mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-16 03:49:26 +00:00
search-with-proof produced its first demonstrated finding on a real CVE fix-pair end to end on kube-ax: vuln observes, fixed does not, 0 false proofs, $0.37, 55 calls. Enabled by the full session fix chain (parity, verify-time-only, fair-share budget, served-root guidance, oracle prefix-bypass coverage, control-signal feedback). Payload-free record. Co-Authored-By: Claude Opus 4.8 <[email protected]>