depends: the two bindings, measured again on the tree facts and not taken

check: dependencies are read when the depends check asks, and where named

check: the modules a module depends on are read beside it

depends: storedness, merged depends and transitive triggers read from the tree

constrains: a field Odoo cannot trigger on is asked for by its inputs

depends: a name assigned records, measured and not taken

ondelete: a read through mapped(), measured and not taken

depends: a read straight off a call that keeps the records is a read

fieldtest: a file two checkers could not read is one file

depends: a read through a method's own output, measured and kept exempt

depends: Odoo refuses neither a self-dependency nor a path ending .id

depends: what a file says a method computes is its output; a lambda stays unread

depends: what a string names and what a subscript picks are reads

constrains: a dotted name is read, not matched

onchange: the same check made again on the server backs it

onchange: backed by a constraint on its field, refused only when taken back

onchange: a dead _sql_constraints backs nothing on 19

depends: a mapped() path is a read

sudo: a public page reading what it publishes is re-scoped

sudo: a domain on records the caller already holds is re-scoped

rule: _sql_constraints is ignored from Odoo 19

datetime: the rule sees where the value goes

sudo: re-scoping has to re-apply every rule everybody gets

depends-unread: an override that calls super() adds triggers for the chain

narrow: the last three named false-positive classes, and one weakness found on the way

xml: read the data files, and ask noupdate the question per record

recursion: ask whether the ORM already refuses the cycle, and whether it can form one

precision: read the named false positives, and the misses that named themselves

sudo: the rule the classification killed, and the marker it could not read

review: a pass over the tool itself, and the silence it was keeping

banner: solid NEXA in two hues, over an amber bar

triggers: the two conditional rules learn to ask the tree

rules: except-order ships advisory, and advisory grows a second ground

semantics: narrow the two worst-aimed rules, at no cost to recall

crosswalk: an outside opinion, and three rules with something behind them

checkers: two more move to AST, and the OCA findings are classified

ondelete: fire where the orphaning actually bites, and record the eval

empirical: check what a snippet reaches for, not what it binds

fieldtest: point the checkers at real code, and narrow three of them

corpus: correct two rules against Odoo 18's source, and settle the cross-hit

layers: fix false passes; add prefer-sql AST check

Add layered validation: nine layers, AST checking, adversarial probes