Every commit scored for change-risk against this repo's own history, so 'elevated' means elevated here rather than on some global curve.
Needs review
60 commits sit in this repo's top risk tercile, which is 34% of the 176scored. The cut is drawn against this codebase's own history rather than a global curve, so a quiet repo still fills its top band, and here it starts at 6.9 out of 10. What pushes a commit up is size and spread together: a large change confined to one area scores below a smaller one scattered across a dozen files.
Commit categories over time, read off the subject line. Fixes carry the accent because that is the series this chart exists to show.
How this repo's commit mix shifts over time.
Ranked by change-risk, highest first. Priority is a tercile of this repo's own distribution, so a quiet repo still fills its top band.
| # | Commit | Author | When | Lines | Risk | Top driver |
|---|---|---|---|---|---|---|
| 1 | 103357cdrecover runtime scripts and enforce public local boundary | Efidripy | 1w ago | +32.9K -9 | 99%Elevated | more lines added than baseline |
| 2 | eaa29c05Release: BlackHoleMemory v1.8.0 | Efidripy | 1w ago | +126.7K -0 | 99%Elevated | more lines added than baseline |
| 3 | a1334f52remediation: close release auth ci and boundary findings | Efidripy | 2d ago | +22.4K -1.6K | 99%Elevated | more lines added than baseline |
| 4 | b8653eaafeat: complete BHM worklist and harden runtime boundaries | Efidripy | 1w ago | +2.9K -383 | 98%Elevated | more lines added than baseline |
| 5 | 972530a1feat: add bounded MCP session queue and status surfaces | Efidripy | 1w ago | +937 -117 | 97%Elevated | more lines added than baseline |
| 6 | 8474c1d6fix: bind storage and idempotency to project scope | Efidripy | 1d ago | +468 -60 | 96%Elevated | more lines added than baseline |
| 7 | 2c590d8charden projection delete revalidation | Efidripy | 2d ago | +500 -10 | 96%Elevated | more lines added than baseline |
| 8 | d200441bsecurity: close CodeQL and dependency findings | Efidripy | 1w ago | +606 -150 | 96%Elevated | more lines added than baseline |
| 9 | 109ed1b9security: harden CodeQL path, disclosure, and regex boundaries | Efidripy | 1w ago | +397 -35 | 95%Elevated | more lines added than baseline |
| 10 | 7c074a5cfix: enforce scoped graph and bounded MCP operations | Efidripy | 1d ago | +346 -45 | 95%Elevated | more lines added than baseline |
| 11 | f52f344efix: admit MCP Doctor process paths | Efidripy | 1d ago | +306 -73 | 94%Elevated | more lines added than baseline |
| 12 | 565e6c12harden safe patch sandbox boundary | Efidripy | 2d ago | +282 -26 | 94%Elevated | more lines added than baseline |
| 13 | a5ae0727fix: close CodeQL filesystem and error boundaries | Efidripy | 20h ago | +301 -52 | 92%Elevated | more lines added than baseline |
| 14 | 4366f90dfix: harden validator paths and destructive workflows | Efidripy | 1d ago | +245 -12 | 92%Elevated | more lines added than baseline |
| 15 | b7aeea29fix: renew browser UI sessions | Efidripy | 1w ago | +237 -13 | 92%Elevated | more lines added than baseline |
| 16 | 62df418efix: bound encoding normalizer writes | Efidripy | 1d ago | +239 -9 | 91%Elevated | more lines added than baseline |
| 17 | 1df10aaeextract UI origin policy | Efidripy | 2d ago | +195 -54 | 91%Elevated | more lines added than baseline |
| 18 | 1e431f4fharden reflection daemon delete boundaries | Efidripy | 2d ago | +227 -9 | 91%Elevated | more lines added than baseline |
| 19 | 39ac0fa3fix: harden release trust input boundary | Efidripy | 1d ago | +208 -46 | 89%Elevated | more lines added than baseline |
| 20 | 205714b5fix: constrain BHM egress and validator budgets | Efidripy | 1d ago | +206 -16 | 88%Elevated | more lines added than baseline |
| 21 | b70b979efix: bound Workbench input and local egress | Efidripy | 1d ago | +164 -30 | 88%Elevated | more lines added than baseline |
| 22 | f8f61874fix: enforce admin snapshot project ownership | Efidripy | 2d ago | +179 -0 | 88%Elevated | more lines added than baseline |
| 23 | 05ebb790release: prepare BlackHoleMemory v1.8.1 | Efidripy | 21h ago | +269 -184 | 87%Elevated | more lines added than baseline |
| 24 | ead01e15fix: bound permission attestation writers | Efidripy | 1d ago | +158 -14 | 87%Elevated | more lines added than baseline |
| 25 | c378737dharden MCP rollback manifest integrity | Efidripy | 2d ago | +172 -7 | 87%Elevated | more lines added than baseline |
| 26 | 7cd92bf7fix: bound provenance attestation inputs | Efidripy | 1d ago | +153 -29 | 85%Elevated | more lines added than baseline |
| 27 | 14020544fix: harden internal report writer boundaries | Efidripy | 1d ago | +162 -35 | 85%Elevated | more lines added than baseline |
| 28 | a100970ffix: harden release metadata writers | Efidripy | 1d ago | +135 -11 | 84%Elevated | more lines added than baseline |
| 29 | 04d77a56fix: harden detached restart launcher boundary | Efidripy | 1d ago | +126 -13 | 84%Elevated | more lines added than baseline |
| 30 | bc05c491fix: harden night watch execution boundaries | Efidripy | 1d ago | +146 -27 | 84%Elevated | more lines added than baseline |
| 31 | a4bfec79fix: harden release trust builder input boundary | Efidripy | 1d ago | +115 -16 | 82%Elevated | more lines added than baseline |
| 32 | 745d085bharden REST exception redaction boundaries | Efidripy | 2d ago | +111 -26 | 82%Elevated | more lines added than baseline |
| 33 | 2b5a611dfix: align runtime paths and security gates | Efidripy | 1w ago | +154 -34 | 82%Elevated | more lines added than baseline |
| 34 | 9929f030bound launcher readiness timeouts | Efidripy | 2d ago | +114 -16 | 81%Elevated | more lines added than baseline |
| 35 | 55628f4ffix: bound MCP session admission waits | Efidripy | 1d ago | +111 -3 | 80%Elevated | more lines added than baseline |
| 36 | 51571770fix: bound dead-letter requeue backups | Efidripy | 1d ago | +105 -4 | 80%Elevated | more lines added than baseline |
| 37 | 0b96dc03extract code graph capability contract | Efidripy | 2d ago | +98 -54 | 80%Elevated | more lines added than baseline |
| 38 | 8c7687bcfix: close release trust promotion boundary | Efidripy | 2d ago | +93 -3 | 79%Elevated | more lines added than baseline |
| 39 | 2e4e5e3dfix: preserve release source root provenance | Efidripy | 1d ago | +88 -3 | 78%Elevated | more lines added than baseline |
| 40 | 0bdd25acrefactor: centralize bhm remember contract validation | Efidripy | 1d ago | +88 -27 | 78%Elevated | more lines added than baseline |
| 41 | ab4b0698harden MCP exception secret redaction | Efidripy | 2d ago | +84 -2 | 77%Elevated | more lines added than baseline |
| 42 | cf047535security: pin patched Starlette and annotate CodeQL boundaries | Efidripy | 1w ago | +74 -59 | 77%Elevated | more lines added than baseline |
| 43 | 13af5263fix: harden immutable source materializer boundary | Efidripy | 1d ago | +74 -11 | 75%Elevated | more lines added than baseline |
| 44 | e5b33a7bfix: harden public evidence sanitization | Efidripy | 1d ago | +77 -10 | 75%Elevated | more lines added than baseline |
| 45 | 2846487efix: bound projection report destinations | Efidripy | 1d ago | +75 -3 | 75%Elevated | more lines added than baseline |
| 46 | 80c7cfccfix: harden native retrieval provider probe | Efidripy | 1d ago | +82 -2 | 74%Elevated | more lines added than baseline |
| 47 | 5dddd2f2fix: bound MCP doctor stdio cleanup | Efidripy | 1d ago | +67 -23 | 73%Elevated | more lines added than baseline |
| 48 | d8de860efix: bound Windows MCP broker wake probe | Efidripy | 1d ago | +76 -3 | 73%Elevated | more lines added than baseline |
| 49 | 76f4d2caharden external source DNS boundaries | Efidripy | 2d ago | +69 -5 | 73%Elevated | more lines added than baseline |
| 50 | 09059c62harden Git source registry remotes | Efidripy | 2d ago | +64 -2 | 73%Elevated | more lines added than baseline |
Two views of the same model: where the cuts fall, and what commit shape lands you above them.
Every scored commit, binned on the raw 0 to 10 score rather than the percentile. Percentile ranks are uniform by construction, so that axis has no shape to draw. The dashed lines are the tercile cuts behind each row's priority pill.
The 176 most recent commits, on their own recency sample rather than the feed above: that defaults to risk-sorted, so reusing it would plot only the top tercile and call it the spread. Big and scattered is what the model penalises. Click a dot to open it.
efidripy/blackholememory has 176 commits in its history from 1 contributor, the first of them Jul 27, 2026. In the last 90 days 736 files were touched, 1,434 times in total, most often app.py. Every commit is scored for change risk from its size, spread and the history of the files it touches.
