Operator rehearsal: Python ×10 & JavaScript ×10
Phase 1 alpha / pilot-candidate contour · operator-run on public OSS fixtures (Aug 2026). Same Evidence Bundle schema as Go samples. Not paying-client deliveries · not third-party attestation · not a compliance certificate. Language for the JS batch is JavaScript (not Java).
Tables are an operator rehearsal snapshot from 14 Aug 2026 (after lint findings stopped aborting later stages).
Python ruff still gates test/run, like gofmt. Rows are demo-fixture outcomes — internally tested, not a product guarantee.
Go ZIP fixtures remain on samples.html.
Python ×10
JSON: python10-rehearsal-summary.json
| Fixture | Outcome | Gate | Findings |
|---|---|---|---|
| aiohttp | failed | ruff | 256 |
| bottle | failed | ruff | 184 |
| click | failed | ruff | 48 |
| flask | failed | ruff | 43 |
| httpx | failed | test | 106 |
| jinja | failed | test | 268 |
| redis-py | failed | ruff | 686 |
| requests | failed | ruff | 153 |
| tornado | failed | ruff | 256 |
| urllib3 | failed | ruff | 44 |
JavaScript ×10
JSON: javascript10-rehearsal-summary.json
| Fixture | Outcome | Gate | Findings |
|---|---|---|---|
| NodeGoat | failed | npm-audit | 50 |
| dvna | failed | npm-audit | 24 |
| nodejs-goof | failed | test | 96 |
| juice-shop | failed | test | 40 |
| vulnerable-node | failed | npm-audit | 24 |
| DVGA (GraphQL) | NO_RESULT | — | no package.json |
| retire.js | passed | — | 0 |
| express | passed | — | 0 |
| axios | failed | — | 40 |
| lodash | passed | — | 0 |
Integrity of sealed Bundles: verify.html · Schema: result.json v1 · Operator notice: Legal.