Corpus Behavioral¶

Where these rules come from and what a finding means: Rule Nature.

The package's position in the corpus, or its deviation from a corpus baseline. H046, H057, H060, H061, and H073 are Class D rules that run once per metadata cycle in trustsight full-aur.

They are silent without a prior snapshot, which is enforced rather than assumed: the calibration gate is fire_rate(no_baseline) == 0. H061 and H057/H060 are prioritisation rather than accusation; they say what a compromise would reach, not that anything is wrong.

See the rule system reference for the field table, the severity weights and the reserved identifier ranges.

Rules on this page¶

H028: Accelerated Release Cadence¶

H028 is metadata, never a scored finding. The pipeline records whether the HEAD commit has 3+ commits within 24 hours (counting HEAD itself) as the recent_commit_burst boolean on PackageFact; it is not appended to triggered_rules and contributes nothing to the score.

H046: Orphan/Adoption Dependency¶

• Severity: MEDIUM (weight 15)

• Category: dependency

• Condition: A package depends directly on a package orphaned or adopted in this cycle.

H057: Transitive Exposure¶

• Severity: INFO (weight 0)

• Category: dependency

• Condition: A package's transitive closure, at least [thresholds] h057.min_hops (default 2) hops away, reaches a package adopted out of the orphan state this cycle. Context only, never additive.

H060: Transitive Orphan Risk¶

• Severity: INFO (weight 0)

• Category: dependency

• Condition: A package's transitive closure includes a currently orphaned package. Context only, never additive.

H061: Dependency Centrality¶

• Severity: INFO (weight 0)

• Category: dependency

• Condition: A package is depended on by at least [thresholds] h061.min_dependents (default 50) AUR packages. Prioritisation only: it says what a compromise would reach, not that anything is wrong.

H073: Introduction Rate Deviation¶

• Severity: MEDIUM (weight 15)

• Category: adoption

• Condition: The corpus-wide introduction rate for a cycle deviates from the baseline mean by at least [thresholds] h073.z_score (default 3.0), once at least h073.min_history_cycles (default 3) cycles of history exist. An immature history is quiet.