marius/Open_Ultra_SAST
1
0
Fork 0
mirror of https://github.com/norandom/OpenUltraSAST.git synced 2026-11-13 01:48:17 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,137 Commits 1 Branch 12 Tags
5379b8ae3980b6992c85120c24c64372ea180441
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Marius Ciepluch 5379b8ae39 feat(detection-core): adapt demonstrated proof evidence 2026-11-01 12:38:49 +01:00
Marius Ciepluch 64e44341ee feat(detection-core): bound model execution handoff 2026-11-01 12:18:30 +01:00
Marius Ciepluch 292d4b5557 feat(detection-core): adapt authorization traces 2026-11-01 12:13:20 +01:00
Marius Ciepluch 57802dac7a feat(detection-core): authorize fitted components 2026-11-01 12:03:51 +01:00
Marius Ciepluch e351aca041 feat(detection-core): replay admission evidence 2026-11-01 11:34:23 +01:00
Marius Ciepluch 6a1bc2023a docs(detection-core): add authoritative admission replay 2026-11-01 11:16:38 +01:00
Marius Ciepluch c8ce1c9e63 feat(detection-core): derive authenticated admission metrics 2026-11-01 10:37:37 +01:00
Marius Ciepluch 44516cf29f feat(detection-core): authenticate post-spend case release 2026-11-01 10:18:02 +01:00
Marius Ciepluch 007dd7aa77 docs(detection-core): authenticate post-spend case release 2026-11-01 10:03:58 +01:00
Marius Ciepluch b28045810e feat(detection-core): validate pre-label population spend 2026-11-01 09:20:02 +01:00
Marius Ciepluch 67b3ae62a9 feat(detection-core): validate threshold feasibility 2026-11-01 09:03:44 +01:00
Marius Ciepluch f3adbfe333 feat(detection-core): validate exact admission context 2026-10-31 19:38:01 +01:00
Marius Ciepluch 361c216402 feat(detection-core): validate reviewed admission payloads 2026-10-31 19:08:14 +01:00
Marius Ciepluch a3cea1096c feat(detection-core): add complete measurement records 2026-10-31 18:45:19 +01:00
Marius Ciepluch 9d266b2f11 feat(detection-core): define fixed measurement algebra 2026-10-31 18:26:24 +01:00
Marius Ciepluch 9488a57a1a feat(detection-core): integrate bounded consumer edge 2026-10-31 18:09:35 +01:00
Marius Ciepluch d4fcde615b feat(detection-core): validate differential proof attachment 2026-10-31 17:52:25 +01:00
Marius Ciepluch 2a44ad938c feat(detection-core): derive bounded verdict outputs 2026-10-31 17:38:30 +01:00
Marius Ciepluch a2788d11b0 feat(detection-core): replay model derivation in validation 2026-10-31 17:30:40 +01:00
Marius Ciepluch 8e1ebd4700 feat(detection-core): add closed evidence validation context 2026-10-31 17:23:38 +01:00
Marius Ciepluch d7785ff5d7 feat(detection-core): add semantic shortcut probes 2026-10-31 17:11:07 +01:00
Marius Ciepluch a1800c0c74 feat(detection-core): apply bounded model corroboration 2026-10-31 16:57:11 +01:00
Marius Ciepluch d28998b262 feat(detection-core): preserve model handoff records 2026-10-31 16:49:20 +01:00
Marius Ciepluch 2796647259 feat(detection-core): replay fact-derived relations 2026-10-31 16:33:53 +01:00
Marius Ciepluch 117b5b4bf7 feat(detection-core): apply reviewed fact effects 2026-10-31 16:08:05 +01:00
Marius Ciepluch 087dcc723f feat(detection-core): validate structural matches and matcher lineage 2026-10-31 15:44:48 +01:00
Marius Ciepluch 08b0eeaac2 feat(detection-core): validate reviewed fact packs 2026-10-31 15:28:14 +01:00
Marius Ciepluch 47ecada02d feat(detection-core): stop promotion on stale readiness 2026-10-31 15:11:01 +01:00
Marius Ciepluch f74069a182 feat(detection-core): record ordered readiness evidence 2026-10-31 15:05:37 +01:00
Marius Ciepluch 3e4951fd30 feat(detection-core): derive measured budgets and enforce scope 2026-10-31 15:00:39 +01:00
Marius Ciepluch 85e2a62ed6 feat(detection-core): account for instrument-safe coverage 2026-10-31 14:46:32 +01:00
Marius Ciepluch 4be22046a9 feat(detection-core): add unlike reference family conformance 2026-10-31 14:39:16 +01:00
Marius Ciepluch 741338f207 feat(detection-core): build exact family catalog resolution 2026-10-31 14:32:37 +01:00
Marius Ciepluch 93404c5e1e feat(detection-core): validate closed family declarations 2026-10-31 14:27:18 +01:00
Marius Ciepluch 93aade237e feat(detection-core): bind evidence packets to neutral decisions 2026-10-31 14:18:51 +01:00
Marius Ciepluch 62c87b39ab feat(detection-core): bind lineage to exact influenced artifacts 2026-10-31 14:13:39 +01:00
Marius Ciepluch edd8a7ec87 feat(detection-core): enforce append-only population custody 2026-10-31 14:08:35 +01:00
Marius Ciepluch 7b9c01319b feat(detection-core): validate complete input provenance 2026-10-31 14:00:47 +01:00
Marius Ciepluch 0d606031e6 feat(detection-core): represent family-neutral semantic evidence 2026-10-31 13:55:12 +01:00
Marius Ciepluch 931697ea37 feat(detection-core): build the strict canonical artifact boundary 2026-10-31 13:39:51 +01:00
Marius Ciepluch 1eb9ef11b5 docs(detection-core): approve v2 implementation plan 2026-10-31 12:35:42 +01:00
Marius Ciepluch 2c594b2c27 docs(benchmarks): 8.2 final gated round - dev funnel 11.9->19.2 complete, admission NO-GO #3, arm parked 
Lever: unique-declaration member-call binding (dc28325). Measurement 1: zero movement
on in-family sites (0 unique-name member calls exist there; unresolved mass is framework
callee names). Screen: all 264 admission records byte-identical at dc28325. Measurement 2
(dev pool, single-lever isolation): complete-share 11.9->19.2 (+360478, exact conservation),
recall/location/FA identical, 5 ordinary none->indeterminate. Measurement 3 (ac-admission-3,
fresh freeze, criteria byte-identical): NO-GO #3, same four gates, 0/12 pairs, 264/264
fresh dc28325-stamped records. Stop condition fired: access-control arm parked permanently
(rule-11 fallback). Remaining gap: entry recognition (4/12 zero-recognition; coverage
8/12) and framework operation facts, not call resolution.
 2026-10-31 09:02:59 +01:00
Marius Ciepluch dcdf04bfbc docs(benchmarks): express-pack admission provenance note for the 17 in-flight records 2026-10-31 08:48:25 +01:00
Marius Ciepluch dc2832564a feat(detection-core): unique-declaration member-call binding (8.2 final gated round step 1-2) 
x.method() with a variable receiver binds complete iff exactly one same-name
method declaration exists repository-wide; collisions stay a finite candidate
set (receiver_type_unknown) and module-level functions never bind. Authorized
by maintainer strategy-review 2026-10-31; gated by dev-pool FA non-regression.
 2026-10-31 07:10:36 +01:00
Marius Ciepluch 1481bb33d7 docs(steering): record maintainer strategy-review outcome - one final gated resolution round 2026-10-31 06:50:46 +01:00
Marius Ciepluch 62c8d21667 docs(benchmarks): 8.2 admission gate - recognition doubled, NO-GO #2, stop condition fired 2026-10-30 20:55:38 +01:00
Marius Ciepluch 6024152c48 fix(benchmarks): fact_manifest_ref digests entry-pack JSON symmetrically with disk 2026-10-30 20:45:39 +01:00
Marius Ciepluch a8a28f81f3 feat(detection-core): JS handler extraction for bind(this)/arrow/class-method routes (8.2 part 3); fold in load_pack_file repairing 51971cd import 2026-10-30 20:10:22 +01:00
Marius Ciepluch 51971cda7e feat(detection-core): package-rooted entry packs wired into JS recognition; fact digest covers packs (8.2 part 2) 2026-10-30 19:25:30 +01:00
Marius Ciepluch 1d5a509424 feat(detection-core): recognition target table and first express fact pack (8.2 part 1) 2026-10-30 18:46:19 +01:00
Marius Ciepluch 4a1167dfdd feat(detection-core): 8.1 prover native conformance to core trace/coverage contracts 2026-10-30 18:37:04 +01:00
Marius Ciepluch b5c26f52e8 docs(detection-core): bind integration phase into roadmap and task plan 2026-10-30 18:00:59 +01:00
Marius Ciepluch 1cd6a39aaf docs(detection-core): mark all task groups complete 2026-10-30 17:12:43 +01:00
Marius Ciepluch af400c6be4 feat(detection-core): runner migration onto core contracts, schema validation, E2E 2026-10-30 17:12:33 +01:00
Marius Ciepluch c924a69514 feat(detection-core): fact-pack admission and push-consumer contracts 2026-10-30 17:05:24 +01:00
Marius Ciepluch 43fd59f960 feat(detection-core): anti-shortcut probes and fitted-component admission gate 2026-10-30 16:27:27 +01:00
Marius Ciepluch 46b4579d01 feat(detection-core): generalized admission contract with family-scope reports 2026-10-30 16:22:40 +01:00
Marius Ciepluch eb9fe856f9 feat(detection-core): prover trace/coverage conformance adapters to the core contract 2026-10-30 16:18:22 +01:00
Marius Ciepluch 92fb372498 feat(detection-core): measured per-class budget replacing the static 120s gate 2026-10-30 16:11:37 +01:00
Marius Ciepluch 0b56ad5514 feat(detection-core): foundation contract package (trace, verdict, coverage, provenance) 2026-10-30 16:04:10 +01:00
Marius Ciepluch 839d58e3d3 docs(steering): detection-quality rules and stop conditions after admission NO-GO 2026-10-30 14:48:40 +01:00
Marius Ciepluch 1edc4790af feat(access-control-prover): 13.4 admission measurement 2026-10-30 13:25:34 +01:00
Marius Ciepluch d063167b28 feat(access-control-prover): 13.3 four-arm development regression 2026-10-30 12:37:19 +01:00
Marius Ciepluch 9c95f842f7 feat(access-control-prover): 12.6 paired scoring and admission report 2026-10-30 10:25:37 +01:00
Marius Ciepluch 494c29182d feat(access-control-prover): 12.5 admission manifest consumption 2026-10-30 10:13:09 +01:00
Marius Ciepluch ea33222bf6 feat(access-control-prover): 12.4 four-arm development comparison 2026-10-30 09:44:27 +01:00
Marius Ciepluch 282a085f77 feat(access-control-prover): 12.3 instrument and hard runtime gates 2026-10-30 08:53:05 +01:00
Marius Ciepluch eb30d0386c feat(access-control-prover): 12.2 record provenance, stage funnel and judgment transitions 2026-10-30 08:38:58 +01:00
Marius Ciepluch 733e17ed3e feat(access-control-prover): 12.1 analyzer bundles 2026-10-30 08:38:09 +01:00
Marius Ciepluch 9e0a901ccc feat(access-control-prover): 13.2 cross-component validation scenarios 2026-10-30 08:19:25 +01:00
Marius Ciepluch f8e134a159 feat(access-control-prover): 13.1 abstract-domain and metamorphic law validation 2026-10-30 08:09:02 +01:00
Marius Ciepluch 85aa3b1484 feat(access-control-prover): 11.7 first label-blind development acquisition 2026-10-29 21:04:51 +01:00
Marius Ciepluch acadf04109 feat(access-control-prover): 11.6 migrate the stapler recogniser through the registry 2026-10-29 20:59:37 +01:00
Marius Ciepluch 3f241bc595 feat(access-control-prover): 11.5 acquisition provenance and label-isolated mode 2026-10-29 20:49:39 +01:00
Marius Ciepluch 09c3ffd621 feat(access-control-prover): 11.4 verify and promote proposed target knowledge 2026-10-29 20:34:52 +01:00
Marius Ciepluch c0e1360149 feat(access-control-prover): 11.3 extract existing target knowledge into candidate records 2026-10-29 20:29:15 +01:00
Marius Ciepluch c279513def feat(access-control-prover): 11.2 generic call-site registration strategy 2026-10-29 20:23:50 +01:00
Marius Ciepluch 86709daf2e feat(access-control-prover): 11.1 entry-recognition strategy registry 2026-10-29 20:19:31 +01:00
Marius Ciepluch 82e4a1ad97 feat(access-control-prover): 10.6 three-way judgments in the prover 2026-10-29 19:34:44 +01:00
Marius Ciepluch 95dfddb018 feat(access-control-prover): 10.5 multi-path aggregation in the opt-in abstract mode 2026-10-29 19:20:24 +01:00
Marius Ciepluch f700b99637 feat(access-control-prover): 10.4 one judgment per path 2026-10-29 19:17:37 +01:00
Marius Ciepluch 7eb491dc82 feat(access-control-prover): 10.3 authority matching through promoted implications 2026-10-29 19:11:30 +01:00
Marius Ciepluch cf60e02804 feat(access-control-prover): 10.2 witness kind, scope and resource matching 2026-10-29 19:05:51 +01:00
Marius Ciepluch 8ad304ffeb feat(access-control-prover): 10.1 abstract dominance relations without prover fallback 2026-10-29 19:01:25 +01:00
Marius Ciepluch f23d3f986d feat(access-control-prover): 9.4 exact evidence paths from summaries 2026-10-29 18:46:41 +01:00
Marius Ciepluch 06d5363ce2 feat(access-control-prover): 9.3 summary caches and explicit exploration cutoffs 2026-10-29 18:37:06 +01:00
Marius Ciepluch c237626f7a feat(access-control-prover): 9.2 monotone summaries over recursive call components 2026-10-29 18:30:18 +01:00
Marius Ciepluch fffa3e0002 feat(access-control-prover): 9.1 local function summaries 2026-10-29 18:25:23 +01:00
Marius Ciepluch 2466670ba3 feat(access-control-prover): 8.4 inheritance and base-declaration attachment through repo-defined descendants 2026-10-29 16:10:44 +01:00
Marius Ciepluch 8ef2629e0b feat(access-control-prover): 8.3 exact, finite-candidate and unresolved call targets 2026-10-29 16:04:51 +01:00
Marius Ciepluch 6f2154fae0 feat(access-control-prover): 8.2 stable declaration identities and per-change symbol index 2026-10-29 15:45:29 +01:00
Marius Ciepluch 9eee4d7f35 feat(access-control-prover): 8.1 capture call receiver and arity evidence in the semantic IR 2026-10-29 15:33:18 +01:00
Marius Ciepluch 03807f4ddd feat(access-control-prover): task 7.4 - judgment, trace and coverage contracts with abstract state 2026-10-29 15:23:43 +01:00
Marius Ciepluch 2f97fb2693 feat(access-control-prover): 7.3 authority abstract values and promoted implication facts 2026-10-29 15:06:53 +01:00
Marius Ciepluch 351583a04f feat(access-control-prover): 7.2 resource abstract values and operation-fact fields 2026-10-29 14:48:53 +01:00
Marius Ciepluch 5697a7fe9e feat(access-control-prover): 7.1 evidence-relation algebra and completeness value 2026-10-29 14:11:13 +01:00
Marius Ciepluch 0d2b4cf15d docs(spec) access-control-prover: abstract-interpretation amendment -- evidence algebra, stable symbols, label-blind acquisition, admission discipline 2026-10-29 13:31:40 +01:00
Marius Ciepluch 152f405bcf docs(spec,steering): lift access-control-prover to capability level; engine/target split, pattern discipline, complexity caps, breadth map 2026-10-29 12:27:44 +01:00
Marius Ciepluch f09dc66592 docs(spec) access-control-prover: design amendment -- resolution, resource-bound guards, programmatic registration 2026-10-29 12:10:37 +01:00
Marius Ciepluch 3de96c88f6 docs(steering): terminology rule -- name the behavior, not the virtue 2026-10-29 11:57:51 +01:00