docs(security): refresh GateGuard evidence for the latency changes

This commit is contained in:
Jeffrey Montoya
2026-09-30 11:36:10 -04:00
parent d95aa3425e
commit ef32c8e9ee
3 changed files with 9 additions and 9 deletions
@@ -42,7 +42,7 @@ Baseline comparison against `main`:
- The gate reports one new and one resolved `info` finding. It is the same
finding, "Hook code reads Claude transcript input" in
`scripts/hooks/gateguard-fact-force.js`, on the same unchanged source line,
which moved from line 1356 to 1393. AgentShield puts the line number in the
which moved from line 1356 to 1418. AgentShield puts the line number in the
finding id and the id in its baseline fingerprint, so a moved line counts
as new. Because the gate allows no new findings, it exits `3` on this line
shift alone.
@@ -144,7 +144,7 @@
}
},
{
"id": "hooks-code-transcript-access-1393",
"id": "hooks-code-transcript-access-1418",
"name": "Hook code reads Claude transcript input",
"shortDescription": {
"text": "Hook code reads Claude transcript input"
@@ -341,7 +341,7 @@
"invocations": [
{
"executionSuccessful": true,
"endTimeUtc": "2026-09-30T03:29:39.393Z",
"endTimeUtc": "2026-09-30T15:35:58.877Z",
"workingDirectory": {
"uri": "<target-path>"
}
@@ -1144,7 +1144,7 @@
}
},
{
"ruleId": "hooks-code-transcript-access-1393",
"ruleId": "hooks-code-transcript-access-1418",
"ruleIndex": 5,
"level": "note",
"message": {
@@ -1157,7 +1157,7 @@
"uri": "scripts/hooks/gateguard-fact-force.js"
},
"region": {
"startLine": 1393
"startLine": 1418
}
}
}
@@ -71,16 +71,16 @@ bypasses as SARIF errors. They are:
| Suite | this branch | `main` |
| --- | --- | --- |
| `tests/hooks/gateguard-fact-force.test.js` | 1010 passed, 0 failed | 704 passed, 0 failed |
| `tests/hooks/gateguard-fact-force.test.js` | 1018 passed, 0 failed | 704 passed, 0 failed |
| `tests/hooks/gateguard-scenarios.test.js` | 25 passed, 0 failed | — |
| `tests/lib/gateguard-target-class.test.js` | 30 passed, 0 failed | — |
| `tests/lib/gateguard-readonly-shell.test.js` | 18 passed, 0 failed | — |
| `tests/lib/gateguard-change-profile.test.js` | 47 passed, 0 failed | — |
| `tests/lib/gateguard-code-lexer.test.js` | 11 passed, 0 failed | — |
| `tests/lib/gateguard-code-lexer.test.js` | 15 passed, 0 failed | — |
| `tests/lib/gateguard-file-context.test.js` | 7 passed, 0 failed | — |
| `tests/lib/gateguard-search-filters.test.js` | 10 passed, 0 failed | — |
| `tests/lib/gateguard-turn-scan.test.js` | 16 passed, 0 failed | — |
| `tests/scripts/gateguard-eval.test.js` | 12 passed, 0 failed | — |
| `tests/lib/gateguard-turn-scan.test.js` | 17 passed, 0 failed | — |
| `tests/scripts/gateguard-eval.test.js` | 15 passed, 0 failed | — |
## Repository gates