fred
8305d129a2
ci/woodpecker/pr/ci Pipeline was successful
Review findings F1-F8 (REQUEST_CHANGES) addressed: - F5: replace regex comment stripping with a string-aware lexer producing comment-free code plus accurate string/template spans (handles nesting, regex literals, escapes) - F3: prong (i) now tracks namespace imports and re-export conduits via a fixpoint over the scanned import graph - F1/F2: tagged-template exemption dropped; backlog.ts joins the infra register; capability-gated prong (iii) — driver import flags any-receiver execute/query/unsafe, factory import flags any-receiver execute/unsafe, db-shaped receiver backstop covers DI'd handles; sql.raw tracked through aliases and namespaces - F4: closed importer enumeration added for createDb/createPgliteDb; composition property of remaining register modules documented - F6: plugins/ added to scan roots - F7: per-parent slug scoping witnessed at platform_projects and workspaces - F8: dynamic-import disposition register added; stricter-than-contract stances documented in the header The review's 8 evasion samples are embedded as permanent controls run through the production analyzer, plus clean controls guarding against false positives.