mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-16 03:49:26 +00:00
On a clean host the shipped engine runs dataflow (query 0->35s, selected 0->356 regions). The evidence/taint batch (~225s) is invariant to warm session and graph preload; importCpg is cheap (~35s). The real barrier is taint.sc's ~160s per-batch flow work, so build+evidence ~255s of a 300s budget defers 1009/1365 regions. Lever = change-scope the family/file set the taint batch walks, not session/preload. Corrects the prior ~200s graph-load wall diagnosis. Next decisive experiment: engine-on unseen pilot vs record-07 regex floor (catch 3/92). Co-Authored-By: Claude Opus 4.8 <[email protected]>