Repository navigation
Add expiry-enforced local risk review - #2
Merged
Merged
Conversation
MohammadThabetHassan
added a commit
that referenced
this pull request
Oct 4, 2026
…velopment faults scripts/rego_real_faults_study.py runs the protocol fixed in docs/REAL_FAULTS_PROTOCOL_REGO.md: for each behaviour fix in the Gatekeeper and Config Validator histories, the module at the fix's parent (the policy in use) and at the fix, each with its own commit's libraries; both suites' inputs and settings; the exact study's witness space from the two versions together, its completeness check, and OPA's decisions; the policy's own quotient as the Rego payoff study builds it; and each strategy's exposure probability in closed form, the settings' misses multiplied. Membership is the paper's procedure, run on the corpus as it stood at each commit. Config Validator passes the asset at input.asset and the Constraint at input.constraint, and decides with deny; the analysis reads a renamed copy of the syntax tree, while OPA decides on the module as written. Only the fixtures a test reads are loaded: one malformed fixture elsewhere in a 2019 tree stopped the whole suite, which is how the Config Validator development fault first came back with no inputs. The two development faults the protocol names (Gatekeeper #2, Config Validator #34) are the only ones run so far.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
trustweave risk-checkto normalize supplied local review findings into stable fingerprints.Contributor attribution
AbdulrahmanRezki <abderrahmanrezki2005@gmail.com>omaralraas <20220001549@students.cud.ac.ae>Verification
ruff format --check .ruff check .mypy srcbandit -r src/trustweave -qpytest(80 passed; 90.50% coverage)python3 scripts/reality_check.pyScope
This PR evaluates only existing supplied local review artifacts. Baselines and suppressions document temporary reviewer decisions; they do not remediate a condition, connect to ticketing, authenticate an approver, or create a runtime control.