16 Commits

Include renames

Author	SHA1	Message	Date
Sharang ParnerkarandClaude Fable 5	31f1635ee8	feat(controls): enrich semantic retrieval query with finding intent + C5 live test ... Tuning from the C5 live run against the real 2,882-control master corpus. The semantic pass retrieved on the code region alone, so two findings in one file (overlapping windows, both md5/password tokens) collapsed onto the SAME controls — a brute-force finding wrongly matched password-hashing controls. Fix: build the retrieval query from the finding's title + description + region, so retrieval keys on what the finding is *about*. The raw region still goes to the judge for snippet grounding. Verified live (same fixture, cached corpus index): - 'Weak password hash (md5)' -> mc-23149 (eliminate weak unsalted hashes) now RANK 1 - 'Login without brute-force prot' -> newly surfaces mc-19984 (brute_force_protection) + mc-23186 (account_lockout) — the correct controls, absent under region-only retrieval. Also commits the gated live regression test (tests/c5_semantic_live.rs, #[ignore]d, not run by CI's --lib): ingest-only + full semantic-stamping checks against api-dev. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-22 09:06:18 +02:00
sharang	5285fb67ae	feat(oscal): live assessment endpoint POST /api/v1/oscal/assess (#212)	2026-07-20 19:13:47 +00:00
sharang	94c0d51a11	feat(werkbank): make the loop runnable — enqueue + artifact serve/fetch (WB-05b) (#209)	2026-07-17 14:34:00 +00:00
sharang	91a87677bc	feat(werkbank): runner queue endpoints + result persistence (WB-05) (#207)	2026-07-17 11:42:29 +00:00
sharang	633f945a1e	feat(werkbank): Mongo-backed job queue with lease + visibility timeout (WB-02) (#206)	2026-07-17 09:15:23 +00:00
sharang	7ad7bce9db	feat(plc): dynamic PLC testing via ephemeral soft-PLC (#193)	2026-07-17 07:47:43 +00:00
sharang	a981311413	refactor: rip out the legacy TrackedRepository / repositories path (#161)	2026-07-16 07:25:45 +00:00
sharang	c6a02f0ac3	feat(pipeline): unified run_target execution behind UNIFIED_PIPELINE (#145)	2026-07-12 21:31:21 +00:00
sharang	a204f0c59c	feat(api): onboarding endpoints for unified targets (#142)	2026-07-12 20:15:22 +00:00
sharang	cf4afdda1b	feat(migrate): onboarding backfill (repositories + dast_targets -> onboarded_targets) (#141)	2026-07-12 20:11:16 +00:00
sharang	ef6ee3dcd1	feat(onboarding): artifact ingest + classifier + native tramiton + suite seams (#138)	2026-07-10 16:00:51 +00:00
sharang	ac24ca766a	feat(m7.3): cross-tenant admin HTTP endpoints (#95) ... GET /api/admin/tenants lists tenant DBs; DELETE /api/admin/tenants/{tenant_id} drops them (GDPR). Behind a separate auth path that rejects customer realm tokens.	2026-06-30 15:23:39 +00:00
sharang	56482911b8	fix(dashboard): attach Keycloak token on agent API calls (#90)	2026-06-17 18:35:59 +00:00
sharang	183234f9af	feat(m7.1): wire compliance-agent to compliance-core auth + status gate (#85)	2026-06-17 09:36:52 +00:00
sharang	4388e98b5b	feat: add E2E test suite with nightly CI, fix dashboard Dockerfile (#52)	2026-03-30 10:04:07 +00:00
sharang	3bb690e5bb	refactor: modularize codebase and add 404 unit tests (#13)	2026-03-13 08:03:45 +00:00