[Code-delta-support]

A permanent display PR for the v1.9.6 build-file change alert — not for merging.

This diff changes the project's build surface on purpose: a Makefile, Dockerfile, docker-compose, GitLab CI file, autoconf m4 macro and debian packaging are added; a setup.py with an install-time cmdclass hook is added; the sample package.json gains a postinstall script (install hook); and a dependency manifest is deleted. All content is inert sample code.

The CodeDelta Action comment below shows how the alert reports it: install hooks first, per-file ADDED/MODIFIED status, dependency manifests as the quieter line.

[github-actions]

CodeDelta report

Churn: 329 logical statements (+321 / −8 / Δ0); REP_CHURN 1.00

⚠️ Build files changed: 12 build/CI/packaging/dependency file(s) in this diff — can alter the shipped artifact without touching application source — 2 install hook(s) (code runs on install)

• build-demo/setup.py ADDED ⚠ install hook

• churn-demo/new/package.json MODIFIED ⚠ install hook

• build-demo/third_party.cmake ADDED ⚠ fetches remote

• build-demo/Makefile ADDED

• build-demo/m4/ax_check_net.m4 ADDED

• build-demo/.gitlab-ci.yml ADDED

• build-demo/Dockerfile ADDED

• build-demo/debian/control ADDED

• build-demo/debian/rules ADDED

• build-demo/docker-compose.yml ADDED
  _{Dependency manifests changed (2): build-demo/go.sum (added), churn-demo/old/package.json (deleted) — a separate, quieter signal.}

• CRITICAL agent-scan-demo/analytics/julia/ops_helper.jl:7 — process launch near AI API call (line 7) — possible execution of AI-generated command

• CRITICAL agent-scan-demo/analytics/r/report_gen.R:5 — process launch near AI API call (line 5) — possible execution of AI-generated command

• CRITICAL agent-scan-demo/analytics/scala/src/main/scala/BatchOps.scala:7 — process launch near AI API call (line 7) — possible execution of AI-generated command

• CRITICAL agent-scan-demo/build-tools/AutoPatch.groovy:8 — process launch near AI API call (line 8) — possible execution of AI-generated command

• CRITICAL agent-scan-demo/edge/nginx/lua/dynamic_route.lua:5 — process launch near AI API call (line 5) — possible execution of AI-generated command

• …and 66 more CRITICAL/HIGH finding(s) in the agent report

Agent scan: 64 CRITICAL · 7 HIGH · 81 ELEVATED · 19 endpoint-level · 64 text-level · 3 binary
Governance: 14 file(s) send data to foreign-hosted models (14 non-allied); 2 file(s) call AI inside a loop (cost risk)
Agent infrastructure: 16 artifact(s) in the tree — 4 tier-3 (rogue residue / credentials): agent-scan-demo/agents/openclaw/gateway.auth.token, safety-demo/new/agents/openclaw/gateway.auth.token, agent-scan-demo/agents/openclaw, safety-demo/new/agents/openclaw
🔑 Committed credentials: 2 key-format match(es) in the tree — agent-scan-demo/agents/openclaw/deploy_key.pem:1, safety-demo/new/agents/openclaw/deploy_key.pem:1 (values redacted; rotate first, then remove)

_{AI signals are pointers for review, not verdicts. Full report attached to this run. CodeDelta 2.3.0.}