/RPC port binding in main/server/app files, outside examples/tests/demo dirs), deploy config (vercel.json, render.yaml, fly.toml, Procfile, app.yaml, serverless.yml, docker-compose, k8s/helm manifests), CI deploy job (fly deploy, kubectl apply, helm install/upgrade, docker push). A Dockerfile without an explicit runtime start/service command is ambiguous and does not qualify.

Process trust

B2

PR outcome traceability

dimension band: verified
4.0
  • PR trace basic checks2 signals (capped; 11 raw)
  • Recent PR merge ratio1/1 ratio
  • Pull-request CI workflow .github/workflows/ci.yml:1 · sha256:b84e54ec0671
  • Pull-request CI workflow .github/workflows/codspeed.yml:1 · sha256:b2580cad48fe
  • Pull-request CI workflow .github/workflows/coverage.yml:1 · sha256:778ab27e94bf
  • Pull request template .github/PULL_REQUEST_TEMPLATE.md:1 · sha256:1fd33fa8826b
B3

CI and QA discipline

dimension band: verified
3.6
  • CI verification depth3/4 signals
  • PR-gate CI workflow count4 workflows (capped; 6 raw)
  • CI workflow .github/workflows/ci.yml:1 · sha256:b84e54ec0671
B4

Audit trail and report-up completeness

dimension band: verified
2.9
  • Audit artifact depth2/3 files
  • Audit freshness depth2/2 ratio
  • Audit or changelog artifact CITATION.cff:1 · sha256:943d40f1504a
  • Audit or changelog artifact HISTORY.md:1 · sha256:4ac933062dfd

Not applicable to this repository

  • B1 Internal process dimension — Substrate-specific: an internal process dimension is not applicable to external code.
  • B5 Internal process dimension — Substrate-specific: an internal process dimension is not applicable to external code.
  • B6 Privileged-operation human gating — No privileged-operation surface (prod DB admin GRANT/privilege DDL, role escalation, or documented human-gate governance) detected in this repo.

Verified evidence

  • A1 - Test integrity and regression signalDetected test file pydantic-core/tests/__init__.py
  • A1 - Test integrity and regression signalDetected test file pydantic-core/tests/benchmarks/__init__.py
  • A1 - Test integrity and regression signalDetected test file pydantic-core/tests/benchmarks/complete_schema.py:1 · sha256:67fbb9f86ee1
  • A1 - Test integrity and regression signalDetected test file pydantic-core/tests/benchmarks/nested_schema.py:1 · sha256:5dd7f39830db
  • A1 - Test integrity and regression signalDetected test file pydantic-core/tests/benchmarks/test_complete_benchmark.py:1 · sha256:93af73fdd79c
  • A1 - Test integrity and regression signalDetected test file pydantic-core/tests/benchmarks/test_micro_benchmarks.py:1 · sha256:4a88116cb64c
  • A1 - Test integrity and regression signalDetected test file pydantic-core/tests/benchmarks/test_nested_benchmark.py:1 · sha256:b257d008f043
  • A1 - Test integrity and regression signalDetected test file pydantic-core/tests/benchmarks/test_serialization_micro.py:1 · sha256:52fce052ee06
  • A1 - Test integrity and regression signalConfigured test runner Makefile:1 · sha256:0e9d9400ee80
  • A1 - Test integrity and regression signalConfigured test runner pydantic-core/Makefile:1 · sha256:4ac502de0f82
  • A1 - Test integrity and regression signalConfigured test runner pydantic-core/pyproject.toml:1 · sha256:99dd772c656a
  • A1 - Test integrity and regression signalConfigured test runner pyproject.toml:1 · sha256:8375abce73bf
  • A1 - Test integrity and regression signalCoverage configuration .github/workflows/coverage.yml:1 · sha256:778ab27e94bf
  • A1 - Test integrity and regression signalCoverage configuration pydantic-core/pyproject.toml:1 · sha256:99dd772c656a
  • A1 - Test integrity and regression signalCoverage configuration pyproject.toml:1 · sha256:8375abce73bf
  • A1 - Test integrity and regression signalCI workflow runs the test suite .github/workflows/ci.yml:1 · sha256:b84e54ec0671
  • A4 - Dependency hygieneDependency manifest pydantic-core/Cargo.toml:1 · sha256:e0dfda4bea74
  • A4 - Dependency hygieneDependency lockfile pydantic-core/Cargo.lock:1 · sha256:79e859286a1b
  • A4 - Dependency hygieneDependency update config .github/dependabot.yml:1 · sha256:62040a26dfec
  • B2 - PR outcome traceabilityPull-request CI workflow .github/workflows/ci.yml:1 · sha256:b84e54ec0671
  • B2 - PR outcome traceabilityPull-request CI workflow .github/workflows/codspeed.yml:1 · sha256:b2580cad48fe
  • B2 - PR outcome traceabilityPull-request CI workflow .github/workflows/coverage.yml:1 · sha256:778ab27e94bf
  • B2 - PR outcome traceabilityPull request template .github/PULL_REQUEST_TEMPLATE.md:1 · sha256:1fd33fa8826b
  • B3 - CI and QA disciplineCI workflow .github/workflows/ci.yml:1 · sha256:b84e54ec0671
  • B4 - Audit trail and report-up completenessAudit or changelog artifact CITATION.cff:1 · sha256:943d40f1504a
  • B4 - Audit trail and report-up completenessAudit or changelog artifact HISTORY.md:1 · sha256:4ac933062dfd

Open / unverified

  • A5 - Claim-vs-reality reconciliationfinding severity warning: Claim source and implementation files are present, but no dedicated claim-reality report artifact was supplied. (Repository claim source README.md:1 · sha256:b5e7970366d9)