Rules

Registry 2026.10.1. False-positive rates are measured on 210 public repositories and shown with their sample size; below 30 reviewed findings a rate is “not yet established”. A rule over 5% reports at info and stays beta.

IDCheckSeverityStatusMeasured
CTX-S001No agent context file in repositoryinfoga0/26 · not yet established
CTX-S002Two or more tool-specific context files with no shared sourcewarningga0.0% FP (n=43, ≤8.2%)
CTX-S003Broken import or reference to a missing context fileblockerga0/11 · not yet established
CTX-S004Rule glob or path scope matches no fileswarningga0/11 · not yet established
CTX-S005Invalid frontmatter in a rule or instruction filewarningbeta0/1 · not yet established
CTX-S006Deprecated context format in useinfoga0/28 · not yet established
CTX-D001Referenced path does not existinfobeta12% FP (n=60, ≤22%)
CTX-D002Referenced command or script is not definedwarningga0/14 · not yet established
CTX-D003Stated package manager contradicts the lockfilewarningbetanot yet established
CTX-D004Referenced dependency absent from manifestsinfobeta6/17 · not yet established
CTX-D005Stated major version contradicts installed versionwarningga0/6 · not yet established
CTX-D006Context unchanged while the paths it cites changed heavilyinfobetanot yet established
CTX-D007Architecture claim contradicted by the code modelwarningbeta deferrednot yet established
CTX-C001Same fact stated with different values across files or toolsblockerbetanot yet established
CTX-C002AGENTS.md and CLAUDE.md shared sections have divergedwarningbeta0/3 · not yet established
CTX-C003Nested file overrides a parent with a different valuewarningbetanot yet established
CTX-C004Natural-language contradiction between directiveswarningbeta deferrednot yet established
CTX-C005Team memory entry contradicts an instruction filewarningbeta cloudnot yet established
CTX-B001Always-loaded context exceeds the token budget for a toolwarningga0/29 · not yet established
CTX-B002Section duplicates README or docs contentinfobeta0/2 · not yet established
CTX-B003Generic boilerplate with no repository-specific contentinfobeta0/5 · not yet established
CTX-B004Same directive repeated across filesinfoga0.0% FP (n=70, ≤5.2%)
CTX-X001Invisible or bidirectional Unicode in a context fileblockerbetanot yet established
CTX-X002Long encoded payload in a context filewarningbetanot yet established
CTX-X003Instruction to download and execute remote codeblockerbetanot yet established
CTX-X004Instruction to skip tests, disable checks or hide changeswarningbetanot yet established
CTX-X005Secret or credential in context or MCP configblockerbetanot yet established
CTX-X006MCP server not pinned to a versionwarningga0/22 · not yet established
CTX-X007Remote MCP server over plain HTTP or without authwarningbetanot yet established
CTX-X008Instruction links to a domain outside the allowlistinfobetanot yet established
CTX-X009Third-party skill or rule pack imported without a pinned version or hashwarningbetanot yet established
CTX-G001Context files not covered by CODEOWNERSwarningga0/5 · not yet established
CTX-G002Generated context file edited by handblockerbeta deferrednot yet established
CTX-G003Org-required policy missing from repositoryblockerbeta cloudnot yet established
CTX-G004Team memory entry expired or never reviewedwarningbeta cloudnot yet established