Commit ff3552e
docs(campaigns): add 2026-05-26 estate sweep report (human + machine) (#48)
## Summary
Two-session estate sweep across 369 repos. Closes the documentation
surface of
[#32](#32).
Filed under `docs/campaigns/` rather than `reports/` because `/reports/`
is gitignored (ephemeral scan output).
## What changes
- `docs/campaigns/2026-05-26.md` — human-readable summary (178 lines):
method, findings shape, all 17 narrow PRs across 5 work tracks, 35+
tracking issues, 3 upstream bug reports against panic-attack itself,
discoveries, mid-campaign correction, what remains
- `docs/campaigns/2026-05-26.a2ml` — machine-readable A2ML companion
(379 lines): `campaign-report v1.0.0` schema introduced in this file,
structured fields for tracker tooling
## Notable discoveries (highlight)
1. **ReScript `%raw` opacity (svalinn)**: `Jwt.verifyJwt` claimed to
verify but compiled to JS that ReferenceError'd on every call — 4
independent `%raw`-elides-binding bugs in adjacent code. JWT auth was
failing closed by accident, not by signature-skip. Fixed in
[svalinn#14](hyperpolymath/svalinn#14) (29/29
auth tests now pass; was 17/12).
2. **`bridge triage` transitive-dep misclassification**: "Remove unused
dependency from Cargo.toml" assumes direct dependency, fires on
transitive (28/28 sampled phantoms were transitive). Filed as
[#47](#47).
3. **PA021 ProofDrift detector blind spot**: matches `sorry`/`oops`
inside Isabelle `\<open>...\</close>` and `@{text ...}` comment
antiquotations. All 4 tropical-resource-typing findings were
comment-text false positives. Filed as
[#43](#43).
## Outputs
- **17 PRs**: 13 Track A FFI classification + 3 Track D / Phase 5
proof-aware + 1 Track B real-bug fix
- **35+ Track C** per-repo tracking issues
- **24 Track E** bridge CVE tracking issues
- **3 upstream bugs** against panic-attack
([#33](#33),
[#43](#43),
[#47](#47))
- **2 PRs merged so far**: echidna#107, tropical-resource-typing#4
Refs #32, #33, #43, #47.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
---------
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>1 parent 2bc5e5a commit ff3552e
0 file changed
0 commit comments