Commit Graph

Select branches

Hide Pull Requests

main

archive/engine-change-scoped-evidence-pass

archive/engine-typescript

archive/fix-mechanisms

archive/trained-classifier

archive/unseen-eval

v0.1.0

v1.0.0

v1.1.0

v1.2.0-alpha.1

v2.0.0

v2.0.1

Mono Color

• b1024b8daa ax: verify and probe tasks carry the search-verify/search-probe name prefixes [skip ci] Marius CiepluchandClaude Fable 5.1 2026-10-06 08:20:40 +02:00
• aebc834667 merge(search-with-proof): archive, text replies, transport retries [skip ci] Marius CiepluchandClaude Fable 5.1 2026-10-06 08:18:34 +02:00
• 72ab4c8925 search-with-proof: 1 GiB spooled verifier archive, tolerant text replies, transport retries Marius CiepluchandClaude Fable 5.1 2026-10-06 08:18:34 +02:00
• dae05a7c1a merge(search-with-proof): demo startup configuration and loop fixes [skip ci] Marius CiepluchandClaude Fable 5.1 2026-10-06 00:25:57 +02:00
• 30cbc1ac76 Merge branch 'main' into search-with-proof Marius Ciepluch 2026-10-06 00:24:26 +02:00
• ceeaa66717 search-with-proof: startup environment and data files, dead-end dedupe, task_spend continues Marius CiepluchandClaude Fable 5.1 2026-10-06 00:24:26 +02:00
• 263be30979 search-with-proof 3.2: oracle probe passes on kube-ax in task-boundary mode [skip ci] Marius CiepluchandClaude Fable 5.1 2026-10-06 00:14:51 +02:00
• 81cb02cd35 merge(search-with-proof): build recipes and stderr-bearing failures [skip ci] Marius CiepluchandClaude Fable 5.1 2026-10-05 21:39:39 +02:00
• 67eb629c16 Merge branch 'main' into search-with-proof Marius Ciepluch 2026-10-05 21:37:56 +02:00
• 3866e2771b search-with-proof: ecosystem-aware build recipes and stderr in build failures Marius CiepluchandClaude Fable 5.1 2026-10-05 21:37:56 +02:00
• 13a20008e7 merge(probe-task-boundary): probe runs oracle self-tests in task-boundary mode [skip ci] Marius CiepluchandClaude Fable 5.1 2026-10-05 21:17:00 +02:00
• 007415c151 Merge branch 'main' into probe-task-boundary Marius Ciepluch 2026-10-05 21:14:55 +02:00
• 2d3c94e33b search probe: task-boundary mode runs the oracle self-tests in-process Marius CiepluchandClaude Fable 5.1 2026-10-05 21:11:26 +02:00
• a40122d1b5 merge(search-with-proof): oracle mapping, build memory, tolerant tool calls [skip ci] Marius CiepluchandClaude Fable 5.1 2026-10-05 21:09:08 +02:00
• bf243e6680 search-with-proof: family-to-oracle mapping, build memory, tolerant tool calls Marius CiepluchandClaude Fable 5.1 2026-10-05 21:07:58 +02:00
• 0750c6fdd7 merge(search-with-proof): named exhaustion limits and partial evidence [skip ci] Marius CiepluchandClaude Fable 5.1 2026-10-05 21:01:31 +02:00
• c190d34f60 Merge branch 'main' into search-with-proof Marius Ciepluch 2026-10-05 20:58:10 +02:00
• c33b053b15 search-with-proof: name the exhausted limit, keep partial evidence, tighter reservation Marius CiepluchandClaude Fable 5.1 2026-10-05 20:57:56 +02:00
• 35f942f4c8 images: pin task base b696c08 (base and browser) by digest Marius CiepluchandClaude Fable 5.1 2026-10-05 20:50:16 +02:00
• b696c08446 merge(image-layering): shared task base and code-last layering [skip ci] Marius Ciepluch 2026-10-05 20:44:02 +02:00
• 94d6a7dd11 search executor: NPROC bound counts threads, as the kernel does [skip ci] Marius CiepluchandClaude Fable 5.1 2026-10-05 20:44:02 +02:00
• 1b9d1ca85c images: shared task base, code-last layers, no per-push rebuilds [skip ci] Marius CiepluchandClaude Fable 5.1 2026-10-05 20:40:13 +02:00
• 509c6562fe search budget: recalibrated caps after the first measured searches [skip ci] Marius CiepluchandClaude Fable 5.1 2026-10-05 20:35:27 +02:00
• b44fb56d8d ax batch: workload-kind prefixes in task names (pass-, replay-) [skip ci] Marius CiepluchandClaude Fable 5.1 2026-10-05 20:33:35 +02:00
• daf95b16a1 merge(search-with-proof): cluster-unavailable handling [skip ci] Marius Ciepluch 2026-10-05 20:27:01 +02:00
• 4be2063d40 search-with-proof: cluster-unavailable detection, kept messages, run-level abort Marius CiepluchandClaude Fable 5.1 2026-10-05 20:26:37 +02:00
• 7fb061fb69 merge(search-with-proof): search contracts Marius CiepluchandClaude Opus 5.5 2026-10-05 19:18:12 +02:00
• e39a4882b0 search-with-proof: bootstrap intent, real reason/explore contracts, visible refusals Marius CiepluchandClaude Opus 5.5 2026-10-05 19:18:12 +02:00
• 0fb098c478 merge(search-with-proof): pilot driver Marius CiepluchandClaude Opus 5.5 2026-10-05 18:58:24 +02:00
• 87b82564b4 search-with-proof: pilot driver (6.2) Marius CiepluchandClaude Opus 5.5 2026-10-05 18:58:24 +02:00
• 89516d4000 ax batch: fast capacity retries in the first minute (golden-snapshot window) Marius CiepluchandClaude Opus 5.5 2026-10-05 18:07:47 +02:00
• 7c1af9f518 merge(search-with-proof): diagnosable failures and dispatch fixes Marius CiepluchandClaude Opus 5.5 2026-10-05 17:58:27 +02:00
• 941fbb5fb0 search-with-proof: diagnosable failures, pip install race, no duplicate tasks Marius CiepluchandClaude Opus 5.5 2026-10-05 17:58:27 +02:00
• cf10f38589 search-task image: clear the base image GPG_KEY fingerprint Marius CiepluchandClaude Opus 5.5 2026-10-05 17:42:03 +02:00
• 75f2134eb4 search executor: name the credential-like variables it refuses (names only) Marius CiepluchandClaude Opus 5.5 2026-10-05 17:36:12 +02:00
• 1bfb729422 merge(search-with-proof): executor smoke and pilot selection Marius CiepluchandClaude Opus 5.5 2026-10-05 17:26:06 +02:00
• 1d67412e2b search-with-proof: executor smoke driver and pilot selection (6.1) Marius CiepluchandClaude Opus 5.5 2026-10-05 17:26:06 +02:00
• ccd64757c8 merge(search-with-proof): trust-domain split and operator constraints Marius CiepluchandClaude Opus 5.5 2026-10-05 17:12:46 +02:00
• 85f4f0b3d4 search-with-proof: declarative demos, brain/executor split, kube-ax constraints Marius CiepluchandClaude Opus 5.5 2026-10-05 17:12:46 +02:00
• 721c4b0997 spec(search-with-proof): separate trust domains (brain with key, executor with repo code) Marius CiepluchandClaude Opus 5.5 2026-10-05 16:26:19 +02:00
• 5e03bdf07f spec(search-with-proof): gVisor is the cluster boundary; declarative demos; capped rotated key Marius CiepluchandClaude Opus 5.5 2026-10-05 16:20:26 +02:00
• e5ce630edc merge(search-with-proof): gVisor isolation mode Marius CiepluchandClaude Opus 5.5 2026-10-05 15:00:25 +02:00
• 03857c9bec search-with-proof: root-no-userns isolation mode for gVisor Marius CiepluchandClaude Opus 5.5 2026-10-05 15:00:25 +02:00
• e6871fef9a merge(search-with-proof): probe harness and agent worker Marius CiepluchandClaude Opus 5.5 2026-10-05 14:45:48 +02:00
• 0f74767db9 search-with-proof: probe harness (3.2) and agent worker (group 5) Marius CiepluchandClaude Opus 5.5 2026-10-05 14:45:48 +02:00
• a17a6afaf8 merge(search-with-proof): group 4 and the search-task image Marius CiepluchandClaude Opus 5.5 2026-10-05 14:26:43 +02:00
• 4b38239f68 search-with-proof group 4 + image: board, spend reservation, coordinator, search-task image Marius CiepluchandClaude Opus 5.5 2026-10-05 14:26:43 +02:00
• 6394ee473d merge(search-with-proof): group 2 verifier and oracles Marius CiepluchandClaude Opus 5.5 2026-10-05 14:09:48 +02:00
• 742469d671 search-with-proof group 2: verifier with owned oracles and differential Marius CiepluchandClaude Opus 5.5 2026-10-05 14:09:48 +02:00
• c74b5eaeb0 spec(learned-decision-engine): engine becomes triage where a demonstration oracle exists Marius CiepluchandClaude Opus 5.5 2026-10-05 13:45:10 +02:00
• 9d70ef9257 spec(search-with-proof): requirements and design approved; tasks for probe and pilot Marius CiepluchandClaude Opus 5.5 2026-10-05 13:35:55 +02:00
• c3820e184c spec(search-with-proof): requirements amended after two Codex reviews; design v2 Marius CiepluchandClaude Opus 5.5 2026-10-05 13:35:18 +02:00
• 8bbea86cf8 spec(search-with-proof): requirements approved Marius CiepluchandClaude Opus 5.5 2026-10-05 12:01:39 +02:00
• 45e641f25c spec(search-with-proof): brief and requirements for review Marius CiepluchandClaude Opus 5.5 2026-10-05 12:01:07 +02:00
• 285bf58f78 unseen-eval: sourcing memory -- compact journal records, bounded caches, streamed history (4.6 GB -> 107 MB RSS) archive/unseen-eval Marius CiepluchandClaude Opus 5.5 2026-10-05 09:18:54 +02:00
• 6d27c9bfcf unseen-eval: calibrated replay deadline + native agreement check, docker-lane diagnostics, proof 4.4 record; engine runner cleans up fetched sources Marius CiepluchandClaude Opus 5.5 2026-10-05 08:14:57 +02:00
• cabdf81ece learn: trained classifier arm (logistic and gradient boosting on embeddings + signals, per-fold leak screening); fit-eval record archive/trained-classifier Marius CiepluchandClaude Opus 5.5 2026-10-05 07:47:42 +02:00
• 5dc86c2f3f merge(unseen-eval): groups 1-2 and 4-6 -- used set, sourcing with resume, AX batch dispatcher, replay task, scorer Marius CiepluchandClaude Opus 5.5 2026-10-04 20:28:15 +02:00
• c6e87a8517 unseen-eval groups 4-6: generic AX batch dispatcher (engine_trace on it), replay task and image stage, scorer with adoption gate Marius CiepluchandClaude Opus 5.5 2026-10-04 20:19:14 +02:00
• 48ae918dec unseen-eval group 2 (2.1-2.4): advisory sourcing, vulnerability-introducing ranges, ordinary-commit draw, draft manifest and slices; journal with resume Marius CiepluchandClaude Opus 5.5 2026-10-04 19:51:30 +02:00
• 8213d3baad unseen-eval group 1: used set (1,029 repositories, every source read), extended guard, usage ledger; record 01 Marius CiepluchandClaude Opus 5.5 2026-10-04 19:17:35 +02:00
• 60512fff88 spec(unseen-repo-evaluation): design and tasks approved; run through the baseline Marius CiepluchandClaude Opus 5.5 2026-10-04 18:48:13 +02:00
• d4467f4236 steering: roadmap re-centred on generalisation to unseen repositories (G0-G5); specs updated; unseen-repo-evaluation brief and requirements (approved) Marius CiepluchandClaude Opus 5.5 2026-10-04 17:34:57 +02:00
• ee422b63e0 spec(learned-decision-engine): fix-mechanisms plan approved -- discharge facts first, >=2 proposing repos, per language Marius CiepluchandClaude Opus 5.5 2026-10-04 17:25:35 +02:00
• 02b2cbf99c engine: retry a pin once when its AX sandbox dies, then hand it to the VM lane Marius CiepluchandClaude Opus 5.5 2026-10-04 17:14:20 +02:00
• eaf436d3db merge(engine): one resident Joern session per pin; ActiveProcessorCount=2 on the cluster Marius CiepluchandClaude Opus 5.5 2026-10-04 16:50:21 +02:00
• 187e3c14c5 engine: one resident Joern session per pin (frontend + one query JVM instead of four), ActiveProcessorCount=2 on the cluster Marius CiepluchandClaude Opus 5.5 2026-10-04 16:41:22 +02:00
• b715ff7d0e engine: stage presigned objects as .dat; task entry reports the failing step and HTTP status Marius CiepluchandClaude Opus 5.5 2026-10-04 16:18:01 +02:00
• 035710493c merge(engine): AX-task executor for the kube-ax cluster Marius CiepluchandClaude Opus 5.5 2026-10-04 15:30:26 +02:00
• abca40b072 engine: AX-task executor for kube-ax (engine-task image FROM ax-task-runner v0.3.1, presigned HTTPS I/O, ousast-engine- names, 60 s egress-ready retry, 1.7 GB cluster heap, VM OOM fallback) Marius CiepluchandClaude Opus 5.5 2026-10-04 15:22:44 +02:00
• afff080874 merge(engine): Kubernetes engine workers (Deployment from the image, S3 queue); leak-audit records carry digests, not repository names Marius CiepluchandClaude Opus 5.5 2026-10-04 14:39:36 +02:00
• e174c06ee7 engine: worker Deployment from the image (S3 queue with leases, dispatcher --executor queue, engine-image workflow, scoped RustFS policy); merge main Marius CiepluchandClaude Opus 5.5 2026-10-04 14:23:04 +02:00
• 8d6921d2df spec(learned-decision-engine): fix-mechanisms plan for review -- learn discharge facts from 710 fix diffs, admitted by held-out pair separation Marius CiepluchandClaude Opus 5.5 2026-10-04 14:11:41 +02:00
• 298bd17780 learn: Joern-slice leak audit on the completed trace run -- no leak; paths differ between pair sides in 2 of 105 both-asked pairs Marius CiepluchandClaude Opus 5.5 2026-10-04 14:08:26 +02:00
• 6a2138fbef merge(ops): lean kind profile -- observability off by default on the server VM Marius CiepluchandClaude Opus 5.5 2026-10-04 12:13:32 +02:00
• 35ded61c85 merge(learn): harvest 3 -- 251 real fix pairs (advisory-fixes-3); complete pairs in memory 459 -> 710 Marius CiepluchandClaude Opus 5.5 2026-10-04 12:06:16 +02:00
• 0d78d33fd2 ops(kind): skip Substrate's observability stack by default (930 MiB of 2.3 GB); opt in with OUSAST_KIND_OBSERVABILITY=1 Marius CiepluchandClaude Opus 5.5 2026-10-04 12:03:19 +02:00
• cbc252553a learn: 251 more advisory-fix pairs whose function survives the fix (advisory-fixes-3) Marius CiepluchandClaude Opus 5.5 2026-10-04 11:57:34 +02:00
• e555ba68dc Merge branch 'joern-leak-audit' Marius Ciepluch 2026-10-04 10:53:23 +02:00
• 231dca1f04 merge: taint-query null-guard fix and trace-enabled engine runner Marius CiepluchandClaude Opus 5.5 2026-10-04 10:53:23 +02:00
• 2e6ba93aee learn: Kubernetes executor for the engine trace runner (Jobs, presigned source/result via the S3 store, mixed lanes, --k8s-check) Marius CiepluchandClaude Opus 5.5 2026-10-04 10:35:59 +02:00
• e13ce35a75 engine: admit TypeScript (jssrc2cpg, JavaScript taint specs via one alias), .mts/.cts, mixed JS/TS builds one CPG archive/engine-typescript Marius CiepluchandClaude Opus 5.5 2026-10-04 10:34:50 +02:00
• 431ab1e738 learn: engine_trace materialises catalog pairs without commits (dedented parseable excerpts, in-function scope), protects labelled files in exports, scopes large repos, records frontend diagnostics, retries the jssrc2cpg engine bug, writes progress.json Marius CiepluchandClaude Opus 5.5 2026-10-04 08:19:46 +02:00
• 94ec4cef16 learn: Joern-slice leak audit (has-path, steps, sanitizer, guard, sink, asked; both-asked pairs; per-corpus AUC) Marius CiepluchandClaude Opus 5.5 2026-10-03 23:03:52 +02:00
• e492ebd16e fix(cpg): null-guard method access in the query scripts -- a class-level call aborted the whole taint batch Marius CiepluchandClaude Opus 5.5 2026-10-03 22:53:28 +02:00
• 41f56170bb learn: engine_trace worker renders request params through the production _render; records query stderr Marius CiepluchandClaude Opus 5.5 2026-10-03 22:41:54 +02:00
• fe2a424018 learn: engine_trace fetches real source at the pinned commit, 2.5 GB JVM heap, one CPG per language Marius CiepluchandClaude Opus 5.5 2026-10-03 22:36:23 +02:00
• 36a3355b81 learn: engine_trace guard judges frontends by their CPG, query steps by time and question markers Marius CiepluchandClaude Opus 5.5 2026-10-03 19:22:37 +02:00
• 34d00391f1 learn: engine_trace container worker imports only the engine; dry-run writes nothing; resume keyed on selection Marius CiepluchandClaude Opus 5.5 2026-10-03 19:19:22 +02:00
• 19c936343b learn: trace-enabled Joern run over labelled units (opt-in trace in taint.sc, trace parsing, resumable runner) Marius CiepluchandClaude Opus 5.5 2026-10-03 19:10:47 +02:00
• 20777d8863 chore(audit): module audit gains learn.slice Marius CiepluchandClaude Opus 5.5 2026-10-03 17:04:33 +02:00
• 77e47ac7d3 Merge branch 'graph-slice' Marius Ciepluch 2026-10-03 16:58:37 +02:00
• 094f6d226c learn: exp-005 graph slice -- inconclusive (within-pair AUC 0.762 -> 0.746, CI [-0.063, 0.032]); unsure rate 0.29 -> 0.24; fill \$1.59 Marius CiepluchandClaude Opus 5.5 2026-10-03 16:58:37 +02:00
• 0acbc7ec41 learn: exp-005 graph slice -- slice in the prompt (opt-in), program-arm fill, manifest and units Marius CiepluchandClaude Opus 5.5 2026-10-03 15:06:08 +02:00
• 1b2c7993a7 learn: in-function def-use slice from the tree-sitter layer + leak audit (\$0) Marius CiepluchandClaude Opus 5.5 2026-10-03 14:56:52 +02:00
• 463fe1503a learn: build_features reads v2 _a/_b scans and TypeScript repository-scan witnesses; --dry-run Marius CiepluchandClaude Opus 5.5 2026-10-03 14:41:55 +02:00
• 2836b78819 merge(learn): exp-004 -- inconclusive, pooled top-30 precision 0.90; experiment fill command; registration fix Marius CiepluchandClaude Opus 5.5 2026-10-03 14:29:22 +02:00
• 6d9850578e learn: dry-run estimate from measured cached-response cost; docs: exp-004 result; tidy instrument check Marius CiepluchandClaude Opus 5.5 2026-10-03 14:23:36 +02:00
• b50f7afccb learn: exp-004 run -- inconclusive, no pooled t_block; fill \$1.24 of a \$2 ceiling, replay \$0; instrument check recorded Marius CiepluchandClaude Opus 5.5 2026-10-03 14:18:17 +02:00
• 90a2642019 learn: registered() returns the frozen registration, not the first row Marius CiepluchandClaude Opus 5.5 2026-10-03 12:42:39 +02:00