Reference
Glossary
Terms used across the docs, code and dashboard, each tied to the module that defines it.
R/ means son-of-anton-review on feat/cloudflare-native. P/ means son-of-anton-operator-parity on feat/greptile-operator-parity. These are separate, unmerged trees. anton-ui is the original dashboard; anton-ui-trace-parity adds the parity editor and session-authenticated proxy. A defined term does not mean that feature is enabled or deployed.
| Term | Meaning | Source |
|---|
| Review key | Base identity owner/repo#number@headSha. Manual requests can add a command-specific variant. Not a guarantee that one head has only one review. | R/src/pr-update-engine.js:35-40; R/cloudflare-native/src/ingress.js:80-114 |
| Head SHA | Commit to which review metadata and code evidence are pinned. Missing head is a container error, not permission to inspect an arbitrary branch tip. | R/cloudflare-native/container/entrypoint.mjs:82-94; R/src/review-policy-runtime.js:56-71 |
| Delivery id | X-GitHub-Delivery header. Native ingress uses a KV dedupe marker and records the accepted payload in D1 webhook_deliveries. KV is eventually consistent; downstream leases handle duplicate enqueue. | R/cloudflare-native/src/ingress.js:227-260,275-346 |
| Latest-waiting key | owner/repo#number:latest-waiting, used by the PR-update engine to track the latest waiting head. Do not confuse the legacy replace-latest queue with native Cloudflare Queues. | R/src/pr-update-engine.js:39-40,149-153,195-198 |
| Term | Meaning | Source |
|---|
| Ingress | Public webhook handler: verify signature, normalize intent, record delivery and enqueue. /health proves this handler responds, not that review dependencies work. | R/cloudflare-native/src/ingress.js:264-346 |
| Consumer | Native Queue handler that resolves review identity, checks obsolescence and claims a mode-scoped dispatch lease before invoking a container. | R/cloudflare-native/src/consumer.js:310-412 |
| OMP container | Ephemeral review process. The name does not imply it invokes OMP CLI: the default entrypoint selects OpenRouter HTTP. Validation uses a separate sandbox collector. | R/cloudflare-native/container/entrypoint.mjs:314-374 |
| Key broker | Separate native Worker holding the App private key and minting installation tokens. Review callers request repo scope, but the core helper does not require a repository list. | R/cloudflare-native/src/key-broker-core.js:15-55 |
| Command bridge | Scheduled handler that drains operator command events. Its schedule is once a minute; a queued command is not proof it completed. | R/cloudflare-native/src/cron.js:27,45-59; R/cloudflare-native/src/cron-command-bridge.js |
| Nightly audit / enforcer | Nightly audit handler with two UTC triggers gated to 23:30 Europe/London, not two nightly executions. | R/cloudflare-native/src/cron.js:46-59; R/cloudflare-native/src/cron-nightly.js |
| Watchdog | Scheduled health evaluation at minutes 03, 18, 33 and 48. Watches the loop, itself, command bridge and nightly audit; Prime-watch is excluded. | R/cloudflare-native/src/cron.js:38-42,53-88 |
| Prime-watch | Handler exists but is intentionally absent from scheduled routes. Not the same as an enabled hypothesis worker. | R/cloudflare-native/src/cron.js:61-73 |
| Term | Meaning | Source |
|---|
| Preflight | Deterministic diff/context preparation. The event-to-span mapping calls it context.load; graph construction has its own context.graph span. | R/src/codex-review-runner.js:35-41,840-894 |
| Context graph | Repository facts and derived impact used to identify related files and risks. A graph relation is not execution evidence. | R/src/context-graph.js:90-145 |
| Blast radius | Count of impacted paths in the graph result, used in risk scoring. | R/src/context-graph.js:113,130-141 |
| Review packet | Documentation shorthand for the context assembled into the model prompt; not an independently versioned transport API. | R/src/codex-review-runner.js:1840-1875 |
| Lens | Review dimension such as Payment Integrity, Auth Boundary or API Contract. Frontend Behavior is a lens, not proof of an implemented browser runner. | R/src/review-hypotheses.js:1-72 |
| Hypothesis | A candidate concern with files, required evidence types and falsification criteria. Static path rules and the optional LLM planner are different sources. | R/src/review-hypotheses.js:160-182; R/src/hypothesis-planner.js |
| Planner | Optional model-driven hypothesis generation. Off by default; no worker or a Codex planner provider prevents the call. | R/src/codex-review-runner.js:2309,3342-3353 |
| Swarm | Bounded hypothesis workers. Runner concurrency defaults to 4, but no worker means no swarm, including no shadow swarm. | R/src/codex-review-runner.js:2351-2357,3248-3267; R/src/hypothesis-orchestrator.js:103-137 |
| Synthesis | Filters worker findings for the hypothesis's evidence requirements, then deduplicates and compares them with prior findings. | R/src/hypothesis-orchestrator.js:134-170 |
| Evidence filter | Requires a matching dimension, falsifiability and the required evidence-type labels. It is not itself a test runner or verification of the claimed evidence's truth. | R/src/review-hypotheses.js:185-214 |
Swarm, planner, Prime, inversion and artifact-evidence flags are not forwarded into native Cloudflare containers. See Roadmap and flags and R/cloudflare-native/src/container-env.js:15-86.
| Term | Meaning | Source |
|---|
| Validation executor | Dispatcher for managed Crabbox, E2B, Cloudflare Sandbox or operator-supplied isolated compute. Legacy local requires explicit host-execution opt-in; unavailable sandboxes do not fall back to it. | R/src/validation-executor.js:30-49,485-579 |
| Shadow validation lane | A different, supported and wired executor whose result is telemetry, not primary findings. Still consumes resources and has a bounded wait. | R/src/validation-executor.js:251-282,365-430 |
| Missing validations | Review strings recording absent, skipped or incomplete checks. An empty finding list does not erase these gaps. | R/src/validation-executor.js:287-296; R/src/review-format.js:215-218 |
| Evidence artifact | Persisted validation/worker output matched to findings by fingerprint or hypothesis id. A reference does not guarantee a public URL. | R/src/evidence-artifacts.js:481-517 |
| Artifact enforcement | With both evidence flags enabled, an execution claim without a matching artifact is marked unverified; its severity is not automatically reduced. Module exceptions return the original findings. | R/src/evidence-artifacts.js:520-558; R/src/codex-review-runner.js:3517-3569 |
| Term | Meaning | Source |
|---|
| Publish mode | Native shadow selects RecordingPublisher; native live requires an authenticated publisher. Code default is shadow; the checked-in manifest explicitly uses live. Node does not use this env gate. | R/cloudflare-native/src/publish-mode.js:26-69; R/cloudflare-native/wrangler.jsonc:132-136; R/worker.mjs:35-41 |
| Publish ledger | Review-key/action records for publication state and receipts. Different from the native container-dispatch lease. | R/cloudflare-native/schema.sql:62-75,111-126 |
| Lease | Ownership record used to avoid concurrent dispatch/publication. Losing a lease is a reason to stop, not to force another publish. | R/cloudflare-native/src/consumer.js:369-412; R/worker.mjs:89-128 |
| Reconciler | Node recovery component invoked before draining the queue; recovery decisions depend on stored run state. | R/worker.mjs:63-75; R/src/reconciler.js |
| Dead letter | Native unroutable or exhausted message, sent to the dead-letter binding and recorded for cron observability when possible. Recording and sending are separate operations and can fail separately. | R/cloudflare-native/src/consumer.js:256-284,325-328,455-461 |
| Term | Meaning | Source |
|---|
| Finding | Model schema item with severity, category, path, title, body, contextIds. No line number or per-finding confidence field is required. | R/src/codex-review-runner.js:210-224 |
| Fingerprint | Stable finding identity from explicit identity or normalized finding content. Does not create an inline code location. | R/src/finding-evolution.js:201-211 |
| Evolution states | new, persisting, modified, resolved, and unresolved. Resolution is a comparison result, not universal proof of a fix. | R/src/finding-evolution.js:267-310 |
| Disposition | Supported claim closing a prior same-head concern: resolved, false_positive or no_longer_applicable, with source review, fingerprint and current-head code evidence. | R/src/codex-review-runner.js:226-247; R/src/review-service.js:397-413 |
| Outcome | Heuristic classification: fixed, acknowledged, ignored, dismissed, unknown. Not necessarily a direct author action receipt. | R/src/addressed-rate.js:11,92-149 |
| Addressed rate | (fixed + acknowledged) / (total - unknown); null without decided outcomes. This is the outcome-ledger metric, not a guarantee every dashboard KPI uses that formula. | R/src/addressed-rate.js:178-197 |
| Priors | Lens-level guidance derived from a repo's outcomes. Defaults need 5 decided samples and suggest suppression below addressed rate 0.2. | R/src/addressed-rate.js:204-214; R/src/codex-review-runner.js:2232-2238 |
| Memory context | Stored rule or file context with scope. Model contextIds may only cite supplied memory ids, not arbitrary paths, graph facts or feedback ids. | R/cloudflare-native/schema.sql:265-281; R/src/codex-review-runner.js:1852 |
| Knowledge base | Stored repository knowledge documents, distinct from citable memory-context ids. | R/cloudflare-native/schema.sql:292-305; R/src/codex-review-runner.js:1852,2511-2515 |
| Term | Meaning | Source |
|---|
| Severity | Model finding enum: blocker, high, medium, low. Other internal lanes/policy helpers accept additional priorities; they do not expand the model schema. | R/src/codex-review-runner.js:215-222; R/src/operator-review-policy.js:183-203 |
| Confidence score | Integer 1 to 5 representing analyst confidence, not merge readiness. | R/src/codex-review-runner.js:194,1844 |
| Verdict / merge verdict | verdict is clear or needs-attention; mergeVerdict is prose. Derived merge status also considers findings, validation and analyzer health. | R/src/codex-review-runner.js:193-197; R/src/review-format.js:20-65 |
| Strictness | Low retains findings. Medium removes rank-2 findings only with known confidence below 0.8. High removes ranks 2/3. Protected safety findings remain. | R/src/operator-review-policy.js:183-215 |
| Operator policy | Revisioned workspace document. Endpoint exists on parity Worker, not native public ingress. | P/cloudflare/src/review-policy-api.js:48-63; R/cloudflare-native/src/main.js:26-29 |
| Filter rule | Conditions combined with AND; rules combined with OR; missing metadata can defer admission. | R/src/operator-review-policy.js:46-78,110-176 |
| Execution mode | always, never or filters; filters can defer until metadata is available. | R/src/operator-review-policy.js:178-180 |
| Test Lab experiment | Static experiment definition plus persisted-span analysis. A running label does not prove samples exist. | P/cloudflare/src/test-lab-api.js:12-61,90-118 |
| Term | Meaning | Source |
|---|
| Trace / span | Run telemetry and nested operations. Native storage supports workflow, model, tool, function, http, queue, worker, agent, retrieval, chat, embeddings and stream kinds. | R/cloudflare-native/schema.sql:187-222 |
estimate:wall-clock | Validation rate-card cost estimate, not a billing receipt. Unknown executor rates return null. | R/src/validation-executor.js:146-202 |
| Harness version | Stored harness identity/status used by operator reporting. The CLI's harness command also saves the reported deployed version when supported. | R/cloudflare-native/schema.sql:79-84; R/src/operator-cli.js:619-623 |
GILF_, gilf-, @gilf | Existing configuration/file names and supported command alias. Do not replace them with assumed ANTON_ names. | R/src/commands.js:1-26; R/cloudflare-native/src/container-env.js:15-70 |
codex_ events | Historical event naming still used for semantic-review skips and recovery, even with HTTP providers. | R/src/codex-review-runner.js:2651-2707 |
| omarchy | Name used in native scheduler comments for the previous systemd authority host; not a required hostname for self-hosting. | R/cloudflare-native/src/cron.js:1-5,33-52 |