2026-06-27 14:59:31 [info     ] pipeline_start                 root_path=/home/mnvgowda/MNVProjects/codeCTO/docs/platform_qualification/fixtures/monorepo-mixed stages=['discovery', 'scanning', 'correlation', 'graph', 'enrichment', 'risk']
2026-06-27 14:59:31 [debug    ] pipeline_stage_start           stage=discovery
2026-06-27 14:59:31 [info     ] project_discovered             files=15 frameworks=[] languages=['python'] lines=6 package_managers=['pip/poetry/pdm']
2026-06-27 14:59:31 [info     ] cache_hit                      cached_findings=3 unchanged_files=6
2026-06-27 14:59:31 [info     ] all_files_cached
2026-06-27 14:59:31 [debug    ] pipeline_stage_complete        elapsed_s=0.025 stage=discovery
2026-06-27 14:59:31 [debug    ] pipeline_stage_start           stage=scanning
2026-06-27 14:59:31 [debug    ] plugin_discovery_start         entry_point_count=11
2026-06-27 14:59:31 [debug    ] plugin_registered              plugin=architecture version=0.2.0
2026-06-27 14:59:31 [debug    ] plugin_loaded                  name=architecture version=0.2.0
2026-06-27 14:59:31 [debug    ] plugin_registered              plugin=config_audit version=0.2.0
2026-06-27 14:59:31 [debug    ] plugin_loaded                  name=config_audit version=0.2.0
2026-06-27 14:59:31 [debug    ] plugin_registered              plugin=dependencies version=0.2.0
2026-06-27 14:59:31 [debug    ] plugin_loaded                  name=dependencies version=0.2.0
2026-06-27 14:59:31 [debug    ] plugin_registered              plugin=docker version=1.0.0
2026-06-27 14:59:31 [debug    ] plugin_loaded                  name=docker version=1.0.0
2026-06-27 14:59:31 [debug    ] plugin_registered              plugin=external version=1.0.0
2026-06-27 14:59:31 [debug    ] plugin_loaded                  name=external version=1.0.0
2026-06-27 14:59:31 [debug    ] plugin_registered              plugin=kubernetes version=1.0.0
2026-06-27 14:59:31 [debug    ] plugin_loaded                  name=kubernetes version=1.0.0
2026-06-27 14:59:31 [debug    ] plugin_registered              plugin=quality version=0.1.0
2026-06-27 14:59:31 [debug    ] plugin_loaded                  name=quality version=0.1.0
2026-06-27 14:59:31 [debug    ] plugin_registered              plugin=sast version=0.3.0
2026-06-27 14:59:31 [debug    ] plugin_loaded                  name=sast version=0.3.0
2026-06-27 14:59:32 [debug    ] plugin_registered              plugin=sbom version=1.0.0
2026-06-27 14:59:32 [debug    ] plugin_loaded                  name=sbom version=1.0.0
2026-06-27 14:59:32 [debug    ] plugin_registered              plugin=secrets version=0.1.0
2026-06-27 14:59:32 [debug    ] plugin_loaded                  name=secrets version=0.1.0
2026-06-27 14:59:32 [debug    ] plugin_registered              plugin=terraform version=1.0.0
2026-06-27 14:59:32 [debug    ] plugin_loaded                  name=terraform version=1.0.0
2026-06-27 14:59:32 [info     ] plugin_discovery_complete      loaded=11 plugins=['architecture', 'config_audit', 'dependencies', 'docker', 'external', 'kubernetes', 'quality', 'sast', 'sbom', 'secrets', 'terraform']
2026-06-27 14:59:32 [debug    ] plugins_ready                  count=11
2026-06-27 14:59:32 [debug    ] secrets_scan_complete found=0
2026-06-27 14:59:32 [info     ] scanner_complete               duration=0.00s findings=0 scanner=secrets
2026-06-27 14:59:32 [debug    ] quality_scan_complete found=0
2026-06-27 14:59:32 [info     ] scanner_complete               duration=0.00s findings=0 scanner=quality
2026-06-27 14:59:32 [debug    ] rulepack_registered            pack_id=pack-v2-python rules=3 version=2.0.0
2026-06-27 14:59:32 [debug    ] rulepack_registered            pack_id=pack-v2-javascript rules=3 version=2.0.0
2026-06-27 14:59:32 [debug    ] rulepack_registered            pack_id=pack-v2-go rules=3 version=2.0.0
2026-06-27 14:59:32 [debug    ] rulepack_registered            pack_id=pack-v2-terraform rules=3 version=2.0.0
2026-06-27 14:59:32 [debug    ] rulepack_registered            pack_id=pack-v2-java rules=3 version=2.0.0
2026-06-27 14:59:32 [debug    ] rulepack_registered            pack_id=pack-v2-csharp rules=1 version=2.0.0
2026-06-27 14:59:32 [debug    ] rulepack_registered            pack_id=pack-v2-ruby rules=1 version=2.0.0
2026-06-27 14:59:32 [debug    ] rulepack_registered            pack_id=pack-v2-php rules=1 version=2.0.0
2026-06-27 14:59:32 [info     ] rulepack_load_complete         elapsed_ms=5.55 new_rules=18 packs=8 rules=18
2026-06-27 14:59:32 [debug    ] rulepack_execute_complete      findings=0
2026-06-27 14:59:32 [debug    ] sast_scan_complete             found=0
2026-06-27 14:59:32 [info     ] scanner_complete               duration=0.01s findings=0 scanner=sast
2026-06-27 14:59:32 [debug    ] dependency_scan_no_manifests   root=/home/mnvgowda/MNVProjects/codeCTO/docs/platform_qualification/fixtures/monorepo-mixed
2026-06-27 14:59:32 [info     ] scanner_complete               duration=0.01s findings=0 scanner=dependencies
2026-06-27 14:59:32 [debug    ] cache_saved                    file_count=6
2026-06-27 14:59:32 [debug    ] pipeline_stage_complete        elapsed_s=0.083 stage=scanning
2026-06-27 14:59:32 [debug    ] pipeline_stage_start           stage=correlation
2026-06-27 14:59:32 [info     ] correlation_start              total_raw_findings=3
2026-06-27 14:59:32 [info     ] correlation_complete           final_count=3 root_causes_created=0
2026-06-27 14:59:32 [info     ] correlation_stage_complete     dedup_removed=0 final=3 ignored=0 raw=3 root_causes=0
2026-06-27 14:59:32 [debug    ] pipeline_stage_complete        elapsed_s=0.003 stage=correlation
2026-06-27 14:59:32 [debug    ] pipeline_stage_start           stage=graph
2026-06-27 14:59:32 [info     ] building_knowledge_graph
2026-06-27 14:59:32 [info     ] parsing_source_ast
2026-06-27 14:59:32 [info     ] graph_stage_complete           aliases_added=0 edges=3 findings_injected=3 nodes=7
2026-06-27 14:59:32 [debug    ] pipeline_stage_complete        elapsed_s=0.555 stage=graph
2026-06-27 14:59:32 [debug    ] pipeline_stage_start           stage=enrichment
2026-06-27 14:59:32 [info     ] Resolving ownership for 3 findings...
2026-06-27 14:59:32 [debug    ] enrichment_stage: ownership resolved findings=3
2026-06-27 14:59:32 [debug    ] ownership_graph_built          owner_nodes=1 owns_edges=3 responsible_for_edges=3 team_nodes=0
2026-06-27 14:59:32 [debug    ] enrichment_stage: graph built  owner_nodes=1 owns_edges=3 responsible_for_edges=3 team_nodes=0
2026-06-27 14:59:32 [debug    ] pipeline_stage_complete        elapsed_s=0.081 stage=enrichment
2026-06-27 14:59:32 [debug    ] pipeline_stage_start           stage=risk
2026-06-27 14:59:32 [info     ] risk_stage_entrypoints         count=0
2026-06-27 14:59:32 [debug    ] ReachabilityAnalyzer: building indices…
2026-06-27 14:59:32 [debug    ] ReachabilityAnalyzer: 0 entrypoints (0 ghosts), 0 callable nodes in call graph, 0 hard gaps, 0 soft gaps, 0 ambiguous aliases
2026-06-27 14:59:32 [debug    ] Finding CC-CRY-001: no callable found at packages/worker/app.py:2 — UNKNOWN
2026-06-27 14:59:32 [debug    ] Finding CC-CRY-001: no callable found at packages/shared/app.py:2 — UNKNOWN
2026-06-27 14:59:32 [debug    ] Finding CC-CRY-001: no callable found at packages/api/app.py:2 — UNKNOWN
2026-06-27 14:59:32 [info     ] risk_stage_reachability        attack_paths_raw=0 findings_analyzed=1 reachable=0 unknown=1 unreachable=0
2026-06-27 14:59:32 [debug    ] risk_stage_reachability_writeback findings_written=1
2026-06-27 14:59:32 [debug    ] AttackPathBuilder: materialized 0 paths for 0 findings
2026-06-27 14:59:32 [info     ] risk_stage_attack_paths        reachable_findings=0 total_paths=0
2026-06-27 14:59:32 [debug    ] risk_attribution_report_built  owners=1 reachable=0 records=3 unreachable=0
2026-06-27 14:59:32 [info     ] risk_stage_attribution         owners=1 records=3
2026-06-27 14:59:32 [debug    ] pipeline_stage_complete        elapsed_s=0.073 stage=risk
2026-06-27 14:59:32 [info     ] pipeline_complete              elapsed_s=0.823 errors=0 stages=['discovery', 'scanning', 'correlation', 'graph', 'enrichment', 'risk']
2026-06-27 14:59:32 [info     ] Running Tech Debt Predictor...
2026-06-27 14:59:32 [info     ] Running Ownership Engine (post-pipeline pass, 3 tech-debt findings)...
2026-06-27 14:59:32 [info     ] Resolving ownership for 3 findings...
2026-06-27 14:59:33 [info     ] Running Risk Attribution Engine...
2026-06-27 14:59:33 [info     ] knowledge_graph_complete       attack_paths=0 edges=7 nodes=8
2026-06-27 14:59:33 [info     ] scores_calculated              findings_count=6 grade=A overall=86.0 quality=100.0 security=76.0
2026-06-27 14:59:33 [info     ] scan_complete                  duration=1.08s findings=6 grade=A pipeline_timings={'discovery': 0.0247, 'scanning': 0.0829, 'correlation': 0.0028, 'graph': 0.5554, 'enrichment': 0.0805, 'risk': 0.0728, '_pipeline_total': 0.8225} score=86.0
2026-06-27 14:59:33 [debug    ] specialist_registered          identifier=specialist.security name='Security Specialist'
2026-06-27 14:59:33 [debug    ] specialist_registered          identifier=specialist.dependencies name='Dependencies Specialist'
2026-06-27 14:59:33 [debug    ] specialist_registered          identifier=specialist.documentation name='Documentation Specialist'
2026-06-27 14:59:33 [debug    ] specialist_registered          identifier=specialist.testing name='Testing Specialist'
2026-06-27 14:59:33 [debug    ] specialist_registered          identifier=specialist.architecture name='Architecture Specialist'
2026-06-27 14:59:33 [debug    ] specialist_registered          identifier=specialist.performance name='Performance Specialist'
2026-06-27 14:59:33 [debug    ] specialist_registered          identifier=specialist.iac name='Infrastructure-as-Code Specialist'
2026-06-27 14:59:33 [info     ] specialist_pipeline_complete   elapsed_ms=8.17 findings=6 recommendations=9 specialists=3
2026-06-27 14:59:33 [debug    ] policy_registered              category=architecture policy_id=policy.architecture
2026-06-27 14:59:33 [debug    ] policy_registered              category=dependency policy_id=policy.dependency
2026-06-27 14:59:33 [debug    ] policy_registered              category=documentation policy_id=policy.documentation
2026-06-27 14:59:33 [debug    ] policy_registered              category=testing policy_id=policy.testing
2026-06-27 14:59:33 [debug    ] policy_registered              category=license policy_id=policy.license
2026-06-27 14:59:33 [debug    ] policy_registered              category=secrets policy_id=policy.secrets
2026-06-27 14:59:33 [debug    ] policy_registered              category=iac policy_id=policy.iac
2026-06-27 14:59:33 [debug    ] policy_registered              category=runtime policy_id=policy.runtime
2026-06-27 14:59:33 [debug    ] policy_registered              category=sbom policy_id=policy.sbom
2026-06-27 14:59:33 [debug    ] policy_registered              category=ownership policy_id=policy.ownership
2026-06-27 14:59:33 [debug    ] policy_registered              category=compliance policy_id=policy.compliance
2026-06-27 14:59:33 [debug    ] policy_evaluated               elapsed_ms=0.38 policies=3 rec_id=rec.8ff529b2a0fd11b1
2026-06-27 14:59:33 [debug    ] policy_evaluated               elapsed_ms=0.27 policies=2 rec_id=rec.3994c14f75e3d392
2026-06-27 14:59:33 [debug    ] policy_evaluated               elapsed_ms=0.28 policies=3 rec_id=rec.8ff529b2a0fd11b1
2026-06-27 14:59:33 [debug    ] policy_evaluated               elapsed_ms=0.16 policies=2 rec_id=rec.3994c14f75e3d392
2026-06-27 14:59:33 [debug    ] policy_evaluated               elapsed_ms=0.25 policies=3 rec_id=rec.8ff529b2a0fd11b1
2026-06-27 14:59:33 [debug    ] policy_evaluated               elapsed_ms=0.16 policies=2 rec_id=rec.3994c14f75e3d392
2026-06-27 14:59:33 [debug    ] policy_evaluated               elapsed_ms=0.19 policies=2 rec_id=rec.7173273ad18a7f93
2026-06-27 14:59:33 [debug    ] policy_evaluated               elapsed_ms=0.16 policies=2 rec_id=rec.1158615473337bba
2026-06-27 14:59:33 [debug    ] policy_evaluated               elapsed_ms=0.18 policies=2 rec_id=rec.bd0372c446eb280f
2026-06-27 14:59:33 [info     ] governance_pipeline_complete   blocked=3 elapsed_ms=10.91 policies=5 recommendations=9
2026-06-27 14:59:33 [info     ] review_created                 findings=6 recommendations=9 review_id=review.e11ca1deaffbda36 status=block
2026-06-27 14:59:33 [info     ] pipeline_start                 root_path=/home/mnvgowda/MNVProjects/codeCTO/docs/platform_qualification/fixtures/monorepo-mixed stages=['discovery', 'scanning', 'correlation', 'graph', 'enrichment', 'risk']
2026-06-27 14:59:33 [debug    ] pipeline_stage_start           stage=discovery
2026-06-27 14:59:33 [info     ] project_discovered             files=16 frameworks=[] languages=['python'] lines=6 package_managers=['pip/poetry/pdm']
2026-06-27 14:59:33 [info     ] cache_hit                      cached_findings=3 unchanged_files=6
2026-06-27 14:59:33 [info     ] all_files_cached
2026-06-27 14:59:33 [debug    ] pipeline_stage_complete        elapsed_s=0.006 stage=discovery
2026-06-27 14:59:33 [debug    ] pipeline_stage_start           stage=scanning
2026-06-27 14:59:33 [debug    ] secrets_scan_complete found=0
2026-06-27 14:59:33 [info     ] scanner_complete               duration=0.00s findings=0 scanner=secrets
2026-06-27 14:59:33 [debug    ] quality_scan_complete found=0
2026-06-27 14:59:33 [info     ] scanner_complete               duration=0.00s findings=0 scanner=quality
2026-06-27 14:59:33 [info     ] rulepack_load_complete         elapsed_ms=0.03 new_rules=0 packs=8 rules=18
2026-06-27 14:59:33 [debug    ] rulepack_execute_complete      findings=0
2026-06-27 14:59:33 [debug    ] sast_scan_complete             found=0
2026-06-27 14:59:33 [info     ] scanner_complete               duration=0.00s findings=0 scanner=sast
2026-06-27 14:59:33 [debug    ] dependency_scan_no_manifests   root=/home/mnvgowda/MNVProjects/codeCTO/docs/platform_qualification/fixtures/monorepo-mixed
2026-06-27 14:59:33 [info     ] scanner_complete               duration=0.00s findings=0 scanner=dependencies
2026-06-27 14:59:33 [debug    ] cache_saved                    file_count=6
2026-06-27 14:59:33 [debug    ] pipeline_stage_complete        elapsed_s=0.019 stage=scanning
2026-06-27 14:59:33 [debug    ] pipeline_stage_start           stage=correlation
2026-06-27 14:59:33 [info     ] correlation_start              total_raw_findings=3
2026-06-27 14:59:33 [info     ] correlation_complete           final_count=3 root_causes_created=0
2026-06-27 14:59:33 [info     ] correlation_stage_complete     dedup_removed=0 final=3 ignored=0 raw=3 root_causes=0
2026-06-27 14:59:33 [debug    ] pipeline_stage_complete        elapsed_s=0.001 stage=correlation
2026-06-27 14:59:33 [debug    ] pipeline_stage_start           stage=graph
2026-06-27 14:59:33 [info     ] building_knowledge_graph
2026-06-27 14:59:33 [info     ] parsing_source_ast
2026-06-27 14:59:33 [info     ] graph_stage_complete           aliases_added=0 edges=3 findings_injected=3 nodes=7
2026-06-27 14:59:33 [debug    ] pipeline_stage_complete        elapsed_s=0.011 stage=graph
2026-06-27 14:59:33 [debug    ] pipeline_stage_start           stage=enrichment
2026-06-27 14:59:33 [info     ] Resolving ownership for 3 findings...
2026-06-27 14:59:33 [debug    ] enrichment_stage: ownership resolved findings=3
2026-06-27 14:59:33 [debug    ] ownership_graph_built          owner_nodes=1 owns_edges=3 responsible_for_edges=3 team_nodes=0
2026-06-27 14:59:33 [debug    ] enrichment_stage: graph built  owner_nodes=1 owns_edges=3 responsible_for_edges=3 team_nodes=0
2026-06-27 14:59:33 [debug    ] pipeline_stage_complete        elapsed_s=0.041 stage=enrichment
2026-06-27 14:59:33 [debug    ] pipeline_stage_start           stage=risk
2026-06-27 14:59:33 [info     ] risk_stage_entrypoints         count=0
2026-06-27 14:59:33 [debug    ] ReachabilityAnalyzer: building indices…
2026-06-27 14:59:33 [debug    ] ReachabilityAnalyzer: 0 entrypoints (0 ghosts), 0 callable nodes in call graph, 0 hard gaps, 0 soft gaps, 0 ambiguous aliases
2026-06-27 14:59:33 [debug    ] Finding CC-CRY-001: no callable found at packages/worker/app.py:2 — UNKNOWN
2026-06-27 14:59:33 [debug    ] Finding CC-CRY-001: no callable found at packages/shared/app.py:2 — UNKNOWN
2026-06-27 14:59:33 [debug    ] Finding CC-CRY-001: no callable found at packages/api/app.py:2 — UNKNOWN
2026-06-27 14:59:33 [info     ] risk_stage_reachability        attack_paths_raw=0 findings_analyzed=1 reachable=0 unknown=1 unreachable=0
2026-06-27 14:59:33 [debug    ] risk_stage_reachability_writeback findings_written=1
2026-06-27 14:59:33 [debug    ] AttackPathBuilder: materialized 0 paths for 0 findings
2026-06-27 14:59:33 [info     ] risk_stage_attack_paths        reachable_findings=0 total_paths=0
2026-06-27 14:59:33 [debug    ] risk_attribution_report_built  owners=1 reachable=0 records=3 unreachable=0
2026-06-27 14:59:33 [info     ] risk_stage_attribution         owners=1 records=3
2026-06-27 14:59:33 [debug    ] pipeline_stage_complete        elapsed_s=0.010 stage=risk
2026-06-27 14:59:33 [info     ] pipeline_complete              elapsed_s=0.091 errors=0 stages=['discovery', 'scanning', 'correlation', 'graph', 'enrichment', 'risk']
2026-06-27 14:59:33 [info     ] Running Tech Debt Predictor...
2026-06-27 14:59:33 [info     ] Running Ownership Engine (post-pipeline pass, 3 tech-debt findings)...
2026-06-27 14:59:33 [info     ] Resolving ownership for 3 findings...
2026-06-27 14:59:33 [info     ] Running Risk Attribution Engine...
2026-06-27 14:59:33 [info     ] knowledge_graph_complete       attack_paths=0 edges=7 nodes=8
2026-06-27 14:59:33 [info     ] scores_calculated              findings_count=6 grade=A overall=86.0 quality=100.0 security=76.0
2026-06-27 14:59:33 [info     ] scan_complete                  duration=0.29s findings=6 grade=A pipeline_timings={'discovery': 0.0061, 'scanning': 0.0191, 'correlation': 0.0014, 'graph': 0.0106, 'enrichment': 0.0415, 'risk': 0.0095, '_pipeline_total': 0.0908} score=86.0
2026-06-27 14:59:33 [info     ] specialist_pipeline_complete   elapsed_ms=2.23 findings=6 recommendations=9 specialists=3
2026-06-27 14:59:33 [debug    ] policy_evaluated               elapsed_ms=0.31 policies=3 rec_id=rec.8ff529b2a0fd11b1
2026-06-27 14:59:33 [debug    ] policy_evaluated               elapsed_ms=0.19 policies=2 rec_id=rec.3994c14f75e3d392
2026-06-27 14:59:33 [debug    ] policy_evaluated               elapsed_ms=0.29 policies=3 rec_id=rec.8ff529b2a0fd11b1
2026-06-27 14:59:33 [debug    ] policy_evaluated               elapsed_ms=0.2 policies=2 rec_id=rec.3994c14f75e3d392
2026-06-27 14:59:33 [debug    ] policy_evaluated               elapsed_ms=0.24 policies=3 rec_id=rec.8ff529b2a0fd11b1
2026-06-27 14:59:33 [debug    ] policy_evaluated               elapsed_ms=0.19 policies=2 rec_id=rec.3994c14f75e3d392
2026-06-27 14:59:33 [debug    ] policy_evaluated               elapsed_ms=0.19 policies=2 rec_id=rec.7173273ad18a7f93
2026-06-27 14:59:33 [debug    ] policy_evaluated               elapsed_ms=0.18 policies=2 rec_id=rec.1158615473337bba
2026-06-27 14:59:33 [debug    ] policy_evaluated               elapsed_ms=0.17 policies=2 rec_id=rec.bd0372c446eb280f
2026-06-27 14:59:33 [info     ] governance_pipeline_complete   blocked=3 elapsed_ms=5.08 policies=5 recommendations=9
2026-06-27 14:59:33 [info     ] review_created                 findings=6 recommendations=9 review_id=review.421629bafd8fc74c status=block
{"scan_id": "617bf30a", "finding_count": 6, "critical": 3, "high": 3, "stored_scan_id": "617bf30a", "store_ok": true, "review_id": "review.e11ca1deaffbda36", "review_status": "block", "workspace_id": "workspace.421629bafd8fc74c", "dashboard_count": 9, "timings_s": {"scan": 1.314, "store": 0.002, "specialist": 0.013, "governance": 0.014, "review": 0.001, "workspace": 0.35, "total": 1.694}}
