ErrLookup › abhigyanpatwari/GitNexus
abhigyanpatwari/GitNexus
GitNexus: The Zero-Server Code Intelligence Engine - GitNexus is a client-side knowledge graph creator that runs entirely in your browser. Drop in a git repository (Github, Gitlab, Azure, Local) or ZIP file, and get an interactive knowledge graph with a built in Graph RAG Agent. Perfect for code exploration · TypeScript · 1,006 source files
Analyzed at d540b00184 on 2026-08-12. 542 documented errors.
| Code / Message | Type | Severity | Tags |
|---|---|---|---|
| Circuit '${key}' is open; retry in ${Math.ceil(retryAfterMs | exception | error | circuit-breaker, resilience, network, fail-fast |
| Circuit '${key}' is open; retry in ${Math.ceil(halfOpenRetry | exception | error | circuit-breaker, resilience, concurrency, thundering-herd |
| Request failed after retries (HTTP ${response.status}) | exception | error | retry, resilience, http, network |
| [understand-quickly] expected id of the form "owner/repo", g | validation | error | validation, understand-quickly, registry, github |
| OpenAI API key is required but was not provided | validation | error | llm, openai, config, api-key |
| OpenRouter API key is required but was not provided | validation | error | llm, openrouter, config, api-key |
| MiniMax API key is required but was not provided | validation | error | llm, minimax, config, api-key |
| GLM API key is required but was not provided | validation | error | llm, glm, zhipu, config, api-key |
| DeepSeek API key is required but was not provided | validation | error | llm, deepseek, config, api-key |
| Unsupported provider: ${(config as any).provider} | validation | error | llm, config, provider, validation |
| Invalid backend URL: must be a well-formed http:// or https: | validation | error | validation, url, config, security |
| Backend URL must use http:// or https:// (got ${parsed.proto | validation | error | validation, url, security, ssrf, config |
| ${message} | http | error | http, backend, error-handling, api |
server No response body | http | error | graph, streaming, ndjson, backend, server |
| Graph exceeds the size limit (nodes=${nodes.length}, relatio | exception | warning | graph, streaming, size-limit, performance, graceful-degradation |
| shard total must be a positive integer, got ${total} | validation | error | validation, sharding, ci, testing |
| shard index must be in 1..${total}, got ${index} | validation | error | validation, sharding, ci, testing |
| Malformed --shard arg '${malformed}' — expected --shard=<ind | validation | error | cli, validation, sharding, ci |
| ${source}: value contains control or hidden/bidirectional ch | validation | error | validation, security, unicode, config, markdown-injection |
| ${source}: branch name must not be empty. | validation | error | validation, git, branch, config |
| ${source}: branch name is too long (max ${BRANCH_MAX_LENGTH} | validation | error | validation, git, branch, config |
| ${source}: branch name must not contain whitespace. | validation | error | validation, git, branch, config |
| ${source}: branch name contains characters not allowed in a | validation | error | validation, git, branch, config, security |
| ${source}: branch name must not start with "-". | validation | error | validation, git, branch, config |
| ${source}: branch name must not contain "..". | validation | error | validation, git, branch, config |
| ${source}: branch name must not contain a backtick (it would | validation | error | validation, git, branch, markdown-injection, config, security |
| ${source} must be a boolean (true/false). | validation | error | validation, config, typescript, json |
| ${source} must be a string branch name. | validation | error | validation, config, branch, typescript |
| ${source} must be a string. | validation | error | validation, config, typescript, json |
| ${source} must not be empty. | validation | error | validation, config |
| ${source} must not contain Markdown-significant characters ( | validation | error | validation, markdown-injection, security, config |
| ${source} must be an array of strings. | validation | error | validation, config, typescript, json |
| ${source} entries must all be strings. | validation | error | validation, config, typescript, json |
| ${source} entries must not be empty. | validation | error | validation, config |
| ${source} entry "${trimmed}" must be an identifier or member | validation | error | config, gitnexusrc, validation, regex-injection, fetch-wrappers |
| ${source} must list at least one string. | validation | error | config, gitnexusrc, validation, fetch-wrappers |
| ${source} must be a finite number. | validation | error | config, gitnexusrc, validation, numeric |
| ${source} must be a number or numeric string. | validation | error | config, gitnexusrc, validation, numeric |
| ${source} must be true/false or a non-negative integer (node | validation | error | config, gitnexusrc, validation, embeddings |
| ${source} must be a boolean or a non-negative integer (node | validation | error | config, gitnexusrc, validation, embeddings |
| Unknown key "${key}" in ${GITNEXUS_RC_FILENAME}. ${ALLOWED_K | validation | error | config, gitnexusrc, validation, unknown-key |
| ${GITNEXUS_RC_FILENAME}: "${prev}" and "${key}" both configu | validation | error | config, gitnexusrc, validation, aliases |
| Could not read ${GITNEXUS_RC_FILENAME}: ${(err as Error).mes | exception | error | config, gitnexusrc, filesystem, permissions |
| ${GITNEXUS_RC_FILENAME} is not valid JSON: ${(err as Error). | validation | error | config, gitnexusrc, json, validation |
| ${GITNEXUS_RC_FILENAME} must contain a JSON object. | validation | error | config, gitnexusrc, json, validation |
| ${GITNEXUS_RC_FILENAME} "${NESTED_KEY}" must be a JSON objec | validation | error | config, gitnexusrc, json, validation |
| Unable to read eval-server authentication from ${filePath} | exception | error | eval-server, env, auth, config |
| Refusing to start eval-server on non-loopback host ${host} w | exception | critical | eval-server, security, auth, network, fail-closed |
| ${flag} must be a positive integer | validation | error | wiki, cli, validation, numeric |
| ${flag} is too large | validation | error | wiki, cli, validation, numeric, overflow |
| Analysis feature descriptor id must not be empty | validation | error | analysis-features, internal, validation |
| Analysis feature "${descriptor.id}" has invalid version ${de | validation | error | analysis-features, internal, validation, versioning |
| Duplicate analysis feature descriptor: ${descriptor.id} | validation | error | analysis-features, internal, validation, duplicates |
| Analyzer dependency graph exceeded ${limits.runtimeEdges} ed | exception | error | analyzer-identity, dependency-graph, budget-limit, traversal |
| Analyzer dependency graph exceeded ${limits.runtimePackages} | exception | error | analyzer-identity, dependency-graph, budget-limit, traversal |
| Analyzer runtime payload directory is unavailable: ${absolut | exception | error | analyzer-identity, filesystem, directory-guard, toctou |
| Analyzer runtime payload scan exceeded ${limits.runtimeEntri | exception | error | analyzer-identity, filesystem, budget-limit, traversal |
| Analyzer runtime payload scan exceeded depth ${limits.runtim | exception | error | analyzer-identity, filesystem, budget-limit, symlink-cycle |
| Analyzer runtime payload scan exceeded ${limits.runtimePaylo | exception | error | analyzer-identity, filesystem, symlink, budget-limit |
| Analyzer runtime scan exceeded ${limits.runtimeBytes} bytes: | exception | error | analyzer-identity, filesystem, budget-limit, large-file |
| Unsupported analyzer runtime payload entry: ${absolutePath} | exception | error | analyzer-identity, filesystem, special-file, fifo-socket |
| Analyzer vendored runtime directory is unavailable: ${vendor | exception | error | analyzer-identity, filesystem, directory-guard, vendored-grammars |
| Analyzer runtime payload scan exceeded ${limits.runtimeEntri | exception | error | analyzer-identity, filesystem, budget-limit, vendored-grammars |
| ${TRUSTED_CACHE_DIRECTORY_ENV} must name an absolute protect | validation | error | analyzer-identity, cache, configuration, environment |
| ${TRUSTED_CACHE_DIRECTORY_ENV} must name a pre-existing prot | validation | error | analyzer-identity, cache, configuration, environment, filesystem |
| ${TRUSTED_CACHE_DIRECTORY_ENV} must not traverse symbolic li | validation | error | analyzer-identity, cache, configuration, symlink, environment |
| ${TRUSTED_CACHE_DIRECTORY_ENV} must be outside the analyzer | validation | error | analyzer-identity, cache, configuration, environment, feedback-loop |
| GitNexus package version is unavailable in ${packageRoot} | exception | error | analyzer-identity, manifest, package-json, configuration |
| Analyzer build changed while its identity was being computed | exception | error | analyzer-identity, toctou, concurrency, build |
| Analyzer dependency runtime changed while its identity was b | exception | error | analyzer-identity, toctou, concurrency, dependency-graph |
| Invoked analyzer artifact is absent from the validated build | exception | error | analyzer-identity, build, invoked-artifact, misconfiguration |
| Analyzer build or dependency runtime changed while its ident | exception | error | analyzer-identity, toctou, concurrency, cache-validation |
| Analyzer build or dependency runtime changed during analysis | exception | error | integrity, analyzer-identity, concurrency, provenance |
| ${name} must be a positive integer, got "${value}" | validation | error | config, env-var, embeddings, validation |
| embedding device must be one of auto, dml, cuda, cpu, wasm; | validation | error | config, env-var, embeddings, validation |
| initEmbedder() should not be called in HTTP mode. Use embedT | exception | error | embeddings, http-mode, api-misuse |
| Local semantic embeddings are unavailable on macOS Intel (da | exception | error | platform, macos-intel, onnxruntime, embeddings, native-binding |
| Local semantic embeddings are unavailable: the optional embe | exception | error | install, optional-dependency, embeddings, network, onnxruntime |
| Failed to download embedding model: ${errMsg} ${endpointHi | exception | error | network, huggingface, model-download, embeddings |
| No suitable device found for embedding model | exception | error | embeddings, device-probe, defensive, unreachable |
| getEmbedder() is not available in HTTP embedding mode. Use e | exception | error | embeddings, http-mode, api-misuse |
| Embedder not initialized. Call initEmbedder() first. | exception | error | embeddings, lifecycle, singleton, api-misuse |
| [embed] Failed to delete stale embedding rows — aborting to | exception | critical | embeddings, vector-index, data-integrity, ladybugdb, pipeline |
| checkpointEveryNodes must be a positive integer | validation | error | embeddings, pipeline, validation, config |
| Embedding model not initialized. Run embedding pipeline firs | exception | error | embeddings, semantic-search, lifecycle, query |
| hf-circuit-open: HuggingFace download circuit is open after | exception | error | network, circuit-breaker, huggingface, model-download, resilience |
| hf-circuit-open: HuggingFace download circuit opened after 3 | exception | error | network, circuit-breaker, huggingface, model-download, resilience |
| ${name} must be a positive integer, got "${raw}" | validation | error | config, env-var, embeddings, http-mode, validation |
| ${name} must be a positive integer <= ${max}, got "${raw}" | validation | error | config, env-var, embeddings, http-mode, validation, bounds |
| ${name} must be a non-negative integer, got "${raw}" | validation | error | config, env-var, embeddings, http-mode, validation |
| ${name} must be a non-negative integer <= ${max}, got "${raw | validation | error | config, env-var, embeddings, http-mode, validation, bounds |
| GITNEXUS_EMBEDDING_DIMS must be a positive integer, got "${r | validation | error | config, env-var, embeddings, http-mode, validation, dimensions |
| GITNEXUS_EMBEDDING_REQUEST_DIMS must be a positive integer, | validation | error | config, env, validation, embeddings |
| Embedding endpoint returned an unparseable response (${safeU | exception | error | network, retry, endpoint, response-body, embeddings |
| Embedding endpoint returned an unexpected response shape (${ | exception | error | endpoint, response-body, retry, schema, embeddings |
| Embedding endpoint returned ${received} vectors for ${expect | exception | error | endpoint, response-body, retry, cardinality, embeddings |
| Embedding request cancelled (${safeUrl(url)}, batch ${batchI | exception | info | abort, cancellation, embeddings, control-flow |
| ${err.terminalMessage} | exception | error | endpoint, response-body, retry-exhausted, embeddings |
| Embedding endpoint circuit open (${safeUrl(url)}, batch ${ba | exception | error | circuit-breaker, network, retry, endpoint, embeddings |
| Embedding request timed out after ${timeoutMs}ms (${safeUrl( | exception | error | timeout, network, endpoint, embeddings |
| Embedding endpoint returned ${err.response.status} (${safeUr | exception | error | network, endpoint, retry-exhausted, http-status, embeddings |
| Embedding request failed (${safeUrl(url)}, batch ${batchInde | exception | error | network, transport, dns, tls, embeddings |
| Embedding endpoint returned ${resp.status} (${safeUrl(url)}, | exception | error | http-status, endpoint, auth, config, embeddings |
| HTTP embedding not configured | exception | error | config, env, embeddings |
| Embedding dimension mismatch: endpoint returned ${vec.length | exception | error | config, embeddings, dimension-mismatch |
| Embedding endpoint returned empty response (${safeUrl(url)}) | exception | error | invariant, defensive, embeddings, internal |
| Embedding dimension mismatch: endpoint returned ${embedding. | exception | error | config, embeddings, dimension-mismatch, mcp |
| Bridge query prepare failed: ${errMsg} | exception | error | ladybugdb, cypher, group-bridge, query |
| Bridge query returned an empty QueryResult array | exception | error | ladybugdb, driver-contract, group-bridge, defensive-guard |
| Invalid YAML: expected an object | validation | error | yaml, group-config, validation, config-parser |
| version is required in group.yaml | validation | error | yaml, group-config, validation, config-parser |
| Unsupported group.yaml version: ${raw.version}. Expected 1. | validation | error | yaml, group-config, version, config-parser |
| name is required in group.yaml | validation | error | yaml, group-config, validation, config-parser |
| repos is required in group.yaml (must be a mapping) | validation | error | yaml, group-config, validation, repos, config-parser |
| links[${i}].from "${link.from}" does not match any repo path | validation | error | yaml, group-config, links, validation, config-parser |
| links[${i}].to "${link.to}" does not match any repo path in | validation | error | yaml, group-config, links, validation, config-parser |
| links[${i}].type "${link.type}" is invalid. Expected: ${VALI | validation | error | yaml, group-config, links, validation, contract-type, config-parser |
| links[${i}].role "${link.role}" is invalid. Expected: provid | validation | error | yaml, group-config, links, validation, contract-role, config-parser |
| links[${i}].contract is required | validation | error | yaml, group-config, links, validation, contract, config-parser |
| Group "${groupName}" not found | exception | error | group-config, not-found, filesystem, named-error, config-parser |
| Invalid group name "${name}". Names must start with a letter | validation | error | group-config, validation, path-traversal, security, storage |
| Group "${groupName}" already exists. Use --force to overwrit | validation | warning | group-config, exists, create, storage, recoverable |
| No JSON found in response | exception | info | llm, cluster-enricher, json-parse, fallback-handled, ingestion |
| optional icebug engine currently requires deterministic thre | validation | warning | icebug, community-detection, determinism, ingestion, config |
| optional icebug engine currently requires randomize=false | validation | warning | icebug, community-detection, determinism, ingestion, config |
| optional icebug build predates the deterministic thread/seed | exception | warning | icebug, native-dependency, version-mismatch, community-detection, ingestion |
| Worker pool failed to start: ${cause}${failureDetail}\n\nThe | exception | critical | worker-pool, parse, startup, build, native-binding, ingestion, fatal |
| Worker-pool parsing cannot be disabled (${reason}). GitNexus | exception | error | worker-pool, configuration, parsing, env-var, migration |
| Analyze stopped before running out of memory: ${heapUsedMB}M | exception | error | memory, parsing, heap, oom, worker-pool, autopilot |
| Spring YAML traversal depth exceeds ${MAX_YAML_TRAVERSAL_DEP | exception | error | spring, yaml, config-parsing, ingestion, depth-limit |
| Spring YAML traversal exceeds ${MAX_YAML_TRAVERSAL_NODES} no | exception | error | spring, yaml, config-parsing, ingestion, node-limit |
| Worker script not found: ${workerPath} | exception | error | worker-pool, startup, build, path, vitest |
| Worker pool circuit breaker tripped${reason}. Subsequent dis | exception | error | worker-pool, circuit-breaker, dispatch, resilience |
| Worker pool has no active workers${detail} | exception | error | worker-pool, startup, initialization, native-binding, resilience |
| GraphEmitSink: ${errors.length} streamed CSV writer(s) hit a | exception | critical | io, disk-full, file-descriptors, csv, graph-emit, emit |
| GitNexus: unable to acquire init lock after ${INIT_LOCK_MAX_ | exception | error | lock, init, concurrency, database, cross-process |
| GitNexus could not move the LadybugDB WAL sidecar at ${dbPat | exception | error | ladybugdb, wal, file-lock, permission, sidecar, recovery |
| LadybugDB checkpoint sidecar is missing for ${dbPath}. Rebui | exception | error | ladybugdb, sidecar, shadow, checkpoint, recovery, rebuild |
| LadybugDB checkpoint sidecar is missing for ${dbPath}. Rebui | exception | error | ladybugdb, sidecar, shadow, read-only, filesystem, recovery |
| LadybugDB WAL corruption detected at ${dbPath}. WAL corrupti | exception | critical | ladybugdb, wal, corruption, data-integrity, rebuild, schema |
| Refusing to delete ${dbPath}: resolved path ${realPath} is o | exception | error | safety, symlink, filesystem, delete-guard, database, security |
| COPY failed for ${table}: ${retryMsg}${remedy} | exception | error | ladybugdb, copy, buffer-pool, bulk-load, memory, rebuild |
| Prepare failed: ${errMsg} | exception | error | ladybugdb, cypher, query, prepare, schema |
| Batch execution failed for rows ${firstRow + 1}-${firstRow + | exception | error | ladybugdb, writeback, batch-insert, cypher, graph-store |
| Failed to remove the LadybugDB index files — still present a | exception | error | ladybugdb, file-lock, wipe, windows, analyze, antivirus |
| [${logTag}] failed to clear existing ${relType} edges before | exception | error | ladybugdb, incremental-writeback, duplicate-prevention, delete-all, graph-store |
| [spring-aop] failed to clear synthetic evidence before incre | exception | error | ladybugdb, spring-aop, incremental-writeback, synthetic-nodes, delete-all |
| [spring-auto-configuration] failed to clear synthetic Class | exception | error | ladybugdb, spring-auto-configuration, incremental-writeback, synthetic-nodes, delete-all |
| FTS extension unavailable - cannot create FTS index ${tableN | exception | error | fts, ladybugdb, native-extension, search, doctor |
| PdgEmitSink: ${errors.length} streamed CSV writer(s) hit an | exception | critical | pdg, csv-writer, disk-full, file-descriptors, emit, io-error |
| LadybugDB WAL corruption detected for ${repoId}. Run `gitnex | exception | critical | ladybugdb, wal-corruption, quarantine, file-lock, pool-adapter |
| LadybugDB not found at ${dbPath}. Run: gitnexus analyze | exception | error | ladybugdb, missing-database, pool-adapter, analyze, initialization |
| LadybugDB WAL corruption detected for ${repoId}. WAL corrupt | exception | critical | ladybugdb, wal-corruption, pool-adapter, reopen-failure, index-corruption |
| LadybugDB unavailable for ${repoId}. Another process may be | exception | error | ladybugdb, lock-contention, pool-adapter, concurrent-access, retry-exhausted |
| Connection pool integrity error: expected ${MAX_CONNS_PER_RE | exception | error | ladybugdb, connection-pool, leak, pool-adapter, internal-bug |
| LadybugDB not initialized for repo "${repoId}". Call initLbu | exception | error | ladybugdb, pool-adapter, not-initialized, query, initialization |
| Prepare failed: ${errMsg} | exception | error | ladybugdb, cypher, prepare-failed, query-syntax, pool-adapter |
| Write operations are not allowed. The pool adapter is read-o | validation | error | ladybugdb, read-only, pool-adapter, write-guard, serve |
| GITNEXUS_EMBEDDING_DIMS must be a positive integer, got "${p | validation | error | configuration, env-var, embeddings, schema, validation, fail-fast |
| LadybugDB checkpoint sidecar is present but unreachable for | exception | error | ladybugdb, sidecar, shadow, file-lock, checkpoint, recovery |
| LadybugDB checkpoint sidecar is missing for ${dbPath}. Rebui | exception | critical | ladybugdb, sidecar, orphan-wal, checkpoint, corruption, recovery |
| --branch "${options.branch}" does not match the checked-out | validation | error | analyze, branch-mismatch, git, cli, validation |
| Cannot repair FTS indexes because this repository has not be | validation | error | analyze, repair-fts, precondition, cli, metadata |
| Cannot repair FTS indexes: the index is mid-incremental-reco | validation | error | fts, analyze, crash-recovery, incremental, config |
| Cannot repair FTS indexes: graph store at ${lbugPath} is mis | validation | error | fts, analyze, filesystem, graph-store |
| Cannot repair FTS indexes: graph store at ${lbugPath} is ${f | validation | error | fts, analyze, filesystem, graph-store, corruption |
| Cannot repair FTS indexes: the LadybugDB FTS extension faile | exception | error | fts, native-extension, windows, dependencies, environment |
| FTS repair failed - missing indexes after rebuild: ${missing | exception | error | fts, analyze, rebuild, index-verification |
| Cannot resume embedding checkpoint: no embedding identity wa | validation | error | embeddings, checkpoint, resume, configuration |
| Cannot resume embedding checkpoint: the embedding provider c | validation | error | embeddings, checkpoint, resume, configuration, provider-mismatch |
| Cannot resume embedding checkpoint: it uses ${checkpoint.mod | validation | error | embeddings, checkpoint, resume, configuration, model-mismatch |
| Cannot start dirty-state recovery — the interrupted run's La | exception | error | crash-recovery, filesystem, file-lock, ladybugdb, windows, analyze |
| Search index build failed with an integrity error and the an | exception | error | fts, analyze, integrity, disk-space, atomic-swap |
| Embedding generation completed without persisted embeddings. | exception | error | embeddings, configuration, endpoint, analyze |
| Invalid GITNEXUS_FTS_CJK_SEGMENTATION "${process.env.GITNEXU | validation | warning | fts, config, env-var, cjk, validation, search |
| Invalid GITNEXUS_FTS_STEMMER "${process.env.GITNEXUS_FTS_STE | validation | warning | fts, config, env-var, stemmer, validation, search |
| Cursor CLI not found. Install it from https://cursor.com/doc | exception | error | wiki, cursor-cli, dependencies, environment, path |
| Wiki was generated in ${prevDisplay}; use --force to regener | validation | info | wiki, language, config, idempotency |
| No source files found in the knowledge graph. Nothing to doc | exception | error | wiki, knowledge-graph, empty-state, analyze |
| --allow-insecure-connection / ${LLM_ALLOW_INSECURE_CONNECTIO | validation | warning | config, security, llm-client, validation, http, env-var |
| Invalid LLM base URL: must be a well-formed http:// or https | validation | warning | config, security, llm-client, validation, url, env-var |
| LLM base URL must use http:// or https:// (got ${parsed.prot | validation | warning | config, security, llm-client, validation, url, ssrf |
| Insecure http:// LLM base URLs are only allowed for localhos | validation | error | llm, security, ssrf, configuration, url, wiki |
| LLM endpoint circuit open: retry in ${Math.ceil(err.retryAft | exception | error | llm, network, resilience, circuit-breaker, retry, wiki |
| LLM API error (${err.response.status} after retries): ${erro | exception | error | llm, network, api-error, retry, wiki |
| LLM request timed out after ${formatTimeoutDuration(config.r | exception | error | llm, timeout, configuration, network, wiki |
| Azure content filter blocked this request. The prompt trigge | exception | error | llm, azure, content-filter, policy, wiki |
| LLM API error (${response.status}): ${errorText.slice(0, 500 | exception | error | llm, network, api-error, wiki |
| LLM returned empty response | exception | error | llm, api-error, data, azure, reasoning-model, wiki |
ERR_DLOPEN_FAILED ERR_DLOPEN_FAILED | error_code | error | native-addon, install, ladybugdb, node, pnpm, documentation |
| Failed to install Node.js: {result.get('output', '')} | exception | error | eval, docker, node, install, network, gitnexus |
| Failed to install gitnexus: {result.get('output', '')} | exception | error | eval, docker, npm, install, network, gitnexus |
| gitnexus analyze failed: {output[-500:]} | exception | error | eval, docker, gitnexus, analyze, toolchain, oom |
| Model config not found: {model_file} | exception | error | eval, configuration, yaml, cli |
| Mode config not found: {mode_file} | exception | error | eval, configuration, yaml, cli |
| {label} is unavailable: {path}: {exc} | exception | error | workflow-bench, validation, path, sandbox, evolution |
| {label} must be a real non-symlink directory: {path} | exception | error | workflow-bench, validation, symlink, path, sandbox, security, evolution |
| {label} contains an unsafe path component: {relative} | exception | error | workflow-bench, validation, path-traversal, security, sandbox, evolution |
| {label} is unreadable: {path}: {exc} | exception | error | workflow-bench, validation, path, sandbox, toctou, evolution |
| {label} must be a regular non-symlink file: {path} | exception | error | workflow-bench, validation, symlink, path, sandbox, security, evolution |
| {label} exceeds the bounded evidence limit | exception | error | workflow-bench, validation, size-limit, sandbox, evolution |
| {label} changed while opening: {path} | exception | error | workflow-bench, validation, security, toctou, sandbox, evolution |
| {label} changed while being read: {path} | exception | error | toctou, concurrency, security, overlay, evidence |
| candidate destination escapes the clone: {relative} | exception | critical | path-traversal, security, overlay, trust-boundary |
| candidate destination parent must be a real directory: {rela | exception | error | filesystem, overlay, clone, sandbox |
| candidate destination is unreadable: {relative}: {exc} | exception | error | filesystem, permissions, overlay, clone |
| candidate destination must be a regular non-symlink file: {r | exception | critical | security, symlink, filesystem, overlay, trust-boundary |
| short write while staging candidate overlay | exception | error | io, disk-full, overlay, filesystem |
| candidate overlay is not a directory: {overlay} | exception | error | filesystem, overlay, config, empty-state |
| candidate overlay cannot traverse symlinks: {overlay} | exception | critical | symlink, security, overlay, filesystem, trust-boundary |
| candidate overlay directory is unreadable: {directory}: {exc | exception | error | filesystem, permissions, overlay |
| candidate overlay exceeds the {MAX_CANDIDATE_ENTRIES}-entry | exception | error | size-limit, overlay, benchmark |
| candidate overlay path exceeds {MAX_CANDIDATE_PATH_BYTES} by | exception | error | size-limit, path, overlay |
| candidate overlay cannot contain symlinks: {relative} | exception | critical | symlink, security, overlay, trust-boundary |
| candidate overlay entries must be regular files: {relative} | exception | error | filesystem, overlay, security, trust-boundary |
| candidate overlay exceeds the {MAX_CANDIDATE_FILES}-file lim | exception | error | size-limit, overlay, benchmark |
| candidate overlay contains no files: {overlay} | exception | error | overlay, config, empty-state |
| candidate overlays may only contain Markdown files under .cl | exception | critical | trust-boundary, security, overlay, config, skills |
| candidate sandbox does not bind the requested clone | exception | critical | sandbox, config, benchmark, trust-boundary |
| managed command failed ({state}, exit={returncode}): {detail | exception | error | sandbox, process, bwrap, benchmark, mkdir |
| candidate overlay is byte-identical to the incumbent skills | exception | error | workflow-bench, evolution, git, validation, candidate-overlay |
| skill fingerprint input must be a regular non-symlink file: | exception | error | workflow-bench, fingerprint, filesystem, validation, symlink |
| skill fingerprint input exceeds the bounded evidence limit | exception | error | workflow-bench, fingerprint, size-limit, validation |
| unsupported promotion metric: {metric} | exception | error | workflow-bench, promotion, validation, api-contract |
| evidence source must be a regular non-symlink file: {path} | exception | error | workflow-bench, sandbox, security, filesystem, symlink, evidence |
| results directory is unavailable: {root}: {exc} | exception | error | workflow-bench, sandbox, filesystem, results-dir, evidence |
| results directory must be a real non-symlink directory: {roo | exception | error | workflow-bench, sandbox, filesystem, results-dir, symlink |
| results directory must not traverse symlinks: {root} | exception | error | workflow-bench, sandbox, security, filesystem, symlink, results-dir |
| unsafe results artifact path: {relative_value!r} | exception | error | workflow-bench, sandbox, security, path-traversal, validation, evidence |
| results artifact parent is unavailable: {current}: {exc} | exception | error | workflow-bench, sandbox, filesystem, results-dir, consistency |
| results artifact parent must be a real directory: {current} | exception | error | workflow-bench, sandbox, security, filesystem, symlink, path-traversal |
| transcript artifact parent must be owner-only: {current} | exception | error | workflow-bench, sandbox, security, permissions, transcript, filesystem |
| transcript artifact metadata must contain only path, sha256, | exception | error | workflow-bench, sandbox, schema, validation, transcript, evidence |
| transcript artifact source is not the parent event stream | exception | error | workflow-bench, sandbox, security, provenance, transcript, validation |
| transcript artifact metadata is malformed | exception | error | workflow-bench, sandbox, validation, transcript, hash, schema |
| transcript artifact byte count must be an integer | exception | error | workflow-bench, sandbox, schema, type-safety, transcript, validation |
| transcript artifact exceeds the bounded run-output limit | exception | error | workflow-bench, sandbox, size-limit, transcript, validation, resource-bound |
| transcript_artifacts must be a list | exception | error | python, workflow-bench, evidence, validation, sandbox |
| transcript_artifacts exceeds the per-row session limit of {M | exception | error | python, workflow-bench, evidence, limits, sandbox |
| transcript_artifacts exceeds the global evidence limit of {M | exception | error | python, workflow-bench, evidence, limits, sandbox |
| duplicate transcript artifact path: {normalized} | exception | error | python, workflow-bench, evidence, dedupe, sandbox |
| transcript artifact is unavailable: {path}: {exc} | exception | error | python, workflow-bench, evidence, filesystem, sandbox |
| transcript artifact must be a regular non-symlink file: {pat | exception | critical | python, workflow-bench, sandbox, security, symlink, evidence |
| transcript artifact must be owner-only: {path} | exception | critical | python, workflow-bench, sandbox, security, permissions, evidence |
| transcript artifact size does not match its results row: {pa | exception | error | python, workflow-bench, evidence, integrity, sandbox |
| transcript artifact changed while opening: {path} | exception | critical | python, workflow-bench, sandbox, toctou, race, security |
| transcript artifact changed while reading: {path} | exception | critical | python, workflow-bench, sandbox, toctou, race, security |
| transcript artifact digest does not match its results row: { | exception | critical | python, workflow-bench, evidence, integrity, sha256, security |
| proposer did not produce one bounded regular proposal.md | exception | error | python, workflow-bench, proposer, sandbox, model-output |
| proposer output destination already exists: {overlay_dir} | exception | error | python, workflow-bench, proposer, filesystem, state |
| --arms must name exactly the minimal incumbent set for this | validation | error | python, workflow-bench, config, arms, cli |
| task count, runs, and session timeout must be positive | validation | error | python, workflow-bench, config, cli, validation |
| unsupported evolution arm: {exc.args[0]} | validation | error | python, workflow-bench, config, arms, validation |
| promotion binding uses an unsupported schema | validation | error | python, workflow-bench, promotion, schema, validation |
| promotion binding has no selected tasks | validation | error | python, workflow-bench, promotion, validation, tasks |
| promotion binding is missing hidden-oracle or dependency dig | validation | error | python, workflow-bench, promotion, sha256, oracle, validation |
| promotion binding is missing hidden-oracle files | validation | error | python, workflow-bench, promotion, oracle, validation |
| task {task_id} oracle requires exactly command and files | validation | error | python, benchmark, validation, oracle, schema |
| task {task_id} oracle command must be nonblank and bounded | validation | error | python, benchmark, validation, oracle, input-bounds |
| task {task_id} oracle files must contain 1..{MAX_ORACLE_FILE | validation | error | python, benchmark, validation, oracle, input-bounds |
| task {task_id} oracle file {index} requires exactly source a | validation | error | python, benchmark, validation, oracle, schema |
| task {task_id} oracle source is duplicated: {source} | validation | error | python, benchmark, validation, oracle, dedup |
| task {task_id} oracle target is duplicated: {target} | validation | error | python, benchmark, validation, oracle, dedup |
| oracle root is unavailable: {lexical} | validation | error | python, benchmark, oracle, filesystem, environment |
| oracle root must be a real non-symlink directory: {lexical} | validation | error | python, benchmark, oracle, security, symlink, filesystem |
| oracle parent is unreadable: {relative} | validation | error | python, benchmark, oracle, filesystem, path-traversal |
| oracle parents must be real directories: {relative} | validation | error | python, benchmark, oracle, security, symlink, filesystem |
| oracle source must be a bounded regular non-symlink file: {r | validation | error | python, benchmark, oracle, security, symlink, filesystem |
| oracle source is unreadable: {relative} | validation | error | python, benchmark, oracle, filesystem, permissions, toctou |
| oracle source changed while being captured: {relative} | validation | error | python, benchmark, oracle, security, toctou, integrity |
| task {task['id']} oracle exceeds the total byte limit | validation | error | python, benchmark, oracle, input-bounds, validation |
| oracle sanitization requires a self-contained clone: {root} | validation | critical | python, benchmark, oracle, security, git, sanitization, filesystem |
| oracle sanitization requires a real self-contained clone: {r | validation | critical | python, benchmark, oracle, security, git, sanitization, symlink |
| clone HEAD is not an immutable commit | validation | critical | python, benchmark, oracle, security, git, sanitization |
| cannot inspect the clone for committed benchmark harness dat | validation | critical | python, benchmark, oracle, security, git, sanitization, corruption |
| committed benchmark harness is not a single bounded tree | validation | critical | python, benchmark, oracle, security, git, sanitization, validation |
| committed benchmark harness is missing from the clone checko | validation | error | git, clone, sparse-checkout, worktree, oracle, sanitization, invariant |
| benchmark harness checkout must contain only real directorie | validation | error | git, clone, symlink, toctou, path-traversal, oracle, sanitization, invariant |
| untracked benchmark harness data blocks oracle sanitization | validation | error | git, untracked, worktree, oracle, sanitization, invariant |
| clone has more than {MAX_CLONE_REFS} references; refusing in | validation | error | git, refs, clone, mirror, oracle, sanitization, invariant |
| clone contains an unsafe reference name | exception | error | git, refs, argument-injection, security, oracle, sanitization, invariant |
| clone contains unsafe or unbounded remote metadata | exception | error | git, remote, argument-injection, security, oracle, sanitization, invariant |
| unsafe Git metadata blocks oracle sanitization: {pseudo_ref} | exception | error | git, pseudo-ref, symlink, toctou, security, oracle, sanitization, invariant |
| unsafe Git reflog metadata blocks oracle sanitization | exception | error | git, reflog, symlink, rmtree, security, oracle, sanitization, invariant |
| oracle sanitization left clone references recoverable | exception | error | git, refs, packed-refs, postcondition, oracle, sanitization, invariant |
| oracle sanitization left unreachable Git objects recoverable | exception | critical | git, fsck, prune, gc, data-leak, oracle, sanitization, postcondition, invariant |
| oracle sanitization left the {label} recoverable | exception | critical | git, cat-file, prune, repack, data-leak, oracle, sanitization, postcondition, invariant |
| oracle sanitization could not verify removal of the {label} | exception | error | git, cat-file, fsck, corruption, timeout, oracle, sanitization, postcondition, invariant |
| oracle sanitization left the benchmark harness visible | exception | critical | git, ls-tree, worktree, data-leak, oracle, sanitization, postcondition, invariant |
| oracle sanitization did not produce a clean task snapshot | exception | error | git, status, worktree, oracle, sanitization, postcondition, invariant |
| oracle sanitization did not retain its parentless task snaps | exception | error | git, head, hooks, concurrency, oracle, sanitization, postcondition, invariant |
| oracle sanitization snapshot unexpectedly retained parent hi | exception | error | git, commit-tree, parent, oracle, sanitization, postcondition, invariant |
| oracle sanitization retained a repository remote | exception | error | git, remote, config, oracle, sanitization, postcondition, invariant |
| oracle sanitization retained reflog metadata | exception | error | git, reflog, config, oracle, sanitization, postcondition, invariant |
| oracle stage parent must be a real directory: {item.target} | exception | error | staging, toctou, symlink, path-traversal, oracle, security, invariant |
| short write while staging oracle | exception | error | io, filesystem, enospc, quota, staging, oracle, invariant |
| oracle stage root changed during verification | exception | critical | oracle, toctou, integrity, benchmark, filesystem |
| oracle stage parent changed during verification: {item.targe | exception | critical | oracle, toctou, symlink, integrity, benchmark |
| oracle file changed during verification: {item.target} | exception | critical | oracle, toctou, integrity, benchmark, filesystem |
| oracle worktree must be a real non-symlink directory: {root} | exception | error | oracle, validation, symlink, worktree, precondition |
| CreateJobObjectW failed | exception | error | windows, win32, job-object, ctypes, handle-leak, process-control |
| SetInformationJobObject failed | exception | error | windows, win32, job-object, ctypes, process-control |
| AssignProcessToJobObject failed | exception | error | windows, win32, job-object, nested-jobs, process-control |
| NtResumeProcess failed | exception | error | windows, ntdll, process-control, race |
| TerminateJobObject failed | exception | error | windows, win32, job-object, cleanup, process-control |
| QueryInformationJobObject failed | exception | error | windows, win32, job-object, process-control, lifecycle |
| timeout and tail_bytes must be positive; terminate_grace mus | validation | error | validation, process-control, precondition, numeric |
| capture_stdout_bytes must be positive when supplied | validation | error | validation, process-control, precondition, numeric |
| managed command failed ({result.state}, exit={result.returnc | exception | error | process-control, subprocess, wrapper, diagnostic |
| overlay snapshot destination already exists: {destination} | exception | error | overlay, promotion, transactional, symlink, filesystem, precondition |
| frozen overlay bytes do not match the authorized input | exception | critical | overlay, promotion, integrity, filesystem, diagnostic |
| overlay destination must already be a regular file: {target} | exception | error | overlay, promotion, mirror, filesystem, precondition |
| overlay destination changed while being read: {target} | exception | error | overlay, promotion, toctou, mirror, filesystem, concurrency |
| repository root is unavailable: {root} | exception | error | filesystem, configuration, repository-root, permissions |
| repository root must be a real directory: {root} | exception | error | filesystem, security, symlink, repository-root, validation |
| repository root must not traverse symlinks: {root} | exception | error | filesystem, security, symlink, repository-root, validation |
| repository root changed while opening: {root} | exception | error | toctou, filesystem, race-condition, repository-root |
| overlay destination escapes repository: {target} | exception | critical | security, path-traversal, validation, overlay |
| overlay destination parent is unavailable: {target} | exception | error | filesystem, missing-directory, validation, overlay |
| overlay destination parent must not be a symlink: {target} | exception | critical | security, symlink, filesystem, validation, overlay |
| overlay destination parent changed while opening: {target} | exception | error | toctou, filesystem, race-condition, overlay |
| repository root changed during overlay {phase}: {root} | exception | critical | toctou, filesystem, race-condition, transaction, integrity, repository-root |
| overlay destination parent changed during {phase}: {item['ta | exception | critical | toctou, filesystem, race-condition, transaction, overlay, integrity |
| short write while staging overlay replacement | exception | error | filesystem, disk-full, io-error, staging, overlay |
| could not allocate a unique overlay staging file | exception | warning | filesystem, rng, staging, overlay, cleanup |
| atomic overlay exchange is unavailable on this platform | exception | critical | platform, filesystem, renameat2, atomic, linux-only |
| atomic overlay exchange is unavailable on this filesystem | exception | critical | filesystem, overlayfs, renameat2, docker, errno |
| duplicate overlay destination: {target} | exception | error | validation, overlay, duplicate, input-error |
| could not resolve the committed promotion base | exception | error | git, rev-parse, ref-resolution, input-error |
| committed promotion base is not an immutable object id | exception | error | git, object-id, validation, input-error |
| committed overlay destination is unavailable: {target} | exception | error | git, committed-content, validation, input-error |
| candidate overlay digest no longer matches promotion evidenc | exception | error | integrity, digest, cas, overlay |
| overlay destination base binding mismatch: | exception | error | integrity, cas, drift, overlay, validation |
| overlay destination drifted before apply: {replacement['targ | exception | error | concurrency, drift, integrity, overlay |
| overlay destination drifted during apply: {replacement['targ | exception | error | concurrency, drift, integrity, overlay, transaction |
| atomic overlay exchange parity check failed: {replacement['t | exception | critical | integrity, parity, renameat2, filesystem, atomic |
| post-apply parity check failed: {replacement['target']} | exception | critical | integrity, parity, concurrency, overlay, transaction |
| overlay apply failed and rollback was incomplete; recovery: | exception | critical | integrity, rollback, recovery, transaction, manual-intervention |
| overlay apply failed and all replacements were rolled back | exception | error | integrity, rollback, transaction, recovered |
| read-only sandbox path is unavailable: {raw_path} | exception | error | sandbox, bwrap, path-validation, mount |
| read-only sandbox path must be real and non-symlink: {raw_pa | exception | error | sandbox, bwrap, symlink, path-validation, mount |
| extra read-only mount is unavailable: {source} | exception | error | sandbox, bwrap, mount, path-validation, evidence |
| extra read-only mount must be real and non-symlink: {source} | exception | error | sandbox, bwrap, symlink, mount, path-validation |
| extra read-only mount target must be absolute: {mount.target | exception | error | sandbox, bwrap, path-traversal, mount, validation, security |
| evidence path is unreadable: {value}: {exc} | exception | error | evidence, filesystem, sandbox, validation |
| evidence must be a regular non-symlink file: {value} | exception | error | evidence, filesystem, symlink, sandbox, security |
| evidence exceeds the per-file limit: {value} | exception | error | evidence, size-limit, filesystem, sandbox |
| evidence destination already exists: {destination} | exception | error | evidence, filesystem, idempotency, sandbox |
| evidence names must be simple relative files: {name!r} | exception | error | evidence, path-traversal, security, validation |
| evidence exceeds the per-file limit: {name} | exception | error | evidence, size-limit, validation, sandbox |
| evidence bundle exceeds the total byte limit | exception | error | evidence, size-limit, sandbox |
| model base URL must be an HTTP(S) endpoint without credentia | validation | error | network, url-validation, security, sandbox |
| model auth token must not be blank | validation | error | config, auth, validation, sandbox |
| required executable is unavailable: {default} | exception | error | environment, executable, dependency, sandbox |
| required executable is not an executable regular file: {path | exception | error | executable, filesystem, permissions, sandbox |
| Bubblewrap containment is supported only on Linux/WSL2, not | exception | error | platform, environment, sandbox, bubblewrap |
| Bubblewrap namespace preflight failed: {result.detail or res | exception | error | bubblewrap, namespace, environment, security, sandbox |
| PID-namespace command must not be empty | validation | error | validation, executable, sandbox, programmer-error |
| {label} must be a real directory: {lexical}: {exc} | exception | error | filesystem, symlink, validation, sandbox, security |
| {label} must be a real directory: {lexical} | exception | error | filesystem, symlink, validation, sandbox, security |
| {label} must not traverse symlinks: {lexical} | exception | error | filesystem, symlink, validation, sandbox, security |
| {label} must be a repository-relative path: {relative!r} | exception | error | path-traversal, security, validation, sandbox |
| {label} escapes its allowed repository root: {relative} | exception | error | path-traversal, symlink, security, validation, sandbox |
| {label} does not exist: {relative} | exception | error | sandbox, path-validation, trust-boundary, task-assets |
| {label} target has a non-directory or symlink parent: {relat | exception | error | sandbox, symlink-guard, trust-boundary, task-assets, path-validation |
| {label} target cannot be a symlink: {relative} | exception | error | sandbox, symlink-guard, trust-boundary, task-assets, path-validation |
| {label} directory target has the wrong type: {relative} | exception | error | sandbox, path-validation, trust-boundary, task-assets |
| {label} file target has the wrong type: {relative} | exception | error | sandbox, path-validation, trust-boundary, task-assets |
| {label} target has the wrong type: {relative} | exception | error | sandbox, path-validation, trust-boundary, task-assets |
| hidden oracle sandbox does not bind the credited worktree | exception | error | sandbox, oracle, integrity, worktree, trust-boundary |
| hidden oracle mountpoint changed type during verification | exception | error | sandbox, oracle, tamper-evidence, integrity, trust-boundary |
| benchmark index metadata must be regular and non-symlink: {m | exception | error | sandbox, registry, gitnexus, symlink-guard, trust-boundary |
| benchmark index metadata is malformed: {metadata_path} | exception | error | sandbox, registry, gitnexus, json, validation |
| benchmark index metadata must be an object: {metadata_path} | exception | error | sandbox, registry, gitnexus, json, validation |
| benchmark index metadata is missing indexedAt or lastCommit | exception | error | sandbox, registry, gitnexus, validation, provenance |
| task file must contain a tasks list | validation | error | cli, yaml, validation, task-config |
| --task-bindings-json must contain a list | validation | error | cli, json, validation, task-config |
| --promotion-target-bases-json must contain a string mapping | validation | error | cli, json, validation, promotion, task-config |
| task asset snapshot preparation failed: {asset_snapshot_erro | exception | error | runner, task-assets, snapshot, error-propagation |
| sanitized graph snapshot preparation failed: {graph_snapshot | exception | error | runner, graph-snapshot, snapshot, error-propagation, gitnexus |
| sanitized graph snapshot is unavailable | exception | error | runner, graph-snapshot, snapshot, error-propagation, gitnexus |
| benchmark harness path must be a real directory before it ca | exception | error | sandbox, symlink-guard, trust-boundary, harness, oracle |
| managed command failed ({result.state}, exit={result.returnc | exception | error | runner, task-setup, managed-process, sandbox, process-control |
| candidate overlay changed during the benchmark run | exception | critical | integrity, candidate-overlay, benchmark, tamper-evidence |
| sandboxed candidate setup did not produce an immutable commi | exception | critical | git, sandbox, benchmark, integrity |
| [harness-health] incumbent arm(s) {broken_incumbents} resolv | console | critical | harness-health, incumbent, benchmark, environment |
| workspace snapshot root must be a real directory: {root} | validation | error | filesystem, symlink, integrity, workspace-snapshot |
| workspace snapshot directory is unreadable: {directory}: {ex | validation | error | filesystem, permissions, workspace-snapshot |
| workspace snapshot exceeds its bounded entry or path limit | validation | warning | limits, workspace-snapshot, filesystem |
| workspace snapshot exceeds its bounded file-byte limit | validation | warning | limits, workspace-snapshot, filesystem |
| workspace file changed while opening: {entry.path} | validation | error | toctou, integrity, workspace-snapshot |
| workspace file changed while hashing: {entry.path} | validation | error | toctou, integrity, workspace-snapshot |
| phase artifact escapes the workspace: {allowed_artifact} | validation | error | phase-boundary, workspace, integrity |
| phase did not create or change its required artifact: {relat | validation | error | phase-boundary, artifact, evidence |
| phase artifact must be a regular non-symlink file: {relative | validation | error | phase-boundary, artifact, symlink, integrity |
| phase artifact must be a readable regular non-symlink file: | validation | error | phase-boundary, artifact, permissions |
| phase changed unauthorized workspace path(s): {preview}{suff | validation | error | phase-boundary, unauthorized-change, workspace, integrity |
| {phase} changed the evaluated skill fingerprint | validation | error | skill-fingerprint, phase-boundary, integrity |
| plan directory must be a real directory: {plans} | validation | error | plan-docs, symlink, integrity |
| plan artifact cannot be a symlink: {path} | validation | error | plan-docs, symlink, integrity |
| plan artifact must be a regular file: {path} | validation | error | plan-docs, special-file, integrity |
| plan artifact changed while opening: {path} | validation | error | toctou, plan-artifacts, filesystem, integrity, workflow-bench |
| plan artifact changed while hashing: {path} | validation | error | toctou, plan-artifacts, integrity, filesystem, workflow-bench |
| planning deleted existing plan artifact(s): {deleted} | validation | error | plan-artifacts, integrity, workflow-bench, validation |
| planning must create or modify exactly one plan artifact; ob | validation | error | plan-artifacts, validation, workflow-bench, evidence-contract |
| clone unexpectedly has an external object alternate: {altern | exception | critical | git-clone, sandbox-isolation, alternates, workflow-bench |
| clone object is hardlinked to host storage: {obj} | exception | critical | git-clone, sandbox-isolation, hardlinks, workflow-bench |
| ref {ref!r} not found in clone of {repo} | exception | error | git-clone, ref-resolution, task-config, workflow-bench |
| managed command failed ({result.state}, exit={result.returnc | exception | error | git, sandbox, managed-process, workflow-bench |
| unsafe git object id: {orig_sha!r} | validation | critical | security, command-injection, git, validation, workflow-bench |
| sandboxed git diff did not produce a SHA-256 digest | exception | error | git, sha256, evidence-integrity, sandbox, workflow-bench |
| generated artifact is not a regular non-symlink file: {path} | exception | critical | security, symlink, sandbox-isolation, toctou, workflow-bench |
| generated artifact changed type while opening: {path} | exception | critical | security, toctou, sandbox-isolation, filesystem, workflow-bench |
| GitNexus MCP executable must stay outside {SANDBOX_WORKSPACE | exception | critical | security, sandbox-isolation, mcp, configuration, workflow-bench |
| event-stream artifact path must be transcripts/<file>: {rela | validation | error | security, path-traversal, validation, event-stream, workflow-bench |
| unsafe event-stream artifact path: {relative_path!r} | validation | error | security, path-traversal, validation, event-stream, workflow-bench |
| {flag} must name a nonblank, versioned model | validation | error | validation, model-config, reproducibility, workflow-bench |
| {flag} must not use a mutable auto/latest model alias: {mode | validation | error | validation, model-config, reproducibility, workflow-bench |
| task {index} must be a mapping | validation | error | validation, task-config, config-schema, workflow-bench |
| task {index} requires a nonblank string {field} | validation | error | workflow-bench, task-validation, yaml |
| task {task['id']} field {field} must be a string | validation | error | workflow-bench, task-validation, yaml |
| task id must be a simple artifact-safe slug: {task_id!r} | validation | error | workflow-bench, task-validation, slug, naming |
| duplicate task id: {task_id} | validation | error | workflow-bench, task-validation, uniqueness |
| task {task_id} expensive metadata must be boolean | validation | error | workflow-bench, task-validation, yaml, types |
| task {task_id} sandbox_copy must be a string list | validation | error | workflow-bench, task-validation, sandbox, yaml |
| task {task_id} sandbox_dependencies must be a list | validation | error | workflow-bench, task-validation, sandbox, yaml |
| task {task_id} sandbox_dependencies entries require nonblank | validation | error | workflow-bench, task-validation, sandbox, schema |
| no tasks selected after expensive-task filtering | validation | error | workflow-bench, task-selection, filtering |
| task binding count does not match selected tasks | validation | error | workflow-bench, task-binding, pinning, reproducibility |
| oracle snapshot count does not match selected tasks | validation | error | workflow-bench, task-binding, oracle, internal-api |
| task binding {index} must be an object | validation | error | workflow-bench, task-binding, json, schema |
| task {task['id']} did not resolve to an immutable commit | validation | error | workflow-bench, task-binding, git, reproducibility |
| pinned task commit is unavailable for {task['id']}: {resolve | validation | error | workflow-bench, task-binding, git, clone |
| task binding definition drifted for {task['id']} | validation | error | workflow-bench, task-binding, drift, reproducibility |
| ce_* arm has no staged Compound Engineering plugin | exception | error | workflow-bench, sandbox, ce-plugin, mounts |
| {label} is unavailable: {root}: {exc} | exception | error | workflow-bench, sandbox, filesystem, runtime |
| {label} must be a real directory: {root} | exception | error | workflow-bench, sandbox, filesystem, symlink, security |
| pinned GitNexus runtime component is unavailable: {source}: | exception | error | workflow-bench, sandbox, filesystem, runtime, build |
| pinned GitNexus runtime component must be a real {kind}: {so | exception | error | workflow-bench, sandbox, filesystem, symlink, security, build |
| pinned GitNexus runtime metadata is invalid: {exc} | exception | error | sandbox, gitnexus-runtime, build, metadata |
| pinned GitNexus runtime entrypoint must be regular and non-s | exception | error | sandbox, symlink-guard, gitnexus-runtime, filesystem |
| pinned GitNexus runtime version drifted: expected {PINNED_GI | exception | error | versioning, reproducibility, gitnexus-runtime |
| pinned GitNexus runtime has an unexpected gitnexus-shared de | exception | error | workspace, dependency-linking, gitnexus-runtime, node-modules |
| pinned GitNexus shared runtime metadata is invalid: {exc} | exception | error | validation, gitnexus-shared, metadata |
| pinned GitNexus shared runtime has an unexpected package ide | exception | error | package-identity, validation, gitnexus-shared |
| --ce-plugin-dir and --ce-plugin-version require at least one | validation | error | cli, argument-validation, ce-plugin |
| ce_* arms require both --ce-plugin-dir and --ce-plugin-versi | validation | error | cli, argument-validation, ce-plugin |
| --ce-plugin-version must be an exact semantic version (alias | validation | error | cli, semver, argument-validation, ce-plugin |
| Compound Engineering plugin manifest directory is unavailabl | exception | error | ce-plugin, manifest, sandbox, filesystem |
| Compound Engineering plugin manifest directory must be real: | exception | error | symlink-guard, ce-plugin, sandbox, manifest |
| Compound Engineering plugin manifest is missing: {manifest_p | exception | error | ce-plugin, manifest, structure |
| Compound Engineering plugin skills directory is missing: {sk | exception | error | ce-plugin, skills, structure |
| Compound Engineering plugin directory is unreadable: {direct | exception | error | ce-plugin, permissions, filesystem, sandbox |
| Compound Engineering plugin entry is unreadable: {entry.path | exception | error | ce-plugin, permissions, filesystem, race-condition |
| Compound Engineering plugin entries must not be symlinks: {e | exception | error | symlink-guard, ce-plugin, sandbox, filesystem |
| Compound Engineering plugin entries must be regular files: { | exception | error | ce-plugin, sandbox, filesystem, security |
| Compound Engineering plugin component is unreadable: {direct | exception | error | ce-plugin, permissions, filesystem |
| Compound Engineering plugin component must be a real directo | exception | error | symlink-guard, ce-plugin, sandbox, structure |
| Compound Engineering plugin file is unreadable: {path}: {exc | exception | error | ce-plugin, permissions, filesystem, race-condition |
| Compound Engineering plugin file must be regular and non-sym | exception | error | sandbox, ce-plugin, symlink, validation, workflow-bench, filesystem |
| Compound Engineering plugin file exceeds the per-file limit: | exception | error | sandbox, ce-plugin, size-limit, validation, workflow-bench |
| Compound Engineering plugin file changed during validation: | exception | critical | sandbox, ce-plugin, toctou, race-condition, security, workflow-bench |
| Compound Engineering plugin file changed while being copied: | exception | critical | sandbox, ce-plugin, toctou, race-condition, content-integrity, workflow-bench |
| Compound Engineering plugin path exceeds the byte limit: {re | exception | error | sandbox, ce-plugin, path-limit, validation, workflow-bench |
| Compound Engineering plugin exceeds the file-count limit | exception | error | sandbox, ce-plugin, count-limit, validation, workflow-bench |
| Compound Engineering plugin exceeds the total byte limit | exception | error | sandbox, ce-plugin, size-limit, validation, workflow-bench |
| Compound Engineering plugin manifest is invalid: {exc} | exception | error | sandbox, ce-plugin, manifest, json, validation, workflow-bench |
| CE comparator requires the compound-engineering plugin manif | exception | error | sandbox, ce-plugin, manifest, identity, validation, workflow-bench |
| Compound Engineering plugin version mismatch: expected {conf | exception | error | sandbox, ce-plugin, version, manifest, validation, workflow-bench |
| Compound Engineering plugin is missing required skill: {skil | exception | error | sandbox, ce-plugin, skills, manifest, validation, workflow-bench |
| sanitized task identity drifted between graph preparation an | exception | critical | sandbox, graph, integrity, anti-replay, workflow-bench, gitnexus |
| sandbox_copy must be a list | exception | error | sandbox, task-spec, validation, type-error, workflow-bench |
| sandbox_copy cannot import prebuilt graph or harness data: { | exception | critical | sandbox, oracle-leak, task-spec, security, workflow-bench, gitnexus |
| sandbox_dependencies must be a list | exception | error | sandbox, task-spec, validation, type-error, workflow-bench |
| sandbox dependency cannot expose prebuilt graph or harness d | exception | critical | sandbox, oracle-leak, task-spec, security, workflow-bench, gitnexus |
| target-controlled {name} must not be a directory | exception | error | sandbox, graph, validation, filesystem, workflow-bench, gitnexus |
| short write while neutralizing {name} | exception | error | sandbox, graph, filesystem, io-error, disk-full, workflow-bench |
| target .gitnexus path must be a real directory before graph | exception | critical | sandbox, graph, sandbox-escape, symlink, security, workflow-bench, gitnexus |
| cannot scan sanitized graph source: {directory}: {exc} | exception | error | sandbox, filesystem, workflow-bench, io |
| sanitized graph source exceeds the scrub entry limit | exception | error | sandbox, limits, workflow-bench, sanitization |
| sanitized graph source exceeds the scrub byte limit | exception | error | sandbox, limits, workflow-bench, sanitization |
| sanitized graph source changed while opening: {relative} | exception | error | sandbox, toctou, filesystem, workflow-bench |
| sanitized graph source changed while scanning: {relative} | exception | error | sandbox, toctou, filesystem, workflow-bench |
| managed command failed ({result.state}, exit={result.returnc | exception | error | subprocess, sandbox, gitnexus, workflow-bench, timeout |
| bounded graph-query output was unavailable | exception | error | subprocess, sandbox, workflow-bench, io |
| {label} did not return strict JSON | exception | error | gitnexus, json, workflow-bench, sandbox |
| {label} found recoverable benchmark harness references | exception | critical | security, benchmark-integrity, sanitization, gitnexus, workflow-bench |
| sanitized graph asset must be regular and non-symlink: {path | exception | error | security, sandbox, filesystem, workflow-bench |
| sanitized graph metadata is malformed | exception | error | gitnexus, json, filesystem, workflow-bench |
| sanitized graph metadata is not bound to the parentless task | exception | error | integrity, gitnexus, workflow-bench, sandbox |
| sanitized graph metadata does not prove a --pdg build | exception | error | gitnexus, integrity, workflow-bench, sandbox |
| dependency snapshot changed: {dependency.source} | exception | error | integrity, sandbox, workflow-bench, toctou |
| task asset cache is already closed | exception | error | state, workflow-bench, lifecycle |
| dependency snapshot is empty: {declaration.source} | exception | error | validation, workflow-bench, dependencies |
| task asset snapshot key collision: {digest} | exception | error | integrity, workflow-bench, caching |
| sandbox_copy directory is unreadable: {relative}: {exc} | exception | error | filesystem, workflow-bench, sandbox, permissions |
| sandbox_copy must not traverse a symlink: {child_relative} | exception | error | security, symlinks, workflow-bench, sandbox |
| sandbox_copy directory changed while snapshotting: {relative | exception | error | toctou, filesystem, workflow-bench, sandbox |
| sandbox_copy accepts only regular files and directories: {re | exception | error | sandbox, filesystem, validation, special-files |
| sandbox_copy exceeds the total byte limit | exception | error | sandbox, limits, budget, filesystem |
| sandbox_copy file changed while snapshotting: {relative} | exception | error | sandbox, filesystem, concurrency, toctou, integrity |
| dependency symlink is unreadable or not UTF-8: {relative} | exception | error | sandbox, symlink, dependencies, encoding, permissions |
| dependency symlink must be a bounded relative link: {relativ | exception | error | sandbox, symlink, dependencies, security, path-traversal |
| dependency symlink target exceeds the path limit: {relative} | exception | error | sandbox, symlink, dependencies, limits, path-length |
| dependency symlink changed while snapshotting: {relative} | exception | error | sandbox, symlink, dependencies, concurrency, toctou, integrity |
| sandbox_copy paths collide at {current} | exception | error | sandbox, manifest, validation, paths, collision |
| sandbox_copy paths collide at {entry.path} | exception | error | sandbox, manifest, validation, collision, integrity |
| sandbox_copy exceeds the entry limit | exception | error | sandbox, limits, entries, budget, validation |
| sandbox_copy must be a list of nonblank repository-relative | exception | error | sandbox, config, validation, task-declaration, schema |
| sandbox_copy must be a repository-relative path: {raw!r} | exception | error | sandbox, config, validation, path-traversal, security, task-declaration |
| sandbox_copy declarations overlap: {path} and {other} | exception | error | sandbox, config, validation, overlap, task-declaration |
| sandbox_dependencies must be a list | exception | error | sandbox, config, validation, dependencies, schema, task-declaration |
| sandbox_dependencies entries require only nonblank source an | exception | error | sandbox, config, validation, dependencies, schema, task-declaration |
| dependency source must stay inside the repository: {source_p | exception | error | sandbox, config, validation, dependencies, path-traversal, security, task-declaration |
| dependency target must stay inside the clone: {target_path} | exception | error | sandbox, config, validation, dependencies, path-traversal, security, task-declaration |
| sandbox dependency targets overlap: {declaration.target} and | exception | error | sandbox, config, validation, overlap, dependencies, task-declaration |
| sandbox_copy path is unavailable: {relative}: {exc} | exception | error | sandbox, sandbox-copy, permissions, missing-path |
| sandbox_copy must not traverse a symlink: {relative} | exception | critical | sandbox, sandbox-copy, symlinks, security |
| sandbox_copy parent must be a directory: {relative} | exception | error | sandbox, sandbox-copy, path-layout |
| sandbox_copy path changed or is unreadable: {relative}: {exc | exception | critical | sandbox, toctou, race, file-descriptors |
| sandbox_copy path changed while opening: {relative} | exception | critical | sandbox, toctou, race, inode-swap |
| dependency symlink escapes the sandbox workspace: {entry.pat | exception | critical | sandbox, symlinks, path-traversal, security, dependencies |
| dependency symlink is dangling or escapes its snapshot: {ent | exception | critical | sandbox, symlinks, dependencies, dangling-link |
| sandbox_copy {role}: {relative} | exception | critical | sandbox, sandbox-copy, symlinks, clone-hygiene |
| sandbox_copy target has an unsupported type: {relative} | exception | error | sandbox, sandbox-copy, special-files, clone-hygiene |
| sandbox_copy target parent has an unsupported type: {relativ | exception | error | sandbox, sandbox-copy, special-files, clone-hygiene |
| sandbox_copy target cannot traverse a symlink: {parent} | exception | critical | sandbox, sandbox-copy, symlinks, toctou |
| sandbox_copy target parent has an unsupported type: {parent} | exception | error | sandbox, sandbox-copy, special-files, clone-hygiene |
| task asset snapshot file changed: {entry.path} | exception | critical | sandbox, snapshot, integrity, toctou |
| task asset reflink produced an invalid file: {entry.path} | exception | critical | sandbox, reflink, integrity, filesystem |
| task asset filesystem cannot reflink the snapshot and the bu | exception | error | sandbox, reflink, filesystem, configuration |
| task asset snapshot file changed while materializing: {entry | exception | critical | sandbox, snapshot, integrity, toctou |
| short write while copying task assets | exception | error | filesystem, io, disk-full, sandbox |
| sandbox_copy path is not valid UTF-8: {relative!s} | exception | error | validation, paths, encoding, sandbox |
| sandbox_copy exceeds the path byte limit | exception | error | validation, paths, limits, sandbox |
| sandbox dependency content changed after task binding | exception | error | integrity, dependencies, hashing, sandbox |
| task asset snapshot contains an unexpected symlink: {path} | exception | error | sandbox, symlinks, filesystem, security |
| task asset snapshot contains a special file: {path} | exception | error | sandbox, filesystem, security, validation |
| task asset snapshot contains a special directory: {path} | exception | error | sandbox, filesystem, security, concurrency |
| task asset snapshot does not match this dependency declarati | exception | error | dependencies, snapshot, validation, sandbox |
| task asset snapshot does not match this task declaration | exception | error | snapshot, validation, integrity, sandbox |
| sandbox_dependencies require a caller-owned immutable task a | exception | error | api-usage, dependencies, validation, sandbox |