Agent Setup Audit Report

#1 · critical · Deploy-Gate Readiness

Unresolved merge-conflict markers

1 file(s) contain <<<<<<< / >>>>>>> markers: deploy-remote-dash/daily_brief_2026-05-05.html

Fix: Resolve conflicts; add a pre-deploy conflict-marker gate (blocks the ship).

#2 · critical · Deploy-Gate Readiness

Possible hardcoded secrets

7 file(s) match secret patterns: brain/research/SENTIMENT_IMPLEMENTATION_GUIDE.py (hardcoded credential literal); brain/research/SENTIMENT_INTEGRATION_CHECKLIST.md (hardcoded credential literal); brain/research/SENTIMENT_QUICK_START.md (hardcoded credential literal); code/buttondown_publisher.py (hardcoded credential literal); code/security_audit.py (hardcoded credential literal); code/telegram_push_alert.py (hardcoded credential literal); code/x_reader.py (hardcoded credential literal)

Fix: Move secrets to .env / a secret manager, rotate exposed keys, add a secret-scan deploy gate.

#3 · warn · Infra Coverage & Drift

Config references dead files (drift)

CLAUDE.md references 10+ paths that don't exist: backlog_audit.py, chat_handoff_to_loop.md, ep_action_items.json, ep_backlog.json, ep_had_to_ask_log.json…

Fix: Reconcile the constitution with the filesystem; add a drift check so this can't recur.

#4 · warn · Visual-QA (customer-facing)

Placeholder text on customer-facing pages

13 page(s): deploy-remote-dash/pm_macro_strategy_brief_20260316.html, deploy-remote-dash/ep_brief_email_safe.html, deploy-remote-dash/ep_backlog.html, deploy-remote-dash/ep_brief_latest.html, deploy-remote-dash/promptforge_setup_brief_20260309.html

Fix: Replace lorem/TODO/coming-soon before shipping; add visual-QA gate.

#5 · warn · Visual-QA (customer-facing)

Empty data tables render blank

2 page(s): deploy-remote-dash/churn_saver_report.html, deploy-remote-dash/ep_command_center.html

Fix: Ensure data populates or hide the table; add empty-table check.

#6 · warn · Launch Readiness

Silent-failure risk (bare except)

59 bare 'except:' clauses swallow errors.

Fix: Catch specific exceptions and log; silent failures hide broken automation.

#7 · warn · Cost & Token Hygiene

Hardcoded model IDs

3 file(s) hardcode a model name: code/model_migration_agent.py, code/deploy_gate.py, code/brainfile_audit.py

Fix: Centralize in a model registry so upgrades/cost-tuning are one edit, not N.

#8 · info · Visual-QA (customer-facing)

Possibly stale dates/copyright

28 page(s) show a year <2025.

Fix: Auto-render dynamic year; add a stale-date check.

#9 · info · Cost & Token Hygiene

Large context files inflate token cost

brain/signals_history.json (8804KB); brain/master_backlog.json (4563KB); brain/work_queue.json (3138KB); brain/positioning_drift_report.proposed.json (2977KB); brain/work_queue_decomposed.json (1668KB)

Fix: Split or summarize; every agent turn re-reads these = recurring token spend.

Want these fixes done for you — and to stay clean automatically?

Brainfile is the Claude operating system these gates come from. 7 layers, 70+ components.