Repository navigation

feat(security): Spec 101 US2 TPA seed corpus and eval gate - #1702

Open

Dumbris wants to merge 31 commits into

mainfrom

claude/101-tpa-db-corpus-363fa9

Open

feat(security): Spec 101 US2 TPA seed corpus and eval gate#1702
Dumbris wants to merge 31 commits into
mainfrom
claude/101-tpa-db-corpus-363fa9

Commits on Oct 20, 2026
- docs(specs): Spec 101 US2 tasks — seed corpus and eval gate
  
  Dumbris
  and
  claude
  committed
  7b8d53a
- feat(scanner): validate bundle signatures[] and export a pure bundle loader
  
  Dumbris
  and
  claude
  committed
  6b89152
- docs(spec-101): amend contracts and spec docs for the in-repo TPA corpus builder
  
  Dumbris
  and
  claude
  committed
  c41d27a
- feat(security): deterministic TPA corpus builder and six migrated signature sources
  
  Dumbris
  and
  claude
  committed
  1ed00c8
- feat(scan-eval): score the TPA signature bundle in the detect gate
  
  Dumbris
  and
  claude
  committed
  96e4a31
- feat(security): final TPA class vocabulary and the verified corpus assignment
  
  Dumbris
  and
  claude
  committed
  79a0521
- feat(security): 44-signature TPA corpus across 16 classes, bundle v0.1.1
  
  Dumbris
  and
  claude
  committed
  1cf931e
- test(scan-eval): eval pairs for every TPA signature, validated against the bundle
  
  Dumbris
  and
  claude
  committed
  97c6faa
- feat(scan-eval): gate every TPA signature class through the bundle check
  
  Dumbris
  and
  claude
  committed
  d97328f
- test(scan-eval): prove the TPA bundle gate is not vacuous with a removal control
  
  Dumbris
  and
  claude
  committed
  647f230
- docs(security): TPA signature contributor guide and bundle gate docs
  
  Dumbris
  and
  claude
  committed
  6981840
- fix(security): pin the TPA bundle and its sources to LF
  
  Dumbris
  and
  claude
  committed
  b0cdb38
- fix(security): narrow TPA rules flagged by review and correct provenance
  
  Dumbris
  and
  claude
  committed
  d367692
- docs: Spec 101 US2 Recent Changes line and task ticks
  
  Dumbris
  and
  claude
  committed
  c4587ff
- fix(security): address cross-model review round 1 (TPA rule precision, policy hard-negative category)
  
  Dumbris
  and
  claude
  committed
  d1cc978
- chore(roadmap): tpa-db-corpus in review (#1702)
  
  Dumbris
  and
  claude
  committed
  0610dec
- fix(security): address cross-model review round 2 (TPA rule precision, tpa-corpus CLI args, empty-corpus policy)
  
  Dumbris
  and
  claude
  committed
  998059c
- Merge remote-tracking branch 'origin/main' into claude/101-tpa-db-corpus-363fa9
  Dumbris
  committed
  9c9da3d
- fix(security): address cross-model review round 3 (TPA rule precision and 0007 recall, null source entries)
  
  Dumbris
  and
  claude
  committed
  945b667
- fix(security): address cross-model review round 4 and sweep every TPA rule for false positives
  
  Dumbris
  and
  claude
  committed
  fcfaecb
- fix(security): address cross-model review round 5 (recall on cited payloads, 0017 regex, provenance scope)
  
  Dumbris
  and
  claude
  committed
  8d468b2
- fix(security): address cross-model review round 6 (negation guard across TPA rules, 0033 recall)
  
  Dumbris
  and
  claude
  committed
  8b55e90
- fix(security): address cross-model review round 7 (negations inside rule gaps, quoted filenames, public keys)
  
  Dumbris
  and
  claude
  committed
  e43d724
- fix(security): address cross-model review round 8 (secret-value vs action concealment, wrapped payloads, 0011 recall)
  
  Dumbris
  and
  claude
  committed
  f0369a7
- fix(security): address cross-model review round 9 (negated objects and exclusions, paraphrase recall)
  
  Dumbris
  and
  claude
  committed
  b423df4
- Merge remote-tracking branch 'origin/main' into claude/101-tpa-db-corpus-363fa9
  Dumbris
  committed
  e63eb46
- Merge remote-tracking branch 'origin/main' into claude/101-tpa-db-corpus-363fa9
  Dumbris
  committed
  4087e32
- test(scan-eval): compare the quoted bundle path so the assertion holds on Windows
  
  Dumbris
  and
  claude
  committed
  610a108
Commits on Oct 22, 2026

Navigation Menu

Repository navigation

feat(security): Spec 101 US2 TPA seed corpus and eval gate - #1702

feat(security): Spec 101 US2 TPA seed corpus and eval gate#1702
Dumbris wants to merge 31 commits into
mainfrom
claude/101-tpa-db-corpus-363fa9

Commits on Oct 20, 2026

docs(specs): Spec 101 US2 tasks — seed corpus and eval gate

feat(scanner): validate bundle signatures[] and export a pure bundle loader

docs(spec-101): amend contracts and spec docs for the in-repo TPA corpus builder

feat(security): deterministic TPA corpus builder and six migrated signature sources

feat(scan-eval): score the TPA signature bundle in the detect gate

feat(security): final TPA class vocabulary and the verified corpus assignment

feat(security): 44-signature TPA corpus across 16 classes, bundle v0.1.1

test(scan-eval): eval pairs for every TPA signature, validated against the bundle

feat(scan-eval): gate every TPA signature class through the bundle check

test(scan-eval): prove the TPA bundle gate is not vacuous with a removal control

docs(security): TPA signature contributor guide and bundle gate docs

fix(security): pin the TPA bundle and its sources to LF

fix(security): narrow TPA rules flagged by review and correct provenance

docs: Spec 101 US2 Recent Changes line and task ticks

fix(security): address cross-model review round 1 (TPA rule precision, policy hard-negative category)

chore(roadmap): tpa-db-corpus in review (#1702)

fix(security): address cross-model review round 2 (TPA rule precision, tpa-corpus CLI args, empty-corpus policy)

Merge remote-tracking branch 'origin/main' into claude/101-tpa-db-corpus-363fa9

fix(security): address cross-model review round 3 (TPA rule precision and 0007 recall, null source entries)

fix(security): address cross-model review round 4 and sweep every TPA rule for false positives

fix(security): address cross-model review round 5 (recall on cited payloads, 0017 regex, provenance scope)

fix(security): address cross-model review round 6 (negation guard across TPA rules, 0033 recall)

fix(security): address cross-model review round 7 (negations inside rule gaps, quoted filenames, public keys)

fix(security): address cross-model review round 8 (secret-value vs action concealment, wrapped payloads, 0011 recall)

fix(security): address cross-model review round 9 (negated objects and exclusions, paraphrase recall)

Merge remote-tracking branch 'origin/main' into claude/101-tpa-db-corpus-363fa9

Merge remote-tracking branch 'origin/main' into claude/101-tpa-db-corpus-363fa9

test(scan-eval): compare the quoted bundle path so the assertion holds on Windows

Commits on Oct 22, 2026

Merge remote-tracking branch 'origin/main' into claude/101-tpa-db-corpus-363fa9

fix(security): close the two round-10 recall gaps (0011 multiline claim, 0037 SGR-adjacent imperative)

test(server): build the operator-signed fixture on the seed corpus