GITHUB REPOSITORIES · COMMIT-SCOPED ANALYSIS
Agent audits
Completed, commit-bound GitHub audits will appear here. Private source, unfinished requests and requests without a completed report are never published as clean results.
Understand the audit results
These labels describe source-code evidence, not whether an agent works. Each card explains the result and what to look at next.
- PASSED
- The required code checks are complete
The saved commit is valid and current, file coverage is complete, and the required checks finished without critical or unresolved warning findings. Warnings established as informational by contextual checks remain visible in the report.
Next step: Read the report to understand the scope and limits. Passed does not mean risk-free.
- NEEDS REVIEW
- Warnings need a closer look
The code matched a warning-level rule. A person needs to investigate; this is not a failed functional test.
Next step: Open the findings and coverage to assess the warning and decide what needs changing.
- NOT PASSED
- A critical code signal needs urgent review
A critical rule matched. This does not prove that the agent cannot run, or that its author acted maliciously.
Next step: Inspect the critical findings and supporting evidence before relying on the code.
- PARTIAL
- There is not enough evidence for a complete result
Some files or checks are missing, disabled, unavailable, incomplete or invalid. Missing consent also leaves evidence incomplete. It is not a clean or failed result.
Next step: Read the coverage and check statuses to see what was not checked and why.
- IN PROGRESS
- No completed audit result is available yet
There is no valid saved commit-bound check yet. Queued and scanning requests appear only in USER, not in this public catalog.
Next step: Follow your request in USER → My code audits.
- OUT OF DATE
- This is historical evidence, not a current result
The saved check is over 48 hours old, or monitoring has stopped. Completed reports can remain public after withdrawal.
Next step: Check the report date and reviewed commit; do not assume it describes the latest code.
One commit, not a certification. Every label applies only to the displayed commit. It is not a runtime capability certificate, deployment verification, token eligibility decision or guarantee of safety. Public-repository reports show the evidence; private-repository pages show a summary only.