2 Commits

Include renames

Author	SHA1	Message	Date
Sharang ParnerkarandClaude Fable 5	075a4cb81b	feat(agent): wire control triage into the scan pipeline (end-to-end SAST) ... After the deterministic tools run, the orchestrator's new control_triage stage stamps each finding with the compliance control(s) it is evidence for and flags control false positives. triage_repo_findings builds control specs from the ingested OSCAL catalog, reads a code window per finding, and runs ControlTriage (control-map LUT -> grounded judge). Adds Finding.control_refs (serde default); the ground gate stamps it. Opt-in via BREAKPILOT_BASE_URL. 2 region tests. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-21 10:28:01 +02:00
Sharang ParnerkarandClaude Opus 4.8	d1f42a1a83	feat(agent): grounded control checker — compose judge -> ground gate ... GroundedControlChecker<J: ControlJudge>::check(spec, regions, repo_id) judges each candidate region and keeps only findings that survive the core grounding gate. Generic over the judge so tests drive it with a deterministic stub — the recognize->ground path is proven without an LLM (grounded snippet kept, ungrounded dropped, non-violation yields nothing). 2 lib tests. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-20 22:51:57 +02:00