Filter non-product paths from schema glob fallbacks
The census-level schema filter shipped in scan-quality-polish correctly skips non-product roots (e2e, examples, test fixtures). But the glob fallback in `detectSchemas` bypasses census entirely and rediscovers those same schemas directly. The result: repos like highlight still report false Prisma detection from `e2e/nextjs/prisma/schema.prisma`, and repos like trpc/electric could report false Drizzle from `examples/` directories. Close the gap by applying the same `isNonProductPath` filter to glob fallback results.
verdict PASSscore 8 / 8findings 3 (0 risk · 1 debt · 2 obs)duration 9h 21mrejection cycles 0shipped May 22, 2026surface cli
Pipeline timeline
Intent to proven code in 9h 21m across Think, Plan, Build, and Verify.
Think541m
Plan6m
Build3m
Verify5m
Assertion ledger
8 claims, each independently verified.
| ID | Says | Matcher | |
|---|---|---|---|
| A001 | The scan engine imports the non-product path filter from the surfaces module | verified | ok |
| A002 | A Prisma schema in an e2e directory is not detected as a real schema | verified | ok |
| A003 | A missing Prisma schema triggers the expected blind spot warning | verified | ok |
| A004 | A Drizzle schema in an examples directory is not detected as a real schema | verified | ok |
| A005 | A missing Drizzle schema triggers the expected blind spot warning | verified | ok |
| A006 | A real Prisma schema in a product path is still detected normally | verified | ok |
| A007 | A real Prisma schema in a monorepo sub-package is still detected | verified | ok |
| A008 | Existing test suite passes without regressions | verified | ok |
Findings 3 total
debtpackages/cli/tests/engine/scanProject.test.ts→ closed
Multi-file Prisma fallback path (trailing-slash directories) not exercised by non-product exclusion test
obspackages/cli/src/engine/scan-engine.ts→ closed
Filter also applies to census-sourced paths — harmless no-op but undocumented defense-in-depth
obs→ closed
Contract A006/A007 have no @ana tags — regression assertions rely on pre-existing tests from other builds
Integrity seal
scopesha256:99068a823ca99...
contractsha256:78ef566c0890e...
plansha256:c8a8d1f7fc42d...
specsha256:b97a48ee86720...
build-reportsha256:6213e53dbafe5...
build-datasha256:875737dc24d0f...
verify-reportsha256:737f85c6e9726...
verify-datasha256:457942e326b31...
audit cmd$ ana proof audit fix-schema-glob-fallback → all hashes match