fix(taint): track sensitive data through reflective urllib sinks - #589

Open

agentsope wants to merge 25 commits into

NVIDIA:mainfrom

agentsope:test/586-network-reflection-repro

Commits on Sep 19, 2026

test: cover constructed network reflection from issue 586
agentsope
committed
f764e27
test: assert published finding match for reflection regression
agentsope
committed
e9e8697
test: distinguish reflection findings from verdict policy
agentsope
committed
47fb8e4
test: specify reflective network taint resolution
agentsope
committed
c647510
fix(taint): resolve constructed reflective network sinks
agentsope
committed
ad2bbb2
test: verify reflective exfiltration through report pipeline
agentsope
committed
46ad1ad
style: format reflective sink resolver
agentsope
committed
a7feca4
test: reject stale reflective sink aliases
agentsope
committed
6c44837
fix(taint): invalidate reassigned reflective handles
agentsope
committed
fa24596
test: scope reflective sink bindings by call site
agentsope
committed
2a411ce
fix(taint): scope reflective handles to call sites
agentsope
committed
16eb727
style: define async binding visitor explicitly
agentsope
committed
df059a3
fix(taint): separate scope shadowing from expression binding
agentsope
committed
f130449
test: keep class bindings out of method scope
agentsope
committed
9b17c25
fix(taint): isolate reflective class namespaces
agentsope
committed
bfd8be7
test: focus issue 586 coverage on tainted reflection
agentsope
committed
e427ae2
test: cover shadowed importlib helpers
agentsope
committed
050d267
fix(taint): resolve importlib helpers within lexical scope
agentsope
committed
1d8a648
fix(taint): model reflective bindings across scopes
agentsope
committed
a797b06

Commits on Sep 22, 2026

fix(taint): collect deletion and pattern capture locals
agentsope
committed
0a8660e

Commits on Sep 23, 2026

fix(taint): resolve reflective calls in execution order
agentsope
committed
2bf6d99
fix(taint): invalidate rebound function definitions
agentsope
committed
cddfb2b

Commits on Sep 26, 2026

fix(taint): preserve reflective call semantics
agentsope
committed
1c3bce4

Commits on Oct 4, 2026

fix(taint): retain live closure and external binding effects
agentsope
committed
8aed90b

Commits on Oct 5, 2026

fix(taint): propagate reflective aliases and comprehension bindings
agentsope
committed
51787ac