torusguard 1.4.0 → 2.0.0-alpha
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.torusguard/auth.json +5 -0
- package/.torusguard/rules_catalog.json +242 -518
- package/.torusguard/scripts/__pycache__/apply_runner.cpython-314.pyc +0 -0
- package/.torusguard/scripts/__pycache__/audit_runner.cpython-314.pyc +0 -0
- package/.torusguard/scripts/__pycache__/harden_runner.cpython-314.pyc +0 -0
- package/.torusguard/scripts/__pycache__/html_reporter.cpython-314.pyc +0 -0
- package/.torusguard/scripts/__pycache__/manifest_builder.cpython-314.pyc +0 -0
- package/.torusguard/scripts/__pycache__/recipes_runner.cpython-314.pyc +0 -0
- package/.torusguard/scripts/__pycache__/report_sync.cpython-314.pyc +0 -0
- package/.torusguard/snapshots/20260921-182638/go.mod.bak +11 -0
- package/.torusguard/snapshots/20260921-185213/file.go.bak +5 -0
- package/README.md +315 -393
- package/package.json +1 -1
- package/skills/torusguard/__pycache__/bootstrap.cpython-314.pyc +0 -0
- package/skills/torusguard/payload/TORUSGUARD.md +145 -145
- package/skills/torusguard/payload/agents/auditor.md +41 -41
- package/skills/torusguard/payload/agents/profiler.md +49 -49
- package/skills/torusguard/payload/agents/remediator.md +41 -41
- package/skills/torusguard/payload/agents/reviewer.md +39 -39
- package/skills/torusguard/payload/agents/validator.md +46 -46
- package/skills/torusguard/payload/config/scope.json +24 -24
- package/skills/torusguard/payload/references/csharp-security.md +41 -41
- package/skills/torusguard/payload/references/go-security.md +41 -41
- package/skills/torusguard/payload/references/java-security.md +40 -40
- package/skills/torusguard/payload/references/polyglot-security-matrix.md +25 -25
- package/skills/torusguard/payload/references/rust-security.md +40 -40
- package/skills/torusguard/payload/rules/custom/.gitkeep +1 -1
- package/skills/torusguard/payload/rules/custom/README.md +30 -30
- package/skills/torusguard/payload/scripts/rules_sync.py +321 -321
- package/skills/torusguard/payload/scripts/safety_gate.py +64 -64
- package/skills/torusguard/payload/skills/torusguard/references/csharp-security.md +41 -41
- package/skills/torusguard/payload/skills/torusguard/references/go-security.md +41 -41
- package/skills/torusguard/payload/skills/torusguard/references/java-security.md +40 -40
- package/skills/torusguard/payload/skills/torusguard/references/polyglot-security-matrix.md +25 -25
- package/skills/torusguard/payload/skills/torusguard/references/rust-security.md +40 -40
- package/skills/torusguard/payload/templates/audit-report.template.md +54 -54
- package/skills/torusguard/payload/templates/authorization.template.md +34 -34
- package/skills/torusguard/payload/templates/finding-card.template.md +32 -32
- package/skills/torusguard/payload/templates/remediation-bundle.template.md +35 -35
|
@@ -1,34 +1,34 @@
|
|
|
1
|
-
# TorusGuard Target Authorization Record
|
|
2
|
-
|
|
3
|
-
**Authorization ID:** `{{authorization_id}}`
|
|
4
|
-
**Generated At:** `{{timestamp}}`
|
|
5
|
-
**Valid Until:** `{{valid_until}}`
|
|
6
|
-
|
|
7
|
-
---
|
|
8
|
-
|
|
9
|
-
## 1. Target Identification
|
|
10
|
-
- **Project / Application:** `{{target_name}}`
|
|
11
|
-
- **Target URL / Hosts:** `{{target_hosts}}`
|
|
12
|
-
- **Scope Type:** `{{scope_type}}`
|
|
13
|
-
|
|
14
|
-
---
|
|
15
|
-
|
|
16
|
-
## 2. Permitted Boundaries
|
|
17
|
-
- **Allowed Path Prefixes:**
|
|
18
|
-
{{allowed_path_prefixes_list}}
|
|
19
|
-
|
|
20
|
-
- **Explicitly Forbidden / Excluded Paths:**
|
|
21
|
-
{{forbidden_paths_list}}
|
|
22
|
-
|
|
23
|
-
- **Max Navigation Depth:** `{{max_depth}}`
|
|
24
|
-
- **Max Request Budget:** `{{max_requests}}`
|
|
25
|
-
- **Allow State-Changing Methods:** `{{allow_state_changing_methods}}`
|
|
26
|
-
|
|
27
|
-
---
|
|
28
|
-
|
|
29
|
-
## 3. Owner Confirmation & Legal Statement
|
|
30
|
-
> [!IMPORTANT]
|
|
31
|
-
> The target application owner has confirmed that this testing environment is authorized for non-destructive, bounded runtime security validation.
|
|
32
|
-
|
|
33
|
-
- **Authorized By:** `{{authorized_by}}`
|
|
34
|
-
- **Confirmation Status:** `Owner Confirmed`
|
|
1
|
+
# TorusGuard Target Authorization Record
|
|
2
|
+
|
|
3
|
+
**Authorization ID:** `{{authorization_id}}`
|
|
4
|
+
**Generated At:** `{{timestamp}}`
|
|
5
|
+
**Valid Until:** `{{valid_until}}`
|
|
6
|
+
|
|
7
|
+
---
|
|
8
|
+
|
|
9
|
+
## 1. Target Identification
|
|
10
|
+
- **Project / Application:** `{{target_name}}`
|
|
11
|
+
- **Target URL / Hosts:** `{{target_hosts}}`
|
|
12
|
+
- **Scope Type:** `{{scope_type}}`
|
|
13
|
+
|
|
14
|
+
---
|
|
15
|
+
|
|
16
|
+
## 2. Permitted Boundaries
|
|
17
|
+
- **Allowed Path Prefixes:**
|
|
18
|
+
{{allowed_path_prefixes_list}}
|
|
19
|
+
|
|
20
|
+
- **Explicitly Forbidden / Excluded Paths:**
|
|
21
|
+
{{forbidden_paths_list}}
|
|
22
|
+
|
|
23
|
+
- **Max Navigation Depth:** `{{max_depth}}`
|
|
24
|
+
- **Max Request Budget:** `{{max_requests}}`
|
|
25
|
+
- **Allow State-Changing Methods:** `{{allow_state_changing_methods}}`
|
|
26
|
+
|
|
27
|
+
---
|
|
28
|
+
|
|
29
|
+
## 3. Owner Confirmation & Legal Statement
|
|
30
|
+
> [!IMPORTANT]
|
|
31
|
+
> The target application owner has confirmed that this testing environment is authorized for non-destructive, bounded runtime security validation.
|
|
32
|
+
|
|
33
|
+
- **Authorized By:** `{{authorized_by}}`
|
|
34
|
+
- **Confirmation Status:** `Owner Confirmed`
|
|
@@ -1,32 +1,32 @@
|
|
|
1
|
-
### [{{rule_id}}] {{finding_title}}
|
|
2
|
-
|
|
3
|
-
**Severity:** `{{severity_badge}}` | **Auditable Confidence:** `{{confidence_score}}/100 {{confidence_band_badge}}`
|
|
4
|
-
**Finding ID:** `{{finding_id}}` | **Fingerprint:** `{{fingerprint_hash}}`
|
|
5
|
-
**Target Location:** `{{file_path}}:{{line_number}}` (`{{code_symbol}}`)
|
|
6
|
-
**Lifecycle Status:** `{{lifecycle_status}}` | **Exploitability:** `{{exploitability_status}}`
|
|
7
|
-
|
|
8
|
-
---
|
|
9
|
-
|
|
10
|
-
#### 1. Provenance Chain
|
|
11
|
-
- **Detection Rule:** `{{rule_id}}` (CWE-{{cwe_id}})
|
|
12
|
-
- **Triggering Input:** `{{triggering_source}}`
|
|
13
|
-
- **Sink Path:** `{{sink_expression}}`
|
|
14
|
-
|
|
15
|
-
#### 2. Raw Verified Evidence
|
|
16
|
-
```{{code_language}}
|
|
17
|
-
{{raw_evidence_snippet}}
|
|
18
|
-
```
|
|
19
|
-
> **Evidence Checksum (SHA-256):** `{{evidence_sha256}}`
|
|
20
|
-
|
|
21
|
-
#### 3. Objective Facts vs AI Interpretation
|
|
22
|
-
- **Verified Facts:** {{raw_facts_summary}}
|
|
23
|
-
- **AI Risk Analysis:** {{ai_interpretation}}
|
|
24
|
-
|
|
25
|
-
#### 4. Remediation Diff (Minimal Churn)
|
|
26
|
-
```diff
|
|
27
|
-
{{remediation_diff_preview}}
|
|
28
|
-
```
|
|
29
|
-
|
|
30
|
-
#### 5. Retest & Verification
|
|
31
|
-
- **Verification Method:** {{verification_method}}
|
|
32
|
-
- **Current Retest Status:** `{{retest_status}}`
|
|
1
|
+
### [{{rule_id}}] {{finding_title}}
|
|
2
|
+
|
|
3
|
+
**Severity:** `{{severity_badge}}` | **Auditable Confidence:** `{{confidence_score}}/100 {{confidence_band_badge}}`
|
|
4
|
+
**Finding ID:** `{{finding_id}}` | **Fingerprint:** `{{fingerprint_hash}}`
|
|
5
|
+
**Target Location:** `{{file_path}}:{{line_number}}` (`{{code_symbol}}`)
|
|
6
|
+
**Lifecycle Status:** `{{lifecycle_status}}` | **Exploitability:** `{{exploitability_status}}`
|
|
7
|
+
|
|
8
|
+
---
|
|
9
|
+
|
|
10
|
+
#### 1. Provenance Chain
|
|
11
|
+
- **Detection Rule:** `{{rule_id}}` (CWE-{{cwe_id}})
|
|
12
|
+
- **Triggering Input:** `{{triggering_source}}`
|
|
13
|
+
- **Sink Path:** `{{sink_expression}}`
|
|
14
|
+
|
|
15
|
+
#### 2. Raw Verified Evidence
|
|
16
|
+
```{{code_language}}
|
|
17
|
+
{{raw_evidence_snippet}}
|
|
18
|
+
```
|
|
19
|
+
> **Evidence Checksum (SHA-256):** `{{evidence_sha256}}`
|
|
20
|
+
|
|
21
|
+
#### 3. Objective Facts vs AI Interpretation
|
|
22
|
+
- **Verified Facts:** {{raw_facts_summary}}
|
|
23
|
+
- **AI Risk Analysis:** {{ai_interpretation}}
|
|
24
|
+
|
|
25
|
+
#### 4. Remediation Diff (Minimal Churn)
|
|
26
|
+
```diff
|
|
27
|
+
{{remediation_diff_preview}}
|
|
28
|
+
```
|
|
29
|
+
|
|
30
|
+
#### 5. Retest & Verification
|
|
31
|
+
- **Verification Method:** {{verification_method}}
|
|
32
|
+
- **Current Retest Status:** `{{retest_status}}`
|
|
@@ -1,35 +1,35 @@
|
|
|
1
|
-
# Remediation Bundle: `{{bundle_id}}`
|
|
2
|
-
|
|
3
|
-
**Cluster ID:** `{{cluster_id}}`
|
|
4
|
-
**Target Rule:** `{{rule_id}}` (`{{rule_title}}`)
|
|
5
|
-
**Affected Files:** `{{affected_files}}`
|
|
6
|
-
|
|
7
|
-
---
|
|
8
|
-
|
|
9
|
-
## 1. Problem Statement & Risk
|
|
10
|
-
{{problem_statement}}
|
|
11
|
-
|
|
12
|
-
**Adversarial Abuse & Practical Impact:**
|
|
13
|
-
{{risk_explanation}}
|
|
14
|
-
|
|
15
|
-
---
|
|
16
|
-
|
|
17
|
-
## 2. Governed Minimal Patch Plan
|
|
18
|
-
- **Max Additions Boundary:** $\le 35$ lines (Proposed: `+{{additions_count}}`)
|
|
19
|
-
- **Max Deletions Boundary:** $\le 25$ lines (Proposed: `-{{deletions_count}}`)
|
|
20
|
-
- **Governance Review Level:** `{{governance_review_level}}`
|
|
21
|
-
|
|
22
|
-
### Framework-Native Diff
|
|
23
|
-
```diff
|
|
24
|
-
{{candidate_patch_diff}}
|
|
25
|
-
```
|
|
26
|
-
|
|
27
|
-
---
|
|
28
|
-
|
|
29
|
-
## 3. Verification & Retest Method
|
|
30
|
-
{{verification_method}}
|
|
31
|
-
|
|
32
|
-
---
|
|
33
|
-
|
|
34
|
-
## 4. Residual Risk & Edge Cases
|
|
35
|
-
{{residual_risk_notes}}
|
|
1
|
+
# Remediation Bundle: `{{bundle_id}}`
|
|
2
|
+
|
|
3
|
+
**Cluster ID:** `{{cluster_id}}`
|
|
4
|
+
**Target Rule:** `{{rule_id}}` (`{{rule_title}}`)
|
|
5
|
+
**Affected Files:** `{{affected_files}}`
|
|
6
|
+
|
|
7
|
+
---
|
|
8
|
+
|
|
9
|
+
## 1. Problem Statement & Risk
|
|
10
|
+
{{problem_statement}}
|
|
11
|
+
|
|
12
|
+
**Adversarial Abuse & Practical Impact:**
|
|
13
|
+
{{risk_explanation}}
|
|
14
|
+
|
|
15
|
+
---
|
|
16
|
+
|
|
17
|
+
## 2. Governed Minimal Patch Plan
|
|
18
|
+
- **Max Additions Boundary:** $\le 35$ lines (Proposed: `+{{additions_count}}`)
|
|
19
|
+
- **Max Deletions Boundary:** $\le 25$ lines (Proposed: `-{{deletions_count}}`)
|
|
20
|
+
- **Governance Review Level:** `{{governance_review_level}}`
|
|
21
|
+
|
|
22
|
+
### Framework-Native Diff
|
|
23
|
+
```diff
|
|
24
|
+
{{candidate_patch_diff}}
|
|
25
|
+
```
|
|
26
|
+
|
|
27
|
+
---
|
|
28
|
+
|
|
29
|
+
## 3. Verification & Retest Method
|
|
30
|
+
{{verification_method}}
|
|
31
|
+
|
|
32
|
+
---
|
|
33
|
+
|
|
34
|
+
## 4. Residual Risk & Edge Cases
|
|
35
|
+
{{residual_risk_notes}}
|