Skip to content

Retain Swift integer sanitizer qualification blockers - #245

Merged
DavidBakerEffendi merged 4 commits into
mainfrom
dave/swift-sanitizer-qualification-220
Sep 23, 2026
Merged

DavidBakerEffendi merged 4 commits into
mainfrom
dave/swift-sanitizer-qualification-220

Conversation

@DavidBakerEffendi

Copy link
Copy Markdown
Collaborator

The independent Swift integer-sanitizer control remains blocked: a local string-holding Int conforming to a module-local Numeric protocol is admitted as a command-injection barrier. Both that wrapper and a plain same-body wrapper also lack their expected flows, so the missing endpoint flows are not attributed solely to the barrier. The canonical sanitizer pair remains unrun.

Key Changes:

  • Preregister and retain raw, real-integer, local numeric-lookalike, and plain-wrapper controls using the unchanged shipped flow configuration. Preserve the initial observational query compilation failure and the separately preregistered corrected diagnosis against the same hash-verified database.
  • Retain resolved initializer owners, typed native barriers and base-declaration provenance. Add portable integrity and mutation tests that verify this blocked evidence without qualification promotion; keep the real parse initializer protocol-owned on Swift.FixedWidthInteger.

Touch Points:

  • adapters/codeql/swift-sanitizer-v1/queries/
  • evidence/swift-sanitizer-qualification-v1/
  • scripts/run-swift-sanitizer-control.py, scripts/trace-swift-sanitizer-control.py
  • scripts/verify-swift-sanitizer-control.py, scripts/test-swift-sanitizer-control.py
  • .github/workflows/ci.yml, .gitattributes, Swift qualification documentation

Validation: three test methods containing six semantic mutations and four copied-evidence mutations passed, including from a clean Git archive. Previous append, canonical source–sink, canonical entrypoint and pending integration verifiers passed; cargo fmt --check and diff checks passed. Extraction completed in 95.389 seconds; the corrected diagnostic queries completed in 11.443/10.925/10.293 seconds under the 60-second/2048 MiB request. Aggregate memory compliance and semantic completeness remain unproven. CI pending.

Refs #220 and #215. Both issues remain open; acceptance is incomplete. Append remains independently blocked. No full-corpus execution, scored activation, freeze, or publication.

@DavidBakerEffendi
DavidBakerEffendi merged commit 1d98709 into main Sep 23, 2026
4 checks passed
@DavidBakerEffendi
DavidBakerEffendi deleted the dave/swift-sanitizer-qualification-220 branch September 23, 2026 16:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant