Marius CiepluchandClaude Fable 5.1 5be63bdfea docs(specs): the whole-repository scan completes -- 72 minutes, CVE-2023-23488 found, 250 findings ...

pmpro, 637 files, the product's own build path after 60963f5: build 97 s with overlays, evidence 76 s,
taint 4,105 s for 348 real requests (11.8 s each), arbitrate 99 s, peak child RSS 2.4 GB. The CVE is at
class.memberorder.php:936 among 250 entailed findings across 40 files -- the number the flow-aware-ranking
spec now has to concentrate. callDepth measured on the same graph: a 1.4x time term and a 100x payload
term (3,838 rows for ten requests at depth 3 against 38 at depth 1).

Co-Authored-By: Claude Fable 5.1 <[email protected]>
Claude-Session: https://claude.ai/code/session_01T7XD7x5KonMdmGRkp63EQG

2026-09-11 09:10:14 +02:00

..

authorization-obligations

docs(authorization-obligations): record task 2.6 and the measured blockers before 4.3

2026-09-06 07:32:07 +02:00

constrained-detector

docs(model-grounded-detection): the arbiter is a program model, not a sandbox

2026-09-08 10:41:07 +02:00

contributor-scan

docs(specs): the whole-repository scan completes -- 72 minutes, CVE-2023-23488 found, 250 findings

2026-09-11 09:10:14 +02:00

corpus-seeded-mechanisms

docs(corpus-seeded-mechanisms): close the spec after six review rounds

2026-09-05 15:37:32 +02:00

finding-feedback-loop

docs(finding-feedback-loop): requirements approved, design generated

2026-09-09 13:46:10 +02:00

flow-aware-ranking

docs(specs): the whole-repository scan completes -- 72 minutes, CVE-2023-23488 found, 250 findings

2026-09-11 09:10:14 +02:00

harnessx-self-improving-rulesets

feat(slots): Phase 3 task 6.3 — model-disabled, slot-contracted deterministic stages

2026-06-22 18:39:09 +02:00

ir-consolidation

fix(cpg): a query that could not be asked is not an empty answer

2026-09-09 17:15:51 +02:00

learning-harness

chore(models): move the default to deepseek-v4.1-flash, Pro is discontinued

2026-09-10 15:50:31 +02:00

model-grounded-detection

docs(model-grounded-detection): record what 16/16 does and does not mean

2026-09-09 07:19:41 +02:00

openrouter-sast-harness

feat(hardening): Phase 15 — redaction, retry/backoff, budgets, threat-model docs

2026-06-22 20:02:34 +02:00

pair-corpus-honesty

docs(pair-corpus-honesty): record the round 13 feature approval

2026-09-05 10:52:23 +02:00

propose-adjudicate-prove

feat(propose-adjudicate-prove): overlay adjudicates inventory before prove

2026-09-04 13:57:33 +02:00

reachability-flow-model

docs(specs): kick off corpus-seeded-mechanisms and reachability-flow-model (unapproved)

2026-09-05 10:45:43 +02:00

real-world-vfc-slice

docs(pair-corpus-honesty): spec, review record, roadmap; close real-world-vfc-slice as superseded

2026-09-05 10:45:43 +02:00

three-stage-scan

feat(three-stage-scan): prove split-sink triggerable in sandbox

2026-09-04 11:54:01 +02:00

tree-sitter-overlay-extra

feat(tree-sitter-overlay-extra): parse JS/C/Java overlay via optional extra

2026-09-04 15:07:35 +02:00

zero-with-a-reason

docs(zero-with-a-reason): the instrument must prove it can read its input

2026-09-10 11:28:56 +02:00