Commit graph

Select branches

Hide pull requests

fix/forgejo-home

master

#1

#2

Mono Color

• 5cd8c92003 Merge pull request 'fix(sarif): point informationUri at git.trevon.dev' (#2) from fix/forgejo-home into master master trevon 2026-09-28 12:05:55 +00:00
• b03c8615ca
  
  fix(sarif): point informationUri at git.trevon.dev fix/forgejo-home trvon 2026-09-25 08:07:37 -06:00
• 8bb39471a7 Merge pull request 'Fix audit findings: soundness, coverage reporting, docs, and review follow-ups' (#1) from fix/audit-findings into master trevon 2026-09-25 06:48:08 +00:00
• fcf474e4f0
  
  refactor(cli): one TU path normalizer for coverage, fan-out and quarantine trvon 2026-09-24 21:46:12 -06:00
• ed48d44605
  
  fix(solver): never memoize a core from a portfolio disagreement trvon 2026-09-24 21:43:15 -06:00
• b8c997c732
  
  fix(scan): report quarantined TUs as coverage gaps trvon 2026-09-24 21:37:21 -06:00
• 00082448f4
  
  fix(encoder): a global C++ lookalike is not a C library function trvon 2026-09-24 21:34:16 -06:00
• 29a292c6d5
  
  fix(oob,uaf): re-check portfolio verdicts on the reporting solver trvon 2026-09-24 21:32:16 -06:00
• 964769cdf8
  
  fix(oob): require an exact encoding before a constant-index OOB is Proved trvon 2026-09-24 21:29:22 -06:00
• 9e37fd0387
  
  fix(detect): model continue exits and memory stores in truncated loops trvon 2026-09-24 21:26:27 -06:00
• 2945e59bc2
  
  docs: trim the README and move the performance roadmap to docs/ trvon 2026-09-24 21:11:54 -06:00
• c785a6acee
  
  docs(positioning): drop claims the code and evidence do not support trvon 2026-09-24 20:58:26 -06:00
• f0fe006d6b
  
  fix(docs,tests): correct the pre-push hook claim, a dead link, MCP cleanup trvon 2026-09-24 20:57:32 -06:00
• 8a32f08fd7
  
  fix(int-overflow): render witnesses in the source type's width and sign trvon 2026-09-24 20:56:27 -06:00
• 5c352b2ee4
  
  fix(solver): fail closed when the portfolio re-check disagrees trvon 2026-09-24 20:51:07 -06:00
• 46aaac427a
  
  fix(summary): key function summaries by USR, not qualified name trvon 2026-09-24 20:49:38 -06:00
• c9811b7d41
  
  fix(scan): report unanalyzed translation units and exit 2 trvon 2026-09-24 20:37:51 -06:00
• 0556cc638d
  
  fix(report): keep Proved for exact bounded models only trvon 2026-09-24 20:27:26 -06:00
• 67483ee6b0
  
  fix(model): apply libc models only to C library callees trvon 2026-09-24 20:14:50 -06:00
• 6adcc24e2a
  
  fix(detect): never prove post-loop conditions from a bounded unroll trvon 2026-09-24 20:08:19 -06:00
• 76bc00f635
  
  test(fanout): build the failure worker before the recovery tests trvon 2026-09-24 20:00:17 -06:00
• b3da5a4898
  
  perf(credentials): defer matcher parent walks trvon 2026-09-02 07:18:26 -06:00
• 2a730e3a0e
  
  perf(uninit): skip functions without local candidates trvon 2026-09-02 06:59:54 -06:00
• c2a8350adf
  
  perf(sql): precheck direct SQL sinks trvon 2026-09-02 06:32:59 -06:00
• b33d3357b5
  
  fix(rust): refine path join traversal provenance trvon 2026-09-02 05:58:14 -06:00
• 84746e060b
  
  fix(eval): finding fingerprint must be identity-based, not content-based trvon 2026-09-01 19:54:54 -06:00
• af66058f3a
  
  bench: wire chromium + sage corpora as stress/diversity manifests trvon 2026-09-01 19:07:46 -06:00
• 7185535660
  
  chore(detect): drop three unused includes from the walker engine trvon 2026-09-01 18:24:41 -06:00
• 521d7a34a6
  
  perf(cli): skip the project-graph build when no detector consumes it trvon 2026-09-01 17:59:22 -06:00
• 425eeb0751
  
  docs: record option-2 S0 result — candidate expansion is empty on fold/yams trvon 2026-09-01 17:32:40 -06:00
• 94287522f8
  
  docs: spec single-pass graph building (option 2) with seam map and slice plan trvon 2026-09-01 17:24:55 -06:00
• d6beaab635
  
  docs: record single-pass graph-building decision (option 2) for portability trvon 2026-09-01 17:19:55 -06:00
• 5e4750f839
  
  chore(detect): drop unused <utility> include from security_walker_refinement.cpp trvon 2026-09-01 08:20:45 -06:00
• 91de7405e0
  
  perf(detect): resolve var-var branch feasibility via octagon entailments trvon 2026-09-01 07:18:05 -06:00
• 21ff1799c5
  
  bench: calibrate yams wall gate to measured machine variance trvon 2026-08-31 18:37:50 -06:00
• a016268e1f
  
  bench: activate wall/RSS regression gates via performance baselines trvon 2026-08-31 18:08:16 -06:00
• a72016c546
  
  bench: wire gold precision/recall gates into fold/yams manifests trvon 2026-08-31 17:49:43 -06:00
• 3a05340d85
  
  perf(detect): widen branch-feasibility fast path with octagon ranges trvon 2026-08-31 17:04:42 -06:00
• 118b745fea
  
  docs(loop): mark in-pass contribution collection INVALIDATED (ordering dependency) trvon 2026-08-31 07:38:44 -06:00
• 1699e5618e
  
  docs(loop): record iteration ledger + in-pass contribution collection design trvon 2026-08-31 07:30:38 -06:00
• 8a1346125a
  
  chore(detect): drop unused includes from security_walker.cpp trvon 2026-08-31 07:25:33 -06:00
• 27e1b23e7d
  
  style: fold formatting normalization into campaign test files trvon 2026-08-31 07:13:25 -06:00
• b5952feaec
  
  profile: add summary-path Z3 context sizing counters trvon 2026-08-31 06:43:03 -06:00
• 66a11fccb8
  
  perf(symbolic): reuse one scratch Z3 context for summary computation trvon 2026-08-30 21:33:58 -06:00
• 259ae527d4
  
  profile: add Z3 context/solver construction counters; fix sql-injection stats attribution trvon 2026-08-30 21:18:07 -06:00
• bca812c734
  
  test(bench): add reproduction rig for the summary-flake target (negative result) trvon 2026-08-30 20:52:20 -06:00
• 91fcef3d74
  
  test(bench): scope benchmark schema test to checked-in documents trvon 2026-08-30 20:46:03 -06:00
• d67264ca3e
  
  fix(call-graph): merge same-USR duplicate evidence like the exhaustive builder trvon 2026-08-30 20:39:38 -06:00
• f4f1d55ce1
  
  bench: re-baseline fold/yams finding dispositions after line drift; evals pass trvon 2026-08-30 20:04:37 -06:00
• c9a5e7390d
  
  test(symbolic): guard summary recomputation stability; add optimization loop contract trvon 2026-08-30 19:39:26 -06:00
• 1ec7f71690
  
  ci: use Forgejo artifact actions; disable unsupported cache trvon 2026-08-30 10:34:24 -06:00
• 6140ba44de
  
  ci: install CMake build tools for Conan dependencies trvon 2026-08-30 10:31:45 -06:00
• 43e5de4f0a
  
  ci: bootstrap rustup on Forgejo runner trvon 2026-08-30 10:28:39 -06:00
• df0d984b04
  
  ci: split linux/macos jobs; gate macOS behind workflow_dispatch (no macos runner yet) trvon 2026-08-30 10:19:11 -06:00
• e9c809958b
  
  ci: pin GitHub action references to commit SHAs trvon 2026-08-30 10:04:44 -06:00
• 895133942c
  
  ci: use .forgejo/workflows (Forgejo Actions) trvon 2026-08-30 09:41:56 -06:00
• 7c82a885eb
  
  ci: port build to Gitea Actions with release packaging trvon 2026-08-30 09:18:45 -06:00
• b10bbd3da6
  
  fix(detect): honor statement-expression write ordering in uninit-read trvon 2026-08-23 15:47:21 -06:00
• 6134bb3c16
  
  fix(detect): recognize power-of-two bitwise guard in div-by-zero trvon 2026-08-23 15:36:36 -06:00
• ad09feb50f
  
  fix(detect): preserve pointer bindings across imprecise guards + return pairs trvon 2026-08-23 14:54:43 -06:00
• fb5216c78d
  
  fix(detect): recognize smart-pointer ownership in memory-leak trvon 2026-08-23 12:54:27 -06:00
• a27c3366d8
  
  fix(symbolic): cache string size()/length() across assignments trvon 2026-08-23 09:11:45 -06:00
• 8750eb51ea
  
  fix(symbolic): escalate per-query timeout once, not 4x trvon 2026-08-22 16:36:14 -06:00
• 9c0b5f5e49
  
  fix: bound escalation ceiling and finish score_fp.py lint cleanup trvon 2026-08-22 14:20:38 -06:00
• 231af6dbd2
  
  feat(cli): generous compute budgets for day-scale scans trvon 2026-08-22 13:45:47 -06:00
• ba3a8cbf46
  
  fix(bench): harden score_fp.py against unhandled IO/parse errors trvon 2026-08-22 13:45:47 -06:00
• 66a0858613
  
  feat(symbolic): adaptive per-query timeout escalation trvon 2026-08-22 10:06:55 -06:00
• 4fc979181c
  
  feat(cli): raise scan timeout defaults for large real-world scans trvon 2026-08-21 12:15:35 -06:00
• 79992a33d5
  
  fix(detect): null-guard alias deref cast in null-deref shouldQuery trvon 2026-08-20 22:19:04 -06:00
• 3484eee073
  
  chore(architecture): track int_overflow_analysis/null_deref as 1100-line monoliths trvon 2026-08-20 22:04:21 -06:00
• e158d3fdba
  
  fix(detect): exclude container-bounded string methods from overflow sinks trvon 2026-08-20 21:54:55 -06:00
• 5399fb2387
  
  fix(detect): null-safe stripPointerCasts and defIsNullable probes trvon 2026-08-20 21:40:02 -06:00
• 44d713b48b
  
  fix(detect): harden null-deref decl-name and null-safety guards trvon 2026-08-20 21:25:21 -06:00
• 9db9930444
  
  fix(detect): harden clang AST evaluation against record-layout crashes trvon 2026-08-20 20:11:10 -06:00
• 2d8e059990
  
  fix(detect): narrow memory-leak escape suppression trvon 2026-08-20 19:35:50 -06:00
• 79702c0625
  
  fix(frontend): normalize stableFunctionId path for deterministic clone IDs trvon 2026-08-16 20:53:32 -06:00
• 67cf35fc25
  
  feat(analysis): production-reachability structural closure + plumbing trvon 2026-08-16 16:58:05 -06:00
• 296881cc99
  
  feat(index): extend project index/store and TU store trvon 2026-08-16 16:57:36 -06:00
• 51720cfd98
  
  feat(binary): P-Code gadget-effects discovery and pointer-arithmetic handling trvon 2026-08-16 16:55:18 -06:00
• bce85eb5f5
  
  feat(cli): scan orchestration, profiling, and reachability plumbing trvon 2026-08-16 16:54:57 -06:00
• e4ac03fd5c
  
  feat(detect): recalibrate param-origin findings to latent confidence trvon 2026-08-16 16:53:43 -06:00
• 2a52811aab
  
  feat(symbolic): heap-model array regions and encoder/pcode improvements trvon 2026-08-16 16:51:40 -06:00
• fd4a68dfff
  
  test: add coverage for project graph, pcode encoder, and detector behaviors trvon 2026-08-16 16:46:07 -06:00
• e30764fb19
  
  bench: extend fold_eval scoring with labeled negative cases trvon 2026-08-16 16:43:51 -06:00
• 60e2bb7039
  
  ci: pin GitHub Actions to commit SHAs trvon 2026-08-16 16:42:14 -06:00
• 8ac9ddb175
  
  docs: expand fold-sast skill; document call-graph decomposition + budgets trvon 2026-08-16 16:41:33 -06:00
• 53d258563f
  
  fix(build): harden setup.sh meson native-file array + hooks path trvon 2026-08-16 16:41:03 -06:00
• 14aedf7417
  
  fix(detect): suppress security-detector false positives trvon 2026-08-16 14:29:35 -06:00
• 61ee0b5f4f
  
  fix(build): avoid moving Z3 context trvon 2026-07-30 18:24:29 -04:00
• 86b2f14a43
  
  feat(analysis): harden project-wide scans trvon 2026-07-30 18:18:04 -04:00
• d0dc830df4
  
  fix(taint): match exec sinks exactly trvon 2026-07-29 23:22:00 -04:00
• 2227ff0c69
  
  perf(profile): avoid duplicate fingerprint parse trvon 2026-07-29 23:03:17 -04:00
• 0f2e8ca6b6
  
  docs: record quality convergence evidence trvon 2026-07-29 20:47:10 -04:00
• bd29aab697
  
  test(quality): strengthen evaluation evidence trvon 2026-07-29 20:47:04 -04:00
• bcdcb3036b
  
  feat(analysis): harden quality and solver pipelines trvon 2026-07-29 20:46:51 -04:00
• df353e09f8
  
  fix(build): disambiguate Z3 bit-vector value trvon 2026-07-29 01:02:20 -04:00
• 8d85829481
  
  docs: document convergence contracts trvon 2026-07-29 00:57:49 -04:00
• b0b51f1e71
  
  feat: converge quality and scan interfaces trvon 2026-07-29 00:57:33 -04:00
• 669b4b4b6f
  
  ci: publish quality reports trvon 2026-07-28 14:14:59 -04:00
• ab262b2220
  
  feat(quality): enforce evaluator policies trvon 2026-07-28 14:09:12 -04:00