fiber_audit 0.3.0 → 0.3.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (24) hide show
  1. checksums.yaml +4 -4
  2. data/.fiber-audit.example.yml +7 -8
  3. data/ARCHITECTURE.md +92 -670
  4. data/CHANGELOG.md +29 -0
  5. data/README.md +145 -92
  6. data/lib/fiber_audit/cli.rb +3 -1
  7. data/lib/fiber_audit/configuration.rb +31 -6
  8. data/lib/fiber_audit/operation_semantics.rb +172 -0
  9. data/lib/fiber_audit/runtime/active_operations.rb +25 -9
  10. data/lib/fiber_audit/runtime/boot.rb +4 -0
  11. data/lib/fiber_audit/runtime/environment.rb +58 -0
  12. data/lib/fiber_audit/runtime/lifecycle.rb +91 -50
  13. data/lib/fiber_audit/runtime/operation_liveness_monitor.rb +282 -0
  14. data/lib/fiber_audit/runtime/operation_liveness_policy.rb +47 -0
  15. data/lib/fiber_audit/runtime/probes/base.rb +12 -10
  16. data/lib/fiber_audit/runtime/scheduler_evidence_classifier.rb +60 -0
  17. data/lib/fiber_audit/runtime/scheduler_snapshot.rb +6 -24
  18. data/lib/fiber_audit/runtime/watchdog.rb +17 -9
  19. data/lib/fiber_audit/runtime.rb +4 -0
  20. data/lib/fiber_audit/static/rules/blocking_subprocess.rb +3 -26
  21. data/lib/fiber_audit/static/rules/direct_socket.rb +52 -16
  22. data/lib/fiber_audit/static/rules/thread_current_state.rb +12 -20
  23. data/lib/fiber_audit/version.rb +1 -1
  24. metadata +5 -1
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 64afd3fe0ced532129e0d6e55508edca15e7a613ca30c064a61b9a868b155488
4
- data.tar.gz: a4db073387d08a250c8c79e95251ebc39ddb414a2a830d5ddb91c85d673d9989
3
+ metadata.gz: d26dd1112c80e4acdb3d97b1d97245b62581dc9caad48afe7685ec1cebcdf2e6
4
+ data.tar.gz: 6050cf4acf962f2dc3b8980cbc1c76a06bf3f4c0d5a4723b808eab40d48b6f64
5
5
  SHA512:
6
- metadata.gz: a632c52483c6b266bbbe1d99ca7e5dfb3c35d5556d364da7bd3adaab44308c551eda6db22d77c8b15871158386015ac2fe9c0fe69d0336a31d4094df5f4d5c4d
7
- data.tar.gz: 638caf18b5c0273abe010457b74e33bc79082a857d3196c6020394b8d771d5a3479d27d83f1cc97abdcc4ace7dbc6eee01285fa7013b8a59019ac4bc53646a2b
6
+ metadata.gz: 6af5ebbd3613e64ff1c0375066a29c59c0bcdcbb1304948f5ab33bfb87cabe23c0297be905c914db83de2352ce644738bbf8f38595a8f4b8590eff66f53f3a71
7
+ data.tar.gz: f1cd11a0a92388fb78840fa8ac162a234f5090877b67d7f2678be30f93166183f42d05cc73428d4f8966cc47d2666e0a84fab171c19f064f6dfa4248744427b8
data/.fiber-audit.example.yml CHANGED
@@ -1,4 +1,4 @@
1
- # FiberAudit v0.1 static-analysis configuration
1
+ # FiberAudit configuration example
2
2
  static:
3
3
  # Globs are evaluated from the detected project root.
4
4
  include:
@@ -15,25 +15,19 @@ static:
15
15
  # suppressions_path: .fiber-audit-suppressions.yml
16
16
 
17
17
  rules:
18
- # Disable an individual rule.
19
18
  FA1007:
20
19
  enabled: false
21
-
22
- # Override severity before the execution-context ceiling is applied.
23
20
  FA1003:
24
21
  severity: low
25
22
 
26
23
  report:
27
- # Reserved output formats supported by v0.1. The CLI emits one format per run.
28
24
  formats:
29
25
  - text
30
26
  - json
31
-
32
27
  # critical, high, medium, low, or info. Default low hides info findings.
33
28
  min_severity: low
34
29
 
35
- # The opt-in `fiber-audit runtime -- COMMAND` recorder, targeted operation
36
- # probes, and scheduler watchdog use these limits.
30
+ # Used only by explicit `fiber-audit runtime -- COMMAND` activation.
37
31
  runtime:
38
32
  redaction:
39
33
  mode: strict
@@ -49,4 +43,9 @@ runtime:
49
43
  heartbeat_interval_ms: 25
50
44
  stall_threshold_ms: 100
51
45
  max_frames: 20
46
+ # Independent operation-age evidence. The threshold is exclusive.
47
+ operation_liveness:
48
+ enabled: true
49
+ poll_interval_ms: 100
50
+ long_active_threshold_ms: 1000
52
51
  fail_open: true