debt taxonomy

every module is scanned for the debt-category markers it carries in its own comments -- the tree already documents its hazards; this makes them countable and backlog-fed. Each non-empty category files one finding.

landmine 153 modules · sev 7 · first 20 shown

_ad_dupguard_test.nx_ad_selfmeasure_test.nx_bf_erf_gate_authored.nx_derefcast_minrepro.nx_gpu_dxg_gate.nx_idea_genealogy_gate.nx_lang_lint_gate_authored.nx_lintext_fixture_bad.nx_stale_probe.nx_statfs_probe.nx_wiki_edit_gate.nx_wiki_engine_gate.nx_wiki_version_gate.nxcsrf_token.nxhkdf.nxjwt.nxlmprobe_lm001.nxlmprobe_lm002.nxlmprobe_lm004.nxlmprobe_lm008.nx +133 more

filed individually (top 8 by blast radius): nx_types.nxnx_http_server.nxnx_parse.nxnx_vcodec.nxnx_bodyatlas.nxnx_kill_portable.nxnx_html_entities.nxnx_pattern_emit6.nx

workaround / hack 169 modules · sev 5 · first 20 shown

_andor_probe.nx_debolt_gate.nx_mulcse_minrepro.nx_rc6_gate.nx_t4b_closed_loop_authored.nx_trunc_probe.nx_wiki_engine_gate.nxlmprobe_lm004.nxnishi_gui.nxnx_admin_login_flow.nxnx_adnet_advreport.nxnx_analyst_insight.nxnx_analyst_insight_gate.nxnx_anatstack.nxnx_arcade_serve.nxnx_asset_floor_gate.nxnx_assign_gen_test.nxnx_atom.nxnx_authz_svc.nxnx_battery_research_fetch.nx +149 more

gotcha / trap 465 modules · sev 5 · first 20 shown

_canary_null_deref.nx_canary_stack_overflow.nx_codec_real_med.nx_freshness_gate.nx_gpu_dxg_adapterinfo_gate.nx_pagefault_gate.nx_sbr_install_gate.nx_strap_gate.nx_t2_bigram_lm_authored.nx_t4_first_model_authored.nx_timer_irq_gate.nx_trap_syscall_gate.nx_umode_gate.nx_wiki_backlinks_gate.nx_wiki_discovery_gate.nx_wiki_edit_gate.nx_wiki_engine_gate.nx_wiki_version_gate.nxnx_acceleration.nxnx_actbench.nx +445 more

todo / unfinished 165 modules · sev 4 · first 20 shown

_assign_next_gate_authored.nx_express_lane_gate_authored.nx_sponsor_review_gate_authored.nx_wiki_discovery_gate.nxed25519.nxnishi_synth.nxnishi_synth_gates.nxnx_ac_monitor_census.nxnx_acme_dns01_issue.nxnx_alu_netlist_test.nxnx_alu_op_kind.nxnx_andelinwest.nxnx_antipattern_catalog.nxnx_asset_dashboard_lib.nxnx_assign_core.nxnx_assign_next.nxnx_atom.nxnx_attempt.nxnx_attempt_loop.nxnx_attempt_loop_register.nx +145 more

third-party / foreign dependency 692 modules · sev 5 · first 20 shown

_gallery_serve_ref.nx_galx_serve_gate.nx_galx_serve_gate_prod.nx_genealogy_chart.nxcap.nxjwt.nxnishi_synth.nxnishi_synth_gates.nxnx_access_wall_exceed_gate.nxnx_account_admin_census.nxnx_acct_admin_handoff.nxnx_acme.nxnx_acme_dns01_propagation.nxnx_ad_banner.nxnx_ad_banner_builder.nxnx_ad_banner_exceed.nxnx_ad_banner_exceed_gate.nxnx_ad_banner_gate.nxnx_ad_banner_gated_daemon.nxnx_ad_emitter_apply_gate.nx +672 more

security note 93 modules · sev 7 · first 20 shown

fuzz_parse_test.nxnx_acme_directory_live.nxnx_adversarial_pattern_audit.nxnx_aid.nxnx_aid_gate.nxnx_apertus_shards_pull.nxnx_attack_taxonomy.nxnx_cert_autorenew.nxnx_ch_census_oracle.nxnx_ch_census_race_stage.nxnx_ch_census_race_stage2.nxnx_chrome_fetch_probe.nxnx_circadian.nxnx_cms_api_exceed_gate.nxnx_cms_draft_exceed_gate.nxnx_cms_migrate_exceed_gate.nxnx_cms_redirect_exceed_gate.nxnx_cms_roles_exceed_gate.nxnx_code_review.nxnx_codewiki_lib.nx +73 more

filed individually (top 8 by blast radius): nx_https_fetch_follow.nxnx_x25519.nxnx_parse.nxnx_qed_freek.nxnx_directors_note.nxnx_lib_fetch.nxnx_dr_verify.nxnx_pathway.nx

performance debt 146 modules · sev 4 · first 20 shown

nx_aces_native.nxnx_align.nxnx_align_chain.nxnx_align_match.nxnx_alu_divider_newton.nxnx_alu_divider_race_test.nxnx_analyst_infer.nxnx_analyst_insight.nxnx_aoi_grid.nxnx_array_ops.nxnx_asset_autotag.nxnx_atlas_gapscan.nxnx_attn_window.nxnx_autograd_tensor.nxnx_autonomy_grow.nxnx_backlog_feeder.nxnx_ballistics.nxnx_ballistics_pack.nxnx_bench_core.nxnx_bench_scale_test.nx +126 more

deprecated / retire 384 modules · sev 5 · first 20 shown

_andor_probe.nx_debolt_gate.nx_f64_exp_kat_vectors.nx_f64_soak_gate_authored.nx_nx_dupdef_live_probe.nx_offc_nxc_small.nx_pe_f64erf_full.nx_pe_f64gamma_refl.nx_ss_compact_cap_gate.nx_stale_probe.nx_t4b_closed_loop_authored.nx_trunc_probe.nxdigest_auth.nxfnv.nxhttp_date.nxlmprobe_lm001.nxlmprobe_lm002.nxmain.nxmd5.nxnishi_synth.nx +364 more

taste-bound consts 1608 caps in 972 modules · goal FALLING · first 20 shown

consts named *CAP/*MAX (value >= 16) whose own line or the line above carries NO measurement provenance (markers: measured / derived / sized / budget / today / RFC / JPL / ==). The bounds law: derived and adaptive, never taste — and when a bound bites, the fix is architecture, not a different number.

_bpe_vocab_authored.nx_cegis_authored.nx_gpu_run.nx_h2_multistream_curl_daemon.nx_loop_synth_authored.nx_nvme_diag.nx_offc_nxc_small.nx_synth_bench_authored.nx_t2_bigram_lm_authored.nx_tensor_grad_authored.nx_type_search_authored.nx_wiki_archive_gate.nx_wiki_backlinks_gate.nx_wiki_cite_gate.nx_wiki_cite_live_gate.nx_wiki_discovery_gate.nx_wiki_engine_gate.nx_wiki_frontend_gate.nx_wiki_integrate_gate.nx_wiki_wikilink_gate.nx +952 more

substring classifiers 1427 decisions in 248 modules · goal FALLING · first 20 shown

lines that both TEST a substring and DECIDE on it (a contains/hastok call, a quoted literal, and a verdict on the same line). A substring standing in for a property cost four separate defects on 2026-07-30 alone, sev 5 to 9: a documented CWE prevention filed as a hazard; the edge SSOT nx_sites_daemon_v2 flagged as a stale copy because its name carries _v2; the one-shot worker nx_torrent_get classified a daemon by the substring torrent, leaving it unshippable by any sanctioned verb; and route matching reading BODY bytes as a request line. A needle cannot tell a thing from a MENTION of a thing. Locating a substring is fine — classifying by one is the smell; read the structure instead (parse the field, declare the role in data, bound the scan).

_galx_ingest_gate.nx_wiki_edit_gate.nx_wiki_version_gate.nxbloom.nxcallee_save_test.nxnx_access_pep_gate.nxnx_activities_gate.nxnx_ad_banner.nxnx_ad_banner_builder.nxnx_ad_banner_builder_gate.nxnx_ad_banner_gate.nxnx_ad_exceed.nxnx_ad_feedback_gate.nxnx_ad_nb_fold_gate.nxnx_ad_serve.nxnx_aid_federation_gate.nxnx_aid_gate.nxnx_ale_real_readfile.nxnx_apistack_content.nxnx_apistack_metrics_gate.nx +228 more

markers are conservative substrings (landmine/footgun/dual-copy, workaround/hack/kludge, gotcha/trap/caveat, todo/fixme, third-party/foreign, cwe-/vuln/exploit, quadratic/O(n^2), deprecated/retire). A module can appear under several categories.