marius/Open_Ultra_SAST
1
0
Fork 0
mirror of https://github.com/norandom/OpenUltraSAST.git synced 2026-11-14 02:08:18 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(detection-core): enforce append-only population custody

Browse Source
This commit is contained in:
Marius Ciepluch
2026-10-31 14:08:35 +01:00
parent 7b9c01319b
commit edd8a7ec87
5 changed files with 654 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/openultrasast/core/provenance.py
+40
View File
@@ -11,6 +11,27 @@ from enum import Enum
from openultrasast.core import canonical
from openultrasast.core.canonical import ContentRef, ContentResolver
from openultrasast.core.custody import (
CUSTODY_LOG_SCHEMA,
CUSTODY_POLICY_SCHEMA,
CUSTODY_RECEIPT_SCHEMA,
CUSTODY_REQUEST_SCHEMA,
LineagePurpose,
PopulationCustodyError,
PopulationCustodyLog,
PopulationCustodyPolicy,
PopulationCustodyPort,
PopulationStatus,
PopulationUseReceipt,
PopulationUseRequest,
append_population_use,
derive_population_custody_policy_digest,
derive_population_use_receipt_digest,
derive_population_use_request_digest,
empty_population_custody_log,
record_population_use,
validate_population_custody_log,
)
NAMED_INPUTS_SCHEMA = "openultrasast.detection-core.named-inputs.v2"
PROVENANCE_POLICY_SCHEMA = "openultrasast.detection-core.provenance-policy.v2"
@@ -291,6 +312,25 @@ def validate_provenance(
__all__ = [
"CUSTODY_LOG_SCHEMA",
"CUSTODY_POLICY_SCHEMA",
"CUSTODY_RECEIPT_SCHEMA",
"CUSTODY_REQUEST_SCHEMA",
"LineagePurpose",
"PopulationCustodyError",
"PopulationCustodyLog",
"PopulationCustodyPolicy",
"PopulationCustodyPort",
"PopulationStatus",
"PopulationUseReceipt",
"PopulationUseRequest",
"append_population_use",
"derive_population_custody_policy_digest",
"derive_population_use_receipt_digest",
"derive_population_use_request_digest",
"empty_population_custody_log",
"record_population_use",
"validate_population_custody_log",
"DecisionProvenance",
"ModelCallIdentity",
"NAMED_INPUTS_SCHEMA",