progmune-runtime 3.7.56 → 3.7.57
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +37 -0
- package/dist/frameworks/nestjs-detector.js +428 -161
- package/dist/frameworks/nestjs-detector.test.js +220 -0
- package/dist/protocol-detector.js +11 -11
- package/dist/sdk.js +1 -1
- package/dist/trust/alert-ranker.js +3 -1
- package/dist/trust/confidence-calculator.js +3 -1
- package/dist/trust/engine.js +20 -2
- package/dist/trust/score-calculator.js +88 -8
- package/dist/trust/score-calculator.test.js +149 -0
- package/dist/trust/types.js +17 -1
- package/package.json +1 -1
package/dist/trust/types.js
CHANGED
|
@@ -8,7 +8,7 @@
|
|
|
8
8
|
* these types during evaluation.
|
|
9
9
|
*/
|
|
10
10
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
11
|
-
exports.DECISION_THRESHOLDS = exports.DEFAULT_GOVERNANCE_DEDUCTIONS = exports.DEFAULT_COVERAGE_MAX_SCORES = exports.DEFAULT_PROTOCOL_WEIGHTS = exports.DEFAULT_SEVERITY_DEDUCTIONS = exports.DEFAULT_DIMENSION_WEIGHTS = exports.TRUST_VIOLATION_REQUIRED_FIELDS = void 0;
|
|
11
|
+
exports.DECISION_THRESHOLDS = exports.DEFAULT_GOVERNANCE_DEDUCTIONS = exports.DEFAULT_COVERAGE_MAX_SCORES = exports.DEFAULT_PROTOCOL_WEIGHTS = exports.DEFAULT_SEVERITY_DEDUCTIONS = exports.DEFAULT_DIMENSION_WEIGHTS = exports.OBSERVATION_RATE_FLOOR = exports.SECURITY_PROTOCOL_FLOOR = exports.SECURITY_PROTOCOLS = exports.TRUST_VIOLATION_REQUIRED_FIELDS = void 0;
|
|
12
12
|
/** The 7 required fields for explainability completeness */
|
|
13
13
|
exports.TRUST_VIOLATION_REQUIRED_FIELDS = [
|
|
14
14
|
"severity",
|
|
@@ -20,6 +20,22 @@ exports.TRUST_VIOLATION_REQUIRED_FIELDS = [
|
|
|
20
20
|
"fix",
|
|
21
21
|
"policy_ref",
|
|
22
22
|
];
|
|
23
|
+
// ── Decision Gates（§53 / R97） ──
|
|
24
|
+
//
|
|
25
|
+
// 背景（immich + nocodb 实测）：authentication 子协议 0 分（21 条 / 586 条违规）、
|
|
26
|
+
// coverageConfidence 0% LOW、mappingCoverage 4%~8% LOW —— 三项独立的
|
|
27
|
+
// 「我们其实没看到什么」指标全部触底，输出却仍是 83 / APPROVED / HIGH。
|
|
28
|
+
// 根因是聚合层只有「分数 → 档位」一条路径，没有任何**下限**与**观察度门槛**。
|
|
29
|
+
/** 安全相关协议：这些维度出现塌方时，不得给出「通过」结论 */
|
|
30
|
+
exports.SECURITY_PROTOCOLS = [
|
|
31
|
+
"authentication",
|
|
32
|
+
"authorization",
|
|
33
|
+
"data_integrity",
|
|
34
|
+
];
|
|
35
|
+
/** 安全协议分数下限：任一条已观察的安全协议低于此分 ⇒ decision 不得为 APPROVED */
|
|
36
|
+
exports.SECURITY_PROTOCOL_FLOOR = 50;
|
|
37
|
+
/** 观察度门槛：coverage / mapping 命中率低于此值 ⇒ 视为「没看清楚」 */
|
|
38
|
+
exports.OBSERVATION_RATE_FLOOR = 0.3;
|
|
23
39
|
// ── Default Dimension Weights (from design doc) ──
|
|
24
40
|
exports.DEFAULT_DIMENSION_WEIGHTS = {
|
|
25
41
|
policyCompliance: 0.35,
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "progmune-runtime",
|
|
3
|
-
"version": "3.7.
|
|
3
|
+
"version": "3.7.57",
|
|
4
4
|
"description": "Progmune — AI Trust Decision Engine. Verify AI-generated code before it reaches production. Outputs APPROVED / NEEDS_REVIEW / BLOCKED with evidence.",
|
|
5
5
|
"files": [
|
|
6
6
|
"dist/",
|