Skip to content

Commit ff3552e

Browse files
docs(campaigns): add 2026-05-26 estate sweep report (human + machine) (#48)
## Summary Two-session estate sweep across 369 repos. Closes the documentation surface of [#32](#32). Filed under `docs/campaigns/` rather than `reports/` because `/reports/` is gitignored (ephemeral scan output). ## What changes - `docs/campaigns/2026-05-26.md` — human-readable summary (178 lines): method, findings shape, all 17 narrow PRs across 5 work tracks, 35+ tracking issues, 3 upstream bug reports against panic-attack itself, discoveries, mid-campaign correction, what remains - `docs/campaigns/2026-05-26.a2ml` — machine-readable A2ML companion (379 lines): `campaign-report v1.0.0` schema introduced in this file, structured fields for tracker tooling ## Notable discoveries (highlight) 1. **ReScript `%raw` opacity (svalinn)**: `Jwt.verifyJwt` claimed to verify but compiled to JS that ReferenceError'd on every call — 4 independent `%raw`-elides-binding bugs in adjacent code. JWT auth was failing closed by accident, not by signature-skip. Fixed in [svalinn#14](hyperpolymath/svalinn#14) (29/29 auth tests now pass; was 17/12). 2. **`bridge triage` transitive-dep misclassification**: "Remove unused dependency from Cargo.toml" assumes direct dependency, fires on transitive (28/28 sampled phantoms were transitive). Filed as [#47](#47). 3. **PA021 ProofDrift detector blind spot**: matches `sorry`/`oops` inside Isabelle `\<open>...\</close>` and `@{text ...}` comment antiquotations. All 4 tropical-resource-typing findings were comment-text false positives. Filed as [#43](#43). ## Outputs - **17 PRs**: 13 Track A FFI classification + 3 Track D / Phase 5 proof-aware + 1 Track B real-bug fix - **35+ Track C** per-repo tracking issues - **24 Track E** bridge CVE tracking issues - **3 upstream bugs** against panic-attack ([#33](#33), [#43](#43), [#47](#47)) - **2 PRs merged so far**: echidna#107, tropical-resource-typing#4 Refs #32, #33, #43, #47. 🤖 Generated with [Claude Code](https://claude.com/claude-code) --------- Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
1 parent 2bc5e5a commit ff3552e

0 file changed

File tree

    0 commit comments

    Comments
     (0)