Kjell Tore Guttormsen
c7bfd2cfd0
tests/av-surface.test.mjs walks git ls-files and fails on four surfaces a clone or the plugin cache puts on a user's disk: (a) own SIG payloads (webshell/reverse_shell/cryptominer) in a runnable file type, (b) base64 blobs decoding to a shell command, (c) Tag/zero-width/bidi carriers in text files outside the conformance corpus, (d) known payload trees. Red on purpose (order S0): it is the failing test for S1-S3. Measured on this tree: a=3 b=9 (8 files) c=5 d=5. Chosen definitions are documented in the file header: .mjs/.js/.cjs/.json and scanners/commons/** are outside (a) so the untouchable signature tables stay out of a gate that must reach zero; binaries are outside (c) because decoding PNG/WOFF2 as UTF-8 yields the codepoints by chance. PLAN.md is local-only, so .gitignore now names it. No production code, no fixtures, no signature tables touched; golden baseline unchanged. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
41 lines
1.1 KiB
Text
41 lines
1.1 KiB
Text
node_modules/
|
|
.DS_Store
|
|
coverage/
|
|
harness-events.jsonl
|
|
*.log
|
|
reports/baselines/*.json
|
|
reports/watch/config.json
|
|
reports/watch/latest.json
|
|
# spec §1.1 conformance declaration — regenerated by every corpus run, so it
|
|
# cannot outlive (and misreport) the measurement that produced it
|
|
reports/conformance-declaration.json
|
|
.env
|
|
.env.*
|
|
*.key
|
|
*.pem
|
|
credentials.*
|
|
secrets.*
|
|
.local/
|
|
HANDOFF-FINDINGS.local.md
|
|
|
|
# --- session/local state ---
|
|
# STATE.md is LOCAL-ONLY here: llm-security has a public remote (open/llm-security),
|
|
# and the global ~/.claude/CLAUDE.md convention is public remote => gitignored.
|
|
# Untracked 2026-08-01 (org-ops finding) after being tracked since project start;
|
|
# git history keeps the old commits, this only stops future ones.
|
|
STATE.md
|
|
# PLAN.md is local-only for the same reason (destination, open questions,
|
|
# what NOT to build) — it never reaches the public remote.
|
|
PLAN.md
|
|
REMEMBER.md
|
|
ROADMAP.md
|
|
TODO.md
|
|
NEXT-SESSION-PROMPT*.local.md
|
|
*.local.md
|
|
*.local.json
|
|
*.local.sh
|
|
.DS_Store
|
|
.claude/
|
|
|
|
# Voyage-generated plan annotation HTML (regenerable via annotate.mjs)
|
|
docs/plans/*.html
|