Repository navigation

feat: taint() — m sources x n sinks in one traversal, with a refutation you can act on (leg 4b) - #393

Merged

rahlk merged 52 commits into

release/2.0from

feat/issue-382-leg-4b-taint

Sep 11, 2026

Commits on Sep 9, 2026

refactor(graphs): lift via_case and path_order out of the three Neo4j backends
rahlk
committed
fb626d7
refactor(graphs): add sdg_path_query, reproducing all three _PATHS byte-identically
rahlk
committed
a5ee1ac
refactor(neo4j): build _PATHS from the shared generator in all three backends
rahlk
committed
3417c31
test(commons): stop comparing against the now-deleted _VIA_CASE/_PATH_ORDER
rahlk
committed
9b6b36b
test(commons): replace the expired byte-identity guard with a digest tripwire
rahlk
committed
23f0921
refactor(graphs): make sdg_path_query's scope params callables
rahlk
committed
b2e0beb
refactor(neo4j): pass _scoped itself to sdg_path_query, not a call
rahlk
committed
787876a
test(commons): drop PATHS_ARGS, judge the shipped statement instead
rahlk
committed
25d5557
Merge branch 'chore/issue-386-relax-model-extra' into feat/issue-382-leg-4b-taint
rahlk
committed
e27d834
feat(results): TaintResult, with exhausted named for the search and not the conclusion
rahlk
committed
5444dab
docs(results): TaintResult.unresolved — describe the pair association as message prose, not a Diagnostic guarantee
rahlk
committed
6f3aef6
feat(graphs): shortest_walks filters in both passes, so a sanitized short route cannot hide a clean long one
rahlk
committed
b0cd49e
test(graphs): guard the replay's own filter and the src cut in shortest_walks
rahlk
committed
606d548
feat(graphs): sdg_taint_query, with the sanitizer cut inside the pattern
rahlk
committed
336995f
feat(resolve): sanitizer selectors route by shape, scoped to their callable
rahlk
committed
ed14b3d

Commits on Sep 10, 2026

Commits on Sep 11, 2026

Merge remote-tracking branch 'origin/release/2.0' into feat/issue-382-leg-4b-taint
rahlk
committed
f7eec92