witness

What was checked

Plain notes from the hygiene checks.

• Permissions

  Concern

  requests shell access. No manifest field names shell or command execution.

  PERMISSION_SHELL_UNDECLARED

  docs/superpowers/plans/2026-08-29-triage-wave-3-drive.md, line 9

  **Tech Stack:** TypeScript (Node `child_process.spawn` with line-buffered piping), vitest with a fake agent binary behind an env seam (the calibration fixture pattern: `fakeBinDir(

  docs/superpowers/plans/2026-08-29-triage-wave-3-drive.md, line 175

  - [ ] **Step 2: Verify failure.** - [ ] **Step 3: Implement** with `child_process.spawn`, a small line-splitter on both pipes, `setTimeout` for the kill, and `sessionSpawnCmd` fact

• Install and update

  Pass

  No install-time script found, and dependencies are pinned or absent.

• Network

  Concern

  can reach a host that is not written as a fixed address.

  NETWORK_NO_FIXED_HOST

  calibration/reviewers/pr-test/seeds/s6-stubbed-network/overlay/src/redeem-page.mjs, line 13

  const res = await fetch('/api/redeem', {

  src/registry.ts, line 30

  const res = await fetch(`${base}/-/package/${PACKAGE}/dist-tags`, {

  src/ship.ts, line 137

  // One read-only fetch decides the whole routing. A failed fetch (no remote, offline) leaves

  Show more

  src/ship.ts, line 378

  // One read-only fetch decides the whole routing. A failed fetch (no remote, offline)

  docs/superpowers/plans/2026-08-06-witness-0.6.0-gate-semantics.md, line 424

  // One read-only fetch decides the whole routing. A failed fetch (no remote, offline) leaves

  docs/superpowers/plans/2026-08-07-payload-sync-and-check-subject-0.7.0.md, line 665

  const res = await fetch(`${base}/-/package/${PACKAGE}/dist-tags`, {

  docs/superpowers/specs/2026-08-29-pi-sessions-triage-design.md, line 16

  2. **Contamination turns drift unrecoverable.** `start` cuts the plan branch from the *local* ship branch with no fetch (`verbs/start.ts:36` → `worktree.ts:183`; no fetch in either

• Secrets

  Concern

  reads a credential or environment file.

  SECRETS_ENV_READ SECRETS_PATH_UNCONFIRMED

  calibration/reviewers/silent-failure-hunter/base/src/sync.mjs, line 3

  const SIGNING_SECRET = process.env.ORDER_SIGNING_SECRET;

  calibration/reviewers/silent-failure-hunter/inject/i1-default-mask-injected/overlay/src/sync.mjs, line 4

  const SIGNING_SECRET = process.env.ORDER_SIGNING_SECRET;

  calibration/reviewers/silent-failure-hunter/seeds/s1-empty-catch/overlay/src/sync.mjs, line 3

  const SIGNING_SECRET = process.env.ORDER_SIGNING_SECRET;

  Show more

  calibration/reviewers/silent-failure-hunter/seeds/s2-default-mask/overlay/src/sync.mjs, line 3

  const SIGNING_SECRET = process.env.ORDER_SIGNING_SECRET;

  calibration/reviewers/silent-failure-hunter/seeds/s3-fire-and-forget/overlay/src/sync.mjs, line 3

  const SIGNING_SECRET = process.env.ORDER_SIGNING_SECRET;

  calibration/reviewers/silent-failure-hunter/seeds/s4-config-fallback/overlay/src/sync.mjs, line 3

  const SIGNING_SECRET = process.env.ORDER_SIGNING_SECRET;

  plugin-context/hooks/context.ts, line 39

  if ((await $.env.get('WITNESS_REVIEWER')) !== undefined) return undefined;

  plugin-context/hooks/context.ts, line 58

  await $.env.set('WITNESS_CONTEXT', readingJson(session, context.tokens, context.window, context.percent));

  plugin-context/hooks/context.ts, line 62

  await $.env.set('WITNESS_CONTEXT', undefined);

  src/calibrate.ts, line 638

  { ...ctx.env, ...env, WITNESS_BIN: `node ${join(dirname(fileURLToPath(import.meta.url)), 'bin.js')}` })

  src/context.ts, line 84

  const out = { ...env }

  src/drive.ts, line 188

  ...inherited, ...env, WITNESS_BIN: localBin(ctx), [DRIVE_ENV]: step.target ?? TARGETLESS,

  src/reviewer.ts, line 170

  ...ctx.env, ...env, WITNESS_REVIEWER: '1', ...(opts.lens !== undefined ? { WITNESS_LENS: opts.lens } : {}),

  src/spawn.ts, line 121

  env: { ...env, NoDefaultCurrentDirectoryInExePath: '1' },

• Agent instructions

  Pass

  No instruction to ignore earlier instructions or to hide a step.

• Obfuscation

  Note

  a file was over the read cap and was not fully read. the file cap was reached before every file was read.

  OBFUSCATION_FILE_OVER_READ_CAP OBFUSCATION_FILE_CAP_REACHED

  DESIGN.md, line 1

  # witness - Design

  src/gates/index.ts, line 1

  // Side-effect imports register the gate specs.

• Licence

  Pass

  A licence file is present (LICENSE).

• Maintainer activity

  Pass

  The latest commit is within the last 365 days.

Get the full report on this tool, £49

Note

Hygiene check of commit 8f69427aa58a. requests shell access. No manifest field names shell or command execution. can reach a host that is not written as a fixed address. reads a credential or environment file. a file was over the read cap and was not fully read. the file cap was reached before every file was read.

Date and source

Date checked: 25 Oct 2026

Read how this letter is chosen