Sharang ParnerkarandClaude Fable 5 075a4cb81b feat(agent): wire control triage into the scan pipeline (end-to-end SAST) ...

After the deterministic tools run, the orchestrator's new control_triage stage
stamps each finding with the compliance control(s) it is evidence for and flags
control false positives. triage_repo_findings builds control specs from the
ingested OSCAL catalog, reads a code window per finding, and runs ControlTriage
(control-map LUT -> grounded judge). Adds Finding.control_refs (serde default);
the ground gate stamps it. Opt-in via BREAKPILOT_BASE_URL. 2 region tests.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-21 10:28:01 +02:00

..

src

feat(agent): wire control triage into the scan pipeline (end-to-end SAST)

2026-07-21 10:28:01 +02:00

tests

feat(oscal): ingest breakpilot OSCAL catalog via OscalControlsProvider (#210)

2026-07-20 16:19:09 +00:00

Cargo.toml

feat(werkbank): job/result contract in compliance-core (WB-01) (#205)

2026-07-17 08:54:11 +00:00