Finds source-visible semantic runtime bugs without running tests or builds. Use for repository bug hunts from an agent, Codex automation, or Claude loop that should report actionable correctness, security, dataflow, state/lifecycle, API-contract, validation, cache/persistence, or error-path bugs, not style, lint, architecture, maintainability, or missing-test feedback.