ShipShadow proof

hisopo/elbato

Repository

hisopo/elbato

Head SHA

8bfceae9c226a54074720ed2dca624308a840562

Branch

test

Status

completed

Conclusion

failure

Run

run_6611be71f79f4ce58b3f26ee

Gate Results

Gate	Conclusion	Summary
ShipShadow / Policy Gate	success	No blocked workflow or release-evidence policy violations were found.
ShipShadow / Publish Gate	failure	Publication is blocked by: ShipShadow / Security Gate.
ShipShadow / Secret Gate	success	Changed-file content passed the ShipShadow secret gate.
ShipShadow / Security Gate	failure	HIGH AI-LOOP-RECURSIV in elbato/evals/operating_rules/harness.py HIGH XF05 100 blocking findings from an earlier commit on this repository have not been resolved: CRITICAL AI03-001 in tests/test_change_control_hygiene.py (introduced in 0bd8b68) HIGH AI-FLOW-MODEL in elbato/exec_runtime.py (introduced in 8403e38) HIGH CWE-394-ALL-001 in mac_daemons/bin/elbato_range_gate_runner.py (introduced in 131c019) HIGH CWE-215-ALL-001 in mac_daemons/bin/canonical_dev_refresh.py (introduced in 61d686e) HIGH CWE-362-ALL-002 in mac_daemons/bin/canonical_dev_refresh.py (introduced in 61d686e) HIGH CWE-394-ALL-001 in mac_daemons/bin/elbato_sweep_executor.py (introduced in 6784f7a) CRITICAL AI03-001 in tests/test_fleet_push_gate.py (introduced in ae1bc33) HIGH AI-FLOW-MODEL in elbato/llm_runner.py (introduced in 5a7e67e) HIGH AI-CONV-UNBOUNDE in elbato/llm_runner.py (introduced in 5a7e67e) HIGH CWE-99-ALL-001 in elbato/qa_candidate_reconciliation.py (introduced in 6bf253c) HIGH CWE-915-ALL-001 in tests/test_codex_handoff_worker.py (introduced in 6bf253c) HIGH CWE-99-ALL-001 in tests/test_codex_handoff_worker.py (introduced in 6bf253c) HIGH P01-004 in scripts/promote_change.py (introduced in 8ad3ce2) HIGH CWE-394-ALL-001 in scripts/verify_fleet_prod_boundary_installed.py (introduced in 8ad3ce2) CRITICAL AI03-001 in tests/test_cf_apply.py (introduced in 8ad3ce2) CRITICAL AI03-001 in tests/test_install_fleet_prod_boundary.py (introduced in 8ad3ce2) HIGH CWE-80-ALL-003 in tests/test_install_fleet_prod_boundary.py (introduced in 8ad3ce2) CRITICAL AI03-001 in tests/test_promote_change.py (introduced in 8ad3ce2) HIGH XF04 in tests/test_canonical_runtime_exec.py (introduced in 8ad3ce2) CRITICAL H25 in scripts/promote_change.py (introduced in 8ad3ce2) HIGH P01-004 in scripts/siteshadow_qa_runner_control_guard.py (introduced in 8e12922) HIGH CWE-915-ALL-001 in tests/test_siteshadow_qa_runner_control_guard.py (introduced in 8e12922) HIGH CWE-99-ALL-001 in scripts/codex_handoff_worker.py (introduced in 3b8d847) CRITICAL AI01-005 in elbato/qa_candidate_reconciliation.py (introduced in 746aa55) CRITICAL AI03-001 in elbato/dogfood_fp_remediation_sweep.py (introduced in 72eafe5) HIGH CWE-676-ALL-006 in elbato/dogfood_fp_remediation_sweep.py (introduced in 72eafe5) HIGH AI02-009 in elbato/exec_tasks.py (introduced in 72eafe5) HIGH AI-CONV-UNBOUNDE in elbato/garbage_collector.py (introduced in 72eafe5) HIGH CWE-294-ALL-001 in elbato/shipshadow_integration.py (introduced in 72eafe5) HIGH AI-TOOLINJ-TRUST in elbato/shipshadow_integration.py (introduced in 72eafe5) HIGH P01-004 in elbato/shipshadow_integration_cli.py (introduced in 72eafe5) HIGH AI02-009 in elbato/subagents/siteshadow_cto.py (introduced in 72eafe5) CRITICAL AI03-013 in elbato/subagents/siteshadow_cto.py (introduced in 72eafe5) CRITICAL AI03-001 in elbato/theo_fp_benchmark.py (introduced in 72eafe5) CRITICAL H10 in elbato/shipshadow_integration.py (introduced in 72eafe5) HIGH P01-004 in mac_daemons/bin/fleet_suppression_fn_gate.py (introduced in 72eafe5) HIGH P01-004 in mac_daemons/bin/siteshadow_api_gate.py (introduced in 72eafe5) CRITICAL AI03-009 in mac_daemons/bin/siteshadow_gate_runner.py (introduced in 72eafe5) HIGH CWE-80-ALL-003 in mac_daemons/bin/siteshadow_gate_runner.py (introduced in 72eafe5) HIGH CWE-99-ALL-001 in mac_daemons/bin/siteshadow_gate_runner.py (introduced in 72eafe5) HIGH GRPC05-004 in mac_daemons/bin/siteshadow_gate_runner.py (introduced in 72eafe5) CRITICAL AI-LOOP-INFINITE in mac_daemons/bin/siteshadow_prod_promote.py (introduced in 72eafe5) HIGH CWE-215-ALL-001 in mac_daemons/bin/theo_gate_attest.py (introduced in 72eafe5) HIGH CWE-325-ALL-002 in mac_daemons/bin/theo_gate_attest.py (introduced in 72eafe5) HIGH CWE-394-ALL-001 in mac_daemons/bin/theo_gate_attest.py (introduced in 72eafe5) HIGH CWE-532-ALL-001 in mac_daemons/bin/theo_gate_attest.py (introduced in 72eafe5) CRITICAL AI-LOOP-INFINITE in scripts/check_pages_production_branch_drift.py (introduced in 72eafe5) HIGH A08-001 in scripts/deploy_elbato_labs_site.sh (introduced in 72eafe5) CRITICAL AI03-001 in tests/test_change_control_product_repo.py (introduced in 72eafe5) HIGH CWE-550-ALL-001 in tests/test_change_control_product_repo.py (introduced in 72eafe5) CRITICAL AI03-001 in tests/test_dogfood_fp_remediation_sweep.py (introduced in 72eafe5) HIGH CWE-676-ALL-006 in tests/test_dogfood_fp_remediation_sweep.py (introduced in 72eafe5) HIGH CWE-532-ALL-001 in tests/test_product_api_auto_deploy.py (introduced in 72eafe5) HIGH CWE-918-003 in tests/test_shipshadow_integration.py (introduced in 72eafe5) HIGH CWE-80-ALL-003 in tests/test_shipshadow_legacy_mutation_guard.py (introduced in 72eafe5) HIGH XF04 in scripts/deploy_fallback_telegram.sh (introduced in 72eafe5) HIGH XF04 in scripts/deploy_llm_telemetry_worker.sh (introduced in 72eafe5) HIGH H12 in scripts/deploy_fallback_telegram.sh (introduced in 72eafe5) HIGH H12 in scripts/deploy_llm_telemetry_worker.sh (introduced in 72eafe5) CRITICAL H25 in scripts/shipshadow_integration_pre_push_guard.py (introduced in 72eafe5) HIGH CWE-915-ALL-001 in tests/test_siteshadow_prod_promote.py (introduced in 72eafe5) CRITICAL AI03-001 in tests/test_theo_fp_benchmark.py (introduced in 72eafe5) HIGH CWE-915-ALL-001 in tests/test_theo_fp_benchmark.py (introduced in 72eafe5) HIGH AI-LOOP-RECURSIV in elbato/evals/operating_rules/harness.py (introduced in 9482bfd) HIGH CWE-676-ALL-006 in elbato/valentina_site_leadership_planner.py (introduced in 9482bfd) HIGH P01-004 in scripts/siteshadow_api_benchmark.py (introduced in a384fe1) CRITICAL AI03-001 in elbato/siteshadow_waf_control.py (introduced in b419d49) CRITICAL AI03-007 in mac_daemons/bin/siteshadow_worker_binding_guard.py (introduced in b419d49) HIGH CWE-394-ALL-001 in mac_daemons/bin/siteshadow_worker_binding_guard.py (introduced in b419d49) HIGH CWE-394-ALL-001 in scripts/reconcile_siteshadow_waf.py (introduced in b419d49) CRITICAL SQLI-CONCAT-001 in scripts/codex_handoff_worker.py (introduced in 38285e6) HIGH CWE-321-ALL-002 in cloudflare_workers/fallback_telegram/benchmark.test.js (introduced in fafe81d) HIGH CWE-532-ALL-001 in cloudflare_workers/fallback_telegram/benchmark.test.js (introduced in fafe81d) HIGH CWE-117-ALL-001 in cloudflare_workers/fallback_telegram/index.js (introduced in fafe81d) HIGH CWE-328-ALL-003 in cloudflare_workers/fallback_telegram/index.js (introduced in fafe81d) HIGH CWE-338-ALL-001 in cloudflare_workers/fallback_telegram/index.js (introduced in fafe81d) CRITICAL AI-LOOP-INFINITE in elbato/mac_bridge_shim.py (introduced in fafe81d) HIGH XF03 in tests/test_mac_bridge_shim_dispatch.py (introduced in fafe81d) HIGH CWE-304-ALL-002 in tests/test_verify_continuity_cloudflare.py (introduced in edf8a9e) CRITICAL AI03-001 in tests/test_change_control_approval_queue.py (introduced in 237a133) CRITICAL AI03-001 in tests/test_prod_landing_guard.py (introduced in 487dfce) HIGH CWE-394-ALL-001 in scripts/verify_prod_landing.py (introduced in 7a0404e) CRITICAL AI03-001 in tests/test_pre_push_ahead_check.py (introduced in 7c51a46) HIGH AI-LOOP-RECURSIV in elbato/agent_cycle.py (introduced in 3213411) HIGH CWE-321-ALL-002 in tests/test_company_memory_contract_completion.py (introduced in 924ff28) HIGH CWE-321-ALL-002 in tests/test_anika_integration_engineering_contract.py (introduced in 6dea615) HIGH CWE-321-ALL-002 in tests/test_datantia_company_scope.py (introduced in 6dea615) HIGH CWE-321-ALL-002 in tests/test_kenji_executive_contract.py (introduced in 6dea615) HIGH CWE-451-ALL-003 in tests/test_objective_dispatch_authority.py (introduced in 6dea615) HIGH CWE-86-ALL-002 in tests/test_objective_dispatch_authority.py (introduced in 6dea615) HIGH P01-004 in scripts/cf_d1_apply.py (introduced in e06b8b2) HIGH CWE-915-ALL-001 in tests/test_cloudflare_d1_api.py (introduced in e06b8b2) HIGH CWE-394-ALL-001 in scripts/siteshadow_qa_runner_control_guard.py (introduced in 34d8082) HIGH CWE-915-ALL-001 in tests/test_soren_scanner_context.py (introduced in 67dc836) CRITICAL AI03-001 in tests/test_siteshadow_api_benchmark.py (introduced in 5bf5822) HIGH CWE-915-ALL-001 in tests/test_rafi_ha_planner.py (introduced in 48fcf4a) HIGH CWE-532-ALL-001 in elbato/firewalla_client.py (introduced in a190019) HIGH CWE-676-ALL-008 in tests/test_firewalla_client.py (introduced in a190019) HIGH CWE-915-ALL-001 in tests/test_firewalla_client.py (introduced in a190019) HIGH H10 in elbato/firewalla_client.py (introduced in a190019) This commit did not change the file, so ShipShadow did not re-scan it and the finding still stands. Resolve it by fixing the file - the next run that changes it will re-scan and clear the finding - or, if it is a confirmed false positive, adjudicate it in the installation FP registry or reproduce a reviewed content-bound override with a fresh scan.