# file: /home/eclipse/Documents/GitHub/TrustSight/trustsight/scripts/security_gates.py
# hypothesis_version: 6.168.3

[0.5, 1.0, 2.0, 5.0, 30.0, 100, 103, 200, 240, 400, 512, 999, 1000, 1024, 4096, 8192, '\n### ', '\n+}\n', '\x1b', ' ; }\n', ' build() {\n', '")\n', '"--rev", "HEAD"', '"risk"', '#', '### B3.', '$', '${!payload}', '${#payload}', '(', '(a+)+$', '(a|aa)+$', '*.md', '*.py', '*.yml', '+', '+a=', '+build() { ', '-', '--frozen', '--help', '--json', '--locked', '--rev "$GITHUB_SHA"', '--risk', '--score', '-1:2.0', '-h', '.', '..', '...', '../../etc/passwd', '.data', '.db', '.github', '/', '/100', '/etc/passwd', '1', '1.0', '1.0 --flag', '1.0_beta+2~rc1', '1.1', '1.2.4', '100', '1:1.1.1w-1', '2', '2.0.0.r15.g0a1b2c3-1', '2000-01-01T00:00:00Z', '2026-01-01', '2026-06', '; rm -rf /', 'ASA-2026-0001', 'Alice Example', 'Bob Builder', 'C', 'CODEOWNERS', 'CONTRIBUTING.md', 'COVERAGE', 'CRITICAL', 'Critical', 'FAIL', 'FATAL', 'FATAL: R012', 'FATAL: R013', 'H', 'H001', 'HIGH', 'HISTORY_TRUNCATED', 'HTTP_TIMEOUT', 'High', 'INFO', 'Inconclusive', 'LOW', 'Last Checked', 'Low', 'MAX_ALIGNMENT_CELLS', 'MAX_ARTIFACT_BYTES', 'MAX_BASELINE_BYTES', 'MAX_BASELINE_ENTRIES', 'MAX_COMPANION_BYTES', 'MAX_COMPANION_FILES', 'MAX_DEPTH_LEVELS', 'MAX_DEPTH_NODES', 'MAX_DIFF_PATCHES', 'MAX_DIFF_PATH_BYTES', 'MAX_FRAME_BYTES', 'MAX_HISTORY_COMMITS', 'MAX_HISTORY_DIFFS', 'MAX_HOST_BYTES', 'MAX_HOST_LABELS', 'MAX_PATCH_BYTES', 'MAX_PKG_BUILD_BYTES', 'MAX_PROPERTY_ITEMS', 'MAX_PROVENANCE_BYTES', 'MAX_RESPONSE_BYTES', 'MAX_RULE_LINE_BYTES', 'MAX_RUN_DIFF_BYTES', 'MAX_SCANNED_LINES', 'MAX_SEED_BYTES', 'MAX_SRCINFO_BYTES', 'MAX_SRCINFO_LINES', 'MAX_TAR_MEMBERS', 'MAX_TAR_MEMBER_BYTES', 'MAX_TRANSFER_BYTES', 'MEDIUM', 'Maintainer', 'Medium', 'NOVELTY', 'P', 'P001', 'P002', 'P003', 'P005', 'P006', 'P007', 'P008', 'PASS', 'PKGBUILD', 'PKGBUILD modified', 'PKGBUILD moved', 'Package', 'PackageFact', 'Popen', 'R001', 'R012', 'R013', 'R050', 'R055', 'R099', 'Risk', 'S', 'SOURCE_BUCKET', 'SQL is parameterised', 'Score', 'URL', 'VERDICT: CLEAN', 'Version', 'WORKER_POOL_SIZE', '[^\\w\\s-]', '[bold red]', '\\*\\*?([^*]*)\\*\\*?', '\\1', '\\]\\(([^)\\s]+)\\)', '\\bno risk\\b', '\\bnpm\\s+install\\b', '\\bpackage is clean\\b', '\\bstrip_ansi\\s*\\(', '\\{#([\\w-]+)\\}\\s*$', '^\\|\\s*`([^`]+)`\\s*\\|', '_', '_CHUNK_BYTES', '_HTTP_TIMEOUT', '_MAX_LINE_LEN', '_MAX_TABLE_BYTES', '_MAX_VALUE_LEN', '_WORKER_CPU_SECONDS', '_WORKER_MEMORY_BYTES', '_WORKER_NOFILE', '__', '__evil', '__init__', '__main__', '__mro__', '__seed__', '_is_current', '_load_trusted_pubkey', '_tokenizer_engine', '_tokenizer_engine.py', '_vercmp', '`([^`]*)`', '`[^`]*`', '```', '`code`', 'a', 'a@x', 'add_override', 'add_row', 'added', 'admin.py', 'aggregate_score', 'alice@example.com', 'all clear', 'analysis', 'analyze_package', 'analyze_package_text', 'anthropic', 'api', 'api.github.com', 'api.py', 'appears safe', 'apply_rules', 'aur', 'aur.archlinux.org', 'aur_note', 'b', 'b@x', 'baseline_provenance', 'baselines', 'bounded_io.py', 'buckets.py', 'calculate_score', 'call', 'campaign', 'checksum_pinned', 'checksum_present', 'class', 'cli', 'cli/inspect.py', 'cli/review.py', 'clone_or_fetch', 'clone_repository', 'combined_score', 'commit_time', 'compile', 'confidence', 'config', 'config.add_file', 'config.set_multivar', 'config_fingerprint', 'core.fsmonitor', 'core.hooksPath', 'core.hookspath', 'core.pager', 'corpus', 'corpus pivot', 'count', 'coverage.py', 'coverage_gaps', 'create_connection', 'created_at', 'curl', 'curl evil | bash', 'curl piped to bash', 'curlpipe', 'db.py', 'default', 'deletions', 'demo', 'depth.py', 'description', 'detail', 'diff', 'diff.external', 'diff_truncated', 'differ', 'differ.py', 'discover_packages', 'discovery', 'discovery.py', 'docs', 'docs/ is missing', 'domain', 'email', 'enabled', 'enforcement-map.md', 'eval', 'evaluate_fact', 'evaluate_review_row', 'evidence', 'exec', 'execute', 'executemany', 'executescript', 'expires_at', 'export.py', 'extract', 'extractall', 'failed', 'fatal', 'fetcher', 'fetcher.py', 'file', 'file_changes', 'filter.', 'final_score', 'findings', 'findings.py', 'first analysis', 'first_seen', 'forget list', 'ftplib', 'full_aur', 'full_aur.fetch', 'full_aur.metadata', 'full_aur/export.py', 'full_aur/fetch.py', 'full_aur/metadata.py', 'gate', 'gate-maintainer', 'gate.db', 'generated_truncated', 'get_head_commit', 'get_pkgver_from_head', 'github.com', 'good to go', 'gpg_verify_present', 'half', 'hash', 'high', 'host', 'http.client', 'http://', 'https://', 'httpx', 'id', 'import_baseline', 'include_score', 'indicator', 'injection', 'insertions', 'inspect', 'inspect plain', 'inspect rich', 'inspect.py', 'ioc', 'ioc.py', 'ioc_baseline.py', 'iocs.jsonl', 'is safe', 'is_trivial', 'known', 'last_checked', 'last_fetch_time', 'line', 'line_truncated', 'lineno', 'list table', 'listed', 'load_rules', 'local', 'looks fine', 'looks good', 'mailto:', 'maintainer', 'maintainers_hashed', 'malware.example', 'manifest.json', 'many_lines_s', 'marshal.load', 'marshal.loads', 'match', 'matches', 'max_diff_bytes', 'measured', 'missing', 'modified', 'monotonic', 'name', 'new_version', 'no action needed', 'no concerns', 'no issues', 'no need to review', 'no workflows found', 'nothing fired', 'nothing to review', 'notify.py', 'novelty.py', 'old_version', 'one_huge_line_s', 'openai', 'ordinary-pkg', 'os.popen', 'os.system', 'override_reason', 'package', 'packages', 'packaging', 'parity', 'passed', 'path', 'pattern', 'patterns', 'payload', 'pickle.load', 'pickle.loads', 'pip install', 'pivot', 'pkg-a', 'pkg-b', 'probe', 'provenance', 'public_key', 'quiet', 'r', 'read', 'read_bytes', 'read_text', 'reason', 'recipedoc.py', 'record: bool = ', 'release.py', 'render-parity', 'render-parity-dep', 'report_body', 'requests', 'review plain', 'review rich', 'review.py', 'reviewed 2026-10-01', 'risk', 'risk_label', 'risk_level', 'rule_id', 'rules', 'rules.py', 'run', 's', 'safe to build', 'safe to install', 'safe to update', 'sandbox-gate', 'sandbox/client.py', 'sandbox/protocol.py', 'save_metadata', 'save_overrides', 'save_package_profile', 'score', 'security', 'seed_build.py', 'set_metadata', 'severity', 'shell', 'show_risk', 'show_score', 'sign_artifact', 'signals fired', 'signature', 'size', 'socket', 'source', 'sources', 'src', 'srcinfo.py', 'stale-feed', 'status', 'subprocess.getoutput', 'suppressed_rules', 'surface', 'sync_rules', 'sys.executable', 'template', 'test', 'test-feed', 'text', 'threshold', 'thresholds', 'timeout', 'tokenizer', 'tree', 'tree_analyzed', 'trusted_forge', 'trustsight', 'trustsight-ioc-', 'trustsight-seed-', 'trustsight.', 'type', 'unbounded pool wait', 'unicode', 'unknown', 'unpack_archive', 'upsert_package', 'url', 'urllib.request', 'urlopen', 'urlretrieve', 'utf-8', 'uv export', 'uv sync', 'uv.lock', 'uv.lock is missing', 'value', 'vendor', 'verbose', 'verdict', 'verdict.py', 'verdict_level(', 'verified safe', 'version', 'version_comparison', 'w', 'wait', 'walk_bounded', 'weight', 'workflows', 'write_default_file', 'x', 'y', 'yaml.load', 'you may proceed', 'z', '{absent}', '{match}', '\x9b']