Yogesh Ojha 08a5b8a0d9 fix(pipeline): run matched before the blind sweep, one budget note, tunable tools only ...

Second review round. The fingerprinted matched tier now runs before the
known-exploited sweep, so a budget cut lands on the broad sweep and the
lower-yield tiers, never on the high-yield product checks. The blind
budget is sized from both lane rates and floored at zero rather than a
per-check cap.

The "not reached within the time budget" sentence is one shared constant;
the DAST stage now reports a budget cut as partial instead of success.
Rate and concurrency overrides are accepted only for tools that have a
rate, matching the builder. The rates panel no longer marks the engine
unsaved when a value returns to the preset. Narrating comments removed.

Claude-Session: https://claude.ai/code/session_01Bb4u8p34euie1YFzb7qCPu

2026-09-27 08:40:18 +05:30

..

__init__.py

feat: add target enrichment, vhost discovery, and WAF detection stages

2026-09-02 10:18:03 +05:30

catalog.py

feat(engine): run the HTTP probe automatically on every run above passive

2026-09-24 21:56:14 +05:30

effects.py

fix(pipeline): run matched before the blind sweep, one budget note, tunable tools only

2026-09-27 08:40:18 +05:30

service.py

feat(engine): per-tool rate and concurrency, with a Custom intensity

2026-09-27 05:00:38 +05:30

validation.py

chore: production-readiness review across the tree

2026-09-13 18:03:29 +05:30