{
  "schemaVersion": 1,
  "slug": "ppc-lander-intel",
  "repository": "webhostingdoo/ppc-lander-intel",
  "sourceSha": "77d24c25e202d3d6a7318c189b988cc72526af59",
  "hqSha": "bc9bd4733aecd8862c6a00e7db10853d2f3fc245",
  "scannedAt": "2026-10-23T16:19:08.456Z",
  "status": "scanned",
  "findings": [
    {
      "id": "6fad01273b9939c8",
      "category": "access",
      "label": "Clerk",
      "detail": "Integration signal in source. Account ownership, provisioning and live connectivity are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 18,
          "kind": "declared-config"
        },
        {
          "path": "web/scripts/check-owner-login.mjs",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "web/src/app/layout.tsx",
          "line": 2,
          "kind": "observed-code"
        },
        {
          "path": "web/src/app/sign-in/[[...sign-in]]/page.tsx",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/auth.ts",
          "line": 3,
          "kind": "observed-code"
        },
        {
          "path": "web/src/proxy.ts",
          "line": 1,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "e228954257c414d2",
      "category": "access",
      "label": "OAuth flow",
      "detail": "OAuth reference; provider, consent scopes, token custody and access checks need confirmation.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "scripts/configure_resolver_cloud.py",
          "line": 78,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "af8bcf0bfc954fba",
      "category": "access",
      "label": "Supabase",
      "detail": "Mentioned in source documentation; implementation and account access need confirmation.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "docs/DECISIONS.md",
          "line": 40,
          "kind": "source-reported"
        },
        {
          "path": "docs/OPERATIONS.md",
          "line": 19,
          "kind": "source-reported"
        },
        {
          "path": "web/scripts/check-cloud-db.mjs",
          "line": 9,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/refresh-billing.ts",
          "line": 11,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/verify-archive.ts",
          "line": 24,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/verify-bulk-gallery.mjs",
          "line": 7,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/verify-private-artifacts.mjs",
          "line": 7,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "75765901171dfb34",
      "category": "apis",
      "label": "GET /api/archive",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/archive/route.ts",
          "line": 6,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "fa679896a2780ad6",
      "category": "apis",
      "label": "GET /api/archive/artifacts/[job]/[name]",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/archive/artifacts/[job]/[name]/route.ts",
          "line": 9,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "5fad30f8b8ae67ef",
      "category": "apis",
      "label": "GET /api/artifacts/[job]/[name]",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/artifacts/[job]/[name]/route.ts",
          "line": 9,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "e08e4b6d3463b4e4",
      "category": "apis",
      "label": "GET /api/batches",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/batches/route.ts",
          "line": 8,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "9a802e3951f0a2cd",
      "category": "apis",
      "label": "GET /api/capture-evidence",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/capture-evidence/route.ts",
          "line": 5,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "ea0f22364d70626a",
      "category": "apis",
      "label": "GET /api/continuous",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/continuous/route.ts",
          "line": 5,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "366c3c728e4a423c",
      "category": "apis",
      "label": "GET /api/cron/continuous",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/cron/continuous/route.ts",
          "line": 10,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "a247886b6f65032a",
      "category": "apis",
      "label": "GET /api/cron/source-sync",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/cron/source-sync/route.ts",
          "line": 5,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "12d582fd27ce3e12",
      "category": "apis",
      "label": "GET /api/incidents",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/incidents/route.ts",
          "line": 10,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "1b9de27ecc21313f",
      "category": "apis",
      "label": "GET /api/interpretations",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/interpretations/route.ts",
          "line": 6,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "2bec1dbe6a2893e8",
      "category": "apis",
      "label": "GET /api/jobs",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/jobs/route.ts",
          "line": 7,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "dc3bfa8effdc0e84",
      "category": "apis",
      "label": "GET /api/operations",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/operations/route.ts",
          "line": 11,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "9ca8b3609c258b5e",
      "category": "apis",
      "label": "GET /api/research",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/research/route.ts",
          "line": 19,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "f50ef9c92ade95f5",
      "category": "apis",
      "label": "GET /api/research-library",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/research-library/route.ts",
          "line": 5,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "a30d573d5c69cf73",
      "category": "apis",
      "label": "GET /api/resolver/status",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/resolver/status/route.ts",
          "line": 5,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "116b7910ba21573b",
      "category": "apis",
      "label": "GET /api/source-sync",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/source-sync/route.ts",
          "line": 6,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "bf3e45441dc89bf4",
      "category": "apis",
      "label": "GET /api/urlbox-refresh",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/urlbox-refresh/route.ts",
          "line": 8,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "e4d5bf8bf7f060cf",
      "category": "apis",
      "label": "POST /api/archive",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/archive/route.ts",
          "line": 9,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "411022adfd3e37ea",
      "category": "apis",
      "label": "POST /api/batches",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/batches/route.ts",
          "line": 11,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "cefdc5cc089f2d8b",
      "category": "apis",
      "label": "POST /api/continuous",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/continuous/route.ts",
          "line": 6,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "ca7fad2bb5ae156f",
      "category": "apis",
      "label": "POST /api/incidents",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/incidents/route.ts",
          "line": 21,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "27d194a7172b0e1b",
      "category": "apis",
      "label": "POST /api/interpretations",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/interpretations/route.ts",
          "line": 7,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "5b6f7190c8ec22da",
      "category": "apis",
      "label": "POST /api/jobs",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/jobs/route.ts",
          "line": 8,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "0463c02f8b1ba0e8",
      "category": "apis",
      "label": "POST /api/queues/archive",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/queues/archive/route.ts",
          "line": 8,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "04abeb60f1289235",
      "category": "apis",
      "label": "POST /api/queues/batches",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/queues/batches/route.ts",
          "line": 6,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "15aff2287c7ff8fe",
      "category": "apis",
      "label": "POST /api/queues/capture",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/queues/capture/route.ts",
          "line": 9,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "4917727f7bb1e33a",
      "category": "apis",
      "label": "POST /api/queues/continuous",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/queues/continuous/route.ts",
          "line": 6,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "cc5aa20c2cb9aa0d",
      "category": "apis",
      "label": "POST /api/queues/market-maintenance",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/queues/market-maintenance/route.ts",
          "line": 5,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "7bf81bc51c9aaa95",
      "category": "apis",
      "label": "POST /api/queues/resolver",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/queues/resolver/route.ts",
          "line": 6,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "aa41561ef5ff9364",
      "category": "apis",
      "label": "POST /api/queues/source-sync",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/queues/source-sync/route.ts",
          "line": 5,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "c830102f0f4a04d6",
      "category": "apis",
      "label": "POST /api/queues/urlbox-refresh",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/queues/urlbox-refresh/route.ts",
          "line": 7,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "994a0a02f204a2dc",
      "category": "apis",
      "label": "POST /api/research-library",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/research-library/route.ts",
          "line": 6,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "d31ad584c430e4e1",
      "category": "apis",
      "label": "POST /api/resolver/claim",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/resolver/claim/route.ts",
          "line": 6,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "81cdd0f9963d5ed5",
      "category": "apis",
      "label": "POST /api/source-sync",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/source-sync/route.ts",
          "line": 7,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "8dc1cba6639e9c66",
      "category": "apis",
      "label": "POST /api/urlbox-refresh",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/urlbox-refresh/route.ts",
          "line": 9,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "51ccaf7070338817",
      "category": "configuration",
      "label": "CLERK_SECRET_KEY",
      "detail": "Secret-like name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/check-owner-login.mjs",
          "line": 5,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/check-owner-login.mjs",
          "line": 8,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/auth.ts",
          "line": 13,
          "kind": "observed-code"
        },
        {
          "path": "web/src/proxy.ts",
          "line": 10,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "5c0466df512b7040",
      "category": "configuration",
      "label": "CRON_SECRET",
      "detail": "Secret-like name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/cron/continuous/route.ts",
          "line": 11,
          "kind": "observed-code"
        },
        {
          "path": "web/src/app/api/cron/continuous/route.ts",
          "line": 12,
          "kind": "observed-code"
        },
        {
          "path": "web/src/app/api/cron/source-sync/route.ts",
          "line": 5,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "992ea8a1a8b9e0b9",
      "category": "configuration",
      "label": "LANDER_ARCHIVE_ARTIFACT_ROOT",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/archive/artifacts/[job]/[name]/route.ts",
          "line": 17,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "e11c497eec48527d",
      "category": "configuration",
      "label": "LANDER_ARCHIVE_SIGNING_KEY",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/lib/archive-source.ts",
          "line": 6,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/archive-source.ts",
          "line": 8,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "e5f9907a6590d9d5",
      "category": "configuration",
      "label": "LANDER_ARTIFACT_ROOT",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/artifacts/[job]/[name]/route.ts",
          "line": 22,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/capture-artifacts.ts",
          "line": 21,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "b4950b80318cb8f2",
      "category": "configuration",
      "label": "LANDER_BROWSER_TESTS",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "tests/test_browser.py",
          "line": 14,
          "kind": "observed-code"
        },
        {
          "path": "tests/test_capture_app.py",
          "line": 100,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "24cc0a7bc6a69ae1",
      "category": "configuration",
      "label": "LANDER_BUILD_DIR",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/next.config.ts",
          "line": 4,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "661dab6a2fa4651a",
      "category": "configuration",
      "label": "LANDER_CAPTURE_ENABLED",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "lander_app/capture.py",
          "line": 327,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/qualify-archive.ts",
          "line": 22,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/archive.ts",
          "line": 64,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/archive.ts",
          "line": 71,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/cloud-archive.ts",
          "line": 29,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/cloud-capture.ts",
          "line": 30,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/gallery-batches.ts",
          "line": 164,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/jobs.ts",
          "line": 52,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "2dea7b5add4fb156",
      "category": "configuration",
      "label": "LANDER_CLOUD_CAPTURE",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/control-gallery-batch.ts",
          "line": 5,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/preview-starters.ts",
          "line": 4,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/verify-archive.ts",
          "line": 5,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/verify-urlbox-sql.ts",
          "line": 37,
          "kind": "observed-code"
        },
        {
          "path": "web/src/app/api/queues/archive/route.ts",
          "line": 9,
          "kind": "observed-code"
        },
        {
          "path": "web/src/app/api/queues/batches/route.ts",
          "line": 7,
          "kind": "observed-code"
        },
        {
          "path": "web/src/app/api/queues/capture/route.ts",
          "line": 11,
          "kind": "observed-code"
        },
        {
          "path": "web/src/app/api/queues/urlbox-refresh/route.ts",
          "line": 8,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "140dbce048653799",
      "category": "configuration",
      "label": "LANDER_CODEX_PATH",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/codex-runtime.ts",
          "line": 4,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "305680cbaec2ee8c",
      "category": "configuration",
      "label": "LANDER_CONTINUOUS_ENABLED",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/qualify-continuous-planning.ts",
          "line": 11,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/reconcile-prepaid-allowances.ts",
          "line": 13,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/resume-repaired-pipeline.ts",
          "line": 74,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/verify-research-sql.ts",
          "line": 52,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/verify-research-sql.ts",
          "line": 86,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/verify-urlbox-sql.ts",
          "line": 38,
          "kind": "observed-code"
        },
        {
          "path": "web/src/app/api/cron/continuous/route.ts",
          "line": 13,
          "kind": "observed-code"
        },
        {
          "path": "web/src/app/api/queues/continuous/route.ts",
          "line": 7,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "0a6de76d65d3d5ea",
      "category": "configuration",
      "label": "LANDER_DATA_PATH",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/lib/db.ts",
          "line": 15,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "f002aa5c53ff4b17",
      "category": "configuration",
      "label": "LANDER_DATABASE_URL",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/import-resolver-history.mjs",
          "line": 199,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/protect-client-ads.ts",
          "line": 14,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/qualify-resolver-callback.mjs",
          "line": 20,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/reconcile-capture-paths.ts",
          "line": 11,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/reconcile-prepaid-allowances.ts",
          "line": 12,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/resume-repaired-pipeline.ts",
          "line": 74,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/verify-bulk-gallery.mjs",
          "line": 7,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/verify-private-artifacts.mjs",
          "line": 7,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "2c215667246992e0",
      "category": "configuration",
      "label": "LANDER_IMPORT_DATABASE_URL",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/import-cloud-artifacts.mjs",
          "line": 8,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/import-cloud-data.mjs",
          "line": 8,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "199081b44bbc0c18",
      "category": "configuration",
      "label": "LANDER_JOBS_PATH",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/lib/jobs.ts",
          "line": 22,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "1e9675f0dc46c79f",
      "category": "configuration",
      "label": "LANDER_LOCAL_REVIEW",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/layout.tsx",
          "line": 6,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "4c01b8d8b8a2b29a",
      "category": "configuration",
      "label": "LANDER_NODE",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "scripts/verify_app_capture.py",
          "line": 49,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "34631296a77054e5",
      "category": "configuration",
      "label": "LANDER_OWNER_EMAILS",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/lib/auth.ts",
          "line": 17,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/auth.ts",
          "line": 19,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "52eafe5ecbdac82c",
      "category": "configuration",
      "label": "LANDER_OWNER_IDS",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/lib/auth.ts",
          "line": 16,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "7c86f41fccd63887",
      "category": "configuration",
      "label": "LANDER_PROXY_NETWORK_TESTS",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "tests/test_proxy_network.py",
          "line": 24,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "7aae2c8956ee22f9",
      "category": "configuration",
      "label": "LANDER_PROXY_PASSWORD",
      "detail": "Secret-like name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "lander_trial/proxy.py",
          "line": 70,
          "kind": "observed-code"
        },
        {
          "path": "web/resolver-runtime/cloud_resolver.py",
          "line": 303,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/cloud-capture.ts",
          "line": 50,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/cloud-resolver.ts",
          "line": 77,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/urlbox-capture.ts",
          "line": 148,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "b2ac97bf61df325b",
      "category": "configuration",
      "label": "LANDER_PROXY_USERNAME",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "lander_trial/proxy.py",
          "line": 70,
          "kind": "observed-code"
        },
        {
          "path": "web/resolver-runtime/cloud_resolver.py",
          "line": 303,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/cloud-capture.ts",
          "line": 50,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/cloud-resolver.ts",
          "line": 77,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "2502e1ce2b09397a",
      "category": "configuration",
      "label": "LANDER_QUEUE_SIGNING_KEY",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/probe-cloud-queue.mjs",
          "line": 10,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/verify-urlbox-sql.ts",
          "line": 37,
          "kind": "observed-code"
        },
        {
          "path": "web/src/app/api/queues/archive/route.ts",
          "line": 9,
          "kind": "observed-code"
        },
        {
          "path": "web/src/app/api/queues/batches/route.ts",
          "line": 7,
          "kind": "observed-code"
        },
        {
          "path": "web/src/app/api/queues/capture/route.ts",
          "line": 10,
          "kind": "observed-code"
        },
        {
          "path": "web/src/app/api/queues/continuous/route.ts",
          "line": 7,
          "kind": "observed-code"
        },
        {
          "path": "web/src/app/api/queues/market-maintenance/route.ts",
          "line": 6,
          "kind": "observed-code"
        },
        {
          "path": "web/src/app/api/queues/resolver/route.ts",
          "line": 7,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "f2c12acec8087314",
      "category": "configuration",
      "label": "LANDER_RESOLVER_BYPASS_TOKEN",
      "detail": "Secret-like name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/lib/cloud-resolver.ts",
          "line": 77,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "cac0091468716b8e",
      "category": "configuration",
      "label": "LANDER_RESOLVER_CLAIM_URL",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/resolver-runtime/cloud_resolver.py",
          "line": 299,
          "kind": "observed-code"
        },
        {
          "path": "web/resolver-runtime/qualify_callback.py",
          "line": 46,
          "kind": "observed-code"
        },
        {
          "path": "web/resolver-runtime/qualify_callback.py",
          "line": 48,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "2159cf15f0683faf",
      "category": "configuration",
      "label": "LANDER_RESOLVER_SANDBOX_SNAPSHOT_ID",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/qualify-resolver-callback.mjs",
          "line": 18,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/cloud-resolver.ts",
          "line": 77,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "ad54cc2c96909feb",
      "category": "configuration",
      "label": "LANDER_SANDBOX_SNAPSHOT_ID",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/qualify-cloud-capture.mjs",
          "line": 13,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/cloud-archive.ts",
          "line": 48,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/cloud-capture.ts",
          "line": 49,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "f0363174cecc2f52",
      "category": "configuration",
      "label": "LANDER_SOURCE_SYNC_ENABLED",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/cron/continuous/route.ts",
          "line": 16,
          "kind": "observed-code"
        },
        {
          "path": "web/src/app/api/queues/source-sync/route.ts",
          "line": 6,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/source-sync.ts",
          "line": 25,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/source-sync.ts",
          "line": 29,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "98e0b9c18ffac6a4",
      "category": "configuration",
      "label": "LANDER_TEST_BUILD_DIR",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "scripts/verify_app_capture.py",
          "line": 52,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "502f66c4da9f58b2",
      "category": "configuration",
      "label": "LOCALAPPDATA",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/codex-runtime.ts",
          "line": 4,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "13c2b00a4e601e58",
      "category": "configuration",
      "label": "NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified. Client-visible prefix: review what may be exposed.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/layout.tsx",
          "line": 6,
          "kind": "observed-code"
        },
        {
          "path": "web/src/app/page.tsx",
          "line": 7,
          "kind": "observed-code"
        },
        {
          "path": "web/src/app/sign-in/[[...sign-in]]/page.tsx",
          "line": 2,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/auth.ts",
          "line": 13,
          "kind": "observed-code"
        },
        {
          "path": "web/src/proxy.ts",
          "line": 10,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "c55de7372d3d8ad3",
      "category": "configuration",
      "label": "SUPABASE_SERVICE_ROLE_KEY",
      "detail": "Secret-like name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "supabase/functions/lander-archive/index.ts",
          "line": 21,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "f13a430a563630a4",
      "category": "configuration",
      "label": "SUPABASE_URL",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "supabase/functions/lander-archive/index.ts",
          "line": 21,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "cdee681f89ca63b4",
      "category": "configuration",
      "label": "URLBOX_ALLOWANCE_UNTIL",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/verify-urlbox-sql.ts",
          "line": 36,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/urlbox-capture.ts",
          "line": 46,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "2c108d717c417464",
      "category": "configuration",
      "label": "URLBOX_CAPTURE_ENABLED",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/verify-urlbox-sql.ts",
          "line": 35,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/urlbox-capture.ts",
          "line": 47,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "7ba08211108637c4",
      "category": "configuration",
      "label": "URLBOX_CREDIT_BUDGET",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/verify-urlbox-sql.ts",
          "line": 36,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/urlbox-capture.ts",
          "line": 46,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "2561bc0cd090d597",
      "category": "configuration",
      "label": "URLBOX_SECRET",
      "detail": "Secret-like name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/verify-urlbox-sql.ts",
          "line": 35,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/urlbox-api.ts",
          "line": 13,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/urlbox-capture.ts",
          "line": 47,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/urlbox-capture.ts",
          "line": 148,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "b886de15cb45db05",
      "category": "configuration",
      "label": "URLBOX_SPEND_VERIFIED",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/verify-urlbox-sql.ts",
          "line": 35,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/urlbox-capture.ts",
          "line": 48,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "5d94b49f34615487",
      "category": "configuration",
      "label": "URLBOX_VERIFIED_USAGE",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/verify-urlbox-sql.ts",
          "line": 109,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/verify-urlbox-sql.ts",
          "line": 112,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/urlbox-capture.ts",
          "line": 25,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "6bf556f9ab03c2dd",
      "category": "configuration",
      "label": "VERCEL",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/archive/artifacts/[job]/[name]/route.ts",
          "line": 16,
          "kind": "observed-code"
        },
        {
          "path": "web/src/app/api/artifacts/[job]/[name]/route.ts",
          "line": 14,
          "kind": "observed-code"
        },
        {
          "path": "web/src/app/layout.tsx",
          "line": 6,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/capture-artifacts.ts",
          "line": 14,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/capture-runner.ts",
          "line": 10,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/db.ts",
          "line": 14,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/db.ts",
          "line": 26,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/jobs.ts",
          "line": 29,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "9e7ed62ac6fb94fc",
      "category": "configuration",
      "label": "VERCEL_AUTOMATION_BYPASS_SECRET",
      "detail": "Secret-like name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/lib/cloud-resolver.ts",
          "line": 77,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "7821d701385bd4d1",
      "category": "configuration",
      "label": "VERCEL_DEPLOYMENT_ID",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/lib/report-scheduler.ts",
          "line": 11,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "1ee22e0dcc4282c8",
      "category": "configuration",
      "label": "VERCEL_ENV",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/api/research/route.ts",
          "line": 27,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/research-metrics.ts",
          "line": 34,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "d6956499ba1e3f86",
      "category": "configuration",
      "label": "VERCEL_URL",
      "detail": "Configuration name referenced; actual value, required/optional status and provisioning are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/lib/report-scheduler.ts",
          "line": 11,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "da4676811e361d2c",
      "category": "data",
      "label": "PostgreSQL",
      "detail": "Integration signal in source. Account ownership, provisioning and live connectivity are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 25,
          "kind": "declared-config"
        },
        {
          "path": "web/scripts/backup-consumer.ts",
          "line": 8,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/check-cloud-db.mjs",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/check-pipeline-incidents.ts",
          "line": 5,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/control-gallery-batch.ts",
          "line": 7,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/import-cloud-artifacts.mjs",
          "line": 2,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/import-cloud-data.mjs",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/import-resolver-history.mjs",
          "line": 197,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "3dfca7964a7c8dd4",
      "category": "data",
      "label": "SQLite",
      "detail": "Mentioned in source documentation; implementation and account access need confirmation.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "docs/OPERATIONS.md",
          "line": 79,
          "kind": "source-reported"
        },
        {
          "path": "lander_app/capture.py",
          "line": 16,
          "kind": "observed-code"
        },
        {
          "path": "lander_app/import_dataset.py",
          "line": 17,
          "kind": "observed-code"
        },
        {
          "path": "lander_trial/__main__.py",
          "line": 11,
          "kind": "observed-code"
        },
        {
          "path": "lander_trial/backfill.py",
          "line": 14,
          "kind": "observed-code"
        },
        {
          "path": "lander_trial/fast_backfill.py",
          "line": 6,
          "kind": "observed-code"
        },
        {
          "path": "lander_trial/fast_store.py",
          "line": 7,
          "kind": "observed-code"
        },
        {
          "path": "lander_trial/history.py",
          "line": 5,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "b24f7e9b61caaec6",
      "category": "data",
      "label": "Supabase",
      "detail": "Mentioned in source documentation; implementation and account access need confirmation.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "docs/DECISIONS.md",
          "line": 40,
          "kind": "source-reported"
        },
        {
          "path": "docs/OPERATIONS.md",
          "line": 19,
          "kind": "source-reported"
        },
        {
          "path": "web/scripts/check-cloud-db.mjs",
          "line": 9,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/refresh-billing.ts",
          "line": 11,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/verify-archive.ts",
          "line": 24,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/verify-bulk-gallery.mjs",
          "line": 7,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/verify-private-artifacts.mjs",
          "line": 7,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "b173cf342c21c119",
      "category": "devices",
      "label": "Browser automation",
      "detail": "Browser automation signal; browser binaries, host and permissions may be required.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "docs/DECISIONS.md",
          "line": 40,
          "kind": "source-reported"
        },
        {
          "path": "docs/OPERATIONS.md",
          "line": 93,
          "kind": "source-reported"
        },
        {
          "path": "web/.vercelignore",
          "line": 13,
          "kind": "observed-code"
        },
        {
          "path": "lander_app/capture.py",
          "line": 87,
          "kind": "observed-code"
        },
        {
          "path": "lander_trial/browser.py",
          "line": 11,
          "kind": "observed-code"
        },
        {
          "path": "requirements.txt",
          "line": 3,
          "kind": "declared-config"
        },
        {
          "path": "scripts/verify_app_capture.py",
          "line": 22,
          "kind": "observed-code"
        },
        {
          "path": "scripts/verify_research_app.py",
          "line": 12,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "f25a1bf3e729569f",
      "category": "devices",
      "label": "Clipboard",
      "detail": "Clipboard access is referenced; permission and user gesture requirements need review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/components/incident-panel.tsx",
          "line": 53,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "1e0a3ffe38003b16",
      "category": "devices",
      "label": "Local filesystem access",
      "detail": "Filesystem reference; approved paths, read/write scope and operating identity need confirmation.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_app/capture.py",
          "line": 13,
          "kind": "observed-code"
        },
        {
          "path": "lander_app/import_dataset.py",
          "line": 16,
          "kind": "observed-code"
        },
        {
          "path": "lander_trial/__main__.py",
          "line": 9,
          "kind": "observed-code"
        },
        {
          "path": "lander_trial/backfill.py",
          "line": 12,
          "kind": "observed-code"
        },
        {
          "path": "lander_trial/client_ads.py",
          "line": 3,
          "kind": "observed-code"
        },
        {
          "path": "lander_trial/fast_backfill.py",
          "line": 5,
          "kind": "observed-code"
        },
        {
          "path": "lander_trial/history.py",
          "line": 4,
          "kind": "observed-code"
        },
        {
          "path": "lander_trial/proxy.py",
          "line": 12,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "57e8060de5ad3e87",
      "category": "devices",
      "label": "Local process access",
      "detail": "Source starts or inspects local processes. Commands, execution owner and machine access need review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "scripts/prepare_consumer_release.py",
          "line": 36,
          "kind": "observed-code"
        },
        {
          "path": "scripts/publish_hosted_config.py",
          "line": 39,
          "kind": "observed-code"
        },
        {
          "path": "scripts/publish_sync_config.py",
          "line": 14,
          "kind": "observed-code"
        },
        {
          "path": "scripts/verify_app_capture.py",
          "line": 57,
          "kind": "observed-code"
        },
        {
          "path": "tests/test_proxy_network.py",
          "line": 35,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/interpretation-worker.ts",
          "line": 5,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/qualify-cloud-capture.mjs",
          "line": 3,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/refresh-billing.ts",
          "line": 3,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "dcf7e759e8e5f4c6",
      "category": "hosting",
      "label": "Vercel configuration",
      "detail": "Deployment configuration is present. The live project, environment and deployed revision are not queried.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/vercel.json",
          "line": 1,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "5cf92b354d05cb63",
      "category": "observability",
      "label": "Application error logging",
      "detail": "Error logging call exists; destination, alerting, retention and redaction are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/backup-consumer.ts",
          "line": 31,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/check-owner-login.mjs",
          "line": 9,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/check-pipeline-incidents.ts",
          "line": 37,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/control-gallery-batch.ts",
          "line": 13,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/import-cloud-artifacts.mjs",
          "line": 36,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/import-cloud-data.mjs",
          "line": 52,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/import-resolver-history.mjs",
          "line": 215,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/interpretation-worker.ts",
          "line": 56,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "866dbe9ec380cc41",
      "category": "operations",
      "label": "deployment guidance",
      "detail": "Documentation section present. Instructions were not executed; inspect the linked section for context.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "docs/OPERATIONS.md",
          "line": 151,
          "kind": "source-reported"
        }
      ]
    },
    {
      "id": "35d7b8646248b527",
      "category": "operations",
      "label": "Package script: build",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 11,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "34c0c02e97bf67ef",
      "category": "operations",
      "label": "Package script: dev",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 10,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "ec91371918b54eba",
      "category": "operations",
      "label": "Package script: start",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 12,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "23939afe1f4f14e3",
      "category": "operations",
      "label": "Package script: test",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 14,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "f39e26601b635557",
      "category": "operations",
      "label": "Package script: test:sql",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 15,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "d445dc72d07376b9",
      "category": "operations",
      "label": "Package script: typecheck",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 13,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "15b1b8f3234d939e",
      "category": "operations",
      "label": "recovery guidance",
      "detail": "Documentation section present. Instructions were not executed; inspect the linked section for context.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "docs/OPERATIONS.md",
          "line": 216,
          "kind": "source-reported"
        },
        {
          "path": "docs/OPERATIONS.md",
          "line": 495,
          "kind": "source-reported"
        }
      ]
    },
    {
      "id": "22d8b930e796382d",
      "category": "operations",
      "label": "setup guidance",
      "detail": "Documentation section present. Instructions were not executed; inspect the linked section for context.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "docs/OPERATIONS.md",
          "line": 258,
          "kind": "source-reported"
        },
        {
          "path": "docs/OPERATIONS.md",
          "line": 329,
          "kind": "source-reported"
        }
      ]
    },
    {
      "id": "c541ae484fc5cd47",
      "category": "providers",
      "label": "Clerk",
      "detail": "Integration signal in source. Account ownership, provisioning and live connectivity are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 18,
          "kind": "declared-config"
        },
        {
          "path": "web/scripts/check-owner-login.mjs",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "web/src/app/layout.tsx",
          "line": 2,
          "kind": "observed-code"
        },
        {
          "path": "web/src/app/sign-in/[[...sign-in]]/page.tsx",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "web/src/lib/auth.ts",
          "line": 3,
          "kind": "observed-code"
        },
        {
          "path": "web/src/proxy.ts",
          "line": 1,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "6a99cc786a31b840",
      "category": "providers",
      "label": "Inngest",
      "detail": "Mentioned in source documentation; implementation and account access need confirmation.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "docs/DECISIONS.md",
          "line": 40,
          "kind": "source-reported"
        }
      ]
    },
    {
      "id": "fe8232ecc99de85e",
      "category": "providers",
      "label": "Supabase",
      "detail": "Mentioned in source documentation; implementation and account access need confirmation.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "docs/DECISIONS.md",
          "line": 40,
          "kind": "source-reported"
        },
        {
          "path": "docs/OPERATIONS.md",
          "line": 19,
          "kind": "source-reported"
        },
        {
          "path": "web/scripts/check-cloud-db.mjs",
          "line": 9,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/refresh-billing.ts",
          "line": 11,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/verify-archive.ts",
          "line": 24,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/verify-bulk-gallery.mjs",
          "line": 7,
          "kind": "observed-code"
        },
        {
          "path": "web/scripts/verify-private-artifacts.mjs",
          "line": 7,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "cd6ef0a660b98ba2",
      "category": "quality",
      "label": "GitHub workflow: checks.yml",
      "detail": "Workflow file exists; required checks, credentials and run outcomes are not queried.",
      "confidence": "direct",
      "evidence": [
        {
          "path": ".github/workflows/checks.yml",
          "line": 1,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "f6894bcdcb6e86c5",
      "category": "quality",
      "label": "Test sources present",
      "detail": "Test paths found in the tree; their contents and outcomes are not inferred from existence.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "tests/source_fixture.py",
          "line": 1,
          "kind": "declared-config"
        },
        {
          "path": "tests/test_accounting.py",
          "line": 1,
          "kind": "declared-config"
        },
        {
          "path": "tests/test_archive_render.py",
          "line": 1,
          "kind": "declared-config"
        },
        {
          "path": "tests/test_backfill.py",
          "line": 1,
          "kind": "declared-config"
        },
        {
          "path": "tests/test_browser.py",
          "line": 1,
          "kind": "declared-config"
        },
        {
          "path": "tests/test_campaign_evidence.py",
          "line": 1,
          "kind": "declared-config"
        },
        {
          "path": "tests/test_capture_app.py",
          "line": 1,
          "kind": "declared-config"
        },
        {
          "path": "tests/test_client_ads.py",
          "line": 1,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "a60b7da16b5250e2",
      "category": "runtime",
      "label": "@clerk/nextjs",
      "detail": "dependencies: 7.9.15. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 18,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "e965826e9103bcff",
      "category": "runtime",
      "label": "@electric-sql/pglite",
      "detail": "devDependencies: 0.5.10. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 31,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "e3736004beb422c2",
      "category": "runtime",
      "label": "@types/node",
      "detail": "devDependencies: 24.10.1. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 32,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "3db6922f56d53690",
      "category": "runtime",
      "label": "@types/pg",
      "detail": "devDependencies: 8.15.6. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 33,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "cfe014054231b8d0",
      "category": "runtime",
      "label": "@types/react",
      "detail": "devDependencies: 19.2.2. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 34,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "f651d87067f47deb",
      "category": "runtime",
      "label": "@types/react-dom",
      "detail": "devDependencies: 19.2.2. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 35,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "9f863b79a74f7b78",
      "category": "runtime",
      "label": "@vercel/blob",
      "detail": "dependencies: 2.8.2. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 19,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "df6ac205a404c897",
      "category": "runtime",
      "label": "@vercel/queue",
      "detail": "dependencies: 0.8.0. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 20,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "1f18516b945ed727",
      "category": "runtime",
      "label": "@vercel/sandbox",
      "detail": "dependencies: 3.8.0. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 21,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "d620392fd3c4970a",
      "category": "runtime",
      "label": "cheerio",
      "detail": "dependencies: 1.2.0. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 22,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "95e258804e483139",
      "category": "runtime",
      "label": "greenlet",
      "detail": "Python dependency declaration. Installed version and runtime availability are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "requirements.txt",
          "line": 1,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "b05715c7455a2570",
      "category": "runtime",
      "label": "lucide-react",
      "detail": "dependencies: 0.468.0. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 23,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "10cfc88faa81e42e",
      "category": "runtime",
      "label": "next",
      "detail": "dependencies: 16.4.2. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 24,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "aedbdfba62ede6d3",
      "category": "runtime",
      "label": "node engine",
      "detail": "Declared compatibility: 24.x.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 6,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "9528281b95b9c8a3",
      "category": "runtime",
      "label": "pg",
      "detail": "dependencies: 8.16.3. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 25,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "5cc119b24ca15681",
      "category": "runtime",
      "label": "playwright",
      "detail": "Python dependency declaration. Installed version and runtime availability are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "requirements.txt",
          "line": 3,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "e62bd893081bf413",
      "category": "runtime",
      "label": "pyee",
      "detail": "Python dependency declaration. Installed version and runtime availability are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "requirements.txt",
          "line": 4,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "70505e863517d4f4",
      "category": "runtime",
      "label": "Python source",
      "detail": "Python source is present. The required interpreter, installed packages and launch environment need confirmation.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "lander_app/__init__.py",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "lander_app/capture.py",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "lander_app/import_dataset.py",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "lander_trial/__init__.py",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "lander_trial/__main__.py",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "lander_trial/backfill.py",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "lander_trial/browser.py",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "lander_trial/campaign_evidence.py",
          "line": 1,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "cdfa6dc8881cafbe",
      "category": "runtime",
      "label": "react",
      "detail": "dependencies: 19.3.0. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 26,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "09524994bc77a1ad",
      "category": "runtime",
      "label": "react-dom",
      "detail": "dependencies: 19.3.0. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 27,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "2daa6e9d6359c022",
      "category": "runtime",
      "label": "server-only",
      "detail": "dependencies: 0.0.1. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 28,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "becf8b88e6b2ca8d",
      "category": "runtime",
      "label": "tsx",
      "detail": "devDependencies: 4.20.6. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 36,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "6f6c9bb48511313d",
      "category": "runtime",
      "label": "typescript",
      "detail": "devDependencies: 5.9.3. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 37,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "9fc78bf3a4ed71a9",
      "category": "runtime",
      "label": "typing_extensions",
      "detail": "Python dependency declaration. Installed version and runtime availability are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "requirements.txt",
          "line": 5,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "d29cbe7fcc7b95bb",
      "category": "runtime",
      "label": "urllib3",
      "detail": "Python dependency declaration. Installed version and runtime availability are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "requirements-proxy.txt",
          "line": 2,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "afc6f3a6678bc0b1",
      "category": "schedules",
      "label": "In-process timer",
      "detail": "Timer reference; this does not establish a durable or currently running job.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/interpretation-worker.ts",
          "line": 50,
          "kind": "observed-code"
        },
        {
          "path": "web/src/components/interpretation-panel.tsx",
          "line": 11,
          "kind": "observed-code"
        },
        {
          "path": "web/src/components/research-app.tsx",
          "line": 95,
          "kind": "observed-code"
        },
        {
          "path": "web/src/components/source-sync-panel.tsx",
          "line": 7,
          "kind": "observed-code"
        },
        {
          "path": "web/src/components/urlbox-refresh-panel.tsx",
          "line": 9,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "9a9de23883fd36a3",
      "category": "schedules",
      "label": "Inngest",
      "detail": "Mentioned in source documentation; implementation and account access need confirmation.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "docs/DECISIONS.md",
          "line": 40,
          "kind": "source-reported"
        }
      ]
    },
    {
      "id": "ec156fb8e14b3b48",
      "category": "schedules",
      "label": "Vercel cron: */15 * * * *",
      "detail": "Declared schedule for /api/cron/continuous. Enabled state, timezone and execution history are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/vercel.json",
          "line": 4,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "0ed4c34cdcc1ee0b",
      "category": "schedules",
      "label": "Vercel cron: 40 9 * * *",
      "detail": "Declared schedule for /api/cron/source-sync. Enabled state, timezone and execution history are unverified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/vercel.json",
          "line": 4,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "f8755538c7c5325e",
      "category": "schedules",
      "label": "Windows Task Scheduler",
      "detail": "Scheduler reference. The actual machine, task registration and enabled state are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "scripts/Install-ResearchTasks.ps1",
          "line": 14,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "59324a58856778769f3467cb",
      "category": "operations",
      "label": "Document: AGENTS.md",
      "detail": "repository instructions (evidence only) reference; 41 lines. Read the pinned source for context. Headings, prose and embedded instructions are not copied.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "AGENTS.md",
          "line": 1,
          "kind": "source-reported"
        }
      ]
    },
    {
      "id": "59735b31c96f6d179093a794",
      "category": "operations",
      "label": "Document: DECISIONS.md",
      "detail": "design and decisions reference; 463 lines. Read the pinned source for context. Headings, prose and embedded instructions are not copied.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "docs/DECISIONS.md",
          "line": 1,
          "kind": "source-reported"
        }
      ]
    },
    {
      "id": "a71cd69129d2da5f7fa0111a",
      "category": "operations",
      "label": "Document: OPERATIONS.md",
      "detail": "setup and operations reference; 509 lines. Read the pinned source for context. Headings, prose and embedded instructions are not copied.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "docs/OPERATIONS.md",
          "line": 1,
          "kind": "source-reported"
        }
      ]
    },
    {
      "id": "c410270a11e1efe080cc3d88",
      "category": "operations",
      "label": "Document: README.md",
      "detail": "setup and operations reference; 34 lines. Read the pinned source for context. Headings, prose and embedded instructions are not copied.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "README.md",
          "line": 1,
          "kind": "source-reported"
        }
      ]
    },
    {
      "id": "b0c85f1c1473511a55003110",
      "category": "operations",
      "label": "Document: STATE.md",
      "detail": "state or handoff reference; 24 lines. Read the pinned source for context. Headings, prose and embedded instructions are not copied.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "STATE.md",
          "line": 1,
          "kind": "source-reported"
        }
      ]
    },
    {
      "id": "b76e3924a38120a297acfa86",
      "category": "data",
      "label": "Table reference: meta",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "lander_app/schema.sql",
          "line": 1,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "ca5437db97c7baf0b3410d93",
      "category": "data",
      "label": "Table reference: records",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "lander_app/schema.sql",
          "line": 2,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "0ef3d9048f8796e87f4b6901",
      "category": "data",
      "label": "Table reference: campaigns",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "lander_app/schema.sql",
          "line": 13,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "85f020a5b37d63e5fce3735d",
      "category": "data",
      "label": "Table reference: landers",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "lander_app/schema.sql",
          "line": 18,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "a826a9ace346779da647fbfb",
      "category": "data",
      "label": "Table reference: evidence",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "lander_app/schema.sql",
          "line": 19,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "790eb491297cff8870bafee6",
      "category": "data",
      "label": "Table reference: coverage",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "lander_app/schema.sql",
          "line": 20,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "cdf95f093d7d1f45d21d1697",
      "category": "operations",
      "label": "Run route: dev",
      "detail": "Declared package-script name: dev. Confirm the package manager before running; command body omitted.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 10,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "cc006afa19d185607c082a96",
      "category": "operations",
      "label": "Run route: build",
      "detail": "Declared package-script name: build. Confirm the package manager before running; command body omitted.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 11,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "54feade7ccb74f8f76928343",
      "category": "operations",
      "label": "Run route: start",
      "detail": "Declared package-script name: start. Confirm the package manager before running; command body omitted.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 12,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "df7e05abd2ebf858f8570cff",
      "category": "operations",
      "label": "Run route: typecheck",
      "detail": "Declared package-script name: typecheck. Confirm the package manager before running; command body omitted.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 13,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "f74554a074e4c9805db07e39",
      "category": "operations",
      "label": "Run route: test",
      "detail": "Declared package-script name: test. Confirm the package manager before running; command body omitted.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 14,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "b8b668b0a355fac16ec807de",
      "category": "operations",
      "label": "Run route: test:sql",
      "detail": "Declared package-script name: test:sql. Confirm the package manager before running; command body omitted.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/package.json",
          "line": 15,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "f39b375840a2290aab2f5caa",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CAPTURE_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_app/capture.py",
          "line": 327,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "419d1036a0a118d91d79ab44",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CAPTURE_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_app/capture.py",
          "line": 328,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "928a9d896ef1df305973474a",
      "category": "access",
      "label": "API-key or authorization header",
      "detail": "Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_app/capture.py",
          "line": 66,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "ea6ec4113665f62b4fa57c33",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_app/import_dataset.py",
          "line": 55,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "49b20b00f5fe48970345eca3",
      "category": "operations",
      "label": "Logic pointer: cohort",
      "detail": "Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_app/import_dataset.py",
          "line": 31,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "e6a51dfdfc793841569e5624",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/__main__.py",
          "line": 73,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "75913050e6fe0a6c85badad7",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/__main__.py",
          "line": 79,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "22bd094387e2d48dac644a19",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/__main__.py",
          "line": 86,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "5aff050851e3c0fee5f142cd",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/__main__.py",
          "line": 99,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "74bf8e52923a29b363e36d30",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/__main__.py",
          "line": 206,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "848bcfa5843e09b580da906c",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/__main__.py",
          "line": 208,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "57ca8798dcbd35b4b7f120c5",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/__main__.py",
          "line": 209,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "e752df01d7ac4b08e3c003fa",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/__main__.py",
          "line": 213,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "972dc9f21545de3b7cd825d5",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/__main__.py",
          "line": 237,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "92dda08597f5466db758b626",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/backfill.py",
          "line": 36,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "37eccddacd7d1f40feaab673",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/backfill.py",
          "line": 117,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "1ce0ec9c12c37457f05d751d",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/backfill.py",
          "line": 196,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "b8f3534f12d377f3a7b6e97d",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/backfill.py",
          "line": 267,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "4ea5690b4481694cc36b25ca",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/backfill.py",
          "line": 271,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "d9ff0b989a81548c5da6fe83",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/backfill.py",
          "line": 567,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "eab2e1cc62b2c8b7a52ff7b2",
      "category": "data",
      "label": "Table reference: source_queue",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "lander_trial/backfill.py",
          "line": 132,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "b576784f56502fe7e7579962",
      "category": "data",
      "label": "Table reference: source_job",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "lander_trial/backfill.py",
          "line": 136,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "b8b1f018b7b11ce1f45035ec",
      "category": "data",
      "label": "Table reference: source_page",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "lander_trial/backfill.py",
          "line": 143,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "8bf9334f93bab997eedaa4d0",
      "category": "data",
      "label": "Table reference: excluded_source",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "lander_trial/backfill.py",
          "line": 146,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "6cff1844c635c1a74fd03b69",
      "category": "data",
      "label": "Table reference: excluded_url",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "lander_trial/backfill.py",
          "line": 147,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "ba87ad324f1be326c9e7a68d",
      "category": "data",
      "label": "Table reference: backfill_meta",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "lander_trial/backfill.py",
          "line": 148,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "bab9e5fd6cf06cc8695dd817",
      "category": "data",
      "label": "Table reference: source_job",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "lander_trial/backfill.py",
          "line": 151,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "24b0fddf3fd5623d46de2e47",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/browser.py",
          "line": 90,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "4c7527ea5d831e4338c138a1",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/campaign_evidence.py",
          "line": 122,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "0b2e8783f88593318d390cf1",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/campaign_evidence.py",
          "line": 143,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "dd7e4cd8561a89a04435937a",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/campaign_evidence.py",
          "line": 216,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "566b11dbf3b0358cedd80373",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/campaign_evidence.py",
          "line": 219,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "6c6a2602b8424717d44f4f6a",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/campaign_evidence.py",
          "line": 220,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "6c3d4fba742b662220f8e968",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/fast_backfill.py",
          "line": 137,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "27b5d4e44f9e9e505a1b7ef5",
      "category": "data",
      "label": "Table reference: dispatch_state",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "lander_trial/fast_store.py",
          "line": 26,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "9a0f1ae8f3957711c357f1c4",
      "category": "data",
      "label": "Table reference: fast_totals",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "lander_trial/fast_store.py",
          "line": 42,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "f754435522e055353f548f14",
      "category": "data",
      "label": "Table reference: fast_counts",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "lander_trial/fast_store.py",
          "line": 43,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "cad2693264a01ccd91da1964",
      "category": "data",
      "label": "Table reference: click_attempt",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "lander_trial/history.py",
          "line": 36,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "b74ecbb927f351c52930e65b",
      "category": "apis",
      "label": "Write-call candidate: delete",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/proxy_setup.py",
          "line": 70,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "694e71f7c8cee87fa023fe01",
      "category": "apis",
      "label": "Write-call candidate: delete",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/proxy_setup.py",
          "line": 84,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "6ff8d051fb30483b2f56f0d2",
      "category": "access",
      "label": "API-key or authorization header",
      "detail": "Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/proxy.py",
          "line": 98,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "b2ed5150612db7cbde98dd53",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/resolver.py",
          "line": 463,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "f6f4ced07e05037499f9ff97",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/resolver.py",
          "line": 497,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "cbdeb74377b4fad56b99f231",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/resolver.py",
          "line": 498,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "bf0b4113cf7a4205af343554",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/resolver.py",
          "line": 522,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "24e1703787d82ca2f2344e11",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/resolver.py",
          "line": 546,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "c73837830a73e120a8142662",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/resolver.py",
          "line": 552,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "4861501cbb7e7dc3b0551ce6",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/resolver.py",
          "line": 555,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "fa11fc681b9551e86f7a3750",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/resolver.py",
          "line": 556,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "9269effc08f6e5179b63aee6",
      "category": "data",
      "label": "Table reference: work",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "lander_trial/resolver.py",
          "line": 165,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "2eceb0883ffa70e6eacc5589",
      "category": "data",
      "label": "Table reference: request",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "lander_trial/resolver.py",
          "line": 168,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "a5cdb213ed34315804e8dd81",
      "category": "data",
      "label": "Table reference: proxy_budget",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "lander_trial/resolver.py",
          "line": 173,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "91729b0801472a96c9040db3",
      "category": "data",
      "label": "Table reference: host_cooldown",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "lander_trial/resolver.py",
          "line": 175,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "72f1075b9a33e8ba50172f2d",
      "category": "data",
      "label": "Table reference: store_totals",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "lander_trial/resolver.py",
          "line": 195,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "b44bb5374a6860e8601b0232",
      "category": "operations",
      "label": "Logic pointer: classify",
      "detail": "Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "lander_trial/resolver.py",
          "line": 89,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "47a834e19768a12faca7ad83",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "scripts/analyze_campaign_evidence.py",
          "line": 38,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "a48f8e495d2dca89a771b4ef",
      "category": "apis",
      "label": "Write-call candidate: insert",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "scripts/benchmark_fast.py",
          "line": 17,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "b136176ccca6010ed1c516c1",
      "category": "apis",
      "label": "Write-call candidate: insert",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "scripts/configure_resolver_cloud.py",
          "line": 12,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "f12fa11c92ab3938507f4d13",
      "category": "access",
      "label": "API-key or authorization header",
      "detail": "Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "scripts/configure_resolver_cloud.py",
          "line": 62,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "cd5e019f34597155f5eed22b",
      "category": "apis",
      "label": "Write-call candidate: insert",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "scripts/deploy_client_ad_release.py",
          "line": 12,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "85690df435c956a86499802f",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "scripts/deploy_client_ad_release.py",
          "line": 85,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "0289fcd578bc22470833d737",
      "category": "access",
      "label": "API-key or authorization header",
      "detail": "Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "scripts/deploy_client_ad_release.py",
          "line": 50,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "30aaeae219a192173dc52da3",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "scripts/export_final_urls.py",
          "line": 112,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "a060d42b2030f19ab1c7e94b",
      "category": "apis",
      "label": "Attribution parameter: gclid",
      "detail": "Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "scripts/export_final_urls.py",
          "line": 12,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "e7a84832271e1128db7dfb95",
      "category": "apis",
      "label": "Attribution parameter: gbraid",
      "detail": "Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "scripts/export_final_urls.py",
          "line": 12,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "9f3db377e7b15bd70c18b14c",
      "category": "apis",
      "label": "Attribution parameter: wbraid",
      "detail": "Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "scripts/export_final_urls.py",
          "line": 12,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "449d80c0fb8cd9b7324e928b",
      "category": "apis",
      "label": "Write-call candidate: insert",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "scripts/prepare_client_ad_release.py",
          "line": 12,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "f1eff8c801f180a07786a29e",
      "category": "access",
      "label": "API-key or authorization header",
      "detail": "Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "scripts/prepare_client_ad_release.py",
          "line": 21,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "79ecbaec45ba7fde952297b0",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "scripts/prepare_proxy_pilot.py",
          "line": 43,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "fccdd909c6a3013d11835614",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "scripts/prepare_proxy_pilot.py",
          "line": 164,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "c8cee5d1deca5f66decbc612",
      "category": "apis",
      "label": "Write-call candidate: insert",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "scripts/publish_hosted_config.py",
          "line": 10,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "2def0605d553f14a3914c80a",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "scripts/publish_hosted_config.py",
          "line": 35,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "ff2f72dbb359afbfb82d3552",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CAPTURE_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "scripts/publish_hosted_config.py",
          "line": 29,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "669afe23df5f8d1217fddf00",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_SOURCE_SYNC_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "scripts/publish_sync_config.py",
          "line": 13,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "ffc42ab6e1b0288ddb69f107",
      "category": "configuration",
      "label": "LANDER_NODE_PATH",
      "detail": "PowerShell environment reference; no value collected. Required status and provisioning remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "scripts/Start-InterpretationWorker.ps1",
          "line": 4,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "cbaf552b41c877cc4acdf286",
      "category": "configuration",
      "label": "USERPROFILE",
      "detail": "PowerShell environment reference; no value collected. Required status and provisioning remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "scripts/Start-InterpretationWorker.ps1",
          "line": 5,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "c686823f032ec6ea72c973cf",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "scripts/verify_app_capture.py",
          "line": 52,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "0a38b53909fe47e74fa2e861",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CAPTURE_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "scripts/verify_app_capture.py",
          "line": 52,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "2424c7619d5ded7d36362864",
      "category": "access",
      "label": "API-key or authorization header",
      "detail": "Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "supabase/functions/lander-archive/index.ts",
          "line": 24,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "1849b9bed1dcca82ec093f81",
      "category": "data",
      "label": "Table reference: source_queue",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "tests/source_fixture.py",
          "line": 8,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "2872c629b3f8e23e6e9cb884",
      "category": "data",
      "label": "Table reference: request",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "tests/test_accounting.py",
          "line": 39,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "bfd015a57bcaa3992b17e97a",
      "category": "data",
      "label": "Table reference: proxy_budget",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "tests/test_accounting.py",
          "line": 42,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "397a98e8112a6adf92030c30",
      "category": "apis",
      "label": "Outbound candidate: unknown method example.com",
      "detail": "Literal destination in source; path, query and payload withheld. Reachability, authentication, side effects and active use require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "tests/test_browser.py",
          "line": 69,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "18a8c4dad699bd37eec9fbf6",
      "category": "apis",
      "label": "Form destination candidate: example.com",
      "detail": "External form-action host. Endpoint path, form values and identifiers withheld; ownership, delivery and write permissions require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "tests/test_browser.py",
          "line": 60,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "cb7af8ac0bbacb3e28f26897",
      "category": "data",
      "label": "Table reference: source_job",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "tests/test_campaign_evidence.py",
          "line": 120,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "3544a0eafcf63a21641d85eb",
      "category": "data",
      "label": "Table reference: source_queue",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "tests/test_campaign_evidence.py",
          "line": 120,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "f2a9c0be846578b892d09eb4",
      "category": "data",
      "label": "Table reference: work",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "tests/test_campaign_evidence.py",
          "line": 120,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "4c5ed5db60c041dcd68af5a9",
      "category": "apis",
      "label": "Attribution parameter: gclid",
      "detail": "Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "tests/test_campaign_evidence.py",
          "line": 14,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "c61f26fe2579d30aca0b6483",
      "category": "apis",
      "label": "Outbound candidate: unknown method 127.0.0.1",
      "detail": "Literal destination in source; path, query and payload withheld. Reachability, authentication, side effects and active use require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "tests/test_capture_app.py",
          "line": 108,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "04874efc56da95c2e4374a05",
      "category": "apis",
      "label": "Outbound candidate: unknown method www.google.com",
      "detail": "Literal destination in source; path, query and payload withheld. Reachability, authentication, side effects and active use require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "tests/test_capture_app.py",
          "line": 108,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "1f9abd78d4e51a5bd9c2530e",
      "category": "apis",
      "label": "Outbound candidate: POST fixture.example",
      "detail": "Literal destination in source; path, query and payload withheld. Possible external write; approval, dry-run and access guards require source review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "tests/test_capture_app.py",
          "line": 108,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "346fac2203ecc3cea5193d83",
      "category": "data",
      "label": "Table reference: capture_jobs",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "tests/test_capture_app.py",
          "line": 16,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "0b834f9d7c0a70c24007b081",
      "category": "data",
      "label": "Table reference: worker_state",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "tests/test_capture_app.py",
          "line": 16,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "efd4a81efa5c170488d08df7",
      "category": "data",
      "label": "Table reference: records",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "tests/test_capture_app.py",
          "line": 23,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "9f195078982b293cf8b2f18c",
      "category": "data",
      "label": "Table reference: source_queue",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "tests/test_client_ads.py",
          "line": 24,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "3191282e8df3cc8dd6447e2e",
      "category": "data",
      "label": "Table reference: source_queue",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "tests/test_client_ads.py",
          "line": 42,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "16a61b40ceaa043496daff7d",
      "category": "access",
      "label": "API-key or authorization header",
      "detail": "Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "tests/test_cloud_resolver.py",
          "line": 219,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "4b56b44572ce44cd89d5c67a",
      "category": "access",
      "label": "API-key or authorization header",
      "detail": "Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "tests/test_compression.py",
          "line": 212,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "6c85b591d4824e665deff6b4",
      "category": "data",
      "label": "Table reference: fast_totals",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "tests/test_fast.py",
          "line": 324,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "2a3ae4b15521581ceb0f1f46",
      "category": "apis",
      "label": "Attribution parameter: gclid",
      "detail": "Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "tests/test_final_urls.py",
          "line": 12,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "1b792a8afbcb3daf0cf3be9d",
      "category": "apis",
      "label": "Attribution parameter: gclid",
      "detail": "Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "tests/test_final_urls.py",
          "line": 33,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "59ad0f80e52e726b4d06e73b",
      "category": "apis",
      "label": "Attribution parameter: gclid",
      "detail": "Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "tests/test_final_urls.py",
          "line": 52,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "bef0502d3ebb86f7a58a0296",
      "category": "apis",
      "label": "Attribution parameter: gclid",
      "detail": "Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "tests/test_final_urls.py",
          "line": 53,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "dea283ab09c7ff7f23fc7526",
      "category": "apis",
      "label": "Attribution parameter: gclid",
      "detail": "Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "tests/test_final_urls.py",
          "line": 54,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "20c83b499a6ef615dee0a719",
      "category": "operations",
      "label": "Logic pointer: test_non_html_and_redirect_classification_preserve_url_evidence",
      "detail": "Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "tests/test_lean.py",
          "line": 171,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "f918c92b349f05773398001f",
      "category": "data",
      "label": "Table reference: request",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "tests/test_pilot_sample.py",
          "line": 86,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "3135ca14a33109aa379e82c8",
      "category": "data",
      "label": "Table reference: work",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "tests/test_pilot_sample.py",
          "line": 87,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "8371c4bc35b45fa9950c56ac",
      "category": "data",
      "label": "Table reference: click_attempt",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "tests/test_pilot_sample.py",
          "line": 93,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "e4002c4ee19c5206b167c4e7",
      "category": "operations",
      "label": "Logic pointer: test_proxy_failure_threshold_rejects_values_outside_one_to_three",
      "detail": "Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "tests/test_pilot.py",
          "line": 226,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "ed5b72f1fee744557b8fb12b",
      "category": "operations",
      "label": "Logic pointer: test_response_classification_handles_html_and_blocked_status",
      "detail": "Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "tests/test_proxy_comparison.py",
          "line": 40,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "d3ee10d0761ac60257f26f6b",
      "category": "operations",
      "label": "Logic pointer: test_response_classification_does_not_follow_redirect_or_parse_compressed_bytes",
      "detail": "Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "tests/test_proxy_comparison.py",
          "line": 50,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "ffb1eb49c4b7a9e6942db5e6",
      "category": "apis",
      "label": "Outbound candidate: unknown method advertiser.fixture",
      "detail": "Literal destination in source; path, query and payload withheld. Reachability, authentication, side effects and active use require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "tests/test_proxy_network.py",
          "line": 167,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "77940c75b33993b2964d32a4",
      "category": "apis",
      "label": "Outbound candidate: unknown method advertiser.fixture",
      "detail": "Literal destination in source; path, query and payload withheld. Reachability, authentication, side effects and active use require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "tests/test_proxy_network.py",
          "line": 218,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "639907bd665402e798fd1ea3",
      "category": "access",
      "label": "API-key or authorization header",
      "detail": "Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "tests/test_proxy_network.py",
          "line": 181,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "c35167e1cf2e96696e98d76b",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "tests/test_proxy.py",
          "line": 40,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "85ee23be008b2ad1d6afe26e",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "tests/test_proxy.py",
          "line": 61,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "0019d23e2fc5dc56428591f3",
      "category": "access",
      "label": "API-key or authorization header",
      "detail": "Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "tests/test_proxy.py",
          "line": 30,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "a1fc9b11f5ddfde2263a5cb6",
      "category": "access",
      "label": "API-key or authorization header",
      "detail": "Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "tests/test_resolver_cloud_config.py",
          "line": 47,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "0b2e650eef2256262f372f12",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "tests/test_resolver.py",
          "line": 129,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "b6bb34a7b6a3838cdc3c0181",
      "category": "operations",
      "label": "Logic pointer: normalized",
      "detail": "Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/capture-runtime/archive_entry.py",
          "line": 11,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "b3179735ea5f94d4f74e3163",
      "category": "access",
      "label": "API-key or authorization header",
      "detail": "Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/resolver-runtime/cloud_resolver.py",
          "line": 1,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "ad65c90aaa3f7946e8b0220e",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/backup-consumer.ts",
          "line": 24,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "6a50b846a0342f0feac6895a",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/backup-consumer.ts",
          "line": 88,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "97686afff2532fe5c0ab2673",
      "category": "data",
      "label": "Table reference: rows",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/backup-consumer.ts",
          "line": 23,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "715c12c7d2243679639901ec",
      "category": "data",
      "label": "Table reference: objects",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/backup-consumer.ts",
          "line": 23,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "f23ebc2eda703dff18d7893c",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/backup-objects.ts",
          "line": 13,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "df27b6b9194f08ee76ffa03f",
      "category": "apis",
      "label": "Write-call candidate: delete",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/backup-objects.ts",
          "line": 33,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "d2bc952dd7f0869408d6e194",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/bundle-capture.mjs",
          "line": 10,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "11536233cdeef29c6d34f08d",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/bundle-resolver.mjs",
          "line": 9,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "f4ab0cd23a44ae875db0b791",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/import-cloud-artifacts.mjs",
          "line": 21,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "4640665fb58e93a0e19e43c4",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/import-cloud-artifacts.mjs",
          "line": 25,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "056312e6e8a9c6d10a75a9cf",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/import-cloud-data.mjs",
          "line": 39,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "de513fee304d2dd79cfb77fd",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/import-cloud-data.mjs",
          "line": 44,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "e3c9754b247384ae10c17033",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/import-resolver-history.mjs",
          "line": 9,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "a98785c919db25e226fa42c3",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/import-resolver-history.mjs",
          "line": 78,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "fa52026ccba49f4d72cc08a2",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/prepare-resolver-sandbox.mjs",
          "line": 37,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "f040690651372091a08444f7",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/probe-cloud-queue.mjs",
          "line": 10,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "70e989b75a967f59d41a16a3",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/qualify-archive.ts",
          "line": 33,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "f30088fac61938ac16dc7261",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CAPTURE_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/qualify-archive.ts",
          "line": 22,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "d4bc9fa75d867db629205e2a",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CONTINUOUS_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/qualify-continuous-planning.ts",
          "line": 11,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "0781fbb5881d2c59221c7397",
      "category": "schedules",
      "label": "Guard-name candidate: NOT_PAUSED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/qualify-continuous-planning.ts",
          "line": 17,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "42f35e002199d6703f4a7246",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/qualify-resolver-callback.mjs",
          "line": 10,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "e158bd1b4d70f8902dca94b6",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_SOURCE_SYNC_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/qualify-source-sync.ts",
          "line": 4,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "f25738e8afbd577e5456a2b4",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CONTINUOUS_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/reconcile-prepaid-allowances.ts",
          "line": 13,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "12c84a3ccec3e06e56794736",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/recover-resolver-followup.ts",
          "line": 15,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "d0daf2c7a1ba8924f9361f30",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/resume-repaired-pipeline.ts",
          "line": 21,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "b3c9a7302f482c7f893793eb",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CONTINUOUS_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/resume-repaired-pipeline.ts",
          "line": 74,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "0e3b6a201c5b06ed550f45fa",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CAPTURE_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/start-gallery-review.mjs",
          "line": 5,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "449711ecb0f4c95e158dac01",
      "category": "apis",
      "label": "Outbound candidate: POST obqmkfhzflgvanbddjpy.supabase.co",
      "detail": "Literal destination in source; path, query and payload withheld. Possible external write; approval, dry-run and access guards require source review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/verify-archive.ts",
          "line": 24,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "9e11683a9fd4544c9b4a9341",
      "category": "schedules",
      "label": "Guard-name candidate: URLBOX_CAPTURE_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/verify-budget-sql.ts",
          "line": 38,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "165e54f15703e04007a66818",
      "category": "data",
      "label": "Table reference: lander_intel.worker_state",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/verify-budget-sql.ts",
          "line": 9,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "7bd5dacff35a01eb0327ce8c",
      "category": "data",
      "label": "Table reference: lander_intel.capture_jobs",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/verify-budget-sql.ts",
          "line": 9,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "1d7cb8fe0a6c354b9999a2ef",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/verify-bulk-gallery.mjs",
          "line": 24,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "601bf35b1b7d84438ebde0f3",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/verify-capture-paths-sql.ts",
          "line": 13,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "6ef7378c8c94d5b4db0aeabd",
      "category": "data",
      "label": "Table reference: lander_intel.continuous_targets",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/verify-capture-paths-sql.ts",
          "line": 18,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "d1eb2477194862e873c419ca",
      "category": "data",
      "label": "Table reference: lander_intel.continuous_target_sources",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/verify-capture-paths-sql.ts",
          "line": 19,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "2b85b73a0ce0f3e5b968df25",
      "category": "data",
      "label": "Table reference: lander_intel.capture_jobs",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/verify-capture-paths-sql.ts",
          "line": 20,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "32d7fabd0eff52bac968e50f",
      "category": "data",
      "label": "Table reference: lander_intel.original_evidence",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/verify-capture-paths-sql.ts",
          "line": 21,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "18dcfa2679ed5cfc4c46a245",
      "category": "data",
      "label": "Table reference: lander_intel.worker_state",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/verify-client-ad-protection-sql.ts",
          "line": 18,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "edaf304f386a8d33b0c42f17",
      "category": "data",
      "label": "Table reference: lander_intel.records",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/verify-client-ad-protection-sql.ts",
          "line": 19,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "de342e08227bfa8d14d58bb7",
      "category": "data",
      "label": "Table reference: lander_intel.resolution_jobs",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/verify-client-ad-protection-sql.ts",
          "line": 20,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "df5baac0ab583f13ff7f11a9",
      "category": "data",
      "label": "Table reference: lander_intel.resolution_sources",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/verify-client-ad-protection-sql.ts",
          "line": 21,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "4a6326275d0f5220d01cbed5",
      "category": "data",
      "label": "Table reference: lander_intel.fixture_spends",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/verify-client-ad-protection-sql.ts",
          "line": 22,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "5c23acbe5292a1b897f8ae7c",
      "category": "access",
      "label": "API-key or authorization header",
      "detail": "Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/verify-continuous-access.mjs",
          "line": 3,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "d72c1b313dbeb7d95afee70a",
      "category": "data",
      "label": "Table reference: lander_intel.fixture",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/verify-import-planning-sql.ts",
          "line": 13,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "02d4e1d6fec13c9710c06ef8",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/verify-preload.ts",
          "line": 34,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "50ce87e33e2fcfe1ff38ba65",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/verify-private-artifacts.mjs",
          "line": 17,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "261dca26f802adbbf66311d1",
      "category": "data",
      "label": "Table reference: lander_intel.worker_state",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/verify-report-scheduler-sql.ts",
          "line": 19,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "779691608b326f4c97711b55",
      "category": "data",
      "label": "Table reference: lander_intel.resolution_jobs",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/verify-report-scheduler-sql.ts",
          "line": 20,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "2b493714aa5e356a44b87819",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CONTINUOUS_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/verify-research-sql.ts",
          "line": 52,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "45ba729e2baff9b52d20f703",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CONTINUOUS_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/verify-research-sql.ts",
          "line": 86,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "6ccbfaf86268f0ccd39b0572",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/verify-resolver-recovery-sql.ts",
          "line": 20,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "62cb11863cf8ed0da3d4699b",
      "category": "data",
      "label": "Table reference: lander_intel.source_imports",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/verify-resolver-recovery-sql.ts",
          "line": 26,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "6fce51341a7f3cc76afa1552",
      "category": "data",
      "label": "Table reference: lander_intel.source_imports",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/verify-resolver-recovery-sql.ts",
          "line": 27,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "4563b8dc50717864a949efb2",
      "category": "data",
      "label": "Table reference: lander_intel.source_scans",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/verify-resolver-recovery-sql.ts",
          "line": 28,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "c635459c307cb784cd37b4c9",
      "category": "data",
      "label": "Table reference: lander_intel.source_scans",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/verify-resolver-recovery-sql.ts",
          "line": 29,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "038d20b88a2a40cf90df9a59",
      "category": "data",
      "label": "Table reference: intel.serp_observations",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/verify-resolver-recovery-sql.ts",
          "line": 30,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "ab77318b6c05c08477d11162",
      "category": "data",
      "label": "Table reference: intel.serp_ad_urls",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/verify-resolver-recovery-sql.ts",
          "line": 31,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "7f7eef11feb240e330e1829a",
      "category": "access",
      "label": "Row-security declaration",
      "detail": "DDL references row-level security. This does not establish deployed policies, role coverage or effective authorization.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/verify-resolver-recovery-sql.ts",
          "line": 27,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "ff0b793cd69371c6fe6dc692",
      "category": "data",
      "label": "Table reference: lander_intel.worker_state",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/verify-sighting-refresh-sql.ts",
          "line": 21,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "5c0cf0a0736befef55c6ca71",
      "category": "data",
      "label": "Table reference: lander_intel.records",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/verify-sighting-refresh-sql.ts",
          "line": 22,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "4e4f5882487e5891bc2fd199",
      "category": "data",
      "label": "Table reference: lander_intel.google_request_claims",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/verify-sighting-refresh-sql.ts",
          "line": 23,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "fcdde61ae1be01531e12d1a7",
      "category": "data",
      "label": "Table reference: lander_intel.continuous_targets",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/verify-sighting-refresh-sql.ts",
          "line": 24,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "b7a7c280eeea6f472ed07656",
      "category": "data",
      "label": "Table reference: lander_intel.continuous_target_sources",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/verify-sighting-refresh-sql.ts",
          "line": 25,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "130a16afd568928fd9b66e31",
      "category": "data",
      "label": "Table reference: lander_intel.source_link_sightings",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/scripts/verify-sighting-refresh-sql.ts",
          "line": 27,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "fa3367149170db8c1e3e2ecc",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/verify-sql.mjs",
          "line": 8,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "f2ac8fcae18a45ad80592c61",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CONTINUOUS_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/verify-sql.mjs",
          "line": 12,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "0fe9185d7b2b8983baf49b0d",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/verify-urlbox-live.ts",
          "line": 31,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "498d0374dc58676b94b4b269",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/verify-urlbox-live.ts",
          "line": 33,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "0306338bfcab39dd79d0ce2c",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/verify-urlbox-sql.ts",
          "line": 22,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "7297a20f669ce50cc9926cb0",
      "category": "schedules",
      "label": "Guard-name candidate: URLBOX_CAPTURE_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/verify-urlbox-sql.ts",
          "line": 35,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "aabc602362b4273a38d67a07",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CONTINUOUS_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/scripts/verify-urlbox-sql.ts",
          "line": 38,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "2eca4d502ee49679fdbf236a",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CONTINUOUS_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/app/api/cron/continuous/route.ts",
          "line": 13,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "a52f6c1d0288ee9ea5d276b3",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_SOURCE_SYNC_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/app/api/cron/continuous/route.ts",
          "line": 16,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "5c357d749f546416d41aaff9",
      "category": "access",
      "label": "API-key or authorization header",
      "detail": "Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/app/api/cron/continuous/route.ts",
          "line": 11,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "7f4b8d8fed1a18e35722db2e",
      "category": "access",
      "label": "API-key or authorization header",
      "detail": "Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/app/api/cron/source-sync/route.ts",
          "line": 5,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "6881ec27f29d91e0b95c1889",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CONTINUOUS_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/app/api/queues/continuous/route.ts",
          "line": 7,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "bba10b227bc2b8eeb867fa42",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CONTINUOUS_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/app/api/queues/market-maintenance/route.ts",
          "line": 6,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "5875ef67034dc32a8a1f8a04",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CONTINUOUS_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/app/api/queues/resolver/route.ts",
          "line": 7,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "a34d283e87b69af30e8fcb0a",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_SOURCE_SYNC_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/app/api/queues/source-sync/route.ts",
          "line": 6,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "d4a8b0176c68c6732f4e8715",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CONTINUOUS_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/app/api/resolver/claim/route.ts",
          "line": 8,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "473576f146b326243ef2806c",
      "category": "access",
      "label": "API-key or authorization header",
      "detail": "Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/app/api/resolver/claim/route.ts",
          "line": 9,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "9a0161fa761cbaeccb473ac5",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CONTINUOUS_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/app/api/resolver/status/route.ts",
          "line": 8,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "c00d314d61c5e5e0871889fb",
      "category": "apis",
      "label": "Web-page entry",
      "detail": "Page source exists; route reachability and access controls remain unverified. This is not classified as an API endpoint.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/page.tsx",
          "line": 1,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "add36ee2d776517713da7dce",
      "category": "access",
      "label": "Login allowlist",
      "detail": "Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/app/sign-in/[[...sign-in]]/page.tsx",
          "line": 2,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "c430cdb8c20af8ac1be52b64",
      "category": "apis",
      "label": "Web-page entry",
      "detail": "Page source exists; route reachability and access controls remain unverified. This is not classified as an API endpoint.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/app/sign-in/[[...sign-in]]/page.tsx",
          "line": 1,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "487adbfce7bf89f7531bff83",
      "category": "apis",
      "label": "Write-call candidate: delete",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/components/market-explorer.tsx",
          "line": 12,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "39d86ba9c8e05b52ff41fc57",
      "category": "apis",
      "label": "Write-call candidate: delete",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/components/research-app.tsx",
          "line": 82,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "65e61d40728624da296cc23f",
      "category": "apis",
      "label": "Write-call candidate: delete",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/components/research-app.tsx",
          "line": 103,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "54fe06f09bba831c006b2a05",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/archive-policy.ts",
          "line": 9,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "deef7d66ba599b142f42cdbd",
      "category": "apis",
      "label": "Write-call candidate: remove",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/archive-policy.ts",
          "line": 19,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "ce69304e09cd5ea97b36ce8c",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CAPTURE_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/archive.ts",
          "line": 64,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "538230c618bc373b33c61f90",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CAPTURE_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/archive.ts",
          "line": 71,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "195dd59d39d5c393a9e65c5f",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/batch-policy.ts",
          "line": 33,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "6ddc0c5486f5d143cff7a5ca",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/capture-artifacts.ts",
          "line": 26,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "5c77ee7d74bd1c8c2d434bed",
      "category": "apis",
      "label": "Write-call candidate: remove",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/capture-evidence.ts",
          "line": 51,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "223bf115e91069ae4d66d031",
      "category": "apis",
      "label": "Write-call candidate: remove",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/capture-evidence.ts",
          "line": 85,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "22203a476a5c4e1609df8178",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/capture-evidence.ts",
          "line": 107,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "a377392f50abb166acd3c6d5",
      "category": "operations",
      "label": "Logic pointer: eligibleDestination",
      "detail": "Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/capture-policy.ts",
          "line": 2,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "e52a4828d380abd833f50098",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CAPTURE_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/capture-runner-policy.ts",
          "line": 4,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "33be696cced9e71cbc8a643f",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CAPTURE_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/capture-runner.ts",
          "line": 21,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "bebcdde811da7533c8f8b980",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/cloud-archive.ts",
          "line": 73,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "c4240fdf0f7848413152edf9",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/cloud-archive.ts",
          "line": 81,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "d65d1e2a30cd03727cf2e4d6",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CAPTURE_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/cloud-archive.ts",
          "line": 29,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "9fdf3aee3ca4051b46786cba",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/cloud-capture-policy.ts",
          "line": 8,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "bb540ebfdbe1fcf543e71bcb",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/cloud-capture.ts",
          "line": 74,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "46c35d20daa496bb3e1249c0",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CAPTURE_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/cloud-capture.ts",
          "line": 30,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "22a8086ce780db18ec873a68",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CONTINUOUS_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/cloud-capture.ts",
          "line": 34,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "16422b20c088b5cb6b911cb2",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CONTINUOUS_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/consumer-evidence.ts",
          "line": 7,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "d07bbd720d5ef5a767adbff6",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CONTINUOUS_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/continuous-admission.ts",
          "line": 164,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "acee4fc53ba03d765204c513",
      "category": "operations",
      "label": "Logic pointer: calculateContinuousBudget",
      "detail": "Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/continuous-admission.ts",
          "line": 53,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "05322a120459db00d1a50ea4",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/continuous-auth.ts",
          "line": 5,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "cf3b44551447d7461b1b91d6",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/continuous-auth.ts",
          "line": 8,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "ba2dbc950894e64f3820e906",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/continuous-policy.ts",
          "line": 72,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "73ffb00111d201ad687573ec",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/continuous-policy.ts",
          "line": 83,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "3d098c272ae5753f69ac3583",
      "category": "operations",
      "label": "Logic pointer: classifyDestination",
      "detail": "Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/continuous-policy.ts",
          "line": 36,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "3c4e2dc00b70e6c45bba96c9",
      "category": "apis",
      "label": "Attribution parameter: gclid",
      "detail": "Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/continuous-policy.ts",
          "line": 57,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "2ad1134687002a8a4f5fcf90",
      "category": "apis",
      "label": "Attribution parameter: gbraid",
      "detail": "Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/continuous-policy.ts",
          "line": 57,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "01965e3f8be70c5f3db88e56",
      "category": "apis",
      "label": "Attribution parameter: wbraid",
      "detail": "Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/continuous-policy.ts",
          "line": 57,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "001a9ef3809f2b601f839ec8",
      "category": "apis",
      "label": "Attribution parameter: msclkid",
      "detail": "Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/continuous-policy.ts",
          "line": 57,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "b37dd9a8c8be3f12fac4b2bd",
      "category": "apis",
      "label": "Attribution parameter: fbclid",
      "detail": "Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/continuous-policy.ts",
          "line": 57,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "7d80bfdd960095719cbf6610",
      "category": "schedules",
      "label": "Guard-name candidate: URLBOX_CAPTURE_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/continuous-urlbox-admission.ts",
          "line": 73,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "e6c7a216b6d870fa96ee9c52",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CONTINUOUS_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/continuous-urlbox-admission.ts",
          "line": 106,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "0fe8fc278f635b448ad93b6f",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CONTINUOUS_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/continuous.ts",
          "line": 68,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "a0d12ef07b7e43cefa88bd58",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CONTINUOUS_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/continuous.ts",
          "line": 81,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "dc3dae165420668538d910ac",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CONTINUOUS_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/continuous.ts",
          "line": 116,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "9b9e5c2dbe8226d4c661cfb5",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CONTINUOUS_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/continuous.ts",
          "line": 347,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "018dbede28a57b6a9da98416",
      "category": "schedules",
      "label": "Trigger candidate: event",
      "detail": "Source-declared event value: database_transaction_retry. Parent job and activation need confirmation.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/database-transaction.ts",
          "line": 5,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "26982e3b3fb5a4c8ab9d7bb6",
      "category": "schedules",
      "label": "Trigger candidate: event",
      "detail": "Source-declared event value: database_transaction_retry. Parent job and activation need confirmation.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/database-transaction.ts",
          "line": 30,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "24bd3c1f4d514e7f3ea74a0c",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CONTINUOUS_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/db.ts",
          "line": 22,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "0d6136bbbb6850a06b6e2ef8",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/gallery-batches.ts",
          "line": 67,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "fe6cd8f8a2604c23640e5a36",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/gallery-batches.ts",
          "line": 88,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "da5fba1381aa43c03b65ee91",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CAPTURE_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/gallery-batches.ts",
          "line": 164,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "cdeb385c26ba865b57a4b9cd",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/incidents.ts",
          "line": 16,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "a3401c7d250238a74126e8d9",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/interpretations.ts",
          "line": 33,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "8df1867a9fba7182c380dc05",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CAPTURE_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/jobs.ts",
          "line": 52,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "a11012dfa51ccf488b515ade",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CAPTURE_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/jobs.ts",
          "line": 64,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "11d152fb4f6c85cf2917fe7b",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CAPTURE_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/jobs.ts",
          "line": 78,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "531343824a798fe9ab44462b",
      "category": "data",
      "label": "Table reference: capture_jobs",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/lib/jobs.ts",
          "line": 13,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "e08cf6e4b7ec851e413101da",
      "category": "data",
      "label": "Table reference: worker_state",
      "detail": "Schema DDL reference. No rows, column defaults, credentials or SQL bodies retained; applied state, ownership and access remain unknown.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "web/src/lib/jobs.ts",
          "line": 21,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "00e3f924ae110e06bb218c08",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CONTINUOUS_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/managed-capture-reconciliation.ts",
          "line": 36,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "588b660905fb33ddd6a51872",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/market-maintenance.ts",
          "line": 18,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "f7530ce906c3eb0e72d82870",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CONTINUOUS_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/market.ts",
          "line": 16,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "bb62c3c395610ef15d26fbc4",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CONTINUOUS_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/market.ts",
          "line": 18,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "36ce1e1d983fc483a3a9f873",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CONTINUOUS_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/market.ts",
          "line": 21,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "4350f4622353d633e6c93e6a",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CONTINUOUS_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/market.ts",
          "line": 35,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "983eb975a948b8444c9a5d64",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/report-scheduler.ts",
          "line": 12,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "969bb38be38ac82ce473f562",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/report-scheduler.ts",
          "line": 16,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "31eb1a25b7247f7d5f64d079",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/research-library.ts",
          "line": 7,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "58147bace99c821ecd46ab26",
      "category": "apis",
      "label": "Write-call candidate: delete",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/research-library.ts",
          "line": 24,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "7d91d0cc8bc29206c2be3b2d",
      "category": "apis",
      "label": "Write-call candidate: delete",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/research-loader.ts",
          "line": 21,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "e046a000d3dd8e809eb23529",
      "category": "apis",
      "label": "Write-call candidate: delete",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/research-loader.ts",
          "line": 35,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "f43ed552b75d7dabb19fbb76",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/research-recovery.ts",
          "line": 11,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "63fecc5aea53b20caef23b34",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/research-snapshot.ts",
          "line": 17,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "bd8f30af2fdba3d77f94a887",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CONTINUOUS_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/research.ts",
          "line": 148,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "7d84daaab16ba17bef688ce6",
      "category": "operations",
      "label": "Logic pointer: cohortClause",
      "detail": "Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/scope.ts",
          "line": 63,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "6102f04a01186aac034fabb1",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/source-sync.ts",
          "line": 14,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "77ef5484df60b1941e063b9b",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_SOURCE_SYNC_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/source-sync.ts",
          "line": 25,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "01edfd1ccfa134bf88ab9522",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_SOURCE_SYNC_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/source-sync.ts",
          "line": 29,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "a666d0bff3ed5a2ff9d4ba12",
      "category": "access",
      "label": "API-key or authorization header",
      "detail": "Source signal only. Review enforcement, caller identity, scopes and bypass paths; no hosted-access conclusion is inferred.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/urlbox-api.ts",
          "line": 16,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "bee5cb01b74a807a4e891472",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/urlbox-capture.ts",
          "line": 167,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "b7e3597ad540d8dad97043a2",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/urlbox-capture.ts",
          "line": 171,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "63ff826b55fc20a108234f67",
      "category": "schedules",
      "label": "Guard-name candidate: URLBOX_CAPTURE_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/urlbox-capture.ts",
          "line": 47,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "9fea912e99acbd41832fa227",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CONTINUOUS_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/urlbox-capture.ts",
          "line": 56,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "797a57686e30e45102fb4ce9",
      "category": "schedules",
      "label": "Guard-name candidate: LANDER_CONTINUOUS_ENABLED",
      "detail": "A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/urlbox-capture.ts",
          "line": 123,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "9cae0f26f1b4a8d62972806a",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/urlbox-policy.ts",
          "line": 21,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "eeb4125fb21dd0e0e1f71428",
      "category": "apis",
      "label": "Write-call candidate: update",
      "detail": "Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/urlbox-policy.ts",
          "line": 26,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "1396922ea6ade3646ba9a5d0",
      "category": "operations",
      "label": "Logic pointer: classifyUrlbox",
      "detail": "Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/urlbox-policy.ts",
          "line": 68,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "56d48d92aa2baceb43faae16",
      "category": "operations",
      "label": "Logic pointer: reviewSavedUrlboxClassification",
      "detail": "Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "web/src/lib/urlbox-quality-review.ts",
          "line": 8,
          "kind": "observed-code"
        }
      ]
    }
  ],
  "coverage": {
    "listed": 411,
    "eligible": 268,
    "inspected": 268,
    "skipped": 143,
    "failed": 0,
    "bytes": 1622514,
    "treeTruncated": false,
    "limited": false
  },
  "gaps": [
    "Static inspection does not verify runtime health, current use, provisioning, live schedules, service account access or deployed/source alignment.",
    "Only bounded source/configuration files are inspected. Secret files, data exports, binaries, history and raw source text are excluded from results.",
    "Unknown or dynamically constructed integrations and configuration names may not be detected. Human review is still needed.",
    "Deep scan: more source and candidate detectors, with an adjacent versioned receipt. Candidate calls and tracking matches still require interpretation."
  ],
  "changes": {
    "previousSha": "77d24c25e202d3d6a7318c189b988cc72526af59",
    "added": 101,
    "removed": 0
  }
}
