|
169 | 169 | "cpu" |
170 | 170 | ], |
171 | 171 | "test_context": "test_only" |
172 | | - }, |
173 | | - { |
174 | | - "category": "SupplyChain", |
175 | | - "location": "flake.nix", |
176 | | - "file": "flake.nix", |
177 | | - "severity": "Low", |
178 | | - "description": "flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in flake.nix. Suggested fix: run `nix flake update` to generate flake.lock.", |
179 | | - "recommended_attack": [], |
180 | | - "test_context": "production" |
181 | 172 | } |
182 | 173 | ], |
183 | 174 | "statistics": { |
184 | | - "total_lines": 36173, |
| 175 | + "total_lines": 36057, |
185 | 176 | "unsafe_blocks": 39, |
186 | 177 | "panic_sites": 0, |
187 | 178 | "unwrap_calls": 0, |
188 | 179 | "allocation_sites": 239, |
189 | | - "io_operations": 93, |
| 180 | + "io_operations": 91, |
190 | 181 | "threading_constructs": 10 |
191 | 182 | }, |
192 | 183 | "file_statistics": [ |
|
800 | 791 | "io_operations": 0, |
801 | 792 | "threading_constructs": 0 |
802 | 793 | }, |
803 | | - { |
804 | | - "file_path": "flake.nix", |
805 | | - "lines": 116, |
806 | | - "unsafe_blocks": 0, |
807 | | - "panic_sites": 0, |
808 | | - "unwrap_calls": 0, |
809 | | - "allocation_sites": 0, |
810 | | - "io_operations": 2, |
811 | | - "threading_constructs": 0 |
812 | | - }, |
813 | 794 | { |
814 | 795 | "file_path": "ext/AxiomMetalExt.jl", |
815 | 796 | "lines": 167, |
|
842 | 823 | } |
843 | 824 | ], |
844 | 825 | "recommended_attacks": [ |
845 | | - "cpu", |
| 826 | + "concurrency", |
846 | 827 | "memory", |
847 | | - "disk", |
848 | | - "concurrency" |
| 828 | + "cpu", |
| 829 | + "disk" |
849 | 830 | ], |
850 | 831 | "dependency_graph": { |
851 | 832 | "edges": [ |
852 | | - { |
853 | | - "from": "src/verification/serialization.jl", |
854 | | - "to": "src/verification/certificates.jl", |
855 | | - "relation": "shared_dir:src/verification", |
856 | | - "weight": 1.0 |
857 | | - }, |
858 | 833 | { |
859 | 834 | "from": "src/model_metadata.jl", |
860 | 835 | "to": "src/model_packaging.jl", |
|
867 | 842 | "relation": "shared_dir:src", |
868 | 843 | "weight": 1.0 |
869 | 844 | }, |
870 | | - { |
871 | | - "from": "zig/src/threading.zig", |
872 | | - "to": "zig/src/bench.zig", |
873 | | - "relation": "shared_dir:zig/src", |
874 | | - "weight": 1.0 |
875 | | - }, |
876 | | - { |
877 | | - "from": "packages/SMTLib.jl/src/abi/Foreign.idr", |
878 | | - "to": "packages/SMTLib.jl/src/abi/Types.idr", |
879 | | - "relation": "shared_dir:packages/SMTLib.jl/src/abi", |
880 | | - "weight": 1.0 |
881 | | - }, |
882 | 845 | { |
883 | 846 | "from": "src/backends/julia_backend.jl", |
884 | 847 | "to": "src/backends/abstract.jl", |
|
892 | 855 | "weight": 1.0 |
893 | 856 | }, |
894 | 857 | { |
895 | | - "from": "scripts/coprocessor-evidence.jl", |
896 | | - "to": "scripts/model-package-evidence.jl", |
897 | | - "relation": "shared_dir:scripts", |
898 | | - "weight": 1.0 |
899 | | - }, |
900 | | - { |
901 | | - "from": "scripts/model-package-evidence.jl", |
902 | | - "to": "scripts/npu-strict-evidence.jl", |
903 | | - "relation": "shared_dir:scripts", |
904 | | - "weight": 1.0 |
905 | | - }, |
906 | | - { |
907 | | - "from": "scripts/npu-strict-evidence.jl", |
908 | | - "to": "scripts/gpu-performance-evidence.jl", |
909 | | - "relation": "shared_dir:scripts", |
910 | | - "weight": 1.0 |
911 | | - }, |
912 | | - { |
913 | | - "from": "scripts/gpu-performance-evidence.jl", |
914 | | - "to": "scripts/optimization-evidence.jl", |
915 | | - "relation": "shared_dir:scripts", |
916 | | - "weight": 1.0 |
917 | | - }, |
918 | | - { |
919 | | - "from": "scripts/optimization-evidence.jl", |
920 | | - "to": "scripts/tpu-strict-evidence.jl", |
921 | | - "relation": "shared_dir:scripts", |
922 | | - "weight": 1.0 |
923 | | - }, |
924 | | - { |
925 | | - "from": "scripts/tpu-strict-evidence.jl", |
926 | | - "to": "scripts/proof-bundle-evidence.jl", |
927 | | - "relation": "shared_dir:scripts", |
928 | | - "weight": 1.0 |
929 | | - }, |
930 | | - { |
931 | | - "from": "scripts/proof-bundle-evidence.jl", |
932 | | - "to": "scripts/coprocessor-resilience-evidence.jl", |
933 | | - "relation": "shared_dir:scripts", |
934 | | - "weight": 1.0 |
935 | | - }, |
936 | | - { |
937 | | - "from": "scripts/coprocessor-resilience-evidence.jl", |
938 | | - "to": "scripts/dsp-strict-evidence.jl", |
939 | | - "relation": "shared_dir:scripts", |
940 | | - "weight": 1.0 |
941 | | - }, |
942 | | - { |
943 | | - "from": "scripts/dsp-strict-evidence.jl", |
944 | | - "to": "scripts/verification-telemetry-evidence.jl", |
945 | | - "relation": "shared_dir:scripts", |
946 | | - "weight": 1.0 |
947 | | - }, |
948 | | - { |
949 | | - "from": "scripts/verification-telemetry-evidence.jl", |
950 | | - "to": "scripts/math-strict-evidence.jl", |
951 | | - "relation": "shared_dir:scripts", |
952 | | - "weight": 1.0 |
953 | | - }, |
954 | | - { |
955 | | - "from": "ext/AxiomMetalExt.jl", |
956 | | - "to": "ext/AxiomAMDGPUExt.jl", |
957 | | - "relation": "shared_dir:ext", |
958 | | - "weight": 1.0 |
959 | | - }, |
960 | | - { |
961 | | - "from": "ext/AxiomAMDGPUExt.jl", |
962 | | - "to": "ext/AxiomCUDAExt.jl", |
963 | | - "relation": "shared_dir:ext", |
| 858 | + "from": "zig/src/threading.zig", |
| 859 | + "to": "zig/src/bench.zig", |
| 860 | + "relation": "shared_dir:zig/src", |
964 | 861 | "weight": 1.0 |
965 | 862 | }, |
966 | 863 | { |
|
969 | 866 | "relation": "shared_dir:src/integrations", |
970 | 867 | "weight": 1.0 |
971 | 868 | }, |
972 | | - { |
973 | | - "from": "src/layers/normalization.jl", |
974 | | - "to": "src/layers/dense.jl", |
975 | | - "relation": "shared_dir:src/layers", |
976 | | - "weight": 1.0 |
977 | | - }, |
978 | | - { |
979 | | - "from": "src/layers/dense.jl", |
980 | | - "to": "src/layers/abstract.jl", |
981 | | - "relation": "shared_dir:src/layers", |
982 | | - "weight": 1.0 |
983 | | - }, |
984 | | - { |
985 | | - "from": "src/layers/abstract.jl", |
986 | | - "to": "src/layers/conv.jl", |
987 | | - "relation": "shared_dir:src/layers", |
988 | | - "weight": 1.0 |
989 | | - }, |
990 | 869 | { |
991 | 870 | "from": "test/ci/proof_bundle_reconciliation.jl", |
992 | 871 | "to": "test/ci/gpu_resilience.jl", |
|
1094 | 973 | "to": "templates/AxiomDSPExtSkeleton.jl", |
1095 | 974 | "relation": "shared_dir:templates", |
1096 | 975 | "weight": 1.0 |
| 976 | + }, |
| 977 | + { |
| 978 | + "from": "src/verification/serialization.jl", |
| 979 | + "to": "src/verification/certificates.jl", |
| 980 | + "relation": "shared_dir:src/verification", |
| 981 | + "weight": 1.0 |
| 982 | + }, |
| 983 | + { |
| 984 | + "from": "ext/AxiomMetalExt.jl", |
| 985 | + "to": "ext/AxiomAMDGPUExt.jl", |
| 986 | + "relation": "shared_dir:ext", |
| 987 | + "weight": 1.0 |
| 988 | + }, |
| 989 | + { |
| 990 | + "from": "ext/AxiomAMDGPUExt.jl", |
| 991 | + "to": "ext/AxiomCUDAExt.jl", |
| 992 | + "relation": "shared_dir:ext", |
| 993 | + "weight": 1.0 |
| 994 | + }, |
| 995 | + { |
| 996 | + "from": "packages/SMTLib.jl/src/abi/Foreign.idr", |
| 997 | + "to": "packages/SMTLib.jl/src/abi/Types.idr", |
| 998 | + "relation": "shared_dir:packages/SMTLib.jl/src/abi", |
| 999 | + "weight": 1.0 |
| 1000 | + }, |
| 1001 | + { |
| 1002 | + "from": "scripts/coprocessor-evidence.jl", |
| 1003 | + "to": "scripts/model-package-evidence.jl", |
| 1004 | + "relation": "shared_dir:scripts", |
| 1005 | + "weight": 1.0 |
| 1006 | + }, |
| 1007 | + { |
| 1008 | + "from": "scripts/model-package-evidence.jl", |
| 1009 | + "to": "scripts/npu-strict-evidence.jl", |
| 1010 | + "relation": "shared_dir:scripts", |
| 1011 | + "weight": 1.0 |
| 1012 | + }, |
| 1013 | + { |
| 1014 | + "from": "scripts/npu-strict-evidence.jl", |
| 1015 | + "to": "scripts/gpu-performance-evidence.jl", |
| 1016 | + "relation": "shared_dir:scripts", |
| 1017 | + "weight": 1.0 |
| 1018 | + }, |
| 1019 | + { |
| 1020 | + "from": "scripts/gpu-performance-evidence.jl", |
| 1021 | + "to": "scripts/optimization-evidence.jl", |
| 1022 | + "relation": "shared_dir:scripts", |
| 1023 | + "weight": 1.0 |
| 1024 | + }, |
| 1025 | + { |
| 1026 | + "from": "scripts/optimization-evidence.jl", |
| 1027 | + "to": "scripts/tpu-strict-evidence.jl", |
| 1028 | + "relation": "shared_dir:scripts", |
| 1029 | + "weight": 1.0 |
| 1030 | + }, |
| 1031 | + { |
| 1032 | + "from": "scripts/tpu-strict-evidence.jl", |
| 1033 | + "to": "scripts/proof-bundle-evidence.jl", |
| 1034 | + "relation": "shared_dir:scripts", |
| 1035 | + "weight": 1.0 |
| 1036 | + }, |
| 1037 | + { |
| 1038 | + "from": "scripts/proof-bundle-evidence.jl", |
| 1039 | + "to": "scripts/coprocessor-resilience-evidence.jl", |
| 1040 | + "relation": "shared_dir:scripts", |
| 1041 | + "weight": 1.0 |
| 1042 | + }, |
| 1043 | + { |
| 1044 | + "from": "scripts/coprocessor-resilience-evidence.jl", |
| 1045 | + "to": "scripts/dsp-strict-evidence.jl", |
| 1046 | + "relation": "shared_dir:scripts", |
| 1047 | + "weight": 1.0 |
| 1048 | + }, |
| 1049 | + { |
| 1050 | + "from": "scripts/dsp-strict-evidence.jl", |
| 1051 | + "to": "scripts/verification-telemetry-evidence.jl", |
| 1052 | + "relation": "shared_dir:scripts", |
| 1053 | + "weight": 1.0 |
| 1054 | + }, |
| 1055 | + { |
| 1056 | + "from": "scripts/verification-telemetry-evidence.jl", |
| 1057 | + "to": "scripts/math-strict-evidence.jl", |
| 1058 | + "relation": "shared_dir:scripts", |
| 1059 | + "weight": 1.0 |
| 1060 | + }, |
| 1061 | + { |
| 1062 | + "from": "src/layers/normalization.jl", |
| 1063 | + "to": "src/layers/dense.jl", |
| 1064 | + "relation": "shared_dir:src/layers", |
| 1065 | + "weight": 1.0 |
| 1066 | + }, |
| 1067 | + { |
| 1068 | + "from": "src/layers/dense.jl", |
| 1069 | + "to": "src/layers/abstract.jl", |
| 1070 | + "relation": "shared_dir:src/layers", |
| 1071 | + "weight": 1.0 |
| 1072 | + }, |
| 1073 | + { |
| 1074 | + "from": "src/layers/abstract.jl", |
| 1075 | + "to": "src/layers/conv.jl", |
| 1076 | + "relation": "shared_dir:src/layers", |
| 1077 | + "weight": 1.0 |
1097 | 1078 | } |
1098 | 1079 | ] |
1099 | 1080 | }, |
1100 | 1081 | "taint_matrix": { |
1101 | 1082 | "rows": [ |
1102 | | - { |
1103 | | - "source_category": "InputBoundary", |
1104 | | - "sink_axis": "cpu", |
1105 | | - "severity_value": 2.5, |
1106 | | - "files": [ |
1107 | | - "src/verification/serialization.jl", |
1108 | | - "test/verification/serialization_tests.jl" |
1109 | | - ], |
1110 | | - "frameworks": [], |
1111 | | - "relation": "InputBoundary->Cpu" |
1112 | | - }, |
1113 | 1083 | { |
1114 | 1084 | "source_category": "UnsafeFFI", |
1115 | 1085 | "sink_axis": "memory", |
|
1149 | 1119 | ], |
1150 | 1120 | "frameworks": [], |
1151 | 1121 | "relation": "ProofDrift->Cpu" |
| 1122 | + }, |
| 1123 | + { |
| 1124 | + "source_category": "InputBoundary", |
| 1125 | + "sink_axis": "cpu", |
| 1126 | + "severity_value": 2.5, |
| 1127 | + "files": [ |
| 1128 | + "src/verification/serialization.jl", |
| 1129 | + "test/verification/serialization_tests.jl" |
| 1130 | + ], |
| 1131 | + "frameworks": [], |
| 1132 | + "relation": "InputBoundary->Cpu" |
1152 | 1133 | } |
1153 | 1134 | ] |
1154 | 1135 | } |
|
0 commit comments