Commit Graph

Select branches

Hide Pull Requests

main

archive/engine-change-scoped-evidence-pass

archive/engine-typescript

archive/fix-mechanisms

archive/trained-classifier

archive/unseen-eval

v0.1.0

v1.0.0

v1.1.0

v1.2.0-alpha.1

v2.0.0

v2.0.1

Mono Color

• a6998173c1 ops(ax): log the failing line and exit code of the bring-up Marius CiepluchandClaude Opus 5.5 2026-09-29 18:10:51 +02:00
• 6dfa5daa76 merge(plane): repo-facts memory task (task 5) Marius CiepluchandClaude Opus 5.5 2026-09-29 18:10:51 +02:00
• 4866665e5e feat(plane): ax-backed reconciler, status attribution and doctor (task 4) Marius CiepluchandClaude Fable 5.1 2026-09-29 18:10:09 +02:00
• 0cbdc5d2ac feat(plane): verify and agree tasks with metered hunts (task 6) Marius CiepluchandClaude Fable 5.1 2026-09-29 18:05:08 +02:00
• 2a490eed59 feat(plane): repo-facts memory task (task 5) Marius CiepluchandClaude Fable 5.1 2026-09-29 17:55:34 +02:00
• 6fed361387 ops(ax): bring-up, tear-down and smoke Task for the local ax (task 0, in progress) Marius CiepluchandClaude Fable 5.1 2026-09-29 17:50:28 +02:00
• 488e63951e merge(plane): manifest schemas and validation (task 1) Marius CiepluchandClaude Fable 5.1 2026-09-29 17:47:45 +02:00
• c728808316 feat(plane): manifest schemas and validation (task 1) Marius CiepluchandClaude Fable 5.1 2026-09-29 17:44:31 +02:00
• 3acd6c8822 merge(plane): budget metering (task 2) Marius CiepluchandClaude Fable 5.1 2026-09-29 17:42:48 +02:00
• 6884bc8c2c spec(ai-service-plane): switch to ax completely; routing and token attribution requirements Marius CiepluchandClaude Fable 5.1 2026-09-29 17:42:39 +02:00
• f460735a87 feat(plane): budget metering (task 2) Marius CiepluchandClaude Fable 5.1 2026-09-29 17:41:09 +02:00
• 152728c052 spec(ai-service-plane): tasks approved; implementation phase Marius CiepluchandClaude Fable 5.1 2026-09-29 17:29:10 +02:00
• c8ec677814 spec(ai-service-plane): implementation plan for review; design approved Marius CiepluchandClaude Fable 5.1 2026-09-29 17:28:13 +02:00
• d8f4443702 spec(ai-service-plane): design for review; requirements approved Marius CiepluchandClaude Fable 5.1 2026-09-29 17:27:04 +02:00
• dcc51d8a8d spec(ai-service-plane): requirements for review Marius CiepluchandClaude Fable 5.1 2026-09-29 17:24:49 +02:00
• 27812499b5 chore(dev): token-lean workflow tools -- read guard, bulk reader, transcript report Marius CiepluchandClaude Fable 5.1 2026-09-29 17:23:30 +02:00
• 38af0a86c2 spec(ai-service-plane): brief -- Kubernetes-style service design for the model pipeline Marius CiepluchandClaude Fable 5.1 2026-09-29 17:21:52 +02:00
• ec7a5ed90d docs(pre-push-safety-net): record the model-driven pipeline result on v2 and stop Marius CiepluchandClaude Fable 5.1 2026-09-29 11:29:06 +02:00
• 6acd354311 feat(independent): fixed-pin recheck and an exploratory scorer for the batched verifier Marius CiepluchandClaude Fable 5.1 2026-09-29 10:24:56 +02:00
• 072a102b20 measure(independent): triage + per-file batching + two-pass agreement -- 16/20 sites, flicker cut 26 -> 9, 34% cheaper Marius CiepluchandClaude Fable 5.1 2026-09-29 10:22:11 +02:00
• bad8c7ada4 measure(independent): known-answer check of the verifier -- 11/15 sites, unstable verdicts, escalation costs more Marius CiepluchandClaude Fable 5.1 2026-09-29 10:10:33 +02:00
• 6df74cc3ae fix(independent): verifier checkouts live under the run's own results directory Marius CiepluchandClaude Fable 5.1 2026-09-29 09:56:46 +02:00
• 7be1f18778 chore(independent): verifier flags for a known-answer check into a separate results directory Marius CiepluchandClaude Fable 5.1 2026-09-29 09:52:50 +02:00
• 041d87199a perf(hunter): cacheable message order; adaptive step budget in the sink verifier Marius CiepluchandClaude Fable 5.1 2026-09-29 09:52:23 +02:00
• 66fa08cdd0 fix(independent): the sink verifier stops on an account error and retries unverified candidates Marius CiepluchandClaude Opus 5.5 2026-09-29 07:00:59 +02:00
• 8794884a64 fix(hunter): bound every tool result; show the provider's reason for an HTTP error Marius CiepluchandClaude Opus 5.5 2026-09-28 20:15:14 +02:00
• 3ffb8b4c54 fix(hunter): ask for the final answer in plain text; DeepSeek's JSON mode lost it Marius CiepluchandClaude Opus 5.5 2026-09-28 20:10:57 +02:00
• 267bca5232 perf(hunter): read a repository's source once per state, not once per tool call Marius CiepluchandClaude Opus 5.5 2026-09-28 18:30:09 +02:00
• 023c24535f measure(independent): stage-2 verifier for model-classified sink candidates Marius CiepluchandClaude Opus 5.5 2026-09-28 13:24:22 +02:00
• 32eb46f297 measure(independent): model-classified sinks put the vulnerable function in scope in 15/17 Marius CiepluchandClaude Opus 5.5 2026-09-28 13:21:41 +02:00
• 05d56993fc measure(independent): model-classified sinks diagnostic (source only, no vocabulary) Marius CiepluchandClaude Opus 5.5 2026-09-28 12:43:03 +02:00
• 83cca9894f measure(independent): sink-first selection from source -- the vocabulary misses most real sinks Marius CiepluchandClaude Opus 5.5 2026-09-28 12:36:43 +02:00
• c4a0bd8bd9 measure(independent): the unchanged tool hunter on population v2 -- recall 1/17, and why Marius CiepluchandClaude Opus 5.5 2026-09-28 11:36:32 +02:00
• 6bfb05f952 spec(pre-push-safety-net): pre-register the hunter experiment on population v2 Marius CiepluchandClaude Opus 5.5 2026-09-28 09:10:02 +02:00
• cf579956d5 fix(model): the chat model is deepseek-flash; the hunter reaches DeepSeek Marius CiepluchandClaude Opus 5.5 2026-09-28 09:01:14 +02:00
• 5835239808 docs(pre-push-safety-net): strategy review after the two independent evaluations Marius CiepluchandClaude Opus 5.5 2026-09-28 08:55:07 +02:00
• 21adc408f1 measure(independent): evaluation of population v2 under protocol v2 -- fails every M4 gate Marius CiepluchandClaude Opus 5.5 2026-09-28 08:52:53 +02:00
• a75b9f62f9 spec(pre-push-safety-net): pre-register evaluation protocol v2 and its runner Marius CiepluchandClaude Opus 5.5 2026-09-26 18:02:03 +02:00
• 21634ccf58 spec(pre-push-safety-net): freeze the independent population v2 Marius CiepluchandClaude Opus 5.5 2026-09-26 18:02:03 +02:00
• c64e37edbd spec(pre-push-safety-net): reserve the independent population v2 (17 cases, unscanned) Marius CiepluchandClaude Opus 5.5 2026-09-26 17:53:51 +02:00
• d14fd5e960 Revert "feat(taint): project sink wrappers, one level and confirmed by dataflow" Marius CiepluchandClaude Opus 5.5 2026-09-26 15:36:25 +02:00
• cc885f025c feat(taint): project sink wrappers, one level and confirmed by dataflow Marius CiepluchandClaude Opus 5.5 2026-09-26 13:05:12 +02:00
• c7e3a05ba0 Revert "feat(taint): project-local sink wrappers are sinks where they are called" Marius CiepluchandClaude Opus 5.5 2026-09-26 10:14:30 +02:00
• 54c9dfcd44 feat(taint): project-local sink wrappers are sinks where they are called Marius CiepluchandClaude Opus 5.5 2026-09-26 07:55:24 +02:00
• 64ef488ce4 test(cpg-budget): a process vanishing mid-read is the success case too Marius CiepluchandClaude Opus 5.5 2026-09-26 07:44:33 +02:00
• 63460f8af4 fix(taint): a guard validates only the value it tests Marius CiepluchandClaude Opus 5.5 2026-09-25 18:34:15 +02:00
• 69d4a8626f fix(taint): a value stored while its guard held stays guarded Marius CiepluchandClaude Opus 5.5 2026-09-25 17:24:49 +02:00
• 03f2ce7162 feat(taint): guards -- a validator or allowlist check makes a value safe where it held Marius CiepluchandClaude Opus 5.5 2026-09-25 16:56:15 +02:00
• dfc5e71730 fix(preprocess): read .gitignore with git's semantics; never ignore a tracked file Marius CiepluchandClaude Opus 5.5 2026-09-25 15:29:43 +02:00
• 3358631448 fix(scan,taint): TypeScript's limit is owned by TypeScript; a source pattern is a token Marius CiepluchandClaude Opus 5.5 2026-09-25 15:13:30 +02:00
• 65dcb46b5e fix(scan): symlink, unsupported-language and unparsed-file gaps are owned by what they name Marius CiepluchandClaude Opus 5.5 2026-09-25 14:30:36 +02:00
• 949977c7a6 fix(taint): an SQL escape protects only a quoted value; splice the engine's object detours Marius CiepluchandClaude Opus 5.5 2026-09-25 13:35:45 +02:00
• 562b670a43 feat(rules): Django request sources; a destination with a fixed origin is not untrusted Marius CiepluchandClaude Opus 5.5 2026-09-25 12:37:22 +02:00
• ec3d1457fb fix(rules): Node vm is an eval sink; a package name is not a sink token Marius CiepluchandClaude Opus 5.5 2026-09-25 11:47:15 +02:00
• dbcb230990 fix(scan): a census gap that names its missing files is owned by those files Marius CiepluchandClaude Opus 5.5 2026-09-25 11:16:45 +02:00
• 98e8dcdfb2 measure(independent): first evaluation on the frozen population -- fails every M4 gate Marius CiepluchandClaude Opus 5.5 2026-09-25 09:56:26 +02:00
• ebcc2cf7fd fix(independent): lint in the evaluation runner (committed past a failing check) Marius CiepluchandClaude Opus 5.5 2026-09-24 16:45:36 +02:00
• 13180a11db feat(independent): the evaluation runner for protocol v1 -- run (four scans per case, resumable) and score Marius CiepluchandClaude Opus 5.5 2026-09-24 16:45:24 +02:00
• e4de54610a spec(pre-push-safety-net): pre-register the evaluation protocol for the independent population Marius CiepluchandClaude Opus 5.5 2026-09-24 16:44:32 +02:00
• d1dc0d1131 spec(pre-push-safety-net): freeze the independent population v1 (15.1) Marius CiepluchandClaude Opus 5.5 2026-09-24 16:43:32 +02:00
• 451d4e4be7 spec(pre-push-safety-net): reserve the independent population v1 (15.1), unscanned Marius CiepluchandClaude Opus 5.5 2026-09-24 16:12:22 +02:00
• d5277c60d0 fix(taint): a field the method itself just overwrote is not object state Marius CiepluchandClaude Opus 5.5 2026-09-24 15:53:57 +02:00
• 107a80d41d measure(sqli): PMPro 1-in-5 sample after the fifth fix -- 1/5, recall pins intact Marius CiepluchandClaude Opus 5.5 2026-09-24 13:36:36 +02:00
• 6c03b4a38c fix(taint): a sanitizer the value passes through counts; only an access is a source Marius CiepluchandClaude Opus 5.5 2026-09-24 12:39:23 +02:00
• d57966a6b6 fix(taint): the field join links methods only through the object itself Marius CiepluchandClaude Opus 5.5 2026-09-24 11:20:30 +02:00
• 53d20691c3 fix(mapping): record every callback of a register_rest_route call as a route Marius CiepluchandClaude Opus 5.5 2026-09-24 11:08:22 +02:00
• ece4473c2b fix(scan): a hook callback's parameters are the registry's arguments, not the request's Marius CiepluchandClaude Opus 5.5 2026-09-24 09:04:42 +02:00
• 7b8ff3cf44 fix(taint): a filter returns its value argument; a source is the access, not a call around it Marius CiepluchandClaude Opus 5.5 2026-09-24 08:36:28 +02:00
• f1e43d3646 measure(sqli): PMPro precision sample after the path rules -- 2/5, six of seven sampled false positives gone Marius CiepluchandClaude Opus 5.5 2026-09-24 03:29:57 +02:00
• 7bc7acbf52 fix(scan): keep the field join's parameter seeds when a region's own parameters are not input Marius CiepluchandClaude Opus 5.5 2026-09-24 02:40:00 +02:00
• da0ee576f8 fix(scan): a catch-all function's parameters are not attacker input; field reads need the same field Marius CiepluchandClaude Opus 5.5 2026-09-24 02:26:07 +02:00
• 1f91c0b089 fix(taint): drop paths through a query's result or through a whole object Marius CiepluchandClaude Opus 5.5 2026-09-24 00:54:17 +02:00
• bdb5a866d6 revert(taint): the caller-fed field rule removed a true positive and missed the false ones Marius CiepluchandClaude Opus 5.5 2026-09-24 00:34:04 +02:00
• e0c260ca5f perf(taint): ask the caller check only of a parameter that starts a flow into the field Marius CiepluchandClaude Opus 5.5 2026-09-23 22:49:44 +02:00
• 6ebbc89d64 fix(taint): a field is attacker input only when a caller feeds it request data Marius CiepluchandClaude Opus 5.5 2026-09-23 21:47:41 +02:00
• faf4f643df measure(sqli): adjudicate a 1-in-5 sample of PMPro SQL injection findings Marius CiepluchandClaude Opus 5.5 2026-09-23 20:57:02 +02:00
• c82ce7fa44 spec(pre-push-safety-net): correct the 13.3 budget note -- portioning bounds arbitration Marius CiepluchandClaude Opus 5.5 2026-09-23 19:45:20 +02:00
• ea9006c1c5 spec(pre-push-safety-net): record how the 13.3 loop was broken and the budget finding Marius CiepluchandClaude Opus 5.5 2026-09-23 19:38:15 +02:00
• 6b85a60ff1 perf(push): find the Python-side scale walls all at once, and remove them Marius CiepluchandClaude Opus 5.5 2026-09-23 19:36:32 +02:00
• c629fea89a fix(cli): import the sampler in a form the module audit resolves Marius CiepluchandClaude Opus 5.5 2026-09-23 19:10:39 +02:00
• b4b9308af8 perf(push): drop per-entry cache fsync; let long runs profile themselves Marius CiepluchandClaude Opus 5.5 2026-09-23 19:05:08 +02:00
• e7e2941e37 fix(scan): attach change relationships in linear time Marius CiepluchandClaude Opus 5.5 2026-09-23 18:33:26 +02:00
• 982cb14115 fix(replay): stream each case's output and survive a deadline overrun Marius CiepluchandClaude Opus 5.5 2026-09-23 16:15:01 +02:00
• d409c630cc spec(pre-push-safety-net): correct the 13.3 diagnosis -- the wall was the reuse cache Marius CiepluchandClaude Opus 5.5 2026-09-23 14:13:18 +02:00
• 7cf256b2a7 fix(push): stop rescanning the whole cache on every publication Marius CiepluchandClaude Opus 5.5 2026-09-23 14:12:47 +02:00
• 9b47e2c345 test(cpg): read /proc state without a check-then-read race Marius CiepluchandClaude Opus 5.5 2026-09-23 14:03:48 +02:00
• 0bcaabfbed spec(pre-push-safety-net): record the 13.3 context-output wall and its fix Marius CiepluchandClaude Opus 5.5 2026-09-23 12:20:13 +02:00
• 3c195c9369 fix(scan): itemise change context only in the files a change touched Marius CiepluchandClaude Opus 5.5 2026-09-23 12:19:35 +02:00
• cda679cb3b measure(contributor-scan): 7.9 measured portioning completes 281 of 406, up from 153 Marius CiepluchandClaude Opus 5.5 2026-09-23 08:51:43 +02:00
• d930f5bc69 fix(scan): report requests the reserve held back as unasked, not failed Marius CiepluchandClaude Opus 5.5 2026-09-23 08:51:12 +02:00
• 1b28465a61 feat(scan): size portions from measured per-answer cost and isolate the kill culprit Marius CiepluchandClaude Opus 5.5 2026-09-23 07:55:33 +02:00
• c1a689f4b3 measure(contributor-scan): 7.8 portioning matches the cap on findings, not on completion Marius CiepluchandClaude Opus 4.8 2026-09-23 00:54:13 +02:00
• 18c74bc571 spec(contributor-scan): record the honest end-to-end tuning of 7.8 Marius CiepluchandClaude Opus 4.8 2026-09-23 00:50:38 +02:00
• 6942446710 feat(scan): re-ask a killed portion remainder instead of dropping it Marius CiepluchandClaude Opus 4.8 2026-09-23 00:00:53 +02:00
• 03011b8fe6 fix(scan): give the PARTITIONED graph a single-attempt path too Marius CiepluchandClaude Opus 4.8 2026-09-22 23:33:23 +02:00
• 0fef399869 fix(scan): the portioner asks single attempts and reads coverage, not wall time Marius CiepluchandClaude Opus 4.8 2026-09-22 23:00:14 +02:00
• 2e96ccb8ea test(push): freeze_source mints its own path so it can never clobber a live mount Marius CiepluchandClaude Opus 4.8 2026-09-22 22:22:30 +02:00
• 1aa7f175e9 fix(scan): a portion sizer that never extrapolates from a sample with no work in it Marius CiepluchandClaude Fable 5.1 2026-09-22 22:17:30 +02:00
• e3edf11cf8 fix(cpg): count requests, not the census key, when reporting a split retry Marius CiepluchandClaude Fable 5.1 2026-09-22 22:02:38 +02:00
• a084dce780 test(push): a verified source freeze for long measurement runs Marius CiepluchandClaude Fable 5.1 2026-09-22 21:56:20 +02:00