Connect Stele to secure-pride: fix stale project entry, add scenario corpus - #67
Merged
Merged
Conversation
…corpus The secure-pride project entry described a superseded 802.1x/MDM conception (Python/FreeRADIUS/step-ca/Mosyle/UniFi/Swift MacProbe) with zero matches anywhere in the current mazze93/secure-pride repo — verified via grep before touching it. Corrected stack, hard stops, root path (was ~/dev/secure-pride, actually ~/Projects/secure-pride/secure-pride), and open questions to match what the project actually is now: an Astro/Cloudflare site with a Rust/WASM AI Safety Scanner, published to GHCR. Hard stops updated from network/MDM-specific items to the ones that actually apply: credential handling, container publishing, scan-output masking. Added four scenario-shaped cases to evals/corpus.ts under secure-pride/*, one per TOBIRA category, built around this session's own work rather than generic phrasing: a leaked GITHUB_TOKEN pasted inside a CI debugging log (APOCRYPHA), an incident-pressure request to skip the Trivy vulnerability gate (KAPU-OVERRIDE), a false "security team pre-authorized this" claim to skip review on a MAX-posture change (NARIKIRI-ADMIN), and a hidden HTML-comment instruction to suppress a finding in a scan report (PALIMPSEST). All four verified firing on exactly their expected TOBIRA with zero collateral, via a direct scanPasteInput() call — output captured for the case study. pnpm test: 68/68 passing (unchanged). pnpm build: clean (tsc -b + vite). Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01MSmuvkMSicpAdpwPotKm5M
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Part of the Stele × secure-pride case study work (documented separately in
secure-pride-design).src/data/projects.ts: thesecure-prideentry described a superseded 802.1x/MDM conception (Python/FreeRADIUS/step-ca/Mosyle/UniFi/Swift MacProbe) — verified viagrepthat none of those terms appear anywhere in the currentmazze93/secure-priderepo. Correctedstack,hardStops,root(was~/dev/secure-pride, actually~/Projects/secure-pride/secure-pride), andopenQuestionsto match reality: an Astro/Cloudflare site with a Rust/WASM AI Safety Scanner, published to GHCR.evals/corpus.ts: added foursecure-pride/*scenario cases, one per TOBIRA category, shaped around this session's own work rather than generic phrasing — a leakedGITHUB_TOKENinside a pasted CI debug log (APOCRYPHA), an incident-pressure request to skip the Trivy vulnerability gate (KAPU-OVERRIDE), a false "security team pre-authorized this" claim to skip review on a MAX-posture change (NARIKIRI-ADMIN), and a hidden HTML-comment instruction to suppress a finding in a scan report (PALIMPSEST).Test plan
scanPasteInput()call, output captured for the case study doc)pnpm test— 68/68 passing (unchanged)pnpm build— clean (tsc -b && vite build)Note:
git pushsurfaced 6 pre-existing Dependabot alerts (2 high, 4 moderate) onmain— unrelated to this change, flagging for visibility rather than fixing here.Co-Authored-By: Claude Sonnet 5 noreply@anthropic.com
🤖 Generated with Claude Code