Kjell Tore Guttormsen ee73062864 test(redos): the lexicon-script-tag row denied the literal but not the bound ... The unit fix alone ("<script>" -> "<script ") wasn't sufficient: at the shared _REDOS_N=100_000, the now-fixed [^><] pattern's vulnerable predecessor ([^>]) only measures ~1.2-1.4s, under the 2.0s assert -- so the row passed under both the safe and the vulnerable form and proved nothing. Gave this row its own N=200_000, where the unsafe form measures ~3.7s (fails) and the shipped form ~0.8s (passes). Verified both directions by temporarily reverting the lexicon pattern and restoring it.		2026-08-11 21:40:43 +02:00
..
inbox_frontend.py	feat(okf): scan reserved index.md/log.md in mode-b import, not path-reject (review MAJOR #2)	2026-07-15 06:43:50 +02:00
test_active_content.py	fix(active-content): raw-html graded two inert shapes HIGH, and the fix moved a second surface	2026-08-11 16:56:31 +02:00
test_calibration.py	fix(output): 19 quadratic regex runs on the output path, worst ~5.7h at the cap	2026-07-31 18:31:58 +02:00
test_contract.py	fix(security): harden 5 adversarial-review findings (M1/M2/M3 + m4/m6) via TDD	2026-07-05 10:45:05 +02:00
test_corpus.py	measure(fp): the upload door costs a human on 16-53% of benign documents	2026-08-10 21:32:56 +02:00
test_coverage_matrix.py	test(coverage): runnable threat-coverage matrix (real-case validation gate)	2026-07-15 11:20:22 +02:00
test_disposition.py	docs(plan): kill the pointer that sent this session to the wrong section	2026-08-10 21:01:19 +02:00
test_entropy.py	fix(security): harden 5 adversarial-review findings (M1/M2/M3 + m4/m6) via TDD	2026-07-05 10:45:05 +02:00
test_fence.py	feat(fence): randomized unspoofable delimiter + attacker marker-strip (TDD) [skip-docs]	2026-07-04 18:23:35 +02:00
test_grounding.py	feat(grounding): SourceGroundingCheck protocol + pass-through default — the semantic-poisoning seam (TDD) [skip-docs]	2026-07-04 22:44:41 +02:00
test_input_cap.py	docs(readme,limitations): stop advertising a version that was not chosen	2026-08-02 21:21:21 +02:00
test_lexicon.py	fix(lexicon): two quadratic patterns, reachable through the output gate too	2026-07-31 21:50:51 +02:00
test_neutralize.py	fix(active-content): raw-html graded two inert shapes HIGH, and the fix moved a second surface	2026-08-11 16:56:31 +02:00
test_okf.py	feat(active-content,okf): bound the last two detection surfaces	2026-08-10 14:48:54 +02:00
test_okf_inbox_uploads.py	feat(inbox): .xlsx extraction — formula gate, hidden sheets, cell comments (stage 2h)	2026-07-07 07:41:00 +02:00
test_okf_showcase.py	feat(okf): scan reserved index.md/log.md in mode-b import, not path-reject (review MAJOR #2)	2026-07-15 06:43:50 +02:00
test_output.py	test(redos): the lexicon-script-tag row denied the literal but not the bound	2026-08-11 21:40:43 +02:00
test_report.py	feat: scaffold package + report and sanitize modules (TDD)	2026-07-04 09:24:20 +02:00
test_sanitize.py	fix(sanitize,okf,active_content): three quadratic patterns, two on the input path	2026-08-01 20:06:36 +02:00
test_showcase.py	feat(guard): active-content detector wired into the output gate (review MAJOR #1)	2026-07-15 06:11:33 +02:00
test_url_shape_doc.py	docs(url-shape): make the rule reconstructable, and record what three corpora measured	2026-07-27 08:56:24 +02:00
test_wiring.py	measure(fp): the upload door costs a human on 16-53% of benign documents	2026-08-10 21:32:56 +02:00