registry / cladding / 0.9.1

cladding@0.9.1

Spec-driven verification layer for AI coding agents — Claude Code · Codex · Gemini · Antigravity · Cursor. Intent in before it writes, result verified against your spec after. Reference implementation of the Ironclad standard.

Static Scan Results

scanned 5h ago · by rust-scanner

Static analysis flagged 22 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings

ManifestNo manifest risk signals triggered.

scanned 397 file(s), 6.15 MB of source, external domains: antigravity.google, api.anthropic.com, api.openai.com, doc.rust-lang.org, docs.anthropic.com, docs.expo.dev, example.com, generativelanguage.googleapis.com, github.com, go.dev, google.github.io, jcgt.org, json-schema.org, json.schemastore.org, kotlinlang.org, peps.python.org, platform.claude.com, raw.githubusercontent.com, rubystyle.guide, www.w3.org

Source & flagged code

12 flagged

dist/tests/stages/util.test.jsView file

Lines 68-107javascript

68});

69// Fix ② — a scanner (secretlint / arch validator) that RAN but exited non-zero:

70// a real finding BLOCKS (error); a config/setup gap SKIPS (info). secretlint

71// exits non-zero with "config is not found" when there is no .secretlintrc — that

72// must NOT be reported as a hardcoded secret (the cold-user false-RED).

73describe('classifyScannerExit — finding vs config/setup gap', () => {

74 test('exit 0 → no findings', () => {

75 expect(classifyScannerExit({ exitCode: 0 }, 'D', found, skipped)).toEqual([]);

76 });

77 test('config-not-found (secretlint) → INFO (non-blocking), not a finding', () => {

78 const out = classifyScannerExit({ exitCode: 2, stderr: 'Error: secretlint config is not found\nSecretlint require .secretlintrc config file.' }, 'HARDCODED_SECRET', found, skipped);

79 expect(out).toHaveLength(1);

80 expect(out[0].severity).toBe('info');

81 expect(out[0].message).toContain('could not run');

82 });

83 test('ENOENT/cannot-find-module in output → INFO (setup gap)', () => {

84 const out = classifyScannerExit({ exitCode: 1, stderr: "Cannot find module '@secretlint/preset'" }, 'D', found, skipped);

85 expect(out[0].severity).toBe('info');

86 });

87 test('a REAL finding (no setup-error pattern) → ERROR (blocks the gate)', () => {

88 const out = classifyScannerExit({ exitCode: 1, stdout: 'src/leak.ts:1:1 found AWS secret AKIAIOSFODNN7EXAMPLE' }, 'HARDCODED_SECRET', found, skipped);

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/tests/stages/util.test.jsView on unpkg · L88

89 expect(out).toHaveLength(1);

90 expect(out[0].severity).toBe('error');

91 expect(out[0].message).toContain('reported');

92 });

93 // npm exec refuses to run an unresolvable tool under `npx --no-install` — the

94 // scanner never executed, so this is a setup gap, not a violation. Verbatim

95 // message from the CI runners that broke develop (2026-06-11): local ~/.npm/_npx

96 // caches masked it; fresh runners surfaced the false ARCHITECTURE_VIOLATION.

97 test('npx canceled-due-to-missing-packages → INFO (tool never ran)', () => {

98 const out = classifyScannerExit({ exitCode: 1, stderr: 'npm error npx canceled due to missing packages and no YES option: ["madge@8.0.0"]' }, 'ARCHITECTURE_VIOLATION', found, skipped);

99 expect(out).toHaveLength(1);

100 expect(out[0].severity).toBe('info');

101 });

102 test("npx could-not-determine-executable → INFO (npm exec's other refusal)", () => {

103 const out = classifyScannerExit({ exitCode: 1, stderr: 'npm error could not determine executable to run' }, 'ARCHITECTURE_VIOLATION', found, skipped);

104 expect(out[0].severity).toBe('info');

105 });

106});

107

88patternName = aws_access_key severity = critical line = 88 matchedText = const ou...ed);

Critical

Secret Pattern

AWS access key ID in dist/tests/stages/util.test.js

dist/tests/stages/util.test.jsView on unpkg · L88

dist/tests/core/checkpoint.test.jsView file

Lines 1-36javascript

1// Cladding · unit tests for core/checkpoint.ts (v0.3.20, F-x)

2//

3// Phase 1 contract:

4// - recordCheckpoint writes exactly one feature_checkpoint event and

5// returns a Checkpoint with git head + spec digest + timestamp

6// - computeSpecDigest is deterministic across runs and stable across

7// readdirSync ordering

8// - findLatestCheckpoint returns the most recent matching event in

9// reverse-order walk (older checkpoints stay readable but the

10// latest one is returned)

dist/src/stages/type.jsView file

Lines 1-31javascript

1// Cladding · stage_1.1 Type

2//

3// Reference implementation of Ironclad iron-law.md stage_1.1.

4// pass criteria: type checker exit 0, no errors

5// determinism: deterministic

6// llm cost: 0

7//

8// Polyglot: the actual command is chosen by `detectToolchain` based on the

9// project's manifest (package.json → tsc, pyproject.toml → mypy, Cargo.toml

10// → cargo check, …). cladding stays language-agnostic.

dist/tests/stages/ai-hints-forbidden-pattern.test.jsView file

Lines 2-42javascript

2import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';

3import { tmpdir } from 'node:os';

4import { join } from 'node:path';

5import { afterEach, beforeEach, describe, expect, test } from

dist/tests/optimizer/infer-depends-on.test.jsView file

Lines 104-144javascript

104 from: 'F-a',

105 to: 'F-b',

106 via: 'backend/pkg/a.py',

107 });

108 expect(result.edges).not.toContainEqual({

dist/clad.jsView file

769`)}function jNe(t,e){let r=[g7,"",`# ${e} \u2014 Project Context`,""];if(r.push("## 1. What this project is (observed)",""),t.readmeFirstParagraph?r.push(`> ${t.readmeFirstParagrap... L770: `)}Qp();import{readFileSync as j2e}from"node:fs";import{join as M2e}from"node:path";var F2e="claude-sonnet-4-6",bx=16384;function L2e(t,e="."){if(t)return t;try{let n=j2e(M2e(e,".c... L771: `)}function Hm(t){let e=pee(t);return["# Cladding \xB7 Tier B \xB7 SSoT \u2014 editable, cross-validated \xB7 Refreshed by: clad init / clad clarify","# Greenfield seed \u2014 no i... ... L773: `)}var uj=St(er(),1);Nr();var gee="\n<!-- Onboarding refined fro... L774: <!-- LLM unavailable or respon

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/clad.jsView on unpkg · L769

420L421: `)}p.write("payload.value = newResult;"),p.write("return payload;");let _=p.compile();return(S,x)=>_(f,S,x)},o,s=Ac,a=!kc.jitless,l=a&&hM.value,u=e.catchall,d;t._zod.parse=(f,p)=>{... L422: L423: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let s of t.seen.entries()){let a=s[1];if(e===s[0]){o(s);continue}if(t.external){let l=t.exter... L424: ]))`;continue}else if(n[c]==="$"){i+=`($|(?=[\r ... L430: || (${s} === "string" && ${i} && ${i} == +${i} && !(${i} % 1))`).assign(a,(0,Se._)`+${i}`);return;case"boolean":n.elseIf((0,Se._)`${i} === "false" || ${i} === 0 || ${i} === null`).... L431: || ${s} === "boolean" || ${i} === null`).assign(a,(0,Se._)`[${i}]`)}}}function u9e({gen:t,parentData:e,parentDataProperty:r},n){t.if((0,Se._)`${e} !== u

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/clad.jsView on unpkg · L420

dist/tests/cli/graph-export-pipe.test.jsView file

19test('--format json over a pipe arrives complete and parseable', () => { L20: const out = execFileSync('npx', ['tsx', 'src/cli/clad.ts', 'graph', 'export', '--format', 'json'], { L21: cwd: REPO,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/tests/cli/graph-export-pipe.test.jsView on unpkg · L19

dist/conformance/runner.jsView file

252patternName = stripe_live_secret severity = critical line = 252 matchedText = writeFil...n');

Critical

Secret Pattern

Stripe live secret key in dist/conformance/runner.js

dist/conformance/runner.jsView on unpkg · L252

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code