witan-batch-1787098784914-541717

Date
Run
unknown @ c0606e91798c8dca4f33d101e1dd836d672592c1
Rubric
witan-rubric-v17-2026-07-24
2.9/4.0 overall

Conditional

Code 2.4 · Process 3.4

code 4/5 · process 3/6 measured

Criterion profile

Measured scores are plotted on a 0–4 scale. Unknown and not-applicable dimensions remain explicit.

7 measured 0 no data 4 N/A

Code trust

A1Test integrity and regression signal
2.5
A2Data-layer isolation and secrets posture
N/A
A3Production readiness
2.2
A4Dependency hygiene
2.7
A5Claim-vs-reality reconciliation
2.2

Process trust

B1Internal process dimension
N/A
B2PR outcome traceability
3.2
B3CI and QA discipline
4.0
B4Audit trail and report-up completeness
2.9
B5Internal process dimension
N/A
B6Privileged-operation human gating
N/A

Code trust

A1

Test integrity and regression signal

dimension band: verified
2.5
  • Test-to-source file ratio212/272 ratio
  • Static coverage percentage0/100 percent
  • Verification script ratio4/4 ratio
  • Non-hollow test share198/212 ratio
  • Detected test file packages/compiler-core/__tests__/codegen.spec.ts:1 · sha256:63ba48da7ac9
  • Detected test file packages/compiler-core/__tests__/compile.spec.ts:1 · sha256:be962453bd41
  • Detected test file packages/compiler-core/__tests__/parse.spec.ts:1 · sha256:937d3edeeae4
  • Detected test file packages/compiler-core/__tests__/scopeId.spec.ts:1 · sha256:5bc4e857bccb
  • Detected test file packages/compiler-core/__tests__/testUtils.ts:1 · sha256:201483f1165d
  • Detected test file packages/compiler-core/__tests__/transform.spec.ts:1 · sha256:f47ac739de25
  • Detected test file packages/compiler-core/__tests__/transforms/cacheStatic.spec.ts:1 · sha256:e636d1021703
  • Detected test file packages/compiler-core/__tests__/transforms/noopDirectiveTransform.spec.ts:1 · sha256:0257911e5bfb
  • Configured test runner vitest.config.ts:1 · sha256:53a16c86c515
  • Configured test runner package.json:1 · sha256:0e9687aefbca
  • Coverage configuration vitest.config.ts:1 · sha256:53a16c86c515
  • CI workflow runs the test suite .github/workflows/test.yml:1 · sha256:3510205184c9
A3

Production readiness

dimension band: warning
2.2
  • Production-readiness basic checks3/6 checks
  • Production workflow depth6 signals (capped; 11 raw)
  • Observability depth3/4 signals
  • Rollback and migration-safety depth0/4 signals
  • Build or typecheck script package.json:1 · sha256:0e9687aefbca
  • CI workflow .github/workflows/autofix.yml:1 · sha256:b07d87251343
  • Release deploy configuration netlify.toml:1 · sha256:dcb6042928c9
  • finding severity warning: A3 dimension band is warning at 2.2/4.0. Lowest contributing measurements: Rollback and migration-safety depth 0/4 signals; Production-readiness basic checks 3/6 checks. To improve: document and test rollback or recovery procedures; add the missing deployment-readiness controls. (Build or typecheck script package.json:1 · sha256:0e9687aefbca)
A4

Dependency hygiene

dimension band: verified
2.7
  • Pinned dependency ratio38/123 ratio
  • Lockfile coverage1/1 present
  • Dependency automation ratio1/2 ratio
  • Dependency manifest package.json:1 · sha256:0e9687aefbca
  • Dependency lockfile pnpm-lock.yaml:1 · sha256:a9947be31928
  • Dependency update config .github/renovate.json5:1 · sha256:4f3867861c7f
A5

Claim-vs-reality reconciliation

dimension band: warning
2.2
  • Claim match rate12/13 ratio
  • Claim source depth1/4 docs
  • Reconciliation artifact depth0/3 artifacts
  • Repository claim source README.md:1 · sha256:1d5ea6d8b418
  • Code presence for claim reconciliation packages-private/dts-built-test/src/index.ts:1 · sha256:5d44f16d7982
  • finding severity warning: Claim source and implementation files are present, but no dedicated claim-reality report artifact was supplied. (Repository claim source README.md:1 · sha256:1d5ea6d8b418)

Not applicable to this repository

  • A2 Data-layer isolation and secrets posture — No data layer (DB/ORM/migrations) or ratable secrets surface detected — A2 not applicable to this repo archetype. A ratable surface requires .env* files, .gitignore .env rule, committed/history .env path, or detected signing/HMAC/secret-comparison code; bare env reads (process.env / os.environ / std::env::) do not qualify.

Process trust

B2

PR outcome traceability

dimension band: warning
3.2
  • PR trace basic checks2 signals (capped; 9 raw)
  • Recent PR merge ratio0/1 ratio
  • Pull-request CI workflow .github/workflows/autofix.yml:1 · sha256:b07d87251343
  • Pull-request CI workflow .github/workflows/ci.yml:1 · sha256:ede571131c6d
  • Pull-request CI workflow .github/workflows/close-cant-reproduce-issues.yml:1 · sha256:8f37190a64d8
  • finding severity warning: B2 dimension band is warning at 3.2/4.0. Lowest contributing measurements: Recent PR merge ratio 0/1 ratio; PR trace basic checks 2 signals capped (9 raw). To improve: preserve merged pull-request history in the scanned clone; add pull-request templates and outcome-trace records. (Pull-request CI workflow .github/workflows/autofix.yml:1 · sha256:b07d87251343)
B3

CI and QA discipline

dimension band: verified
4.0
  • CI verification depth4 signals (capped; 6 raw)
  • PR-gate CI workflow count4 workflows (capped; 5 raw)
  • Test script package.json:1 · sha256:0e9687aefbca
  • Lint script package.json:1 · sha256:0e9687aefbca
  • CI workflow .github/workflows/autofix.yml:1 · sha256:b07d87251343
B4

Audit trail and report-up completeness

dimension band: verified
2.9
  • Audit artifact depth2/3 files
  • Audit freshness depth2/2 ratio
  • Audit or changelog artifact CHANGELOG.md:1 · sha256:4f9499f794a5
  • Audit or changelog artifact SECURITY.md:1 · sha256:f744b4da60a2

Not applicable to this repository

  • B1 Internal process dimension — Substrate-specific: an internal process dimension is not applicable to external code.
  • B5 Internal process dimension — Substrate-specific: an internal process dimension is not applicable to external code.
  • B6 Privileged-operation human gating — No privileged-operation surface (prod DB admin GRANT/privilege DDL, role escalation, or documented human-gate governance) detected in this repo.

Verified evidence

  • A1 - Test integrity and regression signalDetected test file packages/compiler-core/__tests__/codegen.spec.ts:1 · sha256:63ba48da7ac9
  • A1 - Test integrity and regression signalDetected test file packages/compiler-core/__tests__/compile.spec.ts:1 · sha256:be962453bd41
  • A1 - Test integrity and regression signalDetected test file packages/compiler-core/__tests__/parse.spec.ts:1 · sha256:937d3edeeae4
  • A1 - Test integrity and regression signalDetected test file packages/compiler-core/__tests__/scopeId.spec.ts:1 · sha256:5bc4e857bccb
  • A1 - Test integrity and regression signalDetected test file packages/compiler-core/__tests__/testUtils.ts:1 · sha256:201483f1165d
  • A1 - Test integrity and regression signalDetected test file packages/compiler-core/__tests__/transform.spec.ts:1 · sha256:f47ac739de25
  • A1 - Test integrity and regression signalDetected test file packages/compiler-core/__tests__/transforms/cacheStatic.spec.ts:1 · sha256:e636d1021703
  • A1 - Test integrity and regression signalDetected test file packages/compiler-core/__tests__/transforms/noopDirectiveTransform.spec.ts:1 · sha256:0257911e5bfb
  • A1 - Test integrity and regression signalConfigured test runner vitest.config.ts:1 · sha256:53a16c86c515
  • A1 - Test integrity and regression signalConfigured test runner package.json:1 · sha256:0e9687aefbca
  • A1 - Test integrity and regression signalCoverage configuration vitest.config.ts:1 · sha256:53a16c86c515
  • A1 - Test integrity and regression signalCI workflow runs the test suite .github/workflows/test.yml:1 · sha256:3510205184c9
  • A4 - Dependency hygieneDependency manifest package.json:1 · sha256:0e9687aefbca
  • A4 - Dependency hygieneDependency lockfile pnpm-lock.yaml:1 · sha256:a9947be31928
  • A4 - Dependency hygieneDependency update config .github/renovate.json5:1 · sha256:4f3867861c7f
  • B3 - CI and QA disciplineTest script package.json:1 · sha256:0e9687aefbca
  • B3 - CI and QA disciplineLint script package.json:1 · sha256:0e9687aefbca
  • B3 - CI and QA disciplineCI workflow .github/workflows/autofix.yml:1 · sha256:b07d87251343
  • B4 - Audit trail and report-up completenessAudit or changelog artifact CHANGELOG.md:1 · sha256:4f9499f794a5
  • B4 - Audit trail and report-up completenessAudit or changelog artifact SECURITY.md:1 · sha256:f744b4da60a2

Open / unverified

  • A3 - Production readinessfinding severity warning: A3 dimension band is warning at 2.2/4.0. Lowest contributing measurements: Rollback and migration-safety depth 0/4 signals; Production-readiness basic checks 3/6 checks. To improve: document and test rollback or recovery procedures; add the missing deployment-readiness controls. (Build or typecheck script package.json:1 · sha256:0e9687aefbca)
  • A5 - Claim-vs-reality reconciliationfinding severity warning: Claim source and implementation files are present, but no dedicated claim-reality report artifact was supplied. (Repository claim source README.md:1 · sha256:1d5ea6d8b418)
  • B2 - PR outcome traceabilityfinding severity warning: B2 dimension band is warning at 3.2/4.0. Lowest contributing measurements: Recent PR merge ratio 0/1 ratio; PR trace basic checks 2 signals capped (9 raw). To improve: preserve merged pull-request history in the scanned clone; add pull-request templates and outcome-trace records. (Pull-request CI workflow .github/workflows/autofix.yml:1 · sha256:b07d87251343)