## Defects by product and inclusion path

| Product | D (docs) | C (commit screen) | S (sample) | Total |
|---|---|---|---|---|
| Bupples | 39 | 0 | 15 | 54 |
| CareerOS | 21 | 14 | 0 | 35 |
| WayClub | 24 | 12 | 0 | 36 |
| Photoshoot | 6 | 11 | 0 | 17 |
| CodeAtlas | 1 | 15 | 0 | 16 |
| Adelante | 2 | 6 | 0 | 8 |
| Planket | 2 | 6 | 0 | 8 |
| HACKFAM | 9 | 0 | 0 | 9 |

## Category by severity

| Category | H | M | L | Total |
|---|---|---|---|---|
| Business-rule and workflow logic | 7 | 24 | 2 | 33 |
| UI state, visibility, layout | 1 | 10 | 13 | 24 |
| Privacy and data exposure | 4 | 10 | 1 | 15 |
| Authorisation and tenant isolation | 9 | 4 | 0 | 13 |
| Concurrency, locking, idempotency | 2 | 8 | 1 | 11 |
| Stale state and caching | 1 | 8 | 2 | 11 |
| Abuse, injection, resource limits | 1 | 8 | 2 | 11 |
| Error handling and honest states | 0 | 8 | 3 | 11 |
| Performance and resource lifecycle | 1 | 6 | 3 | 10 |
| Test adequacy | 1 | 6 | 3 | 10 |
| Platform-specific runtime | 2 | 5 | 1 | 8 |
| Cross-component contract mismatch | 3 | 4 | 0 | 7 |
| Build, configuration, operations | 0 | 2 | 4 | 6 |
| Money arithmetic and ledger | 3 | 2 | 0 | 5 |
| Units, frames, precision | 1 | 3 | 1 | 5 |
| Overclaiming or stale docs | 0 | 1 | 2 | 3 |

## Detection by severity

| Detection | H | M | L | Total |
|---|---|---|---|---|
| Adversarial or audit review | 24 | 48 | 15 | 87 |
| Implementer's own verification | 4 | 28 | 10 | 42 |
| Owner use or device testing | 4 | 12 | 4 | 20 |
| Automated gate (CI, test, axe) | 1 | 1 | 4 | 6 |
| Not recorded | 3 | 20 | 5 | 28 |

## Red-proof level by detection

| Detection | RV | RF | RO | RM | T | U | N | X |
|---|---|---|---|---|---|---|---|---|
| Adversarial or audit review | 22 | 26 | 1 | 0 | 14 | 21 | 3 | 0 |
| Implementer's own verification | 7 | 1 | 7 | 1 | 5 | 12 | 8 | 1 |
| Owner use or device testing | 2 | 0 | 0 | 2 | 3 | 3 | 10 | 0 |
| Automated gate (CI, test, axe) | 1 | 3 | 0 | 0 | 0 | 0 | 2 | 0 |
| Not recorded | 0 | 3 | 0 | 0 | 5 | 13 | 7 | 0 |

## Red-proof level by product

| Product | RV | RF | RO | RM | T | U | N | X |
|---|---|---|---|---|---|---|---|---|
| Bupples | 21 | 0 | 0 | 0 | 12 | 9 | 12 | 0 |
| CareerOS | 2 | 25 | 0 | 0 | 1 | 5 | 2 | 0 |
| WayClub | 3 | 7 | 0 | 0 | 6 | 14 | 6 | 0 |
| Photoshoot | 2 | 0 | 0 | 2 | 5 | 6 | 2 | 0 |
| CodeAtlas | 0 | 1 | 8 | 0 | 0 | 7 | 0 | 0 |
| Adelante | 0 | 0 | 0 | 0 | 3 | 3 | 2 | 0 |
| Planket | 0 | 0 | 0 | 0 | 0 | 2 | 6 | 0 |
| HACKFAM | 4 | 0 | 0 | 1 | 0 | 3 | 0 | 1 |

## Category by detection

| Category | REVIEW | SELF | OWNER | GATE | UNK |
|---|---|---|---|---|---|
| AUTHZ | 10 | 1 | 0 | 1 | 1 |
| PRIV | 11 | 1 | 0 | 0 | 3 |
| LOGIC | 13 | 9 | 1 | 0 | 10 |
| CONC | 8 | 0 | 1 | 1 | 1 |
| STALE | 6 | 0 | 2 | 0 | 3 |
| UI | 4 | 5 | 8 | 3 | 4 |
| ABUSE | 10 | 1 | 0 | 0 | 0 |
| PERF | 9 | 1 | 0 | 0 | 0 |
| CONTRACT | 3 | 3 | 1 | 0 | 0 |
| TEST | 2 | 8 | 0 | 0 | 0 |
| MONEY | 2 | 2 | 0 | 0 | 1 |
| PLAT | 0 | 1 | 5 | 0 | 2 |
| ERR | 7 | 2 | 1 | 0 | 1 |
| UNITS | 1 | 3 | 0 | 0 | 1 |
| BUILD | 0 | 3 | 1 | 1 | 1 |
| DOCS | 1 | 2 | 0 | 0 | 0 |

## Attributed author by tier

| Tier | claude | codex | agent | unknown |
|---|---|---|---|---|
| A | 21 | 0 | 0 | 0 |
| B | 0 | 39 | 0 | 0 |
| C | 56 | 0 | 61 | 0 |
| D | 0 | 0 | 0 | 6 |