686 B
686 B
Roadmap
Completed baseline
- Safe local artifact discovery and SHA-256 evidence
- JSON and SARIF output
- Eight documented deterministic rules
- Versioned schemas and rule catalog
- 12-case evaluation corpus and TP, FP, FN accounting
- Agent authorization, SLSA provenance, and ML-BOM checks
Open research
- Ambiguous and multilingual prompt-injection corpus
- Formal CycloneDX and SLSA schema validation
- Runtime and peak-memory benchmarks
- Signed provenance verification policy
- Release-blocking redaction regression suite
- Blind-labeled public artifact study
- Isolation contract for probabilistic analyzers
The public issue tracker is the authoritative work queue.