memory: CodeQL umbrella NEUTRAL detection pattern + org-level inheritance hypothesis (Aaron 2026-04-28)

[AceHack]

Summary

Captures a diagnostic pattern Aaron has seen across multiple projects but hadn't yet been encoded: code_quality:severity=all ruleset returns 'pending for N analyzed languages' despite every per-language Analyze (X) leg succeeding. The actual signal is the umbrella CodeQL check (no language suffix) NEUTRAL with '1 configuration not found' details.

What it captures

• 30-second detection via gh pr view N --json statusCheckRollup --jq '.[]|select(.name=="CodeQL")|{conclusion}' — if NEUTRAL on a code_quality-BLOCKED PR, this is the failure mode.
• Empirical evidence collected on LFG sync(acehack→lfg): B-0073 CodeQL unblock — obj/bin exclusion + 10 useless-cast removal Lucent-Financial-Group/Zeta#661 today (per-language SUCCESS, umbrella NEUTRAL, default-setup not-configured, analyses uploaded with results_count=0).
• Industry-wide framing per Aaron: this happens across other projects he uses Claude PR review on.
• Open question deferred: AceHack vs LFG asymmetry despite identical default-setup state. Aaron's hypothesis: org-level Code Security inheritance.

Composes with

• 5-class BLOCKED taxonomy memory (adds class-5b umbrella-NEUTRAL sub-class)
• 7-class reviewer false-positive catalog (this is meta-analyzer, not reviewer)
• Otto-352 narrow-not-broad principle (precise diagnostic check)
• Otto-355 BLOCKED-investigate-threads-first (extends to umbrella-check interrogation)

Agency-Signature-Version: 1
Agent: otto
Agent-Runtime: claude-code
Agent-Model: claude-opus-4-7
Credential-Identity: AceHack-shared
Credential-Mode: shared-with-aaron
Human-Review: not-implied-by-credential
Human-Review-Evidence: aaron-explicit-ask
Action-Mode: autonomous-fail-open
Task: codeql-umbrella-detection-memory

[Copilot]

Pull request overview

Adds a new memory/ feedback entry documenting a repeatable diagnostic for a CodeQL/ruleset “BLOCKED but everything looks green” failure mode, and indexes it in memory/MEMORY.md for retrieval.

Changes:

• Add a new memory file describing how to detect the “umbrella CodeQL check is NEUTRAL while per-language Analyze (X) legs are SUCCESS” situation.
• Add the new memory entry to the top of memory/MEMORY.md (newest-first index).

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

File	Description
memory/feedback_codeql_umbrella_neutral_vs_per_language_detection_pattern_aaron_2026_04_28.md	New diagnostic memory describing the umbrella-CodeQL-NEUTRAL signal and a fast gh pr view … --json statusCheckRollup check.
memory/MEMORY.md	Adds a top-of-index link/summary for the new memory file.

[Copilot]

This says the referenced “5-class BLOCKED taxonomy” “adds a 6th sub-class”, but the taxonomy defines five top-level classes and this change introduces a subclass under class 5 (“class-5b”). Suggest rewording to avoid implying a new 6th top-level class and to keep the numbering consistent with the existing class-5 / class-4 scheme.

Suggested change

	— the 5-class BLOCKED taxonomy. This adds a 6th sub-class:
	— the 5-class BLOCKED taxonomy. This adds a subclass under class 5:

[Copilot]

Grammar: “Aaron seen across other projects” is missing a verb/object and reads ungrammatical. Consider rewriting to “Aaron has seen this across other projects.”

Suggested change

- [**CodeQL umbrella check NEUTRAL while per-language Analyze legs SUCCESS — code_quality ruleset BLOCKED detection pattern (Aaron 2026-04-28)**](feedback_codeql_umbrella_neutral_vs_per_language_detection_pattern_aaron_2026_04_28.md) — When `code_quality:severity=all` ruleset says "Code quality results are pending for N analyzed languages" despite per-language `Analyze (X)` legs SUCCESS, check the umbrella `CodeQL` check (no language suffix) for NEUTRAL conclusion + "1 configuration not found" details. Industry-wide pattern; Aaron seen across other projects.

- [**CodeQL umbrella check NEUTRAL while per-language Analyze legs SUCCESS — code_quality ruleset BLOCKED detection pattern (Aaron 2026-04-28)**](feedback_codeql_umbrella_neutral_vs_per_language_detection_pattern_aaron_2026_04_28.md) — When `code_quality:severity=all` ruleset says "Code quality results are pending for N analyzed languages" despite per-language `Analyze (X)` legs SUCCESS, check the umbrella `CodeQL` check (no language suffix) for NEUTRAL conclusion + "1 configuration not found" details. Industry-wide pattern; Aaron has seen this across other projects.