scan
Discover entrypoints that reach sensitive effects without a recognized guard, then get ranked questions and an exhaustive census to plan the next security review.
Instructions
Scan the graph for guard-differential investigation capsules: entrypoints that can reach sensitive effects without a recognized dominating guard. Returns ranked questions, not verdicts, plus an exhaustive census showing scanned/skipped entrypoints, suppressed capsules, truncated closures, and the explicit analysis frontier. Results are cached per graph; use entrypoints to bound the initial scan and min_rank/limit for the returned page.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| format | No | text (compact, default) | json (structured result page) | |
| min_rank | No | ||
| entrypoints | No | scan only the first N entrypoints (0 = all) | |
| include_suppressions | No |