Repository: localdir:/home/reviewer/test-modules/clean @ localdir
When: 2026-10-27 14:13 UTC · Model: venice/deepseek-v4-1-flash-uncensored
Sandbox: container dressed as a laptop; the host kernel is not hidden.
Summary: quiet_clock is a genuine 5-line QtQuick clock: source uses only QtQuick, no file/network/process/storage APIs, no committed secrets, no deps. But the 'clean' dynamic result is largely unearned: the sandbox LogosBasecamp binary aborted on GLIBC/GLIBCXX version mismatches (media/basecamp.log), so no QML runtime ever executed the module, the screenshot is all-black and the MP4 has no frames. behaviour/summary.json additionally undercounts the raw strace (opens_count 17 vs 30; empty failed_opens_sample despite 9 ENOENT). Nothing malicious found; assurance is limited by the broken run and misleading summary. Not a safety certification.
| severity | finding | evidence | where |
|---|---|---|---|
| high | Dynamic run vacuous: LogosBasecamp never executed the module | media/basecamp.log:1-50 aborts on 'GLIBC_2.38/2.39 not found', 'GLIBCXX_3.4.32 not found', 'CXXABI_1.3.15 not found'; media/basecamp.png decodes to 1,600,000/1,600,000 all-zero (black) pixels; media/session.mp4 is a 48-byte mdat-size-0 header; behaviour/build.out only 'module: quiet_clock\n' (harness jq echo); behaviour/strace.log execs only faketime/date/bash/jq. So bait_files_read [] and contacted_hosts [] are defaults, not proven behaviour. | media/basecamp.log |
| medium | behaviour/summary.json contradicts its own raw strace | behaviour/summary.json:7 'opens_count': 17 vs grep -c openat behaviour/strace.log = 30; 'failed_opens_sample': [] while strace.log has 9 ENOENT failures (strace.log:4-6 date, 14-16 bash, 42 /root/.jq). | behaviour/summary.json |
| low | Unverified absolute trust claim 'No network, no storage, nothing else' | src/README.md:2 and src/metadata.json:2 assert the module does nothing else; consistent with the source but never confirmed at runtime (see high finding). | src/README.md |
| low | Sandbox is a detectable disguise (kernel equals host) | behaviour/disguise.json note: 'container disguise; the kernel version is the host's and cannot be hidden'; spoofed DMI ThinkPad X1 Carbon Gen 12. A module can fingerprint the container and change behaviour. | behaviour/disguise.json |
| low | Run wrapped in faketime +3 days; date-keyed logic sees skewed clock | behaviour/strace.log:1 execve faketime ['+3 days','bash','-c',...]; displayed clock date is 3 days ahead. | behaviour/strace.log |
| low | Thin, effectively empty static coverage | checks/semgrep.json results [] with total_bytes 0 and only 3 scanned paths; checks/gitleaks.json []; checks/osv.json [] with no package.json/lockfile to scan (strace.log:1 conditionally skips npm install). | checks/semgrep.json |
| low | No manifest/dependency pinning reviewed (unconfirmed) | Only src/Main.qml, src/README.md, src/metadata.json in the single commit 002ac71; no package.json or lockfile, so transitive supply-chain integrity is unexercised. Marked unconfirmed: nothing to pin today. | src/metadata.json |
Triage, not approval. Automated and imperfect; the environment was instrumented.