Open_Ultra_SAST/benchmarks/measurements/2026-09-08-module-audit.json

{
  "counts": {
    "load_bearing": 99,
    "standalone_capability": 9
  },
  "modules": 108,
  "note": "Refreshed after pre-push-safety-net task 3.4: first-party frontend partitions share the authoritative ranker and execution budget.",
  "orphaned": [],
  "rows": [
    {
      "classification": "load_bearing",
      "importers": [
        "cli",
        "gate",
        "improve.evolve",
        "map_gate",
        "mcp",
        "pairs"
      ],
      "module": "benchmark",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli"
      ],
      "module": "calibration",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "mcp"
      ],
      "module": "cli",
      "reason": "entry point"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli",
        "complexity.hints",
        "complexity.ledger",
        "complexity.map",
        "map_gate",
        "regress.candidate",
        "semantic.prove_filter",
        "tool_hunter"
      ],
      "module": "complexity",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "complexity",
        "complexity.map"
      ],
      "module": "complexity.hints",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli",
        "complexity",
        "complexity.map",
        "regress.candidate"
      ],
      "module": "complexity.ledger",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "complexity",
        "complexity.hints",
        "complexity.ledger",
        "map_gate",
        "regress.candidate",
        "semantic.prove_filter",
        "tool_hunter"
      ],
      "module": "complexity.map",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "complexity",
        "complexity.hints",
        "complexity.map"
      ],
      "module": "complexity.signals",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli",
        "harness",
        "hunter_tools",
        "model.endpoint",
        "pairs",
        "regress.candidate",
        "regress.recipes",
        "run"
      ],
      "module": "config",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "config",
        "cpg.artifact",
        "model.contracts",
        "push.contracts"
      ],
      "module": "contracts",
      "reason": "pre-push-safety-net Req 7.3: strict shared manifest serialization, independent of push"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli",
        "cpg.backend",
        "model.config_value",
        "model.dominance",
        "model.judge",
        "model.partitions",
        "model.pipeline",
        "model.scan",
        "model.taint"
      ],
      "module": "cpg",
      "reason": "model-grounded-detection Req 4: the CPG seam package"
    },
    {
      "classification": "load_bearing",
      "importers": [],
      "module": "cpg.artifact",
      "reason": "pre-push-safety-net Req 4.3/7.3: backend graph identity and live lease contract; validation integration pending"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli",
        "model.config_value",
        "model.dominance",
        "model.judge",
        "model.partitions",
        "model.pipeline",
        "model.scan",
        "model.taint"
      ],
      "module": "cpg.backend",
      "reason": "model-grounded-detection Req 4.1/4.5: the single Joern subprocess boundary"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cpg.backend"
      ],
      "module": "cpg.capability",
      "reason": "model-grounded-detection Req 4.2/4.3: the engine probe that degrades to suspicion"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "benchmark",
        "calibration",
        "cli",
        "complexity.ledger",
        "complexity.map",
        "complexity.signals",
        "fusion",
        "gate",
        "hunter",
        "hunter_harness",
        "hunter_tools",
        "improve.evolve",
        "map_gate",
        "model.ladder",
        "model.report",
        "pairs",
        "rank",
        "regress.candidate",
        "reports",
        "scoring.project_score",
        "semantic.obligations.check",
        "semantic.overlay",
        "semantic.prove_filter",
        "stage_processors",
        "tool_hunter",
        "verification",
        "verify_judge"
      ],
      "module": "findings",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "standalone_capability",
      "importers": [
        "cli"
      ],
      "module": "fusion",
      "reason": "two-panel adjudication engine; reached from the scan's report stage and used standalone"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli"
      ],
      "module": "gate",
      "reason": "entry point"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli",
        "slot_contract"
      ],
      "module": "harness",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "standalone_capability",
      "importers": [
        "cli",
        "fusion",
        "hunter_harness",
        "stage_processors",
        "verify_judge"
      ],
      "module": "harness_ext",
      "reason": "HarnessX extension surface; loaded by name when the optional harness is present"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli",
        "hunter_harness"
      ],
      "module": "hunter",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "standalone_capability",
      "importers": [
        "cli"
      ],
      "module": "hunter_harness",
      "reason": "harness wiring for the tool hunter; used by the hunter path and by mcp"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "tool_hunter"
      ],
      "module": "hunter_tools",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli",
        "improve.evolve"
      ],
      "module": "improve",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "improve"
      ],
      "module": "improve.evolve",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "improve",
        "improve.evolve"
      ],
      "module": "improve.journal",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "improve",
        "improve.evolve"
      ],
      "module": "improve.validator",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli",
        "skills"
      ],
      "module": "index",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [],
      "module": "map_gate",
      "reason": "entry point"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli",
        "gate",
        "hunter_tools",
        "improve.evolve",
        "map_gate",
        "model.scan",
        "pairs",
        "preprocess",
        "stage_processors"
      ],
      "module": "mapping",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "standalone_capability",
      "importers": [
        "cli"
      ],
      "module": "mcp",
      "reason": "narrow MCP server over stdio; its own `ousast mcp` entry point and OpenCode integration"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli",
        "cpg.backend",
        "model.candidates",
        "model.config_value",
        "model.dominance",
        "model.execution",
        "model.judge",
        "model.layout",
        "model.partitions",
        "model.pipeline",
        "model.regions",
        "model.report",
        "model.scan",
        "model.specs",
        "model.taint",
        "preprocess",
        "push.contracts",
        "push.snapshot"
      ],
      "module": "model",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [],
      "module": "model.audit",
      "reason": "model-grounded-detection Req 3: this classifier; run by the maintainer, not by the scan"
    },
    {
      "classification": "load_bearing",
      "importers": [],
      "module": "model.calibrate",
      "reason": "model-grounded-detection Req 9: the corpus as the model's calibration set"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli",
        "model.scan"
      ],
      "module": "model.candidates",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "model.pipeline",
        "model.scan"
      ],
      "module": "model.config_value",
      "reason": "model-grounded-detection Req 6.3: constant abstraction for the configuration families"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cpg.backend",
        "model.partitions",
        "model.regions",
        "model.scan",
        "push.contracts",
        "push.snapshot"
      ],
      "module": "model.contracts",
      "reason": "pre-push-safety-net Req 4.1/7.3: generic deadline, change and exact scope contracts; integration pending"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "model.pipeline",
        "model.scan"
      ],
      "module": "model.dominance",
      "reason": "model-grounded-detection Req 6.2: guard dominance, the arbiter for bugs that never crash"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli"
      ],
      "module": "model.endpoint",
      "reason": "model-grounded-detection Req 8: the judge client, wired by model/judge.py in group 3"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "model.scan"
      ],
      "module": "model.evidence",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [],
      "module": "model.execution",
      "reason": "model-grounded-detection Req 10: the deferred execution tier seam, adopted not built"
    },
    {
      "classification": "load_bearing",
      "importers": [],
      "module": "model.judge",
      "reason": "model-grounded-detection Req 8: one bounded question, checked against the model"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "model.config_value",
        "model.dominance",
        "model.execution",
        "model.judge",
        "model.pipeline",
        "model.scan",
        "model.taint"
      ],
      "module": "model.ladder",
      "reason": "model-grounded-detection Req 5: the evidence ladder every finding carries"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "model.partitions",
        "model.scan",
        "preprocess"
      ],
      "module": "model.layout",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "model.scan"
      ],
      "module": "model.partitions",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "model.scan"
      ],
      "module": "model.pipeline",
      "reason": "model-grounded-detection Req 8: the enumerator proposes, the LLM answers, the model disposes"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli",
        "model.layout",
        "model.scan"
      ],
      "module": "model.regions",
      "reason": "contributor-scan Req 2: regions from entry points, with the families each admits"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli"
      ],
      "module": "model.report",
      "reason": "model-grounded-detection Req 9.3/11.1: per-slice reporting with the overfitting gap"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli"
      ],
      "module": "model.scan",
      "reason": "contributor-scan Req 3: the repository driver -- one CPG, one budget, ranked spend"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli"
      ],
      "module": "model.shipped",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "model.config_value",
        "model.dominance",
        "model.judge",
        "model.pipeline",
        "model.regions",
        "model.report",
        "model.scan",
        "model.taint"
      ],
      "module": "model.specs",
      "reason": "model-grounded-detection Req 7.2-7.4: the security vocabularies the CPG queries are parameterised by"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "model.judge",
        "model.pipeline",
        "model.scan"
      ],
      "module": "model.taint",
      "reason": "model-grounded-detection Req 6.1: taint reachability over the CPG, the flow-family arbiter"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli",
        "model.candidates",
        "model.report",
        "model.scan",
        "model.specs"
      ],
      "module": "model.taxonomy",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli"
      ],
      "module": "pair_gate",
      "reason": "entry point"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli",
        "improve",
        "improve.evolve",
        "model.candidates",
        "pair_gate"
      ],
      "module": "pairs",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli",
        "findings",
        "hunter",
        "hunter_harness",
        "improve.evolve",
        "improve.validator",
        "scoring.project_score",
        "semantic.overlay",
        "stage_processors"
      ],
      "module": "policy",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "policy"
      ],
      "module": "policy.verycode",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli",
        "complexity.hints",
        "complexity.map",
        "complexity.signals",
        "findings",
        "gate",
        "hunter",
        "hunter_harness",
        "hunter_tools",
        "improve.evolve",
        "index",
        "map_gate",
        "mapping",
        "model.candidates",
        "model.partitions",
        "model.scan",
        "pairs",
        "rank",
        "regress.candidate",
        "semantic.overlay",
        "skills",
        "stage_processors"
      ],
      "module": "preprocess",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli"
      ],
      "module": "provenance",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "model.endpoint",
        "tool_hunter"
      ],
      "module": "provider",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "model.endpoint",
        "tool_hunter"
      ],
      "module": "provider.openrouter",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "push.snapshot"
      ],
      "module": "push",
      "reason": "pre-push-safety-net Req 5.5/7.3: experimental push contract package; no hook installed"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "push.snapshot"
      ],
      "module": "push.contracts",
      "reason": "pre-push-safety-net Req 5.5/7.3: immutable comparisons and independent result statuses; runner pending"
    },
    {
      "classification": "load_bearing",
      "importers": [],
      "module": "push.snapshot",
      "reason": "pre-push-safety-net Req 1.1/1.3/1.4/7.1: local immutable ref resolution; runner integration pending"
    },
    {
      "classification": "standalone_capability",
      "importers": [],
      "module": "push_inputs",
      "reason": "pre-push-safety-net task 1.2: offline input provenance validator; python -m openultrasast.push_inputs"
    },
    {
      "classification": "standalone_capability",
      "importers": [],
      "module": "push_scoring",
      "reason": "pre-push-safety-net task 1.3: frozen-profile diagnostic outcome scorer; python -m openultrasast.push_scoring"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "calibration",
        "cli",
        "findings",
        "gate",
        "hunter",
        "hunter_harness",
        "hunter_tools",
        "improve.evolve",
        "map_gate",
        "pairs",
        "stage_processors"
      ],
      "module": "rank",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "harness",
        "model.judge",
        "model.pipeline",
        "reports",
        "semantic.obligations.intent"
      ],
      "module": "redaction",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli",
        "regress.candidate"
      ],
      "module": "regress",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "regress"
      ],
      "module": "regress.candidate",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "regress",
        "regress.candidate"
      ],
      "module": "regress.recipes",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "regress",
        "regress.candidate"
      ],
      "module": "regress.safety",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "regress",
        "regress.candidate"
      ],
      "module": "regress.verdict",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli"
      ],
      "module": "reports",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli",
        "push_inputs"
      ],
      "module": "repos",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli",
        "findings",
        "hunter",
        "hunter_harness",
        "improve.evolve",
        "improve.validator",
        "pairs",
        "stage_processors"
      ],
      "module": "ruleset",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "improve.validator",
        "ruleset"
      ],
      "module": "ruleset.store",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli",
        "reports"
      ],
      "module": "run",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli",
        "regress.candidate",
        "regress.recipes",
        "regress.safety",
        "regress.verdict"
      ],
      "module": "sandbox",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "sandbox"
      ],
      "module": "sandbox.probe",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "regress.candidate",
        "regress.recipes",
        "regress.safety",
        "sandbox"
      ],
      "module": "sandbox.runner",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli",
        "improve.evolve",
        "stage_processors"
      ],
      "module": "scoring",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "scoring"
      ],
      "module": "scoring.project_score",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli",
        "cpg.capability",
        "hunter_tools",
        "mapping",
        "model.candidates",
        "model.layout",
        "model.specs",
        "pairs",
        "semantic.cst",
        "semantic.engines",
        "semantic.functions",
        "semantic.ir",
        "semantic.obligations.check",
        "semantic.obligations.operations",
        "semantic.obligations.shapes",
        "semantic.overlay",
        "semantic.prove_filter",
        "semantic.taint"
      ],
      "module": "semantic",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "semantic.ir"
      ],
      "module": "semantic.cst",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cpg.capability",
        "semantic",
        "semantic.overlay"
      ],
      "module": "semantic.engines",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "semantic",
        "semantic.cst",
        "semantic.engines"
      ],
      "module": "semantic.extra",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli",
        "hunter_tools",
        "mapping",
        "model.candidates",
        "model.layout",
        "model.specs",
        "pairs",
        "semantic",
        "semantic.obligations.check",
        "semantic.obligations.operations",
        "semantic.obligations.shapes",
        "semantic.overlay",
        "semantic.taint"
      ],
      "module": "semantic.facts",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "hunter_tools",
        "pairs",
        "semantic.obligations.shapes",
        "semantic.overlay"
      ],
      "module": "semantic.functions",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli",
        "hunter_tools",
        "model.candidates",
        "pairs",
        "semantic.cst",
        "semantic.functions",
        "semantic.obligations.check",
        "semantic.obligations.operations",
        "semantic.obligations.shapes",
        "semantic.overlay",
        "semantic.taint"
      ],
      "module": "semantic.ir",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli",
        "hunter_tools",
        "model.candidates",
        "model.specs",
        "pairs",
        "semantic.obligations.check",
        "semantic.obligations.dominance",
        "semantic.obligations.intent",
        "semantic.obligations.operations",
        "semantic.obligations.policy",
        "semantic.obligations.shapes",
        "semantic.obligations.siblings"
      ],
      "module": "semantic.obligations",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli",
        "semantic.obligations",
        "semantic.obligations.intent"
      ],
      "module": "semantic.obligations.check",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli",
        "hunter_tools",
        "pairs",
        "semantic.obligations.check"
      ],
      "module": "semantic.obligations.dominance",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "model.specs",
        "pairs",
        "semantic.obligations",
        "semantic.obligations.check",
        "semantic.obligations.operations",
        "semantic.obligations.policy",
        "semantic.obligations.shapes",
        "semantic.obligations.siblings"
      ],
      "module": "semantic.obligations.facts",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli"
      ],
      "module": "semantic.obligations.intent",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "model.candidates",
        "semantic.obligations.check",
        "semantic.obligations.dominance",
        "semantic.obligations.siblings"
      ],
      "module": "semantic.obligations.operations",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli",
        "semantic.obligations.check"
      ],
      "module": "semantic.obligations.policy",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "semantic.obligations",
        "semantic.obligations.operations"
      ],
      "module": "semantic.obligations.shapes",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "semantic.obligations.check"
      ],
      "module": "semantic.obligations.siblings",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "semantic",
        "semantic.prove_filter"
      ],
      "module": "semantic.overlay",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "semantic"
      ],
      "module": "semantic.prove_filter",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "semantic.overlay"
      ],
      "module": "semantic.taint",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "standalone_capability",
      "importers": [
        "hunter",
        "hunter_harness"
      ],
      "module": "skills",
      "reason": "skill router; consumed by mcp and by the OpenCode integration, not by the scan path"
    },
    {
      "classification": "standalone_capability",
      "importers": [
        "stage_processors"
      ],
      "module": "slot_contract",
      "reason": "the slot/contract protocol stage_processors implements"
    },
    {
      "classification": "standalone_capability",
      "importers": [],
      "module": "stage_processors",
      "reason": "HarnessX slot-contracted scan stages; pinned by the zero-dependency guard in test_gate"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli"
      ],
      "module": "stages",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "model.endpoint"
      ],
      "module": "tool_hunter",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "calibration",
        "cli",
        "fusion",
        "reports",
        "verify_judge"
      ],
      "module": "verification",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    },
    {
      "classification": "load_bearing",
      "importers": [
        "cli"
      ],
      "module": "verify_judge",
      "reason": "reachable from gate, map_gate, pair_gate or the CLI"
    }
  ],
  "standalone": {
    "fusion": "two-panel adjudication engine; reached from the scan's report stage and used standalone",
    "harness_ext": "HarnessX extension surface; loaded by name when the optional harness is present",
    "hunter_harness": "harness wiring for the tool hunter; used by the hunter path and by mcp",
    "mcp": "narrow MCP server over stdio; its own `ousast mcp` entry point and OpenCode integration",
    "push_inputs": "pre-push-safety-net task 1.2: offline input provenance validator; python -m openultrasast.push_inputs",
    "push_scoring": "pre-push-safety-net task 1.3: frozen-profile diagnostic outcome scorer; python -m openultrasast.push_scoring",
    "skills": "skill router; consumed by mcp and by the OpenCode integration, not by the scan path",
    "slot_contract": "the slot/contract protocol stage_processors implements",
    "stage_processors": "HarnessX slot-contracted scan stages; pinned by the zero-dependency guard in test_gate"
  }
}