feat(sc10): detect direct dependency-source redirection - #430

Draft

Spectorian wants to merge 30 commits into

mainfrom

codex/sc10-core-config-coverage

Commits on Aug 24, 2026

test(sc10): add permanent dependency source corpus
Spectorian
committed
a87e027
test(sc10): tighten direct corpus contracts
Spectorian
committed
c54dfbc
test(sc10): add truthful coverage and output contracts
Spectorian
committed
4f3ce6b
test(sc10): tighten public output contracts
Spectorian
committed
6429e85
test(sc10): derive coverage renderer assertions
Spectorian
committed
0a6b357
test(sc10): define dependency source contracts
Spectorian
committed
d2d2da8
feat(sc10): add dependency source contracts
Spectorian
committed
3d7a454
fix(sc10): harden dependency source contracts
Spectorian
committed
18a1600
fix(sc10): simplify bounded source redaction
Spectorian
committed
15b71b7
fix(sc10): sanitize scheme-relative sources
Spectorian
committed
d1024ba
fix(sc10): harden proportional URL redaction
Spectorian
committed
d766463
feat(sc10): add dependency source contracts
Spectorian
committed
7ad7410
fix(sc10): harden redaction boundaries
Spectorian
committed
65e27ca
fix(sc10): require code-owned evidence mappings
Spectorian
committed
0e708cb
feat(sc10): detect npm and pip config redirects
Spectorian
committed
942b820
fix(sc10): honor pip config inheritance
Spectorian
committed
e2d9754
fix(sc10): preserve pip section identity
Spectorian
committed
3892997
perf(sc10): bound pip option lookups
Spectorian
committed
93e83e0
feat(sc10): parse yarn and Python tool sources
Spectorian
committed
4a56c34
fix(sc10): harden structured config parsing
Spectorian
committed
f1c4396
feat(sc10): parse cargo and Maven sources
Spectorian
committed
eb4dca7
fix(sc10): reject ambiguous Cargo and Maven config
Spectorian
committed
df14608
feat(sc10): disclose unscanned executable source changes
Spectorian
committed
0d1b07b
test(sc10): cover executable config ledger limits
Spectorian
committed
cc38a79
fix(sc10): preserve and redact deterministic evidence
Spectorian
committed
470709e
fix(sc10): bound report evidence redaction
Spectorian
committed
9fca98b
docs(sc10): document direct config coverage
Spectorian
committed
f7be0c6
docs(sc10): clarify Cargo reporting scope
Spectorian
committed
a8a0fe3
fix(sc10): harden redaction and parser bounds
Spectorian
committed
0f37541
fix(sc10): redact scheme-relative markup URLs
Spectorian
committed
6fe96c4

Navigation Menu

Uh oh!

feat(sc10): detect direct dependency-source redirection - #430

feat(sc10): detect direct dependency-source redirection#430
Spectorian wants to merge 30 commits into
mainfrom
codex/sc10-core-config-coverage

Commits on Aug 24, 2026

test(sc10): add permanent dependency source corpus

test(sc10): tighten direct corpus contracts

test(sc10): add truthful coverage and output contracts

test(sc10): tighten public output contracts

test(sc10): derive coverage renderer assertions

test(sc10): define dependency source contracts

feat(sc10): add dependency source contracts

fix(sc10): harden dependency source contracts

fix(sc10): simplify bounded source redaction

fix(sc10): sanitize scheme-relative sources

fix(sc10): harden proportional URL redaction

feat(sc10): add dependency source contracts

fix(sc10): harden redaction boundaries

fix(sc10): require code-owned evidence mappings

feat(sc10): detect npm and pip config redirects

fix(sc10): honor pip config inheritance

fix(sc10): preserve pip section identity

perf(sc10): bound pip option lookups

feat(sc10): parse yarn and Python tool sources

fix(sc10): harden structured config parsing

feat(sc10): parse cargo and Maven sources

fix(sc10): reject ambiguous Cargo and Maven config

feat(sc10): disclose unscanned executable source changes

test(sc10): cover executable config ledger limits

fix(sc10): preserve and redact deterministic evidence

fix(sc10): bound report evidence redaction

docs(sc10): document direct config coverage

docs(sc10): clarify Cargo reporting scope

fix(sc10): harden redaction and parser bounds

fix(sc10): redact scheme-relative markup URLs