candidates
Enumerate and rank obligation sites as leads, returning paginated results with total and next_offset for complete coverage.
Instructions
Enumerate and rank every observable obligation site as leads. This is a pointer, not a safety check: leads are never suppressed because a size is constant, a guard seems nearby, or no input flow was witnessed. The result is bounded and paged with leads, total, and next_offset; call candidate_census for the full coverage roster. Calls against one session are serialized and the first cold bind can be expensive.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| cursor | No | ||
| detail | No | brief (one-line scan: id/rank/callee/at/size), compact (triage capsule, no inferences), full (whole capsule incl. inferences) | compact |
| domain | No | ||
| format | No | text (compact, default) | json (structured result page) | |
| offset | No | ||
| language | No | ||
| temporal | No | evaluate the temporal families (double-free/UAF/...). Default true. Set false for the guaranteed-bounded fast path: structural families only, no dataflow tier -- use it when a large graph makes the full bind run long. The result's `temporal_evaluated` flag reports whether they were evaluated. | |
| hard_stop | No | wall-clock budget (seconds) for the temporal families; on expiry the result degrades to the structural families with `temporal_evaluated:false` rather than hang. 0 = unbounded. | |
| constructor_id | No |