mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-16 03:49:26 +00:00
kube-ax probe: AX tasks have no capabilities (no namespaces, no setuid), so no in-task isolation. Demos become data the verifier executes; the explore key risk is accepted and bounded by cap and rotation. Co-Authored-By: Claude Opus 5.5 <[email protected]>