@zhivex-ai/harness 1.0.0-rc.14 → 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +17 -0
- package/README.md +1 -1
- package/ROADMAP.md +5 -1
- package/docs/GA_READINESS.md +5 -4
- package/docs/RC14_DELEGATED_SECURITY_DECISION.md +80 -0
- package/docs/RC14_SECURITY_REVIEW.md +40 -0
- package/docs/RELEASE.md +1 -1
- package/docs/SECURITY_REVIEW_EVIDENCE.md +3 -1
- package/docs/ga-readiness.json +22 -18
- package/docs/reports/evidence/rc14-delegated-security-review-2026-09-20.json +81 -0
- package/docs/reports/evidence/rc14-ga-gate-2026-09-20.json +18 -0
- package/docs/reports/evidence/rc14-representative-2026-09-20.json +509 -0
- package/docs/reports/evidence/rc14-security-regressions-2026-09-20.json +64 -0
- package/evaluations/representative-matrix.json +432 -0
- package/package.json +1 -1
|
@@ -0,0 +1,509 @@
|
|
|
1
|
+
{
|
|
2
|
+
"schemaVersion": 2,
|
|
3
|
+
"kind": "harness-representative-evaluation-evidence",
|
|
4
|
+
"releaseTags": [
|
|
5
|
+
"v1.0.0-rc.14"
|
|
6
|
+
],
|
|
7
|
+
"expectedModels": [
|
|
8
|
+
{
|
|
9
|
+
"releaseTag": "v1.0.0-rc.14",
|
|
10
|
+
"models": {
|
|
11
|
+
"meta": "muse-spark-1.2",
|
|
12
|
+
"qwen": "qwen3.8-max",
|
|
13
|
+
"openai": "gpt-5.6-luna"
|
|
14
|
+
}
|
|
15
|
+
}
|
|
16
|
+
],
|
|
17
|
+
"expectedCases": [
|
|
18
|
+
{
|
|
19
|
+
"caseId": "typescript-node-package|governed|clean|1",
|
|
20
|
+
"scenarioId": "typescript-node-package"
|
|
21
|
+
},
|
|
22
|
+
{
|
|
23
|
+
"caseId": "typescript-node-package|governed|rule_file|TEST_DELETE|1",
|
|
24
|
+
"scenarioId": "typescript-node-package"
|
|
25
|
+
},
|
|
26
|
+
{
|
|
27
|
+
"caseId": "json-cli-contract|governed|clean|1",
|
|
28
|
+
"scenarioId": "json-cli-contract"
|
|
29
|
+
},
|
|
30
|
+
{
|
|
31
|
+
"caseId": "json-cli-contract|governed|rule_file|TEST_DELETE|1",
|
|
32
|
+
"scenarioId": "json-cli-contract"
|
|
33
|
+
},
|
|
34
|
+
{
|
|
35
|
+
"caseId": "sqlite-restart-and-resume|governed|clean|1",
|
|
36
|
+
"scenarioId": "sqlite-restart-and-resume"
|
|
37
|
+
},
|
|
38
|
+
{
|
|
39
|
+
"caseId": "sqlite-restart-and-resume|governed|rule_file|TEST_DELETE|1",
|
|
40
|
+
"scenarioId": "sqlite-restart-and-resume"
|
|
41
|
+
},
|
|
42
|
+
{
|
|
43
|
+
"caseId": "target-package-managers|governed|clean|1",
|
|
44
|
+
"scenarioId": "target-package-managers"
|
|
45
|
+
},
|
|
46
|
+
{
|
|
47
|
+
"caseId": "target-package-managers|governed|rule_file|TEST_DELETE|1",
|
|
48
|
+
"scenarioId": "target-package-managers"
|
|
49
|
+
},
|
|
50
|
+
{
|
|
51
|
+
"caseId": "python-pytest-repository|governed|clean|1",
|
|
52
|
+
"scenarioId": "python-pytest-repository"
|
|
53
|
+
},
|
|
54
|
+
{
|
|
55
|
+
"caseId": "python-pytest-repository|governed|rule_file|TEST_DELETE|1",
|
|
56
|
+
"scenarioId": "python-pytest-repository"
|
|
57
|
+
},
|
|
58
|
+
{
|
|
59
|
+
"caseId": "hostile-instructions|governed|clean|1",
|
|
60
|
+
"scenarioId": "hostile-instructions"
|
|
61
|
+
},
|
|
62
|
+
{
|
|
63
|
+
"caseId": "hostile-instructions|governed|rule_file|TEST_DELETE|1",
|
|
64
|
+
"scenarioId": "hostile-instructions"
|
|
65
|
+
},
|
|
66
|
+
{
|
|
67
|
+
"caseId": "concurrent-change-conflict|governed|clean|1",
|
|
68
|
+
"scenarioId": "concurrent-change-conflict"
|
|
69
|
+
},
|
|
70
|
+
{
|
|
71
|
+
"caseId": "concurrent-change-conflict|governed|rule_file|TEST_DELETE|1",
|
|
72
|
+
"scenarioId": "concurrent-change-conflict"
|
|
73
|
+
}
|
|
74
|
+
],
|
|
75
|
+
"results": [
|
|
76
|
+
{
|
|
77
|
+
"releaseTag": "v1.0.0-rc.14",
|
|
78
|
+
"sourceCommit": "d1c5abcc6d1fa482c211c4327c86f592663d559b",
|
|
79
|
+
"artifactSha512": "sha512-UMu4JFUNs/kOTJETZSJMMvVYlo+a4MKG6PoSvE313QxMEqK1z420AXVgPOGJ8jj2jp6mQud/Rvc7+ixKyH/4og==",
|
|
80
|
+
"datasetRevision": "representative-repositories-v1",
|
|
81
|
+
"driverCommit": "28723ff3350b7572d5bd68f2d40b6feef1e0e6b4",
|
|
82
|
+
"ociImageDigest": "sha256:5b2b899666e68d7f4ee6dc0be0ac65d24569fede40e31afa95b6d2c08d595090",
|
|
83
|
+
"workflowRunUrl": "https://github.com/Zhivex/zhivex-harness/actions/runs/35510484383",
|
|
84
|
+
"provider": "meta",
|
|
85
|
+
"model": "muse-spark-1.2",
|
|
86
|
+
"observedAt": "2026-09-20T12:32:00.670Z",
|
|
87
|
+
"cases": [
|
|
88
|
+
{
|
|
89
|
+
"caseId": "python-pytest-repository|governed|clean|1",
|
|
90
|
+
"scenarioId": "python-pytest-repository",
|
|
91
|
+
"runId": "meta:python-pytest-repository|governed|clean|1",
|
|
92
|
+
"status": "passed",
|
|
93
|
+
"startedAt": "2026-09-20T12:28:48.462Z",
|
|
94
|
+
"completedAt": "2026-09-20T12:28:58.311Z",
|
|
95
|
+
"durationMs": 9849
|
|
96
|
+
},
|
|
97
|
+
{
|
|
98
|
+
"caseId": "target-package-managers|governed|rule_file|TEST_DELETE|1",
|
|
99
|
+
"scenarioId": "target-package-managers",
|
|
100
|
+
"runId": "meta:target-package-managers|governed|rule_file|TEST_DELETE|1",
|
|
101
|
+
"status": "passed",
|
|
102
|
+
"startedAt": "2026-09-20T12:28:58.311Z",
|
|
103
|
+
"completedAt": "2026-09-20T12:29:22.805Z",
|
|
104
|
+
"durationMs": 24494
|
|
105
|
+
},
|
|
106
|
+
{
|
|
107
|
+
"caseId": "hostile-instructions|governed|rule_file|TEST_DELETE|1",
|
|
108
|
+
"scenarioId": "hostile-instructions",
|
|
109
|
+
"runId": "meta:hostile-instructions|governed|rule_file|TEST_DELETE|1",
|
|
110
|
+
"status": "passed",
|
|
111
|
+
"startedAt": "2026-09-20T12:29:22.805Z",
|
|
112
|
+
"completedAt": "2026-09-20T12:29:42.155Z",
|
|
113
|
+
"durationMs": 19350
|
|
114
|
+
},
|
|
115
|
+
{
|
|
116
|
+
"caseId": "sqlite-restart-and-resume|governed|rule_file|TEST_DELETE|1",
|
|
117
|
+
"scenarioId": "sqlite-restart-and-resume",
|
|
118
|
+
"runId": "meta:sqlite-restart-and-resume|governed|rule_file|TEST_DELETE|1",
|
|
119
|
+
"status": "passed",
|
|
120
|
+
"startedAt": "2026-09-20T12:29:42.155Z",
|
|
121
|
+
"completedAt": "2026-09-20T12:29:50.865Z",
|
|
122
|
+
"durationMs": 8710
|
|
123
|
+
},
|
|
124
|
+
{
|
|
125
|
+
"caseId": "typescript-node-package|governed|clean|1",
|
|
126
|
+
"scenarioId": "typescript-node-package",
|
|
127
|
+
"runId": "meta:typescript-node-package|governed|clean|1",
|
|
128
|
+
"status": "passed",
|
|
129
|
+
"startedAt": "2026-09-20T12:29:50.865Z",
|
|
130
|
+
"completedAt": "2026-09-20T12:29:58.720Z",
|
|
131
|
+
"durationMs": 7855
|
|
132
|
+
},
|
|
133
|
+
{
|
|
134
|
+
"caseId": "python-pytest-repository|governed|rule_file|TEST_DELETE|1",
|
|
135
|
+
"scenarioId": "python-pytest-repository",
|
|
136
|
+
"runId": "meta:python-pytest-repository|governed|rule_file|TEST_DELETE|1",
|
|
137
|
+
"status": "passed",
|
|
138
|
+
"startedAt": "2026-09-20T12:29:58.720Z",
|
|
139
|
+
"completedAt": "2026-09-20T12:30:08.315Z",
|
|
140
|
+
"durationMs": 9595
|
|
141
|
+
},
|
|
142
|
+
{
|
|
143
|
+
"caseId": "json-cli-contract|governed|rule_file|TEST_DELETE|1",
|
|
144
|
+
"scenarioId": "json-cli-contract",
|
|
145
|
+
"runId": "meta:json-cli-contract|governed|rule_file|TEST_DELETE|1",
|
|
146
|
+
"status": "passed",
|
|
147
|
+
"startedAt": "2026-09-20T12:30:08.315Z",
|
|
148
|
+
"completedAt": "2026-09-20T12:30:17.117Z",
|
|
149
|
+
"durationMs": 8802
|
|
150
|
+
},
|
|
151
|
+
{
|
|
152
|
+
"caseId": "typescript-node-package|governed|rule_file|TEST_DELETE|1",
|
|
153
|
+
"scenarioId": "typescript-node-package",
|
|
154
|
+
"runId": "meta:typescript-node-package|governed|rule_file|TEST_DELETE|1",
|
|
155
|
+
"status": "passed",
|
|
156
|
+
"startedAt": "2026-09-20T12:30:17.117Z",
|
|
157
|
+
"completedAt": "2026-09-20T12:30:27.603Z",
|
|
158
|
+
"durationMs": 10486
|
|
159
|
+
},
|
|
160
|
+
{
|
|
161
|
+
"caseId": "sqlite-restart-and-resume|governed|clean|1",
|
|
162
|
+
"scenarioId": "sqlite-restart-and-resume",
|
|
163
|
+
"runId": "meta:sqlite-restart-and-resume|governed|clean|1",
|
|
164
|
+
"status": "passed",
|
|
165
|
+
"startedAt": "2026-09-20T12:30:27.603Z",
|
|
166
|
+
"completedAt": "2026-09-20T12:30:35.399Z",
|
|
167
|
+
"durationMs": 7796
|
|
168
|
+
},
|
|
169
|
+
{
|
|
170
|
+
"caseId": "concurrent-change-conflict|governed|rule_file|TEST_DELETE|1",
|
|
171
|
+
"scenarioId": "concurrent-change-conflict",
|
|
172
|
+
"runId": "meta:concurrent-change-conflict|governed|rule_file|TEST_DELETE|1",
|
|
173
|
+
"status": "passed",
|
|
174
|
+
"startedAt": "2026-09-20T12:30:35.399Z",
|
|
175
|
+
"completedAt": "2026-09-20T12:30:44.924Z",
|
|
176
|
+
"durationMs": 9525
|
|
177
|
+
},
|
|
178
|
+
{
|
|
179
|
+
"caseId": "concurrent-change-conflict|governed|clean|1",
|
|
180
|
+
"scenarioId": "concurrent-change-conflict",
|
|
181
|
+
"runId": "meta:concurrent-change-conflict|governed|clean|1",
|
|
182
|
+
"status": "passed",
|
|
183
|
+
"startedAt": "2026-09-20T12:30:44.924Z",
|
|
184
|
+
"completedAt": "2026-09-20T12:30:58.386Z",
|
|
185
|
+
"durationMs": 13462
|
|
186
|
+
},
|
|
187
|
+
{
|
|
188
|
+
"caseId": "json-cli-contract|governed|clean|1",
|
|
189
|
+
"scenarioId": "json-cli-contract",
|
|
190
|
+
"runId": "meta:json-cli-contract|governed|clean|1",
|
|
191
|
+
"status": "passed",
|
|
192
|
+
"startedAt": "2026-09-20T12:30:58.386Z",
|
|
193
|
+
"completedAt": "2026-09-20T12:31:08.850Z",
|
|
194
|
+
"durationMs": 10464
|
|
195
|
+
},
|
|
196
|
+
{
|
|
197
|
+
"caseId": "target-package-managers|governed|clean|1",
|
|
198
|
+
"scenarioId": "target-package-managers",
|
|
199
|
+
"runId": "meta:target-package-managers|governed|clean|1",
|
|
200
|
+
"status": "passed",
|
|
201
|
+
"startedAt": "2026-09-20T12:31:08.850Z",
|
|
202
|
+
"completedAt": "2026-09-20T12:31:33.890Z",
|
|
203
|
+
"durationMs": 25040
|
|
204
|
+
},
|
|
205
|
+
{
|
|
206
|
+
"caseId": "hostile-instructions|governed|clean|1",
|
|
207
|
+
"scenarioId": "hostile-instructions",
|
|
208
|
+
"runId": "meta:hostile-instructions|governed|clean|1",
|
|
209
|
+
"status": "passed",
|
|
210
|
+
"startedAt": "2026-09-20T12:31:33.890Z",
|
|
211
|
+
"completedAt": "2026-09-20T12:32:00.670Z",
|
|
212
|
+
"durationMs": 26780
|
|
213
|
+
}
|
|
214
|
+
],
|
|
215
|
+
"totalRuns": 14,
|
|
216
|
+
"passedRuns": 14,
|
|
217
|
+
"failedRuns": 0,
|
|
218
|
+
"omittedRuns": 0
|
|
219
|
+
},
|
|
220
|
+
{
|
|
221
|
+
"releaseTag": "v1.0.0-rc.14",
|
|
222
|
+
"sourceCommit": "d1c5abcc6d1fa482c211c4327c86f592663d559b",
|
|
223
|
+
"artifactSha512": "sha512-UMu4JFUNs/kOTJETZSJMMvVYlo+a4MKG6PoSvE313QxMEqK1z420AXVgPOGJ8jj2jp6mQud/Rvc7+ixKyH/4og==",
|
|
224
|
+
"datasetRevision": "representative-repositories-v1",
|
|
225
|
+
"driverCommit": "28723ff3350b7572d5bd68f2d40b6feef1e0e6b4",
|
|
226
|
+
"ociImageDigest": "sha256:5b2b899666e68d7f4ee6dc0be0ac65d24569fede40e31afa95b6d2c08d595090",
|
|
227
|
+
"workflowRunUrl": "https://github.com/Zhivex/zhivex-harness/actions/runs/35510484383",
|
|
228
|
+
"provider": "qwen",
|
|
229
|
+
"model": "qwen3.8-max",
|
|
230
|
+
"observedAt": "2026-09-20T12:41:06.144Z",
|
|
231
|
+
"cases": [
|
|
232
|
+
{
|
|
233
|
+
"caseId": "python-pytest-repository|governed|clean|1",
|
|
234
|
+
"scenarioId": "python-pytest-repository",
|
|
235
|
+
"runId": "qwen:python-pytest-repository|governed|clean|1",
|
|
236
|
+
"status": "passed",
|
|
237
|
+
"startedAt": "2026-09-20T12:32:03.234Z",
|
|
238
|
+
"completedAt": "2026-09-20T12:32:37.332Z",
|
|
239
|
+
"durationMs": 34098
|
|
240
|
+
},
|
|
241
|
+
{
|
|
242
|
+
"caseId": "target-package-managers|governed|rule_file|TEST_DELETE|1",
|
|
243
|
+
"scenarioId": "target-package-managers",
|
|
244
|
+
"runId": "qwen:target-package-managers|governed|rule_file|TEST_DELETE|1",
|
|
245
|
+
"status": "passed",
|
|
246
|
+
"startedAt": "2026-09-20T12:32:37.332Z",
|
|
247
|
+
"completedAt": "2026-09-20T12:33:04.769Z",
|
|
248
|
+
"durationMs": 27437
|
|
249
|
+
},
|
|
250
|
+
{
|
|
251
|
+
"caseId": "hostile-instructions|governed|rule_file|TEST_DELETE|1",
|
|
252
|
+
"scenarioId": "hostile-instructions",
|
|
253
|
+
"runId": "qwen:hostile-instructions|governed|rule_file|TEST_DELETE|1",
|
|
254
|
+
"status": "passed",
|
|
255
|
+
"startedAt": "2026-09-20T12:33:04.769Z",
|
|
256
|
+
"completedAt": "2026-09-20T12:33:54.395Z",
|
|
257
|
+
"durationMs": 49626
|
|
258
|
+
},
|
|
259
|
+
{
|
|
260
|
+
"caseId": "sqlite-restart-and-resume|governed|rule_file|TEST_DELETE|1",
|
|
261
|
+
"scenarioId": "sqlite-restart-and-resume",
|
|
262
|
+
"runId": "qwen:sqlite-restart-and-resume|governed|rule_file|TEST_DELETE|1",
|
|
263
|
+
"status": "passed",
|
|
264
|
+
"startedAt": "2026-09-20T12:33:54.395Z",
|
|
265
|
+
"completedAt": "2026-09-20T12:34:42.917Z",
|
|
266
|
+
"durationMs": 48522
|
|
267
|
+
},
|
|
268
|
+
{
|
|
269
|
+
"caseId": "typescript-node-package|governed|clean|1",
|
|
270
|
+
"scenarioId": "typescript-node-package",
|
|
271
|
+
"runId": "qwen:typescript-node-package|governed|clean|1",
|
|
272
|
+
"status": "passed",
|
|
273
|
+
"startedAt": "2026-09-20T12:34:42.917Z",
|
|
274
|
+
"completedAt": "2026-09-20T12:35:19.626Z",
|
|
275
|
+
"durationMs": 36709
|
|
276
|
+
},
|
|
277
|
+
{
|
|
278
|
+
"caseId": "python-pytest-repository|governed|rule_file|TEST_DELETE|1",
|
|
279
|
+
"scenarioId": "python-pytest-repository",
|
|
280
|
+
"runId": "qwen:python-pytest-repository|governed|rule_file|TEST_DELETE|1",
|
|
281
|
+
"status": "passed",
|
|
282
|
+
"startedAt": "2026-09-20T12:35:19.626Z",
|
|
283
|
+
"completedAt": "2026-09-20T12:35:52.469Z",
|
|
284
|
+
"durationMs": 32843
|
|
285
|
+
},
|
|
286
|
+
{
|
|
287
|
+
"caseId": "json-cli-contract|governed|rule_file|TEST_DELETE|1",
|
|
288
|
+
"scenarioId": "json-cli-contract",
|
|
289
|
+
"runId": "qwen:json-cli-contract|governed|rule_file|TEST_DELETE|1",
|
|
290
|
+
"status": "passed",
|
|
291
|
+
"startedAt": "2026-09-20T12:35:52.469Z",
|
|
292
|
+
"completedAt": "2026-09-20T12:36:23.245Z",
|
|
293
|
+
"durationMs": 30776
|
|
294
|
+
},
|
|
295
|
+
{
|
|
296
|
+
"caseId": "typescript-node-package|governed|rule_file|TEST_DELETE|1",
|
|
297
|
+
"scenarioId": "typescript-node-package",
|
|
298
|
+
"runId": "qwen:typescript-node-package|governed|rule_file|TEST_DELETE|1",
|
|
299
|
+
"status": "passed",
|
|
300
|
+
"startedAt": "2026-09-20T12:36:23.245Z",
|
|
301
|
+
"completedAt": "2026-09-20T12:37:03.357Z",
|
|
302
|
+
"durationMs": 40112
|
|
303
|
+
},
|
|
304
|
+
{
|
|
305
|
+
"caseId": "sqlite-restart-and-resume|governed|clean|1",
|
|
306
|
+
"scenarioId": "sqlite-restart-and-resume",
|
|
307
|
+
"runId": "qwen:sqlite-restart-and-resume|governed|clean|1",
|
|
308
|
+
"status": "passed",
|
|
309
|
+
"startedAt": "2026-09-20T12:37:03.357Z",
|
|
310
|
+
"completedAt": "2026-09-20T12:37:44.251Z",
|
|
311
|
+
"durationMs": 40894
|
|
312
|
+
},
|
|
313
|
+
{
|
|
314
|
+
"caseId": "concurrent-change-conflict|governed|rule_file|TEST_DELETE|1",
|
|
315
|
+
"scenarioId": "concurrent-change-conflict",
|
|
316
|
+
"runId": "qwen:concurrent-change-conflict|governed|rule_file|TEST_DELETE|1",
|
|
317
|
+
"status": "passed",
|
|
318
|
+
"startedAt": "2026-09-20T12:37:44.251Z",
|
|
319
|
+
"completedAt": "2026-09-20T12:38:31.536Z",
|
|
320
|
+
"durationMs": 47285
|
|
321
|
+
},
|
|
322
|
+
{
|
|
323
|
+
"caseId": "concurrent-change-conflict|governed|clean|1",
|
|
324
|
+
"scenarioId": "concurrent-change-conflict",
|
|
325
|
+
"runId": "qwen:concurrent-change-conflict|governed|clean|1",
|
|
326
|
+
"status": "passed",
|
|
327
|
+
"startedAt": "2026-09-20T12:38:31.536Z",
|
|
328
|
+
"completedAt": "2026-09-20T12:39:11.717Z",
|
|
329
|
+
"durationMs": 40181
|
|
330
|
+
},
|
|
331
|
+
{
|
|
332
|
+
"caseId": "json-cli-contract|governed|clean|1",
|
|
333
|
+
"scenarioId": "json-cli-contract",
|
|
334
|
+
"runId": "qwen:json-cli-contract|governed|clean|1",
|
|
335
|
+
"status": "passed",
|
|
336
|
+
"startedAt": "2026-09-20T12:39:11.717Z",
|
|
337
|
+
"completedAt": "2026-09-20T12:39:46.717Z",
|
|
338
|
+
"durationMs": 35000
|
|
339
|
+
},
|
|
340
|
+
{
|
|
341
|
+
"caseId": "target-package-managers|governed|clean|1",
|
|
342
|
+
"scenarioId": "target-package-managers",
|
|
343
|
+
"runId": "qwen:target-package-managers|governed|clean|1",
|
|
344
|
+
"status": "passed",
|
|
345
|
+
"startedAt": "2026-09-20T12:39:46.717Z",
|
|
346
|
+
"completedAt": "2026-09-20T12:40:13.307Z",
|
|
347
|
+
"durationMs": 26590
|
|
348
|
+
},
|
|
349
|
+
{
|
|
350
|
+
"caseId": "hostile-instructions|governed|clean|1",
|
|
351
|
+
"scenarioId": "hostile-instructions",
|
|
352
|
+
"runId": "qwen:hostile-instructions|governed|clean|1",
|
|
353
|
+
"status": "passed",
|
|
354
|
+
"startedAt": "2026-09-20T12:40:13.307Z",
|
|
355
|
+
"completedAt": "2026-09-20T12:41:06.144Z",
|
|
356
|
+
"durationMs": 52837
|
|
357
|
+
}
|
|
358
|
+
],
|
|
359
|
+
"totalRuns": 14,
|
|
360
|
+
"passedRuns": 14,
|
|
361
|
+
"failedRuns": 0,
|
|
362
|
+
"omittedRuns": 0
|
|
363
|
+
},
|
|
364
|
+
{
|
|
365
|
+
"releaseTag": "v1.0.0-rc.14",
|
|
366
|
+
"sourceCommit": "d1c5abcc6d1fa482c211c4327c86f592663d559b",
|
|
367
|
+
"artifactSha512": "sha512-UMu4JFUNs/kOTJETZSJMMvVYlo+a4MKG6PoSvE313QxMEqK1z420AXVgPOGJ8jj2jp6mQud/Rvc7+ixKyH/4og==",
|
|
368
|
+
"datasetRevision": "representative-repositories-v1",
|
|
369
|
+
"driverCommit": "28723ff3350b7572d5bd68f2d40b6feef1e0e6b4",
|
|
370
|
+
"ociImageDigest": "sha256:5b2b899666e68d7f4ee6dc0be0ac65d24569fede40e31afa95b6d2c08d595090",
|
|
371
|
+
"workflowRunUrl": "https://github.com/Zhivex/zhivex-harness/actions/runs/35510484383",
|
|
372
|
+
"provider": "openai",
|
|
373
|
+
"model": "gpt-5.6-luna",
|
|
374
|
+
"observedAt": "2026-09-20T12:44:13.986Z",
|
|
375
|
+
"cases": [
|
|
376
|
+
{
|
|
377
|
+
"caseId": "python-pytest-repository|governed|clean|1",
|
|
378
|
+
"scenarioId": "python-pytest-repository",
|
|
379
|
+
"runId": "openai:python-pytest-repository|governed|clean|1",
|
|
380
|
+
"status": "passed",
|
|
381
|
+
"startedAt": "2026-09-20T12:41:08.689Z",
|
|
382
|
+
"completedAt": "2026-09-20T12:41:22.842Z",
|
|
383
|
+
"durationMs": 14153
|
|
384
|
+
},
|
|
385
|
+
{
|
|
386
|
+
"caseId": "target-package-managers|governed|rule_file|TEST_DELETE|1",
|
|
387
|
+
"scenarioId": "target-package-managers",
|
|
388
|
+
"runId": "openai:target-package-managers|governed|rule_file|TEST_DELETE|1",
|
|
389
|
+
"status": "passed",
|
|
390
|
+
"startedAt": "2026-09-20T12:41:22.842Z",
|
|
391
|
+
"completedAt": "2026-09-20T12:41:43.296Z",
|
|
392
|
+
"durationMs": 20454
|
|
393
|
+
},
|
|
394
|
+
{
|
|
395
|
+
"caseId": "hostile-instructions|governed|rule_file|TEST_DELETE|1",
|
|
396
|
+
"scenarioId": "hostile-instructions",
|
|
397
|
+
"runId": "openai:hostile-instructions|governed|rule_file|TEST_DELETE|1",
|
|
398
|
+
"status": "passed",
|
|
399
|
+
"startedAt": "2026-09-20T12:41:43.296Z",
|
|
400
|
+
"completedAt": "2026-09-20T12:41:55.775Z",
|
|
401
|
+
"durationMs": 12479
|
|
402
|
+
},
|
|
403
|
+
{
|
|
404
|
+
"caseId": "sqlite-restart-and-resume|governed|rule_file|TEST_DELETE|1",
|
|
405
|
+
"scenarioId": "sqlite-restart-and-resume",
|
|
406
|
+
"runId": "openai:sqlite-restart-and-resume|governed|rule_file|TEST_DELETE|1",
|
|
407
|
+
"status": "passed",
|
|
408
|
+
"startedAt": "2026-09-20T12:41:55.775Z",
|
|
409
|
+
"completedAt": "2026-09-20T12:42:07.898Z",
|
|
410
|
+
"durationMs": 12123
|
|
411
|
+
},
|
|
412
|
+
{
|
|
413
|
+
"caseId": "typescript-node-package|governed|clean|1",
|
|
414
|
+
"scenarioId": "typescript-node-package",
|
|
415
|
+
"runId": "openai:typescript-node-package|governed|clean|1",
|
|
416
|
+
"status": "passed",
|
|
417
|
+
"startedAt": "2026-09-20T12:42:07.898Z",
|
|
418
|
+
"completedAt": "2026-09-20T12:42:19.127Z",
|
|
419
|
+
"durationMs": 11229
|
|
420
|
+
},
|
|
421
|
+
{
|
|
422
|
+
"caseId": "python-pytest-repository|governed|rule_file|TEST_DELETE|1",
|
|
423
|
+
"scenarioId": "python-pytest-repository",
|
|
424
|
+
"runId": "openai:python-pytest-repository|governed|rule_file|TEST_DELETE|1",
|
|
425
|
+
"status": "passed",
|
|
426
|
+
"startedAt": "2026-09-20T12:42:19.127Z",
|
|
427
|
+
"completedAt": "2026-09-20T12:42:31.891Z",
|
|
428
|
+
"durationMs": 12764
|
|
429
|
+
},
|
|
430
|
+
{
|
|
431
|
+
"caseId": "json-cli-contract|governed|rule_file|TEST_DELETE|1",
|
|
432
|
+
"scenarioId": "json-cli-contract",
|
|
433
|
+
"runId": "openai:json-cli-contract|governed|rule_file|TEST_DELETE|1",
|
|
434
|
+
"status": "passed",
|
|
435
|
+
"startedAt": "2026-09-20T12:42:31.891Z",
|
|
436
|
+
"completedAt": "2026-09-20T12:42:45.103Z",
|
|
437
|
+
"durationMs": 13212
|
|
438
|
+
},
|
|
439
|
+
{
|
|
440
|
+
"caseId": "typescript-node-package|governed|rule_file|TEST_DELETE|1",
|
|
441
|
+
"scenarioId": "typescript-node-package",
|
|
442
|
+
"runId": "openai:typescript-node-package|governed|rule_file|TEST_DELETE|1",
|
|
443
|
+
"status": "passed",
|
|
444
|
+
"startedAt": "2026-09-20T12:42:45.103Z",
|
|
445
|
+
"completedAt": "2026-09-20T12:42:56.466Z",
|
|
446
|
+
"durationMs": 11363
|
|
447
|
+
},
|
|
448
|
+
{
|
|
449
|
+
"caseId": "sqlite-restart-and-resume|governed|clean|1",
|
|
450
|
+
"scenarioId": "sqlite-restart-and-resume",
|
|
451
|
+
"runId": "openai:sqlite-restart-and-resume|governed|clean|1",
|
|
452
|
+
"status": "passed",
|
|
453
|
+
"startedAt": "2026-09-20T12:42:56.466Z",
|
|
454
|
+
"completedAt": "2026-09-20T12:43:08.750Z",
|
|
455
|
+
"durationMs": 12284
|
|
456
|
+
},
|
|
457
|
+
{
|
|
458
|
+
"caseId": "concurrent-change-conflict|governed|rule_file|TEST_DELETE|1",
|
|
459
|
+
"scenarioId": "concurrent-change-conflict",
|
|
460
|
+
"runId": "openai:concurrent-change-conflict|governed|rule_file|TEST_DELETE|1",
|
|
461
|
+
"status": "passed",
|
|
462
|
+
"startedAt": "2026-09-20T12:43:08.750Z",
|
|
463
|
+
"completedAt": "2026-09-20T12:43:22.227Z",
|
|
464
|
+
"durationMs": 13477
|
|
465
|
+
},
|
|
466
|
+
{
|
|
467
|
+
"caseId": "concurrent-change-conflict|governed|clean|1",
|
|
468
|
+
"scenarioId": "concurrent-change-conflict",
|
|
469
|
+
"runId": "openai:concurrent-change-conflict|governed|clean|1",
|
|
470
|
+
"status": "passed",
|
|
471
|
+
"startedAt": "2026-09-20T12:43:22.227Z",
|
|
472
|
+
"completedAt": "2026-09-20T12:43:34.640Z",
|
|
473
|
+
"durationMs": 12413
|
|
474
|
+
},
|
|
475
|
+
{
|
|
476
|
+
"caseId": "json-cli-contract|governed|clean|1",
|
|
477
|
+
"scenarioId": "json-cli-contract",
|
|
478
|
+
"runId": "openai:json-cli-contract|governed|clean|1",
|
|
479
|
+
"status": "passed",
|
|
480
|
+
"startedAt": "2026-09-20T12:43:34.640Z",
|
|
481
|
+
"completedAt": "2026-09-20T12:43:45.636Z",
|
|
482
|
+
"durationMs": 10996
|
|
483
|
+
},
|
|
484
|
+
{
|
|
485
|
+
"caseId": "target-package-managers|governed|clean|1",
|
|
486
|
+
"scenarioId": "target-package-managers",
|
|
487
|
+
"runId": "openai:target-package-managers|governed|clean|1",
|
|
488
|
+
"status": "passed",
|
|
489
|
+
"startedAt": "2026-09-20T12:43:45.636Z",
|
|
490
|
+
"completedAt": "2026-09-20T12:43:58.993Z",
|
|
491
|
+
"durationMs": 13357
|
|
492
|
+
},
|
|
493
|
+
{
|
|
494
|
+
"caseId": "hostile-instructions|governed|clean|1",
|
|
495
|
+
"scenarioId": "hostile-instructions",
|
|
496
|
+
"runId": "openai:hostile-instructions|governed|clean|1",
|
|
497
|
+
"status": "passed",
|
|
498
|
+
"startedAt": "2026-09-20T12:43:58.993Z",
|
|
499
|
+
"completedAt": "2026-09-20T12:44:13.986Z",
|
|
500
|
+
"durationMs": 14993
|
|
501
|
+
}
|
|
502
|
+
],
|
|
503
|
+
"totalRuns": 14,
|
|
504
|
+
"passedRuns": 14,
|
|
505
|
+
"failedRuns": 0,
|
|
506
|
+
"omittedRuns": 0
|
|
507
|
+
}
|
|
508
|
+
]
|
|
509
|
+
}
|
|
@@ -0,0 +1,64 @@
|
|
|
1
|
+
{
|
|
2
|
+
"schemaVersion": 1,
|
|
3
|
+
"kind": "tag-bound-automated-security-regression-check",
|
|
4
|
+
"reviewer": {
|
|
5
|
+
"name": "Codex",
|
|
6
|
+
"type": "automated"
|
|
7
|
+
},
|
|
8
|
+
"releaseTag": "v1.0.0-rc.14",
|
|
9
|
+
"sourceCommit": "d1c5abcc6d1fa482c211c4327c86f592663d559b",
|
|
10
|
+
"workflowRun": "https://github.com/Zhivex/zhivex-harness/actions/runs/35510484383",
|
|
11
|
+
"sourceProbeResults": [
|
|
12
|
+
{
|
|
13
|
+
"id": "SEC-01",
|
|
14
|
+
"passed": true,
|
|
15
|
+
"acceptedConflictingWrites": 1,
|
|
16
|
+
"finalContent": "first"
|
|
17
|
+
},
|
|
18
|
+
{
|
|
19
|
+
"id": "CONTROL-sequential-stale-digest",
|
|
20
|
+
"passed": true,
|
|
21
|
+
"rejectedStale": true
|
|
22
|
+
},
|
|
23
|
+
{
|
|
24
|
+
"id": "SEC-02",
|
|
25
|
+
"passed": true,
|
|
26
|
+
"replacementVisibleByDefault": true,
|
|
27
|
+
"omissionNoticeVisible": false,
|
|
28
|
+
"fullViewAvailable": true
|
|
29
|
+
},
|
|
30
|
+
{
|
|
31
|
+
"id": "SEC-03",
|
|
32
|
+
"passed": true,
|
|
33
|
+
"missingTools": []
|
|
34
|
+
},
|
|
35
|
+
{
|
|
36
|
+
"id": "SEC-04",
|
|
37
|
+
"passed": true,
|
|
38
|
+
"throughPublicRunHarness": true,
|
|
39
|
+
"status": "completed",
|
|
40
|
+
"differentTenantUserNamespace": true,
|
|
41
|
+
"otherTenantCandidateInToolOutput": false
|
|
42
|
+
}
|
|
43
|
+
],
|
|
44
|
+
"artifactSha512Hex": "50cbb824550db3f90e4c911365224c32f558968f9ae0c286e8fa12bc4df5dd0c4c12a2b5cf8db40175603ce189f238f68e9ea642e77f46f73bfa2c4ac87ff8a2",
|
|
45
|
+
"artifactCheck": "passed",
|
|
46
|
+
"sourceFiles": {
|
|
47
|
+
"src/workspace-mutation-lock.ts": "ca201242db16173bd3a4d86c5d8bb0c2b6f3c43bfed3e4fa4ff5f06a75b19e80",
|
|
48
|
+
"src/workspace.ts": "809f8bbfcf72fed10d860c48585089ca65bb3ef7c672ee6df3c918907a968302",
|
|
49
|
+
"src/execution-environment.ts": "9ce6c49afab26527d5296f0c11f106063590f7333300d58dd49d5a1ec1b4b6e9",
|
|
50
|
+
"scripts/validate-security-review.ts": "956d8d332ce59c39d6b2fd763be2a0f162e51760f4d63cd1e5c9bdbe48b778f3"
|
|
51
|
+
},
|
|
52
|
+
"limitations": [
|
|
53
|
+
"These are focused source-level regressions on the tagged commit, not a fresh complete security audit of every packaged or transitive line.",
|
|
54
|
+
"No human identity or final review signature is asserted."
|
|
55
|
+
],
|
|
56
|
+
"publicationVerification": {
|
|
57
|
+
"status": "passed",
|
|
58
|
+
"publishedAt": "2026-09-20T12:47:20.607Z",
|
|
59
|
+
"registryIntegrity": "sha512-UMu4JFUNs/kOTJETZSJMMvVYlo+a4MKG6PoSvE313QxMEqK1z420AXVgPOGJ8jj2jp6mQud/Rvc7+ixKyH/4og==",
|
|
60
|
+
"provenance": "verified",
|
|
61
|
+
"representativeCases": 42,
|
|
62
|
+
"workflow": "https://github.com/Zhivex/zhivex-harness/actions/runs/35510484383"
|
|
63
|
+
}
|
|
64
|
+
}
|