Add a 32-layer landscape-sweep lane to manifest-20260923 and source reviews for its newcomers

.gitleaks.toml

@@ -273,6 +273,25 @@ regexes = [
 [[rules]]
 id = "sourcegraph-access-token"
 
+# 2026-09-23 (landscape-sweep lane, PR #153): catalogs/sota-convergence/manifest-20260923.json
+# gained lane text that names Sourcegraph (the SCIP index format's former sourcegraph/scip home and
+# its announcement URL). The rule's keyword then makes every 40-hex value in the file a candidate,
+# and 5 existing component pins matched: "pin": "<40-hex>" and "pin": "<version> @ <40-hex>", git
+# commit ids that the generator copies from the catalog layer files. Exempted: that exact file,
+# this rule only, and only a whole anchored "pin" line whose value is a 40-hex id with an optional
+# "<version> @ " prefix; any other field holding a 40-hex value in the same file is still detected
+# (tests/test_gitleaks_config.py test_d/test_d2).
+[[rules.allowlists]]
+description = "Git commit ids under the \"pin\" field of the dated SOTA manifest"
+condition = "AND"
+paths = [
+  '''^catalogs/sota-convergence/manifest-20260923\.json$''',
+]
+regexTarget = "line"
+regexes = [
+  '''^\s*"pin":\s*"(?:[0-9A-Za-z.+_-]+ @ )?[0-9a-f]{40}",?\s*$''',
+]
+
 # Same named-field allowlist as generic-api-key above (source_head_pin and friends
 # also match the sourcegraph-access-token rule's 40-hex pattern in these files).
 [[rules.allowlists]]

evidence/artifacts/landscape-sweep-20260923-attempts/wf_28d47bbc-1b5.json

@@ -0,0 +1,221 @@
+{
+ "schema_version": 1,
+ "id": "landscape-sweep-20260923-attempt-1",
+ "workflow_run": "wf_28d47bbc-1b5",
+ "superseded_by": "wf_38aa6d5d-d6c",
+ "status": "stopped",
+ "stop_reason": "Stopped by the coordinator when the user's effort policy changed to effort max for every worker; relaunched with identical prompts at effort max as wf_38aa6d5d-d6c.",
+ "worker_settings": {
+  "discovery": "sonnet/high",
+  "facts_refuter": "sonnet/medium",
+  "fit_refuter": "opus/high",
+  "critic": "opus/high"
+ },
+ "discovery_returns": 9,
+ "refuter_returns": 0,
+ "provider_usage": "unknown: the workflow runtime reports usage only for a completed run, and none was captured for this stopped run",
+ "layers": [
+  {
+   "layer_id": "code-navigation",
+   "calls": {
+    "web_search": 6,
+    "web_fetch": 0,
+    "gh_api": 30
+   },
+   "repositories": [
+    {
+     "repository": "https://github.com/scip-code/scip",
+     "proposed_again_in_completed_run": true
+    },
+    {
+     "repository": "https://github.com/facebookincubator/Glean",
+     "proposed_again_in_completed_run": false
+    },
+    {
+     "repository": "https://github.com/universal-ctags/ctags",
+     "proposed_again_in_completed_run": true
+    }
+   ]
+  },
+  {
+   "layer_id": "document-retrieval",
+   "calls": {
+    "web_search": 3,
+    "web_fetch": 0,
+    "gh_api": 19
+   },
+   "repositories": [
+    {
+     "repository": "https://github.com/opendatalab/MinerU",
+     "proposed_again_in_completed_run": true
+    },
+    {
+     "repository": "https://github.com/datalab-to/marker",
+     "proposed_again_in_completed_run": true
+    },
+    {
+     "repository": "https://github.com/allenai/olmocr",
+     "proposed_again_in_completed_run": true
+    },
+    {
+     "repository": "https://github.com/Unstructured-IO/unstructured",
+     "proposed_again_in_completed_run": true
+    }
+   ]
+  },
+  {
+   "layer_id": "durable-memory",
+   "calls": {
+    "web_search": 8,
+    "web_fetch": 0,
+    "gh_api": 21
+   },
+   "repositories": [
+    {
+     "repository": "https://github.com/doobidoo/mcp-memory-service",
+     "proposed_again_in_completed_run": true
+    },
+    {
+     "repository": "https://github.com/MemTensor/MemOS",
+     "proposed_again_in_completed_run": true
+    },
+    {
+     "repository": "https://github.com/NevaMind-AI/memU",
+     "proposed_again_in_completed_run": false
+    },
+    {
+     "repository": "https://github.com/modelcontextprotocol/servers",
+     "proposed_again_in_completed_run": false
+    }
+   ]
+  },
+  {
+   "layer_id": "instructions-skills",
+   "calls": {
+    "web_search": 8,
+    "web_fetch": 0,
+    "gh_api": 18
+   },
+   "repositories": [
+    {
+     "repository": "https://github.com/agentsmd/agents.md",
+     "proposed_again_in_completed_run": true
+    },
+    {
+     "repository": "https://github.com/agent-ecosystem/skill-validator",
+     "proposed_again_in_completed_run": false
+    }
+   ]
+  },
+  {
+   "layer_id": "isolation",
+   "calls": {
+    "web_search": 2,
+    "web_fetch": 0,
+    "gh_api": 9
+   },
+   "repositories": [
+    {
+     "repository": "https://github.com/firecracker-microvm/firecracker",
+     "proposed_again_in_completed_run": true
+    },
+    {
+     "repository": "https://github.com/kata-containers/kata-containers",
+     "proposed_again_in_completed_run": true
+    },
+    {
+     "repository": "https://github.com/containers/bubblewrap",
+     "proposed_again_in_completed_run": false
+    },
+    {
+     "repository": "https://github.com/google/nsjail",
+     "proposed_again_in_completed_run": false
+    }
+   ]
+  },
+  {
+   "layer_id": "native-clients",
+   "calls": {
+    "web_search": 5,
+    "web_fetch": 0,
+    "gh_api": 26
+   },
+   "repositories": [
+    {
+     "repository": "https://github.com/google-gemini/gemini-cli",
+     "proposed_again_in_completed_run": true
+    },
+    {
+     "repository": "https://github.com/anomalyco/opencode",
+     "proposed_again_in_completed_run": true
+    },
+    {
+     "repository": "https://github.com/aaif-goose/goose",
+     "proposed_again_in_completed_run": false
+    }
+   ]
+  },
+  {
+   "layer_id": "semantic-rag",
+   "calls": {
+    "web_search": 4,
+    "web_fetch": 0,
+    "gh_api": 19
+   },
+   "repositories": [
+    {
+     "repository": "https://github.com/huggingface/text-embeddings-inference",
+     "proposed_again_in_completed_run": true
+    }
+   ]
+  },
+  {
+   "layer_id": "web-research",
+   "calls": {
+    "web_search": 3,
+    "web_fetch": 0,
+    "gh_api": 18
+   },
+   "repositories": [
+    {
+     "repository": "https://github.com/microsoft/playwright-mcp",
+     "proposed_again_in_completed_run": false
+    },
+    {
+     "repository": "https://github.com/browserbase/stagehand",
+     "proposed_again_in_completed_run": true
+    },
+    {
+     "repository": "https://github.com/exa-labs/exa-mcp-server",
+     "proposed_again_in_completed_run": true
+    },
+    {
+     "repository": "https://github.com/jina-ai/reader",
+     "proposed_again_in_completed_run": true
+    }
+   ]
+  },
+  {
+   "layer_id": "workers",
+   "calls": {
+    "web_search": 4,
+    "web_fetch": 0,
+    "gh_api": 20
+   },
+   "repositories": [
+    {
+     "repository": "https://github.com/BloopAI/vibe-kanban",
+     "proposed_again_in_completed_run": false
+    },
+    {
+     "repository": "https://github.com/smtg-ai/claude-squad",
+     "proposed_again_in_completed_run": false
+    }
+   ]
+  }
+ ],
+ "limitations": [
+  "Retained for audit only; nothing here was merged into manifest-20260923. No refuter evaluated these returns.",
+  "Repositories not proposed again by the completed run are not candidates of this wave; they are dated inputs for a later sweep."
+ ]
+}

evidence/artifacts/landscape-sweep-20260923/anthropics-claude-code-action.json

@@ -0,0 +1,56 @@
+{
+ "schema_version": 1,
+ "id": "source-review-anthropics-claude-code-action",
+ "kind": "upstream_provenance",
+ "evidence_class": "source_review",
+ "repository": "https://github.com/anthropics/claude-code-action",
+ "reviewed_commit": "8cf3482550831fb35a4fc3fbf7ca139cf8028b4c",
+ "readme_path": "README.md",
+ "license": "MIT",
+ "layers": [
+  "git-github-automation"
+ ],
+ "claim": "Source and documentation review of anthropics/claude-code-action at commit 8cf3482550831fb35a4fc3fbf7ca139cf8028b4c (license MIT), read from README.md at that commit.",
+ "documentation_excerpts": [
+  {
+   "source": "README.md@8cf3482550831fb35a4fc3fbf7ca139cf8028b4c",
+   "text": "A general-purpose Claude Code action for GitHub PRs and issues that can answer questions and implement code changes. This action intelligently detects when to activate based on your workflow context\u2014whether responding to @claude mentions, issue assignments, or executing automation tasks with explicit prompts. It supports multiple authentication methods including Anthropic direct API (API key or wo"
+  },
+  {
+   "source": "README.md@8cf3482550831fb35a4fc3fbf7ca139cf8028b4c",
+   "text": "See our Migration Guide for step-by-step instructions on updating your workflows to v1.0. The new version simplifies configuration while maintaining compatibility with most existing setups."
+  },
+  {
+   "source": "README.md@8cf3482550831fb35a4fc3fbf7ca139cf8028b4c",
+   "text": "\ud83c\udfaf Intelligent Mode Detection: Automatically selects the appropriate execution mode based on your workflow context\u2014no configuration needed"
+  },
+  {
+   "source": "README.md@8cf3482550831fb35a4fc3fbf7ca139cf8028b4c",
+   "text": "\ud83e\udd16 Interactive Code Assistant: Claude can answer questions about code, architecture, and programming"
+  },
+  {
+   "source": "README.md@8cf3482550831fb35a4fc3fbf7ca139cf8028b4c",
+   "text": "\ud83d\udd0d Code Review: Analyzes PR changes and suggests improvements"
+  },
+  {
+   "source": "README.md@8cf3482550831fb35a4fc3fbf7ca139cf8028b4c",
+   "text": "\u2728 Code Implementation: Can implement simple fixes, refactoring, and even new features"
+  },
+  {
+   "source": "README.md@8cf3482550831fb35a4fc3fbf7ca139cf8028b4c",
+   "text": "\ud83d\udcac PR/Issue Integration: Works seamlessly with GitHub comments and PR reviews"
+  },
+  {
+   "source": "README.md@8cf3482550831fb35a4fc3fbf7ca139cf8028b4c",
+   "text": "\ud83d\udee0\ufe0f Flexible Tool Access: Access to GitHub APIs and file operations (additional tools can be enabled via configuration)"
+  }
+ ],
+ "limitations": [
+  "Source and documentation review at the pinned commit only: not installed, executed, benchmarked or compared with any other component.",
+  "The description and excerpts are the upstream project's own words at that commit, filtered to drop popularity, recency, status and comparison sentences; they are upstream claims, not measured results."
+ ],
+ "sources": [
+  "https://github.com/anthropics/claude-code-action/tree/8cf3482550831fb35a4fc3fbf7ca139cf8028b4c",
+  "https://github.com/anthropics/claude-code-action/blob/8cf3482550831fb35a4fc3fbf7ca139cf8028b4c/README.md"
+ ]
+}

evidence/artifacts/landscape-sweep-20260923/betterleaks-betterleaks.json

@@ -0,0 +1,32 @@
+{
+ "schema_version": 1,
+ "id": "source-review-betterleaks-betterleaks",
+ "kind": "upstream_provenance",
+ "evidence_class": "source_review",
+ "repository": "https://github.com/betterleaks/betterleaks",
+ "reviewed_commit": "2a387a5bad4290a84b9a1eb679bffe70611218cc",
+ "readme_path": "README.md",
+ "license": "MIT",
+ "layers": [
+  "secrets-credentials"
+ ],
+ "claim": "Source and documentation review of betterleaks/betterleaks at commit 2a387a5bad4290a84b9a1eb679bffe70611218cc (license MIT), read from README.md at that commit. Repository description: \"Find leaked secrets everywhere.\".",
+ "documentation_excerpts": [
+  {
+   "source": "README.md@2a387a5bad4290a84b9a1eb679bffe70611218cc",
+   "text": "Betterleaks is a configurable, fast, and thorough secrets scanner. [\u2026] Check out this series of blog posts to learn how the detection engine works: 1. Regex is all you need, 2. Rare Not Random, 3. Express YourCELf, 4. Better generic secrets detection."
+  },
+  {
+   "source": "README.md@2a387a5bad4290a84b9a1eb679bffe70611218cc",
+   "text": "Betterleaks' strength comes from its expressive configuration. Filtering and validation logic are defined as Expr. Previously this logic was implemented in CEL; existing CEL-shaped configs are still accepted for compatibility, but new configs should use Expr. prefilters run before any regex matching occurs and only have access to the attributes map. attributes describe a resource like a git patch."
+  }
+ ],
+ "limitations": [
+  "Source and documentation review at the pinned commit only: not installed, executed, benchmarked or compared with any other component.",
+  "The description and excerpts are the upstream project's own words at that commit, filtered to drop popularity, recency, status and comparison sentences; they are upstream claims, not measured results."
+ ],
+ "sources": [
+  "https://github.com/betterleaks/betterleaks/tree/2a387a5bad4290a84b9a1eb679bffe70611218cc",
+  "https://github.com/betterleaks/betterleaks/blob/2a387a5bad4290a84b9a1eb679bffe70611218cc/README.md"
+ ]
+}

evidence/artifacts/landscape-sweep-20260923/datalab-to-marker.json

@@ -0,0 +1,37 @@
+{
+ "schema_version": 1,
+ "id": "source-review-datalab-to-marker",
+ "kind": "upstream_provenance",
+ "evidence_class": "source_review",
+ "repository": "https://github.com/datalab-to/marker",
+ "reviewed_commit": "8a1d2344de25d7ec4c5209133aed7af565874ff0",
+ "readme_path": "README.md",
+ "license": "Apache-2.0",
+ "layers": [
+  "document-retrieval"
+ ],
+ "claim": "Source and documentation review of datalab-to/marker at commit 8a1d2344de25d7ec4c5209133aed7af565874ff0 (code license Apache-2.0; model weights under separate terms, see model_weights_license), read from README.md at that commit. Repository description: \"Convert PDF to markdown + JSON quickly with high accuracy\".",
+ "model_weights_license": {
+  "name": "modified AI Pubs Open Rail-M",
+  "text": "Our model weights use a modified AI Pubs Open Rail-M license (free for research, personal use, and startups under $5M funding/revenue). For commercial use of the model weights beyond that, visit our pricing page here.",
+  "source": "README.md@8a1d2344de25d7ec4c5209133aed7af565874ff0"
+ },
+ "documentation_excerpts": [
+  {
+   "source": "README.md@8a1d2344de25d7ec4c5209133aed7af565874ff0",
+   "text": "Marker converts documents to markdown, JSON, chunks, and HTML quickly and accurately."
+  },
+  {
+   "source": "README.md@8a1d2344de25d7ec4c5209133aed7af565874ff0",
+   "text": "For the highest accuracy, pass the --use_llm flag to use an LLM alongside marker. This will do things like merge tables across pages, handle inline math, format tables properly, and extract values from forms. It works with Gemini, Claude, OpenAI-compatible, Azure, Vertex, OpenRouter, or Ollama models. By default, it uses gemini-3.5-flash. See below for details."
+  }
+ ],
+ "limitations": [
+  "Source and documentation review at the pinned commit only: not installed, executed, benchmarked or compared with any other component.",
+  "The description and excerpts are the upstream project's own words at that commit, filtered to drop popularity, recency, status and comparison sentences; they are upstream claims, not measured results."
+ ],
+ "sources": [
+  "https://github.com/datalab-to/marker/tree/8a1d2344de25d7ec4c5209133aed7af565874ff0",
+  "https://github.com/datalab-to/marker/blob/8a1d2344de25d7ec4c5209133aed7af565874ff0/README.md"
+ ]
+}