{
  "recordedAt": "2026-09-05T15:25:36.465986+00:00",
  "scope": "Isolated local checks of public source and fixtures. No cloud, model-provider, employer, or monitoring account was contacted.",
  "repositories": {
    "infraguard": {
      "commit": "34549b21718fa932c86c771f7f0892ce76253f77",
      "testsPassed": 58,
      "command": "python -m pytest -q"
    },
    "codeguard": {
      "commit": "6c31058ba6deb1e6e305b7c0d91d4036c1654b60",
      "testsPassed": 181,
      "command": "python -m pytest -q"
    },
    "status-page": {
      "commit": "4a30431d542f6e4063b0b6f85a085613882b7ed5",
      "testsPassed": 139,
      "command": "python -m pytest -q"
    }
  },
  "infra": [
    {
      "title": "Create resources",
      "fixture": "tests/fixtures/terraform/simple_create.json",
      "input": {
        "format_version": "1.2",
        "terraform_version": "1.9.0",
        "resource_changes": [
          {
            "address": "aws_instance.web",
            "mode": "managed",
            "type": "aws_instance",
            "name": "web",
            "change": {
              "actions": [
                "create"
              ],
              "before": null,
              "after": {
                "ami": "ami-0abcdef1234567890",
                "instance_type": "t3.micro",
                "tags": {
                  "Environment": "dev",
                  "Name": "web-server"
                }
              }
            }
          },
          {
            "address": "aws_security_group.web",
            "mode": "managed",
            "type": "aws_security_group",
            "name": "web",
            "change": {
              "actions": [
                "create"
              ],
              "before": null,
              "after": {
                "name": "web-sg",
                "tags": {
                  "Environment": "dev"
                }
              }
            }
          }
        ]
      },
      "output": {
        "summary": {
          "total_changes": 2,
          "total_risk_score": 8,
          "actions": {
            "create": 2
          },
          "highest_risk": "aws_instance.web",
          "highest_risk_score": 4
        },
        "changes": [
          {
            "address": "aws_instance.web",
            "action": "create",
            "weight": 1,
            "criticality": 4,
            "environmentMultiplier": 1.0,
            "score": 4
          },
          {
            "address": "aws_security_group.web",
            "action": "create",
            "weight": 1,
            "criticality": 4,
            "environmentMultiplier": 1.0,
            "score": 4
          }
        ]
      }
    },
    {
      "title": "Review mixed changes",
      "fixture": "tests/fixtures/terraform/mixed_changes.json",
      "input": {
        "format_version": "1.2",
        "terraform_version": "1.9.0",
        "resource_changes": [
          {
            "address": "module.staging_vpc.aws_vpc.main",
            "mode": "managed",
            "type": "aws_vpc",
            "name": "main",
            "change": {
              "actions": [
                "update"
              ],
              "before": {
                "cidr_block": "10.0.0.0/16"
              },
              "after": {
                "cidr_block": "10.0.0.0/16",
                "tags": {
                  "Environment": "staging"
                }
              }
            }
          },
          {
            "address": "aws_s3_bucket.prod_data",
            "mode": "managed",
            "type": "aws_s3_bucket",
            "name": "prod_data",
            "change": {
              "actions": [
                "delete"
              ],
              "before": {
                "bucket": "prod-data-bucket"
              },
              "after": null
            }
          },
          {
            "address": "aws_lambda_function.dev_processor",
            "mode": "managed",
            "type": "aws_lambda_function",
            "name": "dev_processor",
            "change": {
              "actions": [
                "update"
              ],
              "before": {
                "runtime": "python3.11"
              },
              "after": {
                "runtime": "python3.12"
              }
            }
          },
          {
            "address": "aws_ssm_parameter.config",
            "mode": "managed",
            "type": "aws_ssm_parameter",
            "name": "config",
            "change": {
              "actions": [
                "create"
              ],
              "before": null,
              "after": {
                "name": "/app/config",
                "type": "String"
              }
            }
          },
          {
            "address": "data.aws_ami.latest",
            "mode": "data",
            "type": "aws_ami",
            "name": "latest",
            "change": {
              "actions": [
                "read"
              ],
              "before": null,
              "after": {}
            }
          }
        ]
      },
      "output": {
        "summary": {
          "total_changes": 4,
          "total_risk_score": 122,
          "actions": {
            "delete": 1,
            "update": 2,
            "create": 1
          },
          "highest_risk": "aws_s3_bucket.prod_data",
          "highest_risk_score": 100
        },
        "changes": [
          {
            "address": "aws_s3_bucket.prod_data",
            "action": "delete",
            "weight": 5,
            "criticality": 10,
            "environmentMultiplier": 2.0,
            "score": 100
          },
          {
            "address": "module.staging_vpc.aws_vpc.main",
            "action": "update",
            "weight": 2,
            "criticality": 4,
            "environmentMultiplier": 1.5,
            "score": 12
          },
          {
            "address": "aws_lambda_function.dev_processor",
            "action": "update",
            "weight": 2,
            "criticality": 4,
            "environmentMultiplier": 1.0,
            "score": 8
          },
          {
            "address": "aws_ssm_parameter.config",
            "action": "create",
            "weight": 1,
            "criticality": 2,
            "environmentMultiplier": 1.0,
            "score": 2
          }
        ]
      }
    },
    {
      "title": "Delete a database",
      "fixture": "tests/fixtures/terraform/destroy_database.json",
      "input": {
        "format_version": "1.2",
        "terraform_version": "1.9.0",
        "resource_changes": [
          {
            "address": "aws_db_instance.prod_main",
            "mode": "managed",
            "type": "aws_db_instance",
            "name": "prod_main",
            "change": {
              "actions": [
                "delete"
              ],
              "before": {
                "identifier": "prod-main-db",
                "engine": "postgres",
                "tags": {
                  "Environment": "production",
                  "Service": "api"
                }
              },
              "after": null
            }
          },
          {
            "address": "aws_ecs_service.api",
            "mode": "managed",
            "type": "aws_ecs_service",
            "name": "api",
            "change": {
              "actions": [
                "delete",
                "create"
              ],
              "before": {
                "name": "api-service",
                "desired_count": 2
              },
              "after": {
                "name": "api-service",
                "desired_count": 3
              }
            }
          },
          {
            "address": "aws_security_group.web",
            "mode": "managed",
            "type": "aws_security_group",
            "name": "web",
            "change": {
              "actions": [
                "update"
              ],
              "before": {
                "ingress": []
              },
              "after": {
                "ingress": [
                  {
                    "from_port": 443
                  }
                ]
              }
            }
          },
          {
            "address": "aws_cloudwatch_log_group.app",
            "mode": "managed",
            "type": "aws_cloudwatch_log_group",
            "name": "app",
            "change": {
              "actions": [
                "create"
              ],
              "before": null,
              "after": {
                "name": "/app/logs"
              }
            }
          }
        ]
      },
      "output": {
        "summary": {
          "total_changes": 4,
          "total_risk_score": 138,
          "actions": {
            "delete": 1,
            "replace": 1,
            "update": 1,
            "create": 1
          },
          "highest_risk": "aws_db_instance.prod_main",
          "highest_risk_score": 100
        },
        "changes": [
          {
            "address": "aws_db_instance.prod_main",
            "action": "delete",
            "weight": 5,
            "criticality": 10,
            "environmentMultiplier": 2.0,
            "score": 100
          },
          {
            "address": "aws_ecs_service.api",
            "action": "replace",
            "weight": 4,
            "criticality": 7,
            "environmentMultiplier": 1.0,
            "score": 28
          },
          {
            "address": "aws_security_group.web",
            "action": "update",
            "weight": 2,
            "criticality": 4,
            "environmentMultiplier": 1.0,
            "score": 8
          },
          {
            "address": "aws_cloudwatch_log_group.app",
            "action": "create",
            "weight": 1,
            "criticality": 2,
            "environmentMultiplier": 1.0,
            "score": 2
          }
        ]
      }
    }
  ],
  "code": [
    {
      "title": "Structured findings",
      "fixture": "tests/fixtures/responses/valid_findings.json",
      "input": {
        "diff": "tests/fixtures/diffs/sql_injection.diff",
        "provider": "fixed response; no model called",
        "simulateFailure": false,
        "response": "{\n  \"findings\": [\n    {\n      \"title\": \"SQL Injection Vulnerability\",\n      \"severity\": \"CRITICAL\",\n      \"category\": \"security\",\n      \"description\": \"User input is concatenated directly into SQL query string without sanitization.\",\n      \"suggestion\": \"Use parameterized queries with placeholders instead of string concatenation.\",\n      \"line_number\": 13,\n      \"cwe_id\": \"CWE-89\",\n      \"owasp_ref\": \"A03:2021\"\n    },\n    {\n      \"title\": \"Hardcoded Database Path\",\n      \"severity\": \"LOW\",\n      \"category\": \"style\",\n      \"description\": \"Database path is hardcoded. Consider using configuration.\",\n      \"suggestion\": \"Move database path to environment variable or config file.\",\n      \"line_number\": 12,\n      \"cwe_id\": null,\n      \"owasp_ref\": null\n    }\n  ]\n}\n"
      },
      "output": {
        "findings": [
          {
            "title": "SQL Injection Vulnerability",
            "severity": "CRITICAL",
            "category": "security",
            "description": "User input is concatenated directly into SQL query string without sanitization.",
            "suggestion": "Use parameterized queries with placeholders instead of string concatenation.",
            "file_path": "app/db.py",
            "line_number": 13,
            "cwe_id": "CWE-89",
            "owasp_ref": "A03:2021",
            "code_snippet": null
          },
          {
            "title": "Hardcoded Database Path",
            "severity": "LOW",
            "category": "style",
            "description": "Database path is hardcoded. Consider using configuration.",
            "suggestion": "Move database path to environment variable or config file.",
            "file_path": "app/db.py",
            "line_number": 12,
            "cwe_id": null,
            "owasp_ref": null,
            "code_snippet": null
          }
        ],
        "metadata": {
          "provider": "offline-fixture",
          "model": "fixed-public-fixture",
          "files_reviewed": 1,
          "categories": [
            "security"
          ]
        },
        "summary": {
          "total_findings": 2,
          "total_score": 12,
          "max_severity": "CRITICAL",
          "severity_counts": {
            "INFO": 0,
            "LOW": 1,
            "MEDIUM": 0,
            "HIGH": 0,
            "CRITICAL": 1
          },
          "category_counts": {
            "security": 1,
            "style": 1
          }
        }
      },
      "warning": ""
    },
    {
      "title": "Malformed response",
      "fixture": "tests/fixtures/responses/malformed.json",
      "input": {
        "diff": "tests/fixtures/diffs/sql_injection.diff",
        "provider": "fixed response; no model called",
        "simulateFailure": false,
        "response": "This is not valid JSON at all {broken\n"
      },
      "output": {
        "findings": [],
        "metadata": {
          "provider": "offline-fixture",
          "model": "fixed-public-fixture",
          "files_reviewed": 1,
          "categories": [
            "security"
          ]
        },
        "summary": {
          "total_findings": 0,
          "total_score": 0,
          "max_severity": null,
          "severity_counts": {
            "INFO": 0,
            "LOW": 0,
            "MEDIUM": 0,
            "HIGH": 0,
            "CRITICAL": 0
          },
          "category_counts": {}
        }
      },
      "warning": ""
    },
    {
      "title": "Provider unavailable",
      "fixture": "tests/fixtures/responses/empty_findings.json",
      "input": {
        "diff": "tests/fixtures/diffs/sql_injection.diff",
        "provider": "fixed response; no model called",
        "simulateFailure": true,
        "response": null
      },
      "output": {
        "findings": [],
        "metadata": {
          "provider": "offline-fixture",
          "model": "fixed-public-fixture",
          "files_reviewed": 1,
          "categories": [
            "security"
          ]
        },
        "summary": {
          "total_findings": 0,
          "total_score": 0,
          "max_severity": null,
          "severity_counts": {
            "INFO": 0,
            "LOW": 0,
            "MEDIUM": 0,
            "HIGH": 0,
            "CRITICAL": 0
          },
          "category_counts": {}
        }
      },
      "warning": "Warning: Failed to review app/db.py: Recorded provider unavailable"
    }
  ],
  "status": [
    {
      "title": "Healthy signals",
      "input": {
        "reachabilityPercent": 99,
        "latencyMs": 100
      },
      "output": "operational"
    },
    {
      "title": "Latency degradation",
      "input": {
        "reachabilityPercent": 99,
        "latencyMs": 500
      },
      "output": "degraded_performance"
    },
    {
      "title": "Reachability outage",
      "input": {
        "reachabilityPercent": 50,
        "latencyMs": 100
      },
      "output": "major_outage"
    },
    {
      "title": "Missing telemetry",
      "input": {
        "reachabilityPercent": null,
        "latencyMs": null
      },
      "output": "major_outage"
    }
  ]
}