Open_Ultra_SAST/benchmarks/measurements/2026-09-30-php-engine-alerts/run.yaml

# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set /tmp/claude-1000/-home-mc-Source-OpenUltraSAST/c09e30b2-39a4-4564-bc31-6ea71ffaa198/scratchpad/phpgap/set/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --repos ~/.cache/openultrasast/independent --run validation-46 --loop --loop-commit 1ad472c68d759e4ef010bd7a2e23532b1de538a9 --loop-repo https://github.com/norandom/OpenUltraSAST.git --loop-manifest benchmarks/manifests/java-spring-boot-vulnerable.toml`; do not edit, regenerate.
# 2 cases, 4 candidates (4 kept by the recorded triage); usd ceiling 0.27.
apiVersion: openultrasast.io/v1alpha1
kind: Run
metadata:
  name: validation-46
  annotations:
    openultrasast.io/population: population-v2
    openultrasast.io/split: validation
spec:
  tasks:
  - name: froxlor-admin-ip-second-order-sqli-facts
    task: repo-facts-froxlor-admin-ip-second-order-sqli
    outputs:
    - facts.json
    budget: &id001
      usd: 0
      calls: 0
    serialize: repo-facts
  - name: froxlor-admin-ip-second-order-sqli-va
    task: verify-a-froxlor-admin-ip-second-order-sqli
    inputs:
      facts: froxlor-admin-ip-second-order-sqli-facts/facts.json
    outputs:
    - units.jsonl
    - summary.json
    budget:
      usd: 0.07
      calls: 16
  - name: froxlor-admin-ip-second-order-sqli-vb
    task: verify-b-froxlor-admin-ip-second-order-sqli
    inputs:
      facts: froxlor-admin-ip-second-order-sqli-facts/facts.json
    outputs:
    - units.jsonl
    - summary.json
    budget:
      usd: 0.07
      calls: 16
  - name: froxlor-admin-ip-second-order-sqli-agree
    task: agree-froxlor-admin-ip-second-order-sqli
    inputs:
      pass_a: froxlor-admin-ip-second-order-sqli-va/units.jsonl
      pass_b: froxlor-admin-ip-second-order-sqli-vb/units.jsonl
    outputs:
    - agreed.json
    - disputed.json
    budget: *id001
  - name: wp-gopay-log-filter-sqli-facts
    task: repo-facts-wp-gopay-log-filter-sqli
    outputs:
    - facts.json
    budget: &id002
      usd: 0
      calls: 0
    serialize: repo-facts
  - name: wp-gopay-log-filter-sqli-va
    task: verify-a-wp-gopay-log-filter-sqli
    inputs:
      facts: wp-gopay-log-filter-sqli-facts/facts.json
    outputs:
    - units.jsonl
    - summary.json
    budget:
      usd: 0.02
      calls: 8
  - name: wp-gopay-log-filter-sqli-vb
    task: verify-b-wp-gopay-log-filter-sqli
    inputs:
      facts: wp-gopay-log-filter-sqli-facts/facts.json
    outputs:
    - units.jsonl
    - summary.json
    budget:
      usd: 0.02
      calls: 8
  - name: wp-gopay-log-filter-sqli-agree
    task: agree-wp-gopay-log-filter-sqli
    inputs:
      pass_a: wp-gopay-log-filter-sqli-va/units.jsonl
      pass_b: wp-gopay-log-filter-sqli-vb/units.jsonl
    outputs:
    - agreed.json
    - disputed.json
    budget: *id002
  - name: froxlor-admin-ip-second-order-sqli-vc
    task: verify-c-froxlor-admin-ip-second-order-sqli
    dependsOn:
    - froxlor-admin-ip-second-order-sqli-agree
    inputs:
      facts: froxlor-admin-ip-second-order-sqli-facts/facts.json
      only: froxlor-admin-ip-second-order-sqli-agree/disputed.json
    outputs:
    - units.jsonl
    - summary.json
    budget:
      usd: 0.07
      calls: 16
  - name: froxlor-admin-ip-second-order-sqli-final
    task: agree-froxlor-admin-ip-second-order-sqli
    inputs:
      pass_a: froxlor-admin-ip-second-order-sqli-va/units.jsonl
      pass_b: froxlor-admin-ip-second-order-sqli-vb/units.jsonl
      pass_c: froxlor-admin-ip-second-order-sqli-vc/units.jsonl
    outputs:
    - agreed.json
    - disputed.json
    budget:
      usd: 0
      calls: 0
  - name: wp-gopay-log-filter-sqli-vc
    task: verify-c-wp-gopay-log-filter-sqli
    dependsOn:
    - wp-gopay-log-filter-sqli-agree
    inputs:
      facts: wp-gopay-log-filter-sqli-facts/facts.json
      only: wp-gopay-log-filter-sqli-agree/disputed.json
    outputs:
    - units.jsonl
    - summary.json
    budget:
      usd: 0.02
      calls: 8
  - name: wp-gopay-log-filter-sqli-final
    task: agree-wp-gopay-log-filter-sqli
    inputs:
      pass_a: wp-gopay-log-filter-sqli-va/units.jsonl
      pass_b: wp-gopay-log-filter-sqli-vb/units.jsonl
      pass_c: wp-gopay-log-filter-sqli-vc/units.jsonl
    outputs:
    - agreed.json
    - disputed.json
    budget:
      usd: 0
      calls: 0
  - name: froxlor-admin-ip-second-order-sqli-alerts
    task: alerts-froxlor-admin-ip-second-order-sqli
    outputs:
    - alerts.jsonl
    - summary.json
    budget:
      usd: 0
      calls: 0
    serialize: engine
  - name: froxlor-admin-ip-second-order-sqli-remember
    task: remember-froxlor-admin-ip-second-order-sqli
    inputs:
      facts: froxlor-admin-ip-second-order-sqli-facts/facts.json
      facts_summary: froxlor-admin-ip-second-order-sqli-facts/summary.json
      pass_a: froxlor-admin-ip-second-order-sqli-va/units.jsonl
      summary_a: froxlor-admin-ip-second-order-sqli-va/summary.json
      pass_b: froxlor-admin-ip-second-order-sqli-vb/units.jsonl
      summary_b: froxlor-admin-ip-second-order-sqli-vb/summary.json
      pass_c: froxlor-admin-ip-second-order-sqli-vc/units.jsonl
      summary_c: froxlor-admin-ip-second-order-sqli-vc/summary.json
      agreed: froxlor-admin-ip-second-order-sqli-final/agreed.json
      alerts: froxlor-admin-ip-second-order-sqli-alerts/alerts.jsonl
      alerts_summary: froxlor-admin-ip-second-order-sqli-alerts/summary.json
    outputs:
    - memory.jsonl
    budget:
      usd: 0
      calls: 0
  - name: wp-gopay-log-filter-sqli-alerts
    task: alerts-wp-gopay-log-filter-sqli
    outputs:
    - alerts.jsonl
    - summary.json
    budget:
      usd: 0
      calls: 0
    serialize: engine
  - name: wp-gopay-log-filter-sqli-remember
    task: remember-wp-gopay-log-filter-sqli
    inputs:
      facts: wp-gopay-log-filter-sqli-facts/facts.json
      facts_summary: wp-gopay-log-filter-sqli-facts/summary.json
      pass_a: wp-gopay-log-filter-sqli-va/units.jsonl
      summary_a: wp-gopay-log-filter-sqli-va/summary.json
      pass_b: wp-gopay-log-filter-sqli-vb/units.jsonl
      summary_b: wp-gopay-log-filter-sqli-vb/summary.json
      pass_c: wp-gopay-log-filter-sqli-vc/units.jsonl
      summary_c: wp-gopay-log-filter-sqli-vc/summary.json
      agreed: wp-gopay-log-filter-sqli-final/agreed.json
      alerts: wp-gopay-log-filter-sqli-alerts/alerts.jsonl
      alerts_summary: wp-gopay-log-filter-sqli-alerts/summary.json
    outputs:
    - memory.jsonl
    budget:
      usd: 0
      calls: 0
  - name: memory-snapshot
    task: memory-snapshot
    outputs:
    - rows.jsonl
    - index.json
    budget:
      usd: 0
      calls: 0
  - name: loop-measure
    task: loop-measure
    inputs:
      remember_froxlor-admin-ip-second-order-sqli: froxlor-admin-ip-second-order-sqli-remember/memory.jsonl
      remember_wp-gopay-log-filter-sqli: wp-gopay-log-filter-sqli-remember/memory.jsonl
      snapshot: memory-snapshot/rows.jsonl
    outputs:
    - measure.json
    - rows.jsonl
    budget:
      usd: 0
      calls: 0
  - name: loop-propose
    task: loop-propose
    inputs:
      measure: loop-measure/measure.json
      rows: loop-measure/rows.jsonl
      index: memory-snapshot/index.json
    outputs:
    - proposals.jsonl
    - memory_proposals.jsonl
    - signals.json
    budget:
      usd: 0
      calls: 0
  - name: loop-improve
    task: loop-improve
    inputs:
      proposals: loop-propose/proposals.jsonl
    outputs:
    - gate.json
    - journal.json
    budget:
      usd: 0
      calls: 0
    serialize: engine