Verification · Finding validation · Scope and relevance filtering
Remediation scope
Check whether the fix stays inside the diff or reaches unchanged code.
How to build it
- Check whether the suggested fix edits only lines inside the diff.
- Flag fixes that need changes to unchanged functions or callers as out of scope.
- Offer a follow-up issue instead of asking the author to widen the change.
Signals in a repository
- Review comments that mark a suggested fix as touching code outside the diff.
- Follow-up issues titled with the file or function that a finding touches.
In practice
No scanned repository runs a tool for this check. The steps above are the only guidance.