mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-16 19:59:26 +00:00
False alarms count every visible finding; the verifier owns per-family oracles; inconclusive on one-sided build failure; feasibility pilot separated from a 73-negative BLOCK qualification; coverage ceilings; spend reserved before calls; key isolated from executed code; cluster model calls supersede the pool VM-only rule for this arm only. Requirements approval reopened. Co-Authored-By: Claude Opus 5.5 <[email protected]>