Open_Ultra_SAST

fixtures

feat(detection-core): add unlike reference family conformance

2026-10-31 14:39:16 +01:00

golden

feat(gate): Phase 4 task 8 — lock the detection gate into CI

2026-06-22 17:13:02 +02:00

conftest.py

ci: pytest runs with the hunt and semantic extras kept; sandbox tests skip by cause where no bwrap exists

2026-10-14 07:54:09 +02:00

detection_core_fixtures.py

feat(detection-core): enforce append-only population custody

2026-10-31 14:08:35 +01:00

learn_fixtures.py

feat(learn): the classifier program and its response cache (decision-engine 6.4)

2026-10-01 10:13:31 +02:00

plane_fake_store.py

plane(2.1): Delivery -- presigned store URLs, collection, state mirrored to the store

2026-10-02 21:05:48 +02:00

plane_stub_task.py

feat(plane): router-addressed start signal; credentials only in the start request

2026-09-29 19:41:35 +02:00

test_abstract_dominance.py

feat(access-control-prover): 10.1 abstract dominance relations without prover fallback

2026-10-29 19:01:25 +01:00

test_admission_run.py

feat(access-control-prover): 13.4 admission measurement

2026-10-30 13:25:34 +01:00

test_admission_scoring.py

feat(access-control-prover): 13.3 four-arm development regression

2026-10-30 12:37:19 +01:00

test_advisory_fix_pairs.py

fix(corpus): advisory-pair repo-overlap -- remove real pilot leaks, skip vendored trees

2026-10-12 15:22:55 +02:00

test_agent_skills.py

chore(p0): retire regress, the skill router, the module audit tool and vocabulary.sc

2026-10-13 10:50:01 +02:00

test_arm_regression.py

feat(access-control-prover): 13.3 four-arm development regression

2026-10-30 12:37:19 +01:00

test_ax_batch.py

search-with-proof: split compressed verifier archives, isolated pip installs, verifier module paths

2026-10-06 11:15:09 +02:00

test_ax_executor.py

tests: a timed-out AX attempt may carry its reason instead of None [skip ci]

2026-10-06 14:51:07 +02:00

test_ax_lean.py

ops(kind): skip Substrate's observability stack by default (930 MiB of 2.3 GB); opt in with OUSAST_KIND_OBSERVABILITY=1

2026-10-04 12:03:19 +02:00

test_benchmark.py

feat(ruleset): PHP quick-mode rules from the engine's vocabulary, measured on the development corpus

2026-09-30 15:05:47 +02:00

test_calibration.py

chore(p0): drop never-enabled hunter tools, test-only functions and receiver delivery

2026-10-13 11:06:09 +02:00

test_call_resolution.py

feat(detection-core): unique-declaration member-call binding (8.2 final gated round step 1-2)

2026-10-31 07:10:36 +01:00

test_candidate_enumeration.py

feat(model-grounded-detection): group 1, subtract the noise architecture

2026-09-08 12:15:54 +02:00

test_complexity_hints.py

feat(three-stage-scan): attach test-gap hints to hotspots

2026-09-03 20:33:48 +02:00

test_complexity_ledger.py

chore: format the whole tree and lint the scratch measurement scripts; CI has been red since 25ae4b4

2026-10-14 02:49:44 +02:00

test_complexity_map.py

feat(three-stage-scan): attach test-gap hints to hotspots

2026-09-03 20:33:48 +02:00

test_complexity_signals.py

feat(three-stage-scan): compute complexity signals for hotspot ranking

2026-09-03 20:05:13 +02:00

test_config.py

chore(p0): retire regress, the skill router, the module audit tool and vocabulary.sc

2026-10-13 10:50:01 +02:00

test_core_admission.py

feat(detection-core): generalized admission contract with family-scope reports

2026-10-30 16:22:40 +01:00

test_core_budget.py

feat(detection-core): measured per-class budget replacing the static 120s gate

2026-10-30 16:11:37 +01:00

test_core_canonical.py

feat(detection-core): build the strict canonical artifact boundary

2026-10-31 13:39:51 +01:00

test_core_contract.py

feat(detection-core): foundation contract package (trace, verdict, coverage, provenance)

2026-10-30 16:04:10 +01:00

test_core_custody.py

feat(detection-core): enforce append-only population custody

2026-10-31 14:08:35 +01:00

test_core_evidence.py

feat(detection-core): bind evidence packets to neutral decisions

2026-10-31 14:18:51 +01:00

test_core_factpack_consumer.py

feat(detection-core): fact-pack admission and push-consumer contracts

2026-10-30 17:05:24 +01:00

test_core_factpack_file.py

feat(detection-core): recognition target table and first express fact pack (8.2 part 1)

2026-10-30 18:46:19 +01:00

test_core_family_catalog.py

feat(detection-core): build exact family catalog resolution

2026-10-31 14:32:37 +01:00

test_core_family.py

feat(detection-core): validate closed family declarations

2026-10-31 14:27:18 +01:00

test_core_lineage.py

feat(detection-core): bind lineage to exact influenced artifacts

2026-10-31 14:13:39 +01:00

test_core_native.py

feat(detection-core): 8.1 prover native conformance to core trace/coverage contracts

2026-10-30 18:37:04 +01:00

test_core_probes.py

feat(detection-core): anti-shortcut probes and fitted-component admission gate

2026-10-30 16:27:27 +01:00

test_core_provenance.py

feat(detection-core): validate complete input provenance

2026-10-31 14:00:47 +01:00

test_core_reference_families.py

feat(detection-core): add unlike reference family conformance

2026-10-31 14:39:16 +01:00

test_core_semantics.py

feat(detection-core): represent family-neutral semantic evidence

2026-10-31 13:55:12 +01:00

test_core_validation.py

feat(detection-core): 8.1 prover native conformance to core trace/coverage contracts

2026-10-30 18:37:04 +01:00

test_cpg_backend.py

fix(cpg): single-query path drops params the script does not declare

2026-10-12 14:16:36 +02:00

test_cpg_budget.py

test(cpg-budget): a process vanishing mid-read is the success case too

2026-09-26 07:44:33 +02:00

test_cpg_queries_compile.py

chore(p0): retire regress, the skill router, the module audit tool and vocabulary.sc

2026-10-13 10:50:01 +02:00

test_cpg_session.py

engine: one resident Joern session per pin (frontend + one query JVM instead of four), ActiveProcessorCount=2 on the cluster

2026-10-04 16:41:22 +02:00

test_degradation_matrix.py

chore(p0): retire regress, the skill router, the module audit tool and vocabulary.sc

2026-10-13 10:50:01 +02:00

test_detection_benchmarks.py

feat(gate): Phase 4 task 8 — lock the detection gate into CI

2026-06-22 17:13:02 +02:00

test_development_runner.py

feat(access-control-prover): 12.2 record provenance, stage funnel and judgment transitions

2026-10-30 08:38:58 +01:00

test_dispatch_value.py

fix(mapping): record every callback of a register_rest_route call as a route

2026-09-24 11:08:22 +02:00

test_docs_site.py

refactor(memory): S3-generic store on boto3; RustFS is the tested server (no MinIO naming)

2026-10-02 10:15:19 +02:00

test_engine_queue.py

test(infra): drop the Dockerfile-text assertions from the engine-queue test

2026-10-12 16:03:14 +02:00

test_engine_task_entry.py

engine: one resident Joern session per pin (frontend + one query JVM instead of four), ActiveProcessorCount=2 on the cluster

2026-10-04 16:41:22 +02:00

test_engine_trace.py

ci: the host job keeps the hunt and semantic extras; a benchmark main no longer leaks GIT_NO_LAZY_FETCH into later tests

2026-10-14 08:08:32 +02:00

test_entry_packs.py

feat(detection-core): package-rooted entry packs wired into JS recognition; fact digest covers packs (8.2 part 2)

2026-10-30 19:25:30 +01:00

test_fact_init.py

feat(access-control-prover): 11.7 first label-blind development acquisition

2026-10-29 21:04:51 +01:00

test_fact_memo.py

perf(push): find the Python-side scale walls all at once, and remove them

2026-09-23 19:36:32 +02:00

test_findings.py

chore: format the whole tree and lint the scratch measurement scripts; CI has been red since 25ae4b4

2026-10-14 02:49:44 +02:00

test_four_arm.py

feat(access-control-prover): 12.4 four-arm development comparison

2026-10-30 09:44:27 +01:00

test_frontend_retention.py

fix(contributor-scan): retain declared Gruntfile and report census gaps honestly

2026-09-14 08:07:06 +02:00

test_fusion.py

chore(p0): drop never-enabled hunter tools, test-only functions and receiver delivery

2026-10-13 11:06:09 +02:00

test_gate.py

chore(p0): retire regress, the skill router, the module audit tool and vocabulary.sc

2026-10-13 10:50:01 +02:00

test_gitignore_semantics.py

fix(preprocess): read .gitignore with git's semantics; never ignore a tracked file

2026-09-25 15:29:43 +02:00

test_graph_reuse.py

feat(pre-push-safety-net): reuse compatible artifacts throughout replay

2026-09-13 17:08:49 +02:00

test_hardening_pipeline.py

feat(hardening): Phase 15 — redaction, retry/backoff, budgets, threat-model docs

2026-06-22 20:02:34 +02:00

test_harness.py

chore(p0): drop never-enabled hunter tools, test-only functions and receiver delivery

2026-10-13 11:06:09 +02:00

test_hunt_ablation.py

feat(hunt): registered paired ablation, repository folds, leak audit, importance table and the keep/drop rule (4.2-4.4)

2026-10-13 18:49:58 +02:00

test_hunt_accept.py

feat(hunt): proposals and the acceptance rule (5.1, 5.2)

2026-10-13 20:22:22 +02:00

test_hunt_artifact.py

chore: format the whole tree and lint the scratch measurement scripts; CI has been red since 25ae4b4

2026-10-14 02:49:44 +02:00

test_hunt_contamination.py

feat(hunt): contamination check (4.5): runs that used a reported repository are marked and kept out of any gain

2026-10-13 19:03:23 +02:00

test_hunt_features.py

feat(semantic): the hunter's semantic producer covers Java and PHP

2026-10-14 09:35:16 +02:00

test_hunt_labels.py

chore: format the whole tree and lint the scratch measurement scripts; CI has been red since 25ae4b4

2026-10-14 02:49:44 +02:00

test_hunt_metric.py

chore: format the whole tree and lint the scratch measurement scripts; CI has been red since 25ae4b4

2026-10-14 02:49:44 +02:00

test_hunt_producers.py

fix(hunt): build output gets no candidate rows, a minified line is not scanned once per function, the screen checkpoints every change

2026-10-14 13:24:45 +02:00

test_hunt_program.py

fix(hunt): diff producer records where a push removed lines; worktree checkout is proven complete

2026-10-13 23:17:15 +02:00

test_hunt_propose.py

feat(hunt): proposals and the acceptance rule (5.1, 5.2)

2026-10-13 20:22:22 +02:00

test_hunt_prover.py

feat(prover): delivery D: control flow decides dominance; the trace carries each guard's relation, effect and the operation's control context

2026-10-14 19:01:07 +02:00

test_hunt_report.py

feat(hunt): candidates scored on folds through the runner; the pilot gain, once per accepted program (6.1)

2026-10-13 20:44:18 +02:00

test_hunt_rounds.py

feat(hunt): candidates scored on folds through the runner; the pilot gain, once per accepted program (6.1)

2026-10-13 20:44:18 +02:00

test_hunt_runner.py

measure: both arms over the access-control training pool (2 of 5 pushes, 4 of 48 locations each); runner books real cost

2026-10-14 01:14:46 +02:00

test_hunt_table.py

chore: format the whole tree and lint the scratch measurement scripts; CI has been red since 25ae4b4

2026-10-14 02:49:44 +02:00

test_hunter_arm.py

feat(benchmark): combine --keep-verdicts drops hunter suspicions the classifier rejected

2026-10-13 08:21:59 +02:00

test_hunter_tools.py

refactor(p1): one source-facts module owns function ranges, callers, declaration tables and language aliases

2026-10-13 12:00:37 +02:00

test_hunter.py

chore(p0): retire regress, the skill router, the module audit tool and vocabulary.sc

2026-10-13 10:50:01 +02:00

test_independent_freeze.py

refactor(p1): one source-facts module owns function ranges, callers, declaration tables and language aliases

2026-10-13 12:00:37 +02:00

test_independent_population.py

unseen-eval group 1: used set (1,029 repositories, every source read), extended guard, usage ledger; record 01

2026-10-04 19:17:35 +02:00

test_inheritance_attachment.py

feat(access-control-prover): 8.4 inheritance and base-declaration attachment through repo-defined descendants

2026-10-29 16:10:44 +01:00

test_joern_leak_audit.py

merge(engine): Kubernetes engine workers (Deployment from the image, S3 queue); leak-audit records carry digests, not repository names

2026-10-04 14:39:36 +02:00

test_js_handler_extraction.py

feat(detection-core): JS handler extraction for bind(this)/arrow/class-method routes (8.2 part 3); fold in load_pack_file repairing 51971cd import

2026-10-30 20:10:22 +01:00

test_judgment_aggregation.py

feat(access-control-prover): 10.5 multi-path aggregation in the opt-in abstract mode

2026-10-29 19:20:24 +01:00

test_layout_facts.py

feat(ruleset): tag framework-specific knowledge as optional priors (decision-engine task 2)

2026-09-30 18:49:05 +02:00

test_learn_build_features.py

learn: build_features reads v2 _a/_b scans and TypeScript repository-scan witnesses; --dry-run

2026-10-03 14:41:55 +02:00

test_learn_calibrate.py

feat(learn): compile, calibrate, evaluate (decision-engine 6.5)

2026-10-01 10:36:34 +02:00

test_learn_compile.py

refactor(memory): S3-generic store on boto3; RustFS is the tested server (no MinIO naming)

2026-10-02 10:15:19 +02:00

test_learn_decide.py

feat(learn): compile, calibrate, evaluate (decision-engine 6.5)

2026-10-01 10:36:34 +02:00

test_learn_embeddings.py

refactor(memory): S3-generic store on boto3; RustFS is the tested server (no MinIO naming)

2026-10-02 10:15:19 +02:00

test_learn_examples.py

fix(learn): example rows drop another profile's null features when written and read

2026-10-02 17:24:49 +02:00

test_learn_excerpt.py

fix(learn): excerpt matcher covers more declaration forms

2026-10-02 16:12:08 +02:00

test_learn_experiments.py

learn: exp-005 graph slice -- slice in the prompt (opt-in), program-arm fill, manifest and units

2026-10-03 15:06:08 +02:00

test_learn_fill.py

learn: exp-005 graph slice -- slice in the prompt (opt-in), program-arm fill, manifest and units

2026-10-03 15:06:08 +02:00

test_learn_folds.py

chore(p0): drop never-enabled hunter tools, test-only functions and receiver delivery

2026-10-13 11:06:09 +02:00

test_learn_labels.py

fix(learn): fixed-side negatives only where the fixed side declares the function

2026-10-01 11:03:54 +02:00

test_learn_leaks.py

fix(learn): v1 withholds verify.flag_b and ms.operation (plane-profile leak audit)

2026-10-02 15:25:21 +02:00

test_learn_program.py

bench(learn): injection first slice -- compiled AI classifier, out-of-repo evaluation (decision-engine 6.2, 6.6)

2026-10-01 20:40:41 +02:00

test_learn_retrieve.py

chore(p0): drop never-enabled hunter tools, test-only functions and receiver delivery

2026-10-13 11:06:09 +02:00

test_learn_roles.py

chore(p0): drop never-enabled hunter tools, test-only functions and receiver delivery

2026-10-13 11:06:09 +02:00

test_learn_rules.py

learn(exp-004): Req 6.4 pooled BLOCK gate with a family floor; manifest before units

2026-10-03 09:40:58 +02:00

test_learn_schema.py

chore(p0): drop never-enabled hunter tools, test-only functions and receiver delivery

2026-10-13 11:06:09 +02:00

test_learn_slice.py

feat(semantic): the hunter's semantic producer covers Java and PHP

2026-10-14 09:35:16 +02:00

test_map_gate.py

feat(three-stage-scan): gate stage-2 maps against split-sink ranking

2026-09-04 11:53:06 +02:00

test_mapping_frameworks.py

feat(prover): delivery D: control flow decides dominance; the trace carries each guard's relation, effect and the operation's control context

2026-10-14 19:01:07 +02:00

test_mapping_registry.py

feat(access-control-prover): 11.6 migrate the stapler recogniser through the registry

2026-10-29 20:59:37 +01:00

test_mapping_stapler.py

feat(access-control-prover): 11.6 migrate the stapler recogniser through the registry

2026-10-29 20:59:37 +01:00

test_mapping.py

chore(p0): drop never-enabled hunter tools, test-only functions and receiver delivery

2026-10-13 11:06:09 +02:00

test_mcp.py

feat(mcp): the findings list carries the rung, and leads with what was decided

2026-09-09 13:15:54 +02:00

test_metamorphic_laws.py

feat(access-control-prover): 13.1 abstract-domain and metamorphic law validation

2026-10-30 08:09:02 +01:00

test_model_change_context.py

fix(scan): symlink, unsupported-language and unparsed-file gaps are owned by what they name

2026-09-25 14:30:36 +02:00

test_model_config_value.py

chore(p0): drop never-enabled hunter tools, test-only functions and receiver delivery

2026-10-13 11:06:09 +02:00

test_model_dominance.py

feat(model): an access-control finding names a line, and what the PDG does not give us

2026-09-09 13:09:47 +02:00

test_model_endpoint.py

spec(pre-push-safety-net): pre-register the hunter experiment on population v2

2026-09-28 09:10:02 +02:00

test_model_evidence.py

feat(model): shipped joins the evidence vector as a within-tier weight; v5 baseline

2026-09-11 13:45:00 +02:00

test_model_ladder.py

fix(ci): run ruff format, and record run 5 at 90% pair-correct

2026-09-08 19:46:58 +02:00

test_model_partitions.py

fix(contributor-scan): retain declared Gruntfile and report census gaps honestly

2026-09-14 08:07:06 +02:00

test_model_pipeline.py

feat(model): a region that spans the flow, not just a function

2026-09-09 09:27:19 +02:00

test_model_regions.py

fix(ranker): scope a region to the file that defines its handler (M1b 12.4)

2026-09-17 14:04:39 +02:00

test_model_scan_stage.py

feat(contributor-scan): 1.3 the model layer reaches a user

2026-09-09 07:42:44 +02:00

test_model_scan.py

fix(contributor-scan): retain declared Gruntfile and report census gaps honestly

2026-09-14 08:07:06 +02:00

test_model_scope.py

fix(scan,taint): TypeScript's limit is owned by TypeScript; a source pattern is a token

2026-09-25 15:13:30 +02:00

test_model_shipped.py

feat(model): let the project say what it ships, and rank that first

2026-09-09 12:45:21 +02:00

test_model_specs.py

feat(repos): a WordPress plugin with a verified CVE, and the WordPress DB API

2026-09-09 16:13:17 +02:00

test_model_taint.py

chore(p0): drop never-enabled hunter tools, test-only functions and receiver delivery

2026-10-13 11:06:09 +02:00

test_model_taxonomy.py

chore(p0): drop never-enabled hunter tools, test-only functions and receiver delivery

2026-10-13 11:06:09 +02:00

test_mutation_fixtures.py

feat(three-stage-scan): add aliased-sink mutation the regex scan misses

2026-09-04 11:50:44 +02:00

test_obligation_abstract_domain.py

feat(access-control-prover): 7.1 evidence-relation algebra and completeness value

2026-10-29 14:11:13 +01:00

test_obligation_authority_domain.py

feat(access-control-prover): 7.3 authority abstract values and promoted implication facts

2026-10-29 15:06:53 +01:00

test_obligation_cfg_dominance.py

feat(prover): delivery D: control flow decides dominance; the trace carries each guard's relation, effect and the operation's control context

2026-10-14 19:01:07 +02:00

test_obligation_check.py

feat(prover): access-control prover, delivery A: path records, Stapler and Jetty entries, Java operation rows, the prover and its scoring arm

2026-10-14 16:50:04 +02:00

test_obligation_dominance.py

feat(authorization-obligations): Dominance protocol with an order-based default

2026-09-05 19:38:04 +02:00

test_obligation_enforcement.py

feat(prover): delivery B: handler-named operations, Symfony, Livewire, Remix and Tornado entries, enforcement witnesses, memoised path walk

2026-10-14 17:31:07 +02:00

test_obligation_facts.py

feat(prover): delivery B: handler-named operations, Symfony, Livewire, Remix and Tornado entries, enforcement witnesses, memoised path walk

2026-10-14 17:31:07 +02:00

test_obligation_intent.py

feat(authorization-obligations): hunter adjudicates intent without raising evidence

2026-09-06 07:24:13 +02:00

test_obligation_judgment.py

feat(access-control-prover): task 7.4 - judgment, trace and coverage contracts with abstract state

2026-10-29 15:23:43 +01:00

test_obligation_operations.py

feat(prover): delivery B: handler-named operations, Symfony, Livewire, Remix and Tornado entries, enforcement witnesses, memoised path walk

2026-10-14 17:31:07 +02:00

test_obligation_paths.py

feat(prover): delivery B: handler-named operations, Symfony, Livewire, Remix and Tornado entries, enforcement witnesses, memoised path walk

2026-10-14 17:31:07 +02:00

test_obligation_policy.py

feat(authorization-obligations): group sibling handlers and find consistency anomalies

2026-09-06 07:24:13 +02:00

test_obligation_reports.py

feat(authorization-obligations): reports and ranking name the obligation

2026-09-06 07:24:13 +02:00

test_obligation_resource_domain.py

feat(access-control-prover): 7.2 resource abstract values and operation-fact fields

2026-10-29 14:48:53 +01:00

test_obligation_scan.py

chore: format the whole tree and lint the scratch measurement scripts; CI has been red since 25ae4b4

2026-10-14 02:49:44 +02:00

test_obligation_shapes.py

feat(authorization-obligations): obligation shapes derived from trusted pairs

2026-09-05 19:38:04 +02:00

test_obligation_siblings.py

feat(authorization-obligations): group sibling handlers and find consistency anomalies

2026-09-06 07:24:13 +02:00

test_obligation_summaries.py

feat(detection-core): unique-declaration member-call binding (8.2 final gated round step 1-2)

2026-10-31 07:10:36 +01:00

test_obligation_trace.py

feat(prover): delivery D: control flow decides dominance; the trace carries each guard's relation, effect and the operation's control context

2026-10-14 19:01:07 +02:00

test_pair_corpus.py

refactor(p1): one source-facts module owns function ranges, callers, declaration tables and language aliases

2026-10-13 12:00:37 +02:00

test_pair_harvest.py

fix(p1,p0): restore the pre-P1 range contract for two callers; docs link and maintainer paths

2026-10-13 16:15:32 +02:00

test_pair_hygiene.py

fix(ci): run ruff format, and record run 5 at 90% pair-correct

2026-09-08 19:46:58 +02:00

test_pair_judgment.py

feat(access-control-prover): 10.4 one judgment per path

2026-10-29 19:17:37 +01:00

test_pair_registration_context.py

fix(ci): run ruff format, and record run 5 at 90% pair-correct

2026-09-08 19:46:58 +02:00

test_php_quick_rules.py

feat(ruleset): tag framework-specific knowledge as optional priors (decision-engine task 2)

2026-09-30 18:49:05 +02:00

test_pipeline_calibration.py

feat(calibration): automatic in-pipeline false-positive feedback

2026-06-21 20:44:08 +02:00

test_plane_ax_live.py

fix(plane): ax task lifecycle -- resume, stay-up runner, delivery as completion

2026-09-29 19:04:52 +02:00

test_plane_budget.py

feat(plane): budget metering (task 2)

2026-09-29 17:41:09 +02:00

test_plane_delivery.py

chore(p0): drop never-enabled hunter tools, test-only functions and receiver delivery

2026-10-13 11:06:09 +02:00

test_plane_egress.py

chore(p0): drop never-enabled hunter tools, test-only functions and receiver delivery

2026-10-13 11:06:09 +02:00

test_plane_engine_alerts.py

chore: format the whole tree and lint the scratch measurement scripts; CI has been red since 25ae4b4

2026-10-14 02:49:44 +02:00

test_plane_features.py

chore(p0): drop never-enabled hunter tools, test-only functions and receiver delivery

2026-10-13 11:06:09 +02:00

test_plane_harvest.py

refactor(p1): one source-facts module owns function ranges, callers, declaration tables and language aliases

2026-10-13 12:00:37 +02:00

test_plane_increment.py

refactor(p1): one source-facts module owns function ranges, callers, declaration tables and language aliases

2026-10-13 12:00:37 +02:00

test_plane_literals.py

plane(1.3): host-literal scan test over src, plane, ops and docs

2026-10-02 20:32:51 +02:00

test_plane_manifests.py

feat(learn): metered embeddings and the cache (decision-engine 6.2)

2026-10-01 09:56:52 +02:00

test_plane_memory.py

refactor(p1): one source-facts module owns function ranges, callers, declaration tables and language aliases

2026-10-13 12:00:37 +02:00

test_plane_profile.py

ops(kind): skip Substrate's observability stack by default (930 MiB of 2.3 GB); opt in with OUSAST_KIND_OBSERVABILITY=1

2026-10-04 12:03:19 +02:00

test_plane_reconciler.py

chore: format the whole tree and lint the scratch measurement scripts; CI has been red since 25ae4b4

2026-10-14 02:49:44 +02:00

test_plane_remember.py

chore(p0): drop never-enabled hunter tools, test-only functions and receiver delivery

2026-10-13 11:06:09 +02:00

test_plane_repo_facts.py

refactor(p1): one source-facts module owns function ranges, callers, declaration tables and language aliases

2026-10-13 12:00:37 +02:00

test_plane_router.py

plane(1.2): literals out of doctor, egress, router, generate -- the profile is handed in

2026-10-02 20:26:46 +02:00

test_plane_runner.py

chore: format the whole tree and lint the scratch measurement scripts; CI has been red since 25ae4b4

2026-10-14 02:49:44 +02:00

test_plane_scoring_parity.py

chore(bench): archive reference-only scripts

2026-10-02 08:07:35 +02:00

test_plane_tiebreak.py

feat(plane): tie-break pass on disputed candidates; 2-of-3 agreement

2026-09-30 08:19:46 +02:00

test_plane_verify.py

refactor(p1): one source-facts module owns function ranges, callers, declaration tables and language aliases

2026-10-13 12:00:37 +02:00

test_policy.py

feat(governance): Phase 1 — CWE policy store + project score (zero-dep)

2026-06-22 12:31:35 +02:00

test_preprocess.py

feat(scan): add initial SAST pipeline

2026-06-17 21:13:51 +02:00

test_profiling.py

perf(push): drop per-entry cache fsync; let long runs profile themselves

2026-09-23 19:05:08 +02:00

test_provenance.py

feat(pair-corpus-honesty): deterministic provenance fingerprint at scan time

2026-09-05 10:45:43 +02:00

test_prover_admission.py

feat(access-control-prover): 12.5 admission manifest consumption

2026-10-30 10:13:09 +01:00

test_prover_arm.py

feat(prover): delivery C: the ordered trace with argument provenance for every examined pair

2026-10-14 18:22:45 +02:00

test_prover_judgment_mode.py

feat(access-control-prover): 10.6 three-way judgments in the prover

2026-10-29 19:34:44 +01:00

test_prover_scenarios.py

feat(access-control-prover): 13.2 cross-component validation scenarios

2026-10-30 08:19:25 +01:00

test_provider_retry.py

fix: a body that stops mid-read is transient, and a round that dies still says so

2026-09-07 07:37:41 +02:00

test_push_admission.py

fix(pre-push-safety-net): take the operation symbol from the call (M1b 12.1)

2026-09-17 09:56:59 +02:00

test_push_assistance.py

feat(pre-push-safety-net): bound optional assistance to admitted witnesses

2026-09-13 18:03:31 +02:00

test_push_background.py

pre-push(17.5): say when the engine cannot finish, and offer it in the background

2026-10-02 22:31:14 +02:00

test_push_cache_semantics.py

feat(pre-push-safety-net): key evidence reuse by compatible semantics

2026-09-13 16:16:19 +02:00

test_push_cache.py

fix(push): stop rescanning the whole cache on every publication

2026-09-23 14:12:47 +02:00

test_push_contracts.py

feat(pre-push-safety-net): retain bounded change and rename context

2026-09-12 21:12:45 +02:00

test_push_eligibility.py

feat(pre-push-safety-net): enforce evidence eligibility and record blocked qualification

2026-09-13 19:32:43 +02:00

test_push_experiment.py

feat(pre-push-safety-net): measure frozen PMPro and Node replay feasibility

2026-09-13 15:24:06 +02:00

test_push_explain.py

pre-push(17.6): install, Docker wrapper and first-run docs

2026-10-02 22:51:22 +02:00

test_push_feasibility.py

feat(pre-push-safety-net): measure frozen runtime feasibility and retain no-go

2026-09-13 19:06:02 +02:00

test_push_hook.py

pre-push(17.1): never block a push the user did not choose to block

2026-10-02 21:57:42 +02:00

test_push_inputs.py

chore(p0): drop never-enabled hunter tools, test-only functions and receiver delivery

2026-10-13 11:06:09 +02:00

test_push_install.py

pre-push(17.6): install, Docker wrapper and first-run docs

2026-10-02 22:51:22 +02:00

test_push_interface.py

feat(pre-push-safety-net): execute full Git push transactions

2026-09-13 17:45:16 +02:00

test_push_new_file.py

pre-push(17.4): a file new in head is new, not comparison unknown

2026-10-02 22:24:24 +02:00

test_push_policy.py

fix(push): a gap from another language partition no longer blocks admission

2026-09-21 13:50:38 +02:00

test_push_quick.py

pre-push(17.3): quick rules as the fast first tier

2026-10-02 22:18:14 +02:00

test_push_regression_integration.py

feat(pre-push-safety-net): cover combined push failure paths

2026-09-13 18:43:13 +02:00

test_push_report.py

feat(pre-push-safety-net): render bounded reports and preserve full evidence

2026-09-13 13:25:44 +02:00

test_push_reuse.py

feat(scan): size portions from measured per-answer cost and isolate the kill culprit

2026-09-23 07:55:33 +02:00

test_push_runner.py

feat(pre-push-safety-net): reuse compatible artifacts throughout replay

2026-09-13 17:08:49 +02:00

test_push_scoring.py

feat(pre-push-safety-net): preserve uncertainty in benchmark scoring

2026-09-12 19:04:20 +02:00

test_push_snapshot.py

push(snapshot): run-aware base/head line-correspondence (stop discarding intra-run anchors)

2026-10-11 10:12:03 +02:00

test_push_vetoes.py

pre-push(17.1): never block a push the user did not choose to block

2026-10-02 21:57:42 +02:00

test_rank.py

chore(p0): drop never-enabled hunter tools, test-only functions and receiver delivery

2026-10-13 11:06:09 +02:00

test_redaction.py

feat(hardening): Phase 15 — redaction, retry/backoff, budgets, threat-model docs

2026-06-22 20:02:34 +02:00

test_registration_sites.py

feat(access-control-prover): 11.2 generic call-site registration strategy

2026-10-29 20:23:50 +01:00

test_removed_plane_references.py

docs(harnessx-removal): the plane replaces HarnessX in README, docs and specs (task 8)

2026-09-30 12:45:29 +02:00

test_reports.py

chore(p0): retire regress, the skill router, the module audit tool and vocabulary.sc

2026-10-13 10:50:01 +02:00

test_repos.py

feat(repos): pinned known-vulnerable checkouts, offline by default

2026-09-09 08:10:59 +02:00

test_ruleset.py

feat(ruleset): tag framework-specific knowledge as optional priors (decision-engine task 2)

2026-09-30 18:49:05 +02:00

test_run_manifests.py

feat(access-control-prover): 12.1 analyzer bundles

2026-10-30 08:38:09 +01:00

test_run.py

feat(scan): add initial SAST pipeline

2026-06-17 21:13:51 +02:00

test_runner_gates.py

feat(access-control-prover): 12.3 instrument and hard runtime gates

2026-10-30 08:53:05 +01:00

test_scan_pipeline_integrity.py

refactor(harnessx-removal): retire the HarnessX scan paths (task 5)

2026-09-30 12:13:26 +02:00

test_score_pipeline.py

feat(ruleset): Phase 2 (task 3) — rules as governed data, severity from policy

2026-06-22 15:27:16 +02:00

test_scoring.py

feat(benchmark): Phase 2 (task 4) — actionable per-rule signals, ledger, FP knob

2026-06-22 15:41:17 +02:00

test_search_board.py

search-with-proof: family-to-oracle mapping, build memory, tolerant tool calls

2026-10-05 21:07:58 +02:00

test_search_browser.py

ci: pytest runs with the hunt and semantic extras kept; sandbox tests skip by cause where no bwrap exists

2026-10-14 07:54:09 +02:00

test_search_budget.py

search-with-proof group 4 + image: board, spend reservation, coordinator, search-task image

2026-10-05 14:26:43 +02:00

test_search_control.py

search-with-proof: positive control for path oracle — honest serve signal, no false negatives

2026-10-06 17:07:24 +02:00

test_search_coordinator.py

chore(p0): drop never-enabled hunter tools, test-only functions and receiver delivery

2026-10-13 11:06:09 +02:00

test_search_demo_replay.py

chore(p0): retire regress, the skill router, the module audit tool and vocabulary.sc

2026-10-13 10:50:01 +02:00

test_search_demo.py

search-with-proof: one interpreter for pip and apps; checkout root on sys.path; real node_modules path

2026-10-06 14:37:58 +02:00

test_search_executor_smoke.py

search-with-proof: split compressed verifier archives, isolated pip installs, verifier module paths

2026-10-06 11:15:09 +02:00

test_search_executor.py

search: upload the executor command once, not on every poll

2026-10-09 14:03:30 +02:00

test_search_image.py

images: shared task base, code-last layers, no per-push rebuilds [skip ci]

2026-10-05 20:40:13 +02:00

test_search_isolation.py

ci: pytest runs with the hunt and semantic extras kept; sandbox tests skip by cause where no bwrap exists

2026-10-14 07:54:09 +02:00

test_search_pilot_run.py

ci: pytest runs with the hunt and semantic extras kept; sandbox tests skip by cause where no bwrap exists

2026-10-14 07:54:09 +02:00

test_search_pilot_select.py

search-with-proof: executor smoke driver and pilot selection (6.1)

2026-10-05 17:26:06 +02:00

test_search_probe.py

ci: pytest runs with the hunt and semantic extras kept; sandbox tests skip by cause where no bwrap exists

2026-10-14 07:54:09 +02:00

test_search_task_storage.py

search-with-proof: one interpreter for pip and apps; checkout root on sys.path; real node_modules path

2026-10-06 14:37:58 +02:00

test_search_verify_transport.py

search-with-proof: split compressed verifier archives, isolated pip installs, verifier module paths

2026-10-06 11:15:09 +02:00

test_search_verify.py

ci: pytest runs with the hunt and semantic extras kept; sandbox tests skip by cause where no bwrap exists

2026-10-14 07:54:09 +02:00

test_search_worker.py

ci: pytest runs with the hunt and semantic extras kept; sandbox tests skip by cause where no bwrap exists

2026-10-14 07:54:09 +02:00

test_semantic_call_evidence.py

feat(access-control-prover): 8.1 capture call receiver and arity evidence in the semantic IR

2026-10-29 15:33:18 +01:00

test_semantic_cfg.py

feat(prover): delivery D: control flow decides dominance; the trace carries each guard's relation, effect and the operation's control context

2026-10-14 19:01:07 +02:00

test_semantic_cst.py

feat(semantic): the hunter's semantic producer covers Java and PHP

2026-10-14 09:35:16 +02:00

test_semantic_extra.py

feat(semantic): the hunter's semantic producer covers Java and PHP

2026-10-14 09:35:16 +02:00

test_semantic_overlay.py

feat(tree-sitter-overlay-extra): parse JS/C/Java overlay via optional extra

2026-09-04 15:07:35 +02:00

test_semantic_pipeline.py

chore(p0): retire regress, the skill router, the module audit tool and vocabulary.sc

2026-10-13 10:50:01 +02:00

test_semantic_priors.py

feat(ruleset): tag framework-specific knowledge as optional priors (decision-engine task 2)

2026-09-30 18:49:05 +02:00

test_semgrep_arm.py

measure: Semgrep arm on the valid pilot, our rules and facts converted

2026-10-13 13:10:19 +02:00

test_source.py

fix(hunt): a row's entry points are the ones in its file or a caller's file, not the whole repository's list

2026-10-14 14:47:08 +02:00

test_split_sink_fixtures.py

feat(three-stage-scan): add split-sink fixtures the regex scan misses

2026-09-04 11:49:44 +02:00

test_stages.py

chore(p0): retire regress, the skill router, the module audit tool and vocabulary.sc

2026-10-13 10:50:01 +02:00

test_stats.py

feat(stats): one statistics module on scipy, statsmodels and scikit-learn; engineered features tied to the annotations

2026-10-13 12:43:02 +02:00

test_subtraction_complete.py

chore(p0): remove the improve lever and the plane improvement loop

2026-10-13 10:34:57 +02:00

test_symbol_index.py

feat(access-control-prover): 8.2 stable declaration identities and per-change symbol index

2026-10-29 15:45:29 +01:00

test_task_images.py

chore: format the whole tree and lint the scratch measurement scripts; CI has been red since 25ae4b4

2026-10-14 02:49:44 +02:00

test_tool_hunter.py

chore(p0): retire regress, the skill router, the module audit tool and vocabulary.sc

2026-10-13 10:50:01 +02:00

test_train_sourcing.py

bench(train): class-targeted sourcing, --family, from the public OSV dumps

2026-10-13 21:46:45 +02:00

test_typescript_grammar.py

feat(learning-harness): absence rows travel with their registration

2026-09-06 12:39:55 +02:00

test_unseen_bank.py

unseen: bucket-cache get_repo (kill the repeated used-set canonicalization tax)

2026-10-10 17:10:19 +02:00

test_unseen_bisect.py

unseen: configurable pool size and slice count (--pool-size / --slices)

2026-10-10 07:54:49 +02:00

test_unseen_calibrate.py

unseen-eval: calibrated replay deadline + native agreement check, docker-lane diagnostics, proof 4.4 record; engine runner cleans up fetched sources

2026-10-05 08:14:57 +02:00

test_unseen_draft.py

unseen: cache enumeration + resolution to ousast-corpus (restarts skip the ~26-min prefix)

2026-10-10 16:33:29 +02:00

test_unseen_eligibility.py

unseen-eval group 1: used set (1,029 repositories, every source read), extended guard, usage ledger; record 01

2026-10-04 19:17:35 +02:00

test_unseen_extract.py

fix(bench): an unparsable file in one ordinary commit no longer ends a repository's history walk

2026-10-14 08:42:25 +02:00

test_unseen_freeze.py

unseen: configurable pool size and slice count (--pool-size / --slices)

2026-10-10 07:54:49 +02:00

test_unseen_ledger.py

unseen-eval group 1: used set (1,029 repositories, every source read), extended guard, usage ledger; record 01

2026-10-04 19:17:35 +02:00

test_unseen_proof.py

unseen-eval: calibrated replay deadline + native agreement check, docker-lane diagnostics, proof 4.4 record; engine runner cleans up fetched sources

2026-10-05 08:14:57 +02:00

test_unseen_replay_entry.py

unseen-eval groups 4-6: generic AX batch dispatcher (engine_trace on it), replay task and image stage, scorer with adoption gate

2026-10-04 20:19:14 +02:00

test_unseen_replay.py

unseen-eval groups 4-6: generic AX batch dispatcher (engine_trace on it), replay task and image stage, scorer with adoption gate

2026-10-04 20:19:14 +02:00

test_unseen_score.py

unseen-eval groups 4-6: generic AX batch dispatcher (engine_trace on it), replay task and image stage, scorer with adoption gate

2026-10-04 20:19:14 +02:00

test_unseen_source.py

unseen: cursor pagination for advisory enumeration

2026-10-08 10:26:11 +02:00

test_valid_benchmark.py

bench(valid): a training freeze may cap the history walk at the newest N first-parent commits

2026-10-13 20:47:23 +02:00

test_verification.py

chore(p0): drop never-enabled hunter tools, test-only functions and receiver delivery

2026-10-13 11:06:09 +02:00

test_witness_matching.py

feat(access-control-prover): 10.3 authority matching through promoted implications

2026-10-29 19:11:30 +01:00