LICENSE
README.md
pyproject.toml
src/websec_validator/__init__.py
src/websec_validator/agenthook.py
src/websec_validator/attest.py
src/websec_validator/attribution.py
src/websec_validator/baseline.py
src/websec_validator/briefing.py
src/websec_validator/calibration.json
src/websec_validator/calibration.py
src/websec_validator/cli.py
src/websec_validator/constitution.py
src/websec_validator/corpus.json
src/websec_validator/coverage.py
src/websec_validator/dast_ingest.py
src/websec_validator/dast_predict.py
src/websec_validator/demo.py
src/websec_validator/diffscope.py
src/websec_validator/dynamic.py
src/websec_validator/enrichment.py
src/websec_validator/explain.py
src/websec_validator/feedback.py
src/websec_validator/findings.py
src/websec_validator/fixprompt.py
src/websec_validator/formats.py
src/websec_validator/fpfilter.py
src/websec_validator/gate.py
src/websec_validator/graph_enrich.py
src/websec_validator/hooks.py
src/websec_validator/install.py
src/websec_validator/intel.py
src/websec_validator/inventory.py
src/websec_validator/mcp_server.py
src/websec_validator/openapi.py
src/websec_validator/probes.py
src/websec_validator/proof.py
src/websec_validator/provenance.py
src/websec_validator/recon.py
src/websec_validator/registry.py
src/websec_validator/repairs.py
src/websec_validator/report.py
src/websec_validator/research.py
src/websec_validator/sarif_ingest.py
src/websec_validator/scanners.py
src/websec_validator/testplan.py
src/websec_validator.egg-info/PKG-INFO
src/websec_validator.egg-info/SOURCES.txt
src/websec_validator.egg-info/dependency_links.txt
src/websec_validator.egg-info/entry_points.txt
src/websec_validator.egg-info/top_level.txt
src/websec_validator/extractors/__init__.py
src/websec_validator/extractors/agent_config.py
src/websec_validator/extractors/auth.py
src/websec_validator/extractors/authz.py
src/websec_validator/extractors/authz_dataflow.py
src/websec_validator/extractors/base.py
src/websec_validator/extractors/client_exposure.py
src/websec_validator/extractors/client_integrity.py
src/websec_validator/extractors/crypto_usage.py
src/websec_validator/extractors/dependencies.py
src/websec_validator/extractors/django_urls.py
src/websec_validator/extractors/graphql.py
src/websec_validator/extractors/iac_ci.py
src/websec_validator/extractors/integrations.py
src/websec_validator/extractors/llm_security.py
src/websec_validator/extractors/pii_exposure.py
src/websec_validator/extractors/policy_consistency.py
src/websec_validator/extractors/profiles.py
src/websec_validator/extractors/routes.py
src/websec_validator/extractors/schemas.py
src/websec_validator/extractors/sql_flow.py
src/websec_validator/extractors/stack.py
src/websec_validator/extractors/surface.py
src/websec_validator/extractors/syntax.py
src/websec_validator/extractors/tenant.py
src/websec_validator/extractors/transport_security.py
src/websec_validator/extractors/upload_security.py
src/websec_validator/extractors/webext.py
src/websec_validator/research/control-scope-cases.json
src/websec_validator/research/example.json
src/websec_validator/research/profile-cases.json
src/websec_validator/rules/error-stack-disclosure.yml
src/websec_validator/rules/insecure-default-secret.yml
src/websec_validator/schemas/coverage.schema.json
src/websec_validator/schemas/facts.schema.json
src/websec_validator/schemas/ledger.schema.json
src/websec_validator/templates/demo/app.py.txt
src/websec_validator/templates/demo/requirements.txt.txt
src/websec_validator/templates/probes/_lib.py
src/websec_validator/templates/probes/appsync-cswsh.sh
src/websec_validator/templates/probes/appsync-introspection.sh
src/websec_validator/templates/probes/appsync-subscription-bola.sh
src/websec_validator/templates/probes/bola-cross-tenant.sh
src/websec_validator/templates/probes/bola-write-verbs.py
src/websec_validator/templates/probes/client-integrity-checklist.sh
src/websec_validator/templates/probes/compare-roles.sh
src/websec_validator/templates/probes/dlp-bypass-offline.py
src/websec_validator/templates/probes/entitlement-abuse.sh
src/websec_validator/templates/probes/error-disclosure-probe.sh
src/websec_validator/templates/probes/forged-token.sh
src/websec_validator/templates/probes/hs256-brute-force.py
src/websec_validator/templates/probes/jwt-attacks.sh
src/websec_validator/templates/probes/mass-assignment.py
src/websec_validator/templates/probes/password-reuse.sh
src/websec_validator/templates/probes/pii-output-diff.sh
src/websec_validator/templates/probes/race-conditions.py
src/websec_validator/templates/probes/rate-limit-burst.sh
src/websec_validator/templates/probes/s3-assess.sh
src/websec_validator/templates/probes/ssrf-probes.sh
src/websec_validator/templates/probes/unauth-baseline.sh
src/websec_validator/templates/probes/upload-matrix.sh
src/websec_validator/templates/probes/webhook-forgery.py
src/websec_validator/templates/reports/FINDINGS-SUMMARY.md.template
src/websec_validator/templates/reports/access-control-matrix.md.template
src/websec_validator/templates/reports/findings-triage.md.template
src/websec_validator/templates/reports/pentest-handover-brief.md.template
src/websec_validator/templates/reports/per-tool-FINDINGS.md.template
tests/test_action_contracts.py
tests/test_adoption_contracts.py
tests/test_agent_hook.py
tests/test_agent_hosts.py
tests/test_agent_launch_specs.py
tests/test_analysis_scope.py
tests/test_assurance_regressions.py
tests/test_attest.py
tests/test_attribution.py
tests/test_auth_control_scope.py
tests/test_constitution.py
tests/test_control_scope_research.py
tests/test_coverage.py
tests/test_crypto_comparisons.py
tests/test_dast_ingest.py
tests/test_dast_predict.py
tests/test_demo.py
tests/test_detector_precision.py
tests/test_diffscope.py
tests/test_django_routes.py
tests/test_enrichment.py
tests/test_entitlement_webext.py
tests/test_evidence_verdicts.py
tests/test_explain.py
tests/test_extension_controls.py
tests/test_feedback.py
tests/test_fixprompt_fpfilter.py
tests/test_formats.py
tests/test_gate_and_bypass_record.py
tests/test_gate_command.py
tests/test_gitleaks_worktree.py
tests/test_graph_enrich.py
tests/test_hardening.py
tests/test_hooks.py
tests/test_hooks_contracts.py
tests/test_install.py
tests/test_install_contracts.py
tests/test_intel.py
tests/test_inventory.py
tests/test_lifecycle.py
tests/test_mcp.py
tests/test_mcp_security.py
tests/test_openapi.py
tests/test_output_boundaries.py
tests/test_pentest_regressions.py
tests/test_profiles.py
tests/test_proof_revisions.py
tests/test_provenance.py
tests/test_public_precision.py
tests/test_read_boundary.py
tests/test_read_performance.py
tests/test_recon.py
tests/test_registry_existence.py
tests/test_remaining_control_scope.py
tests/test_research.py
tests/test_research_cli.py
tests/test_sarif_ingest.py
tests/test_sarif_workbench.py
tests/test_scanner_contracts.py
tests/test_source_budget.py
tests/test_sql_flow.py
tests/test_stack_metadata.py
tests/test_testplan.py
tests/test_transport_pii_scope.py
tests/test_transport_stack_scope.py
tests/test_workbench_cli.py