Scan artifacts

TraceMap writes evidence you can inspect.

The scanner emits machine-readable facts, a queryable SQLite index, a manifest that records coverage and commit state, a human report, and logs for analyzer diagnostics.

Required scan output

Five files define the scan packet.

Each artifact is listed explicitly so reviewers can verify which evidence was produced.

scan-manifest.jsonRepository identity, commit SHA, scanner version, analysis level, build status, and known gaps.

facts.ndjsonOne deterministic fact per line, including rule IDs, tiers, spans, and extractor metadata.

index.sqliteQueryable facts plus tables for symbols, relationships, edges, surfaces, aliases, and flows when available.

report.mdHuman-readable summary of coverage, gaps, facts, surfaces, and limitations.

logs/analyzer.logAnalyzer diagnostics and project-load details for failed or partial analysis.

Example

Scan a sample repository.

Restore is explicit. Failed project load is not treated as clean analysis.

dotnet run --project src/dotnet/TraceMap.Cli -- scan \
  --repo samples/modern-sample \
  --out .tracemap

SQL scans can add a bounded operator handoff packet.

When supported SQL evidence exists, sql-runbook.md and sql-runbook.json project categorical context, prerequisites, protected steps, validation expectations, gaps, and limitations without reproducing executable SQL. Read the manager-facing SQL handoff story, then inspect the synthetic public proof packet.

Database evidence can be composed into a design-review packet.

database-design-review.md and database-design-review.json group compatible PostgreSQL design, EF mapping, application operation, query, route, provenance, cap, and gap evidence. Read the manager-facing database design review, then inspect the synthetic public proof packet.

An explicit MSBuild binlog can add bounded observed-build evidence.

The standard scan artifacts can include allowlisted build-result, project, graph, diagnostic, provenance, and gap rows from an explicitly supplied binary log. The raw artifact is not a public output. Read what a binlog knows that a source diff does not, then inspect the public-safe proof packet.

SQL project refactor intent can travel into review packets.

Supported checked-in project/log linkage, table or column renames, and table schema moves can appear with rule, tier, span, commit, extractor, coverage, and limitation fields. The public-safe proof page keeps those rows separate from Tier 4 gaps and from build, deployment, and database-state claims.