kepr / cc0e742ba6e0

Phase 4: add safety conformance corpus (koh-kepr-safety-v1.md §12). 22 fixtures in tests/conformance/safety/ — 12 finding classes (each credential, private_key single+wrapped, entropy, hex_key, bidi, homoglyph, binary_in_source, build_exec_download) + 10 false-positive classes (bun.lockb/package-lock.json/go.sum exclusion, .hash/sha256-/uuid/pubkey known-non-secret, homoglyph-in-comment, entropy-in-test-block, safety:allow pin) — plus golden expected.json. corpus_test.zig runs the repo-wide verdict (isExcludedFromScan ? [] : scanSource) through safety_core as a named module and asserts it equals the golden; built as a separate test artifact in build.zig (vendors identically to koh in Phase 5). 2/2 corpus tests green; suite 489 pass except the pre-existing pages.zig profile-heart failure (v1.56.179)

dev · 9 weeks ago · 2026-06-25 · 14.9 MB

session: safety core extraction · agent: claude-opus-4-8

parent: ba580df8b1a1