mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-16 19:59:26 +00:00
Scope: catch the ten taxonomy families reliably on real-world and generated application code, including forgotten authorization checks; not browser engines, interpreters or memory-safety fuzzing. Decisions: verifier-aligned families, a measured per-family noise floor as the regression budget, a cheap model on an independent chat endpoint with embeddings elsewhere, canary-oracle verifiers for the four most dangerous families first, the obligations lever folded into the access-control family's first round, web families before the C slice. Eleven requirements in EARS form; awaiting approval. Co-Authored-By: Claude Fable 5.1 <[email protected]> Claude-Session: https://claude.ai/code/session_01T7XD7x5KonMdmGRkp63EQG