{
 "generated_by": "python scripts/action_summary.py",
 "command": "python scripts/action_report.py",
 "note": "Every row and count below is what the command beside it printed on this repository. The page types none of them.",
 "violations": 1,
 "unknown": 67,
 "counts": "1 blocking violation; 67 unresolved items, not assessed and not clean. 67 steps in .elenchos-controls.json need an expectation, or reporting (`elenchos policy init` drafts the file; a human sets each entry).",
 "markdown": "## Elenchos\n1 blocking violation; 67 unresolved items, not assessed and not clean. 67 steps in .elenchos-controls.json need an expectation, or reporting (`elenchos policy init` drafts the file; a human sets each entry).\n\n| Control | Before | After | Evidence |\n|---|---|---|---|\n| .github/workflows/canary-target.yml:36 - Run security scan | not compared | not-enforced | continue-on-error: true, so failure is allowed without blocking the enclosing pipeline  |\n\nThis is static configuration evidence, not a clean bill of health or an execution proof.\nUnresolved scripts, reusable workflows, missing policy and ambiguous targets are UNKNOWN.\nConfigured blocking becomes empirical evidence only after the same-canary and clean-control experiment.\n",
 "rows": [
  {
   "workflow": ".github/workflows/canary-target.yml",
   "step": "Run security scan",
   "before": "not compared",
   "after": "not-enforced",
   "line": 36,
   "weakening": false,
   "reason": "continue-on-error: true, so failure is allowed without blocking the enclosing pipeline",
   "citations": ""
  }
 ],
 "annotations": [
  "::warning file=.github/workflows/canary-target.yml,line=36::Run security scan [not-enforced]: continue-on-error%3A true%2C so failure is allowed without blocking the enclosing pipeline"
 ]
}