Marius CiepluchandClaude Opus 4.8 ae22136c08 measure(g2): CORRECT pilot diagnosis -- engine produced zero vuln-family findings; anchoring is a red herring ...

Inspecting head.findings (not ranker evidence) overturns the previous commit's read:
the dataflow/taint tier produced ZERO findings in the vuln families (path/injection/deser)
on all 5 repos -- only config_secrets (banks 1, socketio 2; launch-editor/graphiti/bedrock 0).
The tier1/score2.0 'sink' I cited was the RANKER's static candidate, not a confirmed taint
finding. taint_evidence_not_applicable = no source->sink flow was traced (banks: sink found,
no source). So ambiguous_line_correspondence is downstream and moot -- there are no
vuln-family findings to anchor, and the region-level witness fix (Option A) is refuted before
implementation. The LLM adjudication tier was disabled (model_calls=0).

Reprioritised: #1 LLM-tier pilot L1/L2 (now primary, staged, costs money), #2 taint
source/sink coverage + region ranking, #3 change-anchoring (only after tiers yield findings).
Instrument rule: caught the ranker-vs-finding misread before building the wrong fix.

Co-Authored-By: Claude Opus 4.8 <[email protected]>

2026-10-12 09:19:04 +02:00

..

kube-ax.md

search-with-proof: split compressed verifier archives, isolated pip installs, verifier module paths

2026-10-06 11:15:09 +02:00

operator-notifications.md

steering: operator Discord notifications for OpenUltraSAST process status

2026-10-09 11:58:10 +02:00

overview.md

steering: roadmap re-centred on generalisation to unseen repositories (G0-G5); specs updated; unseen-repo-evaluation brief and requirements (approved)

2026-10-04 17:34:57 +02:00

roadmap.md

measure(g2): CORRECT pilot diagnosis -- engine produced zero vuln-family findings; anchoring is a red herring

2026-10-12 09:19:04 +02:00

safety-net.md

spec+docs(search-with-proof): record first cluster demonstration + fixed-side negative [skip ci]

2026-10-07 13:25:52 +02:00

storage-streaming.md

docs(g0): record the 2026-10-11 state and readiness plan; bucket-first + image provenance

2026-10-11 08:17:06 +02:00