marius/Open_Ultra_SAST
1
0
Fork 0
mirror of https://github.com/norandom/OpenUltraSAST.git synced 2026-11-14 18:18:18 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(detection-core): validate complete input provenance

Browse Source
This commit is contained in:
Marius Ciepluch
2026-10-31 14:00:47 +01:00
parent 0d606031e6
commit 7b9c01319b
3 changed files with 457 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.kiro/specs/detection-core/tasks.md
+1 -1
View File
@@ -42,7 +42,7 @@
- _Requirements: 1.2, 4.1, 4.2, 4.3, 5.2_
- _Boundary: Semantic Evidence_
- _Depends: 1.2_
- [ ] 2.2 (P) Validate complete input and decision provenance
- [x] 2.2 (P) Validate complete input and decision provenance
- Stamp analyzer, family contract, fact set, acquisition, configuration, population, and change-input identities.
- Require the closed named-input role set and resolve every referenced input through the trusted artifact boundary.
- Keep model and proof identities outside the immutable deterministic packet.