marius/Open_Ultra_SAST
1
0
Fork 0
mirror of https://github.com/norandom/OpenUltraSAST.git synced 2026-11-13 01:48:17 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,150 Commits 1 Branch 12 Tags
29030b38fcae40c038b97d2c19eefba9347cc3fc
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Marius Ciepluch 29030b38fc feat(access-control-prover): publish fact conformance handoff 2026-11-01 18:16:07 +01:00
Marius Ciepluch ec6c8f7f3e feat(access-control-prover): match reviewed entry facts 2026-11-01 17:42:05 +01:00
Marius Ciepluch 9b61e492e6 feat(access-control-prover): persist canonical fact matches 2026-11-01 17:24:50 +01:00
Marius Ciepluch f739b39ead feat(access-control-prover): migrate reviewed entry packs 2026-11-01 17:17:05 +01:00
Marius Ciepluch 56fb129b7c feat(access-control-prover): record authority review ceremony 2026-11-01 17:01:44 +01:00
Marius Ciepluch a5ebc69a6e feat(access-control-prover): decode installed fact authority 2026-11-01 16:56:26 +01:00
Marius Ciepluch a2ffbacd05 docs(access-control-prover): approve installed authority ceremony 2026-11-01 16:45:39 +01:00
Marius Ciepluch 83e3088bf5 docs(access-control-prover): block self-authorized migration 2026-11-01 15:19:11 +01:00
Marius Ciepluch 18dc25b718 feat(access-control-prover): authenticate fact authority 2026-11-01 15:09:28 +01:00
Marius Ciepluch fd3d8ac1e6 feat(access-control-prover): define production family contract 2026-11-01 15:02:04 +01:00
Marius Ciepluch 30df6b36ba docs(access-control-prover): locate family contract boundary 2026-11-01 14:58:53 +01:00
Marius Ciepluch 8991f44ee3 docs(access-control-prover): own reviewed fact authority 2026-11-01 14:58:22 +01:00
Marius Ciepluch 24724e6da4 docs(detection-core): block unauthenticated fact-pack migration 2026-11-01 12:43:43 +01:00
Marius Ciepluch 5379b8ae39 feat(detection-core): adapt demonstrated proof evidence 2026-11-01 12:38:49 +01:00
Marius Ciepluch 64e44341ee feat(detection-core): bound model execution handoff 2026-11-01 12:18:30 +01:00
Marius Ciepluch 292d4b5557 feat(detection-core): adapt authorization traces 2026-11-01 12:13:20 +01:00
Marius Ciepluch 57802dac7a feat(detection-core): authorize fitted components 2026-11-01 12:03:51 +01:00
Marius Ciepluch e351aca041 feat(detection-core): replay admission evidence 2026-11-01 11:34:23 +01:00
Marius Ciepluch 6a1bc2023a docs(detection-core): add authoritative admission replay 2026-11-01 11:16:38 +01:00
Marius Ciepluch c8ce1c9e63 feat(detection-core): derive authenticated admission metrics 2026-11-01 10:37:37 +01:00
Marius Ciepluch 44516cf29f feat(detection-core): authenticate post-spend case release 2026-11-01 10:18:02 +01:00
Marius Ciepluch 007dd7aa77 docs(detection-core): authenticate post-spend case release 2026-11-01 10:03:58 +01:00
Marius Ciepluch b28045810e feat(detection-core): validate pre-label population spend 2026-11-01 09:20:02 +01:00
Marius Ciepluch 67b3ae62a9 feat(detection-core): validate threshold feasibility 2026-11-01 09:03:44 +01:00
Marius Ciepluch f3adbfe333 feat(detection-core): validate exact admission context 2026-10-31 19:38:01 +01:00
Marius Ciepluch 361c216402 feat(detection-core): validate reviewed admission payloads 2026-10-31 19:08:14 +01:00
Marius Ciepluch a3cea1096c feat(detection-core): add complete measurement records 2026-10-31 18:45:19 +01:00
Marius Ciepluch 9d266b2f11 feat(detection-core): define fixed measurement algebra 2026-10-31 18:26:24 +01:00
Marius Ciepluch 9488a57a1a feat(detection-core): integrate bounded consumer edge 2026-10-31 18:09:35 +01:00
Marius Ciepluch d4fcde615b feat(detection-core): validate differential proof attachment 2026-10-31 17:52:25 +01:00
Marius Ciepluch 2a44ad938c feat(detection-core): derive bounded verdict outputs 2026-10-31 17:38:30 +01:00
Marius Ciepluch a2788d11b0 feat(detection-core): replay model derivation in validation 2026-10-31 17:30:40 +01:00
Marius Ciepluch 8e1ebd4700 feat(detection-core): add closed evidence validation context 2026-10-31 17:23:38 +01:00
Marius Ciepluch d7785ff5d7 feat(detection-core): add semantic shortcut probes 2026-10-31 17:11:07 +01:00
Marius Ciepluch a1800c0c74 feat(detection-core): apply bounded model corroboration 2026-10-31 16:57:11 +01:00
Marius Ciepluch d28998b262 feat(detection-core): preserve model handoff records 2026-10-31 16:49:20 +01:00
Marius Ciepluch 2796647259 feat(detection-core): replay fact-derived relations 2026-10-31 16:33:53 +01:00
Marius Ciepluch 117b5b4bf7 feat(detection-core): apply reviewed fact effects 2026-10-31 16:08:05 +01:00
Marius Ciepluch 087dcc723f feat(detection-core): validate structural matches and matcher lineage 2026-10-31 15:44:48 +01:00
Marius Ciepluch 08b0eeaac2 feat(detection-core): validate reviewed fact packs 2026-10-31 15:28:14 +01:00
Marius Ciepluch 47ecada02d feat(detection-core): stop promotion on stale readiness 2026-10-31 15:11:01 +01:00
Marius Ciepluch f74069a182 feat(detection-core): record ordered readiness evidence 2026-10-31 15:05:37 +01:00
Marius Ciepluch 3e4951fd30 feat(detection-core): derive measured budgets and enforce scope 2026-10-31 15:00:39 +01:00
Marius Ciepluch 85e2a62ed6 feat(detection-core): account for instrument-safe coverage 2026-10-31 14:46:32 +01:00
Marius Ciepluch 4be22046a9 feat(detection-core): add unlike reference family conformance 2026-10-31 14:39:16 +01:00
Marius Ciepluch 741338f207 feat(detection-core): build exact family catalog resolution 2026-10-31 14:32:37 +01:00
Marius Ciepluch 93404c5e1e feat(detection-core): validate closed family declarations 2026-10-31 14:27:18 +01:00
Marius Ciepluch 93aade237e feat(detection-core): bind evidence packets to neutral decisions 2026-10-31 14:18:51 +01:00
Marius Ciepluch 62c87b39ab feat(detection-core): bind lineage to exact influenced artifacts 2026-10-31 14:13:39 +01:00
Marius Ciepluch edd8a7ec87 feat(detection-core): enforce append-only population custody 2026-10-31 14:08:35 +01:00
Marius Ciepluch 7b9c01319b feat(detection-core): validate complete input provenance 2026-10-31 14:00:47 +01:00
Marius Ciepluch 0d606031e6 feat(detection-core): represent family-neutral semantic evidence 2026-10-31 13:55:12 +01:00
Marius Ciepluch 931697ea37 feat(detection-core): build the strict canonical artifact boundary 2026-10-31 13:39:51 +01:00
Marius Ciepluch 1eb9ef11b5 docs(detection-core): approve v2 implementation plan 2026-10-31 12:35:42 +01:00
Marius Ciepluch 2c594b2c27 docs(benchmarks): 8.2 final gated round - dev funnel 11.9->19.2 complete, admission NO-GO #3, arm parked 
Lever: unique-declaration member-call binding (dc28325). Measurement 1: zero movement
on in-family sites (0 unique-name member calls exist there; unresolved mass is framework
callee names). Screen: all 264 admission records byte-identical at dc28325. Measurement 2
(dev pool, single-lever isolation): complete-share 11.9->19.2 (+360478, exact conservation),
recall/location/FA identical, 5 ordinary none->indeterminate. Measurement 3 (ac-admission-3,
fresh freeze, criteria byte-identical): NO-GO #3, same four gates, 0/12 pairs, 264/264
fresh dc28325-stamped records. Stop condition fired: access-control arm parked permanently
(rule-11 fallback). Remaining gap: entry recognition (4/12 zero-recognition; coverage
8/12) and framework operation facts, not call resolution.
 2026-10-31 09:02:59 +01:00
Marius Ciepluch dcdf04bfbc docs(benchmarks): express-pack admission provenance note for the 17 in-flight records 2026-10-31 08:48:25 +01:00
Marius Ciepluch dc2832564a feat(detection-core): unique-declaration member-call binding (8.2 final gated round step 1-2) 
x.method() with a variable receiver binds complete iff exactly one same-name
method declaration exists repository-wide; collisions stay a finite candidate
set (receiver_type_unknown) and module-level functions never bind. Authorized
by maintainer strategy-review 2026-10-31; gated by dev-pool FA non-regression.
 2026-10-31 07:10:36 +01:00
Marius Ciepluch 1481bb33d7 docs(steering): record maintainer strategy-review outcome - one final gated resolution round 2026-10-31 06:50:46 +01:00
Marius Ciepluch 62c8d21667 docs(benchmarks): 8.2 admission gate - recognition doubled, NO-GO #2, stop condition fired 2026-10-30 20:55:38 +01:00
Marius Ciepluch 6024152c48 fix(benchmarks): fact_manifest_ref digests entry-pack JSON symmetrically with disk 2026-10-30 20:45:39 +01:00
Marius Ciepluch a8a28f81f3 feat(detection-core): JS handler extraction for bind(this)/arrow/class-method routes (8.2 part 3); fold in load_pack_file repairing 51971cd import 2026-10-30 20:10:22 +01:00
Marius Ciepluch 51971cda7e feat(detection-core): package-rooted entry packs wired into JS recognition; fact digest covers packs (8.2 part 2) 2026-10-30 19:25:30 +01:00
Marius Ciepluch 1d5a509424 feat(detection-core): recognition target table and first express fact pack (8.2 part 1) 2026-10-30 18:46:19 +01:00
Marius Ciepluch 4a1167dfdd feat(detection-core): 8.1 prover native conformance to core trace/coverage contracts 2026-10-30 18:37:04 +01:00
Marius Ciepluch b5c26f52e8 docs(detection-core): bind integration phase into roadmap and task plan 2026-10-30 18:00:59 +01:00
Marius Ciepluch 1cd6a39aaf docs(detection-core): mark all task groups complete 2026-10-30 17:12:43 +01:00
Marius Ciepluch af400c6be4 feat(detection-core): runner migration onto core contracts, schema validation, E2E 2026-10-30 17:12:33 +01:00
Marius Ciepluch c924a69514 feat(detection-core): fact-pack admission and push-consumer contracts 2026-10-30 17:05:24 +01:00
Marius Ciepluch 43fd59f960 feat(detection-core): anti-shortcut probes and fitted-component admission gate 2026-10-30 16:27:27 +01:00
Marius Ciepluch 46b4579d01 feat(detection-core): generalized admission contract with family-scope reports 2026-10-30 16:22:40 +01:00
Marius Ciepluch eb9fe856f9 feat(detection-core): prover trace/coverage conformance adapters to the core contract 2026-10-30 16:18:22 +01:00
Marius Ciepluch 92fb372498 feat(detection-core): measured per-class budget replacing the static 120s gate 2026-10-30 16:11:37 +01:00
Marius Ciepluch 0b56ad5514 feat(detection-core): foundation contract package (trace, verdict, coverage, provenance) 2026-10-30 16:04:10 +01:00
Marius Ciepluch 839d58e3d3 docs(steering): detection-quality rules and stop conditions after admission NO-GO 2026-10-30 14:48:40 +01:00
Marius Ciepluch 1edc4790af feat(access-control-prover): 13.4 admission measurement 2026-10-30 13:25:34 +01:00
Marius Ciepluch d063167b28 feat(access-control-prover): 13.3 four-arm development regression 2026-10-30 12:37:19 +01:00
Marius Ciepluch 9c95f842f7 feat(access-control-prover): 12.6 paired scoring and admission report 2026-10-30 10:25:37 +01:00
Marius Ciepluch 494c29182d feat(access-control-prover): 12.5 admission manifest consumption 2026-10-30 10:13:09 +01:00
Marius Ciepluch ea33222bf6 feat(access-control-prover): 12.4 four-arm development comparison 2026-10-30 09:44:27 +01:00
Marius Ciepluch 282a085f77 feat(access-control-prover): 12.3 instrument and hard runtime gates 2026-10-30 08:53:05 +01:00
Marius Ciepluch eb30d0386c feat(access-control-prover): 12.2 record provenance, stage funnel and judgment transitions 2026-10-30 08:38:58 +01:00
Marius Ciepluch 733e17ed3e feat(access-control-prover): 12.1 analyzer bundles 2026-10-30 08:38:09 +01:00
Marius Ciepluch 9e0a901ccc feat(access-control-prover): 13.2 cross-component validation scenarios 2026-10-30 08:19:25 +01:00
Marius Ciepluch f8e134a159 feat(access-control-prover): 13.1 abstract-domain and metamorphic law validation 2026-10-30 08:09:02 +01:00
Marius Ciepluch 85aa3b1484 feat(access-control-prover): 11.7 first label-blind development acquisition 2026-10-29 21:04:51 +01:00
Marius Ciepluch acadf04109 feat(access-control-prover): 11.6 migrate the stapler recogniser through the registry 2026-10-29 20:59:37 +01:00
Marius Ciepluch 3f241bc595 feat(access-control-prover): 11.5 acquisition provenance and label-isolated mode 2026-10-29 20:49:39 +01:00
Marius Ciepluch 09c3ffd621 feat(access-control-prover): 11.4 verify and promote proposed target knowledge 2026-10-29 20:34:52 +01:00
Marius Ciepluch c0e1360149 feat(access-control-prover): 11.3 extract existing target knowledge into candidate records 2026-10-29 20:29:15 +01:00
Marius Ciepluch c279513def feat(access-control-prover): 11.2 generic call-site registration strategy 2026-10-29 20:23:50 +01:00
Marius Ciepluch 86709daf2e feat(access-control-prover): 11.1 entry-recognition strategy registry 2026-10-29 20:19:31 +01:00
Marius Ciepluch 82e4a1ad97 feat(access-control-prover): 10.6 three-way judgments in the prover 2026-10-29 19:34:44 +01:00
Marius Ciepluch 95dfddb018 feat(access-control-prover): 10.5 multi-path aggregation in the opt-in abstract mode 2026-10-29 19:20:24 +01:00
Marius Ciepluch f700b99637 feat(access-control-prover): 10.4 one judgment per path 2026-10-29 19:17:37 +01:00
Marius Ciepluch 7eb491dc82 feat(access-control-prover): 10.3 authority matching through promoted implications 2026-10-29 19:11:30 +01:00
Marius Ciepluch cf60e02804 feat(access-control-prover): 10.2 witness kind, scope and resource matching 2026-10-29 19:05:51 +01:00
Marius Ciepluch 8ad304ffeb feat(access-control-prover): 10.1 abstract dominance relations without prover fallback 2026-10-29 19:01:25 +01:00
Marius Ciepluch f23d3f986d feat(access-control-prover): 9.4 exact evidence paths from summaries 2026-10-29 18:46:41 +01:00
Marius Ciepluch 06d5363ce2 feat(access-control-prover): 9.3 summary caches and explicit exploration cutoffs 2026-10-29 18:37:06 +01:00
Marius Ciepluch c237626f7a feat(access-control-prover): 9.2 monotone summaries over recursive call components 2026-10-29 18:30:18 +01:00