mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-16 11:49:28 +00:00
Three instruments scored separately at one analyzer commit (quick PHP rules with a fixed rule-to-family table, the Joern engine, the plane pipeline triage -> verify a/b -> tie-break -> 2-of-3), protocol v2's six pins, one matching rule for all six families (declared site or fix range, same family; evaluate.matches_v2 unchanged), per-family meaning of a match, the M4 gates copied from protocol v2 and applied per instrument, a $60 total / $6 per case model-spend ceiling, and the retune rule. Co-Authored-By: Claude Opus 5.5 <[email protected]> Claude-Session: https://claude.ai/code/session_01EmM1j46qgKMh3zqD1QMwEo