Limitations
TraceMap keeps the claim narrow.
The useful part of TraceMap is not that it claims certainty. It is that it names the evidence, the rule, the coverage, and the places where the analysis cannot prove a conclusion.
Non-claims
What TraceMap does not prove.
- No runtime traffic or production usage is inferred.
- No deployment state, release approval, or operational safety is inferred.
- No failed or partial scan is reported as clean.
- No absence-of-impact claim is made under reduced coverage.
- No raw source snippets are stored by default.
- No LLM calls, embeddings, vector databases, or prompt-based classification are used in the scanner or reducer.
Use the demo runbook when public demo wording is in play.
The public demo runbook routes demo sharing decisions back to summaries, proof paths, validation, and these limitations. It does not loosen the non-claims on this page.
Partial analysis is still useful.
When semantic loading fails, TraceMap can still scan syntax, config, project, package, and SQL evidence. Those rows route review, but reports must label the reduced coverage. The reduced coverage playbook shows the row labels, owners, safe wording, and stop conditions for that handoff.
Incident-adjacent use does not relax these limits.
The incident review orientation concept uses static evidence to route code questions. It does not infer runtime traffic, endpoint performance, deployment state, production cause, release safety, or approval.
SQL handoff evidence keeps execution and runtime state outside the claim.
The SQL operator handoff and synthetic proof packet show expected categorical context and static prerequisite candidates. They cannot observe the active database client, effective permissions, scheduled execution, validation results, or rollback completion.