debt taxonomy

every module is scanned for the debt-category markers it carries in its own comments -- the tree already documents its hazards; this makes them countable and backlog-fed. Each non-empty category files one finding.

landmine 214 modules · sev 7 · first 20 shown

_ad_dupguard_test.nx_ad_selfmeasure_test.nx_bf_erf_gate_authored.nx_derefcast_minrepro.nx_gpu_dxg_gate.nx_idea_genealogy_gate.nx_lang_lint_gate_authored.nx_lintext_fixture_bad.nx_stale_probe.nx_statfs_probe.nx_wiki_edit_gate.nx_wiki_engine_gate.nx_wiki_version_gate.nxcsrf_token.nxhkdf.nxjwt.nxlmprobe_lm001.nxlmprobe_lm002.nxlmprobe_lm004.nxlmprobe_lm008.nx +194 more

filed individually (top 8 by blast radius): nx_types.nxnx_http_server.nxnx_tier_ladder_lib.nxnx_parse.nxnx_import.nxnx_wasm_craft.nxnxasm_x86.nxnx_bodyatlas.nx

workaround / hack 264 modules · sev 5 · first 20 shown

_andor_probe.nx_debolt_gate.nx_mulcse_minrepro.nx_offc_probe_i32lit.nx_rc6_gate.nx_t4b_closed_loop_authored.nx_trunc_probe.nx_wiki_engine_gate.nxlmprobe_lm004.nxnishi_gui.nxnishi_gui_gif_t139.nxnx_admin_login_flow.nxnx_adnet_advreport.nxnx_analyst_insight.nxnx_analyst_insight_gate.nxnx_anatstack.nxnx_arcade_serve.nxnx_asn1_der_emit.nxnx_asset_floor_gate.nxnx_assign_gen_test.nx +244 more

gotcha / trap 774 modules · sev 5 · first 20 shown

_canary_null_deref.nx_canary_stack_overflow.nx_codec_real_med.nx_freshness_gate.nx_gpu_dxg_adapterinfo_gate.nx_lawsweep_gate.nx_pagefault_gate.nx_sbr_install_gate.nx_strap_gate.nx_t2_bigram_lm_authored.nx_t4_first_model_authored.nx_timer_irq_gate.nx_trap_syscall_gate.nx_umode_gate.nx_wiki_backlinks_gate.nx_wiki_discovery_gate.nx_wiki_edit_gate.nx_wiki_engine_gate.nx_wiki_version_gate.nxnx_acceleration.nx +754 more

todo / unfinished 257 modules · sev 4 · first 20 shown

_assign_next_gate_authored.nx_express_lane_gate_authored.nx_sponsor_review_gate_authored.nx_wiki_discovery_gate.nxed25519.nxnishi_synth.nxnishi_synth_gates.nxnx_ac_monitor_census.nxnx_acme_dns01_issue.nxnx_alu_netlist_test.nxnx_alu_op_kind.nxnx_andelinwest.nxnx_antipattern_catalog.nxnx_asset_dashboard_lib.nxnx_assign_core.nxnx_assign_next.nxnx_atom.nxnx_attempt.nxnx_attempt_loop.nxnx_attempt_loop_register.nx +237 more

third-party / foreign dependency 948 modules · sev 5 · first 20 shown

_gallery_serve_ref.nx_galx_serve_gate.nx_galx_serve_gate_prod.nx_genealogy_chart.nx_lawsweep_gate.nxcap.nxjwt.nxnishi_synth.nxnishi_synth_gates.nxnx_accept_lib.nxnx_accept_ref_lib.nxnx_access_wall_exceed_gate.nxnx_account_admin_census.nxnx_acct_admin_handoff.nxnx_acme.nxnx_acme_dns01_propagation.nxnx_acquire_lib.nxnx_ad_banner.nxnx_ad_banner_builder.nxnx_ad_banner_exceed.nx +928 more

security note 110 modules · sev 7 · first 20 shown

fuzz_parse_test.nxnx_acme_directory_live.nxnx_adversarial_pattern_audit.nxnx_aid.nxnx_aid_gate.nxnx_apertus_shards_pull.nxnx_attack_taxonomy.nxnx_boundscheck.nxnx_boundscheck_gate.nxnx_cert_autorenew.nxnx_ch_census_oracle.nxnx_ch_census_race_stage.nxnx_ch_census_race_stage2.nxnx_checked_arith.nxnx_chkarith_gate.nxnx_chrome_fetch_probe.nxnx_circadian.nxnx_cms_api_exceed_gate.nxnx_cms_draft_exceed_gate.nxnx_cms_migrate_exceed_gate.nx +90 more

filed individually (top 8 by blast radius): nx_https_fetch_follow.nxnx_parse.nxnx_x25519.nxnx_gsplat.nxnx_qed_freek.nxnx_directors_note.nxnx_dr_verify.nxnx_lib_fetch.nx

performance debt 217 modules · sev 4 · first 20 shown

nx_accept_lib.nxnx_aces_native.nxnx_align.nxnx_align_chain.nxnx_align_match.nxnx_alu_divider_newton.nxnx_alu_divider_race_test.nxnx_analyst_infer.nxnx_analyst_insight.nxnx_aoi_grid.nxnx_array_ops.nxnx_asset_autotag.nxnx_atlas_gapscan.nxnx_attn_window.nxnx_autograd_tensor.nxnx_autonomy_grow.nxnx_backlog_feeder.nxnx_ballistics.nxnx_ballistics_pack.nxnx_bench_core.nx +197 more

deprecated / retire 798 modules · sev 5 · first 20 shown

_andor_probe.nx_debolt_gate.nx_f64_exp_kat_vectors.nx_f64_soak_gate_authored.nx_nx_dupdef_live_probe.nx_offc_nxc_small.nx_pe_f64erf_full.nx_pe_f64gamma_refl.nx_ss_compact_cap_gate.nx_stale_probe.nx_t4b_closed_loop_authored.nx_trunc_probe.nxdigest_auth.nxfnv.nxhttp_date.nxlmprobe_lm001.nxlmprobe_lm002.nxmain.nxmd5.nxnishi_synth.nx +778 more

taste-bound consts 4798 caps in 2137 modules · goal FALLING · first 20 shown

consts named *CAP/*MAX (value >= 16) whose own line or the line above carries NO measurement provenance (markers: measured / derived / sized / budget / today / RFC / JPL / ==). The bounds law: derived and adaptive, never taste — and when a bound bites, the fix is architecture, not a different number.

_bpe_vocab_authored.nx_cegis_authored.nx_gpu_run.nx_h2_multistream_curl_daemon.nx_lawsweep_gate.nx_loop_synth_authored.nx_nvme_diag.nx_offc_nxc_small.nx_q8blkdot_minrepro.nx_simsize_gate.nx_synth_bench_authored.nx_t2_bigram_lm_authored.nx_tensor_grad_authored.nx_type_search_authored.nx_wiki_archive_gate.nx_wiki_backlinks_gate.nx_wiki_cite_gate.nx_wiki_cite_live_gate.nx_wiki_discovery_gate.nx_wiki_engine_gate.nx +2117 more

substring classifiers 1770 decisions in 309 modules · goal FALLING · first 20 shown

lines that both TEST a substring and DECIDE on it (a contains/hastok call, a quoted literal, and a verdict on the same line). A substring standing in for a property cost four separate defects on 2026-07-30 alone, sev 5 to 9: a documented CWE prevention filed as a hazard; the edge SSOT nx_sites_daemon_v2 flagged as a stale copy because its name carries _v2; the one-shot worker nx_torrent_get classified a daemon by the substring torrent, leaving it unshippable by any sanctioned verb; and route matching reading BODY bytes as a request line. A needle cannot tell a thing from a MENTION of a thing. Locating a substring is fine — classifying by one is the smell; read the structure instead (parse the field, declare the role in data, bound the scan).

_galx_ingest_gate.nx_wiki_edit_gate.nx_wiki_version_gate.nxbloom.nxcallee_save_test.nxnx_access_pep_gate.nxnx_activities_gate.nxnx_ad_banner.nxnx_ad_banner_builder.nxnx_ad_banner_builder_gate.nxnx_ad_banner_gate.nxnx_ad_exceed.nxnx_ad_feedback_gate.nxnx_ad_nb_fold_gate.nxnx_ad_serve.nxnx_adoptdelta_gate.nxnx_aid_federation_gate.nxnx_aid_gate.nxnx_ale_real_readfile.nxnx_ansur_regress.nx +289 more

markers are conservative substrings (landmine/footgun/dual-copy, workaround/hack/kludge, gotcha/trap/caveat, todo/fixme, third-party/foreign, cwe-/vuln/exploit, quadratic/O(n^2), deprecated/retire). A module can appear under several categories.