# Scrum review — c4_replay — kimi (openrouter/moonshotai/kimi-k2-0905)

**Latency:** 14239ms · **Tokens:** 13288 in / 203 out · **Date:** 2026-05-02

---

SEVERITY: WARN
WHERE:    cmd/replay/main.go:87
WHAT:     Main exits 1 on validation failure AFTER printing full response, leaking potentially sensitive model outputs to stderr in automation.
WHY:      Fail-fast is good, but printing up to 1500+ chars of model response before exit invites secret/PII leakage into CI logs.

SEVERITY: WARN
WHERE:    internal/replay/model.go:67
WHAT:     httpModelCaller hard-codes 180s timeout with no caller override, risking indefinite hang on slow gateway.
WHY:      Long fixed timeout hides infrastructure stalls and prevents graceful cancellation from higher-level contexts.

SEVERITY: INFO
WHERE:    internal/replay/retrieval.go:73
WHAT:     Malformed JSONL lines are silently skipped—no metric or log.
WHY:      Silent drop masks corpus corruption and complicates debugging.

VERDICT: ship-with-fixes - address stderr leak & timeout configurability.
