compliance-scanner-agent

2 Commits

Include renames

Author	SHA1	Message	Date
Sharang ParnerkarandClaude Fable 5	95c18e7683	feat(agent): C4 — semantic_stamp_findings + provider load_master_controls CI / Check (push) Skipped CI / Check (pull_request) Successful in 6m3s Details CI / Detect Changes (pull_request) Skipped Details CI / Deploy Agent (pull_request) Skipped Details CI / Deploy Dashboard (pull_request) Skipped Details CI / Deploy Docs (pull_request) Skipped Details CI / Deploy MCP (pull_request) Skipped Details Wires the semantic mapping into a callable scan pass: - OscalControlsProvider: token-based fetch refactor + load_master_controls() (pulls ?framework=master-controls) - semantic_stamp_findings(): build the ControlIndex from the master-controls catalog, then per finding embed its code region, retrieve the top-K nearest master controls, grounded-judge confirm, and stamp the confirmed ids onto control_refs (alongside the CRA CWE-LUT refs). Opt-in — the orchestrator doesn't auto-run it, and it rebuilds the corpus index per call (production should cache it). Live-verifiable once breakpilot #129 deploys. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-21 12:43:58 +02:00
sharang	c6baf72c6d	feat: control-driven SAST — LUT + grounded LLM triage over tool findings (#213 ) CI / Check (push) Skipped Details CI / Detect Changes (push) Successful in 3s Details CI / Deploy Agent (push) Successful in 3m45s Details CI / Deploy Docs (push) Skipped Details CI / Deploy Dashboard (push) Successful in 2m40s Details CI / Deploy MCP (push) Successful in 1m46s Details	2026-07-21 09:01:51 +00:00