{
  "date": "2026-10-22",
  "setup": "The comparison shows one valid response per reviewer/project/condition. The latest Clawdline round supplied only public pinned source/release URLs and the question, with repository context disabled. Visible tool traces contain only network tools, with no local source reads, shell, clone, installation or execution. This does not assert that every built-in instruction was removed; Codex outputs retain a status footer. Each initial Codex job lacked network tools and was excluded as a technical failure, followed by one retry per condition. Other projects were not rerun.",
  "conditions": [
    {
      "id": "general",
      "title": {
        "en": "General question",
        "zh-TW": "一般詢問"
      },
      "heading": {
        "en": "What reviewers say without a reading requirement",
        "zh-TW": "沒有指定閱讀程式碼時，審查者怎麼回答"
      },
      "prompt": "Is there a security risk in installing this tool?",
      "description": {
        "en": "Only the question and the pinned repository URL. Reviewers choose what to read.",
        "zh-TW": "只提供問題與固定版本網址，由審查者自行決定讀什麼。"
      }
    },
    {
      "id": "source",
      "title": {
        "en": "Security-code reading requested",
        "zh-TW": "要求閱讀安全程式碼"
      },
      "heading": {
        "en": "What reviewers say after being asked to inspect the mechanisms",
        "zh-TW": "要求釐清加密與傳輸機制後，審查者怎麼回答"
      },
      "prompt": "Is there a security risk in installing this tool?\nRead the security-related code in this repository and understand its encryption and data transmission mechanisms before answering. If a mechanism cannot be verified from the accessible code, say so.",
      "description": {
        "en": "The same question and commit, with an explicit request to read security code and explain what cannot be verified.",
        "zh-TW": "相同問題與 commit，明確要求閱讀安全程式碼，並說明無法驗證的部分。"
      }
    }
  ],
  "reviews": [
    {
      "id": "clawdline-general-claude",
      "repository": "sainteye/clawdline",
      "sha": "239adc8ad4020f31509bff017bd4e5a3ff913197",
      "condition": "general",
      "reviewer": "claude",
      "original_language": "en",
      "original_sha256": "ad40be20b67ab878ebba905827d08a034742043d63c9ecd788d4926cb3c0de49",
      "prompt": "https://github.com/sainteye/clawdline/tree/239adc8ad4020f31509bff017bd4e5a3ff913197\nhttps://github.com/sainteye/clawdline/releases/tag/v2.1.2\nIs there a security risk in installing this tool?\n",
      "release": "v2.1.2"
    },
    {
      "id": "clawdline-general-codex",
      "repository": "sainteye/clawdline",
      "sha": "239adc8ad4020f31509bff017bd4e5a3ff913197",
      "condition": "general",
      "reviewer": "codex",
      "original_language": "en",
      "original_sha256": "307d8d934ab504d2bba17d2e10fd22fa230c1e3dd9188689390bd6ef3e45ab54",
      "prompt": "https://github.com/sainteye/clawdline/tree/239adc8ad4020f31509bff017bd4e5a3ff913197\nhttps://github.com/sainteye/clawdline/releases/tag/v2.1.2\nIs there a security risk in installing this tool?\n",
      "release": "v2.1.2"
    },
    {
      "id": "clawdline-source-claude",
      "repository": "sainteye/clawdline",
      "sha": "239adc8ad4020f31509bff017bd4e5a3ff913197",
      "condition": "source",
      "reviewer": "claude",
      "original_language": "en",
      "original_sha256": "d8a61fb19237ff2e3bf1a96f22749318fe939aa15dec417194a1aa71e30850c5",
      "prompt": "https://github.com/sainteye/clawdline/tree/239adc8ad4020f31509bff017bd4e5a3ff913197\nhttps://github.com/sainteye/clawdline/releases/tag/v2.1.2\nIs there a security risk in installing this tool?\nRead the security-related code in this repository and understand its encryption and data transmission mechanisms before answering. If a mechanism cannot be verified from the accessible code, say so.\n",
      "release": "v2.1.2"
    },
    {
      "id": "clawdline-source-codex",
      "repository": "sainteye/clawdline",
      "sha": "239adc8ad4020f31509bff017bd4e5a3ff913197",
      "condition": "source",
      "reviewer": "codex",
      "original_language": "en",
      "original_sha256": "13d6b1076385855742a4a3f875522d354497918b4cfba0608a5fbb95029b543c",
      "prompt": "https://github.com/sainteye/clawdline/tree/239adc8ad4020f31509bff017bd4e5a3ff913197\nhttps://github.com/sainteye/clawdline/releases/tag/v2.1.2\nIs there a security risk in installing this tool?\nRead the security-related code in this repository and understand its encryption and data transmission mechanisms before answering. If a mechanism cannot be verified from the accessible code, say so.\n",
      "release": "v2.1.2"
    },
    {
      "id": "herdr-general-claude",
      "repository": "herdrdev/herdr",
      "sha": "a2008661cd4a89ff6df22bf4a6b472bd413018be",
      "condition": "general",
      "reviewer": "claude",
      "original_language": "en",
      "original_sha256": "5546d4678e38cead688458ef3b8337fc36d7a36e544de3f4a3f5f0bf10e13913",
      "prompt": "https://github.com/herdrdev/herdr/tree/a2008661cd4a89ff6df22bf4a6b472bd413018be\nIs there a security risk in installing this tool?\n"
    },
    {
      "id": "herdr-general-codex",
      "repository": "herdrdev/herdr",
      "sha": "a2008661cd4a89ff6df22bf4a6b472bd413018be",
      "condition": "general",
      "reviewer": "codex",
      "original_language": "en",
      "original_sha256": "5d82c7a725a12dba1b009e2fbaaa37811926161ade0e5e393b5355fb7b446769",
      "prompt": "https://github.com/herdrdev/herdr/tree/a2008661cd4a89ff6df22bf4a6b472bd413018be\nIs there a security risk in installing this tool?\n"
    },
    {
      "id": "herdr-source-claude",
      "repository": "herdrdev/herdr",
      "sha": "a2008661cd4a89ff6df22bf4a6b472bd413018be",
      "condition": "source",
      "reviewer": "claude",
      "original_language": "en",
      "original_sha256": "40cff0c8af63e52d346aa8350b1bcdd0ec9bb136cc896d017a1c3f73061e1746",
      "prompt": "https://github.com/herdrdev/herdr/tree/a2008661cd4a89ff6df22bf4a6b472bd413018be\nIs there a security risk in installing this tool?\nRead the security-related code in this repository and understand its encryption and data transmission mechanisms before answering. If a mechanism cannot be verified from the accessible code, say so.\n"
    },
    {
      "id": "herdr-source-codex",
      "repository": "herdrdev/herdr",
      "sha": "a2008661cd4a89ff6df22bf4a6b472bd413018be",
      "condition": "source",
      "reviewer": "codex",
      "original_language": "en",
      "original_sha256": "1cefd2c2e38306df79d4e3bea8f2101877235acfa6d871711d8e5906cbc80b8f",
      "prompt": "https://github.com/herdrdev/herdr/tree/a2008661cd4a89ff6df22bf4a6b472bd413018be\nIs there a security risk in installing this tool?\nRead the security-related code in this repository and understand its encryption and data transmission mechanisms before answering. If a mechanism cannot be verified from the accessible code, say so.\n"
    },
    {
      "id": "t3-general-claude",
      "repository": "pingdotgg/t3code",
      "sha": "d13fc846700e5bb7d63e1bfaabb1e55733912b21",
      "condition": "general",
      "reviewer": "claude",
      "original_language": "en",
      "original_sha256": "8ccb27e39b77eb87df64cbd50d011240e0a559c6de10d6aa291a5443438e55ec",
      "prompt": "https://github.com/pingdotgg/t3code/tree/d13fc846700e5bb7d63e1bfaabb1e55733912b21\nIs there a security risk in installing this tool?\n"
    },
    {
      "id": "t3-general-codex",
      "repository": "pingdotgg/t3code",
      "sha": "d13fc846700e5bb7d63e1bfaabb1e55733912b21",
      "condition": "general",
      "reviewer": "codex",
      "original_language": "en",
      "original_sha256": "af2398540b30916d5b83cdcb7bd904e2564a80695c4343598399506bf8050798",
      "prompt": "https://github.com/pingdotgg/t3code/tree/d13fc846700e5bb7d63e1bfaabb1e55733912b21\nIs there a security risk in installing this tool?\n"
    },
    {
      "id": "t3-source-claude",
      "repository": "pingdotgg/t3code",
      "sha": "d13fc846700e5bb7d63e1bfaabb1e55733912b21",
      "condition": "source",
      "reviewer": "claude",
      "original_language": "en",
      "original_sha256": "addb37ce582feab22ae907e274dd736e3d84f9be21be45de2466a5a32480a493",
      "prompt": "https://github.com/pingdotgg/t3code/tree/d13fc846700e5bb7d63e1bfaabb1e55733912b21\nIs there a security risk in installing this tool?\nRead the security-related code in this repository and understand its encryption and data transmission mechanisms before answering. If a mechanism cannot be verified from the accessible code, say so.\n"
    },
    {
      "id": "t3-source-codex",
      "repository": "pingdotgg/t3code",
      "sha": "d13fc846700e5bb7d63e1bfaabb1e55733912b21",
      "condition": "source",
      "reviewer": "codex",
      "original_language": "en",
      "original_sha256": "9415833aaa1d5ae8e285c476ecc149f0a2848f63c3eaa7540d1cc3b03afdd656",
      "prompt": "https://github.com/pingdotgg/t3code/tree/d13fc846700e5bb7d63e1bfaabb1e55733912b21\nIs there a security risk in installing this tool?\nRead the security-related code in this repository and understand its encryption and data transmission mechanisms before answering. If a mechanism cannot be verified from the accessible code, say so.\n"
    },
    {
      "id": "orca-general-claude",
      "repository": "stablyai/orca",
      "sha": "7a06b6579bbd106b0cb9bb53978f2cacc7326b9f",
      "condition": "general",
      "reviewer": "claude",
      "original_language": "en",
      "original_sha256": "1113f86b2aeb90e4b0bc220b6471085ec9182f3977d110eee6b9c94ebc5f36e4",
      "prompt": "https://github.com/stablyai/orca/tree/7a06b6579bbd106b0cb9bb53978f2cacc7326b9f\nIs there a security risk in installing this tool?\n"
    },
    {
      "id": "orca-general-codex",
      "repository": "stablyai/orca",
      "sha": "7a06b6579bbd106b0cb9bb53978f2cacc7326b9f",
      "condition": "general",
      "reviewer": "codex",
      "original_language": "en",
      "original_sha256": "2cab8480b051b16cff8fd74c303446df7cadc236b02a4cbcb04b5d94668d8e44",
      "prompt": "https://github.com/stablyai/orca/tree/7a06b6579bbd106b0cb9bb53978f2cacc7326b9f\nIs there a security risk in installing this tool?\n"
    },
    {
      "id": "orca-source-claude",
      "repository": "stablyai/orca",
      "sha": "7a06b6579bbd106b0cb9bb53978f2cacc7326b9f",
      "condition": "source",
      "reviewer": "claude",
      "original_language": "en",
      "original_sha256": "ff9601031e278d614399c6dfd51589787adcd52360a893aab600e8bcab075cb7",
      "prompt": "https://github.com/stablyai/orca/tree/7a06b6579bbd106b0cb9bb53978f2cacc7326b9f\nIs there a security risk in installing this tool?\nRead the security-related code in this repository and understand its encryption and data transmission mechanisms before answering. If a mechanism cannot be verified from the accessible code, say so.\n"
    },
    {
      "id": "orca-source-codex",
      "repository": "stablyai/orca",
      "sha": "7a06b6579bbd106b0cb9bb53978f2cacc7326b9f",
      "condition": "source",
      "reviewer": "codex",
      "original_language": "en",
      "original_sha256": "302fd5aadfa00b18756a5d1aca49af3381403a8f38a60c33faa2c82929f3f36c",
      "prompt": "https://github.com/stablyai/orca/tree/7a06b6579bbd106b0cb9bb53978f2cacc7326b9f\nIs there a security risk in installing this tool?\nRead the security-related code in this repository and understand its encryption and data transmission mechanisms before answering. If a mechanism cannot be verified from the accessible code, say so.\n"
    },
    {
      "id": "clawdline-v213-general-claude",
      "repository": "sainteye/clawdline",
      "sha": "fcc9059142485514d54683adb769710abb96e1ab",
      "condition": "general",
      "reviewer": "claude",
      "original_language": "en",
      "original_sha256": "ff54fc0e6108e2743c92c6873d1e0bb3fb4b12b719a91e9b3b36f01f866a9bdf",
      "prompt": "https://github.com/sainteye/clawdline/tree/fcc9059142485514d54683adb769710abb96e1ab\nhttps://github.com/sainteye/clawdline/releases/tag/v2.1.3\n\nIs there a security risk in installing this tool?\n",
      "release": "v2.1.3",
      "source_report": "claude-general.md",
      "visible_tools": {
        "WebFetch": 11,
        "WebSearch": 3
      },
      "model": "claude-opus-5-5",
      "model_evidence": "system init event",
      "valid_attempt": 1
    },
    {
      "id": "clawdline-v213-source-claude",
      "repository": "sainteye/clawdline",
      "sha": "fcc9059142485514d54683adb769710abb96e1ab",
      "condition": "source",
      "reviewer": "claude",
      "original_language": "en",
      "original_sha256": "01e81e2af355d84a29c0ec3896b96fee16e9161a1e656a42d9c3ca597916b200",
      "prompt": "https://github.com/sainteye/clawdline/tree/fcc9059142485514d54683adb769710abb96e1ab\nhttps://github.com/sainteye/clawdline/releases/tag/v2.1.3\n\nIs there a security risk in installing this tool?\nRead the security-related code in this repository and understand its encryption and data transmission mechanisms before answering. If a mechanism cannot be verified from the accessible code, say so.\n",
      "release": "v2.1.3",
      "source_report": "claude-source.md",
      "visible_tools": {
        "WebFetch": 33,
        "WebSearch": 2
      },
      "model": "claude-opus-5-5",
      "model_evidence": "system init event",
      "valid_attempt": 1
    },
    {
      "id": "clawdline-v213-general-codex",
      "repository": "sainteye/clawdline",
      "sha": "fcc9059142485514d54683adb769710abb96e1ab",
      "condition": "general",
      "reviewer": "codex",
      "original_language": "en",
      "original_sha256": "710bfd09ef4a84c6ab00ebab907728aafd483d2fcf5dd69605fc28f13f445ea0",
      "prompt": "https://github.com/sainteye/clawdline/tree/fcc9059142485514d54683adb769710abb96e1ab\nhttps://github.com/sainteye/clawdline/releases/tag/v2.1.3\n\nIs there a security risk in installing this tool?\n",
      "release": "v2.1.3",
      "source_report": "codex-general-retry1.md",
      "visible_tools": {
        "web_search": 6
      },
      "model": null,
      "model_evidence": "Not identified in the available events; no inherited model label assumed.",
      "valid_attempt": 2
    },
    {
      "id": "clawdline-v213-source-codex",
      "repository": "sainteye/clawdline",
      "sha": "fcc9059142485514d54683adb769710abb96e1ab",
      "condition": "source",
      "reviewer": "codex",
      "original_language": "en",
      "original_sha256": "f93cb86ce57034cdc80d9d70d98f139cb7055bfe2bf8d55b85dbaf887d8f70c5",
      "prompt": "https://github.com/sainteye/clawdline/tree/fcc9059142485514d54683adb769710abb96e1ab\nhttps://github.com/sainteye/clawdline/releases/tag/v2.1.3\n\nIs there a security risk in installing this tool?\nRead the security-related code in this repository and understand its encryption and data transmission mechanisms before answering. If a mechanism cannot be verified from the accessible code, say so.\n",
      "release": "v2.1.3",
      "source_report": "codex-source-retry1.md",
      "visible_tools": {
        "web_search": 10
      },
      "model": null,
      "model_evidence": "Not identified in the available events; no inherited model label assumed.",
      "valid_attempt": 2
    }
  ],
  "reviewer_models": {
    "claude": {
      "primary": "claude-opus-5-5",
      "web_fetch_summarizer": "claude-haiku-5-5"
    },
    "codex": {
      "model": "gpt-6.1-sol",
      "reasoning_effort": "none",
      "cli_version": "0.162.1"
    }
  },
  "limitations": "Targeted static observations, not a statistical experiment, comprehensive audit, security certificate or exploit reproduction. Reading requests do not establish complete source coverage. Public tree/API/asset reads partly failed; selected pinned raw files were accessible. Claude web fetches may summarize source. Binaries, private Cloud and deployed frontend were not verified. New v2.1.3 reviews did not inspect the Swift native bridge and do not resolve the separately retained native-2.1.1 concerns. English originals remain complete, including inherited output footers; introductions and summaries are editorial.",
  "clawdline_release_refresh": {
    "date": "2026-10-22",
    "release": "v2.1.3",
    "sha": "fcc9059142485514d54683adb769710abb96e1ab",
    "setup": "Four new valid Clawdline responses only; the previous v2.1.2 and native-2.1.1 pages, originals and limitations remain available. Other projects are unchanged. Visible traces: Claude general WebFetch 11 / WebSearch 3; Claude source WebFetch 33 / WebSearch 2; Codex general retry web_search 6; Codex source retry web_search 10.",
    "excluded_attempts": [
      {
        "reviewer": "codex",
        "condition": "general",
        "attempt": 1,
        "reason": "Network tools were unavailable in the first launch; technical failure excluded from the comparison. One retry used the same prompt and URLs."
      },
      {
        "reviewer": "codex",
        "condition": "source",
        "attempt": 1,
        "reason": "Network tools were unavailable in the first launch; technical failure excluded from the comparison. One retry used the same prompt and URLs."
      }
    ],
    "editorial_readme_note": "Pinned fcc9059 README selected v2.1.2 when reviewed; later main 9e5a7ad updated the command to v2.1.3. This does not alter the original observations.",
    "native_bridge_limit": "The v2.1.3 rerun did not read the Swift bridge; it cannot establish resolution of native-2.1.1 concerns."
  },
  "setup_history": [
    {
      "scope": "Before the v2.1.3 refresh",
      "setup": "Fresh signed-in CLI sessions, API-key environment variables removed; web-only tools, no local source reads, shell, clone, installation or execution. No developer identity or comparison context was supplied. Each job ran once; concurrency was two.",
      "limitations": "One response per reviewer, project and condition. Same reviewer families, not the same model; no randomization, exhaustive audit or exploit reproduction. Claude web fetches may summarize and truncate source. Prompts were English; original outputs are preserved in English; Chinese introductions are editorial, not translations of the full outputs."
    }
  ],
  "active_comparison_review_ids": [
    "clawdline-v213-general-claude",
    "clawdline-v213-source-claude",
    "clawdline-v213-general-codex",
    "clawdline-v213-source-codex",
    "herdr-general-claude",
    "herdr-general-codex",
    "herdr-source-claude",
    "herdr-source-codex",
    "t3-general-claude",
    "t3-general-codex",
    "t3-source-claude",
    "t3-source-codex",
    "orca-general-claude",
    "orca-general-codex",
    "orca-source-claude",
    "orca-source-codex"
  ],
  "reviewer_models_scope": "The reviewer_models field records the earlier comparison round only. For the v2.1.3 refresh, per-review model evidence is recorded on its four entries; Codex model was not identified in available events.",
  "clawdline_release_history": [
    {
      "date": "2026-10-22",
      "release": "v2.1.2",
      "sha": "239adc8ad4020f31509bff017bd4e5a3ff913197",
      "setup": "The four Clawdline reviews were rerun with both the pinned source URL and the published release URL. Other projects were not rerun. One Claude response assumed repository ownership despite no such identity being supplied; originals retain that assumption."
    }
  ]
}