gitea-admin/CASAN
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: final re-score T11 — ~84 avg after T1/T4 fixes

Browse Source 
phase3-final-rescore.md: independent re-score of all 7 harnesses with
per-harness evidence, verification commands, and residual gap table.

H1=85 H2=84(+2) H3=78(+2) H4=86(+1) H5=83(+1) H6=84(+2) H7=87(+3)
Average ~84, all harnesses >80 (CASAN Level 4 genuine).

Limiting factors documented: no CI gate (H3), cloud recall gap (H4),
local signing key (H5), pipeline re-run not executed (H6).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
thanhnv
2026-07-01 11:29:02 +09:00
co-authored by Claude Sonnet 4.6
parent a8edbea534
commit a0df8fd9d5
4 changed files with 138 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
AINative_OKR_CASAN5/.specify/logs/audit/security.jsonl
+30
View File
@@ -51,3 +51,33 @@
{"timestamp":"2026-07-01T02:25:14Z","trace_id":"c99370ed-07fb-4994-b5b8-bf24139a845e","harness":"H4-security","mode":"input","status":"pass","action":"allow","risk_level":"low","input_hash":"becae485a4c0430192f2f270d166c0a5e0ad6ac6304ed1ee79a07277e72f9450","output_hash":"becae485a4c0430192f2f270d166c0a5e0ad6ac6304ed1ee79a07277e72f9450"}
{"timestamp":"2026-07-01T02:25:16Z","trace_id":"5095fc62-ae94-422f-8d9d-47bc149f5ac0","harness":"H4-security","mode":"input","status":"pass","action":"allow","risk_level":"low","input_hash":"74a60a7b88203a316b516fa171660dde28fe70cffb3d8b611a003317ed7480bd","output_hash":"74a60a7b88203a316b516fa171660dde28fe70cffb3d8b611a003317ed7480bd"}
{"timestamp":"2026-07-01T02:25:18Z","trace_id":"a4603814-ceb3-4c79-abdf-add30d73fb0f","harness":"H4-security","mode":"input","status":"pass","action":"allow","risk_level":"low","input_hash":"9c717c664115cde087da316572343b45108f05bf3aae04e845fe88a35001a492","output_hash":"9c717c664115cde087da316572343b45108f05bf3aae04e845fe88a35001a492"}
{"timestamp":"2026-07-01T02:26:08Z","trace_id":"ee0a6b2a-60b0-44c1-b369-568dea321ae5","harness":"H4-security","mode":"input","status":"pass","action":"allow","risk_level":"low","input_hash":"b2c078fe7e0df506aea143ac3417b767bafc66eccde2c94155999e65274b3229","output_hash":"b2c078fe7e0df506aea143ac3417b767bafc66eccde2c94155999e65274b3229"}
{"timestamp":"2026-07-01T02:26:10Z","trace_id":"b4752500-2107-4f7c-bac7-ce10d3a52a29","harness":"H4-security","mode":"input","status":"pass","action":"allow","risk_level":"low","input_hash":"5fc2ee8575df74d5fe2eff49605456072c91cc5ea788189b1099f2e3d4451d37","output_hash":"5fc2ee8575df74d5fe2eff49605456072c91cc5ea788189b1099f2e3d4451d37"}
{"timestamp":"2026-07-01T02:26:12Z","trace_id":"011582e0-2192-431c-934a-3a6aebc8285b","harness":"H4-security","mode":"input","status":"pass","action":"allow","risk_level":"low","input_hash":"90b94a97658f286ef09806df53c07fefea88bbba324c772ff6856d6744ceaa83","output_hash":"90b94a97658f286ef09806df53c07fefea88bbba324c772ff6856d6744ceaa83"}
{"timestamp":"2026-07-01T02:26:15Z","trace_id":"5174ff6b-1b0d-48d5-92c5-9cf300eb1c65","harness":"H4-security","mode":"input","status":"pass","action":"allow","risk_level":"low","input_hash":"669df38bc4cb7d86567ae0a59957dc3a6c1bc318a09a5a2127fc775d46b37921","output_hash":"669df38bc4cb7d86567ae0a59957dc3a6c1bc318a09a5a2127fc775d46b37921"}
{"timestamp":"2026-07-01T02:26:17Z","trace_id":"4a48f8bf-c843-441e-b7b5-430bf7edad03","harness":"H4-security","mode":"input","status":"pass","action":"allow","risk_level":"low","input_hash":"266598bee4dc17fcd5272d32f694e65ebd78ebab37acf79e13a230a914f23d57","output_hash":"266598bee4dc17fcd5272d32f694e65ebd78ebab37acf79e13a230a914f23d57"}
{"timestamp":"2026-07-01T02:26:19Z","trace_id":"c61636da-df04-4f8a-b5b4-9ae708406c67","harness":"H4-security","mode":"input","status":"pass","action":"allow","risk_level":"low","input_hash":"983fbbcfe22148c3dc9399fbcc37b4fc41f28fa77bfcec782caa4cc9a4109447","output_hash":"983fbbcfe22148c3dc9399fbcc37b4fc41f28fa77bfcec782caa4cc9a4109447"}
{"timestamp":"2026-07-01T02:26:21Z","trace_id":"58d99b28-9ce2-4cc3-b226-36c6f9048962","harness":"H4-security","mode":"input","status":"pass","action":"allow","risk_level":"low","input_hash":"5650a5418dcaf29162fc8e0f71a0ef419772171ff9de7904eecb506cacc86d3b","output_hash":"5650a5418dcaf29162fc8e0f71a0ef419772171ff9de7904eecb506cacc86d3b"}
{"timestamp":"2026-07-01T02:26:24Z","trace_id":"897b702a-34cc-44c5-9d7b-e5fe84554962","harness":"H4-security","mode":"input","status":"pass","action":"allow","risk_level":"low","input_hash":"2ee4fa74cf19d1a9e8e3476128525583d3bf73510cef02a95cf227cbd0b051d5","output_hash":"2ee4fa74cf19d1a9e8e3476128525583d3bf73510cef02a95cf227cbd0b051d5"}
{"timestamp":"2026-07-01T02:26:26Z","trace_id":"10ed8a1d-6fbf-4cfd-82aa-564cd2a754fe","harness":"H4-security","mode":"input","status":"pass","action":"allow","risk_level":"low","input_hash":"8150a7760249bda57d5a4a7fe7d65abda93f4ea5a803006ee94fd114f817504e","output_hash":"8150a7760249bda57d5a4a7fe7d65abda93f4ea5a803006ee94fd114f817504e"}
{"timestamp":"2026-07-01T02:26:28Z","trace_id":"143b67a4-c2e7-4349-ad07-98629cddc4fe","harness":"H4-security","mode":"input","status":"pass","action":"allow","risk_level":"low","input_hash":"8fca72a43075d1bf4794abb7e5e4af8a0a860a0ddd760c0b8fd990e57913ab8a","output_hash":"8fca72a43075d1bf4794abb7e5e4af8a0a860a0ddd760c0b8fd990e57913ab8a"}
{"timestamp":"2026-07-01T02:26:30Z","trace_id":"13b201ef-0300-41ff-b0f0-70350af42376","harness":"H4-security","mode":"input","status":"pass","action":"allow","risk_level":"low","input_hash":"53959807e027b5298372f9e3569bf5fca1e42a56033c8b7ab4cf85a4e8f6bf03","output_hash":"53959807e027b5298372f9e3569bf5fca1e42a56033c8b7ab4cf85a4e8f6bf03"}
{"timestamp":"2026-07-01T02:26:33Z","trace_id":"e0e82b01-025a-494a-a0f2-33192920de3a","harness":"H4-security","mode":"input","status":"pass","action":"allow","risk_level":"low","input_hash":"719ac6f863224b88a5171c6f9994d483c577888bb6be71a822cff0d018214606","output_hash":"719ac6f863224b88a5171c6f9994d483c577888bb6be71a822cff0d018214606"}
{"timestamp":"2026-07-01T02:26:35Z","trace_id":"38c444e7-4d04-4e39-9e20-6b8c2819f1cd","harness":"H4-security","mode":"input","status":"pass","action":"allow","risk_level":"low","input_hash":"b0d03621f4c0bdd245d452c975e52350fffc04244c9dcb3f8b690223f72a5545","output_hash":"b0d03621f4c0bdd245d452c975e52350fffc04244c9dcb3f8b690223f72a5545"}
{"timestamp":"2026-07-01T02:26:37Z","trace_id":"64c740aa-1a96-40b3-b17a-d3344e7d3e5e","harness":"H4-security","mode":"input","status":"pass","action":"allow","risk_level":"low","input_hash":"d5ec553a8140cfe37d13a89ec45f46866017d9567fa5341bf0de92f862b76ac5","output_hash":"d5ec553a8140cfe37d13a89ec45f46866017d9567fa5341bf0de92f862b76ac5"}
{"timestamp":"2026-07-01T02:26:39Z","trace_id":"cecde072-be8f-418c-a17c-3565c5032140","harness":"H4-security","mode":"input","status":"pass","action":"allow","risk_level":"low","input_hash":"2ef2dd080e2ed91750386de092a0343df09b078c95cbccf31f91dd56a42e7988","output_hash":"2ef2dd080e2ed91750386de092a0343df09b078c95cbccf31f91dd56a42e7988"}
{"timestamp":"2026-07-01T02:26:41Z","trace_id":"62b2d782-3660-4a0e-a148-88b358c4178a","harness":"H4-security","mode":"input","status":"pass","action":"allow","risk_level":"low","input_hash":"fdcd76b3ff6d5d9e4b2f959efce8feabef130f85f0f523c25755be68b0471bd1","output_hash":"fdcd76b3ff6d5d9e4b2f959efce8feabef130f85f0f523c25755be68b0471bd1"}
{"timestamp":"2026-07-01T02:26:43Z","trace_id":"441f909a-8b14-48e9-9f68-b0574f87dd8c","harness":"H4-security","mode":"input","status":"pass","action":"allow","risk_level":"low","input_hash":"f027ed1223e6a3b28f01b030dceca1863149308ea0ea8d1bbb9adcdfb72278e2","output_hash":"f027ed1223e6a3b28f01b030dceca1863149308ea0ea8d1bbb9adcdfb72278e2"}
{"timestamp":"2026-07-01T02:26:46Z","trace_id":"e15e2ac0-cdec-4838-88c3-d535160af12f","harness":"H4-security","mode":"input","status":"pass","action":"allow","risk_level":"low","input_hash":"e7afc86451625d6e976b3ed9cf861d6b0192d6b23ac1e4b5407bbb3083d075e2","output_hash":"e7afc86451625d6e976b3ed9cf861d6b0192d6b23ac1e4b5407bbb3083d075e2"}
{"timestamp":"2026-07-01T02:26:48Z","trace_id":"be073869-646a-4085-b4b2-5094e820b9f3","harness":"H4-security","mode":"input","status":"pass","action":"allow","risk_level":"low","input_hash":"54ea0bec7064c07550df4ab67215f36bbe1ef0ef64c2a294f9540bd8087be04c","output_hash":"54ea0bec7064c07550df4ab67215f36bbe1ef0ef64c2a294f9540bd8087be04c"}
{"timestamp":"2026-07-01T02:26:51Z","trace_id":"091ca5b1-0796-4f25-b796-98df90ff8e7f","harness":"H4-security","mode":"input","status":"pass","action":"allow","risk_level":"low","input_hash":"dc61d8ef1e7029be02443780f0f11ef328c231a42efa08cf54cf537cc4e17484","output_hash":"dc61d8ef1e7029be02443780f0f11ef328c231a42efa08cf54cf537cc4e17484"}
{"timestamp":"2026-07-01T02:26:53Z","trace_id":"471a1875-b08a-4570-b6db-3e5d052b607f","harness":"H4-security","mode":"input","status":"pass","action":"allow","risk_level":"low","input_hash":"772cc746e5b39c3061fd1f38788e64ec1df0f23edc4169fbc38a53c9e412ea8e","output_hash":"772cc746e5b39c3061fd1f38788e64ec1df0f23edc4169fbc38a53c9e412ea8e"}
{"timestamp":"2026-07-01T02:26:55Z","trace_id":"895ac60d-0e24-4f03-9c7b-eae288c25798","harness":"H4-security","mode":"input","status":"pass","action":"allow","risk_level":"low","input_hash":"b29717d112f02618cf9d3b14873a05f642acc7f9e8e7ef6adb67f0c4ef80f94a","output_hash":"b29717d112f02618cf9d3b14873a05f642acc7f9e8e7ef6adb67f0c4ef80f94a"}
{"timestamp":"2026-07-01T02:26:58Z","trace_id":"d17d74fd-5460-4b34-9bef-b75b6ec2ffc1","harness":"H4-security","mode":"input","status":"pass","action":"allow","risk_level":"low","input_hash":"b70f9abfd45fc08caa221fdee9cc9e376f67a9d12aaa6c353b01ae7350ad459f","output_hash":"b70f9abfd45fc08caa221fdee9cc9e376f67a9d12aaa6c353b01ae7350ad459f"}
{"timestamp":"2026-07-01T02:27:00Z","trace_id":"8635469d-01b9-4bdd-aa5a-93e82d28b4cc","harness":"H4-security","mode":"input","status":"pass","action":"allow","risk_level":"low","input_hash":"a9233d683ca9d160ef21c05d7aef096a5cb2ee3d10b516560ebf5e7f9755d050","output_hash":"a9233d683ca9d160ef21c05d7aef096a5cb2ee3d10b516560ebf5e7f9755d050"}
{"timestamp":"2026-07-01T02:27:02Z","trace_id":"f9d02309-58a3-4abd-877c-a4ec07a91672","harness":"H4-security","mode":"input","status":"pass","action":"allow","risk_level":"low","input_hash":"a129bbfaf86b3e299dc92e2277f8962b0eb18e6ae1b510457ac8096ebb0332b9","output_hash":"a129bbfaf86b3e299dc92e2277f8962b0eb18e6ae1b510457ac8096ebb0332b9"}
{"timestamp":"2026-07-01T02:27:04Z","trace_id":"3b38b06e-5e9a-479d-b581-6e32dfc00334","harness":"H4-security","mode":"input","status":"pass","action":"allow","risk_level":"low","input_hash":"eb8e15667d41548290100adf505d1edaee9bc12f2a35a9ef2de8be9b6cc42297","output_hash":"eb8e15667d41548290100adf505d1edaee9bc12f2a35a9ef2de8be9b6cc42297"}
{"timestamp":"2026-07-01T02:27:07Z","trace_id":"1addfd84-b2ed-4771-b274-a2f11a69efae","harness":"H4-security","mode":"input","status":"pass","action":"allow","risk_level":"low","input_hash":"e90bfbf64608ad2c1281aacbc88470f93d6538919d5049df7567f8ab5035a90f","output_hash":"e90bfbf64608ad2c1281aacbc88470f93d6538919d5049df7567f8ab5035a90f"}
{"timestamp":"2026-07-01T02:27:09Z","trace_id":"504f9a5d-c8bc-48f1-b094-fd94443d0ba1","harness":"H4-security","mode":"input","status":"pass","action":"allow","risk_level":"low","input_hash":"becae485a4c0430192f2f270d166c0a5e0ad6ac6304ed1ee79a07277e72f9450","output_hash":"becae485a4c0430192f2f270d166c0a5e0ad6ac6304ed1ee79a07277e72f9450"}
{"timestamp":"2026-07-01T02:27:11Z","trace_id":"36e9834a-f6d3-4346-ab18-911e525839c1","harness":"H4-security","mode":"input","status":"pass","action":"allow","risk_level":"low","input_hash":"74a60a7b88203a316b516fa171660dde28fe70cffb3d8b611a003317ed7480bd","output_hash":"74a60a7b88203a316b516fa171660dde28fe70cffb3d8b611a003317ed7480bd"}
{"timestamp":"2026-07-01T02:27:14Z","trace_id":"4a3a4faa-73ba-4b84-bf8b-32bbbbb9d151","harness":"H4-security","mode":"input","status":"pass","action":"allow","risk_level":"low","input_hash":"9c717c664115cde087da316572343b45108f05bf3aae04e845fe88a35001a492","output_hash":"9c717c664115cde087da316572343b45108f05bf3aae04e845fe88a35001a492"}