marius/Open_Ultra_SAST
1
0
Fork 0
mirror of https://github.com/norandom/OpenUltraSAST.git synced 2026-10-16 03:49:26 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
03d925fffa5d64104c0dfe1bd77ba696461c8bd3
Open_Ultra_SAST/benchmarks/measurements/2026-09-14-node-census-repair.json
T

794 lines
57 KiB
JSON
Raw Normal View History

fix(contributor-scan): retain declared Gruntfile and report census gaps honestly
2026-09-14 08:07:06 +02:00
{
"schema_version": 1,
"purpose": "Read-verified frontend retention and honest partition census repair; not latency or capability qualification.",
"task": "contributor-scan 2.19",
"verdict": "PASS for targeted repair; rollout NO-GO",
"source_commit": "c5cb68a7084e4ae7dcc60e6a98768720a81841e8",
"before_image": "sha256:4cca6d20c5c9bfdbfa60c4e8fc991e096bc9b2f35096bb92cc92440e99f946d4",
"retention_probe_image": "sha256:4f941a2f38ebb9ea8dd17c7fb5e78df336712f5e2307972d4ab3ef238b801315",
"final_smoke_image": "sha256:898789cb6cc88507a9fa67276fd442ee4ef9e9f1135b333bafda511fb0532b25",
"inputs": [
{
"path": "Gruntfile.js",
"bytes": 6359,
"sha256": "2e9fd032cbc6a5594d90c76448ce37b98be0f0d3ef7a66e6b4aabbc674293af6"
},
{
"path": "app/assets/js/chart/chart-data-morris.js",
"bytes": 3718,
"sha256": "a5511ae7a5614f9f2dd89625bce94d6b794a675dae4987259d087a8d2e8e2693"
},
{
"path": "app/assets/js/tour/redirects-steps.js",
"bytes": 648,
"sha256": "16babf9b88e186cb4e2a7ab896a78494f6d4a88737c903eb1e23e35579ac651b"
},
{
"path": "app/data/allocations-dao.js",
"bytes": 3928,
"sha256": "c6aebc971ce7f9c8b2a8f0864a500497de25a3ea0318ef94ecd57cadf6e789ea"
},
{
"path": "app/data/benefits-dao.js",
"bytes": 1240,
"sha256": "0ac30b097e016eeffb10e1c72d9c657153d3ce67e7b3f4756b2cb127d94181d7"
},
{
"path": "app/data/contributions-dao.js",
"bytes": 2791,
"sha256": "363065e8b3c32f0997ce2dcb17341eb3e40b7f43b00b72c576dfebf73f551c85"
},
{
"path": "app/data/memos-dao.js",
"bytes": 1107,
"sha256": "6582195bd913c2d60d63e9b519f9508a3319e07e158fd0c6f31dcbc50a80e8cf"
},
{
"path": "app/data/profile-dao.js",
"bytes": 3506,
"sha256": "80429a5df579867401a59b1cbd9c1d74f88d5548780fbd909e9504876c1968cc"
},
{
"path": "app/data/research-dao.js",
"bytes": 750,
"sha256": "f1cf267e56080fc94943ad7d83802b4e9db9420687fac49f84dbc0e45dfa88ac"
},
{
"path": "app/data/user-dao.js",
"bytes": 4078,
"sha256": "577fb140933a50e010a4bbcb74e975f678d7f3a989467e4d113926f35c042e64"
},
{
"path": "app/routes/allocations.js",
"bytes": 915,
"sha256": "b5b7da1a6b595799cf6cca402756dd9a3f6e2a8b5d712c1989d23b7f01f349a6"
},
{
"path": "app/routes/benefits.js",
"bytes": 1340,
"sha256": "bc5516b35ba21884915b88b3f810441e616f068d8a0cf756b143185d5aeda2d2"
},
{
"path": "app/routes/contributions.js",
"bytes": 2485,
"sha256": "196bdeaa22da4cfe8a851b1b932710b2fcedd21f14ed75d70b739ba759a01003"
},
{
"path": "app/routes/error.js",
"bytes": 281,
"sha256": "452dc61f9f06a31ea4305edb2e573fc940428615841533b59320792fcfb6fb3f"
},
{
"path": "app/routes/index.js",
"bytes": 3149,
"sha256": "3ab970b2888bc1501515db24a83cc7851ac9c09d00948c652300401515185eb5"
},
{
"path": "app/routes/memos.js",
"bytes": 824,
"sha256": "c3543f308f24083436e25e3a72210ad31e611db5c93268d8dd0e340095e132c9"
},
{
"path": "app/routes/profile.js",
"bytes": 3633,
"sha256": "18575bf3d3710906e57e09e6036e40fd3986bdcca436ed0e2a2875b41f0f2aca"
},
{
"path": "app/routes/research.js",
"bytes": 1071,
"sha256": "e399f3c70436fa160f00835626bf50f88980268fcd143436af97c9d2297c1d92"
},
{
"path": "app/routes/session.js",
"bytes": 10199,
"sha256": "e53e38b6eea76b026efaacde07f694e7a2eca005de4083fb74f9393d432a5b25"
},
{
"path": "app/routes/tutorial.js",
"bytes": 637,
"sha256": "502e0b959b37cbc844d15eadd7a78a40b5281155fcf8d532f0e4abdd2fee8eb9"
},
{
"path": "artifacts/db-reset.js",
"bytes": 4183,
"sha256": "df5d947ef23786683ab0d5f3c5ed5ef3f25ab93ce7610448c6db79b446168aa9"
},
{
"path": "config/config.js",
"bytes": 487,
"sha256": "b84b1bf634159caffdef50fe826077e60dbde1e381ceb148ff3b869e789b6962"
},
{
"path": "config/env/all.js",
"bytes": 365,
"sha256": "31a71288f0d830799da9c39e1b1ad10b0e989282bcf9a31bb48f8f618f37f6ad"
},
{
"path": "config/env/development.js",
"bytes": 636,
"sha256": "1829bc509dcc6a6eb58b0eee49901df530b9cceafa2ed37e855beacec4971f08"
},
{
"path": "config/env/production.js",
"bytes": 21,
"sha256": "8222b8169ee86f25cdccd84d340340060ae3f0cff55e2ea9d344d7c332733b71"
},
{
"path": "config/env/test.js",
"bytes": 318,
"sha256": "b48cd5c17fc9639c1c4198fced69b438c2b0c7fe70e80f0113bcd0d86cd583a5"
},
{
"path": "server.js",
"bytes": 4860,
"sha256": "48ec5e8f9668b230caf6af27f4a4ffbdcd8b702b376a6bbcc951217917c6ea2e"
},
{
"path": "test/e2e/integration/allocations_spec.js",
"bytes": 1062,
"sha256": "d345f97bc2c3c9e559d98f3e108ab568303c7509dbe707c4cc49f811d5f94db7"
},
{
"path": "test/e2e/integration/benefits_spec.js",
"bytes": 1228,
"sha256": "e4eb2765b08769e86b140dceee3091a5466da13933400272076b6de693b5cb71"
},
{
"path": "test/e2e/integration/contributions_spec.js",
"bytes": 1160,
"sha256": "8504f4cbbe578b91f112b7effffb0e43823af9648c5b406ded5a0d65fb4bbde3"
},
{
"path": "test/e2e/integration/dashboard_spec.js",
"bytes": 933,
"sha256": "96ef5e6d8b75787ac9a44fcd5f918cd3493680e74c70c45b381fe4416fa7f4f8"
},
{
"path": "test/e2e/integration/general_spec.js",
"bytes": 2044,
"sha256": "5364de581df32c99964f63baa8486fcd32b922c9f327192f3a1e81ca6cd0ceff"
},
{
"path": "test/e2e/integration/learn_spec.js",
"bytes": 471,
"sha256": "05e6bf11c5e773cd22861dbe18bced293024a7400c3a89b2c0e111bb88d8eaa1"
},
{
"path": "test/e2e/integration/login_spec.js",
"bytes": 2377,
"sha256": "e1433dfab270ac3f7b32f4ee904d781c2bb2581804177a0cafc488f6c79efb25"
},
{
"path": "test/e2e/integration/logout_spec.js",
"bytes": 737,
"sha256": "31ebf201e7d899baf8acd1d50c3fc4e42a5636c263982e5e517a1eaf3e35518f"
},
{
"path": "test/e2e/integration/memos_spec.js",
"bytes": 991,
"sha256": "625a08e3c9f80cf46f3fe81c2acde3dc76d955bde10aa7c68498b6830b7a86b4"
},
{
"path": "test/e2e/integration/profile_spec.js",
"bytes": 1509,
"sha256": "e22ce888656d18e020ca2775396e000cc899bdac255a1503f9af2c4ef18ffef0"
},
{
"path": "test/e2e/integration/research_spec.js",
"bytes": 1108,
"sha256": "4e81ed0c2cf42da656217c1e38a35f9257d0a09467ffbe25d9d19930df05ed3a"
},
{
"path": "test/e2e/integration/signup_spec.js",
"bytes": 1734,
"sha256": "27c56206888e1d664f852090ed943dc746638724743f7d5fb12d35e39136d22f"
},
{
"path": "test/e2e/integration/tutorial_spec.js",
"bytes": 1819,
"sha256": "2664d921df2c716695df8c216e93b76a9b09376100ee8bc5c3f4354f0ebdb8a6"
},
{
"path": "test/e2e/plugins/index.js",
"bytes": 788,
"sha256": "1fd870a6602782c27f87cd1aaaae24da269b20408612f718125b4471242f6e83"
},
{
"path": "test/e2e/support/commands.js",
"bytes": 839,
"sha256": "967bdb0f97ec8277d952de4273c1bf2fcc000b1eb08de533a80e34157f65e499"
},
{
"path": "test/e2e/support/index.js",
"bytes": 27,
"sha256": "a74243373740a95e3e3691087776e652ba954fcfd96130c4c374279a7310683d"
},
{
"path": "test/security/profile-test.js",
"bytes": 13055,
"sha256": "17b6d02097d2fdfaebcdae31e70620fe691b5cabbcd99829d7c8d72ac3d4239a"
}
],
"before": {
"build_seconds": 21.708134463988245,
"census_seconds": 14.989859963068739,
"raw_census": {
"files": "43",
"methods": "564",
"calls": "3750",
"file_names": [
"app/assets/js/chart/chart-data-morris.js",
"app/assets/js/tour/redirects-steps.js",
"app/data/allocations-dao.js",
"app/data/benefits-dao.js",
"app/data/contributions-dao.js",
"app/data/memos-dao.js",
"app/data/profile-dao.js",
"app/data/research-dao.js",
"app/data/user-dao.js",
"app/routes/allocations.js",
"app/routes/benefits.js",
"app/routes/contributions.js",
"app/routes/error.js",
"app/routes/index.js",
"app/routes/memos.js",
"app/routes/profile.js",
"app/routes/research.js",
"app/routes/session.js",
"app/routes/tutorial.js",
"artifacts/db-reset.js",
"config/config.js",
"config/env/all.js",
"config/env/development.js",
"config/env/production.js",
"config/env/test.js",
"server.js",
"test/e2e/integration/allocations_spec.js",
"test/e2e/integration/benefits_spec.js",
"test/e2e/integration/contributions_spec.js",
"test/e2e/integration/dashboard_spec.js",
"test/e2e/integration/general_spec.js",
"test/e2e/integration/learn_spec.js",
"test/e2e/integration/login_spec.js",
"test/e2e/integration/logout_spec.js",
"test/e2e/integration/memos_spec.js",
"test/e2e/integration/profile_spec.js",
"test/e2e/integration/research_spec.js",
"test/e2e/integration/signup_spec.js",
"test/e2e/integration/tutorial_spec.js",
"test/e2e/plugins/index.js",
"test/e2e/support/commands.js",
"test/e2e/support/index.js",
"test/security/profile-test.js"
],
"overlays": "base,controlflow,typerel,callgraph,dataflowOss",
"maxHeapMB": "2048"
},
"missing": [
"Gruntfile.js"
],
"extra": [],
"input_paths": 44,
"input_bytes": 95411,
"unparsed": []
},
"after_retention": {
"build_seconds": 23.333617498981766,
"census_seconds": 16.393462762003765,
"raw_census": {
"files": "44",
"methods": "579",
"calls": "4134",
"file_names": [
"Gruntfile.js",
"app/assets/js/chart/chart-data-morris.js",
"app/assets/js/tour/redirects-steps.js",
"app/data/allocations-dao.js",
"app/data/benefits-dao.js",
"app/data/contributions-dao.js",
"app/data/memos-dao.js",
"app/data/profile-dao.js",
"app/data/research-dao.js",
"app/data/user-dao.js",
"app/routes/allocations.js",
"app/routes/benefits.js",
"app/routes/contributions.js",
"app/routes/error.js",
"app/routes/index.js",
"app/routes/memos.js",
"app/routes/profile.js",
"app/routes/research.js",
"app/routes/session.js",
"app/routes/tutorial.js",
"artifacts/db-reset.js",
"config/config.js",
"config/env/all.js",
"config/env/development.js",
"config/env/production.js",
"config/env/test.js",
"server.js",
"test/e2e/integration/allocations_spec.js",
"test/e2e/integration/benefits_spec.js",
"test/e2e/integration/contributions_spec.js",
"test/e2e/integration/dashboard_spec.js",
"test/e2e/integration/general_spec.js",
"test/e2e/integration/learn_spec.js",
"test/e2e/integration/login_spec.js",
"test/e2e/integration/logout_spec.js",
"test/e2e/integration/memos_spec.js",
"test/e2e/integration/profile_spec.js",
"test/e2e/integration/research_spec.js",
"test/e2e/integration/signup_spec.js",
"test/e2e/integration/tutorial_spec.js",
"test/e2e/plugins/index.js",
"test/e2e/support/commands.js",
"test/e2e/support/index.js",
"test/security/profile-test.js"
],
"overlays": "base,controlflow,typerel,callgraph,dataflowOss",
"maxHeapMB": "2048"
},
"missing": [],
"extra": [],
"input_paths": 44,
"input_bytes": 95411,
"unparsed": []
},
"final_partition_smoke": {
"purpose": "Real mixed PHP/JavaScript graph census and one global ranker budget; no admission or latency claim",
"shared_budget_seconds": 900,
"include_tests": true,
"inputs": {
"Gruntfile.js": {
"bytes": 46,
"sha256": "a144af904affce5e2ddd5befabb58caf3b5fdfbb5ac580210cf408916ebaa809"
},
"src/api.php": {
"bytes": 49,
"sha256": "47ee82519e90f5ce2c845035f168bc4eaa4b0cc6e46cfc68626b8144e20b8f72"
},
"server/api.js": {
"bytes": 51,
"sha256": "a9f1b897b9361d0d30250f82aebec987cfd99e66308c9ea889d5b6211e3cad5e"
},
"browser/client.js": {
"bytes": 41,
"sha256": "42ef299a3c9a53f1ca77f9e4b027c8d6e854f69b7df765bdb833079198513fc4"
},
"tests/probe.php": {
"bytes": 48,
"sha256": "93c25992f2b709d4f222d88573a004dfb4e65239ce9a3afc2301f629b148c03d"
},
"tests/probe.js": {
"bytes": 41,
"sha256": "182f7cb37514b7fc6afbba045a9d1b3ca5dc297c35bb98b9f34c18cfd02864f5"
},
"vendor/library.php": {
"bytes": 55,
"sha256": "dd2aa2514d7c2dffdf4cfd238d7b795c2cd7bb6be086054b0b6d2278bd2c9599"
},
"node_modules/library.js": {
"bytes": 46,
"sha256": "5e42f2831e2e32d8c19df33ba98fbda879495b74bd6d7e0b6ff45a077674f398"
},
"unsupported.go": {
"bytes": 36,
"sha256": "ecf7a397251f1fea2e5992bdc3b0581274c20eb83f0ac403f6b7babe7d7b6b5b"
},
"checks/probe.test.js": {
"bytes": 41,
"sha256": "182f7cb37514b7fc6afbba045a9d1b3ca5dc297c35bb98b9f34c18cfd02864f5"
},
"checks/probe.spec.js": {
"bytes": 41,
"sha256": "a2677f51273a325b802a4a628ceb54f0bcea533a672c8997c0439d6ea206de37"
},
"checks/probe.mock.js": {
"bytes": 41,
"sha256": "bc14cd012a0d2c34a3605ce21a009b7fd335bdf248f81aec3462b506929eabd5"
},
"checks/probe.e2e.js": {
"bytes": 40,
"sha256": "14884e5a7d6c909f30addd8385bb82f6ea3751bb126192052dabe0eedfb42400"
}
},
"graph_witnesses": [
{
"frontend": "javascript",
"input_root": "/tmp/ousast-input-w1rlfqae",
"graph_witness": {
"files": [
"Gruntfile.js",
"browser/client.js",
"checks/probe.e2e.js",
"checks/probe.mock.js",
"checks/probe.spec.js",
"checks/probe.test.js",
"server/api.js",
"tests/probe.js"
],
"methods": [
"build_config_marker",
":program",
"browser_marker",
":program",
"js_e2e_marker",
":program",
"js_mock_marker",
":program",
"js_spec_marker",
":program",
"js_test_marker",
":program",
"js_handler",
":program",
"js_test_marker",
":program",
"<operator>.assignment",
"eval",
"<operator>.fieldAccess"
]
}
},
{
"frontend": "php",
"input_root": "/tmp/ousast-input-18arqd_p",
"graph_witness": {
"files": [
"src/api.php",
"tests/probe.php",
"<unknown>"
],
"methods": [
"<global>",
"php_handler",
"<global>",
"php_test_marker",
"eval"
]
}
}
],
"result": {
"findings": [
{
"site": "src/api.php:2:php_handler",
"family": "injection",
"rung": "model_entailed",
"witness": "$req -> eval($req) in src/api.php (line 2, 2 steps)",
"contradiction": "",
"reached_from": 1
}
],
"by_rung": {
"suspicion": 0,
"model_corroborated": 0,
"model_entailed": 1,
"execution_confirmed": 0
},
"regions_scanned": 1,
"regions_unjudged": 3,
"regions_unasked": 0,
"model_calls": 0,
"cost_usd": 0.0,
"seconds": 113.28,
"build_seconds": 76.28,
"query_seconds": 19.47,
"query_seconds_by_kind": {
"evidence": 17.47,
"taint": 19.47
},
"degradations": [
{
"stage": "model",
"reason": "cross_partition_semantics_unresolved"
},
{
"stage": "model",
"reason": "frontend_unsupported"
},
{
"stage": "model",
"reason": "vendor_semantics_unresolved"
},
{
"stage": "model",
"reason": "regions_truncated",
"examined": 1,
"total": 4
}
],
"tiers": [
[
"src/api.php",
"php_handler",
"injection",
4
]
],
"tier_counts": {
"4": 1
},
"requests_pruned": 0,
"partitions": [
{
"language": "go",
"frontend": null,
"paths": [
"unsupported.go"
],
"source_bytes": 0,
"status": "unsupported",
"boundaries": [
"frontend_unsupported"
],
"runtime": "unspecified",
"excluded_paths": [
"node_modules/",
"vendor/"
],
"unshipped_paths": []
},
{
"language": "javascript",
"frontend": "javascript",
"paths": [
"Gruntfile.js",
"browser/client.js",
"checks/probe.e2e.js",
"checks/probe.mock.js",
"checks/probe.spec.js",
"checks/probe.test.js",
"server/api.js",
"tests/probe.js"
],
"source_bytes": 342,
"status": "built",
"boundaries": [
"runtime_unspecified"
],
"runtime": "unspecified",
"excluded_paths": [
"node_modules/",
"vendor/"
],
"unshipped_paths": [
"checks/probe.e2e.js",
"checks/probe.mock.js",
"checks/probe.spec.js",
"checks/probe.test.js",
"tests/probe.js"
]
},
{
"language": "php",
"frontend": "php",
"paths": [
"src/api.php",
"tests/probe.php"
],
"source_bytes": 97,
"status": "built",
"boundaries": [],
"runtime": "unspecified",
"excluded_paths": [
"node_modules/",
"vendor/"
],
"unshipped_paths": [
"tests/probe.php"
]
}
],
"change_context": null,
"scope": {
"ranker_version": "existing-static-evidence-v1",
"ranking_mode": "static",
"population_complete": true,
"selected": [
{
"identity": {
"unit": "partition-smoke",
"language": "php",
"path": "src/api.php",
"function": "php_handler",
"family": "injection"
},
"priority": 0.0,
"evidence": [
"static_rank=10.0",
"normalized_evidence={\"access_declared_public\":true,\"bound_names\":[\"mysqli_prepare\",\"mysqli_stmt_bind_param\",\"pg_execute\",\"pg_prepare\"],\"carried\":false,\"carried_weak\":false,\"entry\":true,\"family_in_repo\":true,\"shipped\":true,\"sinks\":[{\"arg0_literal\":false,\"arity\":1,\"cleansed_on_call\":false,\"code\":\"eval($req)\",\"line\":2,\"method\":\"php_handler\"}],\"source_local\":false,\"source_near\":false}",
"tier=4",
"score=2.5"
],
"tier": 4,
"score": 2.5
}
],
"deferred": [
{
"identity": {
"unit": "partition-smoke",
"language": "javascript",
"path": "server/api.js",
"function": "js_handler",
"family": "injection"
},
"reason": "region_budget",
"evidence": [
"static_rank=9.0",
"evidence_unknown"
]
},
{
"identity": {
"unit": "partition-smoke",
"language": "php",
"path": "tests/probe.php",
"function": "php_test_marker",
"family": "injection"
},
"reason": "region_budget",
"evidence": [
"static_rank=2.0",
"evidence_unknown"
]
},
{
"identity": {
"unit": "partition-smoke",
"language": "javascript",
"path": "tests/probe.js",
"function": "js_test_marker",
"family": "injection"
},
"reason": "region_budget",
"evidence": [
"static_rank=1.0",
"evidence_unknown"
]
}
],
"unresolved_boundaries": [
"evidence_unknown:022bab405f3a4daa5ee1cbca6b54c24d052b3060f915b850bc1b592d2233999c",
"evidence_unknown:d867a0ae5d785b179a30fcef9efcdb8304281d53694a51c2da4180ef5069a53d",
"evidence_unknown:66aa438d134c37f7107503949179ce763fecaa08f0a1d00646ee8a5f446d88f7",
"cross_partition_semantics_unresolved",
"frontend_unsupported",
"vendor_semantics_unresolved"
]
},
"question_outcomes": [
{
"identity": {
"unit": "partition-smoke",
"language": "php",
"path": "src/api.php",
"function": "php_handler",
"family": "injection"
},
"status": "unresolved",
"reason": "graph_incomplete",
"raw_rows_json": "[{\"bound\":\"\",\"bounded\":false,\"inLabeledScope\":true,\"length\":2,\"paths\":1,\"sanitized\":false,\"sink\":\"eval($req)\",\"sinkArg0Literal\":false,\"sinkArity\":1,\"sinkFile\":\"src/api.php\",\"sinkLine\":\"2\",\"sinkMethod\":\"php_handler\",\"source\":\"$req\",\"sourceKind\":\"parameter\"}]"
}
],
"family_coverage": [
{
"unit": "partition-smoke",
"language": "javascript",
"family": "injection",
"selected": 0,
"completed": 0,
"unanswered": 0,
"deferred": 2,
"unsupported": 0
},
{
"unit": "partition-smoke",
"language": "php",
"family": "injection",
"selected": 1,
"completed": 0,
"unanswered": 1,
"deferred": 1,
"unsupported": 0
}
]
}
},
"final_identity": {
"provenance": {
"repository": "/tmp",
"engine_runtime": "7213365694f836758cb5fe2b05504cbbb735b8c2f0dea5d5dd19546a1f5fd43d",
"engine": "joern-4.0.625",
"facts": "32edb6e1a78f1afb08ac4248cd436be16663e0d90dc1b3aaf948f2ce49a5a8f0",
"graph_layout": "403dda8d804c6109800ab95677f1c9a7c6158b9c83e58a65e2e6baa5132eefa8",
"queries": "7bf090e053331f03d04c9290c8a593d00efd4d390f4b77b8382c2befc47996cc",
"policy": "6fc8e3cf0d3a4f45dd882e37a753e34bc0cd187295cfbd3cbb6fc36ecf9cea20",
"core": "78716c62112f9aafb120f6c0547208f60216a2ef46f689cd4e81f5d63702db82",
"semantics": "2edd13e1582b9a1d5d611b01f9862fafcb8220dcc07838fe42f56e53be00c7f1",
"ranking_mode": "evidence",
"model": "disabled",
"capabilities": "9f0d85961ed49526a3131e71ec3f7e01aeca752da74ba7d74650168853781c9c",
"cache": "cold_no_reuse"
},
"eligibility_status": "stale",
"capabilities": 0,
"builder_identity_verified": true,
"adaptation": {
"revision": "ousast-frontend-retention-v1",
"builder_sha256": "5a27bac97b4ecd2871a8e1c847dbf2e4b6c506dfa0303ad56c12b74732bd05c9",
"policy": "OUSAST_INCLUDE_TESTS=1; OUSAST_INCLUDE_BUILD_CONFIGS=1 retains Gruntfile.js",
"sources": {
"astgen.tar.gz": [
"https://codeload.github.com/joernio/astgen-monorepo/tar.gz/refs/tags/javascript-astgen/v3.50.1",
"8d9728dca8eab694a0f07bcd7a1c9a88368cb7bd354fc19c2ee8ca8611ff869a"
],
"AstGenRunner.scala": [
"https://raw.githubusercontent.com/joernio/joern/v4.0.625/joern-cli/frontends/jssrc2cpg/src/main/scala/io/joern/jssrc2cpg/utils/AstGenRunner.scala",
"9963f949360d7e17baed1bd8875b717b2855745cf7260eef8a87d17533a54268"
],
"bun.zip": [
"https://github.com/oven-sh/bun/releases/download/bun-v1.4.2/bun-linux-x64.zip",
"36368faef7527875d5ffa52e53cd48021741f2a83eb6208a8dd64068d422a913"
]
},
"original_jar_sha256": "49fe488a79cc52b4e1d2e056143ec414f59e0007ed25f054c5fa7ae4aa34dff3",
"adapted_jar_sha256": "8de05769501aaebf0dd6b631b10085e9b09193f6f15a766f8c08e2d80df39cfb",
"astgen_sha256": "1a5dc5c4bb89bd6bb3da75e15ccb6ab69c0d821b206edfdafe041e1740c24bc7",
"compiled_entries": [
"io/joern/jssrc2cpg/utils/AstGenRunner$$anon$1.class",
"io/joern/jssrc2cpg/utils/AstGenRunner$.class",
"io/joern/jssrc2cpg/utils/AstGenRunner$astGenMetaData$.class",
"io/joern/jssrc2cpg/utils/AstGenRunner.class",
"io/joern/jssrc2cpg/utils/AstGenRunner.tasty"
]
}
},
"logs": {
"owner-retention-red.log": "...F [100%]\n=================================== FAILURES ===================================\n_____ test_build_config_retention_is_explicit_and_overrides_ambient_policy _____\n\nmonkeypatch = <_pytest.monkeypatch.MonkeyPatch object at 0x714808cd0d90>\n\n def test_build_config_retention_is_explicit_and_overrides_ambient_policy(monkeypatch):\n monkeypatch.setenv('OUSAST_INCLUDE_BUILD_CONFIGS', '0')\n> assert JoernBackend()._jvm_env()['OUSAST_INCLUDE_BUILD_CONFIGS'] == '1'\nE AssertionError: assert '0' == '1'\nE \nE - 1\nE + 0\n\ntests/test_frontend_retention.py:36: AssertionError\n=========================== short test summary info ============================\nFAILED tests/test_frontend_retention.py::test_build_config_retention_is_explicit_and_overrides_ambient_policy\n1 failed, 3 passed in 0.13s\n",
"owner-retention-off.log": "...F [100%]\n=================================== FAILURES ===================================\n_____ test_build_config_retention_is_explicit_and_overrides_ambient_policy _____\n\nmonkeypatch = <_pytest.monkeypatch.MonkeyPatch object at 0x7516ef218750>\n\n def test_build_config_retention_is_explicit_and_overrides_ambient_policy(monkeypatch):\n monkeypatch.setenv('OUSAST_INCLUDE_BUILD_CONFIGS', '0')\n> assert JoernBackend()._jvm_env()['OUSAST_INCLUDE_BUILD_CONFIGS'] == '1'\nE AssertionError: assert '0' == '1'\nE \nE - 1\nE + 0\n\ntests/test_frontend_retention.py:36: AssertionError\n=========================== short test summary info ============================\nFAILED tests/test_frontend_retention.py::test_build_config_retention_is_explicit_and_overrides_ambient_policy\n1 failed, 3 passed in 0.66s\n",
"owner-retention-green.log": ".... [100%]\n4 passed in 0.11s\n",
"owner-census-diagnostic-red.log": ".....F.....F.F [100%]\n=================================== FAILURES ===================================\n___________ test_partial_partition_census_never_completes_questions ____________\n\ntmp_path = PosixPath('/tmp/pytest-of-mc/pytest-1693/test_partial_partition_census_0')\n\n def test_partial_partition_census_never_completes_questions(tmp_path):\n for name in (\"a.py\", \"b.py\"):\n (tmp_path / name).write_text(\"print('readable')\")\n \n class Backend:\n def build(self, root, **kwargs):\n return CpgResult(\n Path(\"graph\"),\n lambda q, p: [],\n run_batch=lambda q, reqs: {**{rid: [] for rid in reqs}, \"__census__\": [{\"methods\": 2, \"files\": 1}]},\n )\n \n region = ScanRegion(path=\"a.py\", function=\"f\", language=\"python\", families=(\"injection\",), rank=1.0, source=\"entry_point\")\n result = scan_repository(tmp_path, [region], backend=Backend(), budget=ScanBudget(tiering=False))\n assert result.question_outcomes[0].status == \"unresolved\"\n> assert \"partition_file_census_unavailable\" in result.scope.unresolved_boundaries\nE AssertionError: assert 'partition_file_census_unavailable' in ('population_not_asserted_complete', 'evidence_unknown:0fe0311405a7be0c4af80d713c6deb70e6c91dd8f99d5e81500010e081d0a881', 'cpg_empty')\nE + where ('population_not_asserted_complete', 'evidence_unknown:0fe0311405a7be0c4af80d713c6deb70e6c91dd8f99d5e81500010e081d0a881', 'cpg_empty') = ScopeDecision(ranker_version='existing-static-evidence-v1', ranking_mode='static', population_complete=False, selected..._asserted_complete', 'evidence_unknown:0fe0311405a7be0c4af80d713c6deb70e6c91dd8f99d5e81500010e081d0a881', 'cpg_empty')).unresolved_boundaries\nE + where ScopeDecision(ranker_version='existing-static-evidence-v1', ranking_mode='static', population_complete=False, selected..._asserted_complete', 'evidence_unknown:0fe0311405a7be0c4af80d713c6deb70e6c91dd8f99d5e81500010e081d0a881', 'cpg_empty')) = ModelScanResult(findings=(), by_rung={'suspicion': 0, 'model_corroborated': 0, 'model_entailed': 0, 'execution_confirm...epository', language='python', family='injection', selected=1, completed=0, unanswered=1, deferred=0, unsupported=0),)).scope\n\ntests/test_model_partitions.py:171: AssertionError\n____________ test_synthetic_census_node_cannot_mask_missing_source _____________\n\ntmp_path = PosixPath('/tmp/pytest-of-mc/pytest-1693/test_synthetic_census_node_can0')\n\n def test_synthetic_census_node_cannot_mask_missing_source(tmp_path):\n from openultrasast.model.partitions import build_partitions\n \n for name in (\"a.php\", \"b.php\"):\n (tmp_path / name).write_text(\"<?php echo 1;\")\n \n def build(root, language):\n return CpgResult(\n Path(\"graph\"),\n lambda q, p: [],\n run_batch=lambda q, reqs: {\n **{rid: [] for rid in reqs},\n \"__census__\": [{\"methods\": 3, \"files\": 2, \"file_names\": [\"<unknown>\", str(root / \"a.php\")]}],\n },\n )\n \n graph = build_partitions(tmp_path, build, None)\n try:\n result = graph.run_batch(\"taint\", {\"q\": {\"file\": \"a.php\"}})\n> assert result[\"__census__\"][0][\"files\"] == 2\nE assert 0 == 2\n\ntests/test_model_partitions.py:290: AssertionError\n__________ test_unnamed_sharded_census_remains_explicitly_incomplete ___________\n\ntmp_path = PosixPath('/tmp/pytest-of-mc/pytest-1693/test_unnamed_sharded_census_re0')\n\n def test_unnamed_sharded_census_remains_explicitly_incomplete(tmp_path):\n from openultrasast.model.partitions import build_partitions\n \n (tmp_path / \"app.php\").write_text(\"<?php echo 1;\")\n graph = build_partitions(\n tmp_path,\n lambda r
"owner-census-diagnostic-off.log": ".....F.....F.F [100%]\n=================================== FAILURES ===================================\n___________ test_partial_partition_census_never_completes_questions ____________\n\ntmp_path = PosixPath('/tmp/pytest-of-mc/pytest-1694/test_partial_partition_census_0')\n\n def test_partial_partition_census_never_completes_questions(tmp_path):\n for name in (\"a.py\", \"b.py\"):\n (tmp_path / name).write_text(\"print('readable')\")\n \n class Backend:\n def build(self, root, **kwargs):\n return CpgResult(\n Path(\"graph\"),\n lambda q, p: [],\n run_batch=lambda q, reqs: {**{rid: [] for rid in reqs}, \"__census__\": [{\"methods\": 2, \"files\": 1}]},\n )\n \n region = ScanRegion(path=\"a.py\", function=\"f\", language=\"python\", families=(\"injection\",), rank=1.0, source=\"entry_point\")\n result = scan_repository(tmp_path, [region], backend=Backend(), budget=ScanBudget(tiering=False))\n assert result.question_outcomes[0].status == \"unresolved\"\n> assert \"partition_file_census_unavailable\" in result.scope.unresolved_boundaries\nE AssertionError: assert 'partition_file_census_unavailable' in ('population_not_asserted_complete', 'evidence_unknown:0fe0311405a7be0c4af80d713c6deb70e6c91dd8f99d5e81500010e081d0a881', 'cpg_empty')\nE + where ('population_not_asserted_complete', 'evidence_unknown:0fe0311405a7be0c4af80d713c6deb70e6c91dd8f99d5e81500010e081d0a881', 'cpg_empty') = ScopeDecision(ranker_version='existing-static-evidence-v1', ranking_mode='static', population_complete=False, selected..._asserted_complete', 'evidence_unknown:0fe0311405a7be0c4af80d713c6deb70e6c91dd8f99d5e81500010e081d0a881', 'cpg_empty')).unresolved_boundaries\nE + where ScopeDecision(ranker_version='existing-static-evidence-v1', ranking_mode='static', population_complete=False, selected..._asserted_complete', 'evidence_unknown:0fe0311405a7be0c4af80d713c6deb70e6c91dd8f99d5e81500010e081d0a881', 'cpg_empty')) = ModelScanResult(findings=(), by_rung={'suspicion': 0, 'model_corroborated': 0, 'model_entailed': 0, 'execution_confirm...epository', language='python', family='injection', selected=1, completed=0, unanswered=1, deferred=0, unsupported=0),)).scope\n\ntests/test_model_partitions.py:171: AssertionError\n____________ test_synthetic_census_node_cannot_mask_missing_source _____________\n\ntmp_path = PosixPath('/tmp/pytest-of-mc/pytest-1694/test_synthetic_census_node_can0')\n\n def test_synthetic_census_node_cannot_mask_missing_source(tmp_path):\n from openultrasast.model.partitions import build_partitions\n \n for name in (\"a.php\", \"b.php\"):\n (tmp_path / name).write_text(\"<?php echo 1;\")\n \n def build(root, language):\n return CpgResult(\n Path(\"graph\"),\n lambda q, p: [],\n run_batch=lambda q, reqs: {\n **{rid: [] for rid in reqs},\n \"__census__\": [{\"methods\": 3, \"files\": 2, \"file_names\": [\"<unknown>\", str(root / \"a.php\")]}],\n },\n )\n \n graph = build_partitions(tmp_path, build, None)\n try:\n result = graph.run_batch(\"taint\", {\"q\": {\"file\": \"a.php\"}})\n> assert result[\"__census__\"][0][\"files\"] == 2\nE assert 0 == 2\n\ntests/test_model_partitions.py:290: AssertionError\n__________ test_unnamed_sharded_census_remains_explicitly_incomplete ___________\n\ntmp_path = PosixPath('/tmp/pytest-of-mc/pytest-1694/test_unnamed_sharded_census_re0')\n\n def test_unnamed_sharded_census_remains_explicitly_incomplete(tmp_path):\n from openultrasast.model.partitions import build_partitions\n \n (tmp_path / \"app.php\").write_text(\"<?php echo 1;\")\n graph = build_partitions(\n tmp_path,\n lambda r
"owner-census-diagnostic-on.log": ".............. [100%]\n14 passed in 1.36s\n",
"owner-census-empty-red.log": "......FFF........ [100%]\n=================================== FAILURES ===================================\n_______ test_partial_partition_census_never_completes_questions[census1] _______\n\ntmp_path = PosixPath('/tmp/pytest-of-mc/pytest-1697/test_partial_partition_census_1')\ncensus = []\n\n @pytest.mark.parametrize(\"census\", [[{\"methods\": 2, \"files\": 1}], [], [\"invalid\"], None])\n def test_partial_partition_census_never_completes_questions(tmp_path, census):\n for name in (\"a.py\", \"b.py\"):\n (tmp_path / name).write_text(\"print('readable')\")\n \n class Backend:\n def build(self, root, **kwargs):\n return CpgResult(\n Path(\"graph\"),\n lambda q, p: [],\n run_batch=lambda q, reqs: {**{rid: [] for rid in reqs}, **({\"__census__\": census} if census is not None else {})},\n )\n \n region = ScanRegion(path=\"a.py\", function=\"f\", language=\"python\", families=(\"injection\",), rank=1.0, source=\"entry_point\")\n result = scan_repository(tmp_path, [region], backend=Backend(), budget=ScanBudget(tiering=False))\n> assert result.question_outcomes[0].status == \"unresolved\"\nE AssertionError: assert 'completed' == 'unresolved'\nE \nE - unresolved\nE + completed\n\ntests/test_model_partitions.py:173: AssertionError\n_______ test_partial_partition_census_never_completes_questions[census2] _______\n\ntmp_path = PosixPath('/tmp/pytest-of-mc/pytest-1697/test_partial_partition_census_2')\ncensus = ['invalid']\n\n @pytest.mark.parametrize(\"census\", [[{\"methods\": 2, \"files\": 1}], [], [\"invalid\"], None])\n def test_partial_partition_census_never_completes_questions(tmp_path, census):\n for name in (\"a.py\", \"b.py\"):\n (tmp_path / name).write_text(\"print('readable')\")\n \n class Backend:\n def build(self, root, **kwargs):\n return CpgResult(\n Path(\"graph\"),\n lambda q, p: [],\n run_batch=lambda q, reqs: {**{rid: [] for rid in reqs}, **({\"__census__\": census} if census is not None else {})},\n )\n \n region = ScanRegion(path=\"a.py\", function=\"f\", language=\"python\", families=(\"injection\",), rank=1.0, source=\"entry_point\")\n result = scan_repository(tmp_path, [region], backend=Backend(), budget=ScanBudget(tiering=False))\n> assert result.question_outcomes[0].status == \"unresolved\"\nE AssertionError: assert 'completed' == 'unresolved'\nE \nE - unresolved\nE + completed\n\ntests/test_model_partitions.py:173: AssertionError\n________ test_partial_partition_census_never_completes_questions[None] _________\n\ntmp_path = PosixPath('/tmp/pytest-of-mc/pytest-1697/test_partial_partition_census_3')\ncensus = None\n\n @pytest.mark.parametrize(\"census\", [[{\"methods\": 2, \"files\": 1}], [], [\"invalid\"], None])\n def test_partial_partition_census_never_completes_questions(tmp_path, census):\n for name in (\"a.py\", \"b.py\"):\n (tmp_path / name).write_text(\"print('readable')\")\n \n class Backend:\n def build(self, root, **kwargs):\n return CpgResult(\n Path(\"graph\"),\n lambda q, p: [],\n run_batch=lambda q, reqs: {**{rid: [] for rid in reqs}, **({\"__census__\": census} if census is not None else {})},\n )\n \n region = ScanRegion(path=\"a.py\", function=\"f\", language=\"python\", families=(\"injection\",), rank=1.0, source=\"entry_point\")\n result = scan_repository(tmp_path, [region], backend=Backend(), budget=ScanBudget(tiering=False))\n> assert result.question_outcomes[0].status == \"unresolved\"\nE AssertionError: assert 'completed' == 'unresolved'\nE \nE - unresolve
"owner-census-review-focused.log": "........................................................................ [ 97%]\n.. [100%]\n74 passed in 7.24s\n",
"owner-census-release-suite.log": "........................................................................ [ 5%]\n..................................................................sssss. [ 10%]\n.............................s...............................s.......... [ 16%]\n.........ss............................................................. [ 21%]\n........................................................................ [ 27%]\n........................................................................ [ 32%]\n........................................................................ [ 37%]\n........................................................................ [ 43%]\n........................................................................ [ 48%]\n........................................................................ [ 54%]\n........................................................................ [ 59%]\n........................................................................ [ 64%]\n........................................................................ [ 70%]\n........................................................................ [ 75%]\n........................................................................ [ 81%]\n........................................................................ [ 86%]\n........................................................................ [ 92%]\n........................................................................ [ 97%]\n.................................. [100%]\n1321 passed, 9 skipped in 120.96s (0:02:00)\n",
"owner-census-release-build.log": "#0 building with \"default\" instance using docker driver\n\n#1 [internal] load build definition from Dockerfile\n#1 transferring dockerfile: 3.28kB done\n#1 DONE 0.0s\n\n#2 [internal] load metadata for docker.io/library/eclipse-temurin:21-jre-noble\n#2 DONE 0.0s\n\n#3 [internal] load .dockerignore\n#3 transferring context: 2B done\n#3 DONE 0.0s\n\n#4 [ 1/12] FROM docker.io/library/eclipse-temurin:21-jre-noble\n#4 DONE 0.0s\n\n#5 [internal] load build context\n#5 transferring context: 224.12kB 0.1s done\n#5 DONE 0.1s\n\n#6 [ 3/12] RUN set -eux; cd /tmp; curl -fsSL -O \"https://github.com/joernio/joern/releases/download/v4.0.625/joern-cli-linux-x86_64.zip\"; curl -fsSL -O \"https://github.com/joernio/joern/releases/download/v4.0.625/joern-cli-linux-x86_64.zip.sha512\"; sed 's@ target/@ @' \"joern-cli-linux-x86_64.zip.sha512\" > checksum.sha512; sha512sum -c checksum.sha512; unzip -q \"joern-cli-linux-x86_64.zip\" -d /opt; rm -f \"joern-cli-linux-x86_64.zip\" \"joern-cli-linux-x86_64.zip.sha512\" checksum.sha512; /opt/joern-cli/joern-parse --help > /dev/null\n#6 CACHED\n\n#7 [ 4/12] RUN if [ ! -e /opt/joern-cli/jssrc2cpg ] && [ -x /opt/joern-cli/jssrc2cpg.sh ]; then ln -s jssrc2cpg.sh /opt/joern-cli/jssrc2cpg; fi\n#7 CACHED\n\n#8 [ 5/12] COPY ops/frontend-retention/install.py /tmp/frontend-retention-install.py\n#8 CACHED\n\n#9 [ 6/12] RUN python3 /tmp/frontend-retention-install.py /opt/joern-cli && rm /tmp/frontend-retention-install.py\n#9 CACHED\n\n#10 [ 7/12] WORKDIR /app\n#10 CACHED\n\n#11 [ 2/12] RUN apt-get update && apt-get install -y --no-install-recommends python3 python3-venv python3-pip unzip curl ca-certificates git php-cli && rm -rf /var/lib/apt/lists/*\n#11 CACHED\n\n#12 [ 8/12] COPY pyproject.toml README.md ./\n#12 CACHED\n\n#13 [ 9/12] COPY src ./src\n#13 DONE 0.2s\n\n#14 [10/12] COPY benchmarks ./benchmarks\n#14 DONE 0.3s\n\n#15 [11/12] RUN python3 -m venv /venv && /venv/bin/pip install --no-cache-dir -e \".[semantic]\"\n#15 4.962 Obtaining file:///app\n#15 4.966 Installing build dependencies: started\n#15 6.380 Installing build dependencies: finished with status 'done'\n#15 6.382 Checking if build backend supports build_editable: started\n#15 6.427 Checking if build backend supports build_editable: finished with status 'done'\n#15 6.428 Getting requirements to build editable: started\n#15 6.473 Getting requirements to build editable: finished with status 'done'\n#15 6.474 Preparing editable metadata (pyproject.toml): started\n#15 6.530 Preparing editable metadata (pyproject.toml): finished with status 'done'\n#15 6.787 Collecting tree-sitter<0.27,>=0.23 (from openultrasast==1.1.0)\n#15 6.854 Downloading tree_sitter-0.26.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl.metadata (10 kB)\n#15 6.890 Collecting tree-sitter-python>=0.23 (from openultrasast==1.1.0)\n#15 6.899 Downloading tree_sitter_python-0.25.0-cp310-abi3-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl.metadata (1.9 kB)\n#15 6.931 Collecting tree-sitter-javascript>=0.23 (from openultrasast==1.1.0)\n#15 6.940 Downloading tree_sitter_javascript-0.25.0-cp310-abi3-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl.metadata (2.2 kB)\n#15 6.972 Collecting tree-sitter-typescript>=0.23 (from openultrasast==1.1.0)\n#15 6.981 Downloading tree_sitter_typescript-0.23.2-cp39-abi3-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_17_x86_64.manylinux2014_x86_64.whl.metadata (2.3 kB)\n#15 7.022 Collecting tree-sitter-c>=0.23 (from openultrasast==1.1.0)\n#15 7.031 Downloading tree_sitter_c-0.24.2-cp310-abi3-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl.metadata (1.8 kB)\n#15 7.068 Collecting tree-sitter-cpp>=0.23 (from openultrasast==1.1.0)\n#15 7.077 Downloading tree_sitter_cpp-0.23.4-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl.metadata (1.8 kB)\n#15 7.105 Collecting tree-sitter-java>=0.23 (from openultrasast==1.1.0)\n#15 7.115 Downloading tr
"owner-census-partition-smoke.stderr": "{\"frontend\": \"javascript\", \"projected_inputs\": {\"Gruntfile.js\": {\"bytes\": 46, \"sha256\": \"a144af904affce5e2ddd5befabb58caf3b5fdfbb5ac580210cf408916ebaa809\"}, \"tests/probe.js\": {\"bytes\": 41, \"sha256\": \"182f7cb37514b7fc6afbba045a9d1b3ca5dc297c35bb98b9f34c18cfd02864f5\"}, \"browser/client.js\": {\"bytes\": 41, \"sha256\": \"42ef299a3c9a53f1ca77f9e4b027c8d6e854f69b7df765bdb833079198513fc4\"}, \"server/api.js\": {\"bytes\": 51, \"sha256\": \"a9f1b897b9361d0d30250f82aebec987cfd99e66308c9ea889d5b6211e3cad5e\"}, \"checks/probe.spec.js\": {\"bytes\": 41, \"sha256\": \"a2677f51273a325b802a4a628ceb54f0bcea533a672c8997c0439d6ea206de37\"}, \"checks/probe.e2e.js\": {\"bytes\": 40, \"sha256\": \"14884e5a7d6c909f30addd8385bb82f6ea3751bb126192052dabe0eedfb42400\"}, \"checks/probe.test.js\": {\"bytes\": 41, \"sha256\": \"182f7cb37514b7fc6afbba045a9d1b3ca5dc297c35bb98b9f34c18cfd02864f5\"}, \"checks/probe.mock.js\": {\"bytes\": 41, \"sha256\": \"bc14cd012a0d2c34a3605ce21a009b7fd335bdf248f81aec3462b506929eabd5\"}}}\n{\"frontend\": \"javascript\", \"graph_witness\": {\"files\": [\"Gruntfile.js\", \"browser/client.js\", \"checks/probe.e2e.js\", \"checks/probe.mock.js\", \"checks/probe.spec.js\", \"checks/probe.test.js\", \"server/api.js\", \"tests/probe.js\"], \"methods\": [\"build_config_marker\", \":program\", \"browser_marker\", \":program\", \"js_e2e_marker\", \":program\", \"js_mock_marker\", \":program\", \"js_spec_marker\", \":program\", \"js_test_marker\", \":program\", \"js_handler\", \":program\", \"js_test_marker\", \":program\", \"<operator>.assignment\", \"eval\", \"<operator>.fieldAccess\"]}}\n{\"frontend\": \"php\", \"projected_inputs\": {\"tests/probe.php\": {\"bytes\": 48, \"sha256\": \"93c25992f2b709d4f222d88573a004dfb4e65239ce9a3afc2301f629b148c03d\"}, \"src/api.php\": {\"bytes\": 49, \"sha256\": \"47ee82519e90f5ce2c845035f168bc4eaa4b0cc6e46cfc68626b8144e20b8f72\"}}}\n{\"frontend\": \"php\", \"graph_witness\": {\"files\": [\"src/api.php\", \"tests/probe.php\", \"<unknown>\"], \"methods\": [\"<global>\", \"php_handler\", \"<global>\", \"php_test_marker\", \"eval\"]}}\n",
"owner-census-gate.log": "detection gate: recall 93.62% (44/47), FP 0.00% (0/44)\n c_cpp recall 93.33% (14/15) FP 0.00% (0/14)\n java recall 100.00% (4/4) FP 0.00% (0/4)\n javascript recall 92.31% (12/13) FP 0.00% (0/12)\n python recall 93.33% (14/15) FP 0.00% (0/14)\ndetection gate: PASS\n",
"owner-census-map.log": "split-sink map gate: PASS\n",
"owner-census-pairs.log": "pair gate: pair_pass 100.00% (3/3), vuln_recall 100.00%, silent_fix 100.00%, Youden +100.00%, labeled_recall 100.00% (28/28), fix_leaks 0\n local pair_pass 100.00% (3/3) vuln 100.00% silent 100.00% Youden +100.00% labeled 100.00%\n PASS local-python-vulnerable vuln 12/12 fix_findings=0 leaks=0\n PASS local-javascript-vulnerable vuln 10/10 fix_findings=0 leaks=0\n PASS local-cpp-buffer vuln 6/6 fix_findings=0 leaks=0\npair gate: PASS (local slice)\n"
},
"reproducer": "import json, subprocess, time, hashlib\nfrom pathlib import Path\nfrom openultrasast.cpg.backend import JoernBackend\nout=Path('/results')\nprior=json.loads(Path('/context/benchmarks/measurements/2026-09-13-nodegoat-feasibility.json').read_bytes())\nimport gzip\nbundle=json.loads(gzip.decompress(Path('/context/benchmarks/measurements/2026-09-13-nodegoat-feasibility.json.gz').read_bytes()))\nfiles=bundle\nkey=next(k for k in files if k.endswith('lab-prime.json'))\na=json.loads(files[key])\npart=a['scans'][0]['scan']['partitions'][0]\nroot=out/'input';root.mkdir(exist_ok=False)\nreceipt=[]\nfor name in part['paths']:\n p=subprocess.run(['git','-C','/cache/nodegoat/c5cb68a7084e','cat-file','blob','c5cb68a7084e4ae7dcc60e6a98768720a81841e8:'+name],capture_output=True,check=True,timeout=10)\n assert p.stdout\n target=root/name;target.parent.mkdir(parents=True,exist_ok=True);target.write_bytes(p.stdout)\n content=target.read_bytes();receipt.append({'path':name,'bytes':len(content),'sha256':hashlib.sha256(content).hexdigest()})\nassert sum(x['bytes'] for x in receipt)==part['source_bytes']\n(out/'inputs.json').write_text(json.dumps(receipt,indent=2))\nb=JoernBackend(build_timeout=180,query_timeout=180)\nstart=time.monotonic();g=b.build(root,language='javascript')\nassert g is not None,b.last_failure\ntry:\n build=time.monotonic()-start\n start=time.monotonic();raw=g.run('census',{})\n assert isinstance(raw,dict) and isinstance(raw.get('file_names'),list),raw\n expected=set(part['paths']);observed={n.removeprefix(str(root)+'/').removeprefix('./') for n in raw['file_names']}\n result={'build_seconds':build,'census_seconds':time.monotonic()-start,'raw_census':raw,'missing':sorted(expected-observed),'extra':sorted(observed-expected),'input_paths':len(receipt),'input_bytes':sum(x['bytes'] for x in receipt),'unparsed':g.unparsed}\n (out/'result.json').write_text(json.dumps(result,indent=2));print(json.dumps(result),flush=True)\nfinally:g.cleanup()\n",
"limits": [
"No changed-code latency gate passed.",
"No real capability admitted; old eligibility is stale.",
"VAmPI context/transitive witness and independent qualification remain open.",
"Gruntfile retention is a generic supported build format correction, not a blanket configuration/minification filter override.",
"Main-context Kiro review fallback; no independent reviewer claim.",
"Diagnostic timing samples may overlap static/test work; not representative performance measurements."
]
}
Reference in New Issue Copy Permalink