marius/Open_Ultra_SAST
1
0
Fork 0
mirror of https://github.com/norandom/OpenUltraSAST.git synced 2026-10-16 03:49:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(hunter): add standard-mode scheduling

Browse Source
This commit is contained in:
Marius Ciepluch
2026-06-18 10:59:25 +02:00
parent cad70721cb
commit be65aed96e
6 changed files with 318 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.kiro/specs/openrouter-sast-harness/requirements.md
+1 -1
View File
@@ -38,7 +38,7 @@ Functional gates:
5. `fix_validation_harness`: patch proposals, adversarial fix audit, differential/static delta checks, and sandbox validation are integrated and cannot mark patches validated without passing evidence.
6. `opencode_product`: MCP tools, opencode commands/skills, fusion deepening, CI-ready reports, cost controls, and hardening are complete enough for routine opencode-driven use.
The current implementation state shall be documented as `scaffold_quick_scan` until later gates are explicitly verified.
The current implementation state shall be documented as `usable_harness_mvp` until later gates are explicitly verified.
## Non-Goals
.kiro/specs/openrouter-sast-harness/tasks.md
+9 -9
View File
@@ -126,8 +126,8 @@ Do not report OpenUltraSAST as a working security harness until `usable_harness_
## Gate: `standard_security_harness`
- [ ] Standard mode uses ranked hunter scheduling, retrieval packages, selected skill snippets, and independent verification.
- [ ] Every hunter trajectory is persisted and linked to finding artifacts.
- [x] Standard mode uses ranked hunter scheduling, retrieval packages, selected skill snippets, and independent verification.
- [x] Every hunter trajectory is persisted and linked to finding artifacts.
- [ ] False-positive learning updates ranking calibration from verifier outcomes.
- [ ] Fusion can be triggered for high-impact, contradictory, or difficult findings.
@@ -153,13 +153,13 @@ Do not report OpenUltraSAST as a working security harness until `usable_harness_
## Phase 8: Standard Mode Hunter Pool (`standard_security_harness` prerequisite)
- [ ] Implement tier assignment by priority.
- [ ] Implement budget allocation and per-target limits.
- [ ] Implement parallel hunter scheduling.
- [ ] Persist hunter trajectories as JSONL.
- [ ] Integrate retrieval packages and selected skill snippets.
- [ ] Integrate verifier after hunter output.
- [ ] Add fixture scan demonstrating at least one verified static-corroborated finding.
- [x] Implement tier assignment by priority.
- [x] Implement budget allocation and per-target limits.
- [x] Implement parallel hunter scheduling.
- [x] Persist hunter trajectories as JSONL.
- [x] Integrate retrieval packages and selected skill snippets.
- [x] Integrate verifier after hunter output.
- [x] Add fixture scan demonstrating at least one verified static-corroborated finding.
## Phase 9: SARIF And CI Output (`usable_harness_mvp` prerequisite)