chore: format the whole tree and lint the scratch measurement scripts; CI has been red since 25ae4b4

CI runs ruff format --check and ruff check over the whole repository; 29 files had drifted from the formatter and
four measurement scripts carried lint findings, so every push since 25ae4b4 failed before pytest ran.

Co-Authored-By: Claude Fable 5.1 <[email protected]>

benchmarks/measurements/2026-10-12-banks-fixed-search-mvp/banks_mvp2.py

@@ -2,20 +2,25 @@
 taint.sc exec-signature skew). Build banks CPG, run the taint BATCH on the vuln functions with the annotation
 OFF (shipped) vs ON (parameter_sources=True + write_text/read_text added to path sinks). A non-empty flow row =
 the engine traced source->sink. Thesis: same target, only the search changes."""
-import dataclasses, json, sys
+
+import dataclasses
+import sys
 from pathlib import Path
+
 sys.path.insert(0, "/venv/lib/python3.12/site-packages")
 from openultrasast.cpg.backend import resolve_cpg_backend
 from openultrasast.model.specs import taint_specs
 from openultrasast.model.taint import request_params
 
-ROOT = Path("/work/banks"); VP = "src/banks/registries/directory.py"
+ROOT = Path("/work/banks")
+VP = "src/banks/registries/directory.py"
 FUNCS = ["from_prompt_path", "set", "_load", "_scan"]
 
 backend = resolve_cpg_backend()
 cpg = backend.build(ROOT, language="python")
 if cpg is None or not callable(getattr(cpg, "run_batch", None)):
-    print("CPG build failed or no run_batch"); raise SystemExit(1)
+    print("CPG build failed or no run_batch")
+    raise SystemExit(1)
 print("CPG built; run_batch available.", flush=True)
 
 base = taint_specs(language="python")["path"]
@@ -23,20 +28,22 @@ annot = dataclasses.replace(base, sinks=tuple(sorted(set(base.sinks) | {"write_t
 print("baseline sinks:", base.sinks)
 print("annotated sinks:", annot.sinks, flush=True)
 
+
 def run(label, spec, fn, psrc):
     reqs = {"r1": request_params(spec, function=fn, file=VP, parameter_sources=psrc)}
     try:
         out = cpg.run_batch("taint", reqs)
     except Exception as e:
-        print(f"  [{label}] {fn}: ERROR {type(e).__name__}: {str(e)[:150]}"); return 0
+        print(f"  [{label}] {fn}: ERROR {type(e).__name__}: {str(e)[:150]}")
+        return 0
     rows = (out or {}).get("r1") or []
-    n = len([r for r in rows if isinstance(r, (dict,)) ])
     print(f"  [{label}] {fn} psrc={psrc}: {len(rows)} flow row(s)")
     for r in rows[:3]:
         if isinstance(r, dict):
             print(f"      sink={r.get('sink')} source={r.get('source')} line={r.get('line')} evidence={str(r.get('evidence'))[:60]}")
     return len(rows)
 
+
 print("\n=== BASELINE (shipped search) ===", flush=True)
 b = sum(run("baseline", base, fn, False) for fn in FUNCS)
 print("\n=== FIXED SEARCH (annotation: param-source + write_text/read_text sink) ===", flush=True)