Claude Project Tracker

Consolidated tech-debt item (full register: docs/TECH_DEBT.md). Verified against the repo after a whitebox gate report (run 61e7d93e, commit 11639ae) whose own scores were unreliable. Sev1 (test enforcement): backend 51 pytest files but conditional-skip → no-op in CI (seed DB + key/mock); frontend+mobile have 0 unit tests; tsc --noEmit + lint not required PR checks (TS6133 noise). Sev2 (silent failures): bare except:pass in exam_service.py:175/194 + note_service.py:278; insights_service.py:479 most_improved/needs_attention hard-coded None (parent digest degrades). Sev3 (gates): no pre-commit secret scanning (gitleaks), no npm audit/pip-audit in CI. Sev4 (cleanup): delete mobile/App.tsx.full duplicate; remove dead comingSoon/*_ENABLED branches. Sequence Sev1→4; each ships as a small PR. No feature impact.

Adaptive SAT · adaptive-sat · by saravanan@scrumclaw.ai

47b5c3a1a worked around fix-plan item 1.2 by reassigning jscpd-cs to the node family and lizard, semgrep, semgrep-perf-static and pydriller to python — a legitimate choice, executed thoroughly (it also fixed the node alias key cve-lite -> cve-lite-cli and updated csharp_tool_readiness.py to return NOT_APPLICABLE for borrowed tools). But docker/runtime/Dockerfile.dotnet still has no ARG INSTALL_MANIFEST and no COPY of it — confirmed unchanged between origin/qa and origin/dev. Unlike Dockerfile.node:11,24 and Dockerfile.python:15,31, the reconciler generates a manifest for it and the template discards it. Any future tool assigned to the dotnet family will fail the same way, silently. Not a release blocker; close the gap when the dotnet family next needs a tool it does not already ship.

Testable (Pramora) · testable-platform · by saravanan@scrumclaw.ai

April 2026 review lists 20 open issues. Highlights: no HTTP client timeouts (#6), unbounded goroutines in fetchCryptoNews (#8), Choices[0] with no bounds check (#3), double db.Close() in UpdateCryptoNewsExtractByURL (#4), T-SQL @ID syntax in IsNewsExtractNull fails on Postgres (#5), no MaxBytesReader (#11), rows.Err() unchecked (#12).

CoinTrends.ai · cointrends · by saravanan@scrumclaw.ai

Test step commented out in core-service cloudbuild.yaml; stage LB and purge job commented out in terraform; webapp/web-service/terraform sit on a stage branch diverged from master; READMEs empty; log retention 30 days. Also split the 3.9k-line core main.go into packages.

CoinTrends.ai · cointrends · by saravanan@scrumclaw.ai