Function deriveRunClassification

pkg/cli/logs_report.go:442–456

deriveRunClassification maps a run's AuditComparisonData to one of four human-readable classification labels: - "risky" – comparison detected a risk signal (e.g. posture change, new MCP failure). - "normal" – comparison found no risk signals (stable or minor changes). - "baseline" – n

(comparison *AuditComparisonData)

//     this run acts as its own baseline.
//   - "unclassified" – comparison data is absent or incomplete.
func deriveRunClassification(comparison *AuditComparisonData) string {
	if comparison == nil {
		return "unclassified"
	}
	if !comparison.BaselineFound {
		return "baseline"
	}
	if comparison.Classification == nil {
		return "unclassified"
	}
	if comparison.Classification.Label == "risky" {
		return "risky"
	}
	return "normal"
}

// renderLogsJSON outputs the logs data as JSON.
// When verbose is false, audit-heavy fields are stripped for compact agentic consumption.