Borehole
Diff · what moved
apache/superset
25cb6fc → 2ac6e24
+0 commits read

7 findings resolved; Engineering Process & SDLC Maturity, Observability & Operations improved.

7 findings resolved, 0 appeared, 0 changed severity without clearing. AI-declared share moved from 36% to 36% of added lines — a disclosure, not a rating.

DimensionBeforeAfter
01 Architecture & Codebase — including AI provenance adequate adequate —
02 Engineering Process & SDLC Maturity adequate strong improved
03 Organization & Key-Person Risk strong strong —
04 Product & Engineering Maturity adequate adequate —
05 Security & Reliability Posture adequate adequate —
06 Observability & Operations adequate strong improved
07 Fit with the Acquirer not assessable not assessable —
02

Engineering Process & SDLC Maturity

Resolved — Tests are retried until they pass

05

Security & Reliability Posture

Resolved — 4 locked dependencies have published vulnerabilities, 5 high or critical

Resolved — 99 of 400 migrations cannot be rolled back

Resolved — 3 shell commands built from strings

Resolved — 5 SQL statements built from strings

Resolved — 3 deserialisers that can run code

06

Observability & Operations

Resolved — No error reporter is wired in

DIFF MODE · DETERMINISTIC LAYER