Commit Graph

Select branches

Hide Pull Requests

main

archive/engine-change-scoped-evidence-pass

archive/engine-typescript

archive/fix-mechanisms

archive/trained-classifier

archive/unseen-eval

v0.1.0

v1.0.0

v1.1.0

v1.2.0-alpha.1

v2.0.0

v2.0.1

v2.1.0-alpha.1

Mono Color

• 27f9ec6a92 docs(pair-corpus-honesty): close the spec; escalations resolved, roadmap carries the measured state Marius CiepluchandClaude Fable 5.1 2026-09-05 10:38:50 +02:00
• 3c36f13e03 feat(pair-corpus-honesty): LLM-generated Real-Vuln repos and unlicensed agent fixes as pointer pairs Marius CiepluchandClaude Fable 5.1 2026-09-05 10:37:53 +02:00
• 4102404442 feat(pair-corpus-honesty): score non-vendored pointer pairs through a local cache Marius CiepluchandClaude Fable 5.1 2026-09-05 10:17:50 +02:00
• 7d238f2400 docs(specs): kick off corpus-seeded-mechanisms and reachability-flow-model (unapproved) Marius CiepluchandClaude Fable 5.1 2026-09-05 09:55:35 +02:00
• 3eba6e10a0 docs(pair-corpus-honesty): spec, review record, roadmap; close real-world-vfc-slice as superseded Marius CiepluchandClaude Fable 5.1 2026-09-05 09:55:35 +02:00
• 25f1512eb9 feat(pair-corpus-honesty): profile gate scores only seeded and reviewed pairs Marius CiepluchandClaude Fable 5.1 2026-09-05 09:55:18 +02:00
• b1c5f36076 feat(pair-corpus-honesty): review tiers on every pair, agent-vfc loads at tier title Marius CiepluchandClaude Fable 5.1 2026-09-05 09:55:18 +02:00
• 9e7aef6a6b feat(pair-corpus-honesty): reject improve rounds that regress any provenance profile on holdout Marius CiepluchandClaude Fable 5.1 2026-09-05 09:28:00 +02:00
• 25fa7aa7e1 feat(pair-corpus-honesty): deterministic provenance fingerprint at scan time Marius CiepluchandClaude Fable 5.1 2026-09-05 09:27:50 +02:00
• c0b9e41000 feat(pair-corpus-honesty): function-scoped honest scorer with mechanisms and loss counters Marius CiepluchandClaude Fable 5.1 2026-09-05 09:27:40 +02:00
• 8ab4207618 feat(pair-corpus-honesty): add vibe-py, vfc-js and agent-vfc slices with mechanism vocabulary Marius CiepluchandClaude Fable 5.1 2026-09-05 09:27:22 +02:00
• c3e841003c fix(pair-corpus-honesty): re-harvest curl/OpenSSL excerpts, restore Juliet fixtures Marius CiepluchandClaude Fable 5.1 2026-09-05 09:27:03 +02:00
• 071dea4712 feat(pair-corpus-honesty): shared function naming, harvest library, catalog generator Marius CiepluchandClaude Fable 5.1 2026-09-05 09:26:51 +02:00
• 0116f9bea6 feat(real-world-vfc-slice): add labeled OpenSSL/Firefox/Chromium/curl pair corpus Marius Ciepluch 2026-09-04 16:45:38 +02:00
• e9f185da59 feat(tree-sitter-overlay-extra): parse JS/C/Java overlay via optional extra Marius Ciepluch 2026-09-04 15:07:35 +02:00
• 7d3b0eadbe feat: load OpenRouter settings from a local .env Marius Ciepluch 2026-09-04 14:06:18 +02:00
• 1ae41eea19 feat(propose-adjudicate-prove): overlay adjudicates inventory before prove Marius Ciepluch 2026-09-04 13:57:33 +02:00
• 32aa92191a chore(release): 1.1.0 v1.1.0 Marius Ciepluch 2026-09-04 12:00:15 +02:00
• ac3da41c95 feat(three-stage-scan): prove split-sink triggerable in sandbox Marius Ciepluch 2026-09-04 11:54:01 +02:00
• 9af356797f feat(three-stage-scan): gate stage-2 maps against split-sink ranking Marius Ciepluch 2026-09-04 11:53:06 +02:00
• 7398063b79 feat(three-stage-scan): add aliased-sink mutation the regex scan misses Marius Ciepluch 2026-09-04 11:50:44 +02:00
• fe300e6352 feat(three-stage-scan): add split-sink fixtures the regex scan misses Marius Ciepluch 2026-09-04 11:49:44 +02:00
• 818a0b10d3 feat(three-stage-scan): report map and honor fail-on worth-fixing Marius Ciepluch 2026-09-04 00:18:33 +02:00
• a916e2d173 feat(three-stage-scan): attach tool hunter to map hotspots Marius Ciepluch 2026-09-04 00:04:36 +02:00
• 2efbbb8024 feat(three-stage-scan): run or skip deep regression with visible degradation Marius Ciepluch 2026-09-03 23:43:15 +02:00
• 803312e75b feat(three-stage-scan): run complexity map on standard scans Marius Ciepluch 2026-09-03 23:26:54 +02:00
• 66d985e9e6 feat(three-stage-scan): keep quick as stage-1 inventory Marius Ciepluch 2026-09-03 23:14:00 +02:00
• 331b62f1c1 feat(three-stage-scan): map sandbox outcomes to worth-fixing verdicts Marius Ciepluch 2026-09-03 22:59:01 +02:00
• 62c7990e49 feat(three-stage-scan): add language recipes with inconclusive fallback Marius Ciepluch 2026-09-03 22:48:10 +02:00
• 7a584d4578 feat(three-stage-scan): select bounded regress candidates with sev-5 extras Marius Ciepluch 2026-09-03 22:36:02 +02:00
• eb87ef85ec feat(three-stage-scan): reject unsafe regression snippets before execution Marius Ciepluch 2026-09-03 22:12:45 +02:00
• f78ea55e5d feat(three-stage-scan): add Docker CLI sandbox runner with isolation flags Marius Ciepluch 2026-09-03 21:56:02 +02:00
• 5b7e58ea3a feat(three-stage-scan): add docker sandbox availability probe Marius Ciepluch 2026-09-03 21:29:38 +02:00
• b34a75a821 feat(three-stage-scan): add tool-using hunter that records suspicion only Marius Ciepluch 2026-09-03 21:18:22 +02:00
• 90e3b91cf8 feat(three-stage-scan): add path-clamped hunter read grep and refs Marius Ciepluch 2026-09-03 21:01:57 +02:00
• ad16e22c85 feat(three-stage-scan): overlay complexity ledger without hiding sev-5 Marius Ciepluch 2026-09-03 20:48:03 +02:00
• 8d5599ae65 feat(three-stage-scan): attach test-gap hints to hotspots Marius Ciepluch 2026-09-03 20:33:48 +02:00
• b05fbbc3a5 feat(three-stage-scan): emit ordered complexity map artifact Marius Ciepluch 2026-09-03 20:16:23 +02:00
• 3d643040bd feat(three-stage-scan): compute complexity signals for hotspot ranking Marius Ciepluch 2026-09-03 20:05:13 +02:00
• c5a80c2817 feat(three-stage-scan): add fail-on worth-fixing Marius Ciepluch 2026-09-03 19:44:04 +02:00
• 926c8c273e feat(three-stage-scan): add complexity and regression config caps Marius Ciepluch 2026-09-03 19:29:54 +02:00
• 723e3a76cf docs(three-stage-scan): add approved three-stage scan spec Marius Ciepluch 2026-09-03 19:19:58 +02:00
• 6fdd9b3aba feat(three-stage-scan): encode stage plan and mode-to-stage table Marius Ciepluch 2026-09-03 19:19:50 +02:00
• 4f9026167d chore(release): 1.0.0 v1.0.0 Marius CiepluchandClaude Opus 4.8 2026-06-22 20:29:58 +02:00
• b5e40318db feat(hardening): Phase 15 — redaction, retry/backoff, budgets, threat-model docs Marius CiepluchandClaude Opus 4.8 2026-06-22 20:00:42 +02:00
• 3fd0057e5f feat(skills): Phase 14 — Trail of Bits skill index + router Marius CiepluchandClaude Opus 4.8 2026-06-22 19:51:04 +02:00
• 9c917dd6aa feat(mcp): Phase 12 — narrow MCP server + ousast mcp Marius CiepluchandClaude Opus 4.8 2026-06-22 19:42:01 +02:00
• 867bd536a2 feat(fusion): Phase 13 — two-panel fusion adjudication Marius CiepluchandClaude Opus 4.8 2026-06-22 18:57:03 +02:00
• b9caeeb835 feat(slots): Phase 3 task 6.3 — model-disabled, slot-contracted deterministic stages Marius CiepluchandClaude Opus 4.8 2026-06-22 18:39:09 +02:00
• bebfc72cf7 test(pipeline): Phase 4 task 9 — scan-pipeline integrity & serialization Marius CiepluchandClaude Opus 4.8 2026-06-22 18:20:57 +02:00
• e255eb264f feat(harnessx): configurable provider + per-task budget caps Marius CiepluchandClaude Opus 4.8 2026-06-22 17:59:44 +02:00
• 760df7c809 feat(cli): add ousast improve — run the self-improvement loop from the CLI Marius CiepluchandClaude Opus 4.8 2026-06-22 17:36:58 +02:00
• 649bd42fc3 feat(gate): Phase 4 task 8 — lock the detection gate into CI Marius CiepluchandClaude Opus 4.8 2026-06-22 17:13:02 +02:00
• 6e87a58465 feat(improve): Phase 3 task 7 — bounded, gated self-improvement loop Marius CiepluchandClaude Opus 4.8 2026-06-22 16:52:37 +02:00
• ef59c0ae3d feat(harnessx): Phase 3 task 6 — hunter sub-harness + llm-judge verifier + fallback Marius CiepluchandClaude Opus 4.8 2026-06-22 16:29:52 +02:00
• 5e206df166 feat(harnessx): Phase 3 task 5.2 — SHA-pinned optional extra + capability guard Marius CiepluchandClaude Opus 4.8 2026-06-22 16:08:43 +02:00
• 97da477424 ci: retry dagger pipeline on transient registry/image-pull failures Marius CiepluchandClaude Opus 4.8 2026-06-22 16:02:50 +02:00
• 6aa5a1bc96 docs(spec): Phase 3 task 5.1 — HarnessX dependency audit + DocuHarnessX blueprint Marius CiepluchandClaude Opus 4.8 2026-06-22 15:58:30 +02:00
• 2d7ef48e52 feat(benchmark): Phase 2 (task 4) — actionable per-rule signals, ledger, FP knob Marius CiepluchandClaude Opus 4.8 2026-06-22 15:41:17 +02:00
• 444d8c9490 feat(ruleset): Phase 2 (task 3) — rules as governed data, severity from policy Marius CiepluchandClaude Opus 4.8 2026-06-22 15:27:16 +02:00
• fb7594a3ed ci: harden flaky dagger job; docs: document Phase 1 project scores Marius CiepluchandClaude Opus 4.8 2026-06-22 13:25:22 +02:00
• ae365f6cb7 feat(governance): Phase 1 — CWE policy store + project score (zero-dep) Marius CiepluchandClaude Opus 4.8 2026-06-22 12:31:35 +02:00
• 9b399fdc60 docs(spec): kick off harnessx-self-improving-rulesets Kiro spec Marius CiepluchandClaude Opus 4.8 2026-06-22 12:07:54 +02:00
• 0d24033f32 docs: humanize README and code comments Marius Ciepluch 2026-06-21 21:02:18 +02:00
• 0c0137e591 ci: upload only wheel and sdist in releases Marius CiepluchandClaude Opus 4.8 2026-06-21 20:50:34 +02:00
• 9c4af4f546 feat(calibration): automatic in-pipeline false-positive feedback v0.1.0 Marius CiepluchandClaude Opus 4.8 2026-06-21 20:44:08 +02:00
• d9eff9aade docs: clarify CLI/OpenCode usage and that OpenCode steers the loop Marius CiepluchandClaude Opus 4.8 2026-06-21 20:33:14 +02:00
• 8b8d1dd978 docs: document benchmarks, opencode/fusion/ultra, FP/FN loop, HarnessX cycle Marius CiepluchandClaude Opus 4.8 2026-06-21 20:25:17 +02:00
• 6699f1f8f9 chore: add kiro spec-driven tooling and steering docs Marius CiepluchandClaude Opus 4.8 2026-06-21 14:28:19 +02:00
• 8fe8911020 ci: exclude benchmark fixtures from ruff Marius CiepluchandClaude Opus 4.8 2026-06-21 14:17:22 +02:00
• cf9f945992 feat(detection): language-scoped rules + multi-language benchmark corpora Marius CiepluchandClaude Opus 4.8 2026-06-21 11:49:31 +02:00
• be65aed96e feat(hunter): add standard-mode scheduling Marius Ciepluch 2026-06-18 10:59:25 +02:00
• cad70721cb feat(reports): add SARIF manifest artifacts Marius Ciepluch 2026-06-18 10:16:25 +02:00
• 1e6c1f4436 ci: add quality gates and release workflows Marius Ciepluch 2026-06-18 10:06:21 +02:00
• 5519413c82 feat(verification): add evidence ladder verifier Marius Ciepluch 2026-06-18 09:59:28 +02:00
• f8c690999a feat(harness): add runtime and reachability mapping Marius Ciepluch 2026-06-18 07:57:06 +02:00
• 33757db14a feat(opencode): add OpenUltraSAST steering skills Marius Ciepluch 2026-06-17 21:16:20 +02:00
• e7df721d16 feat(scan): add initial SAST pipeline Marius Ciepluch 2026-06-17 21:13:51 +02:00
• 43a41b5e78 docs(spec): add OpenRouter SAST harness spec Marius Ciepluch 2026-06-17 19:39:58 +02:00