Repository navigation

fix(pickle): require source proof for framework metadata - #1644

Merged

mldangelo-oai merged 124 commits into

mainfrom

mdangelo/codex/hf-fp-t10-pickle-framework-metadata-20260610

Jun 13, 2026

Commits on Jun 11, 2026

fix(pickle): allow inert framework metadata globals
mldangelo-oai
committed
560d35d
test(pickle): remove unused metadata fixture set
mldangelo-oai
committed
eadf7c7
fix: fail closed on unresolved pickle metadata reconstruction
mldangelo-oai
committed
0f9fa3e
fix: preserve stdlib pickle reconstruction trust
mldangelo-oai
committed
ea25b14
fix: keep joblib origin review findings
mldangelo-oai
committed
6bfce7a
test: make joblib origin review deterministic
mldangelo-oai
committed
24a4f33
fix: preserve pytorch pickle member outcomes
mldangelo-oai
committed
6eb5ddc
fix: bound pickle metadata false positives
mldangelo-oai
committed
b32b1fa
test: align standalone pickle CI assertions
mldangelo-oai
committed
3a7d285
fix: require trusted pickle metadata origins
mldangelo-oai
committed
232e34d
test: accept malicious shadowed numpy verdict
mldangelo-oai
committed
a959d29
fix: scan concatenated numpy reconstruction streams
mldangelo-oai
committed
77d3990
test: assert suspicious joblib wrapper verdict
mldangelo-oai
committed
0ac8582
test: stabilize pickle scanner origin review regression
mldangelo-oai
committed
efd2710
test: make pytorch rng attacker regression portable
mldangelo-oai
committed
f276b49
fix: fail closed on rebound framework metadata
mldangelo-oai
committed
66a75a2
fix: harden framework metadata trust checks
mldangelo-oai
committed
48a64bc
test: gate numpy follow-on stream assertion
mldangelo-oai
committed
84444e0
fix: close framework callable trust gaps
mldangelo-oai
committed
e67dac1
fix: harden framework runtime trust
mldangelo-oai
committed
241036c
fix: constrain joblib validated dtype cleanup
mldangelo-oai
committed
6945b8f
Merge remote-tracking branch 'origin/main' into mdangelo/codex/hf-fp-t10-pickle-framework-metadata-20260610
mldangelo-oai
committed
2dc4cca
Merge remote-tracking branch 'origin/main' into campaign/pr-1644
mldangelo-oai
committed
93832df
Merge remote-tracking branch 'origin/main' into mdangelo/codex/hf-fp-t10-pickle-framework-metadata-20260610
mldangelo-oai
committed
bb65e32
fix: preserve untrusted reconstruction findings
mldangelo-oai
committed
e936788
fix: harden pickle provenance suppressions
mldangelo-oai
committed
612b551
Merge remote-tracking branch 'origin/mdangelo/codex/hf-fp-t10-pickle-framework-metadata-20260610' into campaign/pr-1644
mldangelo-oai
committed
9d7f91d
Merge remote-tracking branch 'origin/main' into campaign/pr-1644
mldangelo-oai
committed
4fc2412
test: align provenance helper regressions
mldangelo-oai
committed
6bf4120
test: stabilize provenance CI regressions
mldangelo-oai
committed
daf2ab7
fix: require safe invoked framework proofs
mldangelo-oai
committed
6706317
Merge remote-tracking branch 'origin/main' into mdangelo/codex/hf-fp-t10-pickle-framework-metadata-20260610
mldangelo-oai
committed
b65c8c6
test: make joblib origin regression deterministic
mldangelo-oai
committed
749fb43
test: isolate joblib dtype occurrence regression
mldangelo-oai
committed
a956a00
Merge remote-tracking branch 'origin/mdangelo/codex/hf-fp-t10-pickle-framework-metadata-20260610' into mdangelo/codex/hf-fp-t10-pickle-framework-metadata-20260610
mldangelo-oai
committed
a22043e
Merge remote-tracking branch 'origin/mdangelo/codex/hf-fp-t10-pickle-framework-metadata-20260610' into mdangelo/codex/hf-fp-t10-pickle-framework-metadata-20260610
mldangelo-oai
committed
7ec94a9
fix: preserve numpy proof memo across streams
mldangelo-oai
committed
4bd40dc
Merge remote-tracking branch 'origin/main' into campaign/pr-1644
mldangelo-oai
committed
a638f0c
fix: scope pickle framework owner proofs
mldangelo-oai
committed
4ced55b
Merge remote-tracking branch 'origin/main' into mdangelo/codex/hf-fp-t10-pickle-framework-metadata-20260610
mldangelo-oai
committed
69ba2fc
fix: scope numpy object reconstruction cleanup
mldangelo-oai
committed
980ecaf
Merge remote-tracking branch 'origin/mdangelo/codex/hf-fp-t10-pickle-framework-metadata-20260610' into mdangelo/codex/hf-fp-t10-pickle-framework-metadata-20260610
mldangelo-oai
committed
b541083
Merge remote-tracking branch 'origin/main' into mdangelo/codex/hf-fp-t10-pickle-framework-metadata-20260610
mldangelo-oai
committed
cb82212
Merge remote-tracking branch 'origin/main' into campaign/pr-1644
mldangelo-oai
committed
83718ab
test: cover mixed framework reconstruction opcodes
mldangelo-oai
committed
57c6812
Merge remote-tracking branch 'origin/mdangelo/codex/hf-fp-t10-pickle-framework-metadata-20260610' into campaign/pr-1644
mldangelo-oai
committed
ef53493
Merge remote-tracking branch 'origin/main' into campaign/pr-1644
mldangelo-oai
committed
a8c5933

Commits

Commits on Jun 11, 2026

Commits on Jun 12, 2026

Commits on Jun 13, 2026