migration: 3 straggler brains + corpus-sweep capstone (cluster C15)

[hyperpolymath]

Summary

Closes the residual leaves the C13/C14 sweeps did not assign (screens/{main,hub}, vm/wasm/src, devices/{types,common} — 8 .res files), extracting 3 new brains and completing the exhaustive corpus sweep. Brain count 91 → 94.

New brains (3) — verified G1/G2/G4 green

• Logo (17/17) — directionFromInt: random Int → compass band (i%4 → NE/NW/SE/SW)
• MainHubScreen (176/176) — sidebar-nav dispatch: nav-action, panel-visibility over 9 panels, quit-panel (991 LOC otherwise senses)
• DeviceTypes (24/24) — getDeviceColor (8-kind → 24-bit RGB) + getSecurityColor (4-level → RGB) colour tables; distinct from the DeviceType taxonomy brain

🏁 Corpus sweep complete

Cluster	Files	New	Already	No-brain
C13 (logic dirs)	159	17	43	99
C14 (sense-heavy)	148	12	45	91
C15 (stragglers)	8	3	0	5
This session	315	32	88	195

Every non-test idaptik .res source file is now accounted for — a verified Int(...)->Int brain (corpus 62 → 94), an already-migrated brain, or a documented NO_NEW_BRAINS host-side sense. The 195 senses are FFI shims, PixiJS render-glue, float-domain cores, string/JSON/wire cores, and orchestration glue — none admit a separable integer brain under the integer-only parity ABI.

Per-cluster evidence in EVIDENCE-C13-logic-sweep.adoc, EVIDENCE-C14-sense-sweep.adoc, EVIDENCE-C15-stragglers.adoc.

Not in scope

This corpus is a demonstration + compiler-stress proof living in the affinescript repo. Wiring these wasm brains back into the running idaptik game (host bindings, .res consumer replacement) is a separate downstream effort.

https://claude.ai/code/session_01WoKhFQePiRsAj7aqnxbG8s

---

Generated by Claude Code

[github-actions]

🔍 Hypatia Security Scan

Findings: 40 issues detected

Severity	Count
🔴 Critical	2
🟠 High	22
🟡 Medium	16

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Action denoland/setup-deno@v2 needs attention",
    "type": "unpinned_action",
    "file": "publish-jsr.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in scorecard-enforcer.yml",
    "type": "scorecard_publish_with_run_step",
    "file": "scorecard-enforcer.yml",
    "action": "split_scorecard_publish_job",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Issue in instant-sync.yml",
    "type": "secret_action_without_presence_gate",
    "file": "instant-sync.yml",
    "action": "peter-evans/repository-dispatch",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Shell execution -- validate input before passing to shell (1 occurrences, CWE-78)",
    "type": "js_exec_sync",
    "file": "/home/runner/work/affinescript/affinescript/packages/affinescript-cli/mod.js",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "high"
  },
  {
    "reason": "Shell execution -- validate input before passing to shell (2 occurrences, CWE-78)",
    "type": "js_exec_sync",
    "file": "/home/runner/work/affinescript/affinescript/packages/affine-vscode/mod.js",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "high"
  },
  {
    "reason": "Shell execution -- validate input before passing to shell (1 occurrences, CWE-78)",
    "type": "js_exec_sync",
    "file": "/home/runner/work/affinescript/affinescript/affinescript-vite/src/affine-plugin-improved.js",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "high"
  },
  {
    "reason": "expect() in hot path (32 occurrences, CWE-754)",
    "type": "expect_in_hot_path",
    "file": "/home/runner/work/affinescript/affinescript/affinescriptiser/src/codegen/wasm_gen.rs",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "medium"
  },
  {
    "reason": "expect() in hot path (29 occurrences, CWE-754)",
    "type": "expect_in_hot_path",
    "file": "/home/runner/work/affinescript/affinescript/affinescriptiser/src/codegen/affine_gen.rs",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "medium"
  },
  {
    "reason": "unsafe block -- requires SAFETY comment (2 occurrences, CWE-676)",
    "type": "unsafe_block",
    "file": "/home/runner/work/affinescript/affinescript/runtime/src/panic.rs",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "medium"
  },
  {
    "reason": "unsafe block -- requires SAFETY comment (1 occurrences, CWE-676)",
    "type": "unsafe_block",
    "file": "/home/runner/work/affinescript/affinescript/runtime/src/alloc.rs",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence