ErrLookup › JuliusBrussee/caveman
JuliusBrussee/caveman
🪨 why use many token when few token do trick — Claude Code skill that cuts 65% of tokens by talking like caveman · Go · 378 source files
Analyzed at 27d5a3981a on 2026-08-15. 1215 documented errors.
| Code / Message | Type | Severity | Tags |
|---|---|---|---|
| option not found | exception | warning | telemetry, limits, validation |
cave_harness_adapter_version_invalid cave_harness_adapter_version_invalid | validation | warning | telemetry, limits, validation |
cave_harness_upstream_version_invalid cave_harness_upstream_version_invalid | validation | warning | telemetry, limits, payload-size |
cave_harness_artifact_digest_invalid cave_harness_artifact_digest_invalid | validation | warning | telemetry, limits, payload-size |
cave_harness_request_invalid cave_harness_request_invalid | validation | error | cli, stdin, limits, input-size |
cave_harness_aborted cave_harness_aborted | exception | error | storage, sqlite, environment, filesystem |
cave_vercel_terminal_failure cave_vercel_terminal_failure | exception | error | filesystem, permissions, environment, configuration |
cave_eve_terminal_${result.status} cave_eve_terminal_${result.status} | exception | error | json, parsing, input-validation, cli |
cave_harness_upstream_version_mismatch cave_harness_upstream_version_mismatch | exception | error | json, parsing, api-contract, input-validation |
cave_mastra_max_steps_invalid cave_mastra_max_steps_invalid | validation | error | json, api-contract, tools, input-validation |
cave_mastra_terminal_failure cave_mastra_terminal_failure | exception | critical | postgres, security, rls, catalog, startup |
cave_harness_incomplete_evidence cave_harness_incomplete_evidence | exception | critical | postgres, security, rls, roles, startup |
cave_vercel_usage_missing cave_vercel_usage_missing | exception | critical | postgres, security, rls, roles, least-privilege |
cave_mastra_usage_missing cave_mastra_usage_missing | exception | error | postgres, transactions, pool, startup, schema-validation |
cave_eve_usage_missing cave_eve_usage_missing | exception | error | postgres, catalog, schema-validation, permissions |
cave_eve_runtime_identity_missing cave_eve_runtime_identity_missing | exception | critical | postgres, security, rls, multi-tenancy, schema |
cave_harness_model_invalid cave_harness_model_invalid | validation | error | adapter, plan, model-id, validation |
cave_harness_model_identity_missing cave_harness_model_identity_missing | exception | error | adapter, model-id, response-contract, validation |
cave_${harness}_upstream_version_unresolvable cave_${harness}_upstream_version_unresolvable | exception | critical | adapter, version-pin, dependency-resolution, install |
cave_${harness}_upstream_version_unsupported cave_${harness}_upstream_version_unsupported | exception | error | adapter, version-pin, dependency-management |
cave_${harness}_upstream_version_mismatch cave_${harness}_upstream_version_mismatch | exception | error | adapter, version-pin, identity, stale-config |
cave_harness_wire_contract_invalid cave_harness_wire_contract_invalid | validation | error | adapter, serialization, wire-contract, validation |
cave_harness_signal_invalid cave_harness_signal_invalid | validation | error | adapter, abort-signal, validation, testing |
cave_harness_transform_not_evaluated cave_harness_transform_not_evaluated | exception | error | adapter, evidence, transforms, plan-parity |
cave_harness_unknown_transform cave_harness_unknown_transform | exception | error | adapter, evidence, transforms, plan-parity |
cave_breaker_threshold_invalid cave_breaker_threshold_invalid | validation | error | breakers, configuration, validation, typescript |
| cave_breaker_retry_requires_budget | exception | error | breakers, budget, configuration, retry |
| cave_breaker_retry_spend_invalid | exception | error | breakers, budget, retry, configuration |
| cave_breaker_retry_backoff_invalid | exception | error | breakers, retry, configuration, validation |
| cave_retry_accounting_invalid | exception | error | retry, accounting, invariant, breaker, usage |
| cave_budget_denomination_ambiguous | exception | error | budget, validation, config, denomination |
| cave_budget_max_invalid | exception | error | budget, validation, numbers, config |
| cave_budget_initial_invalid | exception | error | budget, validation, initial-spend, numbers |
| cave_budget_output_floor_invalid | exception | error | budget, validation, output-tokens, config |
| cave_budget_on_exhausted_invalid | exception | error | budget, validation, enum, config |
| cave_budget_release_invalid | exception | error | budget, tranche, validation, numbers |
| cave_budget_release_reason_required | exception | error | budget, tranche, audit, validation |
| cave_budget_revoked | exception | error | budget, lifecycle, cancellation, tranche |
| cave_budget_cap_breached | exception | error | budget, breach, lifecycle, tranche |
| cave_budget_reservation_double_settle | exception | error | budget, reservation, invariant, double-settle, accounting |
| cave_budget_controller_unbound | exception | error | budget, lifecycle, controller, binding |
| cave_budget_controller_in_use | exception | error | budget, lifecycle, controller, concurrency, binding |
| caveman build: dataResidency is not enforced yet; refusing t | exception | error | build, config, compliance, data-residency, unsupported-feature |
| caveman build: requiredFixturePassRate must be in (0,1] | exception | error | build, config, validation, evals, numbers |
| caveman build: qualityRetention must be in (0,1] | exception | error | build, config, validation, quality, numbers |
| caveman build: maxSearchCostUsd must be positive | exception | error | |
| cave_host_sandbox_lock_ineligible | exception | error | |
| caveman build: seeds must be a non-empty unique set | exception | error | |
| caveman build: generated no candidate plans | exception | error | |
| caveman build: runner timeout must be a positive integer | exception | error | |
| cave_invalid_lock:shape | exception | error | |
| cave_invalid_lock:${integrity.join(",")} | exception | error | |
| caveman build: agent definition contains an unsupported valu | exception | error | |
| caveman build: cyclic agent definition is not lockable | exception | error | |
| cave_execution_authorization_ambiguous | exception | error | |
| cave_claude_candidate_execution_unavailable | exception | error | |
| cave_claude_locked_execution_unavailable | exception | error | |
| cave_claude_memory_bridge_unavailable | exception | error | |
| cave_claude_subagent_bridge_unavailable | exception | error | |
| cave_claude_tool_contract_unsupported:${unsupportedTool.name | exception | error | |
| cave_claude_max_turns_invalid | exception | error | |
| cave_claude_max_budget_invalid | exception | error | |
| cave_claude_tool_schema_unsupported:${item.name} | exception | error | |
| cave_claude_tool_result_invalid:${item.name} | exception | error | |
| cave_harness_upstream_version_mismatch | exception | error | claude-sdk, version-pinning, harness, determinism |
| cave_budget_denomination_unavailable | exception | error | budget, credentials, claude-sdk, fail-closed |
| cave_claude_header_invalid | exception | error | headers, security, input-validation, claude-sdk |
| cave_claude_model_required | exception | error | configuration, model-selection, claude-sdk, env |
| cave_claude_provider_unsupported | exception | error | configuration, model-selection, provider-mismatch |
| caveman agent: invalid .caveman/provider.json | exception | error | configuration, json, filesystem |
| cave_claude_output_budget_too_small_for_reasoning | exception | error | configuration, reasoning, token-budget, claude-sdk |
| cave_claude_reasoning_capability_unknown:${model} | exception | error | model-selection, reasoning, fail-closed, claude-sdk |
| cave_execution_authorization_private | exception | error | api-misuse, security, authorization, options |
| unknown command ${JSON.stringify(command)}; run caveman-agen | exception | warning | cli, usage, arguments |
| usage: caveman-agent doctor [--json] | exception | warning | cli, usage, doctor |
| probe returned false | exception | error | sandbox, doctor, environment, security |
| lock disappeared during validation | exception | warning | doctor, race-condition, lock, filesystem |
| empty version output | exception | error | cli, environment, subprocess, diagnostics |
| register requires CAVE_CONTROL_URL, CAVE_TOKEN, and CAVE_PRO | exception | error | cli, environment, registration, env |
| cave_stale_lock:registration | exception | error | registration, lock, build-hash, stale-state |
| registration failed: HTTP ${response.status} | exception | error | registration, network, http, authentication |
| caveman build: config must export defineBuild() | exception | error | configuration, build, exports, typescript |
| cave_sandbox_conformance_failed | exception | critical | build, sandbox, environment, security, fail-closed |
| cave_privacy_conformance_failed | exception | error | privacy, context-ir, build, validation |
| cave_context_body_missing:${segment.id} | exception | error | context-ir, build, internal-consistency |
| cave_build_lock_missing: approve required evals, then run np | exception | error | build, lock, cli, workflow |
| cave_stale_lock:${checked.stale.join(",")}: run npm run buil | exception | error | build, lock, drift, cli |
| caveman build: config must use strict lock and required sand | exception | error | config, build, sandbox, cli |
| cave_stale_lock:entry | exception | error | lock, drift, config, dev |
| cave_stale_lock:dev_snapshot | exception | error | lock, drift, dev, hot-reload |
| registry output has no valid registry_sha256 | exception | error | engine, registry, external-process, parsing |
| registry output has no capabilities | exception | error | engine, registry, external-process, setup |
| registry output has invalid capability | exception | error | engine, registry, parsing, validation |
| cave_transform_registry_unavailable: run caveman setup or se | exception | error | engine, setup, environment, external-process |
| cave_fixture_terminal_evidence_missing | exception | error | eval, evidence, build, wrapper |
| cave_live_eval_sandbox_profile_missing | exception | error | eval, sandbox, build, validation |
| cave_live_eval_sandbox_profile_escapes_root | exception | error | sandbox, security, path-traversal, eval |
| cave_live_eval_sandbox_profile_invalid | exception | error | sandbox, validation, eval, schema |
| caveman build: invalid .caveman/provider.json | exception | error | config, json, provider, build |
| caveman build: set CAVE_MODEL when zero or multiple provider | exception | error | environment, provider, model-selection, build |
| caveman agent: entry must export default agent() | exception | error | agent-definition, esm, config, build |
| caveman-code: not a file: ${input.path} | exception | warning | tools, coding-agent, filesystem, model-input |
| caveman-code: neither rg nor grep is available | exception | error | environment, tooling, spawn-failure, search |
| caveman-code: host command shell is not available | exception | error | environment, shell, spawn-failure, platform |
| caveman-code: old_string and new_string are identical | exception | warning | validation, edit, no-op, tool-input |
| caveman-code: old_string not found in ${input.path} | exception | error | edit, tool-input, mismatch, whitespace |
| caveman-code: old_string appears ${occurrences} times in ${i | exception | error | edit, tool-input, ambiguity, unique-anchor |
| caveman-code: path escapes the workspace: ${candidate} | exception | critical | security, path-traversal, symlink, sandbox, containment |
| caveman-code: model must use provider/model format | exception | error | config, model-id, env, validation |
| caveman-code: no supported provider credential found; set AN | exception | error | config, credentials, env, auth |
| caveman-code: multiple provider credentials found; set CAVE_ | exception | error | config, credentials, env, ambiguity |
| caveman-code: no tool output recorded yet to prove recovery | exception | error | compression, recovery-proof, lifecycle, session-state |
cave_compaction_option_invalid cave_compaction_option_invalid | validation | error | config, validation, compaction, numeric |
cave_context_ir_invalid cave_context_ir_invalid | validation | error | serialization, validation, schema-version, wire-format |
| caveman agent: file source escapes project root | exception | critical | security, path-traversal, file-source, containment |
| caveman agent: value is not canonically serializable | exception | error | serialization, bigint, provenance, validation |
cave_agent_definition_invalid cave_agent_definition_invalid | validation | error | validation, agent-definition, graph, tool-input |
cave_subagent_depth_limit cave_subagent_depth_limit | validation | error | subagent, recursion, depth-limit, graph |
cave_host_sandbox_nested_under_required cave_host_sandbox_nested_under_required | validation | critical | security, sandbox, policy, subagent, containment |
cave_tool_definition_invalid cave_tool_definition_invalid | validation | error | validation, tool-definition, factory, trust |
cave_duplicate_tool_name cave_duplicate_tool_name | validation | error | validation, tool-definition, naming, conflict |
| cave_reserved_tool_name:${declared.name} | validation | error | validation, naming, agent-graph, reserved-prefix |
| cave_untrusted_tool_definition:${declared.name} | validation | error | validation, security, factory, symbols, agent-graph |
| caveman agent: dev ${kind} escapes project root | exception | error | dev, filesystem, path-traversal, staging |
| caveman agent: dev ${kind} symlink escapes project root | exception | error | dev, filesystem, symlink, path-traversal, staging |
cave_harness_build_mismatch cave_harness_build_mismatch | validation | error | lockfile, version-drift, harness, reproducibility |
cave_harness_agent_mismatch cave_harness_agent_mismatch | validation | error | lockfile, agent-identity, validation |
cave_harness_plan_mismatch cave_harness_plan_mismatch | validation | error | lockfile, plan, reproducibility, drift |
cave_harness_plan_digest_mismatch cave_harness_plan_digest_mismatch | validation | error | lockfile, integrity, sha256, plan |
cave_harness_context_ir_mismatch cave_harness_context_ir_mismatch | validation | error | lockfile, context-ir, drift, reproducibility |
cave_harness_model_invalid cave_harness_model_invalid | validation | error | model, format, validation, harness |
cave_provider_identity_missing cave_provider_identity_missing | validation | error | usage, provider, validation, billing |
cave_provider_model_identity_mismatch cave_provider_model_identity_mismatch | validation | error | usage, model-identity, provider, validation |
cave_provider_usage_incomplete cave_provider_usage_incomplete | validation | error | usage, tokens, validation, billing |
| cave_provider_usage_unpriced | exception | error | pricing, catalog, budget, usage |
| cave_provider_cost_mismatch | exception | error | pricing, cost, validation, billing |
| caveman agent: invalid agent id ${JSON.stringify(options.id) | validation | error | validation, naming, agent-id |
| caveman agent: duplicate tool name | validation | error | validation, naming, tools |
| caveman agent: unknown sandbox mode ${JSON.stringify(sandbox | validation | error | validation, sandbox, configuration |
| caveman agent: tool prefix cave_ is reserved by framework ($ | validation | error | validation, naming, reserved-prefix, tools |
| caveman agent: subagent maxInputChars must be a positive int | validation | error | validation, subagent, configuration, limits |
| caveman agent: subagent maxCalls must be a positive integer | validation | error | subagent, validation, configuration, typescript |
| caveman agent: subagent maxCostUsd must be positive | validation | error | subagent, validation, cost-limits, configuration |
| caveman agent: subagent maxTokens must be a positive integer | validation | error | subagent, validation, token-limits, configuration |
| caveman agent: subagent maxContextTokens must be a positive | validation | error | subagent, validation, context-window, configuration |
| cave_subagent_framework_runner_required | exception | error | subagent, runtime, framework-integration, architecture |
| cave_memory_tenant_invalid | validation | error | memory, validation, path-traversal, security, multi-tenant |
| cave_memory_agent_invalid | validation | error | memory, validation, path-traversal, security, agent-ids |
| cannot safely launch Windows command shim: ${executable} | exception | error | windows, security, process-spawn, command-injection, validation |
| cannot safely launch non-Node Windows command shim: ${execut | exception | error | windows, security, process-spawn, command-injection, npm |
| Windows command shim target is missing: ${script} | exception | error | windows, process-spawn, npm, installation, stale-shim |
| caveman agent: file path is required | validation | error | validation, file-artifacts, api-misuse, typescript |
| caveman agent: invalid tool name ${JSON.stringify(options.na | validation | error | validation, tool-names, api-misuse, llm-compat |
| caveman agent: unknown tool effect ${JSON.stringify(options. | validation | error | validation, tool-effects, api-misuse, typescript |
| caveman agent: unknown tool result policy ${JSON.stringify(r | validation | error | validation, result-policy, api-misuse, versioning |
| caveman agent: tool timeoutMs must be a positive integer | validation | error | validation, timeout, tool-config, api-misuse |
| caveman agent: Standard Schema cannot emit draft-07 input JS | exception | error | json-schema, standard-schema, schema-conversion, compatibility |
| caveman agent: Standard Schema needs inputJSONSchema or Stan | exception | error | json-schema, standard-schema, api-misuse, schema-conversion |
| caveman agent: Standard Schema emitted invalid input JSON Sc | validation | error | json-schema, standard-schema, validation, api-misuse |
| cave_tool_input_schema_mismatch:${options.name} | validation | error | runtime, schema-mismatch, llm-output, validation, tool-calls |
| caveman agent: tool Standard Schema must implement version 1 | validation | error | standard-schema, validation, versioning, api-contract |
| caveman agent: tool Standard JSON Schema converter is invali | validation | error | validation, schema, tool-definition, standard-schema |
| cave_memory_ttl_invalid | validation | error | validation, memory, ttl, config |
| caveman agent: invalid memory namespace ${JSON.stringify(opt | validation | error | validation, memory, namespace, config |
| caveman agent: memory recallBudget must be a non-negative in | validation | error | validation, memory, numeric, config |
| caveman agent: memory ttl must use positive m, h, or d durat | validation | error | validation, memory, ttl, config |
| cave_memory_provenance_unsupported: only "local" memory is s | validation | error | memory, provenance, unsupported-feature, fail-closed |
| cave_memory_consent_unsupported: only "local_only" consent i | validation | error | memory, consent, unsupported-feature, fail-closed |
| caveman agent: context id is required | validation | error | validation, context, required-field |
| caveman agent: context ttlTurns must be a positive integer | validation | error | validation, context, numeric |
| caveman agent: artifact maxInlineTokens must be a non-negati | validation | error | validation, artifact, numeric, tokens |
| caveman agent: output maxTokens must be a positive integer | validation | error | validation, output, numeric, tokens |
| caveman agent: eval id is required | validation | error | validation, eval, required-field |
| caveman agent: unknown grader ${(grader as { type: string }) | validation | error | validation, eval, grader, enum |
| caveman agent: latency guardrail requires positive integer p | validation | error | validation, eval, guardrail, latency, numeric |
| caveman agent: error-rate guardrail max must be in [0,1] | validation | error | validation, eval, guardrail, numeric |
| caveman agent: live eval tools require an explicit sandbox | validation | error | eval, sandbox, live-tools, fail-closed |
cave_sandbox_credential_env_not_allowlisted cave_sandbox_credential_env_not_allowlisted | validation | error | sandbox, credentials, security, allowlist, fail-closed |
cave_sandbox_credential_capability_ambiguous cave_sandbox_credential_capability_ambiguous | validation | error | sandbox, credentials, validation, security |
cave_sandbox_credential_missing cave_sandbox_credential_missing | validation | critical | sandbox, credentials, environment, fail-closed |
| caveman agent: run maxCostUsd must be positive | validation | error | budget, validation, run-options |
cave_tool_sandbox_entry_required cave_tool_sandbox_entry_required: sandboxed tools need entryPath | validation | error | sandbox, harness, validation |
cave_claude_subagent_bridge_unavailable cave_claude_subagent_bridge_unavailable | exception | error | harness, subagents, tools |
cave_subagent_invocation_limit_invalid cave_subagent_invocation_limit_invalid | validation | error | subagents, validation, run-options |
cave_subagent_concurrency_limit_invalid cave_subagent_concurrency_limit_invalid | validation | error | subagents, concurrency, validation |
cave_budget_conflicting_cap cave_budget_conflicting_cap | validation | error | budget, conflicting-options, validation |
cave_run_deadline_invalid cave_run_deadline_invalid | validation | error | deadline, validation, run-options |
cave_subagent_depth_limit_invalid cave_subagent_depth_limit_invalid | validation | error | subagents, validation, run-options |
cave_budget_controller_without_budget cave_budget_controller_without_budget | validation | error | budget, validation, run-options |
cave_budget_denomination_unavailable cave_budget_denomination_unavailable | validation | error | budget, catalog, pricing, usd |
cave_cache_volatile_stable_slot cave_cache_volatile_stable_slot | validation | error | cache, prompt-stability, plans |
| cave_${field}_invalid | validation | error | validation, limits, run-options |
cave_nested_usage_incomplete cave_nested_usage_incomplete | exception | error | usage, subagents, accounting, fail-closed |
cave_reasoning_usage_unavailable cave_reasoning_usage_unavailable | exception | error | plans, reasoning, usage |
cave_reasoning_budget_exceeded cave_reasoning_budget_exceeded | exception | error | plans, reasoning, budget |
cave_run_stopped cave_run_stopped | exception | warning | limits, stop-condition, model-calls |
cave_budget_escalation_result_invalid cave_budget_escalation_result_invalid | validation | error | budget, escalation, callbacks, validation |
cave_subagent_spend_evidence_incomplete cave_subagent_spend_evidence_incomplete | exception | error | spend, reservations, accounting, abort |
cave_incomplete_evidence cave_incomplete_evidence: Pi emitted no final assistant message | exception | error | provider, empty-response, evidence |
cave_provider_terminal cave_provider_terminal_${finalMessage.stopReason} | exception | error | provider, abort, terminal |
cave_output_schema_invalid_json cave_output_schema_invalid_json | validation | error | output-schema, json, structured-output |
cave_output_schema_mismatch cave_output_schema_mismatch | validation | error | output-schema, typebox, validation |
| cave_tool_sandbox_entry_escapes_root | exception | error | sandbox, filesystem, symlink, security |
| cave_tool_sandbox_source_escapes_root | exception | error | sandbox, filesystem, symlink, source-graph, security |
| cave_${slot}_budget_exceeded | exception | error | budget, context, efficiency-plan |
| cave_context_segment_missing:${id} | exception | error | context, lowering, configuration |
| cave_context_body_missing:${id} | exception | error | context, lowering, bodies, configuration |
| cave_unknown_transform:${route.transform_id} | exception | error | transforms, plan, version-skew |
| cave_plan_route_unmatched:${route.segment_id ?? route.segmen | exception | error | plan, transforms, version-skew |
| cave_context_body_missing:${segment.id} | exception | error | transforms, bodies, lowering |
| engine_changed_bytes_without_recovery | exception | error | engine, compression, recovery, version-skew |
| cave_unknown_transform:${transformID} | exception | error | engine, transforms, validation |
| cave_recovery_handle_out_of_scope | exception | warning | recovery, tool, scope, model-behavior |
| cave_tool_search_query_required | exception | error | |
| cave_tool_search_result_limit | exception | error | |
| cave_memory_shared_backend_unavailable | exception | error | |
| cave_memory_value_invalid | exception | error | |
| caveman agent: pinned model must use provider/model format | exception | error | |
| caveman agent: unknown model ${JSON.stringify(requested)} | exception | error | |
| caveman agent: no supported provider credential found | exception | error | |
| caveman agent: multiple provider credentials found; set CAVE | exception | error | |
| caveman agent: baseline model unavailable: ${provider}/${id} | exception | error | |
| caveman agent: invalid .caveman/provider.json | exception | error | |
| cave_transform_trace_limit | exception | error | |
| cave_tool_result_limit | exception | error | |
| cave_tool_result_inline_limit | exception | error | |
| cave_tool_result_requires_recovery | exception | error | |
| cave_tool_result_recovery_mismatch | exception | error | |
| tool_schema_transform_invalid:${segmentID} | exception | error | |
| cave_context_segment_missing:tool.${definition.name} | exception | error | |
| cave_context_body_missing:tool.${definition.name} | exception | error | |
| cave_tool_schema_invalid:${definition.name} | exception | error | |
| cave_subagent_invocation_limit | exception | error | subagent, limits, runtime, fan-out |
| cave_subagent_concurrency_limit | exception | error | subagent, concurrency, limits, runtime |
| cave_subagent_runtime_missing | exception | error | subagent, tool-definition, internal-invariant |
| cave_subagent_arguments_invalid | exception | error | subagent, arguments, validation, model-output |
| cave_sandbox_os_network_isolation_unavailable | exception | error | sandbox, platform, windows, network |
| caveman build: unresolved source dependency ${JSON.stringify | exception | error | build, dependencies, resolution, esm |
| caveman build: unresolved relative source import ${JSON.stri | exception | error | build, imports, file-not-found, resolution |
| caveman build: source graph symlink escapes project root | exception | error | build, symlink, filesystem, containment |
| caveman build: imported source escapes project root | exception | error | build, imports, containment, monorepo |
| package not found | exception | error | build, dependencies, pnpm, resolution |
| caveman build: unresolved package dependency ${JSON.stringif | exception | error | build, dependencies, install, package-closure |
| caveman build: package artifact symlink is not lockable: ${J | exception | error | build, symlink, node-modules, package-closure |
| invalid scoped package | exception | error | build, specifier, scoped-package, validation |
| invalid package | exception | error | build, specifier, path-alias, imports |
| caveman build: source module syntax is not lexable in ${JSON | exception | error | build, syntax-error, es-module-lexer, parsing |
| caveman build: computed source dependency is not lockable in | exception | error | build, dynamic-import, static-analysis, lockability |
| caveman build: aliased source loader is not lockable in ${JS | exception | error | build, commonjs, require, static-analysis, lockability |
cave_sandbox_failure_not_serializable cave_sandbox_failure_not_serializable | error_code | error | sandbox, worker, serialization, errors |
cave_sandbox_input_limit cave_sandbox_input_limit | error_code | error | sandbox, worker, limits, payload-size |
cave_sandbox_request_invalid cave_sandbox_request_invalid | error_code | error | sandbox, worker, protocol, validation, version-drift |
cave_sandbox_agent_export_missing cave_sandbox_agent_export_missing | error_code | error | sandbox, agent-definition, esm-import, cave |
cave_sandbox_definition_mismatch cave_sandbox_definition_mismatch | error_code | error | sandbox, integrity, sha256, hot-reload, cave |
cave_sandbox_unknown_subagent cave_sandbox_unknown_subagent | error_code | error | sandbox, subagent, delegation, cave |
cave_sandbox_subagent_definition_invalid cave_sandbox_subagent_definition_invalid | error_code | error | sandbox, subagent, type-safety, cave |
cave_sandbox_subagent_cycle cave_sandbox_subagent_cycle | error_code | error | sandbox, cycle, subagent, graph, cave |
cave_sandbox_unknown_tool cave_sandbox_unknown_tool | error_code | error | sandbox, tool-resolution, cave |
cave_sandbox_tool_definition_mismatch cave_sandbox_tool_definition_mismatch | error_code | error | sandbox, integrity, sha256, cave |
cave_sandbox_side_effect_denied cave_sandbox_side_effect_denied | error_code | error | sandbox, side-effects, policy, cave |
| ${key} is required | validation | warning | mcp, validation, arguments, cli |
| filters must be an object | validation | warning | mcp, validation, filters, traces |
| unknown trace filter(s): ${unknown.sort().join(", ")} | validation | warning | mcp, validation, filters, traces |
| filter ${key} must be a non-empty array of non-empty strings | validation | warning | mcp, validation, filters, arrays |
| filter status_class values must be 2xx, 4xx, or 5xx | validation | warning | mcp, validation, filters, status-codes |
| filter ${key} must be a finite number | validation | warning | mcp, validation, filters, numbers |
| filter ${key} must be a boolean | validation | warning | mcp, validation, filters, booleans |
| filter monitor must be an object | validation | warning | mcp, validation, filters, monitor |
| filter monitor has unknown key(s): ${monitorUnknown.sort().j | validation | warning | mcp, validation, filters, monitor |
| filter monitor.verdict must be pass, fail, or error | validation | warning | mcp, validation, filters, enum, monitor |
| ${key} must be one of ${values.join(", ")} | validation | warning | mcp, validation, enum, traces |
| ${key} must be a string | validation | warning | mcp, validation, dates, traces |
| page_size must be an integer from 1 to 500 | validation | error | |
| sort must be an object | validation | error | |
| sort has unknown key(s): ${unknown.sort().join(", ")} | validation | error | |
| cursor must be an object | validation | error | |
| cursor has unknown key(s): ${unknown.sort().join(", ")} | validation | error | |
| cursor.${key} must be a string | validation | error | |
| unknown argument(s): ${unknown.sort().join(", ")} | validation | error | |
| unknown report: ${report} | validation | error | |
| unknown experiment read action: ${action} | validation | error | |
| unknown tool: ${name} | validation | error | |
| source does not exist: ${input} | exception | error | |
| source file must be named SKILL.md | exception | error | |
| SKILL.md must be 1..262144 bytes | exception | error | |
| SKILL.md must be valid UTF-8 | exception | error | |
| SKILL.md contains credential-shaped material | exception | error | |
| SKILL.md needs closed YAML frontmatter | exception | error | |
| unknown import option ${flag} | exception | error | |
| CAVE_SETUP_TIMEOUT must be a positive integer (got ${JSON.st | exception | error | |
| no prebuilt binary for ${os}/${arch} — supported: darwin/arm | exception | error | |
| binary download stalled after ${seconds}s — nothing installe | exception | error | |
| binary download unreachable — agents still launch; traffic i | exception | warning | network, install, download, degraded-mode |
| signature check failed for checksums.txt — refusing to insta | exception | critical | security, signature, install, supply-chain |
| signature check failed for ${artifact} — refusing to install | exception | error | install, platform-support, checksum |
| cannot read ${agent} agent-native bundle journal: ${(error a | exception | error | journal, install, corruption, agent-native |
| cannot read pending ${agent} agent-native bundle journal: ${ | exception | error | journal, recovery, install, agent-native |
| cannot read pending ${agent} agent-native removal journal: $ | exception | error | journal, recovery, uninstall, agent-native |
| could not install caveman-cloud MCP for ${agent} | exception | error | mcp, install, config, agent-native |
| could not remove caveman-cloud MCP for ${agent} | exception | error | mcp, uninstall, config, agent-native |
| ${skill.file} changed during interrupted setup; refusing des | exception | error | recovery, skills, safety, agent-native |
| ${agent} caveman-cloud MCP changed during interrupted setup; | exception | error | recovery, mcp, safety, agent-native |
| ${skill.file} changed during interrupted removal; refusing d | exception | error | recovery, skills, uninstall, safety |
| ${agent} caveman-cloud MCP changed during interrupted remova | exception | error | recovery, mcp, uninstall, safety |
| ${profile.display_name} not found on PATH | exception | error | install, path, preflight, agent-native |
| ${file} already exists with non-canonical content; refusing | exception | error | skills, install, safety, preflight |
| ${file} changed after setup; refusing to overwrite user skil | exception | error | skills, upgrade, safety, agent-native |
| Claude caveman-cloud MCP exists but is not Caveman-journaled | exception | error | mcp, claude, preflight, safety |
| Claude caveman-cloud MCP changed after setup; refusing to ov | exception | error | mcp, claude, preflight, safety |
| [mcp_servers.caveman-cloud] exists but is not Caveman-journa | exception | error | mcp, codex, preflight, safety |
| ${agent} native integration postflight is ${status.state} | exception | error | postflight, agent-native, setup, verification |
| ${agent} caveman-cloud MCP postflight mismatch | exception | error | postflight, mcp, agent-native, config-drift |
| ${agent} caveman-cloud MCP registration failed exact postfli | exception | error | postflight, mcp, agent-native, path-resolution |
| ${skill.file} failed skill postflight | exception | error | postflight, skills, integrity, sha256 |
| ${skill.file} changed after setup; refusing destructive bund | exception | error | removal, safety-gate, skills, destructive |
| ${agent} caveman-cloud MCP changed after setup; refusing des | exception | error | removal, safety-gate, mcp, config-drift |
| agent-native bundle removal failed: ${(error as Error).messa | exception | critical | removal, rollback-failure, recovery, filesystem |
| agent-native bundle removal failed: ${(error as Error).messa | exception | error | removal, rollback, recoverable |
| agent-native setup failed: ${(error as Error).message}${roll | exception | error | setup, rollback, agent-native, transaction |
| Cave Build lock exists but caveman-agent checker is unavaila | exception | error | cave-build, lock, spend-guard, binary-missing |
| Cave Build lock is stale or invalid; refusing Claude launch | exception | error | cave-build, lock, stale, spend-guard |
| Cave Build lock changed during validation; refusing Claude l | exception | error | cave-build, toctou, race-condition, lock |
| Cave Build is Pi-specific; refusing to attach its identity t | exception | error | cave-build, harness-identity, claude, lock |
| Claude-specific Cave Build execution is unavailable until mo | exception | error | cave-build, feature-gate, unsupported, claude |
| openclaw fresh config cannot route through Caveman without $ | exception | error | openclaw, api-key, environment, fail-fast |
| ${path} hooks must be a JSON object; refusing to overwrite i | exception | error | hooks, json-schema, settings, refuse-overwrite |
| ${path} hooks.${event} must be an array; refusing to overwri | exception | error | hooks, json-schema, settings, refuse-overwrite |
| ${path} is not a JSON object | exception | error | json, config, schema, parse |
| caveman-mcp not found; run `caveman setup --install` | exception | error | binary-missing, setup, mcp, go-binaries |
| caveman-proxy not found; run `caveman setup --install` | exception | error | binary-missing, proxy, local-mode, setup |
| caveman-proxy ${probe.version} lacks current native_runtime_ | exception | error | binary, version, installation, proxy, capability-check |
| ${settingsPath} env must be a JSON object; refusing to overw | exception | error | config, json, claude, shape-validation, refuse-overwrite |
| ${mcpPath} mcpServers must be a JSON object; refusing to ove | exception | error | config, json, claude, mcp, shape-validation, refuse-overwrite |
| existing Gemini Caveman routing block is corrupted; run `cav | exception | error | config, gemini, markers, corruption, env-file |
| managed Gemini CLI routing is unsupported because Gemini CLI | exception | error | gemini, gateway, managed-mode, unsupported-operation, credentials |
| ${settingsPath} mcpServers must be a JSON object; refusing t | exception | error | config, json, gemini, mcp, shape-validation, refuse-overwrite |
| ${configPath} provider must be a JSON object; refusing to ov | exception | error | config, json, opencode, shape-validation, refuse-overwrite |
| ${configPath} mcp must be a JSON object; refusing to overwri | exception | error | config, json, opencode, mcp, shape-validation, refuse-overwrite |
| ${pluginPath} already exists and is not Caveman-owned; refus | exception | error | opencode, plugin, ownership, refuse-overwrite, filesystem |
| existing Aider Caveman block is unjournaled; run `caveman do | exception | error | aider, yaml, markers, journal, corruption |
| Aider config has duplicate openai-api-base keys; refusing un | exception | error | aider, yaml, duplicate-keys, merge-safety |
| Aider config has duplicate read keys; refusing unsafe merge | exception | error | aider, yaml, duplicate-keys, merge-safety |
| Aider config uses inline/scalar read; use block-list form be | exception | error | aider, yaml, inline-scalar, merge-safety |
| ${corePath} exists and is not exact Caveman-owned content; r | exception | error | aider, ownership, managed-file, refuse-overwrite, version-drift |
| existing Codex Caveman block is corrupted; run `caveman doct | exception | error | codex, toml, markers, corruption, merge-safety |
| existing Hermes Caveman native block is unjournaled; run `ca | exception | error | hermes, yaml, markers, journal, corruption |
| Hermes model provider/base_url keys are duplicated; refusing | exception | error | hermes, yaml, duplicate-keys, merge-safety |
| Hermes plugins.enabled uses inline YAML; refusing unsafe nat | exception | error | hermes, yaml, inline-scalar, merge-safety |
| ${path} already exists; refusing to overwrite an unjournaled | exception | error | hermes, plugin, ownership, refuse-overwrite, filesystem |
| integration change already running for ${agent} | exception | warning | concurrency, locking, integrations, stale-lock |
| conflicting committed and pending integration journals for $ | exception | error | recovery, journal, cli, state-corruption |
| ${operation.file} changed during interrupted ${agent} instal | exception | error | recovery, integrity, hashing, cli |
| hook payload too large | exception | error | limits, hooks, stdin, payload-size |
| cannot safely launch Windows command shim: ${command} | exception | error | windows, security, cli, shim |
| cannot safely launch non-Node Windows command shim: ${comman | exception | error | windows, shim, cli, security |
| Windows command shim target is missing: ${script} | exception | error | windows, shim, missing-file, cli |
| --provider requires a value | exception | error | cli, arguments, validation |
| unknown option ${value} | exception | error | cli, arguments, validation |
| usage: npm create @caveman-ai/agent@latest <project> [--prov | exception | error | cli, usage, arguments |
| no provider credential detected; pass --provider | exception | error | cli, environment, credentials, ci |
| multiple provider credentials detected; pass --provider | exception | error | cli, environment, credentials, ambiguity |
| unsupported provider ${JSON.stringify(value)} | exception | error | cli, validation, provider |
| project name must contain a letter or number | exception | error | cli, validation, naming |
| target already exists: ${path} | exception | error | cli, filesystem, safety |
| cavemanExporterConfig: protocol ${protocol} is not accepted | validation | error | telemetry, otlp, validation, config |
| withTask: a callback is required | validation | error | typescript, api-misuse, validation |
| recordOutcome: values must be a non-empty plain object | validation | error | validation, api, telemetry |
| recordOutcome: evidence must be a plain object | validation | error | validation, api, telemetry |
| recordOutcome: evidence keys must be non-empty | validation | error | validation, api, telemetry |
| recordOutcome: evidence.${key} must be a string, number, or | validation | error | |
| recordOutcome: evidence.${key} must be a finite number | validation | error | |
| recordOutcome: evidence.${key} must be non-empty | validation | error | |
| recordOutcome: evidence must contain at least one reference | validation | error | |
| recordOutcome: evidence must contain at most ${MAX_EVIDENCE_ | validation | error | |
| recordOutcome: confidence is required and must be a number w | validation | error | |
| recordOutcome: source is required and must be one of ci|envi | validation | error | |
| recordOutcome: occurredAt must be a valid date | validation | error | |
| recordOutcome: control API responded ${status}: ${body} | http | error | |
| recordOutcome: no global fetch; pass client.fetch | exception | error | |
| ${path} must be a finite number | validation | error | |
| ${path} must be a plain object, array, or primitive | validation | error | |
| ${path} must be JSON data (got ${typeof value}) | validation | error | |
| mastraStudioLink: template must contain the {traceId} placeh | validation | error | |
| ${label} is required | validation | error | |
| ${label} must be an absolute http(s) URL | validation | error | |
| ${label} must use https (plain http is allowed only for loca | validation | error | |
| ${name} must not contain surrounding whitespace | validation | error | |
| ${name} must be an absolute http(s) URL | validation | error | |
| ${name} must be an absolute http(s) URL without credentials | validation | error | |
| ${name} must not contain a query or fragment | validation | error | |
| apiKey, baseURL, and agent are required | validation | error | |
| timeoutMs must be a positive integer | validation | error | |
| bedrock endpoint must be runtime or mantle | validation | error | |
| strategy must be all or deferred | validation | error | |
| initialToolCount must be a non-negative integer | validation | error | |
| maxLoadedTools must be a positive integer | validation | error | |
| maxLoadedTools must be at least the alwaysLoad tool count | validation | error | |
| retry loop interrupted: tool call ${JSON.stringify(signature | exception | error | |
cave_async_jobs_unavailable Async job execution is unavailable: durable encrypted request storage, provider | exception | error | |
| cave artifact response missing artifact_id | exception | error | |
| cave checkpoint response missing source_ref or messages | exception | error | |
| oversized_response | exception | error | |
| bounded_response_unavailable | exception | error | |
| runtime policy response stream returned invalid bytes | exception | error | |
| runtimePolicy publicKey must be a base64-encoded 32-byte Ed2 | validation | error | |
| maxTools must be a positive integer | validation | error | |
| tool search failed with HTTP ${response.status} | http | error | |
| tool catalog names must be non-empty and unique | validation | error | |
| tool search response tools must be an array | exception | error | |
| tool search response contained an unknown or duplicate tool | exception | error | |
| assemble requires model and sessionId | validation | error | |
| unknown emitCacheHints value ${JSON.stringify(emitCacheHints | validation | error | |
| assembly slot id must be non-empty and unique: ${JSON.string | validation | error | |
| assembly slot ${JSON.stringify(slot.id)} has unknown stabili | validation | error | |
| assembly slot ${JSON.stringify(slot.id)} content is not JSON | validation | error | |
| assembly slot ${JSON.stringify(slotId)} changed after being | exception | error | |
| value is not JSON-serializable | validation | error | |
| cave plan fetch failed with HTTP ${response.status} | http | error | |
| cave_provider_raw_path_not_allowed | exception | error | |
| cave request failed (${response.status}) | exception | error | |
| cave response was not valid JSON | exception | error | |
| cave response must be a JSON object | exception | error | |
| artifactId is required | validation | error | typescript, sdk, validation, artifacts |
| cave artifact was not valid JSON | exception | error | json, network, sdk, artifacts |
| cannot safely launch non-Node Windows command shim: ${execut | exception | error | windows, spawn, security, mcp |
| Windows command shim target is missing: ${script} | exception | error | windows, spawn, npm, filesystem |
| unknown tool: ${params?.name} | validation | error | mcp, json-rpc, validation |
| cave_delegate_missing_task | validation | error | mcp, validation, delegate |
| unsafe Windows command shim: ${executable} | exception | error | windows, spawn, security, filesystem |
| non-Node Windows command shim: ${executable} | exception | error | windows, spawn, security, delegate |
| Windows command shim target missing: ${script} | exception | error | windows, spawn, npm, filesystem |
| no prebuilt binary for ${os}/${arch} — supported: darwin/arm | exception | error | platform, installer, architecture |
| CAVE_SETUP_TIMEOUT must be a positive integer (got ${JSON.st | validation | error | configuration, env-var, installer |
| binary download failed: ${error.message} | exception | error | network, installer, timeout |
| binary download failed: HTTP ${response.status} | http | error | http, network, installer |
| signed checksum manifest is malformed | exception | critical | security, installer, checksum |
| signed checksum manifest does not contain ${artifact} | exception | error | installer, checksum, platform |
| binary download failed: response body missing | exception | error | installer, fetch, network |
| ${envVar} does not point to an executable: ${explicit} | exception | error | configuration, env-var, installer, filesystem |
| signature check failed for checksums.txt — refusing to insta | exception | critical | security, installer, signature, supply-chain |
| signature check failed for ${artifact} — partial download de | exception | critical | security, installer, checksum, network |
| ${where} hard chain edge ${edge.from}->${edge.to} is not a h | exception | error | validation, causal-graph, data-integrity |
| ${where} unproven adjacency ${edge.from}->${edge.to} is in f | exception | error | validation, causal-graph, evidence-integrity |
| ${where} adjacency ${edge.from}->${edge.to} appears in both | exception | error | validation, causal-graph, deduplication |
| ${where} diagnosis upstream node ${nodeID} is not an upstrea | exception | error | validation, diagnosis, causal-graph |
| ${where} is diagnosis-only but carries a change set, eval pa | exception | error | validation, state-machine, data-integrity |
| ${where} change set or eval pack is bound to another case | exception | error | validation, referential-integrity, data-integrity |
| ${where} names an opportunity that is not in this report | exception | error | validation, referential-integrity, report-consistency |
| ${where} cohort arms (${armVariants.get("baseline").id}/${ar | exception | error | validation, cohort, report-consistency |
| ${where} requires grader ${grader}, which the recorded inter | exception | error | validation, eval-pack, graders |
| ${at} appears twice in the dataset | exception | error | validation, dataset, deduplication |
| ${at} names source unit ${entry.source_unit_id} that is not | exception | error | validation, dataset, referential-integrity |
| ${at} generator ${entry.generator} disagrees with perturbati | exception | error | validation, dataset, generator-mapping |
| ${at} replays a recorded flow but is not identified by its s | exception | error | validation, dataset, naming-convention |
| ${at} is a generated case whose id does not name its generat | exception | error | validation, dataset, naming-convention |
| ${where} generated case ${entry.id} perturbs a unit the data | exception | error | validation, dataset, leakage |
| ${where} ${confidenceGuard ? "omits" : "generated"} a ${labe | exception | error | validation, dataset, change-set, guard-coverage |
| ${where} dataset carries ${roleCounts.target_failure} target | exception | error | validation, dataset, composition |
| ${where} dataset carries ${roleCounts.prior_success} prior-s | exception | error | validation, dataset, composition |
| ${where} dataset carries ${roleCounts.boundary} boundary cas | exception | error | validation, dataset, composition |
| ${where} dataset carries ${roleCounts.adversarial} adversari | exception | error | validation, dataset, composition |
| ${where} boundary case list disagrees with the composed data | exception | error | |
| ${where} generated case list disagrees with the composed dat | exception | error | |
| ${where} dataset roles (${composed}) do not account for its | exception | error | |
| ${where} replay manifest case ${datasetCaseID} is not a comp | exception | error | |
| ${where} guard_respected grader ${perturbed ? "missing for" | exception | error | |
| ${where} replay trial ${proof.id} replays a case outside the | exception | error | |
| ${where} replay trial ${proof.id} graded ${graders.join(",") | exception | error | |
| canonical span fixture is empty | exception | error | |
| canonical span ${index}: ${ajv.errorsText(validateSpan.error | exception | error | |
| no theme relationship reached the shared-analysis-unit thres | exception | error | |
| no JSON schemas found | exception | error | |
| ${file}: unsupported or missing $schema | exception | error | |
| ${file}: missing $id | exception | error | |
| schema failed to compile: ${schema.$id} | exception | error | |
| expected exactly 2 agent conformance fixtures, found ${fixtu | exception | error | |
| adapter conformance schema failed to compile | exception | error | |
| ${fixtureFiles[index]}: ${ajv.errorsText(validateAdapterConf | exception | error | |
| agent conformance fixtures must cover claude and pi | exception | error | |
| agent conformance mismatch: ${key} | exception | error | |
| adapter-specific build_sha256 values must differ | exception | error | |
| unknown adapter failure must preserve original bytes | exception | error | schema-validation, fixtures, contracts, ci |
| ${field} is not an array (got ${typeof value}) | validation | error | validation, runtime, analytics, api-contract |
ENOENT command not found: ${command} | error_code | error | windows, spawn, enoent, path, process |
| cannot safely launch Windows command shim: ${executable} | exception | error | windows, spawn, security, cmd-shim |
| cannot safely launch non-Node Windows command shim: ${execut | exception | error | windows, spawn, cmd-shim, security |
| Windows command shim target is missing: ${script} | exception | error | windows, spawn, cmd-shim, broken-install |
| unsupported release target ${JSON.stringify(value)} | validation | error | cli, build, release, argument-validation |
| unknown argument ${arg} | validation | error | cli, build, argument-validation |
| go build failed for ${artifact} | exception | error | build, golang, cross-compile, release, toolchain |
| ${label}:${lineNo}: expected a top-level "- provider: ..." r | validation | error | yaml, parser, code-generation, catalog |
| ${label}:${lineNo}: row must start with an inline "provider" | validation | error | yaml, parser, code-generation, catalog |
| ${label}:${lineNo}: indented line before any row | validation | error | yaml, parser, code-generation, catalog |
| ${label}:${lineNo}: unexpected sequence item at row level | validation | error | yaml, parser, indentation, code-generation |
| ${label}:${lineNo}: duplicate key "${entry.key}" | validation | error | yaml, parser, duplicate-key, code-generation |
| ${label}:${lineNo}: nested line without an open block | validation | error | yaml, parser, indentation, code-generation |
| ${label}:${lineNo}: "${blockKey}" mixes map and sequence ent | validation | error | yaml, parser, type-conflict, code-generation |
| ${label}:${lineNo}: nesting deeper than two levels is not su | validation | error | yaml, parser, nesting, code-generation |
| ${label}:${lineNo}: duplicate key "${blockKey}.${entry.key}" | validation | error | yaml, parser, duplicate-key, code-generation |
| ${label}:${lineNo}: unexpected indent of ${indent} spaces | validation | error | yaml, parser, indentation, code-generation |
| ${label}:${lineNo}: cannot read "${text}" as a "key: value" | validation | error | yaml, parsing, build-tooling, catalog |
| ${label}:${lineNo}: empty value | validation | error | yaml, parsing, whitespace, catalog |
| ${label}:${lineNo}: "${text}" is not a finite number | validation | error | yaml, numbers, catalog, validation |
| ${label}: row is missing a string "${field}" | validation | error | yaml, validation, catalog, schema |
| ${label}: ${key} has no pricing block | validation | error | yaml, validation, pricing, catalog |
| ${label}: duplicate region-agnostic row ${key} | validation | error | yaml, duplicate, pricing, catalog |
| ${label}: ${field} must be a finite non-negative number | validation | error | yaml, numbers, validation, pricing |
| cannot render ${text} as a stable numeric literal | validation | error | codegen, invariant, catalog, numbers |
| ${label}: no priced region-agnostic rows found | validation | error | catalog, validation, pricing, build-tooling |
| usage: sign-binary-checksums.mjs <checksums.txt> <output.key | validation | error | cli, usage, signing, release |
| CAVEMAN_BINARY_SIGNING_PRIVATE_KEY_PEM is required | validation | error | signing, environment, secrets, release |
| binary signing private key does not match committed public k | validation | critical | signing, key-management, release, security |
| generated checksum signature failed local verification | exception | error | signing, invariant, security, release |
| verbs is not an array | validation | error | json, validation, cli, gate |
| schema_version must be "1" and tools must be an array | validation | error | json, validation, mcp, gate |
| tools must be unique caveman_* names | validation | error | json, validation, mcp, naming, gate |
| retry loop interrupted: tool call {signature!r} repeated {re | exception | error | python, sdk, retry, agent-loop, runtime |
| {name} must not contain surrounding whitespace | validation | error | python, sdk, url, validation, configuration |
| {name} must be an absolute http(s) URL | validation | error | python, sdk, url, validation, port |
| {name} must be an absolute http(s) URL without credentials | validation | error | python, sdk, url, validation, credentials |
| {name} must not contain a query or fragment | validation | error | |
| assemble requires model and session_id | validation | error | |
| unknown emit_cache_hints value {options.emit_cache_hints!r} | validation | error | |
| assembly slot id must be non-empty and unique: {slot.id!r} | validation | error | |
| assembly slot {slot.id!r} has unknown stability {slot.stabil | validation | error | |
| assembly slot {slot.id!r} content is not JSON-serializable | validation | error | |
| assembly slot {slot_id!r} changed after being declared stabl | validation | error | |
| bedrock endpoint must be runtime or mantle | validation | error | |
| strategy must be all or deferred | validation | error | |
| initial_tool_count must be a non-negative integer | validation | error | |
| max_loaded_tools must be a positive integer | validation | error | |
| max_loaded_tools must be at least the always_load tool count | validation | error | |
| max_tools must be a positive integer | validation | error | |
| cave artifact response missing artifact_id | exception | error | |
| artifact_id is required | validation | error | |
| runtime_policy public_key must be a base64-encoded 32-byte E | validation | error | |
| Claude call failed: {e.stderr} | exception | error | |
| File not found: {filepath} | exception | error | |
| File too large to compress safely (max 500KB): {filepath} | validation | error | |
| Refusing to compress {filepath}: filename looks sensitive (c | validation | error | |
| {path}: invalid YAML: {error} | validation | error | |
| {path}: catalog must be a non-empty list | validation | error | |
| {path}: every catalog row must be an object | validation | error | |
| {label}: verified_at must be RFC3339 | validation | error | |
| {label}: verified_at must be an RFC3339 timestamp | validation | error | |
| {label}: verified_at must include a timezone | validation | error | |
| {label}: unknown field(s): {', '.join(sorted(unknown))} | validation | error | |
| {label}: missing field(s): {', '.join(sorted(missing))} | validation | error | |
| {label}: {field} must be a safe non-empty identifier | validation | error | |
| {label}: currency must be USD | validation | error | |
| {label}: pricing must be an object | validation | error | |
| {label}: unknown pricing field(s): {', '.join(sorted(pricing | validation | error | |
| {label}: pricing.{required} is required | validation | error | |
| {label}: pricing.{field} must be boolean or null | validation | error | |
| {label}: pricing.{field} must be numeric or null | validation | error | |
| {label}: pricing.{field} must be finite and nonnegative | validation | error | |
| {label}: pricing.batch_discount_fraction must be <= 1 | validation | error | |
| {label}: capabilities must be an object | validation | error | |
| {label}: sources must be a non-empty list | validation | error | |
| {label}: every source must be HTTPS | validation | error | |
| {label}: verified_at is in the future | validation | error | validation, catalog, provenance, time |
| {label}: verified_at is older than 120 days | validation | error | validation, catalog, staleness, provenance |
| {label}: unreviewed sync proposal marker on line(s) {', '.jo | validation | error | validation, catalog, review, provenance, ci-gate |
| {label}: duplicate identity {'/'.join(identity)} | validation | error | validation, catalog, duplicates, data-integrity |
| {label}: pricing changed without a new verified_at snapshot | validation | error | validation, catalog, provenance, snapshot, data-integrity |
| {label}: dropped or replaced a source from its immutable sna | validation | error | validation, catalog, provenance, sources, audit |
| Claude call failed: {e.stderr} | exception | error | llm, subprocess, auth, network, cli |
| File not found: {filepath} | validation | error | filesystem, path, validation |
| File too large to compress safely (max 500KB): {filepath} | validation | warning | filesystem, size-limit, llm, validation |
| Refusing to compress {filepath}: filename looks sensitive (c | validation | error | security, secrets, llm, exfiltration-guard, validation |
| select: missing option | validation | error | browser, cdp, dom, form, validation |
| missing backend DOM node id | exception | error | browser, cdp, dom, stale-reference |
| box model has no quad | exception | error | browser, cdp, layout, dom |
| browser returned no result object | exception | error | browser, cdp, nil-safety, race, mcp |
| resolve node returned no object | exception | error | browser, cdp, dom, race, stale-reference |
| browser function threw | exception | error | browser, cdp, javascript, dom, select |
| browser function returned no result object | exception | error | browser, cdp, javascript, nil-safety, race |
| empty a11y recovery metadata | exception | error | browser, a11y, recovery, state, mcp |
| cachebench: nil corpus reader | validation | error | go, validation, nil-check, benchmark, corpus |
| cachebench: invalid corpus metadata | validation | error | |
| cachebench: empty corpus | validation | error | |
| cachebench: corpus limits exceed hard resource ceilings | validation | error | |
| cachebench: Hugging Face rows root must be object | validation | error | |
| cachebench: invalid Hugging Face rows key | validation | error | |
| cachebench: Hugging Face rows field must be array | validation | error | |
| cachebench: malformed Hugging Face rows array | validation | error | |
| cachebench: malformed Hugging Face rows object | validation | error | |
| cachebench: trailing JSON after Hugging Face rows object | validation | error | |
| cachebench: Hugging Face response has no rows field | validation | error | |
| duplicate or invalid JSON | validation | error | |
| trailing JSON | validation | error | |
| session_id and model required | validation | error | |
| input must be valid non-empty message array | validation | error | |
| invalid message identity | validation | error | |
| content or tool_calls required | validation | error | |
| content invalid or exceeds limit | validation | error | |
| content must decode | validation | error | |
| content must be string or null | validation | error | |
| tool call requires function type, id, function name, and JSO | validation | error | |
| message exceeds byte limit | validation | error | go, corpus, validation, size-limits |
| tool message requires tool_call_id | validation | error | go, corpus, validation, tool-calls |
| cachebench: nil cache engine | validation | error | go, nil-safety, corpus, cache-engine |
| cachebench: invalid corpus | validation | error | go, corpus, validation, input-validation |
| cachebench: no providers | validation | error | go, corpus, configuration, validation |
| cachebench: provider population exceeds 1024 | validation | error | go, corpus, limits, configuration |
| cachebench: corpus has no sessions | validation | error | go, corpus, validation, empty-input |
| cachebench: empty stable identity | validation | error | go, corpus, validation, cache-identity |
| cachebench: invalid stable identity boundary | validation | error | go, corpus, validation, off-by-one |
| corpus provider conversion supports string or null content | validation | error | go, corpus, provider-conversion, json |
| cachebench: invalid observation read limits | validation | error | go, observations, configuration, limits |
| cachebench: no observation records | validation | error | go, observations, jsonl, empty-input |
| cachebench: provider population exceeds 1024 | validation | error | go, observations, limits, data-hygiene |
| cachebench: verifier returned duplicate or invalid JSON | validation | error | go, replay, verification, json |
| cachebench: verifier returned invalid JSON | validation | error | go, replay, verification, json, schema |
| cachebench: verifier returned incomplete or mismatched evide | validation | error | go, replay, verification, correlation |
| cachebench: no replay evidence | validation | error | go, replay, validation, empty-input |
| cachebench: replay token summary overflow | validation | error | go, replay, overflow, data-hygiene |
| cachebench: replay trace is empty | validation | error | |
| cachebench: positive replay request, token, gap, schedule-dr | validation | error | |
| cachebench: time scale must be greater than zero and at most | validation | error | |
| cachebench: replay schedule duration overflow | validation | error | |
| cachebench: replay engine, transport, verifier, and emitter | validation | error | |
| cachebench: invalid replay gap | validation | error | |
| cachebench: replay gap overflow | validation | error | |
| cachebench: successful replay result is not bound to retaine | validation | error | |
| cachebench: replay observation is not bound to replay eviden | validation | error | |
| cachebench: failed replay result contains success-only artif | validation | error | |
| cachebench: failed replay response is not bound to evidence | validation | error | |
| cachebench: failed replay evidence references missing respon | validation | error | |
| cachebench: invalid replay evidence | validation | error | |
| cachebench: invalid replay timing evidence | validation | error | |
| cachebench: negative replay latency | validation | error | |
| cachebench: invalid replay provider usage evidence | validation | error | |
| cachebench: replay token counters lack provider usage eviden | validation | error | |
| cachebench: inconsistent replay engine decision | validation | error | |
| cachebench: invalid replay attribution | validation | error | |
| cachebench: incomplete successful replay evidence | validation | error | |
| cachebench: failed replay evidence needs known failure_code | validation | error | |
| cachebench: replay request limit must be between 1 byte and | validation | error | |
| cachebench: replay response limit must be between 1 byte and | validation | error | |
| cachebench: replay request timeout must be between 1 second | validation | error | |
| cachebench: replay body exceeds configured request limit | validation | error | |
| cachebench: invalid replay provider | validation | error | |
| cachebench: replay body must be one JSON object | validation | error | |
| cachebench: could not build provider request | validation | error | |
| cachebench: provider request failed | http | error | |
| cachebench: provider response read failed | http | error | |
| cachebench: provider response exceeds configured limit | http | error | |
| cachebench: invalid replay model | validation | error | |
| cachebench: invalid Bedrock region | validation | error | |
| cachebench: unsupported OpenAI replay endpoint | validation | error | |
| cachebench: unsupported Anthropic replay endpoint | validation | error | |
| cachebench: unsupported Gemini replay endpoint | validation | error | |
| cachebench: unsupported Bedrock replay endpoint or region | validation | error | |
| cachebench: OpenAI API key unavailable | validation | error | |
| cachebench: Anthropic API key unavailable | validation | error | |
| cachebench: Gemini API key unavailable | validation | error | |
| cachebench: Bedrock credentials unavailable | validation | error | |
| cachebench: Bedrock request signing failed | validation | error | |
| cachebench: unsupported replay provider | validation | error | |
| invalid absolute base URL | validation | error | |
| HTTPS required; HTTP is test-only on explicit loopback | validation | error | |
| cachebench: no providers | validation | error | |
| cachebench: provider population exceeds 1024 | validation | error | |
| cachebench: empty trace | validation | error | |
| cachebench: invalid target | validation | error | |
| cachebench: JSON nesting limit exceeded | validation | error | |
| cachebench: JSON root must be object | validation | error | |
| cachebench: duplicate or invalid object key | validation | error | |
| cachebench: invalid object close | validation | error | |
| cachebench: invalid array close | validation | error | |
| cachebench: unexpected JSON delimiter | validation | error | |
| cachebench: provider, model, and endpoint required | validation | error | |
| cachebench: invalid scenario token or turn count | validation | error | |
| cachebench: invalid scenario timing | validation | error | |
| cachebench: invalid trace read limits | validation | error | go, validation, resource-limits, configuration |
| cachebench: no trace records | validation | error | go, input-validation, trace-data |
| want provider=https://host | validation | error | go, cli, flag-parsing, configuration |
| cache-replay: verifier process failed | exception | error | go, subprocess, cli, verification |
| cache-replay: could not encode verifier input | exception | error | go, json-encoding, subprocess, verification |
| cache-replay: -trace and positive request/token/trace/respon | validation | error | go, cli, configuration, validation |
| cache-replay: custom base URLs require -allow-custom-base-ur | validation | error | go, cli, configuration, security |
| cache-replay: -execute requires -accept-live-cost, -output, | validation | critical | go, cli, configuration, cost-control, security |
| cache-replay: verifier command must be an existing regular f | validation | error | go, cli, filesystem, configuration |
| cache-replay: OPENAI_API_KEY unavailable | validation | critical | go, credentials, environment, cli |
| cache-replay: ANTHROPIC_API_KEY unavailable | validation | critical | go, credentials, environment, cli |
| cache-replay: GEMINI_API_KEY unavailable | validation | critical | go, credentials, environment, cli |
| cache-replay: Bedrock bearer token or AWS access credentials | validation | critical | go, credentials, environment, aws, cli |
| cacheengine: driver needs non-empty provider and implementat | validation | error | go, configuration, nil-safety, constructor |
| cacheengine: nil engine | validation | error | go, nil-safety, constructor, api-misuse |
| cacheengine: no stable prefix | validation | warning | go, prompt-cache, validation, api-misuse |
| cacheengine: volatile content cannot start stable epoch | validation | warning | go, prompt-cache, validation, content-hygiene |
| cacheengine: invalid scope | validation | error | go, validation, api-misuse, configuration |
| cacheengine: invalid epoch | validation | error | go, validation, api-misuse, configuration |
| cacheengine: invalid partition key | validation | error | cacheengine, validation, partitioning, go |
| cacheengine: negative traffic expectation | validation | error | cacheengine, validation, traffic-estimation, go |
| cacheengine: invalid profile identity | validation | error | cacheengine, validation, profile, go |
| cacheengine: invalid cache thresholds | validation | error | cacheengine, validation, thresholds, go |
| cacheengine: invalid cache economics | validation | error | cacheengine, validation, float-safety, economics, go |
| cacheengine: stable segment needs name and content | validation | error | cacheengine, validation, segments, prefix, go |
| cacheengine: negative segment measurement | validation | error | cacheengine, validation, tokens, measurements, go |
| cacheengine: stable prefix exceeds configured byte limit | validation | error | cacheengine, limits, prefix, configuration, go |
| cacheengine: segment exceeds framing limit | validation | error | cacheengine, limits, framing, defensive, go |
| cacheengine: cumulative token count overflow | validation | error | cacheengine, overflow, tokens, go |
| cacheengine: longer prefix cannot have higher expected reuse | validation | error | cacheengine, invariant, segments, reuse-estimation, go |
| cacheengine: cache economics overflow | validation | error | cacheengine, float-safety, overflow, economics, go |
| cacheengine: request exceeds configured byte limit | validation | error | cacheengine, limits, request-size, configuration, go |
| cacheengine: JSON nesting limit exceeded | validation | error | cacheengine, json, nesting, security, go |
| cacheengine: request root must be object | validation | error | cacheengine, json, validation, protocol, go |
| cacheengine: duplicate or invalid object key | validation | error | cacheengine, json, duplicate-keys, protocol, go |
| cacheengine: invalid object close | validation | error | cacheengine, json, malformed, protocol, go |
| cacheengine: invalid array close | validation | error | cacheengine, json, malformed, protocol, go |
| cacheengine: unexpected delimiter | validation | warning | cacheengine, json, defensive, unreachable, go |
| ccr: recovery handle not found | exception | error | ccr, go, recovery, cache-miss, sentinel-error |
| ccr: storage budget exceeded | exception | warning | ccr, go, backpressure, storage-budget, sentinel-error |
| ccr: typed object session_id is required | validation | error | ccr, go, validation, putobject, session |
| ccr: typed object content_hash does not match data | validation | error | ccr, go, integrity, sha256, content-hash |
| ccr: typed object byte lengths cannot be negative | validation | error | ccr, go, validation, putobject, byte-length |
| ccr: typed object id collision | exception | error | ccr, go, sqlite, id-collision, content-addressing |
| ccr: typed object id collision | exception | error | ccr, go, wasm, id-collision, in-memory |
| empty render text | validation | error | pixel, go, gemini, render, validation |
| unsupported image token profile | validation | error | pixel, go, gemini, token-estimation, images |
| body must be a JSON object | validation | error | pixel, go, openai, json, validation |
cave_memory_too_large cave_memory_too_large | error_code | error | mem, go, size-limit, validation, memory-store |
| native pack: invalid identity | validation | error | nativepack, go, validation, manifest, schema |
| native pack: invalid Core budget or instructions | validation | error | nativepack, go, validation, budget, prompt-tokens |
| native runtime: invalid decision id | validation | error | nativeruntime, go, validation, decision-id, regex |
| native runtime: invalid decision record | validation | error | nativeruntime, go, schema-mismatch, decision-record, integrity |
| native runtime: session id is required | validation | error | nativeruntime, go, validation, session, request |
| native runtime: socket already active | exception | error | nativeruntime, go, unix-socket, concurrency, startup |
| native runtime current user SID: unavailable | exception | error | nativeruntime, windows, named-pipe, security, sid |
| repository intelligence: cwd is not a directory | validation | error | repointel, go, validation, filesystem, path |
| invalid run-state contract | validation | error | runstate, go, contract-validation, json, state-file |
| session-value promotion artifact has no actions | validation | error | |
| session-value artifact schema mismatch | validation | error | |
| session-value artifact tenant scope mismatch | validation | error | |
| request body must contain one JSON value | http | error | |
| rewriter: model is required | validation | error | |
| rewriter: api key is required | validation | error | |
| kms: auth token is required | validation | error | |
| kms: invalid API base URL | validation | error | |
| kms: plaintext is empty | validation | error | |
| kms: unknown envelope format | validation | error | |
| kms: envelope exceeds size limit | validation | error | |
| kms: envelope provider does not match configured provider | validation | error | |
| kms: envelope region is not approved | validation | error | |
| kms: envelope key ID is not approved | validation | error | |
| kms: envelope ciphertext is empty | validation | error | |
| kms: invalid Scaleway region | validation | error | |
| kms: invalid Scaleway key ID | validation | error | |
| objectstore: decompressed payload exceeds limit | error_code | error | |
| objectstore: object not found | error_code | error | |
| objectstore: object exceeds read limit | error_code | error | |
| objectstore: S3_ENDPOINT is required in production | validation | error | |
| objectstore: endpoint and bucket are required | validation | error | |
| objectstore: access key and secret key are required | validation | error | |
| objectstore: production requires TLS | validation | error | |
| objectstore: production endpoint must be an HTTPS origin wit | validation | error | |
| postgres: production DATABASE_URL must be a Postgres URL | validation | error | |
| postgres: production DATABASE_URL requires sslmode=verify-fu | validation | error | |
| postgres: CA certificate configured while TLS is disabled | validation | error | |
| postgres: production connection includes a plaintext fallbac | validation | error | |
| postgres: expected runtime role is required | validation | error | |
| redact: payload exceeds redaction size limit | error_code | error | |
| redact: invalid redaction rule | error_code | error | |
| redact: unsupported redaction rule type | error_code | error | |
| ssrf: invalid URL | validation | error | |
| ssrf: managed mode requires port 443 | validation | error | |
| ssrf: invalid host | validation | error | |
| tenantkey: safe month is required | validation | error | |
| tenantkey: safe month and request id are required | validation | error | |
| tenantkey: safe organization and project scope are required | validation | error | |
| unknown action: %s | exception | error | |
| element not actionable: last box=%+v | exception | error | |
| cachebench: unsupported corpus format %q | validation | error | |
| cachebench: corpus input exceeds byte limit %d | validation | error | |
| cachebench: corpus line %d: %w | validation | error | |
| cachebench: read corpus: %w | validation | error | |
| cachebench: read Hugging Face rows key: %w | validation | error | |
| cachebench: duplicate Hugging Face field %q | validation | error | |
| cachebench: skip Hugging Face field %q: %w | validation | error | |
| cachebench: decode Hugging Face row: %w | validation | error | |
| cachebench: Hugging Face row exceeds %d bytes | validation | error | |
| cachebench: Hugging Face row %d: %w | validation | error | |
| output_length must be non-negative and pre_gap must be withi | validation | error | |
| row exceeds byte limit %d | validation | error | |
| decode input: %w | validation | error | |
| message count %d outside 1..%d | validation | error | |
| message %d: %w | validation | error | go, json, validation, corpus, cachebench |
| unsupported role %q | validation | error | go, validation, corpus, roles |
| row limit %d exceeded | validation | error | go, limits, corpus, configuration |
| session limit %d exceeded | validation | error | go, limits, sessions, configuration |
| retained corpus byte limit %d exceeded | validation | error | go, limits, memory, corpus |
| cachebench: session %q row %d: %w | validation | error | go, cachebench, prefix, corpus |
| cachebench: session %q request %d: %w | validation | error | go, cachebench, provider, replay |
| unsupported corpus provider %q | validation | error | go, configuration, provider, cachebench |
| cachebench: observation population %d does not match trace p | validation | error | go, cachebench, evaluation, data-integrity |
| cachebench: trace request %d has invalid schema or request_i | validation | error | go, cachebench, schema, validation |
| cachebench: duplicate trace request %q | validation | error | go, cachebench, duplicates, data-integrity |
| cachebench: trace request %q has invalid identity, body, or | validation | error | go, cachebench, sha256, data-integrity, validation |
| cachebench: trace request %q has invalid prefix | validation | error | go, cachebench, prefix, validation |
| cachebench: observation request %q absent from trace | validation | error | go, cachebench, join, data-integrity |
| cachebench: observation request %q provider/epoch mismatch | validation | error | go, cachebench, epoch, provider, data-integrity |
| cachebench: observation request %q body digest mismatch | validation | error | go, cachebench, sha256, replay, data-integrity |
| cachebench: observations exceed record limit %d | validation | error | go, limits, observations, jsonl |
| cachebench: observation line %d: duplicate or invalid JSON | validation | error | go, json, jsonl, validation |
| cachebench: observation line %d: %w | validation | error | go, json, schema-drift, observations |
| cachebench: observation line %d: trailing JSON | validation | error | go, json, jsonl, formatting |
| cachebench: observation line %d: schema %q | validation | error | |
| cachebench: observation line %d: empty or duplicate request_ | validation | error | |
| cachebench: read observations: %w | validation | error | |
| cachebench: observation %d schema %q | validation | error | |
| cachebench: observation %d empty or duplicate request_id | validation | error | |
| cachebench: observation %d missing provider or quality evide | validation | error | |
| cachebench: observation %d has invalid request body digest | validation | error | |
| cachebench: observation %d has invalid optimizer identity | validation | error | |
| cachebench: replay evidence %d: %w | validation | error | |
| cachebench: duplicate replay evidence request %q | validation | error | |
| cachebench: replay population %d exceeds request limit %d | validation | error | |
| cachebench: duplicate replay request %q | validation | error | |
| cachebench: replay request %q needs %s billed-token metadata | validation | error | |
| cachebench: replay request %d: %w | validation | error | |
| cachebench: replay request %q has invalid time order | validation | error | |
| cachebench: replay request %q timing basis %q is not globall | validation | error | |
| cachebench: replay request %q token basis %q is not provider | validation | error | |
| cachebench: replay request %q has invalid billed-token budge | validation | error | |
| cachebench: replay declared billed-token ceiling exceeds lim | validation | error | |
| cachebench: replay gap before %q exceeds limit %s | validation | error | |
| cachebench: replay request %q has empty provider | validation | error | cachebench, validation, trace-data, replay |
| cachebench: provider %q population %d cannot meet minimum el | validation | error | cachebench, validation, sample-size, replay |
| cachebench: replay preparation interrupted: %w | exception | error | cachebench, context, cancellation, replay |
| cachebench: optimize request %q: %w | exception | error | cachebench, engine, optimization, replay |
model_visible_mismatch cachebench: request %q failed model-visible equivalence | exception | error | cachebench, equivalence, engine, correctness |
engine_not_cacheable cachebench: request %q is not cacheable: %s | exception | error | cachebench, eligibility, engine, replay |
| cachebench: provider %q engine-eligible population %d cannot | validation | error | cachebench, eligibility, sample-size, replay |
| cachebench: replay schedule interrupted: %w | exception | error | cachebench, context, scheduling, replay |
schedule_drift cachebench: request %q exceeded schedule drift tolerance | exception | error | cachebench, timing, scheduling, replay |
clock_regression cachebench: clock regressed while replaying %q | exception | error | cachebench, clock, timing, replay |
transport_error cachebench: provider transport failed for %q: %w | exception | error | cachebench, network, transport, replay |
provider_response_invalid cachebench: provider returned invalid request identity for %q | validation | error | cachebench, transport, provider-api, validation |
provider_http_status cachebench: provider returned HTTP %d for %q | http | error | cachebench, http, provider-api, rate-limit |
provider_usage_invalid cachebench: provider usage unavailable for %q | validation | error | cachebench, provider-api, usage, parsing |
provider_input_budget_exceeded cachebench: provider input tokens %d exceed declared ceiling %d for %q | validation | error | cachebench, budget, tokens, provider-api |
provider_output_budget_exceeded cachebench: provider output tokens %d exceed request ceiling %d for %q | validation | error | cachebench, budget, tokens, replay |
quality_verifier_error cachebench: quality verifier failed for %q: %w | exception | error | cachebench, verifier, quality, replay |
quality_provenance_missing cachebench: quality provenance missing for %q | validation | error | |
| cachebench: unsupported replay base URL provider %q | validation | error | |
| cachebench: %s replay base URL: %w | validation | error | |
| cachebench: unsupported replay provider %q | validation | error | |
| cachebench: trace request %d empty or duplicate ID | validation | error | |
| cachebench: trace request %q has invalid time order | validation | error | |
| cachebench: trace request %q has incomplete native request | validation | error | |
| cachebench: trace request %q has invalid prefix | validation | error | |
| cachebench: trace request %q has invalid billed-token budget | validation | error | |
| cachebench: unsupported trace provider %q | validation | error | |
| cachebench: request %q output ceiling does not match provide | validation | error | |
| cachebench: trace exceeds record limit %d | validation | error | |
| cachebench: trace line %d: duplicate or invalid JSON | validation | error | |
| cachebench: trace line %d: %w | validation | error | |
| cachebench: trace line %d: trailing JSON | validation | error | |
| cachebench: trace line %d: invalid schema or request_id | validation | error | |
| cachebench: trace line %d: incomplete request identity | validation | error | |
| cachebench: trace line %d: invalid body or digest | validation | error | |
| cachebench: trace line %d: invalid prefix | validation | error | |
| cachebench: trace line %d: incomplete replay metadata | validation | error | |
| cachebench: trace line %d: incomplete or mismatched billed-t | validation | error | |
| cachebench: read trace: %w | exception | error | |
| cachebench: request %q needs %s or %s for reconstruction | validation | error | |
| cachebench: request %q has incomplete or invalid replay iden | validation | error | |
| duplicate provider %q | validation | error | |
| cache-replay: concurrent response and verifier buffers excee | console | error | |
| cache-replay: failed to finalize failure manifest: %w | console | error | |
| cache-replay: trace exceeds %d bytes | validation | error | |
| cache-replay: unsupported provider %q | validation | error | |
| cache-replay: verifier environment variable %q is invalid or | validation | error | |
| cache-replay: output directory must be new: %w | validation | error | |
| cachebench: -observations and -corpus are mutually exclusive | console | error | |
| cachebench: -trace-in required with -observations | console | error | |
| cachebench: -trace-in cannot be combined with -corpus | console | error | |
| cachebench: unknown format %q | console | error | |
| cachebench: unknown provider %q; valid: %s | validation | error | |
| cachebench: no providers selected | validation | error | |
| cacheengine: max key shards must be within 0..%d | validation | error | |
| cacheengine: max request bytes must be within 0..%d | validation | error | |
| cacheengine: max stable prefix bytes must be within 0..%d | validation | error | |
| cacheengine: duplicate normalized driver provider %q | validation | error | |
| cacheengine: unknown mode %q | validation | error | |
| cacheengine: unknown attribution %q | validation | error | |
| sqlite parent %q is group/world writable | validation | error | |
| inspect sqlite parent ACL %q: %w | exception | error | |
| sqlite parent %q has no security descriptor | validation | error | |
| sqlite parent %q has no restrictive DACL | validation | error | |
| sqlite parent %q grants broad Windows write access | validation | error | |
| ccr: unknown object type %q | validation | error | |
| ccr: unknown currentness %q | validation | error | |
| ccr: unknown lifecycle %q | validation | error | |
| CAVEMAN_CCR_MAX_BYTES must be a positive integer | validation | error | |
| ccr max storage bytes must be positive | validation | error | |
| open sqlite %q: %w | exception | error | |
| migrate sqlite %q: %w | exception | error | |
| migrate sqlite metadata %q: %w | exception | error | |
| configure sqlite storage budget %q: %w | exception | error | |
| ccr sqlite path is required | validation | error | |
| resolve sqlite parent %q: %w | exception | error | |
| inspect sqlite parent %q: %w | exception | error | |
| sqlite parent %q must be a directory | validation | error | |
| secure sqlite %q: %w | exception | error | |
| secure sqlite sidecar %q: %w | exception | error | |
| refusing non-regular file | validation | error | |
| file changed while opening | validation | error | |
| read page size: %w | exception | error | |
| budget %d is below SQLite minimum %d | validation | error | |
| ccr put: %w | exception | error | |
| ccr get: %w | exception | error | |
| ccr metadata get: %w | exception | error | |
| ccr typed object dependencies: %w | exception | error | |
| ccr typed object budget: %w | exception | error | |
| ccr typed object put: %w | exception | warning | ccr, budget, storage, sentinel-error |
| unsafe recovery failure result: %w | console | critical | cli, invariant, safety, ccr |
| write stdout: %w | console | error | cli, stdout, epipe, io |
| encode report: %w | console | error | cli, json, report, marshal |
| write report: %w | console | error | cli, stderr, io, report |
cave_input_too_large cave_input_too_large: stdin exceeds %d bytes | error_code | error | cli, input-limit, stdin, validation |
| not losslessly TOON-encodable (invalid JSON, or nested/non-u | validation | info | toon, json, encode, fail-closed |
| not valid TOON | validation | info | toon, decode, fail-closed, round-trip |
| read manifest: %w | console | error | evals, embed, build, manifest |
| parse manifest: %w | console | error | evals, yaml, manifest, schema |
| resolve fixture directory: %w | console | error | evals, filesystem, symlink, path |
| manifest has no fixtures | validation | error | evals, manifest, config, fail-closed |
| invalid fixture path %q | validation | error | evals, path, manifest, validation |
| fixture path escapes root: %q | validation | error | security, path-traversal, evals, symlink |
| quality runner is required | validation | error | |
| system runner is required | validation | error | |
| open recovery store: %w | exception | error | |
| read fixture %q: %w | exception | error | |
| compress fixture %q: %w | exception | error | |
| quality fixture %q: %w | exception | error | |
| baseline model call: %w | exception | error | |
| compressed model call: %w | exception | error | |
| baseline usage: %w | exception | error | |
| compressed usage: %w | exception | error | |
| baseline grading: %w | exception | error | |
| compressed grading: %w | exception | error | |
| runner did not return input/output token usage | validation | error | |
| answer-key runner requires expected answer | validation | error | |
| contents: %w | validation | error | |
| systemInstruction: %w | validation | error | |
| tools: %w | validation | error | |
| text: %w | validation | error | |
| inline_data: %w | validation | error | |
| functionResponse: %w | validation | error | |
| functionCall: %w | validation | error | |
| not losslessly TOON-encodable (invalid JSON, or nested/non-u | validation | error | |
| not valid TOON | validation | error | |
| token_budget must be a non-negative integer | validation | error | |
| create %s: %w | exception | error | |
| secure memories db: %w | exception | error | |
| open memories db: %w | exception | error | |
| migrate memories db: %w | exception | error | |
| open ccr: %w | exception | error | |
| cannot remember empty text | validation | error | |
| store memory: %w | exception | error | |
| read back memory: %w | exception | error | |
| memory %s exists only as an expired historical version and c | validation | error | |
| supersede requires old memory id | validation | error | |
| cannot supersede with empty text | validation | error | |
| memory %s is not current | validation | error | |
| replacement text is identical to current memory | validation | error | |
| replacement memory %s already exists | validation | error | |
| memory %s changed during supersede | exception | error | go, sqlite, concurrency, optimistic-locking, memory-store |
ErrMemoryTooLarge %w: memory is %d bytes, over the %d-byte cap | error_code | error | go, validation, size-limit, memory-store |
| history requires memory id | validation | error | go, validation, api-misuse, memory-store |
| cyclic supersession history at %s | exception | error | go, data-corruption, cycle-detection, memory-store |
| token budget must be positive, zero (default), or UnlimitedT | validation | error | go, validation, api-misuse, configuration |
| memory %s not found | exception | error | go, not-found, memory-store, lifecycle |
| usage: caveman-proxy trial promote <optimizer_id> --trial-id | console | error | cli, usage-error, exit-1 |
| unknown trial subcommand: %s | console | error | cli, usage-error, exit-1 |
| usage: caveman-proxy usage import|link|refresh|unlink <provi | console | warning | cli, usage-error, exit-1 |
| usage: caveman-proxy usage import codex|claude | console | error | cli, usage-error, exit-1 |
| unknown usage source: %s | console | error | cli, usage-error, provider-validation, exit-1 |
| unknown usage link source: %s | console | error | cli, usage-error, provider-validation, exit-1 |
| usage unlink needs claude|codex | console | error | cli, usage-error, provider-validation, exit-1 |
| unknown usage subcommand: %s | console | error | cli, usage-error, exit-1 |
| usage: caveman-proxy learn apply <sink_id> [--dry-run] | console | error | cli, usage-error, exit-1 |
| unknown learn subcommand: %s | console | error | cli, usage-error, exit-1 |
| sink %q not found in current learn plan | console | error | cli, not-found, learn-plan, stale-state |
| no trial_id supplied and no trial runs exist | console | error | cli, not-found, empty-state, spend-store |
| optimizer %q not found in trial %s | console | error | cli, not-found, trial-plan, stale-state |
| listen address %q must be loopback host:port | validation | error | config, network, security, startup |
| listen address %q is not loopback; standalone proxy has no i | validation | error | config, security, network, byok |
| compat upstream %q: %w | validation | error | config, validation, compat, naming |
| compat upstream %q: base_url is required | validation | error | config, compat, validation |
| compat upstream %q: base_url: %w | validation | error | config, compat, url, validation |
| native runtime: decode decision: %w | console | error | json, decode, storage, corruption, nativeruntime |
| native session key mkdir: %w | console | error | filesystem, permissions, nativeruntime, session-key |
| native session key chmod dir: %w | console | error | filesystem, permissions, nativeruntime, session-key |
| native session key random: %w | console | error | crypto, entropy, nativeruntime, session-key, environment |
| native session key write: %w | console | error | filesystem, disk-full, nativeruntime, session-key |
| native session key sync: %w | console | error | filesystem, durability, nativeruntime, session-key |
| native session key close: %w | console | error | filesystem, io, nativeruntime, session-key |
| native session key create: %w | console | error | filesystem, permissions, nativeruntime, session-key |
| native session key read: %w | console | warning | filesystem, race, concurrency, nativeruntime, session-key |
| native session key length = %d, want %d | console | error | session-key, validation, filesystem, nativeruntime |
| native session key chmod: %w | console | error | permissions, session-key, security, filesystem |
| native runtime mkdir: %w | console | error | unix-socket, filesystem, permissions, nativeruntime, startup |
| native runtime chmod dir: %w | console | error | unix-socket, permissions, security, nativeruntime |
| native runtime remove stale socket: %w | console | error | unix-socket, stale-state, permissions, nativeruntime |
| native runtime inspect socket: %w | console | error | unix-socket, permissions, nativeruntime, startup |
| native runtime listen: %w | console | error | unix-socket, nativeruntime, filesystem, go |
| native runtime chmod socket: %w | console | error | unix-socket, permissions, race-condition, nativeruntime |
| native runtime accept: %w | console | error | unix-socket, accept, file-descriptors, go |
| native runtime current user SID: %w | console | error | windows, named-pipe, security-token, nativeruntime |
| native runtime named-pipe listen: %w | console | error | windows, named-pipe, nativeruntime, go |
| native runtime named-pipe accept: %w | console | error | windows, named-pipe, accept, go |
| invalid listen address %q: %w | validation | error | config, network, validation, go |
| invalid listen port %q | validation | error | config, validation, port, go |
| executable identity unsupported on %s | exception | error | platform-support, build, go |
| prefix replacement put: %w | exception | warning | sqlite, persistence, concurrency, go |
| report path is required | validation | error | validation, cli, api-misuse, go |
| export directory is required | validation | error | validation, cli, api-misuse, go |
| open sqlite %q: %w | exception | critical | sqlite, driver-registration, build, go |
| migrate sqlite %q: %w | exception | critical | sqlite, permissions, database, go |
| invalid agent evidence identity | validation | error | validation, cli, security, go |
| invalid native session identity | validation | error | validation, security, api-misuse, go |
| native session usage: %w | exception | error | sqlite, database, lifecycle, go |
| invalid --since %q (want RFC3339): %w | validation | warning | validation, timestamp, cli, go |
| trial_id is required | validation | error | go, sqlite, validation, trial-store |
| trial compression replay exceeds %d-byte payload budget | exception | error | go, resource-limit, trial-store, replay, configuration |
| parse Claude usage JSON: %w | exception | error | go, json, environment-variables, usage-import |
| Claude usage refresh needs CAVEMAN_CLAUDE_USAGE_JSON or CAVE | validation | error | go, environment-variables, configuration, auth, usage-import |
| invalid Claude organization id | validation | error | go, security, path-traversal, validation, usage-import |
| Claude usage request failed with HTTP %d | exception | error | go, http, auth, rate-limit, usage-import, network |
| provider %q has no configured upstream URL | http | error | go, configuration, proxy, routing |
| provider %q upstream URL must be absolute | http | error | go, configuration, url-parsing, routing |
| gemini bearer credential requires a valid x-goog-user-projec | http | error | go, auth, oauth, gemini, billing, routing |
| azure bearer credentials are unsupported; use an API key | http | error | go, auth, azure, fail-closed, configuration |
| azure request has duplicate api-version values | http | error | go, azure, validation, query-params |
| azure Foundry api-version %q is not supported | http | error | go, azure, versioning, validation |
| azure legacy inference path %q is not supported | http | error | go, azure, routing, validation |
| azure request missing api-version | http | error | go, azure, validation, query-params |
| azure api-version %q is not on the allowlist | http | error | go, azure, allowlist, versioning, configuration |
| bedrock base url invalid: %w | http | error | go, bedrock, configuration, url-parsing, aws |
| bedrock configured endpoint kind %q does not allow request k | http | error | go, bedrock, routing, configuration, aws |
| bedrock region %q is not on the allowlist | validation | error | |
| bedrock request path %q does not name a model and action | validation | error | |
| bedrock action %q is not allowed | validation | error | |
| bedrock model %q is not on the allowlist | validation | error | |
| bedrock Mantle endpoint is not enabled | validation | error | |
| bedrock Mantle region %q is not on the allowlist | validation | error | |
| bedrock Mantle path %q is not allowed | validation | error | |
| bedrock request path %q is not allowed | validation | error | |
| bedrock endpoint host %q does not match endpoint kind %q | validation | error | |
| bedrock requested region %q does not match endpoint region % | validation | error | |
| bedrock: invalid API key | validation | error | |
| bedrock: could not build signing request: %w | http | error | |
| bedrock: request signing failed | http | error | |
| bedrock: exact request payload hash is unavailable | http | error | |
| bedrock: missing credential | validation | error | |
| bedrock: unsupported credential auth kind | validation | error | bedrock, authentication, configuration, credentials |
| bedrock: missing AWS credentials in x-cave-upstream-key | validation | error | bedrock, authentication, credentials, aws |
| bedrock: malformed AWS credentials (want accessKeyId:secretA | validation | error | bedrock, authentication, credentials, aws, validation |
| compat route %q does not match default /compat/ mount | validation | error | openai-compat, routing, reverse-proxy, configuration |
| compat request URL is missing | validation | error | openai-compat, nil-guard, api-misuse |
| compat route %q does not match prefix %q | validation | error | openai-compat, routing, configuration, reverse-proxy |
| request URL is missing | validation | error | openai-compat, nil-guard, validation, api-misuse |
| compat route path rejected: %w | validation | error | openai-compat, path-validation, security, url-encoding |
| %s: provider, model, and region are required | validation | error | catalog, yaml, pricing, validation |
| %s %s/%s: unsupported currency %q | validation | error | catalog, yaml, pricing, currency, validation |
| %s %s/%s: invalid pricing | validation | error | catalog, yaml, pricing, validation |
| %s %s/%s: verified_at must be RFC3339 | validation | error | catalog, yaml, timestamp, rfc3339, validation |
| %s %s/%s: verified_at is in the future | validation | error | catalog, yaml, timestamp, validation |
| %s %s/%s: capabilities_verified_at must be RFC3339 | validation | error | catalog, yaml, timestamp, rfc3339, validation |
| %s %s/%s: capabilities_verified_at is in the future | validation | error | catalog, yaml, timestamp, validation |
| %s %s/%s: at least one source is required | validation | error | catalog, yaml, sources, validation |
| %s %s/%s: invalid HTTPS source %q | validation | error | catalog, yaml, url, sources, validation |
| duplicate provider/model/region row %s/%s@%s | validation | error | catalog, yaml, duplicates, validation |
| production refuses %s=true: it disables chain and hostname v | validation | critical | clickhouse, tls, security, configuration, production |
| %s: %w | validation | error | clickhouse, tls, configuration, file-io, secrets |
| %s: load system certificate pool: %w | validation | error | go, tls, certificates, config, containers |
| %s (%s): certificate %d is unparseable, so the bundle is inc | validation | error | go, tls, certificates, pem, config |
| %s (%s): trailing PEM block is truncated after %d certificat | validation | error | go, tls, certificates, pem, truncation |
| %s (%s) contains no valid PEM certificate | validation | error | go, tls, certificates, pem, config |
| production requires an https:// CLICKHOUSE_URL (TLS only); C | validation | critical | go, production, config, tls, clickhouse, security |
| %s is required | validation | error | go, config, environment, env-vars |
| production KMS configuration: %w | validation | critical | go, production, kms, config, security |
| production refuses default or empty %s | validation | critical | go, production, secrets, config, security |
| production requires %s to contain at least 32 characters | validation | critical | go, production, secrets, config, security |
| production refuses low-diversity %s | validation | critical | go, production, secrets, entropy, security |
| production requires CAVE_PUBLIC_URL to be an HTTPS origin wi | validation | critical | go, production, config, url, security |
| githubapp: private key is not valid PEM | validation | error | go, github-app, pem, rsa, authentication |
| githubapp: private key is neither PKCS#1 nor PKCS#8 RSA: %w | validation | error | go, github-app, pem, rsa, pkcs8 |
| githubapp: private key is not RSA | validation | error | go, github-app, rsa, key-generation |
| caveman-jsonl line %d: %w | validation | error | go, import, jsonl, data-validation |
| generic record %d: %w | validation | error | go, import, data-validation, field-mapping |
| mapped source path %q for target %q was not found in any rec | validation | error | go, import, field-mapping, config |
| generic import requires a non-empty field map | validation | error | go, import, config, field-mapping |
| unknown target column %q (not a caveman.spans column) | validation | error | go, import, field-mapping, validation |
| generic target %q requires a non-empty source path | validation | error | go, import, field-mapping, config, validation |
| generic import requires a %q mapping | validation | error | go, import, generic, validation |
| generic decode: expected a JSON array or {"data":[...]} of o | validation | error | go, import, generic, json, decode |
| mapped source path %q for required target %q was not found | validation | error | go, import, generic, field-mapping |
| mapped trace_id is empty | validation | error | go, import, generic, data-quality |
| mapped span_id is empty | validation | error | go, import, generic, data-quality |
| mapped timestamp is missing or invalid | validation | error | go, import, generic, timestamp, parsing |
| helicone decode: %w | validation | error | go, import, helicone, json, decode |
| unknown import format %q: supported formats are otlp, cavema | validation | error | go, import, format-dispatch, validation |
| sanitize row %d: events exceed %d bytes | validation | error | go, import, telemetry, size-limit, events |
| sanitize row %d: %w | validation | error | go, import, telemetry, sanitization, attributes |
| langfuse decode: %w | validation | error | go, import, langfuse, json, decode |
| otlp decode: %w | validation | error | go, import, otlp, json, decode |
| kms: unsupported provider %q | validation | error | go, kms, config, scaleway |
| kms: plaintext exceeds %d bytes | validation | error | go, kms, encryption, size-limit |
| kms: decode envelope: %w | validation | critical | go, kms, envelope, json, corruption |
| kms: probe encrypt: %w | exception | error | go, kms, probe, connectivity |
| kms: probe decrypt: %w | exception | error | go, kms, probe, iam |
| kms: %s request failed: %w | exception | error | go, kms, network, http |
| kms: %s returned HTTP %d | http | error | go, kms, http, status-code |
| kms: read %s response: %w | exception | error | go, kms, network, io |
| kms: %s response exceeds limit | exception | error | |
| kms: decode %s response: %w | exception | error | |
| gzip: %w | exception | error | |
| gzip close: %w | exception | error | |
| unknown compression codec %q | validation | error | |
| gzip reader: %w | validation | error | |
| gzip read: %w | exception | error | |
| zstd reader: %w | exception | error | |
| zstd read: %w | exception | error | |
| objectstore: page size must be positive | validation | error | |
| objectstore: production read/write/delete probe failed: %w | exception | error | |
| objectstore: minio client: %w | exception | error | |
| generate probe: %w | exception | error | |
| objectstore: put %q: %w | exception | error | |
| objectstore: get %q: %w | exception | error | |
| objectstore: read %q: %w | exception | error | |
| objectstore: delete %q: %w | exception | error | |
| objectstore: list versions %q: %w | exception | error | |
| objectstore: delete version %q (%q): %w | exception | error | |
| objectstore: stat %q: %w | exception | error | |
| objectstore: list %q: %w | exception | error | |
| objectstore: list page %q: %w | exception | error | |
| postgres: parse DATABASE_URL: %w | exception | error | |
| postgres: %s or %s is required in production | validation | error | |
| postgres: %s contains no valid certificate | validation | error | |
| postgres: set only %s or %s, not both | validation | error | |
| postgres: %s: %w | exception | error | |
| postgres: %s must point to a regular file | validation | error | |
| postgres: read %s: %w | exception | error | |
| postgres: inspect runtime identity: %w | exception | error | |
| postgres: runtime current_user %q differs from session_user | validation | error | |
| postgres: unsafe runtime identity %q (session_user=%q superu | validation | error | |
| postgres: runtime identity %q is not a member of %q | validation | error | |
| postgres: begin tenant schema inspection: %w | exception | error | |
| postgres: inspect tenant tables: %w | exception | error | |
| postgres: inspect tenant foreign keys: %w | exception | error | |
| postgres: tenant schema isolation incomplete: %s | validation | error | |
| postgres: finish tenant schema inspection: %w | exception | error | |
| postgres: inspect resolver schema: %w | exception | error | |
| postgres: resolver isolation incomplete: %s | validation | error | |
| postgres: set organization scope: %w | exception | error | |
| proposalrun: detail is not valid JSON: %w | validation | error | |
| proposalrun: detail contains trailing JSON | validation | error | |
| proposalrun: detail contains trailing data: %w | validation | error | |
| proposalrun: canonicalize detail: %w | validation | error | |
| proposalrun: marshal canonical detail: %w | validation | error | |
| number exceeds the supported JSONB numeric size | validation | error | |
| invalid JSON number | validation | error | |
| invalid or oversized JSON number | validation | error | |
| JSON number exceeds PostgreSQL fraction-digit limit | validation | error | |
| JSON number exceeds PostgreSQL integer-digit limit | validation | error | |
| JSON number exceeds PostgreSQL numeric limits | validation | error | |
| invalid JSON number exponent | validation | error | |
| JSON number exponent exceeds supported range | validation | error | json, postgres, limits, hash-chain |
| proposalrun: seq %d out of order (expected %d) | validation | critical | audit, hash-chain, data-integrity |
| proposalrun: seq %d prev_hash does not link to the prior row | validation | critical | audit, hash-chain, concurrency, tamper-detection |
| proposalrun: seq %d recompute: %w | validation | error | hash-chain, error-wrapping, json |
| proposalrun: seq %d row_hash mismatch (tampered) | validation | critical | tamper-detection, hash-chain, security, data-integrity |
| %w: %d bytes (limit %d) | validation | error | redaction, limits, dos-hardening, size-limit |
| %w: %q (rule %q) | validation | error | redaction, config, unsupported-type |
| %w: empty name | validation | error | redaction, validation, config |
| %w: rule %q has an empty pattern | validation | error | redaction, validation, config |
| %w: rule %q: %s | validation | error | redaction, regex, re2, config |
| %w: rule %q matches the empty string | validation | error | redaction, regex, footgun, validation |
| %s is not set; cannot encrypt/decrypt secrets | validation | error | secrets, environment, configuration, crypto |
| %s is not valid base64: %w | validation | error | secrets, base64, environment, configuration |
| %s must decode to exactly 32 bytes, got %d | validation | error | secrets, crypto, aes-256, environment |
| secretbox: KMS encrypt: %w | exception | error | secrets, kms, network, crypto |
| secretbox: production requires CAVE_KMS_PROVIDER=scaleway | validation | critical | secrets, kms, production, configuration, security-policy |
| nonce entropy: %w | exception | critical | crypto, entropy, sandbox, environment |
| secretbox: payload KMS encrypt: %w | exception | error | secrets, kms, artifacts, network, crypto |
| secretbox: KMS decrypt: %w | exception | error | crypto, kms, secretbox, go |
| secretbox: production refuses legacy local ciphertext | exception | error | crypto, secretbox, kms, migration, go |
| password must be at least %d bytes | validation | warning | validation, password, security, go |
| password must be at most %d bytes | validation | warning | validation, password, security, go |
| ssrf: scheme %q not permitted (managed mode requires https) | validation | error | ssrf, network, validation, security, go |
| ssrf: credentials embedded in URL are forbidden | validation | error | ssrf, security, credentials, validation, go |
| ssrf: URL must contain a host | validation | error | ssrf, validation, url, go |
| ssrf: host %q is blocked (loopback) | validation | error | ssrf, loopback, network, security, go |
| ssrf: DNS resolution failed for %q: %w | validation | error | ssrf, dns, network, go |
| ssrf: host %q resolved to no addresses | validation | error | ssrf, dns, network, go |
| ssrf: could not parse resolved IP %v for host %q | validation | error | ssrf, dns, network, go |
| ssrf: destination %s (for host %q) is in blocked range %s | validation | error | ssrf, loopback, network, security, go |
| ssrf: destination %s (for host %q) is a private address bloc | validation | error | ssrf, network, security, rfc1918, go |
| ssrf: destination %s (for host %q) is a private address; add | exception | error | ssrf, network, rfc1918, allowlist, go |
| ssrf: dial validated addresses for %q: %w | exception | error | ssrf, dial, network, go |
| telemetry attributes exceed %d keys | validation | error | |
| telemetry attribute key exceeds %d bytes | validation | error | |
| telemetry attribute %q exceeds %d bytes | validation | error | |
| telemetry attributes exceed %d bytes | validation | error | |
cave_input_too_large cave_input_too_large: stdin exceeds %d bytes | validation | error | |
| open recovery store %q: %w | exception | error | |
| resolve home directory: %w | exception | error | |
| create %s: %w | exception | error | |
| not valid JSON: %w | validation | error | |
| unsupported catalog shape | validation | error | |
| no named tools found | validation | error |