SafeAI-Static-Analyzer 2.3.0__tar.gz → 2.4.0__tar.gz

{safeai_static_analyzer-2.3.0 → safeai_static_analyzer-2.4.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: SafeAI-Static-Analyzer
-Version: 2.3.0
+Version: 2.4.0
 Summary: The lightweight, open-source Static AI Capability & Risk Analyzer for CI/CD pipelines.
 Author: IkarusCareer
 License-Expression: Apache-2.0
@@ -31,7 +31,7 @@ Provides-Extra: standalone
 Requires-Dist: pyinstaller>=6.0; extra == "standalone"
 Dynamic: license-file
 
-# SafeAI — Static AI Capability & Risk Analyzer
+# SafeAI — Agent Authority Security for the Software Supply Chain
 
 [![CI](https://github.com/ikaruscareer/SafeAI/actions/workflows/ci.yml/badge.svg)](https://github.com/ikaruscareer/SafeAI/actions/workflows/ci.yml)
 [![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/ikaruscareer/SafeAI/badge)](https://scorecard.dev/viewer/?uri=github.com/ikaruscareer/SafeAI)
@@ -41,7 +41,19 @@ Dynamic: license-file
 
 Enjoying SafeAI? A ⭐ on [GitHub](https://github.com/ikaruscareer/SafeAI) helps more security teams find it.
 
-**SafeAI** is a static analysis tool that scans AI application source code for security risks, capability exposure, and governance gaps. It is offline and source-private by default — it never executes agents or calls LLMs, and network activity occurs only through explicitly enabled integration commands (currently only `--pr-comment-post`). It integrates into CI/CD pipelines.
+**Know what your AI agent can do before you deploy it.**
+
+**SafeAI** statically maps agent capabilities, tools, MCP integrations, and authority changes, then turns material changes into explainable CI/CD security decisions and portable evidence. Technically, SafeAI is a *Static AI Capability & Risk Analyzer*: it scans AI application source code for security risks, capability exposure, and governance gaps. It is offline and source-private by default — it never executes agents or calls LLMs, and network activity occurs only through explicitly enabled integration commands (currently only `--pr-comment-post`). It integrates into CI/CD pipelines.
+
+**Three pillars — DISCOVER / COMPARE / GOVERN:**
+
+| Pillar | Question | What SafeAI does |
+|---|---|---|
+| **DISCOVER** | What can the agent access? | Builds an evidence-backed model of agent authority: tools, MCP servers, filesystem, shell, databases, APIs, destinations, memory, delegation, autonomy, approval controls |
+| **COMPARE** | What changed? | Diffs authority against the approved baseline: new tools, `read → write` widening, new destinations, removed approval gates |
+| **GOVERN** | Should that change be allowed? | Deterministic CI/CD decisions — `pass`, `review-required`, `block`, `accepted-exception` — with evidence, never an opaque score |
+
+> SafeAI is not a runtime guardrail and does not certify an agent as safe. It provides source-first, evidence-backed visibility into agent authority and meaningful changes *before deployment*.
 
 > 🌐 [safeai-analyzer.ikaruscareer.com](https://safeai-analyzer.ikaruscareer.com) — project landing page
 
@@ -75,6 +87,65 @@ Designed to be lightweight, explainable, and community-driven, SafeAI aims to be
 
 SafeAI sits before runtime guardrails and red-teaming tools in the security lifecycle. It scans agent source code at commit time — detecting framework-specific capabilities, MCP misconfigurations, and prompt injection patterns — before you ever deploy an agent to staging. It does not replace runtime tools (Microsoft AGT), evaluation frameworks (LangSmith, DeepEval), or red-teaming scanners (Promptfoo, Garak). It complements them: find the risk in code first, then validate at runtime.
 
+---
+
+## Example: authority-change report
+
+*SafeAI's most important security event is not simply that a finding exists. It is that an agent's effective authority materially changes.*
+
+```
+Agent: customer-support-agent            Baseline: release v2.4.0 (approved)
+
+AUTHORITY CHANGE (material)
++ tool:        crm_update
++ capability:  database write
++ destination: production CRM
++ access:      read → write
+- human approval gate (GOV_APPROVAL_MISSING)
+
+Policy decision: BLOCK
+Reason: production write authority was added without an approved
+        exception or required approval control.
+Evidence: source files · tool definition · baseline manifest ·
+          current manifest · policy profile · SafeAI version ·
+          ruleset version · commit SHA
+```
+
+The reviewer learns *what the agent can now do that it could not do
+before* — and the decision cites evidence, not a score.
+
+---
+
+## Agent Authority Model
+
+SafeAI builds an analytical model — not an observation of runtime
+permissions — of what an agent is empowered to do:
+
+```
+Agent
+  → Tool / MCP Server / Skill / Workflow Node
+    → Capability
+      → Access Mode (none < read < write < mutate < execute)
+        → Data / Destination / Resource
+          → Authority
+```
+
+Every authority statement carries a class: **declared** (config says so),
+**detected** (code shows it), **inferred** (heuristic, confidence-labelled),
+**repository/IaC-observed** (in-repo infrastructure grants), or
+**unknown**. Runtime-granted authority (live IAM, deployed network policy,
+runtime identity) is explicitly **unknown** to the static scanner —
+*unknown is an evidence state, not evidence of safety*, and SafeAI never
+converts it into a pass.
+
+**What decisions mean.** `pass` means no configured deterministic gate
+triggered — never "the agent is safe." `unknown` means unattributable
+evidence — never "no risk detected." Organizations can govern unknown
+authority explicitly (`authority.unknown` policy, `--unknown-authority`),
+but the default leaves it visible and unfailed.
+
+---
+
 <img width="1024" height="1024" alt="SafeAI_Concept" src="https://github.com/user-attachments/assets/c07999b2-79d5-4200-9eec-ce1ab4e63cc8" />
 
 
@@ -101,7 +172,7 @@ SafeAI sits before runtime guardrails and red-teaming tools in the security life
 | **Baseline & Escalation Gating** | `--fail-on-new` for new/regressed findings, `--fail-on-escalation` for authority changes, `--pr-comment` PR summaries |
 | **Policy-as-Code & Suppressions** | `allow`/`warn`/`require_review`/`deny` policy with selectors; required-reason suppressions |
 | **Assurance Boundary** | Every scan states exactly what it did and could not verify — never a fixed disclaimer |
-| **Security Scorecard** | Deterministic 0–10 score with per-category breakdown and `pass`/`warn`/`fail` outcome; `--scorecard`, `--scorecard-json`, `--scorecard-summary`, and `--scorecard-fail-under` to gate CI on a minimum score |
+| **Security Scorecard** | Deterministic 0–10 score with per-category breakdown and `pass`/`warn`/`fail` outcome; informational unless you opt into `--scorecard-fail-under` gating — evidence and policy decide, the score does not |
 | **CI/CD Integration** | SARIF 2.1.0 output, exit codes, GitHub Actions **Marketplace action** and workflow included |
 | **Community Scan** | Governed private-pilot workflow for scanning public third-party agent frameworks with responsible disclosure (`community-scans/`) — private by default, human-reviewed before any publication |
 | **Multi-Format Reports** | Terminal, JSON, SARIF 2.1.0, HTML, canonical KYA manifest, PR comment, Security Scorecard |
@@ -530,6 +601,8 @@ contributors who have helped make AI safer:
 | [@mah](https://github.com/mahirhir) | Claude Code deep analysis documentation |
 | [@asarakhatun17-lgtm](https://github.com/asarakhatun17-lgtm) | Supported frameworks consistency fix |
 | [@yugaaank](https://github.com/yugaaank) | Capability detectors (Docker, Kubernetes, Redis, S3, GCP, Slack, Jira, browser) |
+| [@Teachmeplaycode](https://github.com/Teachmeplaycode) | Benchmark corpus expansion, static subprocess precision gap documentation (PR #174) |
+| [@nikitajos7](https://github.com/nikitajos7) | Policy profile display in terminal and HTML reports (PR #175) |
 
 See [CONTRIBUTING.md](./CONTRIBUTING.md) for how to get involved.
 

{safeai_static_analyzer-2.3.0 → safeai_static_analyzer-2.4.0}/README.md

@@ -1,4 +1,4 @@
-# SafeAI — Static AI Capability & Risk Analyzer
+# SafeAI — Agent Authority Security for the Software Supply Chain
 
 [![CI](https://github.com/ikaruscareer/SafeAI/actions/workflows/ci.yml/badge.svg)](https://github.com/ikaruscareer/SafeAI/actions/workflows/ci.yml)
 [![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/ikaruscareer/SafeAI/badge)](https://scorecard.dev/viewer/?uri=github.com/ikaruscareer/SafeAI)
@@ -8,7 +8,19 @@
 
 Enjoying SafeAI? A ⭐ on [GitHub](https://github.com/ikaruscareer/SafeAI) helps more security teams find it.
 
-**SafeAI** is a static analysis tool that scans AI application source code for security risks, capability exposure, and governance gaps. It is offline and source-private by default — it never executes agents or calls LLMs, and network activity occurs only through explicitly enabled integration commands (currently only `--pr-comment-post`). It integrates into CI/CD pipelines.
+**Know what your AI agent can do before you deploy it.**
+
+**SafeAI** statically maps agent capabilities, tools, MCP integrations, and authority changes, then turns material changes into explainable CI/CD security decisions and portable evidence. Technically, SafeAI is a *Static AI Capability & Risk Analyzer*: it scans AI application source code for security risks, capability exposure, and governance gaps. It is offline and source-private by default — it never executes agents or calls LLMs, and network activity occurs only through explicitly enabled integration commands (currently only `--pr-comment-post`). It integrates into CI/CD pipelines.
+
+**Three pillars — DISCOVER / COMPARE / GOVERN:**
+
+| Pillar | Question | What SafeAI does |
+|---|---|---|
+| **DISCOVER** | What can the agent access? | Builds an evidence-backed model of agent authority: tools, MCP servers, filesystem, shell, databases, APIs, destinations, memory, delegation, autonomy, approval controls |
+| **COMPARE** | What changed? | Diffs authority against the approved baseline: new tools, `read → write` widening, new destinations, removed approval gates |
+| **GOVERN** | Should that change be allowed? | Deterministic CI/CD decisions — `pass`, `review-required`, `block`, `accepted-exception` — with evidence, never an opaque score |
+
+> SafeAI is not a runtime guardrail and does not certify an agent as safe. It provides source-first, evidence-backed visibility into agent authority and meaningful changes *before deployment*.
 
 > 🌐 [safeai-analyzer.ikaruscareer.com](https://safeai-analyzer.ikaruscareer.com) — project landing page
 
@@ -42,6 +54,65 @@ Designed to be lightweight, explainable, and community-driven, SafeAI aims to be
 
 SafeAI sits before runtime guardrails and red-teaming tools in the security lifecycle. It scans agent source code at commit time — detecting framework-specific capabilities, MCP misconfigurations, and prompt injection patterns — before you ever deploy an agent to staging. It does not replace runtime tools (Microsoft AGT), evaluation frameworks (LangSmith, DeepEval), or red-teaming scanners (Promptfoo, Garak). It complements them: find the risk in code first, then validate at runtime.
 
+---
+
+## Example: authority-change report
+
+*SafeAI's most important security event is not simply that a finding exists. It is that an agent's effective authority materially changes.*
+
+```
+Agent: customer-support-agent            Baseline: release v2.4.0 (approved)
+
+AUTHORITY CHANGE (material)
++ tool:        crm_update
++ capability:  database write
++ destination: production CRM
++ access:      read → write
+- human approval gate (GOV_APPROVAL_MISSING)
+
+Policy decision: BLOCK
+Reason: production write authority was added without an approved
+        exception or required approval control.
+Evidence: source files · tool definition · baseline manifest ·
+          current manifest · policy profile · SafeAI version ·
+          ruleset version · commit SHA
+```
+
+The reviewer learns *what the agent can now do that it could not do
+before* — and the decision cites evidence, not a score.
+
+---
+
+## Agent Authority Model
+
+SafeAI builds an analytical model — not an observation of runtime
+permissions — of what an agent is empowered to do:
+
+```
+Agent
+  → Tool / MCP Server / Skill / Workflow Node
+    → Capability
+      → Access Mode (none < read < write < mutate < execute)
+        → Data / Destination / Resource
+          → Authority
+```
+
+Every authority statement carries a class: **declared** (config says so),
+**detected** (code shows it), **inferred** (heuristic, confidence-labelled),
+**repository/IaC-observed** (in-repo infrastructure grants), or
+**unknown**. Runtime-granted authority (live IAM, deployed network policy,
+runtime identity) is explicitly **unknown** to the static scanner —
+*unknown is an evidence state, not evidence of safety*, and SafeAI never
+converts it into a pass.
+
+**What decisions mean.** `pass` means no configured deterministic gate
+triggered — never "the agent is safe." `unknown` means unattributable
+evidence — never "no risk detected." Organizations can govern unknown
+authority explicitly (`authority.unknown` policy, `--unknown-authority`),
+but the default leaves it visible and unfailed.
+
+---
+
 <img width="1024" height="1024" alt="SafeAI_Concept" src="https://github.com/user-attachments/assets/c07999b2-79d5-4200-9eec-ce1ab4e63cc8" />
 
 
@@ -68,7 +139,7 @@ SafeAI sits before runtime guardrails and red-teaming tools in the security life
 | **Baseline & Escalation Gating** | `--fail-on-new` for new/regressed findings, `--fail-on-escalation` for authority changes, `--pr-comment` PR summaries |
 | **Policy-as-Code & Suppressions** | `allow`/`warn`/`require_review`/`deny` policy with selectors; required-reason suppressions |
 | **Assurance Boundary** | Every scan states exactly what it did and could not verify — never a fixed disclaimer |
-| **Security Scorecard** | Deterministic 0–10 score with per-category breakdown and `pass`/`warn`/`fail` outcome; `--scorecard`, `--scorecard-json`, `--scorecard-summary`, and `--scorecard-fail-under` to gate CI on a minimum score |
+| **Security Scorecard** | Deterministic 0–10 score with per-category breakdown and `pass`/`warn`/`fail` outcome; informational unless you opt into `--scorecard-fail-under` gating — evidence and policy decide, the score does not |
 | **CI/CD Integration** | SARIF 2.1.0 output, exit codes, GitHub Actions **Marketplace action** and workflow included |
 | **Community Scan** | Governed private-pilot workflow for scanning public third-party agent frameworks with responsible disclosure (`community-scans/`) — private by default, human-reviewed before any publication |
 | **Multi-Format Reports** | Terminal, JSON, SARIF 2.1.0, HTML, canonical KYA manifest, PR comment, Security Scorecard |
@@ -497,6 +568,8 @@ contributors who have helped make AI safer:
 | [@mah](https://github.com/mahirhir) | Claude Code deep analysis documentation |
 | [@asarakhatun17-lgtm](https://github.com/asarakhatun17-lgtm) | Supported frameworks consistency fix |
 | [@yugaaank](https://github.com/yugaaank) | Capability detectors (Docker, Kubernetes, Redis, S3, GCP, Slack, Jira, browser) |
+| [@Teachmeplaycode](https://github.com/Teachmeplaycode) | Benchmark corpus expansion, static subprocess precision gap documentation (PR #174) |
+| [@nikitajos7](https://github.com/nikitajos7) | Policy profile display in terminal and HTML reports (PR #175) |
 
 See [CONTRIBUTING.md](./CONTRIBUTING.md) for how to get involved.
 

{safeai_static_analyzer-2.3.0 → safeai_static_analyzer-2.4.0}/SafeAI_Static_Analyzer.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: SafeAI-Static-Analyzer
-Version: 2.3.0
+Version: 2.4.0
 Summary: The lightweight, open-source Static AI Capability & Risk Analyzer for CI/CD pipelines.
 Author: IkarusCareer
 License-Expression: Apache-2.0
@@ -31,7 +31,7 @@ Provides-Extra: standalone
 Requires-Dist: pyinstaller>=6.0; extra == "standalone"
 Dynamic: license-file
 
-# SafeAI — Static AI Capability & Risk Analyzer
+# SafeAI — Agent Authority Security for the Software Supply Chain
 
 [![CI](https://github.com/ikaruscareer/SafeAI/actions/workflows/ci.yml/badge.svg)](https://github.com/ikaruscareer/SafeAI/actions/workflows/ci.yml)
 [![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/ikaruscareer/SafeAI/badge)](https://scorecard.dev/viewer/?uri=github.com/ikaruscareer/SafeAI)
@@ -41,7 +41,19 @@ Dynamic: license-file
 
 Enjoying SafeAI? A ⭐ on [GitHub](https://github.com/ikaruscareer/SafeAI) helps more security teams find it.
 
-**SafeAI** is a static analysis tool that scans AI application source code for security risks, capability exposure, and governance gaps. It is offline and source-private by default — it never executes agents or calls LLMs, and network activity occurs only through explicitly enabled integration commands (currently only `--pr-comment-post`). It integrates into CI/CD pipelines.
+**Know what your AI agent can do before you deploy it.**
+
+**SafeAI** statically maps agent capabilities, tools, MCP integrations, and authority changes, then turns material changes into explainable CI/CD security decisions and portable evidence. Technically, SafeAI is a *Static AI Capability & Risk Analyzer*: it scans AI application source code for security risks, capability exposure, and governance gaps. It is offline and source-private by default — it never executes agents or calls LLMs, and network activity occurs only through explicitly enabled integration commands (currently only `--pr-comment-post`). It integrates into CI/CD pipelines.
+
+**Three pillars — DISCOVER / COMPARE / GOVERN:**
+
+| Pillar | Question | What SafeAI does |
+|---|---|---|
+| **DISCOVER** | What can the agent access? | Builds an evidence-backed model of agent authority: tools, MCP servers, filesystem, shell, databases, APIs, destinations, memory, delegation, autonomy, approval controls |
+| **COMPARE** | What changed? | Diffs authority against the approved baseline: new tools, `read → write` widening, new destinations, removed approval gates |
+| **GOVERN** | Should that change be allowed? | Deterministic CI/CD decisions — `pass`, `review-required`, `block`, `accepted-exception` — with evidence, never an opaque score |
+
+> SafeAI is not a runtime guardrail and does not certify an agent as safe. It provides source-first, evidence-backed visibility into agent authority and meaningful changes *before deployment*.
 
 > 🌐 [safeai-analyzer.ikaruscareer.com](https://safeai-analyzer.ikaruscareer.com) — project landing page
 
@@ -75,6 +87,65 @@ Designed to be lightweight, explainable, and community-driven, SafeAI aims to be
 
 SafeAI sits before runtime guardrails and red-teaming tools in the security lifecycle. It scans agent source code at commit time — detecting framework-specific capabilities, MCP misconfigurations, and prompt injection patterns — before you ever deploy an agent to staging. It does not replace runtime tools (Microsoft AGT), evaluation frameworks (LangSmith, DeepEval), or red-teaming scanners (Promptfoo, Garak). It complements them: find the risk in code first, then validate at runtime.
 
+---
+
+## Example: authority-change report
+
+*SafeAI's most important security event is not simply that a finding exists. It is that an agent's effective authority materially changes.*
+
+```
+Agent: customer-support-agent            Baseline: release v2.4.0 (approved)
+
+AUTHORITY CHANGE (material)
++ tool:        crm_update
++ capability:  database write
++ destination: production CRM
++ access:      read → write
+- human approval gate (GOV_APPROVAL_MISSING)
+
+Policy decision: BLOCK
+Reason: production write authority was added without an approved
+        exception or required approval control.
+Evidence: source files · tool definition · baseline manifest ·
+          current manifest · policy profile · SafeAI version ·
+          ruleset version · commit SHA
+```
+
+The reviewer learns *what the agent can now do that it could not do
+before* — and the decision cites evidence, not a score.
+
+---
+
+## Agent Authority Model
+
+SafeAI builds an analytical model — not an observation of runtime
+permissions — of what an agent is empowered to do:
+
+```
+Agent
+  → Tool / MCP Server / Skill / Workflow Node
+    → Capability
+      → Access Mode (none < read < write < mutate < execute)
+        → Data / Destination / Resource
+          → Authority
+```
+
+Every authority statement carries a class: **declared** (config says so),
+**detected** (code shows it), **inferred** (heuristic, confidence-labelled),
+**repository/IaC-observed** (in-repo infrastructure grants), or
+**unknown**. Runtime-granted authority (live IAM, deployed network policy,
+runtime identity) is explicitly **unknown** to the static scanner —
+*unknown is an evidence state, not evidence of safety*, and SafeAI never
+converts it into a pass.
+
+**What decisions mean.** `pass` means no configured deterministic gate
+triggered — never "the agent is safe." `unknown` means unattributable
+evidence — never "no risk detected." Organizations can govern unknown
+authority explicitly (`authority.unknown` policy, `--unknown-authority`),
+but the default leaves it visible and unfailed.
+
+---
+
 <img width="1024" height="1024" alt="SafeAI_Concept" src="https://github.com/user-attachments/assets/c07999b2-79d5-4200-9eec-ce1ab4e63cc8" />
 
 
@@ -101,7 +172,7 @@ SafeAI sits before runtime guardrails and red-teaming tools in the security life
 | **Baseline & Escalation Gating** | `--fail-on-new` for new/regressed findings, `--fail-on-escalation` for authority changes, `--pr-comment` PR summaries |
 | **Policy-as-Code & Suppressions** | `allow`/`warn`/`require_review`/`deny` policy with selectors; required-reason suppressions |
 | **Assurance Boundary** | Every scan states exactly what it did and could not verify — never a fixed disclaimer |
-| **Security Scorecard** | Deterministic 0–10 score with per-category breakdown and `pass`/`warn`/`fail` outcome; `--scorecard`, `--scorecard-json`, `--scorecard-summary`, and `--scorecard-fail-under` to gate CI on a minimum score |
+| **Security Scorecard** | Deterministic 0–10 score with per-category breakdown and `pass`/`warn`/`fail` outcome; informational unless you opt into `--scorecard-fail-under` gating — evidence and policy decide, the score does not |
 | **CI/CD Integration** | SARIF 2.1.0 output, exit codes, GitHub Actions **Marketplace action** and workflow included |
 | **Community Scan** | Governed private-pilot workflow for scanning public third-party agent frameworks with responsible disclosure (`community-scans/`) — private by default, human-reviewed before any publication |
 | **Multi-Format Reports** | Terminal, JSON, SARIF 2.1.0, HTML, canonical KYA manifest, PR comment, Security Scorecard |
@@ -530,6 +601,8 @@ contributors who have helped make AI safer:
 | [@mah](https://github.com/mahirhir) | Claude Code deep analysis documentation |
 | [@asarakhatun17-lgtm](https://github.com/asarakhatun17-lgtm) | Supported frameworks consistency fix |
 | [@yugaaank](https://github.com/yugaaank) | Capability detectors (Docker, Kubernetes, Redis, S3, GCP, Slack, Jira, browser) |
+| [@Teachmeplaycode](https://github.com/Teachmeplaycode) | Benchmark corpus expansion, static subprocess precision gap documentation (PR #174) |
+| [@nikitajos7](https://github.com/nikitajos7) | Policy profile display in terminal and HTML reports (PR #175) |
 
 See [CONTRIBUTING.md](./CONTRIBUTING.md) for how to get involved.
 

{safeai_static_analyzer-2.3.0 → safeai_static_analyzer-2.4.0}/SafeAI_Static_Analyzer.egg-info/SOURCES.txt

@@ -121,6 +121,7 @@ safeai/kya/baseline.py
 safeai/kya/ci_context.py
 safeai/kya/contract.py
 safeai/kya/enrich.py
+safeai/kya/exceptions.py
 safeai/kya/exporter.py
 safeai/kya/fingerprints.py
 safeai/kya/identity.py
@@ -156,8 +157,12 @@ safeai/telemetry/client.py
 safeai/telemetry/config.py
 safeai/telemetry/schema.py
 tests/test_adapter_dataflow.py
+tests/test_architectural_invariants.py
+tests/test_architecture_diagram.py
 tests/test_assurance.py
+tests/test_authority_change.py
 tests/test_baseline.py
+tests/test_baseline_compat.py
 tests/test_benchmarks.py
 tests/test_capability_detection.py
 tests/test_capability_diff_v2.py
@@ -175,7 +180,9 @@ tests/test_dco.py
 tests/test_env_dependency.py
 tests/test_escalation.py
 tests/test_escalation_remediation.py
+tests/test_evidence_contract_v7.py
 tests/test_evidence_type.py
+tests/test_exceptions.py
 tests/test_fingerprints.py
 tests/test_github_action.py
 tests/test_governance_analyzer.py
@@ -196,6 +203,7 @@ tests/test_plugin_sdk.py
 tests/test_policy.py
 tests/test_pr_comment.py
 tests/test_pr_comment_cli.py
+tests/test_pr_paths.py
 tests/test_quality_gates.py
 tests/test_registry.py
 tests/test_registry_cli.py
@@ -204,6 +212,7 @@ tests/test_regression_fixtures.py
 tests/test_release_assets.py
 tests/test_release_fixes.py
 tests/test_release_validation.py
+tests/test_release_workflow.py
 tests/test_rules_loader_determinism.py
 tests/test_sarif.py
 tests/test_scan_framework.py
@@ -217,5 +226,6 @@ tests/test_target_taxonomy_engine.py
 tests/test_telemetry.py
 tests/test_tool_identity.py
 tests/test_tool_implementation.py
+tests/test_unknown_authority.py
 tests/test_version.py
 tests/test_windsurf_framework.py