Integrate shared scanner inference, proof ownership, and validation repairs by zrk222 · Pull Request #257 · zrk222/code-factory

zrk222 · 2026-10-27T00:42:12Z

This PR integrates shared structural source/value inference and audit proof ownership, then repairs the regression, checkpoint and compatibility contracts affected by that refactor. It preserves conservative findings for opaque inputs, mutable aliases, unknown callers and missing evidence.

Scope is 99 files, 28 commits, +42,309 / -18,076 lines. Production Python accounts for +31,484 / -17,109; tests account for +9,568 / -701. This is a substantial scanner refactor, not a small patch or primarily test churn.

Merge and validation status

Merged as 9d0697da39f9b52e932bc712943725e924adc434. The owner explicitly approved a targeted-check administrator override after requesting no additional full matrix. The final repair and merge used [skip ci]. Administrator enforcement was restored and the 27 required check contexts remained unchanged. The final public tip has not passed a complete hosted matrix.

The last full CI run on d9728e77 finished with five unit jobs passing, three Python 3.10 jobs failing on the same null-byte parser case, and Ubuntu Python 3.11 cancelled. Its candidate-quality job also failed on one function's complexity. Commit 3997e27a repairs those two known causes locally; these results are not substituted for a green full-tip matrix.

The authorized post-merge full validation on 9d0697da has completed. All nine unit profiles failed on the same two source-snapshot integrity tests; all nine other jobs passed. Broad ValueError handling swallowed ReviewAuditError source-identity rejection. Repair 146c529c normalizes only actual null-byte parser failures and preserves integrity exceptions. Both failing selectors and the parser controls pass locally: 18 checks. Focused hosted validation passed all nine original OS/Python profiles: 18 checks per profile, 162 executed with zero failures, errors or skips. It covers only those repaired boundaries. The full merged-source matrix remains red until subsequent validation establishes otherwise.

Final targeted checks: 42 native-flow and 10 parser/error-class controls passed. The parser controls cover legacy ValueError, current SyntaxError, and preservation of UnicodeError as unreadable. Exact forge qa --repo-wide --root . --strict passed grade A, composite 99.1, maximum complexity 10, no findings. Static test-intent attribution was 100% against an unchanged 99.85% threshold; this is neither behavioral coverage nor actionable security/oracle precision.

Other gate evidence

Gate	Verified evidence	Scope and limit
Architecture	Hosted architecture job; merged-source local readback HEALTHY, 436 Python files / 133 core modules	No accepted baseline debt, regression exception or cap increase. Final file/module caps remain 464/133.
JetBrains	Package, guardian release check and eight IDE checks; plugin artifact 12707681292	Actual Gradle build succeeded. Hosted evidence is from the `d9728e7` PR run; all IntelliJ source/workflow inputs are unchanged at the merged commit. No new publication claimed.
SDK workers	Worker regression run	All jobs succeeded on the prior PR head. Worker source/workflow inputs were unchanged by the final repair.
OSV	Native operator run and artifact	Six operator cases passed; all eight receipt-listed source hashes match merged source. Three separate seeded native controls also passed, but retain `NATIVE_CHALLENGES_REQUIRED`; this does not establish complete challenge admission or release readiness.

Review and precision limits

GitHub has no submitted external review on this PR. Separate local AI reviews identified defects and informed fixes; they are not represented as independent external approval. The merged scanner's exposed replay completed 11 captured repositories / 648 Python files with no timeouts, unchanged raw findings and tiers, and no lost labelled TP identities. It established no measured actionable precision gain and no new sealed held-out percentage. The fresh >=30 decided / >=80% target remains unmet. No release publication or gate-readiness claim is made here.

CodeQL adjudication artifact

Alerts 96 and 97 were dismissed by zrk222. This is owner-classified, not independently adjudicated. The reviewed sink roles are source-integrity verification in closed_shell_workspace and _jwt_bound_source_inventory. No query suppression, hashing algorithm change or byte-identity guard relaxation was made.

Reviewable bounded adjudication record

{
  "schema": "factory.codeql.owner-adjudication-summary.v1",
  "classification": "owner_classified_false_positive",
  "independently_adjudicated": false,
  "reviewed_pr_head": "26e464a217cc35ffacf62ebacca2308e59e1e433",
  "reviewed_merge_commit": "53a3d993f059a66cc3c138beb147bca47d66db7a",
  "analysis_id": 2032866909,
  "codeql_version": "2.27.3",
  "alerts": [
    96,
    97
  ],
  "flows_reviewed_per_alert": 4,
  "sarif_sha256": "16ff4d322142db764c15149824ffd05ff71d1521c0916fd89f42e6a052b6a7c8",
  "origin": "Configuration field identifier password_key; not a credential value.",
  "bridge": "Reported paths conflate JSON ledger metadata with a private captured-source bytes mapping across a serialization regression test.",
  "sink_roles": [
    "closed_shell_workspace: complete source inventory fingerprints",
    "_jwt_bound_source_inventory: complete source hash comparison before independent proof reconstruction"
  ],
  "guards_retained": [
    "Non-bytes source values rejected",
    "Private source authority not retained by JSON round trip",
    "Complete-source SHA-256 recomputation unchanged"
  ],
  "dismissed_by": "zrk222",
  "limits": "Classification is limited to alerts96/97 in this analysis. Separate AI review is not independent external adjudication."
}

CF reviews security in PHP code through the bounded Semgrep native adapter. Cover request-to-command, procedural SQL, path traversal, include/require, and unserialize patterns, including PHP 8 named and reordered operands. Preserve safe operand controls, explicit pattern-limited scope and incomplete full-depth status. Repair shared Semgrep placeholder fingerprints so separate source locations remain distinct during evidence intake. Validated with native rule and mutation controls, signed CLI intake, partial worker execution, focused regressions, independent ECC review and hash-bound workflow evidence.

Connect literal configuration credentials to a same-app request comparison, surviving session grant and registered guarded consumer using captured providers. Keep unresolved analytics configuration advisory and preserve raw diagnostics. Reject overwritten passwords, unreachable guards, revoked or escaped sessions, and decorators that discard the protected callable. Validated with affected public-scanner regressions, independent ECC probes, matched captured-source replay and current workflow evidence. The replay preserves the initial timeout and failed-job retry record.

… empty mappings

Add explicit source-role-v2 selection with captured runner, registration, input lineage and result checks. Preserve original diagnostics, severity and safety tiers; unresolved operation effects remain visible for review. Reject namespace escapes, provider shadows and unclosed input mutations. Existing default and v1 behavior remain compatible. Focused and affected checks, strict architecture, lint and workflow evidence pass.

Reuse the native helper evaluator for text and bytes concatenation, interpolation and codecs. Carry source-kind and AST-bound trace through actual/formal and return edges; keep unknown, mixed-kind, JSON and mutated-provider flows unresolved. Add source-bound support evidence without changing raw diagnostics or report selection. Focused existing security checks, adversarial review, unchanged architecture caps and workflow evidence pass.

…lysis

Share captured source identities, structural helper values, provider mutation checks, package-root resolution and independent witness matching. Preserve unknown provider and constructor effects and add regression controls. Validation: 601 tests passed across the import-context and semantic-sensor modules; Ruff and strict architecture checks passed. Full-project validation and YAML registration proof remain pending.

coderabbitai · 2026-10-27T00:42:21Z

Important

🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

Run configuration

Source mode: Auto
Repository: Unavailable
Branch: Unavailable
File: No configuration file from this repository applied
Commit: Unavailable
Layers: Organization UI
Review profile: CHILL
Plan: Advanced
Run ID: ca62e978-b973-43a9-b1f1-533a6eeff180

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

github-actions · 2026-10-27T00:42:38Z

FactoryLine Proof Review

Commit: d9728e77930d319dca9df5c4ffcd2e8e63af0079
Diff-to-Proof Review SHA-256: ba4193bfa5181ff66942a41e6ee92031e6435517626a8bcde8ef1d4b0d94de20
Proof Review SHA-256: e3d72d155ff47926fe16e32b1a80c283a8499d9d954617b82b30038aba04a0d9

Changed-scope walkthrough

Contracts — specs/captured-program-origin-v1.md, specs/credential-authority-v1.md, specs/jev-informed-inputs-v1.md, specs/pickle-context-role-v1.md, specs/pickle-reconstruction-v2.md, specs/pickle-reconstruction-v3.md, specs/pickle-reconstruction-v4.md, specs/release-v0280.md, specs/shared-security-evidence.md, specs/trusted-core-policy-v1.md, specs/trusted-provider-profile-v1.md, specs/workspace-defect-policy-v1.md
Delivery — .github/workflows/worker-verification.yml, deploy/deep-adapters/Dockerfile, deploy/deep-adapters/README.md, deploy/deep-adapters/profiles/osv.json, deploy/deep-adapters/profiles/semgrep-pattern-limited.json, deploy/deep-adapters/rules/semgrep-pattern-limited.yml, deploy/deep-adapters/rules/tests/php-controls.php, deploy/huggingface/README.md, deploy/huggingface/index.html
Docs — docs/AUDIT_CONDITION_INVENTORY.md, docs/LLM_PRODUCT_CARD.md
Implementation — editors/intellij/CHANGELOG.md, editors/intellij/build.gradle.kts, editors/intellij/src/main/kotlin/app/factoryline/intellij/FactoryLineProofReview.kt, editors/intellij/src/main/kotlin/app/factoryline/intellij/FactoryLineRepairSandbox.kt, editors/intellij/src/main/resources/META-INF/plugin.xml, editors/intellij/src/test/kotlin/app/factoryline/intellij/FactoryLineCoreTest.kt, factoryline/audit_action_refs.py, factoryline/audit_log_flow.py, factoryline/audit_rule_search.py, factoryline/audit_taxonomy.py, factoryline/cli_audit.py, factoryline/context_efficiency.py, factoryline/context_protocol_audit.py, factoryline/credential_identity_audit.py, factoryline/credential_role_constructor_provider.py, factoryline/credential_role_identity_effects.py, factoryline/deep_audit_contract.py, factoryline/deep_audit_io.py, factoryline/deep_audit_sarif.py, factoryline/finite_capture.py, factoryline/import_context.py, factoryline/intent_quality.py, factoryline/mock_fixture_provenance.py, factoryline/pickle_model_audit.py, factoryline/primitive_observation_binding.py, factoryline/provenance.py, factoryline/pytest_collection_audit.py, factoryline/repository_checkpoint_audit.py, factoryline/review_audits.py, factoryline/review_integrity.py, factoryline/runtime_audit_integrity.py, factoryline/security_configuration.py, factoryline/semantic_credential_sensor.py, factoryline/type_intent_provider_provenance.py, scripts/audit_condition_inventory.py, scripts/evaluate_jev_evidence.test.mjs, scripts/jev_evidence.mjs, scripts/verify_osv_feed_pin.test.mjs, scripts/verify_osv_native_ledger.mjs, scripts/verify_osv_native_ledger.test.mjs, scripts/verify_precision_gain.py, scripts/verify_semgrep_surface.mjs, scripts/verify_worker_cves.test.mjs
Other — plans/captured-program-origin-v1.md, plans/credential-authority-v1.md, plans/jev-informed-inputs-v1.md, plans/pickle-context-role-v1.md, plans/pickle-reconstruction-v2.md, plans/pickle-reconstruction-v3.md, plans/pickle-reconstruction-v4.md, plans/release-v0280.md, plans/shared-security-evidence.md, plans/trusted-core-policy-v1.md, plans/trusted-provider-profile-v1.md, plans/workspace-defect-policy-v1.md, plugins/code-factory-langgraph/.claude-plugin/plugin.json, plugins/code-factory-langgraph/.codex-plugin/plugin.json
Tests — tests/test_agent_ops_reference.py, tests/test_benchmark_lab.py, tests/test_cli_bootstrap.py, tests/test_context_efficiency.py, tests/test_credential_constructor_cache.py, tests/test_credential_endpoint_scanner.py, tests/test_credential_role_identity_fields.py, tests/test_deep_audit.py, tests/test_deep_audit_sarif.py, tests/test_finite_capture_origins.py, tests/test_huggingface_surface.py, tests/test_import_context_profiles.py, tests/test_junie_taxonomy.py, tests/test_mock_fixture_provenance.py, tests/test_publication_metadata.py, tests/test_review_audits.py, tests/test_review_integrity.py, tests/test_runtime_audit_integrity.py, tests/test_semantic_credential_sensor.py

Fact-derived next action

bind_changed_path_to_proof — This changed path has no explicit Graph Ops proof-input edge.

Findings

blocking unmatched_changed_path — This changed path has no explicit Graph Ops proof-input edge.

Unproven claims

No explicit proof-input edge is declared for .github/workflows/worker-verification.yml.
No explicit proof-input edge is declared for deploy/deep-adapters/Dockerfile.
No explicit proof-input edge is declared for deploy/deep-adapters/README.md.
No explicit proof-input edge is declared for deploy/deep-adapters/profiles/osv.json.
No explicit proof-input edge is declared for deploy/deep-adapters/profiles/semgrep-pattern-limited.json.
No explicit proof-input edge is declared for deploy/deep-adapters/rules/semgrep-pattern-limited.yml.
No explicit proof-input edge is declared for deploy/deep-adapters/rules/tests/php-controls.php.
No explicit proof-input edge is declared for deploy/huggingface/README.md.
No explicit proof-input edge is declared for deploy/huggingface/index.html.
No explicit proof-input edge is declared for docs/AUDIT_CONDITION_INVENTORY.md.
No explicit proof-input edge is declared for docs/LLM_PRODUCT_CARD.md.
No explicit proof-input edge is declared for editors/intellij/CHANGELOG.md.
No explicit proof-input edge is declared for editors/intellij/build.gradle.kts.
No explicit proof-input edge is declared for editors/intellij/src/main/kotlin/app/factoryline/intellij/FactoryLineProofReview.kt.
No explicit proof-input edge is declared for editors/intellij/src/main/kotlin/app/factoryline/intellij/FactoryLineRepairSandbox.kt.
No explicit proof-input edge is declared for editors/intellij/src/main/resources/META-INF/plugin.xml.
No explicit proof-input edge is declared for editors/intellij/src/test/kotlin/app/factoryline/intellij/FactoryLineCoreTest.kt.
No explicit proof-input edge is declared for factoryline/audit_action_refs.py.
No explicit proof-input edge is declared for factoryline/audit_log_flow.py.
No explicit proof-input edge is declared for factoryline/audit_rule_search.py.
No explicit proof-input edge is declared for factoryline/audit_taxonomy.py.
No explicit proof-input edge is declared for factoryline/cli_audit.py.
No explicit proof-input edge is declared for factoryline/context_efficiency.py.
No explicit proof-input edge is declared for factoryline/context_protocol_audit.py.
No explicit proof-input edge is declared for factoryline/credential_identity_audit.py.
No explicit proof-input edge is declared for factoryline/credential_role_constructor_provider.py.
No explicit proof-input edge is declared for factoryline/credential_role_identity_effects.py.
No explicit proof-input edge is declared for factoryline/deep_audit_contract.py.
No explicit proof-input edge is declared for factoryline/deep_audit_io.py.
No explicit proof-input edge is declared for factoryline/deep_audit_sarif.py.
No explicit proof-input edge is declared for factoryline/finite_capture.py.
No explicit proof-input edge is declared for factoryline/import_context.py.
No explicit proof-input edge is declared for factoryline/intent_quality.py.
No explicit proof-input edge is declared for factoryline/mock_fixture_provenance.py.
No explicit proof-input edge is declared for factoryline/pickle_model_audit.py.
No explicit proof-input edge is declared for factoryline/primitive_observation_binding.py.
No explicit proof-input edge is declared for factoryline/provenance.py.
No explicit proof-input edge is declared for factoryline/pytest_collection_audit.py.
No explicit proof-input edge is declared for factoryline/repository_checkpoint_audit.py.
No explicit proof-input edge is declared for factoryline/review_audits.py.
No explicit proof-input edge is declared for factoryline/review_integrity.py.
No explicit proof-input edge is declared for factoryline/runtime_audit_integrity.py.
No explicit proof-input edge is declared for factoryline/security_configuration.py.
No explicit proof-input edge is declared for factoryline/semantic_credential_sensor.py.
No explicit proof-input edge is declared for factoryline/type_intent_provider_provenance.py.
No explicit proof-input edge is declared for plans/captured-program-origin-v1.md.
No explicit proof-input edge is declared for plans/credential-authority-v1.md.
No explicit proof-input edge is declared for plans/jev-informed-inputs-v1.md.
No explicit proof-input edge is declared for plans/pickle-context-role-v1.md.
No explicit proof-input edge is declared for plans/pickle-reconstruction-v2.md.
No explicit proof-input edge is declared for plans/pickle-reconstruction-v3.md.
No explicit proof-input edge is declared for plans/pickle-reconstruction-v4.md.
No explicit proof-input edge is declared for plans/release-v0280.md.
No explicit proof-input edge is declared for plans/shared-security-evidence.md.
No explicit proof-input edge is declared for plans/trusted-core-policy-v1.md.
No explicit proof-input edge is declared for plans/trusted-provider-profile-v1.md.
No explicit proof-input edge is declared for plans/workspace-defect-policy-v1.md.
No explicit proof-input edge is declared for plugins/code-factory-langgraph/.claude-plugin/plugin.json.
No explicit proof-input edge is declared for plugins/code-factory-langgraph/.codex-plugin/plugin.json.
No explicit proof-input edge is declared for scripts/audit_condition_inventory.py.
No explicit proof-input edge is declared for scripts/evaluate_jev_evidence.test.mjs.
No explicit proof-input edge is declared for scripts/jev_evidence.mjs.
No explicit proof-input edge is declared for scripts/verify_osv_feed_pin.test.mjs.
No explicit proof-input edge is declared for scripts/verify_osv_native_ledger.mjs.
No explicit proof-input edge is declared for scripts/verify_osv_native_ledger.test.mjs.
No explicit proof-input edge is declared for scripts/verify_precision_gain.py.
No explicit proof-input edge is declared for scripts/verify_semgrep_surface.mjs.
No explicit proof-input edge is declared for scripts/verify_worker_cves.test.mjs.
No explicit proof-input edge is declared for specs/captured-program-origin-v1.md.
No explicit proof-input edge is declared for specs/credential-authority-v1.md.
No explicit proof-input edge is declared for specs/jev-informed-inputs-v1.md.
No explicit proof-input edge is declared for specs/pickle-context-role-v1.md.
No explicit proof-input edge is declared for specs/pickle-reconstruction-v2.md.
No explicit proof-input edge is declared for specs/pickle-reconstruction-v3.md.
No explicit proof-input edge is declared for specs/pickle-reconstruction-v4.md.
No explicit proof-input edge is declared for specs/release-v0280.md.
No explicit proof-input edge is declared for specs/shared-security-evidence.md.
No explicit proof-input edge is declared for specs/trusted-core-policy-v1.md.
No explicit proof-input edge is declared for specs/trusted-provider-profile-v1.md.
No explicit proof-input edge is declared for specs/workspace-defect-policy-v1.md.
No explicit proof-input edge is declared for tests/test_agent_ops_reference.py.
No explicit proof-input edge is declared for tests/test_benchmark_lab.py.
No explicit proof-input edge is declared for tests/test_cli_bootstrap.py.
No explicit proof-input edge is declared for tests/test_context_efficiency.py.
No explicit proof-input edge is declared for tests/test_credential_constructor_cache.py.
No explicit proof-input edge is declared for tests/test_credential_endpoint_scanner.py.
No explicit proof-input edge is declared for tests/test_credential_role_identity_fields.py.
No explicit proof-input edge is declared for tests/test_deep_audit.py.
No explicit proof-input edge is declared for tests/test_deep_audit_sarif.py.
No explicit proof-input edge is declared for tests/test_finite_capture_origins.py.
No explicit proof-input edge is declared for tests/test_huggingface_surface.py.
No explicit proof-input edge is declared for tests/test_import_context_profiles.py.
No explicit proof-input edge is declared for tests/test_junie_taxonomy.py.
No explicit proof-input edge is declared for tests/test_mock_fixture_provenance.py.
No explicit proof-input edge is declared for tests/test_publication_metadata.py.
No explicit proof-input edge is declared for tests/test_review_audits.py.
No explicit proof-input edge is declared for tests/test_review_integrity.py.
No explicit proof-input edge is declared for tests/test_runtime_audit_integrity.py.
No explicit proof-input edge is declared for tests/test_semantic_credential_sensor.py.
Pattern and guard-path audit state: not_configured; no runtime correctness or release approval is implied.

Authority boundary

Advisory only. This payload has no execution, approval, publication, deployment, signing, messaging, credential, connector, source write, test execution, repair authority. It does not use CodeRabbit credentials, interpret AI comments as proof, approve, merge, or modify source.

Existing Diff-to-Proof map

flowchart LR
  REVIEW["Diff-to-Proof Review"]
  C1["Changed: .github/workflows/worker-verification.yml"]
  C1 --> REVIEW
  C2["Changed: deploy/deep-adapters/Dockerfile"]
  C2 --> REVIEW
  C3["Changed: deploy/deep-adapters/README.md"]
  C3 --> REVIEW
  C4["Changed: deploy/deep-adapters/profiles/osv.json"]
  C4 --> REVIEW
  C5["Changed: deploy/deep-adapters/profiles/semgrep-pattern-limited.json"]
  C5 --> REVIEW
  C6["Changed: deploy/deep-adapters/rules/semgrep-pattern-limited.yml"]
  C6 --> REVIEW
  C7["Changed: deploy/deep-adapters/rules/tests/php-controls.php"]
  C7 --> REVIEW
  C8["Changed: deploy/huggingface/README.md"]
  C8 --> REVIEW
  C9["Changed: deploy/huggingface/index.html"]
  C9 --> REVIEW
  C10["Changed: docs/AUDIT_CONDITION_INVENTORY.md"]
  C10 --> REVIEW
  C11["Changed: docs/LLM_PRODUCT_CARD.md"]
  C11 --> REVIEW
  C12["Changed: editors/intellij/CHANGELOG.md"]
  C12 --> REVIEW
  C13["Changed: editors/intellij/build.gradle.kts"]
  C13 --> REVIEW
  C14["Changed: editors/intellij/src/main/kotlin/app/factoryline/intellij/FactoryLineProofReview.kt"]
  C14 --> REVIEW
  C15["Changed: editors/intellij/src/main/kotlin/app/factoryline/intellij/FactoryLineRepairSandbox.kt"]
  C15 --> REVIEW
  C16["Changed: editors/intellij/src/main/resources/META-INF/plugin.xml"]
  C16 --> REVIEW
  C17["Changed: editors/intellij/src/test/kotlin/app/factoryline/intellij/FactoryLineCoreTest.kt"]
  C17 --> REVIEW
  C18["Changed: factoryline/audit_action_refs.py"]
  C18 --> REVIEW
  C19["Changed: factoryline/audit_log_flow.py"]
  C19 --> REVIEW
  C20["Changed: factoryline/audit_rule_search.py"]
  C20 --> REVIEW
  C21["Changed: factoryline/audit_taxonomy.py"]
  C21 --> REVIEW
  C22["Changed: factoryline/cli_audit.py"]
  C22 --> REVIEW
  C23["Changed: factoryline/context_efficiency.py"]
  C23 --> REVIEW
  C24["Changed: factoryline/context_protocol_audit.py"]
  C24 --> REVIEW
  C25["Changed: factoryline/credential_identity_audit.py"]
  C25 --> REVIEW
  C26["Changed: factoryline/credential_role_constructor_provider.py"]
  C26 --> REVIEW
  C27["Changed: factoryline/credential_role_identity_effects.py"]
  C27 --> REVIEW
  C28["Changed: factoryline/deep_audit_contract.py"]
  C28 --> REVIEW
  C29["Changed: factoryline/deep_audit_io.py"]
  C29 --> REVIEW
  C30["Changed: factoryline/deep_audit_sarif.py"]
  C30 --> REVIEW
  C31["Changed: factoryline/finite_capture.py"]
  C31 --> REVIEW
  C32["Changed: factoryline/import_context.py"]
  C32 --> REVIEW
  C33["Changed: factoryline/intent_quality.py"]
  C33 --> REVIEW
  C34["Changed: factoryline/mock_fixture_provenance.py"]
  C34 --> REVIEW
  C35["Changed: factoryline/pickle_model_audit.py"]
  C35 --> REVIEW
  C36["Changed: factoryline/primitive_observation_binding.py"]
  C36 --> REVIEW
  C37["Changed: factoryline/provenance.py"]
  C37 --> REVIEW
  C38["Changed: factoryline/pytest_collection_audit.py"]
  C38 --> REVIEW
  C39["Changed: factoryline/repository_checkpoint_audit.py"]
  C39 --> REVIEW
  C40["Changed: factoryline/review_audits.py"]
  C40 --> REVIEW
  C41["Changed: factoryline/review_integrity.py"]
  C41 --> REVIEW
  C42["Changed: factoryline/runtime_audit_integrity.py"]
  C42 --> REVIEW
  C43["Changed: factoryline/security_configuration.py"]
  C43 --> REVIEW
  C44["Changed: factoryline/semantic_credential_sensor.py"]
  C44 --> REVIEW
  C45["Changed: factoryline/type_intent_provider_provenance.py"]
  C45 --> REVIEW
  C46["Changed: plans/captured-program-origin-v1.md"]
  C46 --> REVIEW
  C47["Changed: plans/credential-authority-v1.md"]
  C47 --> REVIEW
  C48["Changed: plans/jev-informed-inputs-v1.md"]
  C48 --> REVIEW
  C49["Changed: plans/pickle-context-role-v1.md"]
  C49 --> REVIEW
  C50["Changed: plans/pickle-reconstruction-v2.md"]
  C50 --> REVIEW
  C51["Changed: plans/pickle-reconstruction-v3.md"]
  C51 --> REVIEW
  C52["Changed: plans/pickle-reconstruction-v4.md"]
  C52 --> REVIEW
  C53["Changed: plans/release-v0280.md"]
  C53 --> REVIEW
  C54["Changed: plans/shared-security-evidence.md"]
  C54 --> REVIEW
  C55["Changed: plans/trusted-core-policy-v1.md"]
  C55 --> REVIEW
  C56["Changed: plans/trusted-provider-profile-v1.md"]
  C56 --> REVIEW
  C57["Changed: plans/workspace-defect-policy-v1.md"]
  C57 --> REVIEW
  C58["Changed: plugins/code-factory-langgraph/.claude-plugin/plugin.json"]
  C58 --> REVIEW
  C59["Changed: plugins/code-factory-langgraph/.codex-plugin/plugin.json"]
  C59 --> REVIEW
  C60["Changed: scripts/audit_condition_inventory.py"]
  C60 --> REVIEW
  C61["Changed: scripts/evaluate_jev_evidence.test.mjs"]
  C61 --> REVIEW
  C62["Changed: scripts/jev_evidence.mjs"]
  C62 --> REVIEW
  C63["Changed: scripts/verify_osv_feed_pin.test.mjs"]
  C63 --> REVIEW
  C64["Changed: scripts/verify_osv_native_ledger.mjs"]
  C64 --> REVIEW
  C65["Changed: scripts/verify_osv_native_ledger.test.mjs"]
  C65 --> REVIEW
  C66["Changed: scripts/verify_precision_gain.py"]
  C66 --> REVIEW
  C67["Changed: scripts/verify_semgrep_surface.mjs"]
  C67 --> REVIEW
  C68["Changed: scripts/verify_worker_cves.test.mjs"]
  C68 --> REVIEW
  C69["Changed: specs/captured-program-origin-v1.md"]
  C69 --> REVIEW
  C70["Changed: specs/credential-authority-v1.md"]
  C70 --> REVIEW
  C71["Changed: specs/jev-informed-inputs-v1.md"]
  C71 --> REVIEW
  C72["Changed: specs/pickle-context-role-v1.md"]
  C72 --> REVIEW
  C73["Changed: specs/pickle-reconstruction-v2.md"]
  C73 --> REVIEW
  C74["Changed: specs/pickle-reconstruction-v3.md"]
  C74 --> REVIEW
  C75["Changed: specs/pickle-reconstruction-v4.md"]
  C75 --> REVIEW
  C76["Changed: specs/release-v0280.md"]
  C76 --> REVIEW
  C77["Changed: specs/shared-security-evidence.md"]
  C77 --> REVIEW
  C78["Changed: specs/trusted-core-policy-v1.md"]
  C78 --> REVIEW
  C79["Changed: specs/trusted-provider-profile-v1.md"]
  C79 --> REVIEW
  C80["Changed: specs/workspace-defect-policy-v1.md"]
  C80 --> REVIEW
  C81["Changed: tests/test_agent_ops_reference.py"]
  C81 --> REVIEW
  C82["Changed: tests/test_benchmark_lab.py"]
  C82 --> REVIEW
  C83["Changed: tests/test_cli_bootstrap.py"]
  C83 --> REVIEW
  C84["Changed: tests/test_context_efficiency.py"]
  C84 --> REVIEW
  C85["Changed: tests/test_credential_constructor_cache.py"]
  C85 --> REVIEW
  C86["Changed: tests/test_credential_endpoint_scanner.py"]
  C86 --> REVIEW
  C87["Changed: tests/test_credential_role_identity_fields.py"]
  C87 --> REVIEW
  C88["Changed: tests/test_deep_audit.py"]
  C88 --> REVIEW
  C89["Changed: tests/test_deep_audit_sarif.py"]
  C89 --> REVIEW
  C90["Changed: tests/test_finite_capture_origins.py"]
  C90 --> REVIEW
  C91["Changed: tests/test_huggingface_surface.py"]
  C91 --> REVIEW
  C92["Changed: tests/test_import_context_profiles.py"]
  C92 --> REVIEW
  C93["Changed: tests/test_junie_taxonomy.py"]
  C93 --> REVIEW
  C94["Changed: tests/test_mock_fixture_provenance.py"]
  C94 --> REVIEW
  C95["Changed: tests/test_publication_metadata.py"]
  C95 --> REVIEW
  C96["Changed: tests/test_review_audits.py"]
  C96 --> REVIEW
  C97["Changed: tests/test_review_integrity.py"]
  C97 --> REVIEW
  C98["Changed: tests/test_runtime_audit_integrity.py"]
  C98 --> REVIEW
  C99["Changed: tests/test_semantic_credential_sensor.py"]
  C99 --> REVIEW
  U1["Unmatched: .github/workflows/worker-verification.yml"]
  REVIEW --> U1
  U2["Unmatched: deploy/deep-adapters/Dockerfile"]
  REVIEW --> U2
  U3["Unmatched: deploy/deep-adapters/README.md"]
  REVIEW --> U3
  U4["Unmatched: deploy/deep-adapters/profiles/osv.json"]
  REVIEW --> U4
  U5["Unmatched: deploy/deep-adapters/profiles/semgrep-pattern-limited.json"]
  REVIEW --> U5
  U6["Unmatched: deploy/deep-adapters/rules/semgrep-pattern-limited.yml"]
  REVIEW --> U6
  U7["Unmatched: deploy/deep-adapters/rules/tests/php-controls.php"]
  REVIEW --> U7
  U8["Unmatched: deploy/huggingface/README.md"]
  REVIEW --> U8
  U9["Unmatched: deploy/huggingface/index.html"]
  REVIEW --> U9
  U10["Unmatched: docs/AUDIT_CONDITION_INVENTORY.md"]
  REVIEW --> U10
  U11["Unmatched: docs/LLM_PRODUCT_CARD.md"]
  REVIEW --> U11
  U12["Unmatched: editors/intellij/CHANGELOG.md"]
  REVIEW --> U12
  U13["Unmatched: editors/intellij/build.gradle.kts"]
  REVIEW --> U13
  U14["Unmatched: editors/intellij/src/main/kotlin/app/factoryline/intellij/FactoryLineProofReview.kt"]
  REVIEW --> U14
  U15["Unmatched: editors/intellij/src/main/kotlin/app/factoryline/intellij/FactoryLineRepairSandbox.kt"]
  REVIEW --> U15
  U16["Unmatched: editors/intellij/src/main/resources/META-INF/plugin.xml"]
  REVIEW --> U16
  U17["Unmatched: editors/intellij/src/test/kotlin/app/factoryline/intellij/FactoryLineCoreTest.kt"]
  REVIEW --> U17
  U18["Unmatched: factoryline/audit_action_refs.py"]
  REVIEW --> U18
  U19["Unmatched: factoryline/audit_log_flow.py"]
  REVIEW --> U19
  U20["Unmatched: factoryline/audit_rule_search.py"]
  REVIEW --> U20
  U21["Unmatched: factoryline/audit_taxonomy.py"]
  REVIEW --> U21
  U22["Unmatched: factoryline/cli_audit.py"]
  REVIEW --> U22
  U23["Unmatched: factoryline/context_efficiency.py"]
  REVIEW --> U23
  U24["Unmatched: factoryline/context_protocol_audit.py"]
  REVIEW --> U24
  U25["Unmatched: factoryline/credential_identity_audit.py"]
  REVIEW --> U25
  U26["Unmatched: factoryline/credential_role_constructor_provider.py"]
  REVIEW --> U26
  U27["Unmatched: factoryline/credential_role_identity_effects.py"]
  REVIEW --> U27
  U28["Unmatched: factoryline/deep_audit_contract.py"]
  REVIEW --> U28
  U29["Unmatched: factoryline/deep_audit_io.py"]
  REVIEW --> U29
  U30["Unmatched: factoryline/deep_audit_sarif.py"]
  REVIEW --> U30
  U31["Unmatched: factoryline/finite_capture.py"]
  REVIEW --> U31
  U32["Unmatched: factoryline/import_context.py"]
  REVIEW --> U32
  U33["Unmatched: factoryline/intent_quality.py"]
  REVIEW --> U33
  U34["Unmatched: factoryline/mock_fixture_provenance.py"]
  REVIEW --> U34
  U35["Unmatched: factoryline/pickle_model_audit.py"]
  REVIEW --> U35
  U36["Unmatched: factoryline/primitive_observation_binding.py"]
  REVIEW --> U36
  U37["Unmatched: factoryline/provenance.py"]
  REVIEW --> U37
  U38["Unmatched: factoryline/pytest_collection_audit.py"]
  REVIEW --> U38
  U39["Unmatched: factoryline/repository_checkpoint_audit.py"]
  REVIEW --> U39
  U40["Unmatched: factoryline/review_audits.py"]
  REVIEW --> U40
  U41["Unmatched: factoryline/review_integrity.py"]
  REVIEW --> U41
  U42["Unmatched: factoryline/runtime_audit_integrity.py"]
  REVIEW --> U42
  U43["Unmatched: factoryline/security_configuration.py"]
  REVIEW --> U43
  U44["Unmatched: factoryline/semantic_credential_sensor.py"]
  REVIEW --> U44
  U45["Unmatched: factoryline/type_intent_provider_provenance.py"]
  REVIEW --> U45
  U46["Unmatched: plans/captured-program-origin-v1.md"]
  REVIEW --> U46
  U47["Unmatched: plans/credential-authority-v1.md"]
  REVIEW --> U47
  U48["Unmatched: plans/jev-informed-inputs-v1.md"]
  REVIEW --> U48
  U49["Unmatched: plans/pickle-context-role-v1.md"]
  REVIEW --> U49
  U50["Unmatched: plans/pickle-reconstruction-v2.md"]
  REVIEW --> U50
  U51["Unmatched: plans/pickle-reconstruction-v3.md"]
  REVIEW --> U51
  U52["Unmatched: plans/pickle-reconstruction-v4.md"]
  REVIEW --> U52
  U53["Unmatched: plans/release-v0280.md"]
  REVIEW --> U53
  U54["Unmatched: plans/shared-security-evidence.md"]
  REVIEW --> U54
  U55["Unmatched: plans/trusted-core-policy-v1.md"]
  REVIEW --> U55
  U56["Unmatched: plans/trusted-provider-profile-v1.md"]
  REVIEW --> U56
  U57["Unmatched: plans/workspace-defect-policy-v1.md"]
  REVIEW --> U57
  U58["Unmatched: plugins/code-factory-langgraph/.claude-plugin/plugin.json"]
  REVIEW --> U58
  U59["Unmatched: plugins/code-factory-langgraph/.codex-plugin/plugin.json"]
  REVIEW --> U59
  U60["Unmatched: scripts/audit_condition_inventory.py"]
  REVIEW --> U60
  U61["Unmatched: scripts/evaluate_jev_evidence.test.mjs"]
  REVIEW --> U61
  U62["Unmatched: scripts/jev_evidence.mjs"]
  REVIEW --> U62
  U63["Unmatched: scripts/verify_osv_feed_pin.test.mjs"]
  REVIEW --> U63
  U64["Unmatched: scripts/verify_osv_native_ledger.mjs"]
  REVIEW --> U64
  U65["Unmatched: scripts/verify_osv_native_ledger.test.mjs"]
  REVIEW --> U65
  U66["Unmatched: scripts/verify_precision_gain.py"]
  REVIEW --> U66
  U67["Unmatched: scripts/verify_semgrep_surface.mjs"]
  REVIEW --> U67
  U68["Unmatched: scripts/verify_worker_cves.test.mjs"]
  REVIEW --> U68
  U69["Unmatched: specs/captured-program-origin-v1.md"]
  REVIEW --> U69
  U70["Unmatched: specs/credential-authority-v1.md"]
  REVIEW --> U70
  U71["Unmatched: specs/jev-informed-inputs-v1.md"]
  REVIEW --> U71
  U72["Unmatched: specs/pickle-context-role-v1.md"]
  REVIEW --> U72
  U73["Unmatched: specs/pickle-reconstruction-v2.md"]
  REVIEW --> U73
  U74["Unmatched: specs/pickle-reconstruction-v3.md"]
  REVIEW --> U74
  U75["Unmatched: specs/pickle-reconstruction-v4.md"]
  REVIEW --> U75
  U76["Unmatched: specs/release-v0280.md"]
  REVIEW --> U76
  U77["Unmatched: specs/shared-security-evidence.md"]
  REVIEW --> U77
  U78["Unmatched: specs/trusted-core-policy-v1.md"]
  REVIEW --> U78
  U79["Unmatched: specs/trusted-provider-profile-v1.md"]
  REVIEW --> U79
  U80["Unmatched: specs/workspace-defect-policy-v1.md"]
  REVIEW --> U80
  U81["Unmatched: tests/test_agent_ops_reference.py"]
  REVIEW --> U81
  U82["Unmatched: tests/test_benchmark_lab.py"]
  REVIEW --> U82
  U83["Unmatched: tests/test_cli_bootstrap.py"]
  REVIEW --> U83
  U84["Unmatched: tests/test_context_efficiency.py"]
  REVIEW --> U84
  U85["Unmatched: tests/test_credential_constructor_cache.py"]
  REVIEW --> U85
  U86["Unmatched: tests/test_credential_endpoint_scanner.py"]
  REVIEW --> U86
  U87["Unmatched: tests/test_credential_role_identity_fields.py"]
  REVIEW --> U87
  U88["Unmatched: tests/test_deep_audit.py"]
  REVIEW --> U88
  U89["Unmatched: tests/test_deep_audit_sarif.py"]
  REVIEW --> U89
  U90["Unmatched: tests/test_finite_capture_origins.py"]
  REVIEW --> U90
  U91["Unmatched: tests/test_huggingface_surface.py"]
  REVIEW --> U91
  U92["Unmatched: tests/test_import_context_profiles.py"]
  REVIEW --> U92
  U93["Unmatched: tests/test_junie_taxonomy.py"]
  REVIEW --> U93
  U94["Unmatched: tests/test_mock_fixture_provenance.py"]
  REVIEW --> U94
  U95["Unmatched: tests/test_publication_metadata.py"]
  REVIEW --> U95
  U96["Unmatched: tests/test_review_audits.py"]
  REVIEW --> U96
  U97["Unmatched: tests/test_review_integrity.py"]
  REVIEW --> U97
  U98["Unmatched: tests/test_runtime_audit_integrity.py"]
  REVIEW --> U98
  U99["Unmatched: tests/test_semantic_credential_sensor.py"]
  REVIEW --> U99
  F1["unmatched_changed_path"]
  REVIEW --> F1

Preserve captured request origins through helper returns and conservative mutable-alias invalidation. Read current direct sink operands from pre-call state only when operand evaluation is independently inert; descriptors, dictionary construction, nested calls and unpacking retain conservative handling. Repair immutable inventory copying, actual helper cache epochs and source/configuration capture ownership. Retain frozen architecture and complexity limits. Combined-candidate validation: 104 regression cases, 13 operand controls and 23 measurement-contract cases pass. Ruff, formatting, C901, architecture and bounded ECC safety review pass. Full-suite CI remains required.

Use actual captured endpoint reports, bound YAML scope and classified credential fixtures. Exercise the snapshot scanner seam that executes on cache hits. Preserve source-drift, original-priority/message, forged-evidence and scanner-classification assertions. Retire two obsolete helper-seam parameters: terminal admission now uses shared shell aliases and the per-node mutation kernel. Equivalent cold/warm mutation controls on active callees remain. Add wrong-scope and operand side-effect controls. Synchronize source-inventoried rejection counts and assertions with the existing IntelliJ 1.3.1 metadata. Keep this harness maintenance separate from scanner behavior changes.

Support TryStar-free Python 3.10, preserve source-bound helper alias traces, distinguish captured configuration drift from retention-policy changes, and version workspace checkpoints with legacy fail-closed handling. Reuse the checkpoint validator and canonical source-condition owner catalog. Link public APIs to the positive, mutation and negative contracts their tests exercise. Keep the quality threshold unchanged; this is static test-intent attribution, not behavioral coverage. Add direct blocked-report and legacy-checkpoint controls. Focused regression and adversarial cases pass, including the three cross-platform CI failures. Ruff, formatting and C901 pass; architecture remains 436 Python files / 133 modules without raised caps. Full CI is required on the pushed head.

Move legacy flow-step projection to the source-validated sensor boundary instead of mutating shared structural summaries. Bind cache epochs to the actual local helper resolver. Preserve conservative assignment and opaque-input behavior. Validation: 789 affected-module tests passed; resolver epoch control and public API docstring check passed separately. Ruff, format, C901 and architecture passed; 436 Python files and 133 core modules. Required full CI remains pending.

…kip ci] Treat Python 3.10 null-byte ValueError as a retained syntax failure at both source snapshot and scanner boundaries. Preserve UnicodeError as unreadable source, HIGH diagnostics and incomplete coverage. Simplify helper dispatch without changing source guards. Targeted validation: 42 native-flow and 10 source-diagnostic controls passed. Exact final Forge quality gate passes A, max complexity 10 and no findings; changed-file Ruff/format pass. Owner explicitly authorized targeted checks with admin merge override and no new full matrix. Full-suite CI is not claimed green.

zrk222 added 23 commits October 25, 2026 02:45

fix(release): bind OSV feed generation and align plugin metadata

a1eef45

fix(intellij): replace deprecated navigation APIs in 1.3.1

64ce3d2

fix(audit): preserve proof identities through consolidated validators

818c106

ci(release): bind owner publication exception to 0.49.0 artifacts

75d37d1

Update Hugging Face release copy for 0.49.0

1d4701d

ci(release): retire fulfilled 0.49.0 publication exception

a10e94f

ci(hf): bind owner preview publication to frozen 0.49.0 files

85a43db

ci(hf): verify immutable Git blob hashes across platforms

9e53634

ci(hf): retire fulfilled 0.49.0 publication exception

6293bfa

fix(audit): verify paired observations and finding retention

0a45b54

fix(security): close serializer custody across roundtrip routes

fda1dc8

fix(security): verify conditional exception reconstruction and native…

12c6564

… empty mappings

fix(security): bind request consumers to native evidence

0d9a2a6

fix(audit): distinguish source retention exhaustion from drift

629b63b

perf(audit): reuse verified source captures and skip idle fixture ana…

286a5bd

…lysis

fix(audit): resolve stable bases from combined imports

e24ed21

perf(audit): share callback analysis and resolve inherited test owners

239f670

fix(audit): share source-bound helper authority validation

4ef06b3

zrk222 enabled auto-merge October 27, 2026 00:42

zrk222 added 2 commits October 26, 2026 21:45

zrk222 changed the title ~~Fix shared source binding and independent audit validation~~ Restore shared scanner source flow, cache integrity and validation gates Oct 27, 2026

zrk222 changed the title ~~Restore shared scanner source flow, cache integrity and validation gates~~ Restore source-flow contracts and cross-version audit validation Oct 27, 2026

zrk222 added 2 commits October 26, 2026 23:16

zrk222 merged commit 9d0697d into main Oct 27, 2026
3 checks passed

zrk222 changed the title ~~Restore source-flow contracts and cross-version audit validation~~ Integrate shared scanner inference, proof ownership, and validation repairs Oct 27, 2026

Navigation Menu

Repository navigation

Integrate shared scanner inference, proof ownership, and validation repairs - #257

Integrate shared scanner inference, proof ownership, and validation repairs#257
zrk222 merged 28 commits into
mainfrom
codex/shared-audit-validation-20261026

zrk222 commented Oct 27, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Oct 27, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Oct 27, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

zrk222 commented Oct 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Merge and validation status

Other gate evidence

Review and precision limits

CodeQL adjudication artifact

Uh oh!

coderabbitai Bot commented Oct 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

FactoryLine Proof Review

Changed-scope walkthrough

Fact-derived next action

Findings

Unproven claims

Authority boundary

Existing Diff-to-Proof map

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

zrk222 commented Oct 27, 2026 •

edited

Loading

coderabbitai Bot commented Oct 27, 2026 •

edited

Loading

github-actions Bot commented Oct 27, 2026 •

edited

Loading