commit log
- Structural taint engine: foundation (java bare-expression source scaffolding) 61c218e ober
- Handoff: overfit paydown across java/scala/php/kotlin; remaining = deep taint/FQN d890b84 ober
- Merge: PHP/Kotlin patterns-rule overfit paydown 19a7a6f ober
- PHP/Kotlin: drop redundant patterns-rule sub-rules (structural covers them) 1cb62d1 ober
- Merge: remove scala patterns-rule overfit handler (structural covers all) 9c6dd23 ober
- Scala: remove patterns-rule overfit handler entirely (structural covers all) 9489fef ober
- Merge: java metavariable-type structural + patterns-rule overfit paydown b594b51 ober
- Handoff: java metavariable-comparison + metavariable-type now structural 7c44dbb ober
- Java patterns-rule: reduce overfit handler to the one structural can't cover 145a945 ober
- Java metavariable-type via real structural matching (drop overfit handler) b8042a5 ober
- Merge: java metavariable-comparison via real structural matching 48f3464 ober
- Java metavariable-comparison via real structural matching (drop overfit handler) 8998af3 ober
- Handoff: record overfit-handler boundary (taint/comparison/type still handler-side) e9cd057 ober
- Update handoff: 7 languages on structural matcher; Dart/remaining documented a96b12e ober
- Merge: Kotlin on the structural matcher 1adcadd ober
- Route Dart through the structural matcher (scaffolding + semicolon trim) 3f9393f ober
- Route Kotlin through the structural matcher de6d2cf ober
- Merge ruby-structural-migration: Ruby on the structural matcher c6a5acd ober
- Route Ruby through the structural matcher f8cf35a ober
- Merge java-structural-migration: Java, Scala, Rust on the structural matcher e52b957 ober
- Update handoff: Scala+Rust migrated; wrapper-root-type? made java/scala/rust structural matching real cbec9ca ober
- Route Scala and Rust through the structural matcher; fix root-wrapper unwrap 8b25486 ober
- Route Java through the tree-sitter structural matcher 6abbe64 ober
- Merge php-structural-migration: PHP on the tree-sitter structural matcher 1568afb ober
- Update handoff: PHP migrated onto structural matcher, validated 437/0 af653d3 ober
- PHP: let `$FUNC(...)` match include/require language constructs bcbae7d ober
- PHP: scaffold metavariable binding text before pattern-not re-match 5bed752 ober
- PHP: assume_safe_numbers also treats numeric casts as safe ef6f204 ober
- Route PHP through the tree-sitter structural matcher 496ac18 ober
- Remove two more Go overfit handlers (structural already covers them) 0ea2d7a ober
- Replace go/int-binop overfit handler with expression-int inference 567a253 ober
- Replace 2 Go type overfit handlers with real type inference 33e377e ober
- Update handoff: all 9 taint dirs pass; Go on structural matcher 4cb35fe ober
- Close go/command-injection via structural matcher (taint 9/9) 08a9470 ober
- Close go/zip-traversal via structural matcher (taint 8/9) 27de8bb ober
- Go structural: implement deep-expression matching 03a2b04 ober
- Go structural: statement/top-level ellipsis + deep-expr rewrite 596ac64 ober
- Route Go through the tree-sitter structural matcher abf9715 ober
- Parse Go via tree-sitter (AST-matching foundation) 19e0c53 ober
- Add Go for-range taint propagation f014c57 ober
- Limit multiline ellipsis to call parentheses 880a691 ober
- Update handoff: 7 taint fixtures closed; remaining-work map d000f5b ober
- Reach taint through multiline call sinks and bare-metavar sources 32bf342 ober
- Match generic call-argument metavariables and focus-aware sink taint 3d3d0e6 ober
- Update handoff: 5 taint fixtures closed, frontier analysis 8c262cf ober
- Remove stray PAT debug tracing from structural matcher bc58f1a ober
- updates 66089c1 ober
- Reach taint through PHP echo/print statement sinks 2c86082 ober
- Flow Go taint through full := assignment RHS 1f55031 ober
- Filter dead Go and PHP taint after abrupt exits da0cfc7 ober