feat: parallelization, HTML report overhaul, Zig parser, dynamic test hardening#23
Merged
feat: parallelization, HTML report overhaul, Zig parser, dynamic test hardening#23
Conversation
ar7casper
requested review from
dgeyshis,
shahar-davidson,
sounil and
yotamleo
as code owners
…est hardening Syncs accumulated work from internal development. Added: - Parallelization across all pipeline stages (Stage 1, Stage 2, Enhance, Dynamic Test). Thread-safe TokenTracker and ProgressReporter, shared HTTP client, token-bucket RateLimiter. - Checkpoint/resume system (libs/openant-core/core/checkpoint.py) — interrupted scans resume without re-running completed work. - Zig parser (libs/openant-core/parsers/zig/). - HTML report overhaul: two themes (dark + Knostic light); repo, commit, language, duration, and cost in the header; findings numbered with anchor IDs; collapsible verdict group sections (vulnerable/bypassable open by default); two-level sort (verdict, then dynamic test outcome); file paths link to the repo at the scanned commit; Pipeline Costs & Timing with totals row; Executive Summary cross-links to findings; priority labels replace fabricated timeframes. - Dynamic testing hardening: structured result classification (CONFIRMED / NOT_REPRODUCED / BLOCKED / INCONCLUSIVE / ERROR), retry logic, checkpoint-aware resume. Changed: - Finding verifier and context enhancer overhauled for parallel, agentic execution. - Report data pipeline: Python computes a ReportData JSON blob; Go renders the HTML template. Fixed: - Cost tracking: no more negative totals under parallel execution; per-unit cost in progress output. - merge_dynamic_results no longer contaminates stdout. - HTML entities (>, <) render correctly (previously double-escaped). - "Max iterations reached" verifier timeouts now mark findings inconclusive. - Unified checkpoint resume behavior across phases. - Stdin race during interactive signal forwarding. Sastinel (internal fork origin) references scrubbed from all tracked files. Internal-only working notes removed. CHANGELOG.md added. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
ar7casper
force-pushed
the
sync-to-public
branch
from
dfa3b0d to
b589cd8
Compare
dgeyshis
approved these changes
Apr 14, 2026
ar7casper
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Syncs accumulated work from internal development into the public repo.
What's in this release
Added
Thread-safe
TokenTrackerandProgressReporter; shared HTTP client and token-bucketRateLimiter.libs/openant-core/core/checkpoint.py) — interrupted scansresume without re-running completed work.
libs/openant-core/parsers/zig/).apps/openant-cli/internal/report/):#N) with anchor IDsBLOCKED / INCONCLUSIVE / ERROR), retry logic, checkpoint-aware resume.
Changed
utilities/finding_verifier.py) and context enhancer(
utilities/context_enhancer.py) overhauled for parallel, agentic execution.ReportDataJSON blob; Go renders the HTML template.Fixed
output.
merge_dynamic_resultsno longer contaminates stdout.>,<) render correctly (previously double-escaped).inconclusive.