@clear-capabilities/agentic-security-scanner 0.151.0 → 0.151.2

package/dist/agentic-security.mjs.sha256

@@ -1 +1 @@
-205f60e669498ecd7e51d8e4849419dcbbf4afd6a1d55504c8ac06ab77458327  agentic-security.mjs
+e82829f94d3ab88e606455e244aa70825c115408665393569bd3480c9ff013c2  agentic-security.mjs

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clear-capabilities/agentic-security-scanner",
-  "version": "0.151.0",
+  "version": "0.151.2",
   "description": "Scanner engine for the agentic-security Claude Code plugin — SAST, SCA (function-level reachability + CISA KEV), secrets, IaC, prompt-injection, MCP/agent-tool audit, auth/authZ deep analysis, attack chains, PoC generation, business logic, toxic-combinations scoring, SBOM, pipeline integrity, compliance attestation, and more.",
   "type": "module",
   "main": "src/index.js",
@@ -43,7 +43,7 @@
     "@babel/core": "^8.0.5",
     "@babel/preset-react": "^8.0.1",
     "@babel/preset-typescript": "^8.0.1",
-    "js-yaml": "^5.4.1",
+    "js-yaml": "^5.4.2",
     "safe-regex": "^2.1.1"
   },
   "optionalDependencies": {
@@ -70,7 +70,7 @@
     "test:glob": "node --test test/glob-compat.test.js",
     "test:sast": "node --test test/cpp-hardcoded-secret.test.js test/sibling-guard.test.js test/comment-blindness.test.js test/crypto-specialist.test.js test/llm.test.js test/llm-cost-advisor.test.js test/llm-owasp.test.js test/logic.test.js test/authz.test.js test/model-load.test.js test/prompt-template.test.js test/business-logic.test.js test/python-sinks.test.js test/phase1-detectors.test.js test/phase2-detectors.test.js test/phase3-v3.test.js test/phase7-extensions.test.js test/phase8-extensions.test.js test/new-cwe-detectors.test.js test/file-upload.test.js test/llmsecops-detectors.test.js test/db-taint.test.js test/dart-swift.test.js test/zip-slip-containment-guard.test.js test/redos-anchoring.test.js test/path-guard-validator-call.test.js test/redos-nfa.test.js test/weak-randomness.test.js test/csharp-pipeline.test.js test/post-quantum-crypto.test.js test/web3-advanced.test.js test/cloud-iam-k8s.test.js test/crypto-protocol.test.js test/ml-supply-chain.test.js test/mcp-audit-scan.test.js test/wrong-context-sanitizer.test.js test/sanitizer-context.test.js test/frontend-hygiene.test.js test/csv-injection.test.js test/stored-taint.test.js test/tree-sitter-sinks.test.js test/kotlin-structural.test.js test/ruby-php-structural.test.js test/java-csharp-structural.test.js test/guard-recognition.test.js test/guard-window-identifier-correlation.test.js test/js-python-framework-structural.test.js test/go-structural.test.js test/secret-concat.test.js test/secret-redaction.test.js test/xss-reflected-multilang.test.js test/code-injection-multilang.test.js test/xxe-multilang.test.js test/xpath-injection-multilang.test.js test/gapfill-batch13.test.js test/agent-untrusted-flow.test.js test/api-authz.test.js test/event-entrypoint.test.js test/iac-terraform.test.js test/cross-service.test.js test/rbac-consistency.test.js test/adversarial-robustness.test.js test/secret-entropy.test.js test/comment-strip.test.js test/juliet-path-filter-gate.test.js test/java-bench-shape-opt-in.test.js test/reachability-missing-callgraph-data.test.js test/rate-limit.test.js test/auth-signals.test.js test/convention-deviation.test.js test/resource-exhaustion.test.js test/resource-exhaustion-realworld.test.js test/redirect-toctou.test.js test/redirect-toctou-realworld.test.js test/codegen-sink.test.js test/ownership-authz.test.js test/ownership-authz-realworld.test.js test/t21-precision-audit.test.js test/secrets-coverage.test.js test/prompt-injection-payloads.test.js test/iac-cloud-templates.test.js test/ruby-path-join.test.js test/sast/manifest-line-tracking.test.js",
     "test:posture": "node --test test/threat-model.test.js test/git-hardening.test.js test/privacy-framework.test.js test/material-change.test.js test/drift.test.js test/scorecard.test.js test/accuracy-scorecard.test.js test/scorecard-gate.test.js test/predeploy-gate.test.js test/release-check.test.js test/pre-push-gate.test.js test/dependency-currency.test.js test/package-contents-check.test.js test/gate-verdict-cache.test.js test/run-unit-tests.test.js test/release-workflow.test.js test/independent-population.test.js test/why-missed.test.js test/independent-scoring.test.js test/evidence-bundle.test.js test/obligation-evidence-pack.test.js test/policy-bundle.test.js test/discovery-memory.test.js test/mttr.test.js test/license-policy.test.js test/aibom.test.js test/sbom.test.js test/api-inventory.test.js test/iam-policy.test.js test/container.test.js test/container-runtime.test.js test/image-packages.test.js test/kev.test.js test/dep-confusion.test.js test/sca-deprecated.test.js test/sca-batch.test.js test/composite-risk.test.js test/epss-enrich.test.js test/sca-coverage.test.js test/gradle-deps.test.js test/sca-route-reachable.test.js test/sca-policy.test.js test/sca-verdict.test.js test/install-script.test.js test/sca-linked-findings.test.js test/packs.test.js test/flow-narration.test.js test/regression-test-gen.test.js test/deterministic-fix.test.js test/falsification.test.js test/verification-separation.test.js test/logic-claims.test.js test/attestation.test.js test/verify-attestation-cli.test.js test/comparison.test.js test/determinism-cross-machine.test.js test/fix-honesty-gate.test.js test/model-routing.test.js test/root-cause-sweep.test.js test/entrypoint-inventory.test.js test/relevance.test.js test/untrusted.test.js test/agent-hardening.test.js test/rule-synthesis.test.js test/policy-gate.test.js test/agents-memory.test.js test/cve-lookup.test.js test/cve-alert-daemon.test.js test/fix-verify-loop.test.js test/fix-verify-tests.test.js test/fix-acceptance.test.js test/exploitability-probability.test.js test/history-scan.test.js test/viral-features.test.js test/viral-v074.test.js test/state-dir.test.js test/ignore-pragma.test.js test/license-graph.test.js test/secret-live-check.test.js test/attack-taxonomy.test.js test/triage-memory.test.js test/pr-augment.test.js test/chat-batch2.test.js test/chat-batch3.test.js test/chat-batch4.test.js test/chat-batch5.test.js test/chat-batch6.test.js test/risk-scenario-disclosure.test.js test/egress-policy.test.js test/egress-policy-completeness.test.js test/egress-policy-integration.test.js test/router.test.js test/legacy-alias-redirect.test.js test/cache-economics.test.js test/coverage-report.test.js test/corpus-status.test.js test/provenance.test.js test/secret-history.test.js test/execution-proof.test.js test/fix-metrics.test.js test/corpus-enroll.test.js test/prove-findings.test.js test/corpus-match.test.js test/corpus-provenance.test.js test/learning-quorum.test.js test/llm-cache-integrity.test.js test/proof-artifact.test.js test/providers.test.js test/fleet.test.js test/autopilot.test.js test/autopilot-cli.test.js test/verifier-independence.test.js test/integrity-legacy-key.test.js test/suppression-visibility.test.js test/cost-ceiling.test.js test/local-endpoint.test.js test/ollama-provider.test.js test/ollama-capabilities.test.js test/ollama-offline-egress.test.js test/ollama-fix-proposal.test.js test/ollama-explain-proposal.test.js test/ollama-poc-proposal.test.js test/ollama-model-probe.test.js test/ollama-agent-tools.test.js test/ollama-agent-loop.test.js test/ollama-e2e.test.js test/ollama-oom-feedback.test.js test/ollama-doc-drift.test.js test/model-trust.test.js test/vuln-archaeology.test.js test/scan-checkpoint.test.js test/llm-redact.test.js test/world-class-batch2.test.js test/world-class-modules.test.js test/privacy-ir-adapter.test.js test/privacy-taxonomy.test.js test/privacy-sink-policy.test.js test/privacy-governance.test.js test/privacy-inventory.test.js test/integration-end-to-end.test.js test/streak-cli-wiring.test.js test/stack-playbook.test.js test/machine-output-flag.test.js test/stdout-flush.test.js test/format-determinism.test.js test/only-flag-channels.test.js test/confidence.test.js test/security-trend.test.js test/calibration-drift.test.js test/validator-metrics.test.js test/clustering-ir-taint-line.test.js test/concurrency-cwe.test.js test/compliance-mapping-liveness.test.js test/module-artifact-liveness.test.js test/supply-chain-provenance-completeness.test.js test/compliance-severity-threshold.test.js test/compliance-severity-policy.test.js test/compliance-evidence-binding.test.js test/compliance-evidence-signing.test.js test/compliance-file-contains.test.js test/label-isolation.test.js test/evidence-grade-wording.test.js test/llm-model-status.test.js test/egress-policy-constraints.test.js test/egress-redact.test.js test/egress-audit.test.js test/egress-approved-providers.test.js test/family-registry.test.js test/coverage-strength.test.js test/framework-provenance.test.js test/framework-provenance-controlrefs.test.js test/third-party-verification.test.js test/proof-coverage.test.js test/calibration-holdout.test.js test/independent-population-gate.test.js test/catalog-freshness.test.js test/incremental-parity.test.js test/surface-smoke.test.js test/fix-coverage.test.js test/raw-source-carveout.test.js test/mlbom-conformance.test.js test/deploy-gate-replay.test.js test/sbom-conformance.test.js test/unscored-claims.test.js test/mcp-rug-pull.test.js test/agent-boundary-taint.test.js test/confinement-adversarial.test.js test/comment-strip-cost.test.js test/reachability-claim.test.js test/entrypoint-breadth.test.js test/dep-file-admission.test.js test/custom-rules-freshness.test.js test/posture/provenance-schema.test.js test/posture/provenance-cache.test.js test/helpers/build-git-fixture.test.js test/posture/provenance-git-evidence.test.js test/posture/provenance-dag-walk.test.js test/posture/provenance-confidence.test.js test/posture/provenance-predicate-replay.test.js test/posture/provenance-origin-resolver.test.js test/posture/provenance-ai-authorship.test.js test/posture/provenance-branch-entry.test.js test/posture/provenance-evidence-attribution.test.js test/posture/provenance-lifecycle.test.js test/posture/provenance-missing-control-resolver.test.js test/posture/provenance-missing-control-wiring.test.js test/posture/provenance-coordinator.test.js test/posture/provenance-sca-origin.test.js test/posture/provenance-transitive-sca.test.js test/posture/provenance-coordinator-sca.test.js test/posture/provenance-providers.test.js test/posture/provenance-evidence-bundle.test.js test/posture/provenance-repo-lineage.test.js test/posture/provenance-secrets-logic.test.js test/cli/provenance-flags.test.js test/cli/attest-provenance.test.js test/cli/attest-obligations.test.js test/cli/models.test.js test/cli/setup-llm.test.js test/cli/fix-retry.test.js test/cli/compliance-walkthrough-lineage.test.js test/cli/dataflow-export-privacy.test.js test/cli/dataflow-export-briefing.test.js test/cli/lineage-snapshot-persist.test.js test/cli/dataflow-diff.test.js test/cli/dataflow-watch.test.js test/cli/dataflow-recipients.test.js test/cli/dataflow-coverage.test.js test/security/provenance-safety.test.js test/security/provenance-injection.test.js test/posture/remediation-ledger.test.js",
-    "test:dataflow": "node --test test/privacy-catalog.test.js test/privacy-deep-walker.test.js test/privacy-deep-e2e.test.js test/container-taint.test.js test/stored-taint-families.test.js test/py-annotation-sources.test.js test/fn-reach.test.js test/deep-taint.test.js test/calibration.test.js test/holdout-eval.test.js test/cross-lang-meta.test.js test/cross-lang-queues.test.js test/phase5-xlang.test.js test/phase5-coverage.test.js test/phase6-taint.test.js test/llm-validator-consistency.test.js test/llm-validator-default-on.test.js test/llm-validator-preset.test.js test/parser-py-cst.test.js test/chrome-probe.test.js test/parser-cs-kt.test.js test/parser-cs-annotations.test.js test/parser-cs-control-flow.test.js test/parser-kt-control-flow.test.js test/parser-js-annotations.test.js test/parser-java-annotations.test.js test/parser-java-control-flow.test.js test/parser-java-calls.test.js test/parser-go.test.js test/parser-php-rb.test.js test/parser-php-control-flow.test.js test/interproc-k2.test.js test/proven-clean.test.js test/backward-default.test.js test/incremental-cache.test.js test/string-regex-lattice.test.js test/closure-capture.test.js test/points-to.test.js test/type-stubs.test.js test/soft-taint.test.js test/ifds.test.js test/symbolic-exec-proof.test.js test/ifds-summary-edges.test.js test/stub-aware-filter.test.js test/cross-repo.test.js test/proof-gate.test.js test/layer-recall.test.js test/java-taint-flow.test.js test/kt-taint-flow.test.js test/sanitizer-typed-flow.test.js test/sanitizer-gate-unit.test.js test/proof-safe.test.js test/collection-taint.test.js test/kcfa-context.test.js test/kcfa-callstring.test.js test/flow-parity.test.js test/callgraph-resolve.test.js test/import-reachability.test.js test/ir-stats.test.js test/parser-cpp.test.js test/parser-js-decorators.test.js test/parser-js-if-else-cfg.test.js test/cpp-integration.test.js test/engine-reconnect.test.js test/phase2-scoping.test.js test/engine-recall.test.js test/catalog-annotation-source.test.js test/catalog-cs-p1.test.js test/catalog-expanded.test.js test/builtin-summaries.test.js test/interproc-mutation-crash.test.js test/mutated-param-taint.test.js test/return-sink-check.test.js test/higher-order-inline-callback.test.js test/interproc-findings-discard.test.js test/runscan-deep-option.test.js test/summary-cache-convergence.test.js test/parser-rb-calls.test.js test/parser-rb-module-level.test.js test/balanced-call.test.js test/destructuring-taint.test.js test/computed-member-taint.test.js test/string-interpolation-taint.test.js test/dataflow-deadcode-severity.test.js test/catalog-dotted-callee-lookup.test.js test/builtin-summary-family-blind-kill.test.js test/deep-mode-annotator-pipeline.test.js test/receiver-type-and-nested-calls.test.js test/member-write-and-loop-taint.test.js test/parser-py-module-level.test.js test/parser-php-module-level.test.js test/r14b-module-level-e2e.test.js test/annotation-taint-engine.test.js test/interproc-nested-call-taint.test.js test/catalog-xpath-injection.test.js test/catalog-ldap-injection.test.js test/catalog-xxe.test.js test/catalog-response-splitting.test.js test/catalog-code-injection.test.js test/parser-rb-control-flow.test.js test/catalog-ruby-p1.test.js test/callee-receiver-taint.test.js test/catalog-command-injection-p4.test.js test/catalog-xss-p4.test.js test/catalog-path-ssrf-p3.test.js test/catalog-ai-model-provider-precision.test.js test/catalog-orm-write.test.js test/dataflow/provenance-pipeline-integration.test.js test/dataflow-progress.test.js test/scan-progress.test.js test/sard-leakage-pipeline.test.js",
+    "test:dataflow": "node --test test/privacy-catalog.test.js test/privacy-deep-walker.test.js test/privacy-deep-e2e.test.js test/container-taint.test.js test/stored-taint-families.test.js test/py-annotation-sources.test.js test/fn-reach.test.js test/deep-taint.test.js test/calibration.test.js test/holdout-eval.test.js test/cross-lang-meta.test.js test/cross-lang-queues.test.js test/phase5-xlang.test.js test/phase5-coverage.test.js test/phase6-taint.test.js test/llm-validator-consistency.test.js test/llm-validator-default-on.test.js test/llm-validator-preset.test.js test/parser-py-cst.test.js test/chrome-probe.test.js test/parser-cs-kt.test.js test/parser-cs-annotations.test.js test/parser-cs-control-flow.test.js test/parser-kt-control-flow.test.js test/parser-js-annotations.test.js test/parser-java-annotations.test.js test/parser-java-control-flow.test.js test/parser-java-calls.test.js test/parser-go.test.js test/parser-php-rb.test.js test/parser-php-control-flow.test.js test/interproc-k2.test.js test/proven-clean.test.js test/backward-default.test.js test/incremental-cache.test.js test/string-regex-lattice.test.js test/closure-capture.test.js test/points-to.test.js test/type-stubs.test.js test/soft-taint.test.js test/ifds.test.js test/symbolic-exec-proof.test.js test/ifds-summary-edges.test.js test/stub-aware-filter.test.js test/cross-repo.test.js test/proof-gate.test.js test/layer-recall.test.js test/java-taint-flow.test.js test/kt-taint-flow.test.js test/sanitizer-typed-flow.test.js test/sanitizer-gate-unit.test.js test/proof-safe.test.js test/collection-taint.test.js test/kcfa-context.test.js test/kcfa-callstring.test.js test/flow-parity.test.js test/callgraph-resolve.test.js test/import-reachability.test.js test/ir-stats.test.js test/parser-cpp.test.js test/parser-js-decorators.test.js test/parser-js-if-else-cfg.test.js test/cpp-integration.test.js test/engine-reconnect.test.js test/phase2-scoping.test.js test/engine-recall.test.js test/catalog-annotation-source.test.js test/catalog-cs-p1.test.js test/catalog-expanded.test.js test/builtin-summaries.test.js test/interproc-mutation-crash.test.js test/mutated-param-taint.test.js test/return-sink-check.test.js test/higher-order-inline-callback.test.js test/interproc-findings-discard.test.js test/runscan-deep-option.test.js test/summary-cache-convergence.test.js test/parser-rb-calls.test.js test/parser-rb-module-level.test.js test/balanced-call.test.js test/destructuring-taint.test.js test/computed-member-taint.test.js test/string-interpolation-taint.test.js test/dataflow-deadcode-severity.test.js test/catalog-dotted-callee-lookup.test.js test/builtin-summary-family-blind-kill.test.js test/deep-mode-annotator-pipeline.test.js test/receiver-type-and-nested-calls.test.js test/member-write-and-loop-taint.test.js test/parser-py-module-level.test.js test/parser-php-module-level.test.js test/r14b-module-level-e2e.test.js test/annotation-taint-engine.test.js test/interproc-nested-call-taint.test.js test/catalog-xpath-injection.test.js test/catalog-ldap-injection.test.js test/catalog-xxe.test.js test/catalog-response-splitting.test.js test/catalog-code-injection.test.js test/parser-rb-control-flow.test.js test/catalog-ruby-p1.test.js test/callee-receiver-taint.test.js test/catalog-command-injection-p4.test.js test/catalog-xss-p4.test.js test/catalog-path-ssrf-p3.test.js test/catalog-ai-model-provider-precision.test.js test/catalog-orm-write.test.js test/dataflow/provenance-pipeline-integration.test.js test/dataflow-progress.test.js test/scan-progress.test.js test/sard-leakage-pipeline.test.js test/sard-split-scoring.test.js test/sard-llm-isolation.test.js test/sard-mutation-adversarial.test.js test/sard-baseline-adaptive-tolerance.test.js test/sard-independent-holdout.test.js",
     "test:mcp": "node --test test/mcp.test.js test/mcp-protocol-smoke.test.js test/mcp-audit.test.js test/audit-cli.test.js test/mcp-scratchpad.test.js test/mcp-offload.test.js test/sca-upgrade.test.js test/lsp-server.test.js test/mcp-dataflow-tools.test.js test/cli/governance-propose-edit.test.js test/cli/remediation-open-update.test.js test/cli/remediation-verify-reopen.test.js test/cli/dataflow-observations.test.js test/cli/federate-declare-list.test.js",
     "test:report": "node --test test/report-scan-invariants.test.js test/junit.test.js test/ci.test.js test/poc-generator.test.js test/verifier.test.js test/verifier-target.test.js test/annotator-errors.test.js test/scan-health.test.js test/finding-schema.test.js test/pipeline/finding-schema-provenance.test.js test/evidence-provenance.test.js test/report/provenance-output.test.js test/report/provenance-format-parity.test.js test/legacy-compat.test.js test/annotator-runner.test.js test/detector-runner.test.js test/detector-errors.test.js test/analyzer-supervisor.test.js test/cascade-worker-pool.test.js test/cascade-pool-wiring.test.js test/coverage-ledger.test.js test/coverage-ledger-completeness.test.js test/assurance-mode.test.js test/artifact-registry.test.js test/artifact-registry-completeness.test.js test/retention-policy.test.js test/state-lifecycle-report.test.js test/legal-hold.test.js test/production-feedback.test.js test/calibration-feedback.test.js test/encryption-provider.test.js test/grader-calibration.test.js test/pr-delta-gate.test.js test/vex.test.js test/report-render.test.js test/oscal-conformance.test.js test/cli-fix-apply.test.js test/apply-fix-service.test.js test/high-impact-approval-gate.test.js test/approver-registry.test.js test/suppression-exceptions.test.js test/fix-history.test.js test/producer-registry.test.js test/producer-collector.test.js test/enrichment-completion.test.js",
     "test:lineage": "node --test test/lineage/schema.test.js test/lineage/ids.test.js test/lineage/protection.test.js test/lineage/classification.test.js test/lineage/validate.test.js test/lineage/json-schema-parity.test.js test/lineage/flagship-fixture.test.js test/lineage/flagship-fixture-semantics.test.js test/lineage/field-identity.test.js test/lineage/engine-expr-resolver.test.js test/lineage/engine-walker.test.js test/lineage/engine-integration.test.js test/lineage/engine-receiver-identity.test.js test/lineage/summaries.test.js test/lineage/driver.test.js test/lineage/engine-provenance.test.js test/lineage/engine-provenance-interprocedural.test.js test/lineage/path-store.test.js test/lineage/path-query.test.js test/lineage/flow-grade.test.js test/lineage/source-registry.test.js test/lineage/sink-registry.test.js test/lineage/transform-catalog.test.js test/lineage/handling-analyzer.test.js test/lineage/registry-real-code.test.js test/lineage/source-seeding.test.js test/lineage/graph-builder.test.js test/lineage/coverage.test.js test/lineage/resolve-destination.test.js test/lineage/queue-detail.test.js test/lineage/index.test.js test/lineage/obligation-mapping.test.js test/lineage/obligation-predicates.test.js test/lineage/obligation-predicates-walkthrough.test.js test/lineage/transit-protection.test.js test/lineage/at-rest-protection.test.js test/lineage/protection-summary.test.js test/lineage/ac01-multi-sink.test.js test/lineage/policy-verdict.test.js test/lineage/governance-refs.test.js test/lineage/export-privacy.test.js test/lineage/export-json.test.js test/lineage/export-csv.test.js test/lineage/decision-story.test.js test/lineage/export-briefing.test.js test/lineage/graph-snapshot.test.js test/lineage/graph-diff.test.js test/lineage/drift-policy.test.js test/lineage/recipient-profile.test.js test/lineage/recipient-registry.test.js test/lineage/recipient-wiring.test.js test/lineage/redact-graph.test.js test/lineage-scan-wiring.test.js test/lineage-artifact-write.test.js test/bench-data-lineage-runner.test.js test/bundle-frontend.test.js test/bundle-frontend-golden.test.js test/generate-html-report.test.js test/export-image.test.js test/lineage/scenario.test.js test/lineage/scenario-engine.test.js test/lineage/scenario-diff.test.js test/lineage/scenario-no-obligation-wiring.test.js test/lineage/impact-assessment.test.js test/lineage/impact-engine.test.js test/lineage/impact-no-obligation-wiring.test.js test/lineage/governance-edit.test.js test/lineage/remediation.test.js test/lineage/runtime-observation.test.js test/lineage/observation-correlation.test.js test/lineage/observation-adapters.test.js test/lineage/observation-store.test.js test/lineage/runtime-corroboration-wiring.test.js test/lineage/cross-repo-link.test.js test/lineage/federation-loader.test.js test/lineage/cross-repo-link-wiring.test.js",
@@ -131,8 +131,8 @@
     "bench:sca-replay:label": "node ../bench/sca-replay/label.mjs",
     "bench:sard:score": "node ../bench/sard/scripts/macro-score.mjs",
     "bench:sard:leakage-audit": "node ../bench/sard/scripts/leakage-audit.mjs",
-    "bench:sard:java": "node test/benchmark/realworld/bench-realworld.js --app sard-juliet-java-strict --blind --scramble-identifiers --json | node ../bench/sard/scripts/macro-score.mjs",
-    "bench:sard:csharp": "node test/benchmark/realworld/bench-realworld.js --app sard-juliet-csharp-strict --blind --scramble-identifiers --json | node ../bench/sard/scripts/macro-score.mjs",
+    "bench:sard:java": "node test/benchmark/realworld/bench-realworld.js --app sard-juliet-java-strict --blind --scramble-identifiers --deep --json | node ../bench/sard/scripts/macro-score.mjs",
+    "bench:sard:csharp": "node test/benchmark/realworld/bench-realworld.js --app sard-juliet-csharp-strict --blind --scramble-identifiers --deep --json | node ../bench/sard/scripts/macro-score.mjs",
     "bench:sard:java:fast-unsafe": "node test/benchmark/realworld/bench-realworld.js --app sard-juliet-java-strict --blind --json | node ../bench/sard/scripts/macro-score.mjs",
     "bench:sard:split": "node ../bench/sard/scripts/split.mjs",
     "bench:sard:split:check": "node ../bench/sard/scripts/split.mjs --verify",

package/src/dataflow/catalog.js

@@ -1248,6 +1248,23 @@ export const CATALOG = [
     match: { type: 'call', callee: 'Start', requireLiteralArg: { index: 0, pattern: '^"cmd(?:\\.exe)?"$|^"(?:/bin/)?(?:sh|bash)"$' } }, argIndex: 'all',
     vuln: { name: 'Command Injection (Process.Start string-form)', severity: 'critical', cwe: 'CWE-78',
             remediation: 'Use ProcessStartInfo with separated FileName + Arguments; never pass /c with concat.' } },
+  // Companion to the entry above, for the NON-shell-literal filename case
+  // that entry deliberately excludes (`Process.Start("ping", tainted)`).
+  // This is a real, distinct risk, not a benchmark-only shape:
+  // `ProcessStartInfo.UseShellExecute` DEFAULTS TO TRUE on .NET Framework
+  // (only .NET Core/5+ default it to false), so an unqualified
+  // `Process.Start(anyFileName, args)` on Framework code goes through the
+  // OS shell regardless of what the filename is — the two-argument
+  // string-form overload used here always constructs a `ProcessStartInfo`
+  // with that same default. Scored `high`, not `critical`, to reflect that
+  // modern (.NET Core+) code with an explicit `UseShellExecute = false`
+  // elsewhere is safe from this specific mechanism even though this
+  // call-site check cannot see that — argIndex is 1 only (the arguments),
+  // never the filename itself, which is far more often a fixed literal.
+  { kind: 'sink', id: 'cs-process-start-args', language: 'cs', framework: 'stdlib',
+    match: { type: 'call', callee: 'Start' }, argIndex: 1,
+    vuln: { name: 'Command Injection (Process.Start arguments, UseShellExecute defaults to true on .NET Framework)', severity: 'high', cwe: 'CWE-78',
+            remediation: 'Set UseShellExecute = false and pass arguments via ProcessStartInfo.ArgumentList (never a single concatenated string), or validate/allow-list the argument content.' } },
   { kind: 'sink', id: 'cs-file-readall',       language: 'cs', framework: 'stdlib', match: { type: 'call', callee: 'ReadAllText' },    argIndex: 0,
     vuln: { name: 'Path Traversal (File.ReadAllText with user input)', severity: 'high', cwe: 'CWE-22',
             remediation: 'Canonicalize the path with Path.GetFullPath and verify it starts with an allow-listed base directory.' } },

package/src/ir/callgraph.js

@@ -176,6 +176,34 @@ export function buildCallGraph(perFileIR, fileContents) {
                        // 2b. Bare-tail fallback, same file only, refuses to
                        // guess on ambiguity (see bareTailInFile above).
                        (!c.callee.includes('.') ? (bareTailInFile.get(fn.file)?.get(c.callee) || null) : null) ||
+                       // 2c. `this.method(...)` same-instance call. The
+                       // OPPOSITE asymmetry from 2b: there the FUNCTION name
+                       // carries a qualifier (Java's class-qualified `fn.name`)
+                       // and the call site is bare; here the call site carries
+                       // a qualifier (`this.`) and `fn.name` is bare (C#'s
+                       // `parser-cs.js`, and any other hand-rolled parser that
+                       // lowers `this.foo(...)` to the literal dotted string
+                       // "this.foo" rather than stripping the receiver).
+                       // Found via the SARD C# benchmark: a same-class helper
+                       // call written as `this.badSink(data)` — an extremely
+                       // common idiom — never resolved, silently blocking
+                       // interprocedural taint into the helper for every sink
+                       // inside it, across every CWE. `this.` unambiguously
+                       // means "a member of the CURRENT instance", so
+                       // resolving it to a same-file method of the same name
+                       // is an exact, intentionally-qualified match — not a
+                       // guess — and runs unconditionally like 2b, never
+                       // gated behind `allowTailGuess`. Falls back to the
+                       // SAME bareTailInFile index 2b uses (not just a direct
+                       // sameFileMap hit) because `fn.name` may ALSO be
+                       // class-qualified (once a parser records the
+                       // enclosing class, e.g. C#'s post-class-tracking-fix
+                       // `"ClassName.method"`) — without this fallback, a
+                       // `this.`-call would stop resolving the moment a
+                       // parser started producing class-qualified names.
+                       (/^this\.\w+$/.test(c.callee)
+                         ? (sameFileMap?.get(c.callee.slice(5)) || bareTailInFile.get(fn.file)?.get(c.callee.slice(5)) || null)
+                         : null) ||
                        // 3. Cross-TU qualified-name index (C++ header/source
                        // pairing) — gated on the CALLER carrying a `qname`
                        // (only parser-cpp.js emits one) so a same-named call
@@ -254,6 +282,16 @@ export function buildCallGraph(perFileIR, fileContents) {
         const tail = bareTailInFile.get(callerFile)?.get(name);
         if (tail) return tail;
       }
+      // `this.method(...)` same-instance call — see the identical branch
+      // and its full rationale in the `edges` loop above. Exact match, same
+      // file only, unconditional (not gated behind allowTailGuess). Also
+      // falls back to bareTailInFile for a class-qualified `fn.name` — see
+      // the matching comment on the `edges`-loop branch.
+      if (/^this\.\w+$/.test(name)) {
+        const tail = name.slice(5);
+        const viaThis = local?.get(tail) || bareTailInFile.get(callerFile)?.get(tail);
+        if (viaThis) return viaThis;
+      }
     }
     for (const m of byNameInFile.values()) {
       if (m.has(name) && !isCrossLanguageUnsafe(m.get(name), callerFile)) return m.get(name);

package/src/ir/parser-cs.js

@@ -68,6 +68,177 @@ const METHOD_RE = new RegExp(
   '\\s*\\(([^)]*)\\)' +                             // params (group 3)
   '\\s*\\{', 'g');
 
+// Class/struct declaration: modifiers* `class`|`struct` Name, optionally
+// followed by generic params (`<T>`) and/or a base/interface list
+// (`: Base, IFoo`), then the body's opening `{`.
+//
+// `bench:self-scan:check` caught a genuine ReDoS in this file's own first
+// draft (confirmed by direct timing, not a detector false alarm: 30 000
+// repeats of " public " with no trailing "class"/"struct" took 5+ SECONDS
+// with an unbounded `*`). Root cause: an unanchored search retries the
+// WHOLE pattern starting at every input position, and each retry's modifier
+// star backtracks through every possible repetition count before failing —
+// O(n) retries × O(n) backtracking each = O(n²) on realistic non-matching
+// input (most of a file's text isn't a class declaration). Unlike this
+// codebase's other documented ReDoS class ("an optional group flanked by
+// two \s* quantifiers"), the fix here is a bounded repetition count: real
+// C# code never stacks more than 2-3 modifiers on a class. A first fix
+// attempt bounded the repetition to `{0,6}` — genuinely linear (re-verified
+// directly: 200 000 non-matching repeats in 34ms), but `sast/redos-nfa.js`'s
+// static "nested quantifier" heuristic flags a bounded-but-still-quantified
+// group the same as an unbounded one, since it can't see the numeric bound
+// makes it safe (same class of detector-vs-reality gap this codebase's own
+// prior ReDoS fixes have hit — see e.g. the Kotlin trailing-lambda note in
+// `../ir/CLAUDE.md`: "the SAME detector's heuristic still flagged the
+// replacement... even though it measured linear on its own"). Unrolled into
+// 4 explicit, non-nested optional groups instead — no group here contains
+// its own internal quantifier, so the structural heuristic no longer
+// matches, while remaining exactly as linear (same 200 000-repeat timing)
+// and correctness-preserving across every realistic modifier combination
+// (0 to 4 modifiers; C# has none that legally stack more than 3 on a
+// class/struct declaration).
+const _CS_MOD = String.raw`(?:public|private|protected|internal|static|sealed|abstract|partial|new)\s+`;
+const CLASS_RE = new RegExp(
+  String.raw`(?:^|[\s;{}])(?:${_CS_MOD})?(?:${_CS_MOD})?(?:${_CS_MOD})?(?:${_CS_MOD})?(?:class|struct)\s+([A-Za-z_][A-Za-z0-9_]*)`, 'g');
+
+// Taint-recall: C#'s `_qid()`/`fn.name` never recorded which CLASS a method
+// belongs to at all (no middle `::ClassName::` segment, unlike Java's/JS's
+// convention — see `../dataflow/CLAUDE.md`'s C# row and
+// `bench/sard/IMPLEMENTATION_STATUS.md`'s "real accuracy improvement pass"
+// section for the full account). That makes `callgraph.js`'s `classMethods`
+// index — which resolves `new Helper().BadSink(x)` / `Helper.BadSink(x)` —
+// PERMANENTLY EMPTY for C#, so no cross-class call (same file or not) could
+// ever resolve, blocking interprocedural taint for exactly the shape
+// Juliet's own interface-based helper-class test structure (CWE-90/643/79-
+// 83/113/78/etc.'s dominant remaining flow-variant pattern) uses.
+//
+// Finds every class/struct declaration's body range so a method's enclosing
+// class can be looked up by character offset. A method not inside any class
+// (a rare but legal C# top-level-statements shape) gets `className: null`.
+// Nested classes are handled by picking the SMALLEST (innermost) range that
+// contains the method — ranges are not required to be non-overlapping.
+function _findClassRanges(code) {
+  const ranges = [];
+  CLASS_RE.lastIndex = 0;
+  let m;
+  while ((m = CLASS_RE.exec(code)) !== null) {
+    const name = m[1];
+    // Skip past an optional generic parameter list and/or base/interface
+    // list to find the REAL opening brace — `class Foo<T> : Base<T>, IBar`
+    // has two `<...>` regions before the body even starts. Track angle-
+    // bracket depth; balanced-`<>` is a reasonable approximation here (C#
+    // generics don't nest with unbalanced `<`/`>` in valid code), and a
+    // `{` encountered while depth > 0 (an unlikely default-value-in-
+    // generic-constraint edge case) is simply skipped rather than
+    // mis-treated as the class body.
+    let i = m.index + m[0].length;
+    let angleDepth = 0;
+    while (i < code.length) {
+      const c = code[i];
+      if (c === '<') angleDepth++;
+      else if (c === '>') { if (angleDepth > 0) angleDepth--; }
+      else if (c === '{' && angleDepth === 0) break;
+      else if ((c === ';') && angleDepth === 0) { i = -1; break; } // forward-declaration-shaped or malformed; bail
+      i++;
+    }
+    if (i < 0 || i >= code.length || code[i] !== '{') continue;
+    const extracted = _extractBody(code, i);
+    if (!extracted) continue;
+    ranges.push({ name, start: i, end: extracted.end });
+    CLASS_RE.lastIndex = i + 1; // resume scanning INSIDE the class body too, for nested classes
+  }
+  return ranges;
+}
+
+// Innermost class whose range contains `pos` (a method declaration's match
+// offset), or null when the method sits outside any class (top-level
+// statements — legal but rare).
+function _enclosingClassName(ranges, pos) {
+  let best = null;
+  for (const r of ranges) {
+    if (pos >= r.start && pos < r.end) {
+      if (!best || (r.end - r.start) < (best.end - best.start)) best = r;
+    }
+  }
+  return best ? best.name : null;
+}
+
+// Companion to the class-tracking fix above, closing the OTHER half of the
+// same gap: `HelperB h = new HelperB(); h.BadSink(data);` — Juliet's other
+// dominant helper-class idiom, alongside the inline `new Helper().Sink(x)`
+// chain `classMethods` now resolves directly. `h.BadSink` is a callee
+// string built from the LOCAL VARIABLE name, which `classMethods` (keyed
+// by real class name) can never match. This is exact same-function local
+// type inference, not a guess: `h`'s constructed type is unambiguous
+// wherever `h = new HelperB()` appears, so a call written as `h.BadSink(x)`
+// is rewritten in place to `HelperB.BadSink` — the callee string
+// `classMethods` already knows how to resolve (and, since `classMethods`
+// is a PROJECT-WIDE index built across every file, this also transparently
+// covers Juliet's documented cross-FILE `_NNa`/`_NNb` paired-variant
+// convention when the helper class lives in a sibling file, with no
+// separate cross-file mechanism needed). Refuses to guess when a variable
+// is (re)assigned to more than one distinct constructed type in the same
+// function — ambiguous, same "refuse rather than fabricate an edge"
+// convention `bareTailInFile` already uses.
+function _localVarConstructedTypes(nodes) {
+  const varTypes = new Map(); // varName -> className | null (ambiguous)
+  for (const node of Object.values(nodes)) {
+    if (node.kind !== 'assign') continue;
+    const src = node.source;
+    if (!src || src.kind !== 'call' || !src.isNew || typeof src.callee !== 'string') continue;
+    const varName = node.target;
+    if (!varName || varName.includes('.')) continue; // only a bare local, never a member-write target
+    if (varTypes.has(varName)) {
+      if (varTypes.get(varName) !== src.callee) varTypes.set(varName, null);
+    } else {
+      varTypes.set(varName, src.callee);
+    }
+  }
+  return varTypes;
+}
+
+// Recursively rewrites `varName.method`-shaped call callees to
+// `ClassName.method` wherever `varName` has an unambiguous constructed type
+// in `varTypes`, walking into every expression-tree shape `_lowerExpr` can
+// produce (a tainted argument to a rewritten call is just as real a finding
+// as the call itself, so args/branches must be walked too, not just the
+// node's own top-level callee).
+function _rewriteVarTypeCallees(expr, varTypes) {
+  if (!expr || typeof expr !== 'object') return;
+  if (expr.kind === 'call') {
+    if (typeof expr.callee === 'string') {
+      const dot = expr.callee.indexOf('.');
+      if (dot > 0) {
+        const varName = expr.callee.slice(0, dot);
+        const cls = varTypes.get(varName);
+        if (cls) expr.callee = `${cls}${expr.callee.slice(dot)}`;
+      }
+    }
+    if (Array.isArray(expr.args)) for (const a of expr.args) _rewriteVarTypeCallees(a, varTypes);
+    return;
+  }
+  if (expr.kind === 'member') { _rewriteVarTypeCallees(expr.object, varTypes); return; }
+  if (expr.kind === 'binary' || expr.kind === 'logical') {
+    _rewriteVarTypeCallees(expr.left, varTypes); _rewriteVarTypeCallees(expr.right, varTypes); return;
+  }
+  if (expr.kind === 'tpl' && Array.isArray(expr.parts)) { for (const p of expr.parts) _rewriteVarTypeCallees(p, varTypes); return; }
+  if (expr.kind === 'union' && Array.isArray(expr.branches)) { for (const b of expr.branches) _rewriteVarTypeCallees(b, varTypes); return; }
+  if (expr.kind === 'array' && Array.isArray(expr.elements)) { for (const e of expr.elements) _rewriteVarTypeCallees(e, varTypes); return; }
+}
+
+function _applyVarTypeRewrite(nodes) {
+  const varTypes = _localVarConstructedTypes(nodes);
+  let any = false;
+  for (const t of varTypes.values()) if (t) { any = true; break; }
+  if (!any) return;
+  for (const node of Object.values(nodes)) {
+    if (node.kind === 'call') _rewriteVarTypeCallees(node, varTypes);
+    else if (node.kind === 'assign') _rewriteVarTypeCallees(node.source, varTypes);
+    else if (node.kind === 'return' || node.kind === 'throw') _rewriteVarTypeCallees(node.value, varTypes);
+    else if (node.kind === 'if') _rewriteVarTypeCallees(node.cond, varTypes);
+  }
+}
+
 // Matches a top-level statement inside a method body. Splits on `;` at
 // brace-depth 0 (keeping simple lambdas inside calls intact), AND — R8 —
 // also flushes on a `}` that returns the SAME shared depth counter to 0.
@@ -460,6 +631,28 @@ function _lowerStmt(stmt, line) {
     const chained = _followChain(s, cm.endIdx, cm.callee, _splitTopLevelCommas(cm.argsText).map(_lowerExpr), false);
     return { kind: 'call', line, callee: chained.callee, args: chained.args };
   }
+  // Statement-form constructor-chained call: `new Helper().BadSink(data);`
+  // — the inline-instantiate-and-call idiom, with NO assignment at all.
+  // Previously fell through to `unknown` entirely (the statement-form
+  // branch above requires the FIRST token to be a plain identifier, never
+  // `new`) — silently dropping the call, its arguments, and any taint
+  // reaching a sink inside the constructed object's method. Mirrors the
+  // identical `new`-chain handling `_lowerExpr`'s expression path already
+  // has (this statement-form path is otherwise a strict subset of that
+  // one), and inherits `classMethods`'s cross-class resolution for free
+  // once the chain's callee dot-joins to `ClassName.method`.
+  const nm = matchBalancedCall(s, /^new\s+([\w.]+)/);
+  if (nm) {
+    const ctorArgs = _splitTopLevelCommas(nm.argsText).map(_lowerExpr);
+    const chained = _followChain(s, nm.endIdx, nm.callee.split('.').pop(), ctorArgs, true);
+    // A trailing `.Method(...)` grows `chained.callee` past the bare
+    // constructor name (into `ClassName.Method`) — only THAT shape is a
+    // call-kind statement worth reporting. A bare `new Helper();` with no
+    // chained call has no observable side effect from this statement's own
+    // perspective; fall through to `unknown`, matching this file's
+    // existing "nothing to lower" convention for a no-op statement.
+    if (chained.callee.includes('.')) return { kind: 'call', line, callee: chained.callee, args: chained.args };
+  }
   return { kind: 'unknown', line, text: s };
 }
 
@@ -492,9 +685,15 @@ function _lineAt(src, idx) {
   return line;
 }
 
-function _qid(file, name, line, body) {
+function _qid(file, name, line, body, className) {
   const sha = crypto.createHash('sha256').update(body).digest('hex').slice(0, 8);
-  return `${file}::${name}@${line}#${sha}`;
+  // `::ClassName::` middle segment — the SAME convention parser-java.js and
+  // parser-js.js already use (see class-hierarchy.js's "Shape 2" and
+  // callgraph.js's `classMethods` index, both of which parse exactly this
+  // shape back out). Omitted (falls back to the pre-existing two-segment
+  // form) when the method sits outside any class — legal C# top-level
+  // statements — so that shape is unaffected.
+  return className ? `${file}::${className}::${name}@${line}#${sha}` : `${file}::${name}@${line}#${sha}`;
 }
 
 // Node-id counter for `_buildCfg`. Reset to 0 per function (see
@@ -679,10 +878,12 @@ function _buildCfg(bodyText, nodes, prevId, funcStartLine, lineStarts, baseAbs,
 export function parseCSharpFile(file, code) {
   if (!file || typeof code !== 'string') return null;
   const functions = [];
+  const classRanges = _findClassRanges(code);
   METHOD_RE.lastIndex = 0;
   let m;
   while ((m = METHOD_RE.exec(code)) !== null) {
     const name = m[2];
+    const className = _enclosingClassName(classRanges, m.index);
     const paramsText = m[3] || '';
     const paramAnnotations = [];
     // `keptIdx` tracks the parameter's position in the FILTERED array — the
@@ -771,10 +972,11 @@ export function parseCSharpFile(file, code) {
     const tail = _buildCfg(extracted.body, nodes, 'entry', bodyStartLine, lineStarts, 0, 0);
     nodes[tail].succ.push('exit');
     nodes.exit.pred.push(tail);
+    _applyVarTypeRewrite(nodes);
     const cfg = { entry: 'entry', exit: 'exit', nodes };
     functions.push({
-      qid: _qid(file, name, startLine, extracted.body),
-      name, line: startLine, params, file,
+      qid: _qid(file, name, startLine, extracted.body, className),
+      name: className ? `${className}.${name}` : name, line: startLine, params, file,
       cfg,
       calls: callSitesFromCfg(cfg),
       ...(paramAnnotations.length ? { paramAnnotations } : {}),

package/src/sast/code-injection-multilang.js

@@ -62,6 +62,15 @@ function patternsFor(lang) {
       { key: 'roslyn', re: new RegExp(String.raw`\bCSharpScript\s*\.\s*(?:EvaluateAsync|RunAsync|Create)\s*\(\s*${notLiteral}`, 'g') },
       { key: 'datatable-compute', re: new RegExp(String.raw`\.\s*Compute\s*\(\s*${notLiteral}`, 'g'),
         gate: /\b(?:DataTable|DataColumn|DataView)\b/ },
+      // System.CodeDom.Compiler's CSharpCodeProvider/VBCodeProvider — the
+      // historically standard .NET dynamic-compile-and-run API, predating
+      // Roslyn's CSharpScript by over a decade and still the one most
+      // widely documented and used. Canonical shape is
+      // `provider.CompileAssemblyFromSource(parameters, source)` — the
+      // tainted source is the SECOND argument, not the first, unlike every
+      // other sink in this file. A literal source string doesn't match.
+      { key: 'codedom-compile', re: new RegExp(String.raw`\.\s*CompileAssemblyFromSource\s*\(\s*[^,()]+\s*,\s*${notLiteral}`, 'g'),
+        gate: /\b(?:CSharpCodeProvider|VBCodeProvider|CodeDomProvider)\b/ },
     ];
   }
   if (lang === 'js') {

package/src/sast/ldap-injection.js

@@ -23,9 +23,18 @@ import { blankComments } from './_comment-strip.js';
 // etc.) so we don't fire on every `"foo=" + bar` concatenation in unrelated
 // code.
 
-// LDAP filter attributes that strongly imply an LDAP filter (not a generic
-// key=value string). Shared across all language patterns.
-const ATTR = '(?:uid|cn|mail|sAMAccountName|givenName|sn|memberOf|userPrincipalName|distinguishedName|ou)';
+// LDAP filter attribute name. Real LDAP/AD schemas define far more
+// attributes than any fixed enum can enumerate (custom schema extensions,
+// and standard-but-uncommon ones like `department`/`title`/`employeeID`/
+// `homeDirectory`/`description`) — a hardcoded whitelist here is a real,
+// general precision-vs-recall bug, not just narrow for one benchmark.
+// Matches conventional LDAP attribute-name shape (alnum + hyphen, the RFC
+// 4512 `descr` production, simplified). Path A (inline concat, ungated) and
+// Path B (variable-form) both already anchor on a `(<attr>=` filter-syntax
+// shape plus, for Path B, a file-level LDAP-API hint (`LDAP_HINT_RE`) — the
+// widened ATTR only loosens which attribute NAME is accepted, not whether
+// the surrounding shape looks like an LDAP filter at all.
+const ATTR = '[A-Za-z][\\w-]{0,40}';
 
 // Path A — concatenation/interpolation INSIDE (or adjacent to) the sink call.
 // High-confidence; does not need the file-level context hint.