architecture-canvas

This module is primarily a geometry/schema validator, but it executes the provided scene.js file using new Function, making it an arbitrary code execution primitive if the scene content or path is attacker-controlled. Aside from that evaluation sink, the rest of the code performs only local consistency checks and logs diagnostics, with potential log-content reflection. If scene.js is fully trusted, the remaining risk is substantially lower; if not, treat this as high risk for supply-chain/entry-point compromise.