Claude Project Tracker

Consolidated tech-debt item (full register: docs/TECH_DEBT.md). Verified against the repo after a whitebox gate report (run 61e7d93e, commit 11639ae) whose own scores were unreliable. Sev1 (test enforcement): backend 51 pytest files but conditional-skip → no-op in CI (seed DB + key/mock); frontend+mobile have 0 unit tests; tsc --noEmit + lint not required PR checks (TS6133 noise). Sev2 (silent failures): bare except:pass in exam_service.py:175/194 + note_service.py:278; insights_service.py:479 most_improved/needs_attention hard-coded None (parent digest degrades). Sev3 (gates): no pre-commit secret scanning (gitleaks), no npm audit/pip-audit in CI. Sev4 (cleanup): delete mobile/App.tsx.full duplicate; remove dead comingSoon/*_ENABLED branches. Sequence Sev1→4; each ships as a small PR. No feature impact.

Adaptive SAT · adaptive-sat · by saravanan@scrumclaw.ai

47b5c3a1a worked around fix-plan item 1.2 by reassigning jscpd-cs to the node family and lizard, semgrep, semgrep-perf-static and pydriller to python — a legitimate choice, executed thoroughly (it also fixed the node alias key cve-lite -> cve-lite-cli and updated csharp_tool_readiness.py to return NOT_APPLICABLE for borrowed tools). But docker/runtime/Dockerfile.dotnet still has no ARG INSTALL_MANIFEST and no COPY of it — confirmed unchanged between origin/qa and origin/dev. Unlike Dockerfile.node:11,24 and Dockerfile.python:15,31, the reconciler generates a manifest for it and the template discards it. Any future tool assigned to the dotnet family will fail the same way, silently. Not a release blocker; close the gap when the dotnet family next needs a tool it does not already ship.

Testable (Pramora) · testable-platform · by saravanan@scrumclaw.ai