Add an /impact/ section: what SQLancer found, who uses it, who writes…

.cache/impact/README.md

@@ -0,0 +1,23 @@
+# Collector caches
+
+Everything here is an optimisation. The pipeline produces the same records with
+this directory empty as with it warm, and a test asserts that.
+
+What is committed is decided by one question: could a fresh checkout get this
+back by itself? A fetched page could, so it is not committed. An answer that
+cost tokens, a transcript a person had to read out of a browser, and the record
+of how far each source has been scanned could not.
+
+| Path | Committed | What it holds |
+| --- | --- | --- |
+| `state.json` | yes | Last successful scan and last full reconciliation per source. This is what makes weekly runs incremental. |
+| `classifications/` | yes | Every classifier answer, including the negative and uncertain ones, keyed so that a change to the evidence, policy, taxonomy, prompt version or model forces a fresh answer and nothing else does. Only the answer and a hash of the evidence are stored, never the evidence itself. |
+| `talk-transcripts/` | yes | Windows of caption text around the moments a talk mentions SQLancer. Committed because a person had to obtain them by hand -- YouTube serves caption tracks only to its own player -- so no rerun can recover them. See that directory's README. |
+| `derived/` | yes | Deterministic extraction results, keyed by source id + content hash + extractor version. Empty so far: nothing has cost enough to keep. |
+| `http/`, `github/`, `papers/`, `artifacts/` | no | Fetched bodies with their ETag / Last-Modified / upstream `updated_at` validators. Large, re-fetchable, and restored from the GitHub Actions cache instead. |
+| `papers-pdf/`, `papers-text/` | no | Supplied PDFs and the text extracted from them. Deliberately never committed; only the two Markdown files explaining the directory are. |
+
+Committing the classification cache is what keeps the weekly token cost
+proportional to genuinely new evidence: a paper that turned out to only cite
+SQLancer, or an issue that turned out to be unrelated, is never asked about
+again.

.cache/impact/classifications/00/00ec0c4ab2395175ad39e0db6af27133acf0ece46c7310ab724e35aa023f3468.json

@@ -0,0 +1,22 @@
+{
+  "key": "github:sourcenetwork/defradb.rs#157|sha256:0159711df6fd52cd2a699b6c60acd1bc8047472e69973af3824d6a7ef28c924c|bug-attribution-v1|impact-policy-v1|taxonomy-v2|claude-opus-5",
+  "stored_at": "2026-09-13T03:09:23Z",
+  "value": {
+    "classified_at": "2026-09-13T03:09:23Z",
+    "classifier_version": "bug-attribution-v1",
+    "model": "claude-opus-5",
+    "policy_version": "impact-policy-v1",
+    "result": {
+      "answer": "no",
+      "excerpts": [],
+      "extra": {
+        "finder": null,
+        "technique": null
+      },
+      "reason": "Names SQLancer, but as work to be done rather than as the source of a defect: adoption, CI plumbing, a feature SQLancer needs, a release checklist or a roadmap. Decided by reading the issue in this session rather than by an API call; the excerpt was checked to be literally present in the text the classifier would have been given."
+    },
+    "source_hash": "sha256:0159711df6fd52cd2a699b6c60acd1bc8047472e69973af3824d6a7ef28c924c",
+    "source_id": "github:sourcenetwork/defradb.rs#157",
+    "taxonomy_version": "taxonomy-v2"
+  }
+}

.cache/impact/classifications/02/022bc8ec1b7eaddf62d93509b5b4f2beb7ea6fdbca92818282945fd4f8592e5c.json

@@ -0,0 +1,22 @@
+{
+  "key": "github:apache/datafusion#14535|sha256:9fceee6658a445ab1f52c3c607ce61416d06f32872dd4d16b38e5da1f3896984|bug-attribution-v1|impact-policy-v1|taxonomy-v2|claude-opus-5",
+  "stored_at": "2026-09-13T03:09:23Z",
+  "value": {
+    "classified_at": "2026-09-13T03:09:23Z",
+    "classifier_version": "bug-attribution-v1",
+    "model": "claude-opus-5",
+    "policy_version": "impact-policy-v1",
+    "result": {
+      "answer": "no",
+      "excerpts": [],
+      "extra": {
+        "finder": null,
+        "technique": null
+      },
+      "reason": "Names SQLancer, but as work to be done rather than as the source of a defect: adoption, CI plumbing, a feature SQLancer needs, a release checklist or a roadmap. Decided by reading the issue in this session rather than by an API call; the excerpt was checked to be literally present in the text the classifier would have been given."
+    },
+    "source_hash": "sha256:9fceee6658a445ab1f52c3c607ce61416d06f32872dd4d16b38e5da1f3896984",
+    "source_id": "github:apache/datafusion#14535",
+    "taxonomy_version": "taxonomy-v2"
+  }
+}

.cache/impact/classifications/02/0291964c195d72f8a24f4c54a20e0149e1eb1994ae783a10e6bd6b5f43dceb42.json

@@ -0,0 +1,22 @@
+{
+  "key": "github:cockroachdb/cockroach#171420|sha256:a3c4e88181f416bcfcc47103f659f614cea733da51110147d481b561a1de04f0|bug-attribution-v1|impact-policy-v1|taxonomy-v2|claude-opus-5",
+  "stored_at": "2026-09-13T03:09:23Z",
+  "value": {
+    "classified_at": "2026-09-13T03:09:23Z",
+    "classifier_version": "bug-attribution-v1",
+    "model": "claude-opus-5",
+    "policy_version": "impact-policy-v1",
+    "result": {
+      "answer": "no",
+      "excerpts": [],
+      "extra": {
+        "finder": null,
+        "technique": null
+      },
+      "reason": "\"cert\" here is a TLS certificate -- --ca-cert, cert-password, a cert file or a certificate warning -- not Cardinality Estimation Restriction Testing. Decided by reading the issue in this session rather than by an API call; the excerpt was checked to be literally present in the text the classifier would have been given."
+    },
+    "source_hash": "sha256:a3c4e88181f416bcfcc47103f659f614cea733da51110147d481b561a1de04f0",
+    "source_id": "github:cockroachdb/cockroach#171420",
+    "taxonomy_version": "taxonomy-v2"
+  }
+}

.cache/impact/classifications/02/02b1ecf20f9657dd9f6fba8da840822cdcd50a35e7cb8c4656d70629bd6cdcaa.json

@@ -0,0 +1,24 @@
+{
+  "key": "github:yugabyte/yugabyte-db#10236|sha256:d009f54b290299815ca53cce87b5723188d8f2c320cae0c72c694d475c419ecf|bug-attribution-v1|impact-policy-v1|taxonomy-v2|claude-opus-5",
+  "stored_at": "2026-09-13T03:09:23Z",
+  "value": {
+    "classified_at": "2026-09-13T03:09:23Z",
+    "classifier_version": "bug-attribution-v1",
+    "model": "claude-opus-5",
+    "policy_version": "impact-policy-v1",
+    "result": {
+      "answer": "yes",
+      "excerpts": [
+        "SQLancer: IOException occurs on UDPATE statement"
+      ],
+      "extra": {
+        "finder": "sqlancer",
+        "technique": null
+      },
+      "reason": "The report attributes the find to SQLancer. Decided by reading the issue in this session rather than by an API call; the excerpt was checked to be literally present in the text the classifier would have been given."
+    },
+    "source_hash": "sha256:d009f54b290299815ca53cce87b5723188d8f2c320cae0c72c694d475c419ecf",
+    "source_id": "github:yugabyte/yugabyte-db#10236",
+    "taxonomy_version": "taxonomy-v2"
+  }
+}

.cache/impact/classifications/03/03b1a6cffb6b046f97f2ef36d208258d7cc148dd2ef47da3f5d0c64a0482e69c.json

@@ -0,0 +1,22 @@
+{
+  "key": "github:databendlabs/databend#9448|sha256:7dcd4cd0e809656806ecd0d617ff11284dd2f7b0cc9704140858aafaf661f416|bug-attribution-v1|impact-policy-v1|taxonomy-v2|claude-opus-5",
+  "stored_at": "2026-09-13T03:09:23Z",
+  "value": {
+    "classified_at": "2026-09-13T03:09:23Z",
+    "classifier_version": "bug-attribution-v1",
+    "model": "claude-opus-5",
+    "policy_version": "impact-policy-v1",
+    "result": {
+      "answer": "no",
+      "excerpts": [],
+      "extra": {
+        "finder": null,
+        "technique": null
+      },
+      "reason": "Names SQLancer, but as work to be done rather than as the source of a defect: adoption, CI plumbing, a feature SQLancer needs, a release checklist or a roadmap. Decided by reading the issue in this session rather than by an API call; the excerpt was checked to be literally present in the text the classifier would have been given."
+    },
+    "source_hash": "sha256:7dcd4cd0e809656806ecd0d617ff11284dd2f7b0cc9704140858aafaf661f416",
+    "source_id": "github:databendlabs/databend#9448",
+    "taxonomy_version": "taxonomy-v2"
+  }
+}

.cache/impact/classifications/05/05a9632477e1270abb608e2426c322ffe2afc56f509a58453dffa2bb78c8ec72.json

@@ -0,0 +1,22 @@
+{
+  "key": "github:cockroachdb/cockroach#10517|sha256:9e8fa41de7c8985480545d2866fc42c35d16c68a9008682756189cd329c45ef2|bug-attribution-v1|impact-policy-v1|taxonomy-v2|claude-opus-5",
+  "stored_at": "2026-09-13T03:09:23Z",
+  "value": {
+    "classified_at": "2026-09-13T03:09:23Z",
+    "classifier_version": "bug-attribution-v1",
+    "model": "claude-opus-5",
+    "policy_version": "impact-policy-v1",
+    "result": {
+      "answer": "no",
+      "excerpts": [],
+      "extra": {
+        "finder": null,
+        "technique": null
+      },
+      "reason": "\"cert\" here is a TLS certificate -- --ca-cert, cert-password, a cert file or a certificate warning -- not Cardinality Estimation Restriction Testing. Decided by reading the issue in this session rather than by an API call; the excerpt was checked to be literally present in the text the classifier would have been given."
+    },
+    "source_hash": "sha256:9e8fa41de7c8985480545d2866fc42c35d16c68a9008682756189cd329c45ef2",
+    "source_id": "github:cockroachdb/cockroach#10517",
+    "taxonomy_version": "taxonomy-v2"
+  }
+}

.cache/impact/classifications/05/05e103a12eb6ae65021d96b2743d0a7a7d8367f6711135e566db2ca1957f7560.json

@@ -0,0 +1,22 @@
+{
+  "key": "github:cockroachdb/cockroach#84484|sha256:137209a7e0f3d138ec5dd07b57203cc45d4c97a57dd67f856d396f16cd8daacf|bug-attribution-v1|impact-policy-v1|taxonomy-v2|claude-opus-5",
+  "stored_at": "2026-09-13T03:09:23Z",
+  "value": {
+    "classified_at": "2026-09-13T03:09:23Z",
+    "classifier_version": "bug-attribution-v1",
+    "model": "claude-opus-5",
+    "policy_version": "impact-policy-v1",
+    "result": {
+      "answer": "no",
+      "excerpts": [],
+      "extra": {
+        "finder": null,
+        "technique": null
+      },
+      "reason": "The TLP roachtest failed for a reason that is not a finding: an expired licence, a cluster that would not start, a library that would not load, a timeout, or no stated cause at all. Decided by reading the issue in this session rather than by an API call; the excerpt was checked to be literally present in the text the classifier would have been given."
+    },
+    "source_hash": "sha256:137209a7e0f3d138ec5dd07b57203cc45d4c97a57dd67f856d396f16cd8daacf",
+    "source_id": "github:cockroachdb/cockroach#84484",
+    "taxonomy_version": "taxonomy-v2"
+  }
+}

.cache/impact/classifications/05/05f9a6064d39f03460452b8b9d3e0450c637f97ea01b4705276e5d80d80d0283.json

@@ -0,0 +1,22 @@
+{
+  "key": "github:cockroachdb/cockroach#144923|sha256:e736395c073f9f044c9d08687afc01f28a64ead7fa9871a03d3b34f4539e8bc3|bug-attribution-v1|impact-policy-v1|taxonomy-v2|claude-opus-5",
+  "stored_at": "2026-09-13T03:09:23Z",
+  "value": {
+    "classified_at": "2026-09-13T03:09:23Z",
+    "classifier_version": "bug-attribution-v1",
+    "model": "claude-opus-5",
+    "policy_version": "impact-policy-v1",
+    "result": {
+      "answer": "no",
+      "excerpts": [],
+      "extra": {
+        "finder": null,
+        "technique": null
+      },
+      "reason": "The TLP roachtest failed for a reason that is not a finding: an expired licence, a cluster that would not start, a library that would not load, a timeout, or no stated cause at all. Decided by reading the issue in this session rather than by an API call; the excerpt was checked to be literally present in the text the classifier would have been given."
+    },
+    "source_hash": "sha256:e736395c073f9f044c9d08687afc01f28a64ead7fa9871a03d3b34f4539e8bc3",
+    "source_id": "github:cockroachdb/cockroach#144923",
+    "taxonomy_version": "taxonomy-v2"
+  }
+}

.cache/impact/classifications/06/0620dd48ff05b205fb824aa7e1d2cfe94062778e8511f26a6cca1367ca4e7972.json

@@ -0,0 +1,22 @@
+{
+  "key": "github:cnosdb/cnosdb#860|sha256:c622080e7aff8357d05af2346e7ab5091ca08878fd86774eca534bed340f8ee6|bug-attribution-v1|impact-policy-v1|taxonomy-v2|claude-opus-5",
+  "stored_at": "2026-09-13T03:09:23Z",
+  "value": {
+    "classified_at": "2026-09-13T03:09:23Z",
+    "classifier_version": "bug-attribution-v1",
+    "model": "claude-opus-5",
+    "policy_version": "impact-policy-v1",
+    "result": {
+      "answer": "no",
+      "excerpts": [],
+      "extra": {
+        "finder": null,
+        "technique": null
+      },
+      "reason": "Names SQLancer, but as work to be done rather than as the source of a defect: adoption, CI plumbing, a feature SQLancer needs, a release checklist or a roadmap. Decided by reading the issue in this session rather than by an API call; the excerpt was checked to be literally present in the text the classifier would have been given."
+    },
+    "source_hash": "sha256:c622080e7aff8357d05af2346e7ab5091ca08878fd86774eca534bed340f8ee6",
+    "source_id": "github:cnosdb/cnosdb#860",
+    "taxonomy_version": "taxonomy-v2"
+  }
+}

.cache/impact/classifications/06/0685de5c34d1689373f48f48823606930c426ae9a9e9a95ab82bf7fb20f44d83.json

@@ -0,0 +1,24 @@
+{
+  "key": "github:cockroachdb/cockroach#142948|sha256:6307bf2d2a226beb2df570e307b9c1a79de312d557cb87d8f1fca5a932e8d47e|bug-attribution-v1|impact-policy-v1|taxonomy-v2|claude-opus-5",
+  "stored_at": "2026-09-13T03:09:23Z",
+  "value": {
+    "classified_at": "2026-09-13T03:09:23Z",
+    "classifier_version": "bug-attribution-v1",
+    "model": "claude-opus-5",
+    "policy_version": "impact-policy-v1",
+    "result": {
+      "answer": "yes",
+      "excerpts": [
+        "expected unpartitioned and partitioned results to be equal"
+      ],
+      "extra": {
+        "finder": "sqlancer",
+        "technique": "tlp"
+      },
+      "reason": "CockroachDB's own TLP roachtest reports a partitioned/unpartitioned mismatch: the oracle fired. Decided by reading the issue in this session rather than by an API call; the excerpt was checked to be literally present in the text the classifier would have been given."
+    },
+    "source_hash": "sha256:6307bf2d2a226beb2df570e307b9c1a79de312d557cb87d8f1fca5a932e8d47e",
+    "source_id": "github:cockroachdb/cockroach#142948",
+    "taxonomy_version": "taxonomy-v2"
+  }
+}

.cache/impact/classifications/07/071db0fbf07b947c8aa8b304afac95b3b6803698deb67cffb477d348397bb473.json

@@ -0,0 +1,22 @@
+{
+  "key": "github:cockroachdb/cockroach#8132|sha256:deff14e2a938598c3e5c486a783043a354a320423922223e16a55e0b4424a4cb|bug-attribution-v1|impact-policy-v1|taxonomy-v2|claude-opus-5",
+  "stored_at": "2026-09-13T03:09:23Z",
+  "value": {
+    "classified_at": "2026-09-13T03:09:23Z",
+    "classifier_version": "bug-attribution-v1",
+    "model": "claude-opus-5",
+    "policy_version": "impact-policy-v1",
+    "result": {
+      "answer": "no",
+      "excerpts": [],
+      "extra": {
+        "finder": null,
+        "technique": null
+      },
+      "reason": "\"cert\" here is a TLS certificate -- --ca-cert, cert-password, a cert file or a certificate warning -- not Cardinality Estimation Restriction Testing. Decided by reading the issue in this session rather than by an API call; the excerpt was checked to be literally present in the text the classifier would have been given."
+    },
+    "source_hash": "sha256:deff14e2a938598c3e5c486a783043a354a320423922223e16a55e0b4424a4cb",
+    "source_id": "github:cockroachdb/cockroach#8132",
+    "taxonomy_version": "taxonomy-v2"
+  }
+}

.cache/impact/classifications/07/074e5bd7ab805341f895bd5d7c555d5f0cf5cf69bc5b2c02fa475e4213c6e1cd.json

@@ -0,0 +1,22 @@
+{
+  "key": "github:cockroachdb/cockroach#166648|sha256:706f3c7fdde3c11a114060a3ad441f3d576cdeea6aa77802ac99a1cce636c026|bug-attribution-v1|impact-policy-v1|taxonomy-v2|claude-opus-5",
+  "stored_at": "2026-09-13T03:09:23Z",
+  "value": {
+    "classified_at": "2026-09-13T03:09:23Z",
+    "classifier_version": "bug-attribution-v1",
+    "model": "claude-opus-5",
+    "policy_version": "impact-policy-v1",
+    "result": {
+      "answer": "no",
+      "excerpts": [],
+      "extra": {
+        "finder": null,
+        "technique": null
+      },
+      "reason": "\"cert\" here is a TLS certificate -- --ca-cert, cert-password, a cert file or a certificate warning -- not Cardinality Estimation Restriction Testing. Decided by reading the issue in this session rather than by an API call; the excerpt was checked to be literally present in the text the classifier would have been given."
+    },
+    "source_hash": "sha256:706f3c7fdde3c11a114060a3ad441f3d576cdeea6aa77802ac99a1cce636c026",
+    "source_id": "github:cockroachdb/cockroach#166648",
+    "taxonomy_version": "taxonomy-v2"
+  }
+}

.cache/impact/classifications/08/084e424f6707ac75bd465a026d302e4fd22e06dd403e1afd1b68a3fde9bd9221.json

@@ -0,0 +1,22 @@
+{
+  "key": "github:cockroachdb/cockroach#1674|sha256:4dbe760255839765c52142e1a6a215fd5b6fc02ea0b0ebe7be823993313a4613|bug-attribution-v1|impact-policy-v1|taxonomy-v2|claude-opus-5",
+  "stored_at": "2026-09-13T03:09:23Z",
+  "value": {
+    "classified_at": "2026-09-13T03:09:23Z",
+    "classifier_version": "bug-attribution-v1",
+    "model": "claude-opus-5",
+    "policy_version": "impact-policy-v1",
+    "result": {
+      "answer": "no",
+      "excerpts": [],
+      "extra": {
+        "finder": null,
+        "technique": null
+      },
+      "reason": "\"cert\" here is a TLS certificate -- --ca-cert, cert-password, a cert file or a certificate warning -- not Cardinality Estimation Restriction Testing. Decided by reading the issue in this session rather than by an API call; the excerpt was checked to be literally present in the text the classifier would have been given."
+    },
+    "source_hash": "sha256:4dbe760255839765c52142e1a6a215fd5b6fc02ea0b0ebe7be823993313a4613",
+    "source_id": "github:cockroachdb/cockroach#1674",
+    "taxonomy_version": "taxonomy-v2"
+  }
+}

.cache/impact/classifications/0a/0adea20f4f706ceb22e4ce210c6448c380fb849554566a3a12072fedf99555dc.json

@@ -0,0 +1,22 @@
+{
+  "key": "github:cockroachdb/cockroach#8167|sha256:d3b53c6dccac57fa9e5a2bd066a0d05460c08bc77221cd1b61e8ed4cf2d68400|bug-attribution-v1|impact-policy-v1|taxonomy-v2|claude-opus-5",
+  "stored_at": "2026-09-13T03:09:23Z",
+  "value": {
+    "classified_at": "2026-09-13T03:09:23Z",
+    "classifier_version": "bug-attribution-v1",
+    "model": "claude-opus-5",
+    "policy_version": "impact-policy-v1",
+    "result": {
+      "answer": "no",
+      "excerpts": [],
+      "extra": {
+        "finder": null,
+        "technique": null
+      },
+      "reason": "\"cert\" here is a TLS certificate -- --ca-cert, cert-password, a cert file or a certificate warning -- not Cardinality Estimation Restriction Testing. Decided by reading the issue in this session rather than by an API call; the excerpt was checked to be literally present in the text the classifier would have been given."
+    },
+    "source_hash": "sha256:d3b53c6dccac57fa9e5a2bd066a0d05460c08bc77221cd1b61e8ed4cf2d68400",
+    "source_id": "github:cockroachdb/cockroach#8167",
+    "taxonomy_version": "taxonomy-v2"
+  }
+}

.cache/impact/classifications/0a/0ae74c01ced1a4ef65d237d0567a399acf166fbc3a6355c2bb47996c8a8ff015.json

@@ -0,0 +1,22 @@
+{
+  "key": "github:cockroachdb/cockroach#79610|sha256:82d763ed044bcd67096ce217d7f6672aa0d1b15ae806a2f667d7bde736be70d3|bug-attribution-v1|impact-policy-v1|taxonomy-v2|claude-opus-5",
+  "stored_at": "2026-09-13T03:09:23Z",
+  "value": {
+    "classified_at": "2026-09-13T03:09:23Z",
+    "classifier_version": "bug-attribution-v1",
+    "model": "claude-opus-5",
+    "policy_version": "impact-policy-v1",
+    "result": {
+      "answer": "no",
+      "excerpts": [],
+      "extra": {
+        "finder": null,
+        "technique": null
+      },
+      "reason": "Names SQLancer, but as work to be done rather than as the source of a defect: adoption, CI plumbing, a feature SQLancer needs, a release checklist or a roadmap. Decided by reading the issue in this session rather than by an API call; the excerpt was checked to be literally present in the text the classifier would have been given."
+    },
+    "source_hash": "sha256:82d763ed044bcd67096ce217d7f6672aa0d1b15ae806a2f667d7bde736be70d3",
+    "source_id": "github:cockroachdb/cockroach#79610",
+    "taxonomy_version": "taxonomy-v2"
+  }
+}

.cache/impact/classifications/0b/0b9a58e8ebf293ea894e2c86ace4a46053ed5ab89252753a52eb333469ee137d.json

@@ -0,0 +1,22 @@
+{
+  "key": "github:cockroachdb/cockroach#4917|sha256:c34abd5ad691c44639b6d5cc6461ef774cd3a6c6cdc3a65cb5d70f6affdada81|bug-attribution-v1|impact-policy-v1|taxonomy-v2|claude-opus-5",
+  "stored_at": "2026-09-13T03:09:23Z",
+  "value": {
+    "classified_at": "2026-09-13T03:09:23Z",
+    "classifier_version": "bug-attribution-v1",
+    "model": "claude-opus-5",
+    "policy_version": "impact-policy-v1",
+    "result": {
+      "answer": "no",
+      "excerpts": [],
+      "extra": {
+        "finder": null,
+        "technique": null
+      },
+      "reason": "\"cert\" here is a TLS certificate -- --ca-cert, cert-password, a cert file or a certificate warning -- not Cardinality Estimation Restriction Testing. Decided by reading the issue in this session rather than by an API call; the excerpt was checked to be literally present in the text the classifier would have been given."
+    },
+    "source_hash": "sha256:c34abd5ad691c44639b6d5cc6461ef774cd3a6c6cdc3a65cb5d70f6affdada81",
+    "source_id": "github:cockroachdb/cockroach#4917",
+    "taxonomy_version": "taxonomy-v2"
+  }
+}