@clear-capabilities/agentic-security-scanner 0.139.1 → 0.141.0

package/dist/compliance-frameworks/nist-csf-2.json

@@ -4,70 +4,132 @@
   "publisher": "NIST",
   "license": "public-domain (US Federal publication)",
   "url": "https://www.nist.gov/cyberframework",
+  "scope": "SELECTIVE SUBSET. 8 subcategories with a code-observable signal. CSF 2.0 has over 100 subcategories; GOVERN in particular is organisational and is NOT represented here.",
+  "controlsDigest": "bcff46f53e75f501",
+  "controlCount": 8,
   "controls": [
     {
       "id": "GV.PO",
       "function": "GOVERN",
       "category": "Policy",
       "summary": "Organizational cybersecurity policy is established, communicated, and enforced.",
-      "evidence": ["Repo contains CLAUDE.md / SECURITY.md / .agentic-security/sca-policy.yml that documents the project's security policy.", "Triage decisions reference an organizational policy."],
-      "mapsTo": ["family:hardcoded-secret", "family:license-graph"]
+      "codeTestable": "yes",
+      "evidence": [
+        "Repo contains CLAUDE.md / SECURITY.md / .agentic-security/sca-policy.yml that documents the project's security policy.",
+        "Triage decisions reference an organizational policy."
+      ],
+      "mapsTo": [
+        "family:hardcoded-secret",
+        "family:license-graph"
+      ]
     },
     {
       "id": "ID.AM",
       "function": "IDENTIFY",
       "category": "Asset Management",
       "summary": "Assets (hardware, software, data) are inventoried.",
-      "evidence": [".agentic-security/sbom-history/*.json snapshots present.", "ATTRIBUTIONS.md generated."],
-      "mapsTo": ["module:sbom-diff", "module:license-attributions"]
+      "codeTestable": "partial",
+      "evidence": [
+        ".agentic-security/sbom-history/*.json snapshots present.",
+        "ATTRIBUTIONS.md generated."
+      ],
+      "mapsTo": [
+        "module:sbom-diff",
+        "module:license-attributions"
+      ]
     },
     {
       "id": "ID.RA",
       "function": "IDENTIFY",
       "category": "Risk Assessment",
       "summary": "Vulnerabilities and threats are identified.",
-      "evidence": ["Regular scan history under .agentic-security/scan-history/.", "ATT&CK / ATLAS technique mapping on findings."],
-      "mapsTo": ["module:attack-taxonomy", "module:exploitability-probability"]
+      "codeTestable": "partial",
+      "evidence": [
+        "Regular scan history under .agentic-security/scan-history/.",
+        "ATT&CK / ATLAS technique mapping on findings."
+      ],
+      "mapsTo": [
+        "module:attack-taxonomy",
+        "module:exploitability-probability"
+      ]
     },
     {
       "id": "PR.AA",
       "function": "PROTECT",
       "category": "Identity Management & Access Control",
       "summary": "Access to assets is limited to authorized users.",
-      "evidence": ["Zero open critical findings in family auth-missing / authz / iam-overpermissive on the current scan."],
-      "mapsTo": ["family:auth-missing", "family:authz", "family:iam-overpermissive", "family:k8s-rbac-cluster-admin"]
+      "codeTestable": "yes",
+      "evidence": [
+        "Zero open critical findings in family auth-missing / authz / iam-overpermissive on the current scan."
+      ],
+      "mapsTo": [
+        "family:auth-missing",
+        "family:authz",
+        "family:iam-overpermissive",
+        "family:k8s-rbac-cluster-admin"
+      ]
     },
     {
       "id": "PR.DS",
       "function": "PROTECT",
       "category": "Data Security",
       "summary": "Data is managed consistent with the organization's risk strategy.",
-      "evidence": ["No critical/high crypto findings.", "DPIA artifact present (.agentic-security/dpia.md) when handling PII."],
-      "mapsTo": ["family:crypto-tls-version", "family:crypto-tls-no-verify", "family:crypto-weak-cipher", "family:pii-exposure"]
+      "codeTestable": "yes",
+      "evidence": [
+        "No critical/high crypto findings.",
+        "DPIA artifact present (.agentic-security/dpia.md) when handling PII."
+      ],
+      "mapsTo": [
+        "family:crypto-tls-version",
+        "family:crypto-tls-no-verify",
+        "family:crypto-weak-cipher",
+        "family:pii-exposure"
+      ]
     },
     {
       "id": "DE.CM",
       "function": "DETECT",
       "category": "Continuous Monitoring",
       "summary": "Anomalous activity, indicators of compromise are monitored.",
-      "evidence": ["Watch mode artifacts at .agentic-security/watch-status.{md,json}.", "CVE-alert daemon configured."],
-      "mapsTo": ["module:watch-mode", "module:cve-alert-daemon"]
+      "codeTestable": "partial",
+      "evidence": [
+        "Watch mode artifacts at .agentic-security/watch-status.{md,json}.",
+        "CVE-alert daemon configured."
+      ],
+      "mapsTo": [
+        "module:watch-mode",
+        "module:cve-alert-daemon"
+      ]
     },
     {
       "id": "RS.AN",
       "function": "RESPOND",
       "category": "Analysis",
       "summary": "Notifications from detection systems are investigated.",
-      "evidence": ["Triage transitions logged in triage.json.", "Triage-memory entries with reasons."],
-      "mapsTo": ["module:triage", "module:triage-memory"]
+      "codeTestable": "partial",
+      "evidence": [
+        "Triage transitions logged in triage.json.",
+        "Triage-memory entries with reasons."
+      ],
+      "mapsTo": [
+        "module:triage",
+        "module:triage-memory"
+      ]
     },
     {
       "id": "RC.RP",
       "function": "RECOVER",
       "category": "Recovery Planning",
       "summary": "Recovery plans are executed and improved after an incident.",
-      "evidence": ["Fix history under .agentic-security/fix-history/log.json.", "Verifier outcomes recorded."],
-      "mapsTo": ["module:fix-history", "module:verifier"]
+      "codeTestable": "partial",
+      "evidence": [
+        "Fix history under .agentic-security/fix-history/log.json.",
+        "Verifier outcomes recorded."
+      ],
+      "mapsTo": [
+        "module:fix-history",
+        "module:verifier"
+      ]
     }
   ]
 }

package/dist/compliance-frameworks/nist-privacy-1-1.json

@@ -5,6 +5,9 @@
   "license": "public-domain (US Federal publication)",
   "url": "https://www.nist.gov/privacy-framework",
   "note": "Each control carries NIST's own `codeTestable` rating (yes/partial/no). That rating says whether a control COULD be assessed from source code — it does not say this engine assesses it. `mapsTo` is present only where this engine produces a real signal; a control that NIST rates testable but which this engine cannot see is reported as an ENGINE GAP rather than silently passed.",
+  "scope": "FULL CATALOGUE, partially assessable. All 104 controls are present and each carries `codeTestable`. 48 are governance controls no scanner can assess; those report `manual`, never `satisfied`. See posture/privacy-framework.js.",
+  "controlsDigest": "447154af306c58d3",
+  "controlCount": 104,
   "controls": [
     {
       "id": "ID.IM-P1",

package/dist/compliance-frameworks/owasp-asvs-5.json

@@ -4,76 +4,147 @@
   "publisher": "OWASP Foundation",
   "license": "Creative Commons Attribution-ShareAlike 4.0",
   "url": "https://owasp.org/www-project-application-security-verification-standard/",
+  "scope": "SELECTIVE SUBSET. 10 verification requirements with a direct detector behind them. ASVS 5.0 has several hundred requirements across 17 chapters; the remainder are NOT represented here.",
+  "controlsDigest": "6c4371a08f010f91",
+  "controlCount": 10,
   "controls": [
     {
       "id": "V2.1",
       "category": "Authentication",
       "summary": "Verify that authentication is performed for protected functions.",
-      "evidence": ["Zero open critical findings in family auth-missing on the current scan."],
-      "mapsTo": ["family:auth-missing"]
+      "codeTestable": "yes",
+      "evidence": [
+        "Zero open critical findings in family auth-missing on the current scan."
+      ],
+      "mapsTo": [
+        "family:auth-missing"
+      ]
     },
     {
       "id": "V2.7",
       "category": "Authentication",
       "summary": "Verify that MFA / secondary authentication is used for high-value operations.",
-      "evidence": ["aws-no-mfa-condition zero findings (if AWS in scope)."],
-      "mapsTo": ["family:aws-no-mfa"]
+      "codeTestable": "yes",
+      "evidence": [
+        "aws-no-mfa-condition zero findings (if AWS in scope)."
+      ],
+      "mapsTo": [
+        "family:aws-no-mfa"
+      ]
     },
     {
       "id": "V4.1",
       "category": "Access Control",
       "summary": "Verify that authorization is enforced for every resource access.",
-      "evidence": ["Zero idor / authz findings."],
-      "mapsTo": ["family:idor", "family:authz"]
+      "codeTestable": "yes",
+      "evidence": [
+        "Zero idor / authz findings."
+      ],
+      "mapsTo": [
+        "family:idor",
+        "family:authz"
+      ]
     },
     {
       "id": "V5.1",
       "category": "Input Validation",
       "summary": "Verify input validation for type, length, and content.",
-      "evidence": ["Zero open critical findings in sqli/xss/command-injection/ldap-injection/xpath-injection."],
-      "mapsTo": ["family:sqli", "family:xss", "family:command-injection", "family:ldap-injection", "family:xpath-injection", "family:nosql-injection"]
+      "codeTestable": "yes",
+      "evidence": [
+        "Zero open critical findings in sqli/xss/command-injection/ldap-injection/xpath-injection."
+      ],
+      "mapsTo": [
+        "family:sqli",
+        "family:xss",
+        "family:command-injection",
+        "family:ldap-injection",
+        "family:xpath-injection",
+        "family:nosql-injection"
+      ]
     },
     {
       "id": "V6.1",
       "category": "Cryptography",
       "summary": "Verify use of strong cryptography per a documented policy.",
-      "evidence": ["Zero open findings in crypto-weak-cipher / crypto-weak-hash / crypto-ecb / crypto-static-iv."],
-      "mapsTo": ["family:crypto-weak-cipher", "family:crypto-weak-hash", "family:crypto-ecb", "family:crypto-static-iv", "family:crypto-kdf-weak"]
+      "codeTestable": "yes",
+      "evidence": [
+        "Zero open findings in crypto-weak-cipher / crypto-weak-hash / crypto-ecb / crypto-static-iv."
+      ],
+      "mapsTo": [
+        "family:crypto-weak-cipher",
+        "family:crypto-weak-hash",
+        "family:crypto-ecb",
+        "family:crypto-static-iv",
+        "family:crypto-kdf-weak"
+      ]
     },
     {
       "id": "V6.2",
       "category": "Cryptography",
       "summary": "Verify all transit data uses TLS ≥ 1.2.",
-      "evidence": ["Zero findings in crypto-tls-version / crypto-tls-no-verify."],
-      "mapsTo": ["family:crypto-tls-version", "family:crypto-tls-no-verify"]
+      "codeTestable": "yes",
+      "evidence": [
+        "Zero findings in crypto-tls-version / crypto-tls-no-verify."
+      ],
+      "mapsTo": [
+        "family:crypto-tls-version",
+        "family:crypto-tls-no-verify"
+      ]
     },
     {
       "id": "V7.1",
       "category": "Error Handling & Logging",
       "summary": "Verify that error handling does not disclose sensitive information.",
-      "evidence": ["No findings in family data-exposure."],
-      "mapsTo": ["family:data-exposure"]
+      "codeTestable": "yes",
+      "evidence": [
+        "No findings in family data-exposure."
+      ],
+      "mapsTo": [
+        "family:data-exposure"
+      ]
     },
     {
       "id": "V8.1",
       "category": "Data Protection",
       "summary": "Verify that personal data is protected at rest and in transit.",
-      "evidence": ["DPIA artifact at .agentic-security/dpia.md.", "Zero pii-exposure findings."],
-      "mapsTo": ["family:pii-exposure", "family:training-data-pii"]
+      "codeTestable": "yes",
+      "evidence": [
+        "DPIA artifact at .agentic-security/dpia.md.",
+        "Zero pii-exposure findings."
+      ],
+      "mapsTo": [
+        "family:pii-exposure",
+        "family:training-data-pii"
+      ]
     },
     {
       "id": "V10.1",
       "category": "Malicious Code",
       "summary": "Verify the application does not include known-malicious or compromised dependencies.",
-      "evidence": [".agentic-security/sbom-history snapshots clean.", "No dependency-confusion or dependency-drift findings."],
-      "mapsTo": ["family:vulnerable-dep", "family:dependency-confusion", "family:dependency-drift"]
+      "codeTestable": "yes",
+      "evidence": [
+        ".agentic-security/sbom-history snapshots clean.",
+        "No dependency-confusion or dependency-drift findings."
+      ],
+      "mapsTo": [
+        "family:vulnerable-dep",
+        "family:dependency-confusion",
+        "family:dependency-drift"
+      ]
     },
     {
       "id": "V14.1",
       "category": "Configuration",
       "summary": "Verify that build, deployment, and configuration are secure.",
-      "evidence": ["No findings in family iam-overpermissive / k8s-rbac-cluster-admin / k8s-pod-security-privileged."],
-      "mapsTo": ["family:iam-overpermissive", "family:k8s-rbac-cluster-admin", "family:k8s-pod-security-privileged"]
+      "codeTestable": "yes",
+      "evidence": [
+        "No findings in family iam-overpermissive / k8s-rbac-cluster-admin / k8s-pod-security-privileged."
+      ],
+      "mapsTo": [
+        "family:iam-overpermissive",
+        "family:k8s-rbac-cluster-admin",
+        "family:k8s-pod-security-privileged"
+      ]
     }
   ]
 }

package/dist/compliance-frameworks/owasp-llm-top-10.json

@@ -4,66 +4,135 @@
   "publisher": "OWASP Foundation",
   "license": "Creative Commons Attribution-ShareAlike 4.0",
   "url": "https://owasp.org/www-project-top-10-for-large-language-model-applications/",
+  "scope": "FULL TOP-10. All ten categories are present. Each category is a broad class rather than a single testable requirement, so a mapping indicates a detector exists for part of the class, not that the class is fully covered.",
+  "controlsDigest": "0a0351a9536790e4",
+  "controlCount": 10,
   "controls": [
     {
       "id": "LLM01",
       "summary": "Prompt Injection — controls preventing injected instructions from overriding the system prompt.",
-      "evidence": ["Zero open findings in family prompt-injection / llm-app-security.", "Prompt-template integrity check passing."],
-      "mapsTo": ["family:prompt-injection", "family:llm-app-security", "family:prompt-integrity"]
+      "codeTestable": "yes",
+      "evidence": [
+        "Zero open findings in family prompt-injection / llm-app-security.",
+        "Prompt-template integrity check passing."
+      ],
+      "mapsTo": [
+        "family:prompt-injection",
+        "family:llm-app-security",
+        "family:prompt-integrity"
+      ]
     },
     {
       "id": "LLM02",
       "summary": "Insecure Output Handling — LLM output is not directly piped to dangerous sinks (eval/shell/SQL/HTML).",
-      "evidence": ["Zero open findings in subfamily llm-output-untrusted-sink."],
-      "mapsTo": ["family:llm-app-security:llm-output-untrusted-sink"]
+      "codeTestable": "yes",
+      "evidence": [
+        "Zero open findings in subfamily llm-output-untrusted-sink."
+      ],
+      "mapsTo": [
+        "family:llm-app-security:llm-output-untrusted-sink"
+      ]
     },
     {
       "id": "LLM03",
       "summary": "Training Data Poisoning — provenance and integrity controls on training/fine-tuning data.",
-      "evidence": ["No streaming-dataset-url findings.", "datasets.load_dataset uses pinned revisions."],
-      "mapsTo": ["family:streaming-dataset-url", "family:hf-datasets-rce"]
+      "codeTestable": "yes",
+      "evidence": [
+        "No streaming-dataset-url findings.",
+        "datasets.load_dataset uses pinned revisions."
+      ],
+      "mapsTo": [
+        "family:streaming-dataset-url",
+        "family:hf-datasets-rce"
+      ]
     },
     {
       "id": "LLM04",
       "summary": "Model Denial of Service — rate-limit / token-cap controls.",
-      "evidence": ["LLM API calls in source carry an explicit max_tokens cap (bodyguard rule no-max-tokens)."],
-      "mapsTo": ["rule:no-max-tokens"]
+      "codeTestable": "no",
+      "evidence": [
+        "LLM API calls in source carry an explicit max_tokens cap (bodyguard rule no-max-tokens)."
+      ],
+      "mapsTo": [
+        "rule:no-max-tokens"
+      ]
     },
     {
       "id": "LLM05",
       "summary": "Supply Chain — model & dataset supply-chain integrity.",
-      "evidence": ["No mlflow-untrusted-uri / model-format / hf-endpoint-override findings.", "Sigstore provenance verification configured if opt-in."],
-      "mapsTo": ["family:mlflow-untrusted-uri", "family:model-format", "family:hf-endpoint-override"]
+      "codeTestable": "yes",
+      "evidence": [
+        "No mlflow-untrusted-uri / model-format / hf-endpoint-override findings.",
+        "Sigstore provenance verification configured if opt-in."
+      ],
+      "mapsTo": [
+        "family:mlflow-untrusted-uri",
+        "family:model-format",
+        "family:hf-endpoint-override"
+      ]
     },
     {
       "id": "LLM06",
       "summary": "Sensitive Information Disclosure — output filters prevent leakage.",
-      "evidence": ["Zero findings in subfamily llm-credential-in-prompt.", "Redact module covers prompt + response."],
-      "mapsTo": ["family:llm-app-security:llm-credential-in-prompt"]
+      "codeTestable": "yes",
+      "evidence": [
+        "Zero findings in subfamily llm-credential-in-prompt.",
+        "Redact module covers prompt + response."
+      ],
+      "mapsTo": [
+        "family:llm-app-security:llm-credential-in-prompt"
+      ]
     },
     {
       "id": "LLM07",
       "summary": "Insecure Plugin / Tool Design — tools the LLM can invoke are narrowly scoped.",
-      "evidence": ["Zero llm-app-security:llm-tool-exec findings.", "Agent tool definitions reviewed for excessive agency."],
-      "mapsTo": ["family:agent-tool-exec", "family:llm-app-security:llm-tool-exec"]
+      "codeTestable": "yes",
+      "evidence": [
+        "Zero llm-app-security:llm-tool-exec findings.",
+        "Agent tool definitions reviewed for excessive agency."
+      ],
+      "mapsTo": [
+        "family:agent-tool-exec",
+        "family:llm-app-security:llm-tool-exec"
+      ]
     },
     {
       "id": "LLM08",
       "summary": "Excessive Agency — agent autonomy is bounded by explicit guards.",
-      "evidence": ["MCP server config limits write-tools to confirm:true + reserved-write-path refusal.", "Apply-fix path requires HMAC-verified scan."],
-      "mapsTo": ["module:mcp-tools", "module:apply-fix"]
+      "codeTestable": "partial",
+      "evidence": [
+        "MCP server config limits write-tools to confirm:true + reserved-write-path refusal.",
+        "Apply-fix path requires HMAC-verified scan."
+      ],
+      "mapsTo": [
+        "module:mcp-tools",
+        "module:apply-fix"
+      ]
     },
     {
       "id": "LLM09",
       "summary": "Overreliance — human review checkpoints exist.",
-      "evidence": ["security-fixer agent has Stop-on-verify-fail loop.", "PreToolUse bodyguard exists."],
-      "mapsTo": ["module:security-fixer", "module:pre-edit-bodyguard"]
+      "codeTestable": "partial",
+      "evidence": [
+        "security-fixer agent has Stop-on-verify-fail loop.",
+        "PreToolUse bodyguard exists."
+      ],
+      "mapsTo": [
+        "module:security-fixer",
+        "module:pre-edit-bodyguard"
+      ]
     },
     {
       "id": "LLM10",
       "summary": "Model Theft — model access controls.",
-      "evidence": ["No private-key-in-frontend or rpc-key-inline findings in client code."],
-      "mapsTo": ["family:private-key-in-frontend", "family:rpc-key-inline"]
+      "codeTestable": "yes",
+      "evidence": [
+        "No private-key-in-frontend or rpc-key-inline findings in client code."
+      ],
+      "mapsTo": [
+        "family:private-key-in-frontend",
+        "family:rpc-key-inline"
+      ]
     }
   ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clear-capabilities/agentic-security-scanner",
-  "version": "0.139.1",
+  "version": "0.141.0",
   "description": "Scanner engine for the agentic-security Claude Code plugin — SAST, SCA (function-level reachability + CISA KEV), secrets, IaC, prompt-injection, MCP/agent-tool audit, auth/authZ deep analysis, attack chains, PoC generation, business logic, toxic-combinations scoring, SBOM, pipeline integrity, compliance attestation, and more.",
   "type": "module",
   "main": "src/index.js",
@@ -63,13 +63,13 @@
     "test:python": "node ../scripts/run-python-tests.mjs",
     "test:smoke": "node --test test/smoke.test.js test/demo-app.test.js",
     "test:glob": "node --test test/glob-compat.test.js",
-    "test:sast": "node --test test/sibling-guard.test.js test/comment-blindness.test.js test/crypto-specialist.test.js test/llm.test.js test/llm-cost-advisor.test.js test/llm-owasp.test.js test/logic.test.js test/authz.test.js test/model-load.test.js test/prompt-template.test.js test/business-logic.test.js test/python-sinks.test.js test/phase1-detectors.test.js test/phase2-detectors.test.js test/phase3-v3.test.js test/phase7-extensions.test.js test/phase8-extensions.test.js test/new-cwe-detectors.test.js test/file-upload.test.js test/llmsecops-detectors.test.js test/db-taint.test.js test/dart-swift.test.js test/zip-slip-containment-guard.test.js test/redos-anchoring.test.js test/path-guard-validator-call.test.js test/redos-nfa.test.js test/weak-randomness.test.js test/csharp-pipeline.test.js test/post-quantum-crypto.test.js test/web3-advanced.test.js test/cloud-iam-k8s.test.js test/crypto-protocol.test.js test/ml-supply-chain.test.js test/mcp-audit-scan.test.js test/wrong-context-sanitizer.test.js test/sanitizer-context.test.js test/frontend-hygiene.test.js test/csv-injection.test.js test/stored-taint.test.js test/tree-sitter-sinks.test.js test/kotlin-structural.test.js test/ruby-php-structural.test.js test/java-csharp-structural.test.js test/guard-recognition.test.js test/guard-window-identifier-correlation.test.js test/js-python-framework-structural.test.js test/go-structural.test.js test/secret-concat.test.js test/secret-redaction.test.js test/xss-reflected-multilang.test.js test/code-injection-multilang.test.js test/xxe-multilang.test.js test/xpath-injection-multilang.test.js test/gapfill-batch13.test.js test/agent-untrusted-flow.test.js test/api-authz.test.js test/event-entrypoint.test.js test/iac-terraform.test.js test/cross-service.test.js test/rbac-consistency.test.js test/adversarial-robustness.test.js test/secret-entropy.test.js test/comment-strip.test.js test/juliet-path-filter-gate.test.js test/java-bench-shape-opt-in.test.js test/reachability-missing-callgraph-data.test.js test/rate-limit.test.js test/auth-signals.test.js test/convention-deviation.test.js test/resource-exhaustion.test.js test/resource-exhaustion-realworld.test.js test/redirect-toctou.test.js test/redirect-toctou-realworld.test.js test/codegen-sink.test.js test/ownership-authz.test.js test/ownership-authz-realworld.test.js test/t21-precision-audit.test.js",
-    "test:posture": "node --test test/privacy-framework.test.js test/material-change.test.js test/drift.test.js test/scorecard.test.js test/accuracy-scorecard.test.js test/scorecard-gate.test.js test/predeploy-gate.test.js test/release-check.test.js test/pre-push-gate.test.js test/dependency-currency.test.js test/package-contents-check.test.js test/gate-verdict-cache.test.js test/independent-population.test.js test/why-missed.test.js test/independent-scoring.test.js test/evidence-bundle.test.js test/discovery-memory.test.js test/mttr.test.js test/license-policy.test.js test/aibom.test.js test/sbom.test.js test/api-inventory.test.js test/iam-policy.test.js test/container.test.js test/container-runtime.test.js test/image-packages.test.js test/kev.test.js test/dep-confusion.test.js test/sca-deprecated.test.js test/sca-batch.test.js test/composite-risk.test.js test/epss-enrich.test.js test/sca-coverage.test.js test/gradle-deps.test.js test/sca-route-reachable.test.js test/sca-policy.test.js test/sca-verdict.test.js test/install-script.test.js test/sca-linked-findings.test.js test/packs.test.js test/flow-narration.test.js test/regression-test-gen.test.js test/deterministic-fix.test.js test/falsification.test.js test/verification-separation.test.js test/logic-claims.test.js test/attestation.test.js test/verify-attestation-cli.test.js test/comparison.test.js test/determinism-cross-machine.test.js test/fix-honesty-gate.test.js test/model-routing.test.js test/root-cause-sweep.test.js test/entrypoint-inventory.test.js test/relevance.test.js test/untrusted.test.js test/agent-hardening.test.js test/rule-synthesis.test.js test/policy-gate.test.js test/agents-memory.test.js test/cve-lookup.test.js test/cve-alert-daemon.test.js test/fix-verify-loop.test.js test/fix-verify-tests.test.js test/fix-acceptance.test.js test/exploitability-probability.test.js test/history-scan.test.js test/viral-features.test.js test/viral-v074.test.js test/state-dir.test.js test/ignore-pragma.test.js test/license-graph.test.js test/secret-live-check.test.js test/attack-taxonomy.test.js test/triage-memory.test.js test/pr-augment.test.js test/chat-batch2.test.js test/chat-batch3.test.js test/chat-batch4.test.js test/chat-batch5.test.js test/chat-batch6.test.js test/router.test.js test/legacy-alias-redirect.test.js test/cache-economics.test.js test/coverage-report.test.js test/corpus-status.test.js test/provenance.test.js test/secret-history.test.js test/execution-proof.test.js test/fix-metrics.test.js test/corpus-enroll.test.js test/prove-findings.test.js test/corpus-match.test.js test/corpus-provenance.test.js test/learning-quorum.test.js test/llm-cache-integrity.test.js test/proof-artifact.test.js test/providers.test.js test/fleet.test.js test/autopilot.test.js test/autopilot-cli.test.js test/verifier-independence.test.js test/integrity-legacy-key.test.js test/suppression-visibility.test.js test/cost-ceiling.test.js test/local-endpoint.test.js test/model-trust.test.js test/vuln-archaeology.test.js test/scan-checkpoint.test.js test/llm-redact.test.js test/world-class-batch2.test.js test/world-class-modules.test.js test/integration-end-to-end.test.js test/streak-cli-wiring.test.js test/stack-playbook.test.js test/machine-output-flag.test.js test/only-flag-channels.test.js test/confidence.test.js test/security-trend.test.js test/calibration-drift.test.js test/validator-metrics.test.js test/clustering-ir-taint-line.test.js",
+    "test:sast": "node --test test/sibling-guard.test.js test/comment-blindness.test.js test/crypto-specialist.test.js test/llm.test.js test/llm-cost-advisor.test.js test/llm-owasp.test.js test/logic.test.js test/authz.test.js test/model-load.test.js test/prompt-template.test.js test/business-logic.test.js test/python-sinks.test.js test/phase1-detectors.test.js test/phase2-detectors.test.js test/phase3-v3.test.js test/phase7-extensions.test.js test/phase8-extensions.test.js test/new-cwe-detectors.test.js test/file-upload.test.js test/llmsecops-detectors.test.js test/db-taint.test.js test/dart-swift.test.js test/zip-slip-containment-guard.test.js test/redos-anchoring.test.js test/path-guard-validator-call.test.js test/redos-nfa.test.js test/weak-randomness.test.js test/csharp-pipeline.test.js test/post-quantum-crypto.test.js test/web3-advanced.test.js test/cloud-iam-k8s.test.js test/crypto-protocol.test.js test/ml-supply-chain.test.js test/mcp-audit-scan.test.js test/wrong-context-sanitizer.test.js test/sanitizer-context.test.js test/frontend-hygiene.test.js test/csv-injection.test.js test/stored-taint.test.js test/tree-sitter-sinks.test.js test/kotlin-structural.test.js test/ruby-php-structural.test.js test/java-csharp-structural.test.js test/guard-recognition.test.js test/guard-window-identifier-correlation.test.js test/js-python-framework-structural.test.js test/go-structural.test.js test/secret-concat.test.js test/secret-redaction.test.js test/xss-reflected-multilang.test.js test/code-injection-multilang.test.js test/xxe-multilang.test.js test/xpath-injection-multilang.test.js test/gapfill-batch13.test.js test/agent-untrusted-flow.test.js test/api-authz.test.js test/event-entrypoint.test.js test/iac-terraform.test.js test/cross-service.test.js test/rbac-consistency.test.js test/adversarial-robustness.test.js test/secret-entropy.test.js test/comment-strip.test.js test/juliet-path-filter-gate.test.js test/java-bench-shape-opt-in.test.js test/reachability-missing-callgraph-data.test.js test/rate-limit.test.js test/auth-signals.test.js test/convention-deviation.test.js test/resource-exhaustion.test.js test/resource-exhaustion-realworld.test.js test/redirect-toctou.test.js test/redirect-toctou-realworld.test.js test/codegen-sink.test.js test/ownership-authz.test.js test/ownership-authz-realworld.test.js test/t21-precision-audit.test.js test/secrets-coverage.test.js test/prompt-injection-payloads.test.js test/iac-cloud-templates.test.js test/ruby-path-join.test.js",
+    "test:posture": "node --test test/privacy-framework.test.js test/material-change.test.js test/drift.test.js test/scorecard.test.js test/accuracy-scorecard.test.js test/scorecard-gate.test.js test/predeploy-gate.test.js test/release-check.test.js test/pre-push-gate.test.js test/dependency-currency.test.js test/package-contents-check.test.js test/gate-verdict-cache.test.js test/independent-population.test.js test/why-missed.test.js test/independent-scoring.test.js test/evidence-bundle.test.js test/discovery-memory.test.js test/mttr.test.js test/license-policy.test.js test/aibom.test.js test/sbom.test.js test/api-inventory.test.js test/iam-policy.test.js test/container.test.js test/container-runtime.test.js test/image-packages.test.js test/kev.test.js test/dep-confusion.test.js test/sca-deprecated.test.js test/sca-batch.test.js test/composite-risk.test.js test/epss-enrich.test.js test/sca-coverage.test.js test/gradle-deps.test.js test/sca-route-reachable.test.js test/sca-policy.test.js test/sca-verdict.test.js test/install-script.test.js test/sca-linked-findings.test.js test/packs.test.js test/flow-narration.test.js test/regression-test-gen.test.js test/deterministic-fix.test.js test/falsification.test.js test/verification-separation.test.js test/logic-claims.test.js test/attestation.test.js test/verify-attestation-cli.test.js test/comparison.test.js test/determinism-cross-machine.test.js test/fix-honesty-gate.test.js test/model-routing.test.js test/root-cause-sweep.test.js test/entrypoint-inventory.test.js test/relevance.test.js test/untrusted.test.js test/agent-hardening.test.js test/rule-synthesis.test.js test/policy-gate.test.js test/agents-memory.test.js test/cve-lookup.test.js test/cve-alert-daemon.test.js test/fix-verify-loop.test.js test/fix-verify-tests.test.js test/fix-acceptance.test.js test/exploitability-probability.test.js test/history-scan.test.js test/viral-features.test.js test/viral-v074.test.js test/state-dir.test.js test/ignore-pragma.test.js test/license-graph.test.js test/secret-live-check.test.js test/attack-taxonomy.test.js test/triage-memory.test.js test/pr-augment.test.js test/chat-batch2.test.js test/chat-batch3.test.js test/chat-batch4.test.js test/chat-batch5.test.js test/chat-batch6.test.js test/router.test.js test/legacy-alias-redirect.test.js test/cache-economics.test.js test/coverage-report.test.js test/corpus-status.test.js test/provenance.test.js test/secret-history.test.js test/execution-proof.test.js test/fix-metrics.test.js test/corpus-enroll.test.js test/prove-findings.test.js test/corpus-match.test.js test/corpus-provenance.test.js test/learning-quorum.test.js test/llm-cache-integrity.test.js test/proof-artifact.test.js test/providers.test.js test/fleet.test.js test/autopilot.test.js test/autopilot-cli.test.js test/verifier-independence.test.js test/integrity-legacy-key.test.js test/suppression-visibility.test.js test/cost-ceiling.test.js test/local-endpoint.test.js test/model-trust.test.js test/vuln-archaeology.test.js test/scan-checkpoint.test.js test/llm-redact.test.js test/world-class-batch2.test.js test/world-class-modules.test.js test/integration-end-to-end.test.js test/streak-cli-wiring.test.js test/stack-playbook.test.js test/machine-output-flag.test.js test/stdout-flush.test.js test/format-determinism.test.js test/only-flag-channels.test.js test/confidence.test.js test/security-trend.test.js test/calibration-drift.test.js test/validator-metrics.test.js test/clustering-ir-taint-line.test.js test/concurrency-cwe.test.js test/compliance-mapping-liveness.test.js test/family-registry.test.js test/coverage-strength.test.js test/framework-provenance.test.js test/third-party-verification.test.js test/proof-coverage.test.js test/calibration-holdout.test.js test/catalog-freshness.test.js test/incremental-parity.test.js test/surface-smoke.test.js test/fix-coverage.test.js test/raw-source-carveout.test.js test/mlbom-conformance.test.js test/deploy-gate-replay.test.js test/sbom-conformance.test.js test/unscored-claims.test.js test/mcp-rug-pull.test.js test/agent-boundary-taint.test.js test/confinement-adversarial.test.js test/comment-strip-cost.test.js test/reachability-claim.test.js test/entrypoint-breadth.test.js test/dep-file-admission.test.js",
     "test:dataflow": "node --test test/container-taint.test.js test/stored-taint-families.test.js test/py-annotation-sources.test.js test/fn-reach.test.js test/deep-taint.test.js test/calibration.test.js test/holdout-eval.test.js test/cross-lang-meta.test.js test/cross-lang-queues.test.js test/phase5-xlang.test.js test/phase5-coverage.test.js test/phase6-taint.test.js test/llm-validator-consistency.test.js test/llm-validator-default-on.test.js test/llm-validator-preset.test.js test/parser-py-cst.test.js test/parser-cs-kt.test.js test/parser-cs-annotations.test.js test/parser-cs-control-flow.test.js test/parser-kt-control-flow.test.js test/parser-js-annotations.test.js test/parser-java-annotations.test.js test/parser-java-control-flow.test.js test/parser-java-calls.test.js test/parser-go.test.js test/parser-php-rb.test.js test/parser-php-control-flow.test.js test/interproc-k2.test.js test/proven-clean.test.js test/backward-default.test.js test/incremental-cache.test.js test/string-regex-lattice.test.js test/closure-capture.test.js test/points-to.test.js test/type-stubs.test.js test/soft-taint.test.js test/ifds.test.js test/symbolic-exec-proof.test.js test/ifds-summary-edges.test.js test/stub-aware-filter.test.js test/cross-repo.test.js test/proof-gate.test.js test/layer-recall.test.js test/java-taint-flow.test.js test/kt-taint-flow.test.js test/sanitizer-typed-flow.test.js test/sanitizer-gate-unit.test.js test/proof-safe.test.js test/collection-taint.test.js test/kcfa-context.test.js test/kcfa-callstring.test.js test/flow-parity.test.js test/callgraph-resolve.test.js test/import-reachability.test.js test/ir-stats.test.js test/parser-cpp.test.js test/parser-js-decorators.test.js test/parser-js-if-else-cfg.test.js test/cpp-integration.test.js test/engine-reconnect.test.js test/phase2-scoping.test.js test/engine-recall.test.js test/catalog-annotation-source.test.js test/catalog-cs-p1.test.js test/catalog-expanded.test.js test/builtin-summaries.test.js test/interproc-mutation-crash.test.js test/mutated-param-taint.test.js test/return-sink-check.test.js test/higher-order-inline-callback.test.js test/interproc-findings-discard.test.js test/runscan-deep-option.test.js test/summary-cache-convergence.test.js test/parser-rb-calls.test.js test/parser-rb-module-level.test.js test/balanced-call.test.js test/destructuring-taint.test.js test/computed-member-taint.test.js test/string-interpolation-taint.test.js test/dataflow-deadcode-severity.test.js test/catalog-dotted-callee-lookup.test.js test/builtin-summary-family-blind-kill.test.js test/deep-mode-annotator-pipeline.test.js test/receiver-type-and-nested-calls.test.js test/member-write-and-loop-taint.test.js test/parser-py-module-level.test.js test/parser-php-module-level.test.js test/r14b-module-level-e2e.test.js test/annotation-taint-engine.test.js test/interproc-nested-call-taint.test.js test/catalog-xpath-injection.test.js test/catalog-ldap-injection.test.js test/catalog-xxe.test.js test/catalog-response-splitting.test.js test/catalog-code-injection.test.js test/parser-rb-control-flow.test.js test/catalog-ruby-p1.test.js test/callee-receiver-taint.test.js test/catalog-command-injection-p4.test.js test/catalog-xss-p4.test.js test/catalog-path-ssrf-p3.test.js",
-    "test:mcp": "node --test test/mcp.test.js test/mcp-audit.test.js test/audit-cli.test.js test/mcp-scratchpad.test.js test/mcp-offload.test.js test/sca-upgrade.test.js test/lsp-server.test.js",
+    "test:mcp": "node --test test/mcp.test.js test/mcp-protocol-smoke.test.js test/mcp-audit.test.js test/audit-cli.test.js test/mcp-scratchpad.test.js test/mcp-offload.test.js test/sca-upgrade.test.js test/lsp-server.test.js",
     "test:report": "node --test test/junit.test.js test/ci.test.js test/poc-generator.test.js test/verifier.test.js test/verifier-target.test.js test/annotator-errors.test.js test/grader-calibration.test.js test/pr-delta-gate.test.js test/vex.test.js test/report-render.test.js",
     "test:bench-modules": "node --test test/phase4-harness.test.js test/pipeline.test.js test/proof-corpus-lib.test.js test/proof-corpus-runner.test.js",
-    "test:lifecycle": "node --test test/lsp-protocol-smoke.test.js test/detector-liveness.test.js test/bench-watchdog.test.js test/ci-parity.test.js test/dead-code.test.js test/no-dead-modules.test.js test/no-orphan-scripts.test.js test/no-stray-state.test.js test/tree-integrity.test.js test/stop-hook.test.js test/plugin-self-check.test.js test/skills-registry.test.js test/bodyguard.test.js test/cache-invalidator-guard.test.js test/dispatch-pre-tool.test.js test/dispatch-user-prompt.test.js test/session-start-model-capture.test.js test/sandbox.test.js test/sandbox-escape.test.js test/ci-templates.test.js test/agent-mcp-tools.test.js test/triage-command.test.js test/no-orphan-tests.test.js test/supply-command.test.js test/posture-command.test.js test/labs-command.test.js test/compliance-command.test.js test/check-doc-drift.test.js test/dist-chunks-tracked.test.js && node ../scripts/lint-command-descriptions.mjs",
+    "test:lifecycle": "node --test test/lsp-protocol-smoke.test.js test/ide-surfaces.test.js test/detector-liveness.test.js test/bench-watchdog.test.js test/ci-parity.test.js test/dead-code.test.js test/no-dead-modules.test.js test/no-orphan-scripts.test.js test/no-stray-state.test.js test/tree-integrity.test.js test/stop-hook.test.js test/plugin-self-check.test.js test/skills-registry.test.js test/bodyguard.test.js test/cache-invalidator-guard.test.js test/dispatch-pre-tool.test.js test/dispatch-user-prompt.test.js test/session-start-model-capture.test.js test/sandbox.test.js test/sandbox-escape.test.js test/ci-templates.test.js test/agent-mcp-tools.test.js test/triage-command.test.js test/no-orphan-tests.test.js test/supply-command.test.js test/posture-command.test.js test/labs-command.test.js test/compliance-command.test.js test/check-doc-drift.test.js test/dist-chunks-tracked.test.js && node ../scripts/lint-command-descriptions.mjs",
     "test:eval": "node --test test/independent-eval.test.js test/realworld-recall.test.js",
     "test:discovery": "node --test test/discovery-partition.test.js test/discovery-lenses.test.js test/discovery-hunter.test.js test/discovery-confirm.test.js test/discovery-disprove.test.js test/discovery-judge.test.js test/discovery-run.test.js test/discovery-wiring.test.js test/discovery-llm-invoke.test.js",
     "eval:independent": "node ../bench/independent-eval/runner.mjs",
@@ -95,9 +95,20 @@
     "bench:proof-corpus": "node ../bench/proof-corpus/runner.mjs",
     "bench:proof-corpus:pins": "node ../bench/proof-corpus/runner.mjs --refresh-pins",
     "bench:engine-reconnect": "node ../bench/engine-reconnect/measure.mjs",
+    "bench:ttff": "node ../bench/ttff/runner.mjs",
+    "bench:ttff:check": "node ../bench/ttff/runner.mjs --check",
+    "bench:ttff:update-baseline": "node ../bench/ttff/runner.mjs --update-baseline",
     "bench:self-scan": "node ../bench/self-scan/measure.mjs",
     "bench:self-scan:check": "node ../bench/self-scan/check.mjs",
     "bench:mutation:check": "node ../bench/mutation/runner.mjs",
+    "bench:fix-correctness": "node ../bench/fix-correctness/runner.mjs",
+    "bench:iac-coverage": "node ../bench/iac-coverage/runner.mjs",
+    "bench:prompt-injection": "node ../bench/prompt-injection/runner.mjs",
+    "bench:prompt-injection:fetch": "node ../bench/prompt-injection/fetch.mjs",
+    "bench:secrets-precision": "node ../bench/secrets-precision/runner.mjs",
+    "bench:sca-replay": "node ../bench/sca-replay/runner.mjs",
+    "bench:sca-replay:fetch": "node ../bench/sca-replay/fetch.mjs",
+    "bench:sca-replay:label": "node ../bench/sca-replay/label.mjs",
     "bench:layer-recall": "node ../bench/layer-recall/runner.mjs",
     "bench:layer-recall:check": "node ../bench/layer-recall/runner.mjs --check",
     "bench:layer-recall:update-baseline": "node ../bench/layer-recall/runner.mjs --update-baseline",