feat: ship deterministic SAST control plane and provider release readiness by junit · Pull Request #2 · junit/pre-commit-review

junit · 2026-08-03T17:55:25Z

Summary

add the deterministic diff control plane, coverage ledger, repository context, static-analysis execution, and orchestration surfaces
add the transactional artifact manager, pinned Gitleaks distribution, and explicit rust-analyzer provider packs
add four-platform release builds, hosted provider measurements, fuzz tiers, supply-chain verification, and release-readiness documentation
stabilize the final macOS provider deadline and Windows runner provenance gates

Verification

Rust 1.95 fmt, clippy, all-targets/all-features tests, and release binary build
all deterministic tests in tests/*_test.sh
all eval self-tests in evals/*_test.sh
full shellcheck and bash syntax gates
27 schemas, canonical artifact metadata, actionlint, release fixture verification, and cargo-fuzz build
build-only release run: https://github.com/junit/pre-commit-review/actions/runs/30836177203 (12 jobs passed)

Release boundary

This PR does not publish v0.1.0. Core attestation and publication remain reachable only from an immutable v* tag after merge.

coderabbitai · 2026-08-03T17:55:40Z

Important

Review skipped

Too many files!

This PR contains 341 files, which is 241 over the limit of 100.

To get a review, reduce the PR to 100 files or fewer by splitting it into smaller PRs or changing its base branch.

Upgrade to a paid plan to raise the limit.

Usage-priced reviews support at most 300 files.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 4d9d9e55-dc5b-44be-9918-7ba313ea6c8e

📥 Commits

Reviewing files that changed from the base of the PR and between 9841558 and b99b9de.

⛔ Files ignored due to path filters (6)

collect-diff-context-cli/Cargo.lock is excluded by !**/*.lock
collect-diff-context-cli/fuzz/Cargo.lock is excluded by !**/*.lock
tests/fixtures/provider-release/provider-pack.tar.gz is excluded by !**/*.gz
tests/fixtures/provider-release/upstream-archive.bin is excluded by !**/*.bin
tests/fixtures/release/pre-commit-review-core-0.1.0-linux-amd64.tar.gz is excluded by !**/*.gz
tests/fixtures/release/pre-commit-review-gitleaks-8.30.1-pcr.1-linux-amd64.tar.gz is excluded by !**/*.gz

📒 Files selected for processing (341)

.github/actionlint.yaml
.github/workflows/artifact-pack-release.yml
.github/workflows/lint.yml
.github/workflows/provider-fuzz-scheduled.yml
.github/workflows/provider-real-server.yml
.github/workflows/release.yml
.gitignore
CONTRIBUTING.md
README.md
README.zh-CN.md
SKILL.md
THIRD_PARTY_LICENSES/rusqlite-LICENSE
THIRD_PARTY_LICENSES/sqlite-PUBLIC-DOMAIN.md
THIRD_PARTY_LICENSES/tree-sitter-LICENSE
THIRD_PARTY_LICENSES/tree-sitter-rust-LICENSE
THIRD_PARTY_LICENSES/url-LICENSE-APACHE
THIRD_PARTY_LICENSES/url-LICENSE-MIT
collect-diff-context-cli/Cargo.toml
collect-diff-context-cli/benches/impact_context.rs
collect-diff-context-cli/benches/repository_index.rs
collect-diff-context-cli/fuzz/.gitignore
collect-diff-context-cli/fuzz/Cargo.toml
collect-diff-context-cli/fuzz/README.md
collect-diff-context-cli/fuzz/corpus/file_facts_decode/checksum-mismatch
collect-diff-context-cli/fuzz/corpus/file_facts_decode/corrupt
collect-diff-context-cli/fuzz/corpus/file_facts_decode/empty
collect-diff-context-cli/fuzz/corpus/impact_contract/completed.json
collect-diff-context-cli/fuzz/corpus/impact_contract/degraded.json
collect-diff-context-cli/fuzz/corpus/impact_contract/failed.json
collect-diff-context-cli/fuzz/corpus/impact_contract/invalidated.json
collect-diff-context-cli/fuzz/corpus/impact_contract/partial.json
collect-diff-context-cli/fuzz/corpus/impact_contract/recovered.json
collect-diff-context-cli/fuzz/corpus/impact_contract/truncated.json
collect-diff-context-cli/fuzz/corpus/impact_contract/unavailable.json
collect-diff-context-cli/fuzz/corpus/repository_context_frame/content-length
collect-diff-context-cli/fuzz/corpus/repository_context_frame/empty
collect-diff-context-cli/fuzz/corpus/repository_context_messages/response
collect-diff-context-cli/fuzz/corpus/repository_graph_row/corrupt-row
collect-diff-context-cli/fuzz/corpus/repository_graph_row/partial-row
collect-diff-context-cli/fuzz/corpus/repository_overlay/delete
collect-diff-context-cli/fuzz/corpus/repository_overlay/high-fanout
collect-diff-context-cli/fuzz/corpus/repository_overlay/partial
collect-diff-context-cli/fuzz/corpus/repository_overlay/rename
collect-diff-context-cli/fuzz/corpus/repository_traversal/cyclic
collect-diff-context-cli/fuzz/corpus/repository_traversal/high-fanout
collect-diff-context-cli/fuzz/corpus/tree_sitter_rust/many_calls
collect-diff-context-cli/fuzz/fuzz_targets/file_facts_decode.rs
collect-diff-context-cli/fuzz/fuzz_targets/impact_contract.rs
collect-diff-context-cli/fuzz/fuzz_targets/repository_context_frame.rs
collect-diff-context-cli/fuzz/fuzz_targets/repository_context_messages.rs
collect-diff-context-cli/fuzz/fuzz_targets/repository_graph_row.rs
collect-diff-context-cli/fuzz/fuzz_targets/repository_overlay.rs
collect-diff-context-cli/fuzz/fuzz_targets/repository_traversal.rs
collect-diff-context-cli/fuzz/fuzz_targets/support.rs
collect-diff-context-cli/fuzz/fuzz_targets/tree_sitter_rust.rs
collect-diff-context-cli/schemas/impact-context.schema.json
collect-diff-context-cli/schemas/pre-commit-review-core-pack.schema.json
collect-diff-context-cli/schemas/repository-context-project-model.schema.json
collect-diff-context-cli/schemas/repository-context-provider-profile.schema.json
collect-diff-context-cli/schemas/repository-context-provider-registry.schema.json
collect-diff-context-cli/schemas/repository-context-provider-report.schema.json
collect-diff-context-cli/schemas/repository-context-provider-request.schema.json
collect-diff-context-cli/schemas/repository-context-provider-run-request.schema.json
collect-diff-context-cli/schemas/repository-index-report.schema.json
collect-diff-context-cli/schemas/review-control-plane.schema.json
collect-diff-context-cli/schemas/review-plan.schema.json
collect-diff-context-cli/schemas/static-analysis-evidence.schema.json
collect-diff-context-cli/schemas/static-analysis-execution.schema.json
collect-diff-context-cli/schemas/static-analysis-input.schema.json
collect-diff-context-cli/schemas/static-analysis-orchestration-manifest.schema.json
collect-diff-context-cli/schemas/static-analysis-orchestration.schema.json
collect-diff-context-cli/schemas/static-analysis-profile.schema.json
collect-diff-context-cli/schemas/third-party-artifact-baseline.schema.json
collect-diff-context-cli/schemas/third-party-artifact-pack.schema.json
collect-diff-context-cli/schemas/third-party-artifact-receipt.schema.json
collect-diff-context-cli/schemas/third-party-artifact-report.schema.json
collect-diff-context-cli/schemas/third-party-artifact-revocations.schema.json
collect-diff-context-cli/schemas/third-party-artifacts.schema.json
collect-diff-context-cli/schemas/third-party-source-lock.schema.json
collect-diff-context-cli/src/app.rs
collect-diff-context-cli/src/artifacts/cache.rs
collect-diff-context-cli/src/artifacts/cli.rs
collect-diff-context-cli/src/artifacts/contract.rs
collect-diff-context-cli/src/artifacts/mod.rs
collect-diff-context-cli/src/artifacts/pack.rs
collect-diff-context-cli/src/artifacts/probes.rs
collect-diff-context-cli/src/artifacts/provider.rs
collect-diff-context-cli/src/artifacts/transport.rs
collect-diff-context-cli/src/artifacts/writer.rs
collect-diff-context-cli/src/bin/artifact_pack_writer.rs
collect-diff-context-cli/src/bin/provider_baseline_sample_runner.rs
collect-diff-context-cli/src/bin/repository_context.rs
collect-diff-context-cli/src/bin/repository_context_provider.rs
collect-diff-context-cli/src/bin/repository_context_provider_fixture.rs
collect-diff-context-cli/src/bin/static_analysis.rs
collect-diff-context-cli/src/bin/static_analysis_fixture.rs
collect-diff-context-cli/src/candidate/content.rs
collect-diff-context-cli/src/candidate/mod.rs
collect-diff-context-cli/src/candidate/snapshot.rs
collect-diff-context-cli/src/git_policy.rs
collect-diff-context-cli/src/impact_context/adapters/mod.rs
collect-diff-context-cli/src/impact_context/adapters/repository_index.rs
collect-diff-context-cli/src/impact_context/adapters/text.rs
collect-diff-context-cli/src/impact_context/adapters/tree_sitter_rust.rs
collect-diff-context-cli/src/impact_context/budget.rs
collect-diff-context-cli/src/impact_context/cache/cleanup.rs
collect-diff-context-cli/src/impact_context/cache/file_facts.rs
collect-diff-context-cli/src/impact_context/cache/generation_locator.rs
collect-diff-context-cli/src/impact_context/cache/integrity.rs
collect-diff-context-cli/src/impact_context/cache/locking.rs
collect-diff-context-cli/src/impact_context/cache/mod.rs
collect-diff-context-cli/src/impact_context/cache/sqlite_generation.rs
collect-diff-context-cli/src/impact_context/contracts.rs
collect-diff-context-cli/src/impact_context/engine.rs
collect-diff-context-cli/src/impact_context/index/budget.rs
collect-diff-context-cli/src/impact_context/index/manifest.rs
collect-diff-context-cli/src/impact_context/index/mod.rs
collect-diff-context-cli/src/impact_context/index/model.rs
collect-diff-context-cli/src/impact_context/index/overlay.rs
collect-diff-context-cli/src/impact_context/index/project_model.rs
collect-diff-context-cli/src/impact_context/index/resolver/mod.rs
collect-diff-context-cli/src/impact_context/index/resolver/rust.rs
collect-diff-context-cli/src/impact_context/index/traversal.rs
collect-diff-context-cli/src/impact_context/mod.rs
collect-diff-context-cli/src/impact_context/normalizer.rs
collect-diff-context-cli/src/impact_context/summarizer.rs
collect-diff-context-cli/src/lib.rs
collect-diff-context-cli/src/main.rs
collect-diff-context-cli/src/process_group.rs
collect-diff-context-cli/src/provider_resources.rs
collect-diff-context-cli/src/provider_resources/linux.rs
collect-diff-context-cli/src/repository_context_provider/baseline_fixture.rs
collect-diff-context-cli/src/repository_context_provider/baseline_fixture/fixture_tree.rs
collect-diff-context-cli/src/repository_context_provider/cli.rs
collect-diff-context-cli/src/repository_context_provider/cli_contract.rs
collect-diff-context-cli/src/repository_context_provider/contract.rs
collect-diff-context-cli/src/repository_context_provider/json_rpc.rs
collect-diff-context-cli/src/repository_context_provider/mod.rs
collect-diff-context-cli/src/repository_context_provider/model.rs
collect-diff-context-cli/src/repository_context_provider/rust_analyzer.rs
collect-diff-context-cli/src/repository_context_provider/session.rs
collect-diff-context-cli/src/repository_context_provider/snapshot.rs
collect-diff-context-cli/src/review_scope.rs
collect-diff-context-cli/src/secret_scan.rs
collect-diff-context-cli/src/static_analysis/contracts.rs
collect-diff-context-cli/src/static_analysis/evidence.rs
collect-diff-context-cli/src/static_analysis/evidence_union.rs
collect-diff-context-cli/src/static_analysis/executor.rs
collect-diff-context-cli/src/static_analysis/mod.rs
collect-diff-context-cli/src/static_analysis/orchestration.rs
collect-diff-context-cli/src/static_analysis/output.rs
collect-diff-context-cli/src/trusted_runtime.rs
collect-diff-context-cli/src/windows_acl.rs
collect-diff-context-cli/tests/artifact_cache.rs
collect-diff-context-cli/tests/artifact_cli.rs
collect-diff-context-cli/tests/artifact_contracts.rs
collect-diff-context-cli/tests/artifact_pack.rs
collect-diff-context-cli/tests/artifact_provider_pack.rs
collect-diff-context-cli/tests/candidate_content.rs
collect-diff-context-cli/tests/file_facts_store.rs
collect-diff-context-cli/tests/fixtures/impact_context/Dockerfile
collect-diff-context-cli/tests/fixtures/impact_context/config.toml
collect-diff-context-cli/tests/fixtures/impact_context/rust-clean.expected.json
collect-diff-context-cli/tests/fixtures/impact_context/rust-clean.rs
collect-diff-context-cli/tests/fixtures/impact_context/rust-recovered.expected.json
collect-diff-context-cli/tests/fixtures/impact_context/rust-recovered.rs
collect-diff-context-cli/tests/fixtures/repository_context_provider/real/cycles/Cargo.toml
collect-diff-context-cli/tests/fixtures/repository_context_provider/real/cycles/src/lib.rs
collect-diff-context-cli/tests/fixtures/repository_context_provider/real/multi_crate/Cargo.toml
collect-diff-context-cli/tests/fixtures/repository_context_provider/real/multi_crate/app/Cargo.toml
collect-diff-context-cli/tests/fixtures/repository_context_provider/real/multi_crate/app/src/lib.rs
collect-diff-context-cli/tests/fixtures/repository_context_provider/real/multi_crate/shared/Cargo.toml
collect-diff-context-cli/tests/fixtures/repository_context_provider/real/multi_crate/shared/src/lib.rs
collect-diff-context-cli/tests/fixtures/repository_context_provider/real/partial/Cargo.toml
collect-diff-context-cli/tests/fixtures/repository_context_provider/real/partial/src/lib.rs
collect-diff-context-cli/tests/fixtures/repository_context_provider/real/single_crate/Cargo.toml
collect-diff-context-cli/tests/fixtures/repository_context_provider/real/single_crate/src/lib.rs
collect-diff-context-cli/tests/fixtures/repository_context_provider/real/unicode_crlf/.gitattributes
collect-diff-context-cli/tests/fixtures/repository_context_provider/real/unicode_crlf/Cargo.toml
collect-diff-context-cli/tests/fixtures/repository_context_provider/real/unicode_crlf/src/lib.rs
collect-diff-context-cli/tests/fixtures/repository_index/ambiguous/Cargo.toml
collect-diff-context-cli/tests/fixtures/repository_index/ambiguous/src/a.rs
collect-diff-context-cli/tests/fixtures/repository_index/ambiguous/src/b.rs
collect-diff-context-cli/tests/fixtures/repository_index/ambiguous/src/caller.rs
collect-diff-context-cli/tests/fixtures/repository_index/ambiguous/src/lib.rs
collect-diff-context-cli/tests/fixtures/repository_index/basic/Cargo.toml
collect-diff-context-cli/tests/fixtures/repository_index/basic/src/api.rs
collect-diff-context-cli/tests/fixtures/repository_index/basic/src/auth.rs
collect-diff-context-cli/tests/fixtures/repository_index/basic/src/lib.rs
collect-diff-context-cli/tests/fixtures/repository_index/basic/tests/auth_flow.rs
collect-diff-context-cli/tests/impact_context_contracts.rs
collect-diff-context-cli/tests/impact_context_performance.rs
collect-diff-context-cli/tests/impact_context_rust.rs
collect-diff-context-cli/tests/provider_baseline.rs
collect-diff-context-cli/tests/provider_baseline_runner.rs
collect-diff-context-cli/tests/provider_install.rs
collect-diff-context-cli/tests/provider_manifest_update.rs
collect-diff-context-cli/tests/repository_context_cli.rs
collect-diff-context-cli/tests/repository_context_json_rpc.rs
collect-diff-context-cli/tests/repository_context_provider_cli.rs
collect-diff-context-cli/tests/repository_context_provider_cli_contracts.rs
collect-diff-context-cli/tests/repository_context_provider_contracts.rs
collect-diff-context-cli/tests/repository_context_provider_model.rs
collect-diff-context-cli/tests/repository_context_provider_platform.rs
collect-diff-context-cli/tests/repository_context_provider_real.rs
collect-diff-context-cli/tests/repository_context_provider_snapshot.rs
collect-diff-context-cli/tests/repository_context_resources.rs
collect-diff-context-cli/tests/repository_context_rust_analyzer.rs
collect-diff-context-cli/tests/repository_context_session.rs
collect-diff-context-cli/tests/repository_index_cli.rs
collect-diff-context-cli/tests/repository_index_contracts.rs
collect-diff-context-cli/tests/repository_index_integration.rs
collect-diff-context-cli/tests/repository_manifest.rs
collect-diff-context-cli/tests/repository_overlay.rs
collect-diff-context-cli/tests/repository_traversal.rs
collect-diff-context-cli/tests/review_scope.rs
collect-diff-context-cli/tests/rust_file_facts.rs
collect-diff-context-cli/tests/rust_project_model.rs
collect-diff-context-cli/tests/rust_repository_resolver.rs
collect-diff-context-cli/tests/sqlite_repository_graph.rs
collect-diff-context-cli/tests/static_evidence.rs
collect-diff-context-cli/tests/static_execution.rs
collect-diff-context-cli/tests/static_execution_modes.rs
collect-diff-context-cli/tests/static_execution_platform.rs
collect-diff-context-cli/tests/static_orchestration.rs
collect-diff-context-cli/tests/support/artifact_fixture.rs
collect-diff-context-cli/tests/support/mod.rs
docs/call-graph-open-source-options.md
docs/gitleaks-distribution-strategy-research.md
docs/helper-capabilities.md
docs/persistent-symbol-index-sqlite-spike-results.md
docs/persistent-symbol-index-storage-engine-research.md
docs/rust-analyzer-context-provider.md
docs/static-analysis-competitive-research.md
docs/static-analysis-evidence.md
docs/static-analysis-execution.md
docs/static-analysis-orchestration.md
docs/superpowers/plans/2026-07-26-rust-static-analysis-consolidation.md
docs/superpowers/plans/2026-07-26-rust-static-analysis-orchestration-mvp.md
docs/superpowers/plans/2026-07-27-persistent-symbol-index-storage-spike.md
docs/superpowers/plans/2026-07-27-persistent-symbol-index.md
docs/superpowers/plans/2026-07-28-rust-analyzer-provider.md
docs/superpowers/plans/2026-07-29-rust-analyzer-provider-cli.md
docs/superpowers/plans/2026-07-29-rust-analyzer-provider-pack-release-readiness.md
docs/superpowers/plans/2026-07-29-third-party-artifact-distribution-gitleaks-migration.md
docs/superpowers/plans/2026-08-02-windows-artifact-verify-stack-overflow.md
docs/superpowers/specs/2026-07-25-rust-multi-analyzer-orchestration-design.md
docs/superpowers/specs/2026-07-26-repository-impact-context-design.md
docs/superpowers/specs/2026-07-27-persistent-symbol-index-design.md
docs/superpowers/specs/2026-07-28-rust-analyzer-provider-design.md
docs/superpowers/specs/2026-07-29-rust-analyzer-provider-cli-design.md
docs/superpowers/specs/2026-07-29-third-party-artifact-provider-distribution-design.md
evals/eval_contract_test.sh
evals/output-eval.json
evals/output/advanced-output-eval.json
evals/output_eval_runner.sh
evals/output_eval_runner_test.sh
evals/readme_surface_test.sh
evals/run_impact_context_shadow.sh
install.sh
references/advanced/coverage-led-review.md
references/decision/finding-verification.md
references/decision/static-analysis-evidence.md
references/decision/static-analysis-execution.md
references/decision/static-analysis-orchestration.md
references/decision/verdict-rules.md
references/rendering/output-en.md
references/rendering/output-zh.md
scripts/build_all_binaries.sh
scripts/build_artifact_pack.sh
scripts/check_artifacts.sh
scripts/check_gitleaks.sh
scripts/collect_diff_context.legacy.sh
scripts/collect_diff_context.sh
scripts/collect_impact_context.sh
scripts/collect_static_evidence.sh
scripts/fetch_gitleaks.sh
scripts/generate_provider_manifest_update.py
scripts/index_repository_context.sh
scripts/lib/collect_diff_context_cli.sh
scripts/lib/gitleaks_integrity.sh
scripts/lib/repository_context_cli.sh
scripts/lib/repository_context_provider_cli.sh
scripts/lib/static_analysis_cli.sh
scripts/measure_provider_baseline.py
scripts/orchestrate_static_analysis.sh
scripts/run_repository_context_provider.sh
scripts/run_static_analysis.sh
scripts/validate_schemas.py
scripts/verify_provider_release.sh
scripts/verify_release_artifacts.sh
tests/artifact_distribution_test.sh
tests/artifact_reachability_test.sh
tests/check_artifacts_test.sh
tests/collect_diff_context_test.sh
tests/control_plane_test.sh
tests/fixtures/provider-release/base-manifest.json
tests/fixtures/provider-release/generator-config.json
tests/fixtures/provider-release/pack-manifest.json
tests/fixtures/provider-release/pack-manifest.json.attestation.json
tests/fixtures/provider-release/provider-pack.tar.gz.attestation.json
tests/fixtures/provider-release/release.json
tests/fixtures/provider-release/reviewed-baseline.json
tests/fixtures/provider-release/sbom.cdx.json
tests/fixtures/provider-release/sbom.cdx.json.attestation.json
tests/fixtures/provider-release/verified-publication.json
tests/fixtures/release/core-distribution.json
tests/fixtures/release/core-sbom.cdx.json
tests/fixtures/release/pack-manifest.json
tests/fixtures/release/pack-sbom.cdx.json
tests/fixtures/release/pre-commit-review-core-0.1.0-linux-amd64.tar.gz.attestation.json
tests/fixtures/release/pre-commit-review-core-0.1.0-linux-amd64.tar.gz.sha256
tests/fixtures/release/pre-commit-review-gitleaks-8.30.1-pcr.1-linux-amd64.tar.gz.attestation.json
tests/fixtures/release/pre-commit-review-gitleaks-8.30.1-pcr.1-linux-amd64.tar.gz.sha256
tests/fixtures/release/release.json
tests/fixtures/release/revocations.json
tests/gitleaks_distribution_test.sh
tests/impact_context_shadow_test.sh
tests/install_agent_matrix_test.sh
tests/install_gitleaks_test.sh
tests/install_rust_analyzer_test.sh
tests/install_smoke_test.sh
tests/lib/normalize_parity_output.py
tests/parity_golden_test.sh
tests/provider_real_server_test.sh
tests/provider_release_verifier_test.sh
tests/repository_context_provider_cli_test.sh
tests/repository_context_test.sh
tests/repository_index_test.sh
tests/repository_index_workflow_test.sh
tests/skill_contract_test.sh
tests/static_analysis_evidence_test.sh
tests/static_analysis_execution_modes_test.sh
tests/static_analysis_execution_test.sh
tests/static_analysis_orchestration_test.sh
third_party_artifacts/baselines/rust-analyzer-2026.07.27-pcr.3.json
third_party_artifacts/manifest.json
third_party_artifacts/packs/.gitkeep
third_party_artifacts/revocations.json
third_party_artifacts/sources/gitleaks-8.30.1.json
third_party_artifacts/sources/rust-analyzer-2026-07-27.json

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

wifibaby4u added 30 commits July 20, 2026 10:17

feat: add controlled static analysis workflow

1585def

docs: design Rust multi-analyzer orchestration

3b642c0

docs: refine Rust static analysis roadmap

d8162fc

docs: plan Rust static analysis deliveries

c29d44a

refactor: expose Rust review library

b1e6a63

refactor: extract authoritative review scope

7de51db

feat: add Rust static analysis contracts

2b590b9

feat: port static evidence parsing to Rust

6d0faf2

feat: map Rust static evidence to review scope

69f1adc

feat: build tracked candidate snapshots in Rust

8336f2c

feat: execute authorized analyzers in Rust

9011132

feat: emit Rust controlled analysis artifacts

4f63e10

test: gate Rust static analysis parity

c5789e4

feat: switch static analysis wrappers to Rust

b397e14

build: package Rust static analysis binary

5775d0b

refactor: remove Python static analysis runtime

41cae8a

fix: stabilize analyzer path rejection

e58b36d

feat: define static analysis orchestration contracts

115e9e7

feat: preflight analyzer manifests

abbe926

feat: share one analyzer snapshot

0ec5e6e

feat: enforce orchestration budgets

fa9c6d4

feat: schedule analyzers serially

6a70a6d

fix: start analyzer timeout after spawn

1aa0088

feat: union analyzer evidence independently

c067c07

feat: expose static analysis orchestration

715cef8

docs: integrate static analysis orchestration

7aaaaf7

build: package static analysis orchestration

3df4025

docs: design repository impact context

fc01338

chore: ignore local worktrees

4de2341

build: pin rust syntax parser dependencies

b140d41

wifibaby4u added 22 commits August 1, 2026 15:12

ci(provider): gate real servers fuzz and release trust

b81eb5c

fix(artifacts): bound trusted runtime stack use

0b39b67

docs(artifacts): record Windows stack remediation plan

2ab28b8

fix(provider): make hosted gates platform-safe

3461dd4

fix(provider): complete hosted measurement target contract

e039e5d

fix(provider): close hosted Windows and baseline gates

1af2529

fix(provider): stabilize hosted measurement execution

f8b547a

chore(provider): trace hosted seed matching

e884192

chore(provider): enable hosted seed trace

51ae9ba

chore(provider): report hosted seed mismatch

b0e29ba

fix(provider): retry transient empty call hierarchy seeds

9bb9ae2

test(provider): expose Windows LSP root identity drift

490ebf7

fix(provider): normalize linked project root paths

4fd8111

fix(provider): normalize Windows snapshot URI paths

04fab86

fix(provider): bind Windows hosted image identity

b779cbd

fix(provider): compare hosted Git path identity

53a583a

test(provider): establish pack-versioned latency baselines

3a42ce6

docs(provider): record release readiness boundaries

d6479aa

test(repository): isolate output limit from fast deadline

c04579a

test(provider): emit malformed frame without handshake

9a17b52

fix: harden release and provider test contracts

159ce07

fix(provider): stabilize release gates

4148b3e

wifibaby4u added 6 commits August 4, 2026 03:03

fix(ci): stabilize cross-platform release gates

671647e

test(provider): construct explicit file URI authority

c13e733

test(static): use platform absolute profile paths

3635213

fix(test): stabilize provider and fuzz gate timing

3dc65cd

fix(ci): pin integration schema validator

e6c7ca1

test(provider): synchronize postflight cancellation

b99b9de

junit merged commit 93561e2 into main Aug 4, 2026
18 checks passed

Navigation Menu

feat: ship deterministic SAST control plane and provider release readiness - #2

feat: ship deterministic SAST control plane and provider release readiness#2
junit merged 163 commits into
mainfrom
feature/SAST

junit commented Aug 3, 2026

Uh oh!

coderabbitai Bot commented Aug 3, 2026 •

edited

Loading

Review skipped

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

junit commented Aug 3, 2026

Summary

Verification

Release boundary

Uh oh!

coderabbitai Bot commented Aug 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

coderabbitai Bot commented Aug 3, 2026 •

edited

Loading