Kjell Tore Guttormsen 62e3cade60 fix(watch): run the orchestrator with the watched project as cwd ... PLAN § v8.1.3 punkt 5. watch-cron.mjs started the orchestrator with cwd = pluginRoot, so every watched project was outside cwd, i.e. not the caller's own working tree, and its .llm-security-ignore / policy.json were dropped: the user saw findings they had already suppressed. The orchestrator now runs with cwd = the target dir (its parent for a file); a relative target.path still resolves against pluginRoot as before. The scope test's entropy blob is now fixed instead of random: one run with a random blob reported zero findings for both projects, probably a blob starting with `/` (skipped as a path, 1 in 64). Red on 002c0ba with the fixed blob, verified. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>		2026-09-23 11:34:55 +02:00
..
e2e	test(llm-security): build poisoned fixtures at test time, never on disk	2026-09-22 13:07:38 +02:00
fixtures	test(ast-taint): materialize the ast-scan fixtures at test time	2026-09-22 14:11:27 +02:00
golden	refactor(llm-security): build the SIG ruleset from vendored commons (malware-signatures 0.1.0)	2026-08-13 21:28:14 +02:00
helpers	fix(policy): read policy.json only from the caller's own working tree	2026-09-22 20:15:17 +02:00
hooks	refactor(llm-security): build the secret table from vendored commons (secret-egress 0.3.0)	2026-08-13 21:10:14 +02:00
lib	test(v8.1.3): red tests for plan points 1, 2, 3, 5 and addenda a-c	2026-09-23 11:29:22 +02:00
scanners	fix(watch): run the orchestrator with the watched project as cwd	2026-09-23 11:34:55 +02:00
av-surface.test.mjs	test(v8.1.3): red tests for plan points 1, 2, 3, 5 and addenda a-c	2026-09-23 11:29:22 +02:00