Marius CiepluchandClaude Fable 5.1 f0110f4429 bench(independent): verify the licences of five v2 cases before publishing ...

Read-only check at the pinned vulnerable commits via the GitHub API
(LICENSE, license.txt, plugin header License: line). The five license
fields now record the SPDX id with the evidence; nothing else in the
frozen population changes. protocol-v2.md notes the verification and
that the OpenCVE case in v1 is BSL-1.1 (not OSI; non-production use
permitted by the Additional Use Grant; change date 2030-08-14 to
Apache-2.0).

Co-Authored-By: Claude Fable 5.1 <[email protected]>
Claude-Session: https://claude.ai/code/session_01EmM1j46qgKMh3zqD1QMwEo

2026-10-02 09:02:58 +02:00

..

archive

chore(bench): archive reference-only scripts

2026-10-02 08:07:35 +02:00

dev

chore(dev): token-lean workflow tools -- read guard, bulk reader, transcript report

2026-09-29 17:23:30 +02:00

fixtures

feat(ruleset): PHP quick-mode rules from the engine's vocabulary, measured on the development corpus

2026-09-30 15:05:47 +02:00

independent

bench(independent): verify the licences of five v2 cases before publishing

2026-10-02 09:02:58 +02:00

learn

fix(learn): withhold label-tracking signals from the v1 classifier; leak audit

2026-10-01 19:40:58 +02:00

manifests

feat(ruleset): PHP quick-mode rules from the engine's vocabulary, measured on the development corpus

2026-09-30 15:05:47 +02:00

measurements

chore: .dockerignore; drop the committed baseline .sarif

2026-10-02 08:28:57 +02:00

pairs

bench(pairs): real fix-commit pairs for the short families

2026-10-01 11:51:28 +02:00

push

perf(taint): ask the caller check only of a parameter that starts a flow into the field

2026-09-23 22:49:44 +02:00

ranking

feat(pre-push-safety-net): preserve uncertainty in benchmark scoring

2026-09-12 19:04:20 +02:00

repos

feat(pre-push-safety-net): pin labeled evaluation inputs

2026-09-12 18:45:54 +02:00