Issues

.d.ts declaration-only functions become analysis units and can be seeded as entry points — the TypeScript parser lacks the declaration-vs-definition split the C parser gets right

knostic/OpenAnt#806 · opened

on Oct 14, 2026

C++ content in .h uses the C grammar: template implementations silently yield zero units; class methods lose structure

knostic/OpenAnt#805 · opened

on Oct 14, 2026

A resume's kept-set recomputation silently absorbs the prior run's unfinished work — errored units leave scope instead of retrying, orphaned checkpoints are counted nowhere, and the run reports degraded: false while its own error count falls

knostic/OpenAnt#802 · opened

on Oct 13, 2026

The discovery exclusions are per-language and leak for JavaScript — .github is only excluded by Python's hidden-directory rule, and .test.cjs evades the JS test-file skipper (a CI test file reached the paid kept set)

knostic/OpenAnt#801 · opened

on Oct 13, 2026

analyze and verify file every error under one hardcoded "api" bucket — a permanent context-overflow 400 is indistinguishable from a transient 402/429

knostic/OpenAnt#800 · opened

on Oct 13, 2026

The human summary states "No steps were skipped" on every --skip-dynamic-test run — the skip is recorded one pipeline step AFTER pipeline_output.json is written

knostic/OpenAnt#799 · opened

on Oct 13, 2026

llm-reachability validates model signals against the current BATCH, not the dataset — 61 of 95 dropped unit_ids were real units, 10 of them entry_point/high promotions

knostic/OpenAnt#798 · opened

on Oct 13, 2026

The cost meter never reads the provider's own cost — OpenRouter returns usage.cost on every response and the unifier drops it; a 220.5M-token phase shipped as $0.00

knostic/OpenAnt#797 · opened

on Oct 13, 2026

The JS parser's bootstrap runs npm install, which can rewrite the committed package-lock.json — dirtying the user's working tree and silently drifting the lock

knostic/OpenAnt#795 · opened

on Oct 12, 2026

cost_incomplete exists in every machine channel but no human-readable surface renders it — the operator-facing cost lines (scan summary, phase reporters, log_usage, the enhancer, the autopatcher tools) print an under-count as fact

knostic/OpenAnt#786 · opened

on Oct 12, 2026

1

Bedrock adapter: no throttle/quota classification — the ServiceQuotaExceededException 400 falls to the structural-error path and PR #716's kind never reaches a Bedrock error

knostic/OpenAnt#785 · opened

on Oct 11, 2026

The bare-name cross-package fabrication is ungated on the direct method-call paths (resolveMethodCall's fallback fires for b.view() and f := b.view; f() on a func-typed FIELD — filed from #746's review)

knostic/OpenAnt#781 · opened

on Oct 11, 2026

resolveSimpleCall's unqualified-name first-match-wins over map iteration flips //go:build-tagged edges (the #747 sibling class — filed from the #747 cycle's corpus control)

knostic/OpenAnt#777 · opened

on Oct 11, 2026

PHP and Ruby parsers consume call-graph edge lists unsorted — the #754 class (filed from #754's review; the sibling defect has no tracker)

knostic/OpenAnt#775 · opened

on Oct 10, 2026

Since the #716 retry rework, a Google 5xx reaches analyze's retry check as a dict with no status — the string path retried it, the dict path does not

knostic/OpenAnt#770 · opened

on Oct 8, 2026

The keep-all reachability-filter record diverges per producing path: warning and seed-class fields on the core Python path, a bare five-field record on five per-language pipelines, and no record at all on rust and zig

knostic/OpenAnt#768 · opened

on Oct 8, 2026

PR #672's body promised a composed-path regression test for init --pr; the PR shipped cmd/init.go only — the guard and the stamped-SHA fix are regression-unpinned

knostic/OpenAnt#767 · opened

on Oct 8, 2026

A stray pytest run log (runA-388b.log) is committed at the repo root — a deferred git-rm candidate named in PR #671's thread and never actioned

knostic/OpenAnt#766 · opened

on Oct 8, 2026

experiment.py crashes before saving results when print_summary reads the missing 'model' key

knostic/OpenAnt#761 · opened

on Oct 6, 2026

C parser: the call-graph edge lists are consumed unsorted, so inlined-dependency order varies with PYTHONHASHSEED and defeats the LR resume gate (17.8-21.4% of units re-run per resume) — the ordering repair split out of #724

knostic/OpenAnt#754 · opened

on Sep 27, 2026

Enhance resume accounting counts raw checkpoint-dir ids (dataset membership never checked) and never retires the errors it seeds — Done: 1825/1819, phase=done errors: 528 with zero errored checkpoints on disk

knostic/OpenAnt#748 · opened

on Sep 25, 2026

resolvePackageCall matches cross-package calls on the import's directory basename over a map-ordered candidate list — wrong-package edges, different across parses of the identical tree (21 edge flips; 107 units inlined a different callee body)

knostic/OpenAnt#747 · opened

on Sep 25, 2026

The Go call graph records no edge for method values held in struct-literal fields or named-func-type containers — the OpenBao handler idiom: 254 of 318 Callback handlers pruned with no caller in one scan (the AppRole login handler among them)

knostic/OpenAnt#746 · opened

on Sep 25, 2026

A delegation-dismissed SAFE row names its sink-owner only in prose — no consumer surface carries the edge, and when the sink-owner was pruned the finding evaporates (one executed chain; Stage 2 wrote 'a separate sink, not the target function' and nothing chased it)

knostic/OpenAnt#745 · opened

on Sep 25, 2026

The Stage-1 verdict vocabulary has no definitions in the prompt and INCONCLUSIVE's disposition contradicts itself across surfaces — manual-review-recommended (docs, HTML legend, remediation) while disclosure-dropped and never Stage-2-verified; a semantics ruling

knostic/OpenAnt#744 · opened

on Sep 25, 2026

1

Navigation Menu

Repository navigation

Issues

.d.ts declaration-only functions become analysis units and can be seeded as entry points — the TypeScript parser lacks the declaration-vs-definition split the C parser gets right

C++ content in .h uses the C grammar: template implementations silently yield zero units; class methods lose structure

A resume's kept-set recomputation silently absorbs the prior run's unfinished work — errored units leave scope instead of retrying, orphaned checkpoints are counted nowhere, and the run reports degraded: false while its own error count falls

The discovery exclusions are per-language and leak for JavaScript — .github is only excluded by Python's hidden-directory rule, and .test.cjs evades the JS test-file skipper (a CI test file reached the paid kept set)

analyze and verify file every error under one hardcoded "api" bucket — a permanent context-overflow 400 is indistinguishable from a transient 402/429

The human summary states "No steps were skipped" on every --skip-dynamic-test run — the skip is recorded one pipeline step AFTER pipeline_output.json is written

llm-reachability validates model signals against the current BATCH, not the dataset — 61 of 95 dropped unit_ids were real units, 10 of them entry_point/high promotions

The cost meter never reads the provider's own cost — OpenRouter returns usage.cost on every response and the unifier drops it; a 220.5M-token phase shipped as $0.00

The JS parser's bootstrap runs npm install, which can rewrite the committed package-lock.json — dirtying the user's working tree and silently drifting the lock

cost_incomplete exists in every machine channel but no human-readable surface renders it — the operator-facing cost lines (scan summary, phase reporters, log_usage, the enhancer, the autopatcher tools) print an under-count as fact

Bedrock adapter: no throttle/quota classification — the ServiceQuotaExceededException 400 falls to the structural-error path and PR #716's kind never reaches a Bedrock error

The bare-name cross-package fabrication is ungated on the direct method-call paths (resolveMethodCall's fallback fires for b.view() and f := b.view; f() on a func-typed FIELD — filed from #746's review)

resolveSimpleCall's unqualified-name first-match-wins over map iteration flips //go:build-tagged edges (the #747 sibling class — filed from the #747 cycle's corpus control)

PHP and Ruby parsers consume call-graph edge lists unsorted — the #754 class (filed from #754's review; the sibling defect has no tracker)

Since the #716 retry rework, a Google 5xx reaches analyze's retry check as a dict with no status — the string path retried it, the dict path does not

The keep-all reachability-filter record diverges per producing path: warning and seed-class fields on the core Python path, a bare five-field record on five per-language pipelines, and no record at all on rust and zig

PR #672's body promised a composed-path regression test for init --pr; the PR shipped cmd/init.go only — the guard and the stamped-SHA fix are regression-unpinned

A stray pytest run log (runA-388b.log) is committed at the repo root — a deferred git-rm candidate named in PR #671's thread and never actioned

experiment.py crashes before saving results when print_summary reads the missing 'model' key

C parser: the call-graph edge lists are consumed unsorted, so inlined-dependency order varies with PYTHONHASHSEED and defeats the LR resume gate (17.8-21.4% of units re-run per resume) — the ordering repair split out of #724

Enhance resume accounting counts raw checkpoint-dir ids (dataset membership never checked) and never retires the errors it seeds — Done: 1825/1819, phase=done errors: 528 with zero errored checkpoints on disk

resolvePackageCall matches cross-package calls on the import's directory basename over a map-ordered candidate list — wrong-package edges, different across parses of the identical tree (21 edge flips; 107 units inlined a different callee body)

The Go call graph records no edge for method values held in struct-literal fields or named-func-type containers — the OpenBao handler idiom: 254 of 318 Callback handlers pruned with no caller in one scan (the AppRole login handler among them)

A delegation-dismissed SAFE row names its sink-owner only in prose — no consumer surface carries the edge, and when the sink-owner was pruned the finding evaporates (one executed chain; Stage 2 wrote 'a separate sink, not the target function' and nothing chased it)

The Stage-1 verdict vocabulary has no definitions in the prompt and INCONCLUSIVE's disposition contradicts itself across surfaces — manual-review-recommended (docs, HTML legend, remediation) while disclosure-dropped and never Stage-2-verified; a semantics ruling