Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
20 commits
Select commit Hold shift + click to select a range
10923e0
fix(security): normalize concealed instruction text
Spectorian Aug 21, 2026
057fd7b
fix(security): detect inter-character text obfuscation
Spectorian Aug 21, 2026
d8c3213
test(security): cover ambiguous spaced instructions
Spectorian Aug 21, 2026
e6a96df
fix(security): bound stable Unicode projection
Spectorian Aug 21, 2026
1d50da6
fix(security): fail closed on obfuscated instructions
Spectorian Aug 22, 2026
b10b82e
Merge branch 'main' into codex/security-text-normalization
github-actions[bot] Aug 24, 2026
2d346c0
Merge branch 'main' into codex/security-text-normalization
rng1995 Aug 24, 2026
41bcdaf
Merge branch 'main' into codex/security-text-normalization
github-actions[bot] Aug 24, 2026
42f0b4f
Merge branch 'main' into codex/security-text-normalization
github-actions[bot] Aug 24, 2026
cc393ef
Merge branch 'main' into codex/security-text-normalization
github-actions[bot] Aug 24, 2026
1210b82
fix: harden concealed instruction detection
Spectorian Aug 24, 2026
3112c49
fix(security): fail closed on boundary concealment
Spectorian Aug 25, 2026
c0b233a
perf(security): skip irrelevant boundary scans
Spectorian Aug 25, 2026
3d89803
fix(security): broaden concealed command evidence
Spectorian Aug 25, 2026
3a2fb1b
fix(security): detect declared-marker obfuscation
mohgupta-ship-it Aug 26, 2026
db49fd8
fix(security): harden deterministic obfuscation analysis
mohgupta-ship-it Aug 30, 2026
057000d
Merge branch 'main' into codex/security-text-normalization
github-actions[bot] Aug 25, 2026
4e20377
Merge pull request #437 from NVIDIA/codex/security-hybrid-obfuscation
mohgupta-ship-it Aug 30, 2026
41eea29
fix(security): harden obfuscation controls after rebase
mohgupta-ship-it Aug 30, 2026
ede4176
fix(security): close obfuscation CI gaps
mohgupta-ship-it Aug 30, 2026
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1,526 changes: 1,516 additions & 10 deletions src/skillspector/artifacts.py

Large diffs are not rendered by default.

8 changes: 8 additions & 0 deletions src/skillspector/inspection_ledger.py
Original file line number Diff line number Diff line change
Expand Up @@ -91,6 +91,8 @@ class LedgerReason(StrEnum):
TOTAL_BYTES_LIMIT = "total_bytes_limit"
RUNTIME_LIMIT = "runtime_limit"
OUTPUT_LIMIT = "output_limit"
STATIC_PARSE_LIMIT = "static_parse_limit"
OBFUSCATED_INSTRUCTION_TEXT = "obfuscated_instruction_text"


REASON_MESSAGES: Final[dict[LedgerReason, str]] = {
Expand Down Expand Up @@ -176,6 +178,12 @@ class LedgerReason(StrEnum):
LedgerReason.TOTAL_BYTES_LIMIT: "Bundle caching reached its aggregate byte limit.",
LedgerReason.RUNTIME_LIMIT: "Inspection reached its configured runtime limit.",
LedgerReason.OUTPUT_LIMIT: "Inspection reached its configured output limit.",
LedgerReason.STATIC_PARSE_LIMIT: (
"A security-relevant expression exceeded a bounded static parser's span limit."
),
LedgerReason.OBFUSCATED_INSTRUCTION_TEXT: (
"Obfuscated instruction text could not be fully evaluated by the deterministic layer."
),
}


Expand Down
Loading
Loading