2026-06-27 14:47:31 [info     ] pipeline_start                 root_path=/home/mnvgowda/MNVProjects/codeCTO/docs/platform_qualification/fixtures/small-python-app stages=['discovery', 'scanning', 'correlation', 'graph', 'enrichment', 'risk']
2026-06-27 14:47:31 [debug    ] pipeline_stage_start           stage=discovery
2026-06-27 14:47:31 [info     ] project_discovered             files=2 frameworks=[] languages=['python'] lines=3 package_managers=['pip/poetry/pdm']
2026-06-27 14:47:31 [debug    ] pipeline_stage_complete        elapsed_s=0.043 stage=discovery
2026-06-27 14:47:31 [debug    ] pipeline_stage_start           stage=scanning
2026-06-27 14:47:31 [debug    ] plugin_discovery_start         entry_point_count=11
2026-06-27 14:47:31 [debug    ] plugin_registered              plugin=architecture version=0.2.0
2026-06-27 14:47:31 [debug    ] plugin_loaded                  name=architecture version=0.2.0
2026-06-27 14:47:31 [debug    ] plugin_registered              plugin=config_audit version=0.2.0
2026-06-27 14:47:31 [debug    ] plugin_loaded                  name=config_audit version=0.2.0
2026-06-27 14:47:31 [debug    ] plugin_registered              plugin=dependencies version=0.2.0
2026-06-27 14:47:31 [debug    ] plugin_loaded                  name=dependencies version=0.2.0
2026-06-27 14:47:31 [debug    ] plugin_registered              plugin=docker version=1.0.0
2026-06-27 14:47:31 [debug    ] plugin_loaded                  name=docker version=1.0.0
2026-06-27 14:47:31 [debug    ] plugin_registered              plugin=external version=1.0.0
2026-06-27 14:47:31 [debug    ] plugin_loaded                  name=external version=1.0.0
2026-06-27 14:47:31 [debug    ] plugin_registered              plugin=kubernetes version=1.0.0
2026-06-27 14:47:31 [debug    ] plugin_loaded                  name=kubernetes version=1.0.0
2026-06-27 14:47:31 [debug    ] plugin_registered              plugin=quality version=0.1.0
2026-06-27 14:47:31 [debug    ] plugin_loaded                  name=quality version=0.1.0
2026-06-27 14:47:31 [debug    ] plugin_registered              plugin=sast version=0.3.0
2026-06-27 14:47:31 [debug    ] plugin_loaded                  name=sast version=0.3.0
2026-06-27 14:47:31 [debug    ] plugin_registered              plugin=sbom version=1.0.0
2026-06-27 14:47:31 [debug    ] plugin_loaded                  name=sbom version=1.0.0
2026-06-27 14:47:31 [debug    ] plugin_registered              plugin=secrets version=0.1.0
2026-06-27 14:47:31 [debug    ] plugin_loaded                  name=secrets version=0.1.0
2026-06-27 14:47:31 [debug    ] plugin_registered              plugin=terraform version=1.0.0
2026-06-27 14:47:31 [debug    ] plugin_loaded                  name=terraform version=1.0.0
2026-06-27 14:47:31 [info     ] plugin_discovery_complete      loaded=11 plugins=['architecture', 'config_audit', 'dependencies', 'docker', 'external', 'kubernetes', 'quality', 'sast', 'sbom', 'secrets', 'terraform']
2026-06-27 14:47:31 [debug    ] plugins_ready                  count=11
2026-06-27 14:47:31 [debug    ] secrets_scan_complete found=0
2026-06-27 14:47:31 [info     ] scanner_complete               duration=0.00s findings=0 scanner=secrets
2026-06-27 14:47:31 [debug    ] dependency_scan_no_manifests   root=/home/mnvgowda/MNVProjects/codeCTO/docs/platform_qualification/fixtures/small-python-app
2026-06-27 14:47:31 [info     ] scanner_complete               duration=0.00s findings=0 scanner=dependencies
2026-06-27 14:47:31 [debug    ] rulepack_registered            pack_id=pack-v2-python rules=3 version=2.0.0
2026-06-27 14:47:31 [debug    ] rulepack_registered            pack_id=pack-v2-javascript rules=3 version=2.0.0
2026-06-27 14:47:32 [debug    ] rulepack_registered            pack_id=pack-v2-go rules=3 version=2.0.0
2026-06-27 14:47:32 [debug    ] rulepack_registered            pack_id=pack-v2-terraform rules=3 version=2.0.0
2026-06-27 14:47:32 [debug    ] rulepack_registered            pack_id=pack-v2-java rules=3 version=2.0.0
2026-06-27 14:47:32 [debug    ] rulepack_registered            pack_id=pack-v2-csharp rules=1 version=2.0.0
2026-06-27 14:47:32 [debug    ] rulepack_registered            pack_id=pack-v2-ruby rules=1 version=2.0.0
2026-06-27 14:47:32 [debug    ] rulepack_registered            pack_id=pack-v2-php rules=1 version=2.0.0
2026-06-27 14:47:32 [info     ] rulepack_load_complete         elapsed_ms=25.09 new_rules=18 packs=8 rules=18
2026-06-27 14:47:32 [debug    ] rulepack_execute_complete      findings=2
2026-06-27 14:47:32 [debug    ] sast_scan_complete             found=3
2026-06-27 14:47:32 [info     ] scanner_complete               duration=0.03s findings=3 scanner=sast
2026-06-27 14:47:32 [debug    ] quality_scan_complete found=0
2026-06-27 14:47:32 [info     ] scanner_complete               duration=0.04s findings=0 scanner=quality
2026-06-27 14:47:32 [debug    ] cache_saved                    file_count=1
2026-06-27 14:47:32 [debug    ] pipeline_stage_complete        elapsed_s=0.204 stage=scanning
2026-06-27 14:47:32 [debug    ] pipeline_stage_start           stage=correlation
2026-06-27 14:47:32 [info     ] correlation_start              total_raw_findings=3
2026-06-27 14:47:32 [info     ] correlation_complete           final_count=3 root_causes_created=0
2026-06-27 14:47:32 [info     ] correlation_stage_complete     dedup_removed=0 final=3 ignored=0 raw=3 root_causes=0
2026-06-27 14:47:32 [debug    ] pipeline_stage_complete        elapsed_s=0.004 stage=correlation
2026-06-27 14:47:32 [debug    ] pipeline_stage_start           stage=graph
2026-06-27 14:47:32 [info     ] building_knowledge_graph
2026-06-27 14:47:32 [info     ] parsing_source_ast
2026-06-27 14:47:32 [info     ] graph_stage_complete           aliases_added=0 edges=4 findings_injected=3 nodes=5
2026-06-27 14:47:32 [debug    ] pipeline_stage_complete        elapsed_s=0.507 stage=graph
2026-06-27 14:47:32 [debug    ] pipeline_stage_start           stage=enrichment
2026-06-27 14:47:32 [info     ] Resolving ownership for 3 findings...
2026-06-27 14:47:32 [debug    ] enrichment_stage: ownership resolved findings=3
2026-06-27 14:47:32 [debug    ] ownership_graph_built          owner_nodes=0 owns_edges=3 responsible_for_edges=3 team_nodes=1
2026-06-27 14:47:32 [debug    ] enrichment_stage: graph built  owner_nodes=0 owns_edges=3 responsible_for_edges=3 team_nodes=1
2026-06-27 14:47:32 [debug    ] pipeline_stage_complete        elapsed_s=0.144 stage=enrichment
2026-06-27 14:47:32 [debug    ] pipeline_stage_start           stage=risk
2026-06-27 14:47:32 [info     ] risk_stage_entrypoints         count=0
2026-06-27 14:47:32 [debug    ] ReachabilityAnalyzer: building indices…
2026-06-27 14:47:32 [debug    ] ReachabilityAnalyzer: 0 entrypoints (0 ghosts), 1 callable nodes in call graph, 1 hard gaps, 0 soft gaps, 0 ambiguous aliases
2026-06-27 14:47:32 [debug    ] Finding CC-CRY-001: no callable found at main.py:1 — UNKNOWN
2026-06-27 14:47:32 [debug    ] Finding CC-PY2-003:main.py:1: no callable found at main.py:1 — UNKNOWN
2026-06-27 14:47:32 [info     ] risk_stage_reachability        attack_paths_raw=0 findings_analyzed=3 reachable=0 unknown=3 unreachable=0
2026-06-27 14:47:32 [debug    ] risk_stage_reachability_writeback findings_written=3
2026-06-27 14:47:32 [debug    ] AttackPathBuilder: materialized 0 paths for 0 findings
2026-06-27 14:47:32 [info     ] risk_stage_attack_paths        reachable_findings=0 total_paths=0
2026-06-27 14:47:32 [debug    ] risk_attribution_report_built  owners=1 reachable=0 records=3 unreachable=0
2026-06-27 14:47:32 [info     ] risk_stage_attribution         owners=1 records=3
2026-06-27 14:47:32 [debug    ] pipeline_stage_complete        elapsed_s=0.068 stage=risk
2026-06-27 14:47:32 [info     ] pipeline_complete              elapsed_s=0.971 errors=0 stages=['discovery', 'scanning', 'correlation', 'graph', 'enrichment', 'risk']
2026-06-27 14:47:32 [info     ] Running Tech Debt Predictor...
2026-06-27 14:47:32 [info     ] Running Ownership Engine (post-pipeline pass, 3 tech-debt findings)...
2026-06-27 14:47:32 [info     ] Resolving ownership for 3 findings...
2026-06-27 14:47:32 [info     ] Running Risk Attribution Engine...
2026-06-27 14:47:32 [info     ] knowledge_graph_complete       attack_paths=0 edges=8 nodes=6
2026-06-27 14:47:32 [info     ] scores_calculated              findings_count=6 grade=A overall=87.5 quality=100.0 security=81.0
2026-06-27 14:47:32 [info     ] scan_complete                  duration=1.03s findings=6 grade=A pipeline_timings={'discovery': 0.0432, 'scanning': 0.2041, 'correlation': 0.0036, 'graph': 0.5071, 'enrichment': 0.1437, 'risk': 0.068, '_pipeline_total': 0.9707} score=87.5
2026-06-27 14:47:32 [debug    ] specialist_registered          identifier=specialist.security name='Security Specialist'
2026-06-27 14:47:32 [debug    ] specialist_registered          identifier=specialist.dependencies name='Dependencies Specialist'
2026-06-27 14:47:32 [debug    ] specialist_registered          identifier=specialist.documentation name='Documentation Specialist'
2026-06-27 14:47:32 [debug    ] specialist_registered          identifier=specialist.testing name='Testing Specialist'
2026-06-27 14:47:32 [debug    ] specialist_registered          identifier=specialist.architecture name='Architecture Specialist'
2026-06-27 14:47:32 [debug    ] specialist_registered          identifier=specialist.performance name='Performance Specialist'
2026-06-27 14:47:32 [debug    ] specialist_registered          identifier=specialist.iac name='Infrastructure-as-Code Specialist'
2026-06-27 14:47:32 [info     ] specialist_pipeline_complete   elapsed_ms=6.43 findings=6 recommendations=9 specialists=3
2026-06-27 14:47:32 [debug    ] policy_registered              category=architecture policy_id=policy.architecture
2026-06-27 14:47:32 [debug    ] policy_registered              category=dependency policy_id=policy.dependency
2026-06-27 14:47:32 [debug    ] policy_registered              category=documentation policy_id=policy.documentation
2026-06-27 14:47:32 [debug    ] policy_registered              category=testing policy_id=policy.testing
2026-06-27 14:47:32 [debug    ] policy_registered              category=license policy_id=policy.license
2026-06-27 14:47:32 [debug    ] policy_registered              category=secrets policy_id=policy.secrets
2026-06-27 14:47:32 [debug    ] policy_registered              category=iac policy_id=policy.iac
2026-06-27 14:47:32 [debug    ] policy_registered              category=runtime policy_id=policy.runtime
2026-06-27 14:47:32 [debug    ] policy_registered              category=sbom policy_id=policy.sbom
2026-06-27 14:47:32 [debug    ] policy_registered              category=ownership policy_id=policy.ownership
2026-06-27 14:47:32 [debug    ] policy_registered              category=compliance policy_id=policy.compliance
2026-06-27 14:47:32 [debug    ] policy_evaluated               elapsed_ms=0.17 policies=3 rec_id=rec.8ff529b2a0fd11b1
2026-06-27 14:47:32 [debug    ] policy_evaluated               elapsed_ms=0.08 policies=2 rec_id=rec.3994c14f75e3d392
2026-06-27 14:47:32 [debug    ] policy_evaluated               elapsed_ms=0.23 policies=3 rec_id=rec.c170157ed2fc2639
2026-06-27 14:47:32 [debug    ] policy_evaluated               elapsed_ms=0.12 policies=2 rec_id=rec.0cd7c6cd29a77060
2026-06-27 14:47:32 [debug    ] policy_evaluated               elapsed_ms=0.18 policies=3 rec_id=rec.5db5ac833da8caa6
2026-06-27 14:47:32 [debug    ] policy_evaluated               elapsed_ms=0.1 policies=2 rec_id=rec.d47d439e7db540f7
2026-06-27 14:47:32 [debug    ] policy_evaluated               elapsed_ms=0.1 policies=2 rec_id=rec.bcf3fae124b2c182
2026-06-27 14:47:32 [debug    ] policy_evaluated               elapsed_ms=0.1 policies=2 rec_id=rec.bcf3fae124b2c182
2026-06-27 14:47:32 [debug    ] policy_evaluated               elapsed_ms=0.21 policies=2 rec_id=rec.bcf3fae124b2c182
2026-06-27 14:47:32 [info     ] governance_pipeline_complete   blocked=2 elapsed_ms=7.88 policies=6 recommendations=9
2026-06-27 14:47:32 [info     ] review_created                 findings=6 recommendations=9 review_id=review.b20d439884f25195 status=block
2026-06-27 14:47:32 [info     ] pipeline_start                 root_path=/home/mnvgowda/MNVProjects/codeCTO/docs/platform_qualification/fixtures/small-python-app stages=['discovery', 'scanning', 'correlation', 'graph', 'enrichment', 'risk']
2026-06-27 14:47:33 [debug    ] pipeline_stage_start           stage=discovery
2026-06-27 14:47:33 [info     ] project_discovered             files=8 frameworks=[] languages=['python'] lines=3 package_managers=['pip/poetry/pdm']
2026-06-27 14:47:33 [info     ] cache_hit                      cached_findings=3 unchanged_files=1
2026-06-27 14:47:33 [info     ] all_files_cached
2026-06-27 14:47:33 [debug    ] pipeline_stage_complete        elapsed_s=0.004 stage=discovery
2026-06-27 14:47:33 [debug    ] pipeline_stage_start           stage=scanning
2026-06-27 14:47:33 [debug    ] secrets_scan_complete found=0
2026-06-27 14:47:33 [info     ] scanner_complete               duration=0.00s findings=0 scanner=secrets
2026-06-27 14:47:33 [debug    ] quality_scan_complete found=0
2026-06-27 14:47:33 [info     ] scanner_complete               duration=0.00s findings=0 scanner=quality
2026-06-27 14:47:33 [info     ] rulepack_load_complete         elapsed_ms=0.03 new_rules=0 packs=8 rules=18
2026-06-27 14:47:33 [debug    ] rulepack_execute_complete      findings=0
2026-06-27 14:47:33 [debug    ] sast_scan_complete             found=0
2026-06-27 14:47:33 [info     ] scanner_complete               duration=0.00s findings=0 scanner=sast
2026-06-27 14:47:33 [debug    ] dependency_scan_no_manifests   root=/home/mnvgowda/MNVProjects/codeCTO/docs/platform_qualification/fixtures/small-python-app
2026-06-27 14:47:33 [info     ] scanner_complete               duration=0.00s findings=0 scanner=dependencies
2026-06-27 14:47:33 [debug    ] cache_saved                    file_count=1
2026-06-27 14:47:33 [debug    ] pipeline_stage_complete        elapsed_s=0.018 stage=scanning
2026-06-27 14:47:33 [debug    ] pipeline_stage_start           stage=correlation
2026-06-27 14:47:33 [info     ] correlation_start              total_raw_findings=3
2026-06-27 14:47:33 [info     ] correlation_complete           final_count=3 root_causes_created=0
2026-06-27 14:47:33 [info     ] correlation_stage_complete     dedup_removed=0 final=3 ignored=0 raw=3 root_causes=0
2026-06-27 14:47:33 [debug    ] pipeline_stage_complete        elapsed_s=0.001 stage=correlation
2026-06-27 14:47:33 [debug    ] pipeline_stage_start           stage=graph
2026-06-27 14:47:33 [info     ] building_knowledge_graph
2026-06-27 14:47:33 [info     ] parsing_source_ast
2026-06-27 14:47:33 [info     ] graph_stage_complete           aliases_added=0 edges=4 findings_injected=3 nodes=5
2026-06-27 14:47:33 [debug    ] pipeline_stage_complete        elapsed_s=0.006 stage=graph
2026-06-27 14:47:33 [debug    ] pipeline_stage_start           stage=enrichment
2026-06-27 14:47:33 [info     ] Resolving ownership for 3 findings...
2026-06-27 14:47:33 [debug    ] enrichment_stage: ownership resolved findings=3
2026-06-27 14:47:33 [debug    ] ownership_graph_built          owner_nodes=0 owns_edges=3 responsible_for_edges=3 team_nodes=1
2026-06-27 14:47:33 [debug    ] enrichment_stage: graph built  owner_nodes=0 owns_edges=3 responsible_for_edges=3 team_nodes=1
2026-06-27 14:47:33 [debug    ] pipeline_stage_complete        elapsed_s=0.058 stage=enrichment
2026-06-27 14:47:33 [debug    ] pipeline_stage_start           stage=risk
2026-06-27 14:47:33 [info     ] risk_stage_entrypoints         count=0
2026-06-27 14:47:33 [debug    ] ReachabilityAnalyzer: building indices…
2026-06-27 14:47:33 [debug    ] ReachabilityAnalyzer: 0 entrypoints (0 ghosts), 1 callable nodes in call graph, 1 hard gaps, 0 soft gaps, 0 ambiguous aliases
2026-06-27 14:47:33 [debug    ] Finding CC-CRY-001: no callable found at main.py:1 — UNKNOWN
2026-06-27 14:47:33 [debug    ] Finding CC-PY2-003:main.py:1: no callable found at main.py:1 — UNKNOWN
2026-06-27 14:47:33 [info     ] risk_stage_reachability        attack_paths_raw=0 findings_analyzed=3 reachable=0 unknown=3 unreachable=0
2026-06-27 14:47:33 [debug    ] risk_stage_reachability_writeback findings_written=3
2026-06-27 14:47:33 [debug    ] AttackPathBuilder: materialized 0 paths for 0 findings
2026-06-27 14:47:33 [info     ] risk_stage_attack_paths        reachable_findings=0 total_paths=0
2026-06-27 14:47:33 [debug    ] risk_attribution_report_built  owners=1 reachable=0 records=3 unreachable=0
2026-06-27 14:47:33 [info     ] risk_stage_attribution         owners=1 records=3
2026-06-27 14:47:33 [debug    ] pipeline_stage_complete        elapsed_s=0.005 stage=risk
2026-06-27 14:47:33 [info     ] pipeline_complete              elapsed_s=0.093 errors=0 stages=['discovery', 'scanning', 'correlation', 'graph', 'enrichment', 'risk']
2026-06-27 14:47:33 [info     ] Running Tech Debt Predictor...
2026-06-27 14:47:33 [info     ] Running Ownership Engine (post-pipeline pass, 3 tech-debt findings)...
2026-06-27 14:47:33 [info     ] Resolving ownership for 3 findings...
2026-06-27 14:47:33 [info     ] Running Risk Attribution Engine...
2026-06-27 14:47:33 [info     ] knowledge_graph_complete       attack_paths=0 edges=8 nodes=6
2026-06-27 14:47:33 [info     ] scores_calculated              findings_count=6 grade=A overall=87.5 quality=100.0 security=81.0
2026-06-27 14:47:33 [info     ] scan_complete                  duration=0.14s findings=6 grade=A pipeline_timings={'discovery': 0.0045, 'scanning': 0.0185, 'correlation': 0.0009, 'graph': 0.0056, 'enrichment': 0.0581, 'risk': 0.0047, '_pipeline_total': 0.0932} score=87.5
2026-06-27 14:47:33 [info     ] specialist_pipeline_complete   elapsed_ms=1.5 findings=6 recommendations=9 specialists=3
2026-06-27 14:47:33 [debug    ] policy_evaluated               elapsed_ms=0.21 policies=3 rec_id=rec.8ff529b2a0fd11b1
2026-06-27 14:47:33 [debug    ] policy_evaluated               elapsed_ms=0.19 policies=2 rec_id=rec.3994c14f75e3d392
2026-06-27 14:47:33 [debug    ] policy_evaluated               elapsed_ms=0.24 policies=3 rec_id=rec.c170157ed2fc2639
2026-06-27 14:47:33 [debug    ] policy_evaluated               elapsed_ms=0.13 policies=2 rec_id=rec.0cd7c6cd29a77060
2026-06-27 14:47:33 [debug    ] policy_evaluated               elapsed_ms=0.15 policies=3 rec_id=rec.5db5ac833da8caa6
2026-06-27 14:47:33 [debug    ] policy_evaluated               elapsed_ms=0.12 policies=2 rec_id=rec.d47d439e7db540f7
2026-06-27 14:47:33 [debug    ] policy_evaluated               elapsed_ms=0.22 policies=2 rec_id=rec.bcf3fae124b2c182
2026-06-27 14:47:33 [debug    ] policy_evaluated               elapsed_ms=0.12 policies=2 rec_id=rec.bcf3fae124b2c182
2026-06-27 14:47:33 [debug    ] policy_evaluated               elapsed_ms=0.11 policies=2 rec_id=rec.bcf3fae124b2c182
2026-06-27 14:47:33 [info     ] governance_pipeline_complete   blocked=2 elapsed_ms=6.93 policies=6 recommendations=9
2026-06-27 14:47:33 [info     ] review_created                 findings=6 recommendations=9 review_id=review.a6f338c71a8b4196 status=block
{
  "scan_id": "04746730",
  "finding_count": 6,
  "critical": 3,
  "high": 2,
  "review_id": "review.b20d439884f25195",
  "review_status": "block",
  "workspace_id": "workspace.a6f338c71a8b4196",
  "dashboard_count": 9,
  "timings_s": {
    "scan": 1.205,
    "specialist": 0.008,
    "governance": 0.009,
    "review": 0.0,
    "workspace": 0.188,
    "total": 1.41
  }
}
