Issues

• comment-loc-cap reds rainix-sol/static on main: a spec-on-the-interface repo cannot meet a 2:1 comment:code cap in src

  audithigh
  rainlanguage/rain.factory#269 · Filter by author thedavidmeister opened on Oct 7, 2026

• LibICloneableFactoryV4: expose cloneRuntimeCode alongside cloneCreationCode

  rainlanguage/rain.factory#268 · Filter by author thedavidmeister opened on Oct 7, 2026

• [F83] [INFO] Precompile fuzz filter hand-copies a reserved-address range forge-std already owns, and already disagrees with it

  auditinfopass6
  rainlanguage/rain.factory#187 · Filter by author thedavidmeister opened on Sep 20, 2026
  

• [F82] [INFO] predictCloneAddress test header enumerates two oracles; the file uses three

  auditinfopass5
  rainlanguage/rain.factory#186 · Filter by author thedavidmeister opened on Sep 20, 2026
  

• [F81] [INFO] LibICloneableFactoryV4CloneAndInitializeTest's notice does not cover the prefunded-address test it holds

  auditinfopass5
  rainlanguage/rain.factory#185 · Filter by author thedavidmeister opened on Sep 20, 2026
  

• [F80] [INFO] TestCloneable's guard-ordering rationale names a re-entrancy that its own initialize cannot have

  auditinfopass5
  rainlanguage/rain.factory#184 · Filter by author thedavidmeister opened on Sep 20, 2026
  1

  

• [F79] [INFO] Preimage-shape tests assert a 96-byte length that cannot fail

  auditinfopass5
  rainlanguage/rain.factory#183 · Filter by author thedavidmeister opened on Sep 20, 2026
  

• [F78] [INFO] LibICloneableFactoryV4Test's "never read back from the library" claim is false for two of its own tests

  auditinfopass5
  rainlanguage/rain.factory#182 · Filter by author thedavidmeister opened on Sep 20, 2026
  

• [F77] [INFO] LibICloneableFactoryV4.t.sol's contract NatSpec has no @notice, so its whole description is swallowed into @title

  auditinfopass4
  rainlanguage/rain.factory#181 · Filter by author thedavidmeister opened on Sep 20, 2026
  

• [F76] [INFO] The suite asserts inequality with assertTrue(a != b) instead of forge-std's typed assertNotEq/assertGt, 18 times

  auditinfopass4
  rainlanguage/rain.factory#180 · Filter by author thedavidmeister opened on Sep 20, 2026
  

• [F75] [INFO] .coderabbitai.yaml declares its licence twice, and its REUSE.toml entry can never take effect

  auditinfopass4
  rainlanguage/rain.factory#179 · Filter by author thedavidmeister opened on Sep 20, 2026
  

• [F74] [INFO] A passing check is routed through the revert-only external wrapper while the two other passing checks call the library directly

  auditinfopass4
  rainlanguage/rain.factory#178 · Filter by author thedavidmeister opened on Sep 20, 2026
  

• [F73] [INFO] Topic-0 assertions wrap keccak256 in a no-op bytes32(uint256(...)) round trip, four times

  auditinfopass4
  rainlanguage/rain.factory#177 · Filter by author thedavidmeister opened on Sep 20, 2026
  

• [F72] [INFO] predictCloneAddress's own test file names one parameter two ways, and one of the names is a library function whose output it never uses

  auditinfopass4
  rainlanguage/rain.factory#176 · Filter by author thedavidmeister opened on Sep 20, 2026
  

• [F71] [INFO] README describes the current ICloneableV2 in terms that equally describe deprecated ICloneableV1

  auditinfopass3
  rainlanguage/rain.factory#175 · Filter by author thedavidmeister opened on Sep 20, 2026
  

• [F70] [INFO] README documents no way to build, test or install the package

  auditinfopass0
  rainlanguage/rain.factory#174 · Filter by author thedavidmeister opened on Sep 20, 2026
  

• [F69] [INFO] 80-column ruler is the repo's only line-width signal and contradicts the formatted code

  auditinfopass0
  rainlanguage/rain.factory#173 · Filter by author thedavidmeister opened on Sep 20, 2026
  

• [F68] [LOW] .soldeerignore excludes /audit but not the .audit/ run stamp the audit convention writes

  auditlowpass6
  rainlanguage/rain.factory#172 · Filter by author thedavidmeister opened on Sep 20, 2026
  

• [F67] [LOW] REUSE.toml is excluded from the package while the only shipped file it licenses, README.md, carries no SPDX header

  auditlowpass6
  rainlanguage/rain.factory#171 · Filter by author thedavidmeister opened on Sep 20, 2026
  

• [F66] [LOW] rainix-sol.yaml triggers on push only, so a fork pull request runs no Solidity gate at all in a repo with no branch protection and merge-driven autopublish

  auditlowpass6
  rainlanguage/rain.factory#170 · Filter by author thedavidmeister opened on Sep 20, 2026
  

• [F65] [LOW] The conforming ICloneableV2 fixtures exist as hand-copied, already-drifted duplicates in rain.factory.deploy, so the deploy half's equivalence suite gates the deployed CloneFactory against a non-conforming implementation

  auditlowpass6
  rainlanguage/rain.factory#169 · Filter by author thedavidmeister opened on Sep 20, 2026
  1

  

• [F64] [LOW] Namespaced bullet says the address "does not commit to WHAT was deployed", but implementation is in the CREATE2 preimage on both derivations

  auditlowpass5
  rainlanguage/rain.factory#168 · Filter by author thedavidmeister opened on Sep 20, 2026
  

• [F63] [LOW] slither.config.json excludes assembly-usage, which is not a detector id, and takes effect only because the exclusion list is substring-matched

  auditlowpass4pass6
  rainlanguage/rain.factory#167 · Filter by author thedavidmeister opened on Sep 20, 2026
  

• [F62] [LOW] Atomicity is pinned in three tests by assertEq(predicted.code.length, 0) after a vm.expectRevert, an assertion that cannot fail

  auditlowpass2pass5
  rainlanguage/rain.factory#166 · Filter by author thedavidmeister opened on Sep 20, 2026
  

• [F61] [LOW] Open-salt factory MUST NOT is qualified by "with caller-supplied initialization data", so an entry point that reaches the same effective-salt image with hardcoded data, or with no initialize at all, is conformant and still captures the pinned address

  auditlowpass1
  rainlanguage/rain.factory#165 · Filter by author thedavidmeister opened on Sep 20, 2026