{
  "repo": "auth-server",
  "full_name": "tidbcloud/auth-server",
  "status": "approved",
  "scan_started_at": "2026-03-28T23:35:00+08:00",
  "scan_completed_at": "2026-03-29T00:20:00+08:00",
  "review_completed_at": "2026-03-29T00:20:00+08:00",
  "expected_binaries": [
    {
      "name": "auth-server",
      "path": "cmd/auth-server/main.go",
      "status": "completed",
      "role": "primary_service"
    }
  ],
  "scanned_binaries": [
    {
      "name": "auth-server",
      "output_file": "cmd-auth-server"
    }
  ],
  "skipped_binaries": [],
  "files_generated": [
    "interfaces/cmd-auth-server.json",
    "service-mapping/cmd-auth-server.json"
  ],
  "scan_progress": "1/1",
  "current_binary": null,
  "review_status": "approved",
  "review_completed_at": "2026-03-29T00:20:00+08:00",
  "review_participants": [
    "opencode",
    "kimi",
    "codex"
  ],
  "review_cycles": 3,
  "review_consensus": [
    "opencode",
    "kimi",
    "codex"
  ],
  "review_verdict": "APPROVED",
  "codex_rescan_at": "2026-03-29T00:20:00+08:00",
  "codex_rescan_verdict": "approved",
  "codex_rescan_note": "Fresh codex rescan rebuilt cmd/auth-server around its real Cobra runtime modes instead of flattening the binary into one HTTP plus one gRPC surface. The new scan models PersistentPreRun config loading plus remote-config watching, separates http, grpc, and migrate command modes, captures both dedicated metrics listeners, and keeps inner-route auth, local-env bypasses, authorization-code sync-to-account, TMS/TLMS userinfo enrichment, and device-grant org membership checks as explicit conditions.",
  "statistics": {
    "total_binaries": 1,
    "total_services": 7,
    "total_methods": 35,
    "output_files": 2
  }
}