marius/Open_Ultra_SAST
1
0
Fork 0
mirror of https://github.com/norandom/OpenUltraSAST.git synced 2026-10-16 11:49:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(pre-push-safety-net): establish shared push and engine contracts

Browse Source
This commit is contained in:
Marius Ciepluch
2026-09-12 19:21:31 +02:00
parent 051f3b0058
commit 14a2a60e52
18 changed files with 810 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files
benchmarks/measurements/2026-09-08-module-audit.json
+42 -4
View File
@@ -1,10 +1,10 @@
{
"counts": {
"load_bearing": 92,
"load_bearing": 97,
"standalone_capability": 9
},
"modules": 101,
"note": "Inventory refreshed for pre-push-safety-net task 1.3 standalone scorer; original artifact filename retained for audit gate.",
"modules": 106,
"note": "Refreshed 2026-09-12 after pre-push-safety-net task 1.4: immutable push and generic engine contracts are spec-owned; runtime integration remains pending.",
"orphaned": [],
"rows": [
{
@@ -110,6 +110,17 @@
"module": "config",
"reason": "reachable from gate, map_gate, pair_gate or the CLI"
},
{
"classification": "load_bearing",
"importers": [
"config",
"cpg.artifact",
"model.contracts",
"push.contracts"
],
"module": "contracts",
"reason": "pre-push-safety-net Req 7.3: strict shared manifest serialization, independent of push"
},
{
"classification": "load_bearing",
"importers": [
@@ -125,6 +136,12 @@
"module": "cpg",
"reason": "model-grounded-detection Req 4: the CPG seam package"
},
{
"classification": "load_bearing",
"importers": [],
"module": "cpg.artifact",
"reason": "pre-push-safety-net Req 4.3/7.3: backend graph identity and live lease contract; validation integration pending"
},
{
"classification": "load_bearing",
"importers": [
@@ -333,7 +350,8 @@
"model.scan",
"model.specs",
"model.taint",
"preprocess"
"preprocess",
"push.contracts"
],
"module": "model",
"reason": "reachable from gate, map_gate, pair_gate or the CLI"
@@ -368,6 +386,14 @@
"module": "model.config_value",
"reason": "model-grounded-detection Req 6.3: constant abstraction for the configuration families"
},
{
"classification": "load_bearing",
"importers": [
"push.contracts"
],
"module": "model.contracts",
"reason": "pre-push-safety-net Req 4.1/7.3: generic deadline, change and exact scope contracts; integration pending"
},
{
"classification": "load_bearing",
"importers": [
@@ -605,6 +631,18 @@
"module": "provider.openrouter",
"reason": "reachable from gate, map_gate, pair_gate or the CLI"
},
{
"classification": "load_bearing",
"importers": [],
"module": "push",
"reason": "pre-push-safety-net Req 5.5/7.3: experimental push contract package; no hook installed"
},
{
"classification": "load_bearing",
"importers": [],
"module": "push.contracts",
"reason": "pre-push-safety-net Req 5.5/7.3: immutable comparisons and independent result statuses; runner pending"
},
{
"classification": "standalone_capability",
"importers": [],