Skip to content
Closed
Show file tree
Hide file tree
Changes from 3 commits
Commits
Show all changes
136 commits
Select commit Hold shift + click to select a range
42c2b67
test(sandbox): define quarantined patch validation contract
seonghobae Aug 5, 2026
2fd5f8b
feat(sandbox): implement quarantined patch validation
seonghobae Aug 5, 2026
28b6d58
feat(sandbox): export patch validation API
seonghobae Aug 5, 2026
8d3f3c9
fix(sandbox): preserve nofollow patch path semantics
seonghobae Aug 5, 2026
7d1fb3a
test(sandbox): close patch validator safety branches
seonghobae Aug 5, 2026
de2bab9
fix(sandbox): reject raw backslash patch paths before tokenization
seonghobae Aug 5, 2026
641420b
docs(doctoring): record quarantined patch validation boundary
seonghobae Aug 5, 2026
86052b5
docs(sandbox): explain quarantined patch validation
seonghobae Aug 5, 2026
f6a289d
docs(changelog): record quarantined patch validation
seonghobae Aug 5, 2026
c83fb48
docs(changelog): restore undici release-gate wording
seonghobae Aug 5, 2026
acd9c0b
test(sandbox): expose exact-source and patch handoff races
seonghobae Aug 5, 2026
235b7e8
test(sandbox): expose hidden patch and evidence boundaries
seonghobae Aug 5, 2026
76c059e
fix(sandbox): close patch metadata and mount injection gaps
seonghobae Aug 5, 2026
be89ea9
fix(sandbox): bind exact source and bounded result artifact
seonghobae Aug 5, 2026
b4db02d
test(sandbox): verify safe staging and bounded metadata parsing
seonghobae Aug 5, 2026
ef87aa3
test(sandbox): assert private staged patch and output mount
seonghobae Aug 5, 2026
8a16a92
test(sandbox): reject non-exact source worktrees
seonghobae Aug 5, 2026
7e61a23
docs(sandbox): document staged patch and bounded result evidence
seonghobae Aug 5, 2026
b8c17b9
docs(doctoring): bind staged patch and result trust boundaries
seonghobae Aug 5, 2026
71e885e
ci: repair PR 65 reviewer coverage test-first
seonghobae Aug 5, 2026
b1b00fa
chore(ci): remove temporary self-modifying repair workflow
seonghobae Aug 5, 2026
795b940
test(sandbox): reject dirty and unverifiable source snapshots
seonghobae Aug 5, 2026
2f0608b
fix(sandbox): reject dirty exact-head source snapshots
seonghobae Aug 5, 2026
5d3da44
docs(sandbox): require clean exact-head Git snapshots
seonghobae Aug 5, 2026
fe15128
docs(doctoring): require clean exact-head source evidence
seonghobae Aug 5, 2026
5045cc4
test(sandbox): hide Git credentials from untrusted validation
seonghobae Aug 5, 2026
13b33e2
fix(sandbox): mask Git control metadata from untrusted code
seonghobae Aug 5, 2026
93fe83d
docs(sandbox): document Git metadata credential mask
seonghobae Aug 5, 2026
6ff8029
docs(doctoring): record Git metadata credential mask
seonghobae Aug 5, 2026
b044062
ci: reject dirty PR 65 source worktrees
seonghobae Aug 5, 2026
f3d42e3
chore(ci): remove temporary dirty-source repair workflow
seonghobae Aug 5, 2026
e531bde
test(sandbox): expose source snapshot race
seonghobae Aug 5, 2026
0a2dbf5
chore(pr65): stage exact-source snapshot repair
seonghobae Aug 5, 2026
d5f6d78
fix(pr65): make source snapshot repair script executable
seonghobae Aug 5, 2026
2a064be
ci(pr65): run exact-source snapshot repair once
seonghobae Aug 5, 2026
2c7a3f8
chore(ci): remove invalid PR repair workflow
seonghobae Aug 5, 2026
c1c3f12
chore(sandbox): remove temporary PR repair script
seonghobae Aug 5, 2026
712125f
ci(pr65): verify exact-commit source snapshot repair
seonghobae Aug 5, 2026
8584d1e
chore(ci): remove invalid self-modifying repair workflow
seonghobae Aug 5, 2026
e0b9a33
fix(sandbox): mount exact committed source snapshot
seonghobae Aug 5, 2026
4643980
test(sandbox): cover exact source snapshot failures
seonghobae Aug 5, 2026
86f9388
docs(sandbox): document exact committed source snapshot
seonghobae Aug 5, 2026
816387e
docs(doctoring): record exact committed source boundary
seonghobae Aug 5, 2026
bd64670
test(sandbox): specify bounded archive extraction
seonghobae Aug 5, 2026
841d475
test(sandbox): complete archive boundary regressions
seonghobae Aug 5, 2026
ea4786c
fix(sandbox): bound exact-source archive extraction
seonghobae Aug 5, 2026
6521891
docs(sandbox): specify bounded archive extraction
seonghobae Aug 5, 2026
c884296
docs(doctoring): record archive extraction boundary
seonghobae Aug 5, 2026
247072f
test(sandbox): cover archive collision failures
seonghobae Aug 5, 2026
542867c
test(sandbox): isolate exact source from local Git attributes
seonghobae Aug 5, 2026
caa94a0
test(sandbox): reproduce raw-tree and bounded-output gaps
seonghobae Aug 5, 2026
004b14f
fix(sandbox): isolate Git control metadata from exact snapshots
seonghobae Aug 5, 2026
ca012c6
test(sandbox): cover isolated Git control failure boundaries
seonghobae Aug 5, 2026
59e5616
test(sandbox): exercise malformed archive after isolated control setup
seonghobae Aug 5, 2026
82abd4f
fix(sandbox): bound patch evidence to one host result file
seonghobae Aug 5, 2026
3cea7ad
test(sandbox): target the single bounded result-file mount
seonghobae Aug 5, 2026
299dd78
test(sandbox): target bounded result file in metadata isolation
seonghobae Aug 5, 2026
4938886
test(sandbox): verify one bounded result-file channel
seonghobae Aug 5, 2026
6d9fd53
docs(sandbox): document isolated raw Git tree and result file
seonghobae Aug 5, 2026
ac385ee
docs(doctoring): record isolated Git attribute boundary
seonghobae Aug 5, 2026
cbbf712
docs(changelog): record isolated Git tree and result boundary
seonghobae Aug 5, 2026
cad5be4
docs(doctoring): keep repository citations APA-only
seonghobae Aug 5, 2026
cbf749e
test(sandbox): allow realistic artifacts under fsize cap
seonghobae Aug 5, 2026
b98a263
fix(sandbox): preserve realistic file writes under bounded validation
seonghobae Aug 5, 2026
5f57f2c
docs(sandbox): separate workspace and evidence file-size ceilings
seonghobae Aug 5, 2026
9a200bc
docs(doctoring): separate process and evidence size ceilings
seonghobae Aug 5, 2026
03af3f6
test(sandbox): parse exact result mount boundary
seonghobae Aug 5, 2026
01e8c5e
test(sandbox): expose post-hunk path-smuggling boundary
seonghobae Aug 5, 2026
2c843cf
fix(sandbox): parse unified hunk boundaries before path checks
seonghobae Aug 5, 2026
7b848d0
test(sandbox): cover unified hunk parser boundaries
seonghobae Aug 5, 2026
be2ba58
test(sandbox): bind secondary paths to primary diff identity
seonghobae Aug 5, 2026
f220803
fix(sandbox): bind auxiliary paths to counted diff identity
seonghobae Aug 5, 2026
34362d0
test(sandbox): reject existing symlink and gitlink index modes
seonghobae Aug 5, 2026
37d8191
test(sandbox): fail closed on provenance and hunk edges
seonghobae Aug 5, 2026
51c6717
docs(changelog): record exact hunk path and mode boundaries
seonghobae Aug 5, 2026
cf8d0e5
ci(sandbox): stage exact validation-contract repair
seonghobae Aug 5, 2026
e92ceea
ci(sandbox): run exact validation-contract repair
seonghobae Aug 5, 2026
8e3b020
test(sandbox): forbid untrusted result evidence writes
seonghobae Aug 5, 2026
f327efb
fix(sandbox): enforce exact provenance and bounded evidence
seonghobae Aug 5, 2026
920086d
chore(security): remove self-modifying PR repair workflow
seonghobae Aug 5, 2026
15e951d
chore(sandbox): remove transient repair mutator
seonghobae Aug 5, 2026
a99350e
test(sandbox): remove superseded host-evidence contract
seonghobae Aug 5, 2026
2d48b43
test(sandbox): bound prearchive tree and result channel
seonghobae Aug 5, 2026
e68e88d
test(sandbox): model post-stat result growth
seonghobae Aug 5, 2026
229c2b3
test(sandbox): isolate legacy unit boundaries explicitly
seonghobae Aug 5, 2026
740daa5
test(sandbox): remove trust-boundary bypass fixtures
seonghobae Aug 5, 2026
9de2da5
test(sandbox): modernize runner fixtures without bypasses
seonghobae Aug 5, 2026
e8294f4
test(sandbox): authenticate adversarial runner fixtures
seonghobae Aug 5, 2026
9b5a6ef
test(sandbox): require canonical repository paths
seonghobae Aug 5, 2026
a3ce5c6
test(sandbox): authenticate direct result-file fixture
seonghobae Aug 5, 2026
aad5390
test(sandbox): model exact-tree preflight in archive fixtures
seonghobae Aug 5, 2026
3ce8041
fix(sandbox): validate canonical metadata and exact tree before archive
seonghobae Aug 5, 2026
477f0a7
test(sandbox): bind source-integrity doubles to prearchive tree checks
seonghobae Aug 5, 2026
5bbe221
test(sandbox): close exact-tree and parser branch coverage
seonghobae Aug 5, 2026
471efa3
test(sandbox): preserve hunk-before-header regression after no-diff gate
seonghobae Aug 5, 2026
93b0766
test(sandbox): cover descriptor sentinel cleanup branch
seonghobae Aug 5, 2026
f676886
docs(sandbox): align patch validation contract with exact-tree preflight
seonghobae Aug 5, 2026
c604f92
docs(doctoring): record exact-tree and single-result evidence rationale
seonghobae Aug 5, 2026
9febe3c
test(sandbox): require bounded streaming Git evidence
seonghobae Aug 5, 2026
c88bd75
fix(sandbox): stream hostile Git evidence within hard bounds
seonghobae Aug 5, 2026
3f17418
test(sandbox): isolate archive fixtures from streaming tree process
seonghobae Aug 5, 2026
2b626da
test(sandbox): model streamed status command failure
seonghobae Aug 5, 2026
b36c9c3
test(sandbox): model streamed exact-tree process failures
seonghobae Aug 5, 2026
5027f64
test(sandbox): cover bounded Git streaming failure branches
seonghobae Aug 5, 2026
2680812
test(sandbox): close final bounded-stream coverage edges
seonghobae Aug 5, 2026
59c726d
docs(sandbox): document bounded Git stream collection
seonghobae Aug 5, 2026
9e03b17
docs(doctoring): justify bounded Git evidence streaming
seonghobae Aug 5, 2026
89b4e5c
test(sandbox): expose trailing mode token bypass
seonghobae Aug 5, 2026
0a703e3
ci: verify and repair strict mode metadata parsing
seonghobae Aug 6, 2026
dc65698
chore(workflows): remove invalid self-modifying repair automation
seonghobae Aug 6, 2026
609333f
fix(reviewer): parse patch mode metadata exactly
seonghobae Aug 6, 2026
31371cc
docs(reviewer): document exact mode metadata parsing
seonghobae Aug 6, 2026
ad7a63c
docs(doctoring): record mode-metadata fail-closed decision
seonghobae Aug 6, 2026
0c60dea
docs(changelog): record strict mode metadata parsing
seonghobae Aug 6, 2026
44e3cb8
docs(changelog): preserve unrelated audit wording
seonghobae Aug 6, 2026
ae509a7
test(sandbox): require canonical ASCII exact-tree metadata
seonghobae Aug 6, 2026
36ad5bb
fix(sandbox): require canonical ASCII exact-tree metadata
seonghobae Aug 6, 2026
e6f5b47
docs(sandbox): specify canonical exact-tree metadata
seonghobae Aug 6, 2026
8f9c802
docs(doctoring): justify canonical ASCII tree grammar
seonghobae Aug 6, 2026
1e836fa
docs(changelog): record canonical ASCII tree grammar
seonghobae Aug 6, 2026
7c9090e
test(sandbox): preserve canonical git size padding
seonghobae Aug 6, 2026
df9829a
test(sandbox): define canonical git size padding grammar
seonghobae Aug 6, 2026
67d57ae
fix(sandbox): parse canonical git long-size padding
seonghobae Aug 6, 2026
1deb46b
docs(sandbox): document canonical git size padding
seonghobae Aug 6, 2026
e682978
docs(doctoring): reconcile git long-size padding grammar
seonghobae Aug 6, 2026
5d63605
docs(changelog): reconcile git long-size padding finding
seonghobae Aug 6, 2026
dd5813a
test(sandbox): reject borrowed Git object databases
seonghobae Aug 6, 2026
757c467
test(sandbox): bind exact tree to archive bytes
seonghobae Aug 6, 2026
5da28df
test(sandbox): remove unused archive-binding import
seonghobae Aug 6, 2026
a586e18
fix(sandbox): bind exact Git tree to extracted bytes
seonghobae Aug 6, 2026
d59159c
test(sandbox): cover Git blob identity failure edges
seonghobae Aug 6, 2026
d29abd4
test(sandbox): cover absent descriptor cleanup branch
seonghobae Aug 6, 2026
3e074a9
docs: bind patch validation source identity
seonghobae Aug 6, 2026
19f038d
docs: doctor exact-tree identity boundary
seonghobae Aug 6, 2026
552a6dd
docs: record authenticated source contract
seonghobae Aug 6, 2026
5c2e676
docs: preserve unrelated changelog text
seonghobae Aug 6, 2026
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 14 additions & 0 deletions reviewer/noema_reviewer/__init__.py
Original file line number Diff line number Diff line change
Expand Up @@ -13,16 +13,30 @@
from .agent import PydanticAIReviewAgent, ReviewAgent, build_agent
from .manifest import ReviewManifest
from .models import Confidence, Finding, ReviewVerdict, Severity, Verdict
from .patch_validation import (
DockerPatchValidationRunner,
PatchValidationProfile,
PatchValidationRequest,
PatchValidationResult,
PatchValidationStatus,
inspect_patch_bytes,
)


__all__ = [
"Confidence",
"DockerPatchValidationRunner",
"Finding",
"PatchValidationProfile",
"PatchValidationRequest",
"PatchValidationResult",
"PatchValidationStatus",
"PydanticAIReviewAgent",
"ReviewAgent",
"ReviewManifest",
"ReviewVerdict",
"Severity",
"Verdict",
"build_agent",
"inspect_patch_bytes",
]
Loading
Loading