Add reproducible evaluation and provenance research

This commit is contained in:
2026-09-17 10:40:29 -05:00
parent d9fc3ca18b
commit 68f02d035f
53 changed files with 1432 additions and 14 deletions
+15
View File
@@ -0,0 +1,15 @@
# Changelog
## 0.2.0 Research baseline
- Added deterministic corpus evaluation with content-derived identity and TP, FP, and FN metrics.
- Added machine-readable schemas for scan reports, corpus manifests, and evaluation results.
- Added rule catalog and `rules --format json` and `explain` commands.
- Added agent tool-authorization, SLSA provenance, and CycloneDX ML-BOM rules.
- Added stable finding fingerprints to JSON and SARIF output.
- Added a 12-case safe synthetic conformance corpus.
- Added research note, rule-authoring contract, and architecture decision record.
## 0.1.0 Foundation
- Established safe artifact discovery, deterministic built-in rules, JSON and SARIF reporting, CLI, tests, and project governance.