7 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Sharang ParnerkarandClaude Fable 5	95c18e7683	feat(agent): C4 — semantic_stamp_findings + provider load_master_controls ... Wires the semantic mapping into a callable scan pass: - OscalControlsProvider: token-based fetch refactor + load_master_controls() (pulls ?framework=master-controls) - semantic_stamp_findings(): build the ControlIndex from the master-controls catalog, then per finding embed its code region, retrieve the top-K nearest master controls, grounded-judge confirm, and stamp the confirmed ids onto control_refs (alongside the CRA CWE-LUT refs). Opt-in — the orchestrator doesn't auto-run it, and it rebuilds the corpus index per call (production should cache it). Live-verifiable once breakpilot #129 deploys. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-21 12:43:58 +02:00
Sharang ParnerkarandClaude Fable 5	30487e4d8f	feat(agent): semantic control mapping — embedding index + region->control retrieval ... The scale mechanism for the master-control corpus (which carries no CWE to LUT on): ControlIndex embeds each control's requirement text and returns the top-K nearest to a code region (cosine); SemanticControlChecker retrieves those K, judges each with the grounded judge, and grounds the verdicts -> control_refs. The region->control direction (vs the CWE-LUT's finding->control) is what scales to ~13.6k: the LLM only ever judges a handful of retrieved candidates, and every survivor is still anchored to real code by the grounding gate. Reuses judge + ground gate. Stub-tested (cosine ranking, retrieve->ground, ungrounded dropped). Not yet wired into the scan (needs the master-controls catalog live, breakpilot #129). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-21 12:35:30 +02:00
Sharang Parnerkar	5cafd13f44	ci: log orca webhook response so deploy steps arent silent	2026-04-08 15:09:27 +02:00
Sharang ParnerkarandClaude Opus 4.6	69209649a5	ci: trigger first orca build for all services ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-08 10:10:07 +02:00
Sharang ParnerkarandClaude Opus 4.6	d5439adc0d	ci: trigger build of dashboard, docs, mcp images for orca ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-08 10:09:49 +02:00
Sharang ParnerkarandClaude Opus 4.6	bc7cdd35e4	ci: replace coolify webhook with orca deploy ... Each deploy job now builds the per-service image, pushes to the private registry as :latest and :sha, then triggers an HMAC-signed orca redeploy webhook. Coolify webhooks are no longer used. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-08 10:06:11 +02:00
Sharang ParnerkarandClaude Opus 4.6	c062d834a1	fix: downgrade dotenv missing file from FAILED to info message ... Non-fatal in Docker where env vars come from container config. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-30 15:33:24 +02:00