mirror of
https://github.com/CyberSecurityUP/NeuroSploit.git
synced 2026-08-15 06:00:28 +02:00
The grounding gate ran in empirical mode for every engagement, demoting white-box (and skills/n8n audit) findings that had passed the n-model vote because a file:line code citation isn't raw tool output. Grounding is now mode-aware: - Symbolic (white-box SAST / skills): a file:line reference into the reviewed source, or a quote of code present in it, is the receipt — no live target. - Empirical (black-box / host / AI): evidence must resemble tool output (as before). - Either (grey-box): a source citation OR a tool receipt grounds a finding. The symbolic check runs against the reviewed source corpus (not the transcript) and falls back to a structural file:line + quote check when the corpus is unavailable. Adds unit tests incl. a regression test for #33.
22 lines
499 B
TOML
22 lines
499 B
TOML
[workspace]
|
|
members = ["crates/harness", "app"]
|
|
resolver = "2"
|
|
|
|
[workspace.package]
|
|
version = "3.6.4"
|
|
edition = "2021"
|
|
license = "MIT"
|
|
repository = "https://github.com/JoasASantos/NeuroSploit"
|
|
|
|
[workspace.dependencies]
|
|
serde = { version = "1", features = ["derive"] }
|
|
serde_json = "1"
|
|
tokio = { version = "1", features = ["full"] }
|
|
reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls"] }
|
|
anyhow = "1"
|
|
futures = "0.3"
|
|
|
|
[profile.release]
|
|
opt-level = 2
|
|
lto = "thin"
|