Marius CiepluchandClaude Opus 5 e5103fc645 feat(authorization-obligations): leave-one-out per obligation kind ...

Task 4.2. For an obligation-labeled pair, leave-one-out runs the checker on both
sides with the held-out store's obligation shapes. The pair counts as detected
only when a finding inside the labeled function carries both the labeled
obligation and a known fix from a store record, so the checker's own facts-only
finding is never mistaken for the corpus teaching. Recall, silence and Youden
are reported per obligation kind beside the flow mechanisms.

Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>
Claude-Session: https://claude.ai/code/session_01T7XD7x5KonMdmGRkp63EQG

2026-09-06 07:24:13 +02:00

..

complexity

feat(three-stage-scan): report map and honor fail-on worth-fixing

2026-09-04 00:18:33 +02:00

improve

feat(corpus-seeded-mechanisms): the mechanisms lever runs from ousast improve

2026-09-05 15:35:08 +02:00

policy

feat(governance): Phase 1 — CWE policy store + project score (zero-dep)

2026-06-22 12:31:35 +02:00

provider

feat(three-stage-scan): attach tool hunter to map hotspots

2026-09-04 00:04:36 +02:00

regress

refactor(corpus-seeded-mechanisms): apply review round 2 suggestions

2026-09-05 14:55:00 +02:00

ruleset

feat(authorization-obligations): group sibling handlers and find consistency anomalies

2026-09-06 07:24:13 +02:00

sandbox

feat(three-stage-scan): run or skip deep regression with visible degradation

2026-09-03 23:43:15 +02:00

scoring

feat(benchmark): Phase 2 (task 4) — actionable per-rule signals, ledger, FP knob

2026-06-22 15:41:17 +02:00

semantic

feat(authorization-obligations): leave-one-out per obligation kind

2026-09-06 07:24:13 +02:00

__init__.py

chore(release): 1.1.0

2026-09-04 12:00:15 +02:00

benchmark.py

feat(authorization-obligations): harvest mode handler_context and the obligation label

2026-09-06 07:24:13 +02:00

calibration.py

feat(benchmark): Phase 2 (task 4) — actionable per-rule signals, ledger, FP knob

2026-06-22 15:41:17 +02:00

cli.py

feat(authorization-obligations): run the checker in MAP with config and manifest counters

2026-09-06 07:24:13 +02:00

config.py

feat(authorization-obligations): run the checker in MAP with config and manifest counters

2026-09-06 07:24:13 +02:00

findings.py

feat(three-stage-scan): attach tool hunter to map hotspots

2026-09-04 00:04:36 +02:00

fusion.py

feat(fusion): Phase 13 — two-panel fusion adjudication

2026-06-22 18:57:03 +02:00

gate.py

feat(gate): Phase 4 task 8 — lock the detection gate into CI

2026-06-22 17:13:02 +02:00

harness_ext.py

feat(harnessx): configurable provider + per-task budget caps

2026-06-22 17:59:44 +02:00

harness.py

feat(hardening): Phase 15 — redaction, retry/backoff, budgets, threat-model docs

2026-06-22 20:02:34 +02:00

hunter_harness.py

feat(skills): Phase 14 — Trail of Bits skill index + router

2026-06-22 19:51:04 +02:00

hunter_tools.py

feat(three-stage-scan): add path-clamped hunter read grep and refs

2026-09-03 21:01:57 +02:00

hunter.py

feat(skills): Phase 14 — Trail of Bits skill index + router

2026-06-22 19:51:04 +02:00

index.py

ci: add quality gates and release workflows

2026-06-18 10:06:21 +02:00

map_gate.py

feat(three-stage-scan): gate stage-2 maps against split-sink ranking

2026-09-04 11:53:06 +02:00

mapping.py

ci: add quality gates and release workflows

2026-06-18 10:06:21 +02:00

mcp.py

feat(mcp): Phase 12 — narrow MCP server + ousast mcp

2026-06-22 19:42:01 +02:00

pair_gate.py

feat(pair-corpus-honesty): score non-vendored pointer pairs through a local cache

2026-09-05 10:45:43 +02:00

pairs.py

feat(authorization-obligations): harvest mode handler_context and the obligation label

2026-09-06 07:24:13 +02:00

preprocess.py

feat(detection): language-scoped rules + multi-language benchmark corpora

2026-06-21 11:49:31 +02:00

provenance.py

feat(pair-corpus-honesty): deterministic provenance fingerprint at scan time

2026-09-05 10:45:43 +02:00

rank.py

feat(authorization-obligations): reports and ranking name the obligation

2026-09-06 07:24:13 +02:00

redaction.py

feat(hardening): Phase 15 — redaction, retry/backoff, budgets, threat-model docs

2026-06-22 20:02:34 +02:00

reports.py

feat(authorization-obligations): reports and ranking name the obligation

2026-09-06 07:24:13 +02:00

run.py

feat(scan): add initial SAST pipeline

2026-06-17 21:13:51 +02:00

skills.py

feat(skills): Phase 14 — Trail of Bits skill index + router

2026-06-22 19:51:04 +02:00

slot_contract.py

feat(slots): Phase 3 task 6.3 — model-disabled, slot-contracted deterministic stages

2026-06-22 18:39:09 +02:00

stage_processors.py

feat(slots): Phase 3 task 6.3 — model-disabled, slot-contracted deterministic stages

2026-06-22 18:39:09 +02:00

stages.py

feat(three-stage-scan): keep quick as stage-1 inventory

2026-09-03 23:14:00 +02:00

tool_hunter.py

feat(three-stage-scan): attach tool hunter to map hotspots

2026-09-04 00:04:36 +02:00

vectorstore.py

ci: add quality gates and release workflows

2026-06-18 10:06:21 +02:00

verification.py

ci: add quality gates and release workflows

2026-06-18 10:06:21 +02:00

verify_judge.py

feat(harnessx): configurable provider + per-task budget caps

2026-06-22 17:59:44 +02:00