trvon
fd4a68dfff
test: add coverage for project graph, pcode encoder, and detector behaviors
...
Unit + integration coverage for the session's work: incremental project
graph/index, pcode encoder, unreachable/dead-branch, equiv/cross-TU,
div-by-zero/sign-conversion/int-truncation, use-after-free, quality-precision,
scan-router profile, source TU runner, detector plan, and the eval fixtures.
2026-08-16 16:46:07 -06:00
trvon
86b2f14a43
feat(analysis): harden project-wide scans
...
- persist TU-owned graphs and guarded configuration evidence
- add closed-world production reachability classification
- calibrate detector precision and reviewed self-scan policy
- terminate poisoned workers instead of longjmp recovery
2026-07-30 18:18:04 -04:00
trvon
bcdcb3036b
feat(analysis): harden quality and solver pipelines
2026-07-29 20:46:51 -04:00
trvon
f37222d4fb
fix(scan): harden frontend analysis
2026-07-28 11:57:38 -04:00
trvon
f0ece0794a
feat(eval): add manifest project runner
2026-07-27 23:18:03 -04:00
trvon
f749f44d92
feat(rust): improve security provenance
2026-07-20 14:52:42 -04:00
trvon
2dcbdbc75d
feat: harden Fold quality guard
...
Preserve source, binary, and runtime evidence boundaries while making precision and performance regressions reproducible.
- decompose analysis orchestration into bounded modules
- add differential, metamorphic, organic, and Yams change-time gates
- fix detector, P-Code, fuzz sanitizer, and report identity precision
2026-07-13 15:05:35 -04:00
trvon
374aa7475d
many good updates for binary and SAST / DAST scanning
2026-06-02 12:39:03 -04:00
trvon
3ca6e0c176
feat: ObjC msgSend harness generator + Swift test fixture
...
- emitObjcHarness: objc_getClass + sel_registerName + objc_msgSend
routes fuzzer bytes through ObjC dispatch instead of raw dlopen
- Swift fixture (tests/fixtures/swift/): 4 C-ABI functions,
1 ObjC-exposed class with 3 methods, Swift-mangled symbols
- isSwiftMangled filter skips symbols needing object references
- Budget floor 30→120s, ceiling 120→600s (AFL++/libFuzzer norms)
2026-05-28 09:14:15 -04:00
trvon
ffc7917957
feat: symbolic IR, swift backend, binary-to-fuzz pipeline, SARIF fixes
...
- Rust IR encoder (encodeRustIr): walks HIR expr trees, fires SafetyObserver hooks
- Swift SIL frontend (fold-swift): swiftc -emit-sil parser, demangling, NDJSON output
- SwiftBackend: --mode swift CLI routing, shells out to fold-swift
- Binary-to-fuzz: Mach-O export discovery, ARM64 ABI param-count inference, dlopen harness generation
- Language-agnostic IR: json_keys canonical constants, Call/Member/ArraySubscript/Cast/HeapNew nodes
- Dogfood fixes: SARIF kind field, cross-detector dedup, harness_file in predictions, Swift stoi safety
- Corpuses: swift-sil-z3-corpus.md, binary-fuzz-corpus.md
- AGENTS.md: cross-language wire format rule
2026-05-27 15:29:14 -04:00
trvon
95aac8209c
feat: expand rust security scanner coverage
2026-05-27 11:32:05 -04:00
trvon
3f1234f7bb
fold: bounded symbolic SAST for C++
...
Clang LibTooling + Z3 BV-64 encoding.
11 detectors: clone, equiv, class-dup, dead, null-deref,
div-by-zero, int-overflow, oob, int-truncation,
sign-conversion, taint-track.
Interfaces: CLI, MCP (JSON-RPC 2.0), LSP.
Output: SARIF 2.1.0, JSON, Markdown.
2026-05-14 23:14:54 -04:00
