Marius CiepluchandClaude Opus 5.5 231dca1f04 merge: taint-query null-guard fix and trace-enabled engine runner ...

The query fix stops a class-level call from aborting the whole taint batch on
real PHP code; gate, map_gate and pair_gate outputs are unchanged. Trace parsing
lives with the runner (benchmarks/learn/engine_trace_parse.py).

Co-Authored-By: Claude Opus 5.5 <[email protected]>

2026-10-04 10:53:23 +02:00

..

__init__.py

feat(model-grounded-detection): group 1, subtract the noise architecture

2026-09-08 12:15:54 +02:00

audit.py

refactor(memory): S3-generic store on boto3; RustFS is the tested server (no MinIO naming)

2026-10-02 10:15:19 +02:00

candidates.py

fix(model-grounded-detection): two modelling bugs the first live Joern run exposed

2026-09-08 12:45:42 +02:00

config_value.py

fix(config): report every permissive setting in a file, not the first one

2026-09-20 16:30:04 +02:00

contracts.py

pre-push(17.4): a file new in head is new, not comparison unknown

2026-10-02 22:24:24 +02:00

dominance.py

feat(access-control): model the collection read, by argument shape rather than by name

2026-09-20 12:10:27 +02:00

endpoint.py

learn: experiment fill -- fill a rule experiment's response cache with a hard ceiling, dry-run estimate

2026-10-03 12:35:27 +02:00

evidence.py

feat(model): shipped joins the evidence vector as a within-tier weight; v5 baseline

2026-09-11 13:45:00 +02:00

ladder.py

feat(model): a region that spans the flow, not just a function

2026-09-09 09:27:19 +02:00

layout.py

feat(pre-push-safety-net): exclude vendor inputs and partition frontend coverage

2026-09-13 11:53:29 +02:00

partitions.py

fix(scan,taint): TypeScript's limit is owned by TypeScript; a source pattern is a token

2026-09-25 15:13:30 +02:00

pipeline.py

docs(src): refresh comments and docstrings

2026-10-02 08:36:31 +02:00

regions.py

fix(scan): a hook callback's parameters are the registry's arguments, not the request's

2026-09-24 09:04:42 +02:00

report.py

feat(reports): say what was looked for, and what cannot be decided

2026-09-09 15:08:01 +02:00

scan.py

fix(scan): symlink, unsupported-language and unparsed-file gaps are owned by what they name

2026-09-25 14:30:36 +02:00

shipped.py

feat(model): let the project say what it ships, and rank that first

2026-09-09 12:45:21 +02:00

specs.py

feat(taint): guards -- a validator or allowlist check makes a value safe where it held

2026-09-25 16:56:15 +02:00

taint.py

learn: trace-enabled Joern run over labelled units (opt-in trace in taint.sc, trace parsing, resumable runner)

2026-10-03 19:10:47 +02:00

taxonomy.py

perf(push): find the Python-side scale walls all at once, and remove them

2026-09-23 19:36:32 +02:00