Skip to content

fix(audits): drop the 2 fixture entries that inline markers now cover - #499

Merged
hyperpolymath merged 1 commit into
mainfrom
marina/optimistic-cray-js64k7
Nov 10, 2026
Merged

hyperpolymath merged 1 commit into
mainfrom
marina/optimistic-cray-js64k7

Conversation

@hyperpolymath

Copy link
Copy Markdown
Owner

Summary

PR 489 added 2 entries to audits/assail-classifications.a2ml for the deliberate sorry in tests/corpus_fixtures/isabelle/Smoke.thy and tests/corpus_fixtures/minif2f/algebra.lean. It needed them because the gate's scanner at the time (panic-attack f2a6a70) could not apply the inline panic-attack: accepted markers those files already carry.

PR 497 moved the gate to panic-attack 55ffcc9, which anchors Lean and Isabelle sorry findings to their line (hyperpolymath/panic-attack#278). The markers now suppress both findings. So the 2 entries are a second suppression for the same lines. They are also wider than the markers: a registry entry covers every ProofDrift finding in its file, not only the marked line.

This PR removes them. The file returns to its exact state before PR 489.

Changes

  • audits/assail-classifications.a2ml: the 2 ProofDrift entries and their comment block are removed (16 lines). No other entry changes.

RSR Quality Checklist

Required

  • Tests pass (see Testing)
  • Code is formatted
  • Linter is clean
  • No banned language patterns
  • No unsafe blocks without // SAFETY: comments
  • No banned functions
  • SPDX license headers present (unchanged)
  • No secrets, credentials, or .env files included

As Applicable

  • None applies.

Testing

On a clean checkout of this commit, with the scanner built at 55ffcc9 the way the gate builds it (cargo install --git … --rev … --locked --features http):

  • static-analysis-evidence.sh scan panic-attack: status: ran, exit 0. Counts: 0 critical, 43 high, 65 medium, 1 low.
  • static-analysis-evidence.sh gate: exit 0.
  • Smoke.thy:21 and algebra.lean:11 (the 2 Critical sorry findings): suppressed: true, through their inline markers.

One visible change: a Medium ProofDrift finding in Smoke.thy with no line (the fixture's deliberate axiomatization block) is now counted, so medium goes from 64 to 65. The registry entry used to hide it. The gate blocks only critical findings.

Screenshots

Not applicable.


Generated by Claude Code

#489 added registry entries for the deliberate `sorry` in
tests/corpus_fixtures/isabelle/Smoke.thy and
tests/corpus_fixtures/minif2f/algebra.lean, because the gate's scanner
(panic-attack f2a6a70) could not apply the inline
`panic-attack: accepted` markers those files already carry.

#497 moved the gate to panic-attack 55ffcc9, which line-anchors Lean and
Isabelle `sorry` findings (panic-attack#278), so the markers suppress
them. The entries are now a second suppression for the same 2 lines,
and they cover every ProofDrift finding in the 2 files, not only the
marked line. This removes them; the file returns to its state before
#489.

Co-Authored-By: Claude <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0136P7ZmAsYpFA9gxfQLF3F6
Signed-off-by: Claude <noreply@anthropic.com>
@coderabbitai

coderabbitai Bot commented Nov 10, 2026 •

Copy link
Copy Markdown
Contributor

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 7 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: ca410a11-d1bc-4cef-8056-43a00b07dd7b
Commits

Reviewing files that changed from the base of the PR and between 03f03fb and 28990d4.

Files selected for processing: 1

  • audits/assail-classifications.a2ml
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@hyperpolymath
hyperpolymath marked this pull request as ready for review November 10, 2026 19:33
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Nov 10, 2026 •

Copy link
Copy Markdown
Codex Review Summary: ❌ Failed

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-11-10T19:35:09.568195Z 28990d4 Draft marked ready
🔒 Security Review ❌ Failed 2026-11-10T19:33:24.467745Z
We couldn’t complete this review. Comment @codex security review to try again.
28990d4 Draft marked ready
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector

Copy link
Copy Markdown

This security review couldn’t start because the paying account has exhausted its Codex allowance and has insufficient available credits. The payer can check their balance and add credits in the Codex usage dashboard, then try again. If you do not manage the paying account, contact this repository's admins.

@sonarqubecloud

Copy link
Copy Markdown

@hyperpolymath
hyperpolymath enabled auto-merge (squash) November 10, 2026 19:33
@hyperpolymath
hyperpolymath merged commit 011fce0 into main Nov 10, 2026
68 checks passed
@hyperpolymath
hyperpolymath deleted the marina/optimistic-cray-js64k7 branch November 10, 2026 19:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants