Marius Ciepluch
1edc4790af
feat(access-control-prover): 13.4 admission measurement
2026-10-30 13:25:34 +01:00
Marius Ciepluch
d063167b28
feat(access-control-prover): 13.3 four-arm development regression
2026-10-30 12:37:19 +01:00
Marius Ciepluch
9c95f842f7
feat(access-control-prover): 12.6 paired scoring and admission report
2026-10-30 10:25:37 +01:00
Marius Ciepluch
494c29182d
feat(access-control-prover): 12.5 admission manifest consumption
2026-10-30 10:13:09 +01:00
Marius Ciepluch
ea33222bf6
feat(access-control-prover): 12.4 four-arm development comparison
2026-10-30 09:44:27 +01:00
Marius Ciepluch
282a085f77
feat(access-control-prover): 12.3 instrument and hard runtime gates
2026-10-30 08:53:05 +01:00
Marius Ciepluch
eb30d0386c
feat(access-control-prover): 12.2 record provenance, stage funnel and judgment transitions
2026-10-30 08:38:58 +01:00
Marius Ciepluch
733e17ed3e
feat(access-control-prover): 12.1 analyzer bundles
2026-10-30 08:38:09 +01:00
Marius Ciepluch
9e0a901ccc
feat(access-control-prover): 13.2 cross-component validation scenarios
2026-10-30 08:19:25 +01:00
Marius Ciepluch
f8e134a159
feat(access-control-prover): 13.1 abstract-domain and metamorphic law validation
2026-10-30 08:09:02 +01:00
Marius Ciepluch
85aa3b1484
feat(access-control-prover): 11.7 first label-blind development acquisition
2026-10-29 21:04:51 +01:00
Marius Ciepluch
acadf04109
feat(access-control-prover): 11.6 migrate the stapler recogniser through the registry
2026-10-29 20:59:37 +01:00
Marius Ciepluch
3f241bc595
feat(access-control-prover): 11.5 acquisition provenance and label-isolated mode
2026-10-29 20:49:39 +01:00
Marius Ciepluch
09c3ffd621
feat(access-control-prover): 11.4 verify and promote proposed target knowledge
2026-10-29 20:34:52 +01:00
Marius Ciepluch
c0e1360149
feat(access-control-prover): 11.3 extract existing target knowledge into candidate records
2026-10-29 20:29:15 +01:00
Marius Ciepluch
c279513def
feat(access-control-prover): 11.2 generic call-site registration strategy
2026-10-29 20:23:50 +01:00
Marius Ciepluch
86709daf2e
feat(access-control-prover): 11.1 entry-recognition strategy registry
2026-10-29 20:19:31 +01:00
Marius Ciepluch
82e4a1ad97
feat(access-control-prover): 10.6 three-way judgments in the prover
2026-10-29 19:34:44 +01:00
Marius Ciepluch
95dfddb018
feat(access-control-prover): 10.5 multi-path aggregation in the opt-in abstract mode
2026-10-29 19:20:24 +01:00
Marius Ciepluch
f700b99637
feat(access-control-prover): 10.4 one judgment per path
2026-10-29 19:17:37 +01:00
Marius Ciepluch
7eb491dc82
feat(access-control-prover): 10.3 authority matching through promoted implications
2026-10-29 19:11:30 +01:00
Marius Ciepluch
cf60e02804
feat(access-control-prover): 10.2 witness kind, scope and resource matching
2026-10-29 19:05:51 +01:00
Marius Ciepluch
8ad304ffeb
feat(access-control-prover): 10.1 abstract dominance relations without prover fallback
2026-10-29 19:01:25 +01:00
Marius Ciepluch
f23d3f986d
feat(access-control-prover): 9.4 exact evidence paths from summaries
2026-10-29 18:46:41 +01:00
Marius Ciepluch
06d5363ce2
feat(access-control-prover): 9.3 summary caches and explicit exploration cutoffs
2026-10-29 18:37:06 +01:00
Marius Ciepluch
c237626f7a
feat(access-control-prover): 9.2 monotone summaries over recursive call components
2026-10-29 18:30:18 +01:00
Marius Ciepluch
fffa3e0002
feat(access-control-prover): 9.1 local function summaries
2026-10-29 18:25:23 +01:00
Marius Ciepluch
2466670ba3
feat(access-control-prover): 8.4 inheritance and base-declaration attachment through repo-defined descendants
2026-10-29 16:10:44 +01:00
Marius Ciepluch
8ef2629e0b
feat(access-control-prover): 8.3 exact, finite-candidate and unresolved call targets
2026-10-29 16:04:51 +01:00
Marius Ciepluch
6f2154fae0
feat(access-control-prover): 8.2 stable declaration identities and per-change symbol index
2026-10-29 15:45:29 +01:00
Marius Ciepluch
9eee4d7f35
feat(access-control-prover): 8.1 capture call receiver and arity evidence in the semantic IR
2026-10-29 15:33:18 +01:00
Marius Ciepluch
03807f4ddd
feat(access-control-prover): task 7.4 - judgment, trace and coverage contracts with abstract state
2026-10-29 15:23:43 +01:00
Marius Ciepluch
2f97fb2693
feat(access-control-prover): 7.3 authority abstract values and promoted implication facts
2026-10-29 15:06:53 +01:00
Marius Ciepluch
351583a04f
feat(access-control-prover): 7.2 resource abstract values and operation-fact fields
2026-10-29 14:48:53 +01:00
Marius Ciepluch
5697a7fe9e
feat(access-control-prover): 7.1 evidence-relation algebra and completeness value
2026-10-29 14:11:13 +01:00
Marius Ciepluch
0d2b4cf15d
docs(spec) access-control-prover: abstract-interpretation amendment -- evidence algebra, stable symbols, label-blind acquisition, admission discipline
2026-10-29 13:31:40 +01:00
Marius Ciepluch
152f405bcf
docs(spec,steering): lift access-control-prover to capability level; engine/target split, pattern discipline, complexity caps, breadth map
2026-10-29 12:27:44 +01:00
Marius Ciepluch
f09dc66592
docs(spec) access-control-prover: design amendment -- resolution, resource-bound guards, programmatic registration
2026-10-29 12:10:37 +01:00
Marius Ciepluch
3de96c88f6
docs(steering): terminology rule -- name the behavior, not the virtue
2026-10-29 11:57:51 +01:00
Marius Ciepluch
bc896d2779
docs(spec) access-control-prover: post-measurement requirements amendment
2026-10-29 11:57:15 +01:00
Marius Ciepluch
37b0a593a7
docs(roadmap): gate 5 decision -- fix trace resolution first, injection spec deferred
2026-10-28 20:12:37 +01:00
Marius Ciepluch
efdb66bc73
measure(ablation) gate 3: miss and false-alarm trace-component taxonomy
2026-10-28 20:06:40 +01:00
Marius Ciepluch
0b1d41d01b
measure(judge) gate 2: zero-shot judge over prover findings
2026-10-28 19:43:59 +01:00
Marius Ciepluch
b247da9e82
chore: add copilot instructions
2026-10-28 18:59:01 +01:00
Marius Ciepluch
a60e9bda9d
measure(search): 2026-10-07 shiftleft sql-vuln pilot records
2026-10-28 18:59:01 +01:00
Marius Ciepluch
fcf05f7755
bench(unseen): p1 pool, draft and bisect freeze artifacts
2026-10-28 18:59:01 +01:00
Marius Ciepluch
c5341d79a2
measure(prover): gate 1 on the 23-repo training pool: recall 65.2% (Wilson 44.9-81.2), 15.0 FA/100, 0 instrument failures; 4/5 on the hunt overlap incl. trigger.dev
2026-10-28 18:59:01 +01:00
Marius Ciepluch and Claude Fable 5.1
03d925fffa
spec/steering: the decision strategy corrected: software features do not decide safety; the trace does, the pool measures and never trains
...
Maintainer's finding of 2026-10-14 recorded in hunter-learning-loop (a dated section that overrides the shape
annotations as the model's input), its design (amendment pointing to the prover's trace) and the steering
overview's current state.
Co-Authored-By: Claude Fable 5.1 <[email protected]
2026-10-14 19:40:12 +02:00
Marius Ciepluch and Claude Fable 5.1
03b114cbeb
feat(prover): delivery D: control flow decides dominance; the trace carries each guard's relation, effect and the operation's control context
...
Opus agent delivery under spec access-control-prover, requirement 10. `semantic/cfg.py` builds a control-flow
graph per function from the syntax tree (if/else, switch arms, loops, try/catch/finally, return, throw, break,
continue, exit, assert) with dominators and a per-line control context, and leaves a function without a graph
rather than a wrong one. `obligations/cfg_dominance.py::CfgDominance` discharges a statement guard only when it
lies on every path to the operation and the operation is unreachable from its failing arm; a predicate whose
result nothing consumes is `value_only` and never discharges; router, decorator and earlier-hop witnesses behave
as before; without a graph the order rule applies and `cfg_unavailable` is recorded. The trace's guards carry
`relation` and `effect`, the trace carries `operation_context`; Java parameter lists carry names only; a
handler-named operation's arguments are the handler's parameters. The checker's default stays order-based.
Smoke on the 23 fix changes: 15 caught, 55 of 93 locations, precision 15 of 15, no failure, no change over
120 s (unchanged from delivery B). Gate: 3575 tests pass; the reserved-repository guard passes on the export.
Co-Authored-By: Claude Fable 5.1 <[email protected]
2026-10-14 19:01:07 +02:00
Marius Ciepluch and Claude Fable 5.1
6c3d4a7d72
spec(access-control-prover): a guard whose passing branch alone holds the operation discharges it (effect branches)
...
Raised by the implementing agent: the design named only exits on the failing arm; if (can(x)) { op(); } is the
common shape and the operation is unreachable from the failing arm there too.
Co-Authored-By: Claude Fable 5.1 <[email protected]
2026-10-14 18:28:10 +02:00
Marius Ciepluch