LICENSE
README.md
pyproject.toml
src/before_deploy/__init__.py
src/before_deploy/advisory.py
src/before_deploy/advisory_context.py
src/before_deploy/advisory_execution.py
src/before_deploy/advisory_provider.py
src/before_deploy/assurance_case.py
src/before_deploy/assurance_comparison.py
src/before_deploy/caller_experiment.py
src/before_deploy/caller_pilot.py
src/before_deploy/caller_pilot_runner.py
src/before_deploy/caller_pilot_runner_cli.py
src/before_deploy/cli.py
src/before_deploy/comparative_benchmark.py
src/before_deploy/comparative_benchmark_cli.py
src/before_deploy/entrypoint.py
src/before_deploy/evidence_artifact.py
src/before_deploy/evidence_challenge.py
src/before_deploy/evidence_correlation.py
src/before_deploy/evidence_corroboration.py
src/before_deploy/evidence_explanation.py
src/before_deploy/evidence_graph.py
src/before_deploy/evidence_inspect.py
src/before_deploy/evidence_investigation.py
src/before_deploy/human_approval_patch.py
src/before_deploy/inventory.py
src/before_deploy/mcp_server.py
src/before_deploy/models.py
src/before_deploy/ocr_advisory.py
src/before_deploy/ocr_provider.py
src/before_deploy/orchestrator.py
src/before_deploy/platform_api.py
src/before_deploy/policy.py
src/before_deploy/production_readiness.py
src/before_deploy/project_profile.py
src/before_deploy/readiness_gate.py
src/before_deploy/real_world_validation.py
src/before_deploy/real_world_validation_cli.py
src/before_deploy/regression_entrypoint.py
src/before_deploy/regression_evidence.py
src/before_deploy/release_disposition.py
src/before_deploy/release_entrypoint.py
src/before_deploy/remediation_proposal.py
src/before_deploy/review_benchmark.py
src/before_deploy/review_benchmark_corpus.py
src/before_deploy/review_preview.py
src/before_deploy/review_session.py
src/before_deploy/verification.py
src/before_deploy/verification_entrypoint.py
src/before_deploy/verification_history.py
src/before_deploy/verification_history_entrypoint.py
src/before_deploy/verification_obligations.py
src/before_deploy/waivers.py
src/before_deploy.egg-info/PKG-INFO
src/before_deploy.egg-info/SOURCES.txt
src/before_deploy.egg-info/dependency_links.txt
src/before_deploy.egg-info/entry_points.txt
src/before_deploy.egg-info/requires.txt
src/before_deploy.egg-info/top_level.txt
src/before_deploy/assurance/__init__.py
src/before_deploy/assurance/matrix.py
src/before_deploy/capabilities/__init__.py
src/before_deploy/capabilities/loader.py
src/before_deploy/capabilities/schema.py
src/before_deploy/capabilities/manifests/adapter.gitleaks.yaml
src/before_deploy/capabilities/manifests/adapter.gosec.yaml
src/before_deploy/capabilities/manifests/adapter.pip-audit.yaml
src/before_deploy/capabilities/manifests/adapter.provenance.yaml
src/before_deploy/capabilities/manifests/adapter.semgrep.yaml
src/before_deploy/capabilities/manifests/adapter.trivy-config.yaml
src/before_deploy/capabilities/manifests/catalog.yaml
src/before_deploy/capabilities/manifests/control.dependency-manifest.yaml
src/before_deploy/capabilities/manifests/control.docker-compose-privileged.yaml
src/before_deploy/capabilities/manifests/control.fastapi-api-assurance-domain.yaml
src/before_deploy/capabilities/manifests/control.fastapi-api.yaml
src/before_deploy/capabilities/manifests/control.fastapi-authentication-domain.yaml
src/before_deploy/capabilities/manifests/control.fastapi-authorization.yaml
src/before_deploy/capabilities/manifests/control.fastapi-command-injection.yaml
src/before_deploy/capabilities/manifests/control.fastapi-endpoint-domain.yaml
src/before_deploy/capabilities/manifests/control.fastapi-file-upload.yaml
src/before_deploy/capabilities/manifests/control.fastapi-input-validation.yaml
src/before_deploy/capabilities/manifests/control.fastapi-session-cookie.yaml
src/before_deploy/capabilities/manifests/control.fastapi-ssrf-single-alias.yaml
src/before_deploy/capabilities/manifests/control.fastapi-ssrf.yaml
src/before_deploy/capabilities/manifests/control.github-actions.yaml
src/before_deploy/capabilities/manifests/control.go-module.yaml
src/before_deploy/capabilities/manifests/control.go-tls.yaml
src/before_deploy/capabilities/manifests/control.go-vulnerability-snapshot.yaml
src/before_deploy/capabilities/manifests/control.nextjs-cookie.yaml
src/before_deploy/capabilities/manifests/control.nextjs-cors.yaml
src/before_deploy/capabilities/manifests/control.nextjs-error-stack.yaml
src/before_deploy/capabilities/manifests/control.nextjs-inline-server-action.yaml
src/before_deploy/capabilities/manifests/control.nextjs-public-env.yaml
src/before_deploy/capabilities/manifests/control.nextjs-server-action.yaml
src/before_deploy/capabilities/manifests/control.nextjs-ssrf-single-alias.yaml
src/before_deploy/capabilities/manifests/control.nextjs-ssrf.yaml
src/before_deploy/capabilities/manifests/control.payment-stripe-webhook.yaml
src/before_deploy/capabilities/manifests/control.php-laravel-composer-lock.yaml
src/before_deploy/capabilities/manifests/control.python-config.yaml
src/before_deploy/capabilities/manifests/control.python-cors.yaml
src/before_deploy/capabilities/manifests/control.python-data-integrity.yaml
src/before_deploy/capabilities/manifests/control.python-database-transport.yaml
src/before_deploy/capabilities/manifests/control.python-error-handling.yaml
src/before_deploy/capabilities/manifests/control.python-jwt-verification.yaml
src/before_deploy/capabilities/manifests/control.python-observability.yaml
src/before_deploy/capabilities/manifests/control.python-sast.yaml
src/before_deploy/capabilities/manifests/control.python-sensitive-data.yaml
src/before_deploy/capabilities/manifests/control.python-sql-single-alias.yaml
src/before_deploy/capabilities/manifests/control.release-sbom.yaml
src/before_deploy/capabilities/manifests/control.ruby-rails-gemfile-lock.yaml
src/before_deploy/capabilities/manifests/control.rust-cargo-lock.yaml
src/before_deploy/capabilities/manifests/control.secrets.yaml
src/before_deploy/capabilities/manifests/control.security-testing-evidence.yaml
src/before_deploy/capabilities/manifests/control.spring-actuator.yaml
src/before_deploy/capabilities/manifests/control.spring-cors.yaml
src/before_deploy/capabilities/manifests/control.spring-jpa-native-query.yaml
src/before_deploy/capabilities/manifests/control.spring-security-permit-all.yaml
src/before_deploy/controls/__init__.py
src/before_deploy/controls/base.py
src/before_deploy/controls/core_domain_completion.py
src/before_deploy/controls/dependencies.py
src/before_deploy/controls/dependency_audit.py
src/before_deploy/controls/deployment_config.py
src/before_deploy/controls/docker_compose.py
src/before_deploy/controls/external.py
src/before_deploy/controls/fastapi_authorization.py
src/before_deploy/controls/fastapi_command_injection.py
src/before_deploy/controls/fastapi_input.py
src/before_deploy/controls/fastapi_routes.py
src/before_deploy/controls/fastapi_session_cookie.py
src/before_deploy/controls/fastapi_ssrf.py
src/before_deploy/controls/fastapi_ssrf_single_alias.py
src/before_deploy/controls/fastapi_upload.py
src/before_deploy/controls/github_actions.py
src/before_deploy/controls/gitleaks.py
src/before_deploy/controls/go.py
src/before_deploy/controls/go_vulnerabilities.py
src/before_deploy/controls/gosec.py
src/before_deploy/controls/injection.py
src/before_deploy/controls/nextjs.py
src/before_deploy/controls/nextjs_error_leak.py
src/before_deploy/controls/nextjs_ssrf.py
src/before_deploy/controls/nextjs_ssrf_single_alias.py
src/before_deploy/controls/php_laravel.py
src/before_deploy/controls/provenance.py
src/before_deploy/controls/python_data_integrity.py
src/before_deploy/controls/python_error_handling.py
src/before_deploy/controls/python_jwt.py
src/before_deploy/controls/python_observability.py
src/before_deploy/controls/python_sensitive_data.py
src/before_deploy/controls/ruby_rails.py
src/before_deploy/controls/rust_cargo.py
src/before_deploy/controls/sbom.py
src/before_deploy/controls/secrets.py
src/before_deploy/controls/semgrep.py
src/before_deploy/controls/spring_config.py
src/before_deploy/controls/spring_cors.py
src/before_deploy/controls/spring_jpa_injection.py
src/before_deploy/controls/spring_security.py
src/before_deploy/controls/trivy_config.py
src/before_deploy/controls/data/go_vulnerability_snapshot.json
src/before_deploy/coverage/__init__.py
src/before_deploy/coverage/auditor.py
src/before_deploy/domains/__init__.py
src/before_deploy/domains/loader.py
src/before_deploy/domains/schema.py
src/before_deploy/domains/manifests/catalog.yaml
src/before_deploy/domains/manifests/controls.core21-completion.yaml
src/before_deploy/domains/manifests/controls.fastapi-command-injection.yaml
src/before_deploy/domains/manifests/controls.fastapi-session-cookie.yaml
src/before_deploy/domains/manifests/controls.fastapi-ssrf-single-alias.yaml
src/before_deploy/domains/manifests/controls.fastapi-ssrf.yaml
src/before_deploy/domains/manifests/controls.nextjs-error-stack.yaml
src/before_deploy/domains/manifests/controls.nextjs-ssrf-single-alias.yaml
src/before_deploy/domains/manifests/controls.nextjs-ssrf.yaml
src/before_deploy/domains/manifests/controls.python-jwt-verification.yaml
src/before_deploy/domains/manifests/controls.spring-injection.yaml
src/before_deploy/domains/manifests/controls.spring-security.yaml
src/before_deploy/domains/manifests/controls.spring.yaml
src/before_deploy/domains/manifests/controls.yaml
src/before_deploy/domains/manifests/domains.yaml
src/before_deploy/evidence/__init__.py
src/before_deploy/evidence/repository.py
src/before_deploy/evidence/requirements.py
src/before_deploy/planning/__init__.py
src/before_deploy/planning/planner.py
src/before_deploy/reports/__init__.py
src/before_deploy/reports/json_report.py
src/before_deploy/reports/markdown_report.py
src/before_deploy/reports/review_report.py
src/before_deploy/reports/sarif_report.py