Module sg_local 

Structural lint scan/rewrite one-shot (§5AC). One-shot structural lint / rewrite for product-forbidden patterns (§5AC / GAP-A011).

Scans Rust sources under given roots for patterns that violate agent-first / one-shot product rules (remote telemetry strings, product secret env reads, naked unwrap() in non-test production modules). Default rewrite is dry-run; --apply writes in place.

Functions

sg_rewrite

Dry-run or apply safe rewrites (GAP-A011). Only applies trivial safe fixes.

sg_scan

Scan roots for forbidden structural patterns (one-shot).