5 Commits

Include renames

Author	SHA1	Message	Date
Sharang ParnerkarandClaude Fable 5	32abbfb7bb	feat(controls): promote grounded controls to covered + enable LLM passes by default ... The grounded surface path (Stage 5d) is validated live: against an absence-vuln fixture it flags cra-ai-11 (unprotected login), cra-ai-24 (unlogged admin action), and cra-ai-28/29/30 (unverified firmware update), each grounded + control-tagged. - LUT: promote the 8 absence-based controls (cra-ai-6,11,12,24,27,28,29,30) needs_tooling -> covered (grounded-control-check binding). CRA coverage is now 21 covered / 0 needs_tooling / 19 not_code_checkable. - Enable both advanced LLM passes by default: semantic_mapping (validated in C5) and grounded_control_checks (validated here). Both were gated only for cost / verification; the GPU is in-house so cost isn't a constraint. Still no-ops unless breakpilot base_url is set and the catalog is reachable. - Gated regression tests (ignored, not run by CI --lib): c5_example2.rs (semantic, 4 varied vulns) and grounded_surface_live.rs (Stage 5d validation). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-22 09:42:06 +02:00
sharang	a7ff36edf3	feat(controls): B3 — categorize the rest of needs_tooling (architectural + RBAC) (#220)	2026-07-21 13:15:27 +00:00
sharang	4ef257bfe2	feat(controls): B2 — grounded surface checks for absence-based CRA controls (#219)	2026-07-21 12:48:12 +00:00
sharang	38fedc661b	feat(controls): B1 — custom semgrep detectors for 4 CRA controls (#218)	2026-07-21 12:31:20 +00:00
sharang	c6baf72c6d	feat: control-driven SAST — LUT + grounded LLM triage over tool findings (#213)	2026-07-21 09:01:51 +00:00