marius/Open_Ultra_SAST
1
0
Fork 0
mirror of https://github.com/norandom/OpenUltraSAST.git synced 2026-10-16 03:49:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(model): carried with provenance -- source-fed promotes a tier, parameter-fed only orders

Browse Source 
Structural carried (v3) measured: pmpro 391 -> 69, wpstatistics 504 -> 172, mwwpform 513 -> 68 -- and
tier 4 swollen to 555 and 569 regions, because "assigned from a parameter" was folded in with "assigned
from a source" and every constructor does the former. The query now reports carriedKind; the vector
promotes on "source" and gives "parameter" a within-tier weight of 0.75.

Co-Authored-By: Claude Fable 5.1 <[email protected]>
Claude-Session: https://claude.ai/code/session_01T7XD7x5KonMdmGRkp63EQG
This commit is contained in:
Marius Ciepluch
2026-09-11 13:11:00 +02:00
co-authored by Claude Fable 5.1
parent ce49bd877c
commit d1f37abadd
5 changed files with 3591 additions and 48 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/test_model_evidence.py
+30
View File
@@ -145,3 +145,33 @@ def test_the_query_may_answer_carried_itself() -> None:
assert silent is not None and silent.carried is None and silent.tier == TIER_OPEN
told = evidence_from_rows([{"kind": "summary", "sinks": 1, "sourceNear": True, "familyInRepo": True}, sink], carried=True)
assert told is not None and told.carried is True
def test_carried_provenance_promotes_only_when_source_fed() -> None:
"""A field fed from a source (or from a same-file method that reads one) is the strong `carried` and
promotes to tier 4; a field fed from a parameter of its method is the weak form, orders within the
tier, and never promotes -- every constructor assigns a field from a parameter."""
from openultrasast.model.evidence import TIER_OPEN, TIER_OPEN_PUBLIC, WEIGHTS, evidence_from_rows
sink = {
"kind": "sink",
"sink": "unlink($f)",
"sinkLine": "259",
"sinkMethod": "_delete_files",
"sinkArity": 1,
"sinkArg0Literal": False,
"cleansedOnCall": False,
}
strong = evidence_from_rows(
[{"kind": "summary", "sinks": 1, "sourceNear": True, "carried": True, "carriedKind": "source", "familyInRepo": True}, sink]
)
weak = evidence_from_rows(
[{"kind": "summary", "sinks": 1, "sourceNear": True, "carried": True, "carriedKind": "parameter", "familyInRepo": True}, sink]
)
none = evidence_from_rows(
[{"kind": "summary", "sinks": 1, "sourceNear": True, "carried": False, "carriedKind": "", "familyInRepo": True}, sink]
)
assert strong is not None and strong.tier == TIER_OPEN_PUBLIC and strong.carried is True
assert weak is not None and weak.tier == TIER_OPEN and weak.carried is False and weak.carried_weak
assert none is not None and none.tier == TIER_OPEN and not none.carried_weak
assert weak.score - none.score == WEIGHTS["carried_weak"]