# Silent-fallback baseline (Gate #1). Shrink-only: an entry leaving this list (fixed or annotated `// LAW10:`) is good; a NEW entry not in this list fails CI. Regenerate ONLY when intentionally shrinking.
crates/cli/src/daemon/guard_commit.rs::Err(_) => String::from_utf8_lossy(&entry.path_bytes).into_owned(),
crates/cli/src/daemon/guard_commit.rs::Err(_) => {
crates/cli/src/daemon/guard_runtime.rs::.unwrap_or(0);
crates/cli/src/daemon/guard_watcher.rs::.unwrap_or(0)
crates/cli/src/daemon/guard_watcher.rs::let _ = tx.send(res);
crates/cli/src/daemon/guard_watcher.rs::let _ = watcher.unwatch(path);
crates/cli/src/daemon/server.rs::.and_then(|id| id.short_digest().ok())
crates/cli/src/daemon/server.rs::.unwrap_or(&id.config_digest)
crates/cli/src/daemon/server.rs::.unwrap_or(&id.detector_digest)
crates/cli/src/daemon/server.rs::.unwrap_or(&id.suppression_digest)
crates/cli/src/daemon/server.rs::.unwrap_or(0);
crates/cli/src/daemon/server.rs::.unwrap_or_default(),
crates/cli/src/daemon/server.rs::Err(_) => keyhog_core::guard_state::FilesystemIdentity {
crates/cli/src/daemon/server.rs::Err(_) => std::path::PathBuf::from(&txn.repo_path),
crates/cli/src/daemon/server.rs::Err(_) => {
crates/cli/src/daemon/server.rs::chunk.metadata.mtime_ns.unwrap_or(0),
crates/cli/src/daemon/server.rs::chunk.metadata.size_bytes.unwrap_or(0),
crates/cli/src/daemon/server.rs::if let Ok(home) = std::env::var("HOME") {
crates/cli/src/daemon/server.rs::let _ = sender.blocking_send(MassFilesystemMessage::Complete {
crates/cli/src/daemon/transport.rs::.unwrap_or_else(|| "keyhog.sock".to_string());
crates/cli/src/orchestrator/dispatch.rs::.unwrap_or_else(|| Ok(Vec::new()))
crates/cli/src/orchestrator/dispatch/backend.rs::let _ = (
crates/cli/src/orchestrator/dispatch/backend.rs::let reason = self.cache_load_error.as_deref().unwrap_or_else(|| {
crates/cli/src/orchestrator/dispatch/backend/calibration.rs::let _ = (
crates/cli/src/orchestrator/dispatch/backend/calibration.rs::let _ = scanner;
crates/cli/src/orchestrator/dispatch/backend/calibration.rs::let slowest = medians.iter().copied().max().unwrap_or(1);
crates/cli/src/orchestrator/dispatch/backend/evidence.rs::gpu_dispatch_capability.unwrap_or(""),
crates/cli/src/orchestrator/dispatch/backend/evidence.rs::gpu_slot_input_capacity_bytes.unwrap_or(0),
crates/cli/src/orchestrator/dispatch/backend/evidence.rs::u64::from(gpu_slot_match_capacity.unwrap_or(0)),
crates/cli/src/orchestrator/dispatch/backend/store/artifact_identity.rs::(u64::try_from(bytes.len()).ok()? <= limit).then_some(bytes)
crates/cli/src/orchestrator/dispatch/backend/store/artifact_identity.rs::.ok()?;
crates/cli/src/orchestrator/dispatch/backend/store/artifact_identity.rs::let cache_dir = keyhog_scanner::gpu_literal_artifact_cache_dir().ok()?;
crates/cli/src/orchestrator/dispatch/backend/store/artifact_identity.rs::let declared_len = file.metadata().ok()?.len();
crates/cli/src/orchestrator/dispatch/backend/store/artifact_identity.rs::let manifest_metadata = std::fs::symlink_metadata(&manifest_path).ok()?;
crates/cli/src/orchestrator/dispatch/backend/store/artifact_identity.rs::let metadata = std::fs::symlink_metadata(&path).ok()?;
crates/cli/src/orchestrator/dispatch/backend/store/artifact_identity.rs::let mut bytes = Vec::with_capacity(usize::try_from(declared_len).ok()?);
crates/cli/src/orchestrator/dispatch/backend/store/artifact_identity.rs::let mut file = std::fs::File::open(path).ok()?;
crates/cli/src/orchestrator/dispatch/backend/store/artifact_identity.rs::let read = file.read(&mut buffer).ok()?;
crates/cli/src/orchestrator/dispatch/backend/store/artifact_identity.rs::serde_json::from_slice(&read_bounded(&manifest_path, INSTALLED_MANIFEST_BYTES)?).ok()?;
crates/cli/src/orchestrator/dispatch/fused.rs::let _ = handle.join();
crates/cli/src/orchestrator/dispatch/fused.rs::tracing::debug!( target: "keyhog::routing", "scanner dispatch skipped because source acquisition produced no scan bytes" );
crates/cli/src/orchestrator_config/policy.rs::evidence_policy: args.evidence_policy.unwrap_or_default(),
crates/cli/src/subcommands/backend/autoroute.rs::.unwrap_or_default();
crates/cli/src/subcommands/backend/autoroute.rs::let input = receipt.gpu_slot_input_capacity_bytes.unwrap_or_else(|| {
crates/cli/src/subcommands/backend/autoroute.rs::let matches = receipt.gpu_slot_match_capacity.unwrap_or_else(|| {
crates/cli/src/subcommands/daemon.rs::.unwrap_or(false)
crates/cli/src/subcommands/daemon.rs::let num: f64 = num_str.parse().ok()?;
crates/cli/src/subcommands/guard.rs::Err(_) => {
crates/cli/src/subcommands/guard.rs::if let Ok(Response::GuardListResult { roots }) = conn.round_trip(&Request::GuardList).await
crates/cli/src/subcommands/guard.rs::if let Ok(Response::GuardListResult { roots }) = conn.round_trip(&Request::GuardList).await {
crates/cli/src/subcommands/guard.rs::if let Ok(Some(hook_path)) =
crates/cli/src/subcommands/guard.rs::if let Ok(Some(status)) = child.try_wait() {
crates/cli/src/subcommands/guard.rs::if let Ok(mut conn) = client::connect(&socket).await {
crates/cli/src/subcommands/guard.rs::let _ = conn
crates/cli/src/subcommands/guard.rs::let socket = socket.unwrap_or_else(default_socket_path);
crates/cli/src/subcommands/hook.rs::Err(_) => return Ok(None),
crates/cli/src/subcommands/scan.rs::.blocks(args.evidence_policy.unwrap_or_default().is_paranoid())
crates/cli/src/subcommands/scan.rs::.unwrap_or_else(|| std::path::Path::new("."));
crates/cli/src/subcommands/scan.rs::args.evidence_policy.unwrap_or_default().is_paranoid(),
crates/cli/src/subcommands/scan.rs::tracing::debug!( error = %e, "daemon auto route unavailable; running in-process scanner" );
crates/cli/src/value_parsers.rs::T::from_str(value, true).ok()
crates/core/src/evidence.rs::detector_digest: detector_digest.unwrap_or(0),
crates/core/src/evidence.rs::pattern_index: wire.pattern_index.unwrap_or(0),
crates/core/src/guard_store.rs::.unwrap_or_default(),
crates/core/src/guard_store.rs::NonZeroUsize::new(n.max(1)).unwrap_or(NonZeroUsize::MIN)
crates/core/src/guard_store.rs::Ok(value.map(|v| v.value() == 1u8).unwrap_or(false))
crates/core/src/guard_store.rs::let (key, _) = entry.ok()?;
crates/core/src/guard_store.rs::let _ = txn
crates/core/src/guard_store.rs::let current_short = current.short_digest().unwrap_or_default();
crates/core/src/guard_store.rs::let value_digest = value.policy_identity.short_digest().unwrap_or_default();
crates/core/src/guard_store.rs::u32::from_le_bytes(bytes.try_into().unwrap_or([0, 0, 0, 0]))
crates/core/src/report/text.rs::.unwrap_or_default();
crates/core/src/spec/validate.rs::.ok()
crates/core/src/spec/validate/regex_ast.rs::.unwrap_or_default();
crates/core/src/triage.rs::.ok()
crates/core/src/triage.rs::.unwrap_or(detector_id);
crates/scanner/examples/diag_failing_detectors.rs::if let Ok(strategy) = proptest::string::string_regex(&pattern.regex) {
crates/scanner/examples/diag_failing_detectors.rs::let path = test.test_path.as_deref().unwrap_or("s.txt");
crates/scanner/src/candidate_provenance.rs::.unwrap_or(EvidenceReasonCode::RequiredCompanion)
crates/scanner/src/code_semantics.rs::.unwrap_or(path)
crates/scanner/src/code_semantics.rs::.unwrap_or(path);
crates/scanner/src/compiled_scanner/compile.rs::.unwrap_or_else(|error| panic!("invalid scanner tuning configuration: {error}"))
crates/scanner/src/compiled_scanner/compile.rs::let _ = packed_simd_program;
crates/scanner/src/compiler/compiler_compile.rs::.ok()
crates/scanner/src/confidence/quantized.rs::let maximum = gate_logits.iter().copied().max().unwrap_or(0);
crates/scanner/src/confidence/quantized_vyre.rs::.and_then(|count| u32::try_from(count).ok())
crates/scanner/src/confidence/quantized_vyre.rs::.unwrap_or(0);
crates/scanner/src/credential_shapes.rs::.unwrap_or(rest.len());
crates/scanner/src/decode/caesar.rs::if let Ok(shifted) = String::from_utf8(bytes) {
crates/scanner/src/decode/reverse.rs::if let Ok(reversed) = String::from_utf8(bytes) {
crates/scanner/src/decode/url.rs::out.push_str(std::str::from_utf8(&digits[..digits_len]).unwrap_or(""));
crates/scanner/src/decode/url.rs::std::str::from_utf8(&digits[..digits_len]).unwrap_or(""),
crates/scanner/src/documentation_semantics.rs::.unwrap_or(path)
crates/scanner/src/documentation_semantics.rs::.unwrap_or(path);
crates/scanner/src/documentation_semantics.rs::content_start: next_line(text, line).unwrap_or(end),
crates/scanner/src/documentation_semantics.rs::let info = std::str::from_utf8(&bytes[start + width..end]).ok()?.trim();
crates/scanner/src/documentation_semantics.rs::let unquoted_offset = raw.find(unquoted).unwrap_or(0);
crates/scanner/src/engine/backend/trigger_collection.rs::.unwrap_or_default()
crates/scanner/src/engine/backend/triggered.rs::.unwrap_or([0u8; 32]);
crates/scanner/src/engine/batch_topology.rs::.unwrap_or(0);
crates/scanner/src/engine/mod.rs::.unwrap_or_default();
crates/scanner/src/engine/mod.rs::.unwrap_or_else(|poisoned| poisoned.into_inner())
crates/scanner/src/engine/mod.rs::.unwrap_or_else(|poisoned| poisoned.into_inner());
crates/scanner/src/engine/phase1_admission/mod.rs::.then(|| crate::context::LineContextIndex::try_new(&chunk.data).ok())
crates/scanner/src/engine/phase2_entropy/gates.rs::let parsed: ShellExpansionPrefixes = toml::from_str(raw).unwrap_or_else(|error| {
crates/scanner/src/engine/phase2_gpu_dfa.rs::.map(|&index| u32::try_from(index).ok())
crates/scanner/src/engine/phase2_gpu_dfa.rs::.ok()?;
crates/scanner/src/engine/phase2_gpu_dfa/lowering.rs::hasher.update(&(pattern.group.unwrap_or(usize::MAX) as u64).to_le_bytes());
crates/scanner/src/engine/scan_coalesced/mod.rs::.unwrap_or_else(|| self.phase1_admission(data))
crates/scanner/src/engine/scan_coalesced/mod.rs::bytes: u64::try_from(chunk.data.len()).unwrap_or(u64::MAX),
crates/scanner/src/engine/scan_coalesced/mod.rs::let _ = rows[row].set(Ok(cached));
crates/scanner/src/engine/scan_coalesced/mod.rs::u64::try_from(scanned_bytes).unwrap_or(u64::MAX),
crates/scanner/src/engine/scan_postprocess.rs::.unwrap_or(Ok(()))
crates/scanner/src/engine/scan_postprocess/confirmed_extract.rs::.unwrap_or(false)
crates/scanner/src/engine/scan_postprocess/ml.rs::let _ = backend;
crates/scanner/src/engine/scan_postprocess/ml.rs::let _ = deadline;
crates/scanner/src/engine/vocab_absence.rs::path.unwrap_or("").hash(&mut hasher);
crates/scanner/src/gpu/adapter_probe.rs::.and_then(|value| value.trim().parse::<u64>().ok())
crates/scanner/src/gpu/adapter_probe.rs::.ok()
crates/scanner/src/gpu/adapter_probe.rs::.unwrap_or_else(|_| "unknown".to_string());
crates/scanner/src/gpu/adapter_probe.rs::.unwrap_or_else(|| "unavailable".to_string());
crates/scanner/src/gpu/adapter_probe.rs::.unwrap_or_else(|| format!("vulkan-device-uuid:{uuid}"));
crates/scanner/src/gpu/adapter_probe.rs::.unwrap_or_else(|| {
crates/scanner/src/gpu/adapter_probe.rs::device.capacity_bytes.unwrap_or(0),
crates/scanner/src/gpu/adapter_probe.rs::let _ = devices.try_reserve(MAX_PCI_DEVICES);
crates/scanner/src/gpu/adapter_probe.rs::let value = std::fs::read_to_string(path).ok()?;
crates/scanner/src/gpu/adapter_probe.rs::u32::from_str_radix(value.trim().trim_start_matches("0x"), 16).ok()
crates/scanner/src/gpu/backend/acquisition.rs::.unwrap_or_default()
crates/scanner/src/gpu/backend/acquisition.rs::.unwrap_or_else(|| {
crates/scanner/src/gpu/backend/acquisition.rs::let _ = ordinal;
crates/scanner/src/gpu/backend/acquisition.rs::let topology = cuda_pci_bus_id(caps.ordinal).ok().and_then(|pci_bus_id| {
crates/scanner/src/gpu/backend/acquisition.rs::runtime_identity.as_deref().unwrap_or("runtime-unavailable")
crates/scanner/src/gpu/backend/resident_evidence.rs::.and_then(|bytes| u64::try_from(bytes).ok())
crates/scanner/src/gpu/backend/resident_evidence.rs::.ok()
crates/scanner/src/gpu/backend/resident_evidence.rs::.unwrap_or(0);
crates/scanner/src/gpu/backend/resident_evidence.rs::Err(_) => {
crates/scanner/src/matcher_artifact_cache.rs::pack_generation: pack_generation.unwrap_or("none").to_owned(),
crates/scanner/src/matcher_artifact_cache.rs::runtime_identity: runtime_identity.unwrap_or("none").to_owned(),
crates/scanner/src/ml_scorer.rs::Err(_) => cpu_rows.push((candidate_id, Some(features))),
crates/scanner/src/ml_scorer.rs::let features = features.unwrap_or_else(|| input.ml_features(config));
crates/scanner/src/multiline/config.rs::let parsed: MultilineConcatMarkers = toml::from_str(raw).unwrap_or_else(|error| {
crates/scanner/src/pattern_calibration.rs::.ok()
crates/scanner/src/scanner_config.rs::.unwrap_or(Self::CHUNK_LANE_THRESHOLD_DEFAULT)
crates/scanner/src/source_semantics.rs::.unwrap_or(line_span.end);
crates/scanner/src/source_semantics.rs::.unwrap_or(path)
crates/scanner/src/source_semantics.rs::.unwrap_or(path);
crates/scanner/src/source_semantics.rs::find_first_unquoted(bytes, start, end, comments).unwrap_or(end)
crates/scanner/src/source_semantics.rs::parser.parse_value(0).ok()?;
crates/scanner/src/suppression/shape/canonical.rs::let parsed: HashAlgoLabels = toml::from_str(raw).unwrap_or_else(|error| {
crates/scanner/src/suppression/shape/mod.rs::let parsed: CredentialKeywords = toml::from_str(raw).unwrap_or_else(|error| {
crates/scanner/src/testing.rs::crate::decode::quoted_printable_decode(input).ok()
crates/scanner/src/testing.rs::crate::decode::url_decode(input).ok()
crates/scanner/src/tuning.rs::.store(config.hs_shard_target.unwrap_or(0), Relaxed);
crates/scanner/src/tuning.rs::.store(threshold.unwrap_or(0), Relaxed);
crates/sources/benches/bench_git_staged.rs::let _ = Command::new("git")
crates/sources/benches/bench_git_staged.rs::let _ = std::fs::create_dir_all(parent);
crates/sources/src/binary/analyzers/ghidra.rs::let line = line.strip_suffix('\n').unwrap_or(&line);
crates/sources/src/binary/analyzers/ghidra.rs::let line = line.strip_suffix('\r').unwrap_or(line);
crates/sources/src/docker/archive.rs::.unwrap_or("");
crates/sources/src/docker/archive.rs::if let Ok(chunk_ok) = &chunk {
crates/sources/src/filesystem.rs::.unwrap_or(entry.path.as_path());
crates/sources/src/filesystem/discovery.rs::let relative = path.strip_prefix(root).unwrap_or(path);
crates/sources/src/filesystem/extract/archive/zip_scan.rs::let _ = extract_zip_archive_entries(
crates/sources/src/filesystem/extract/compressed.rs::.ok()?;
crates/sources/src/filesystem/extract/compressed.rs::Err(_) => return false,
crates/sources/src/filesystem/extract/compressed.rs::let mut dec = zstd::stream::read::Decoder::new(compressed).ok()?;
crates/sources/src/filesystem/extract/compressed.rs::let stream = xz2::stream::Stream::new_stream_decoder(budget, 0).ok()?;
crates/sources/src/filesystem/extract/compressed.rs::let take = usize::try_from(remain).unwrap_or(usize::MAX).min(buf.len());
crates/sources/src/filesystem/extract/pdf.rs::let _ = extract_pdf_chunks_from_bytes(
crates/sources/src/filesystem/reader.rs::Err(_) => 0,
crates/sources/src/filesystem/reader.rs::let _ = send_chunk_batch(&reorder_tx, &mut outbound_chunks, &mut outbound_bytes);
crates/sources/src/git/manifest.rs::Err(_) => false,
crates/sources/src/git/manifest.rs::let _ = cache.get(&PathBuf::from("/repos/repo_0"));
crates/sources/src/git/manifest.rs::let meta = std::fs::metadata(&entry.index_path).ok()?;
crates/sources/src/git/manifest.rs::let mtime = meta.modified().ok()?;
crates/sources/src/git/manifest.rs::let repo_root = super::canonical_repo_root(repo_path).ok()?;
crates/sources/src/git/mod.rs::Err(_) => {
crates/sources/src/git/mod.rs::file.read_exact(&mut buf).ok()?;
crates/sources/src/git/mod.rs::file.seek(SeekFrom::End(-20)).ok()?;
crates/sources/src/git/mod.rs::if let Ok(meta) = std::fs::metadata(&index_path) {
crates/sources/src/git/mod.rs::if let Ok(oid) = gix::ObjectId::from_hex(entry.object_oid.as_bytes()) {
crates/sources/src/git/mod.rs::let len = file.metadata().ok()?.len();
crates/sources/src/git/mod.rs::let mut file = std::fs::File::open(path).ok()?;
crates/sources/src/git/source.rs::if let Ok(record) = super::read_capped_line(
crates/sources/src/git/source.rs::let _ =
crates/sources/src/git/source.rs::let objectname = fields.next().unwrap_or("");
crates/sources/src/git/source.rs::let peeled = fields.next().unwrap_or("");
crates/verifier/src/engine.rs::Err(_) => Err(VerificationResult::Error(TIMEOUT_ERROR.into())),
crates/verifier/src/engine.rs::let deadline = start.checked_add(timeout).unwrap_or(start);
crates/verifier/src/engine.rs::let deadline = start.checked_add(total_duration).unwrap_or(start);
crates/verifier/src/verify/credential.rs::.unwrap_or_else(|| {
crates/verifier/src/verify/credential.rs::if let Ok(remaining) = d.remaining() {
crates/verifier/src/verify/credential.rs::return last_attempt.unwrap_or_else(|| {
