Independently rerun an unchanged bug reproduction package before repair. Check whether compiler diagnostics or runtime assertions support the exact reported claim, then preserve execution evidence and record a confirmed, unconfirmed, or inconclusive judgment.
中文简介正在准备中。当前显示英语简介。
Use when a bug PoC package needs an independent rerun and judgment before patching.
安装前可以查看交给 AI 代理的指令内容。
Use after reproduce-bug has supplied a finding and PoC package. Read the
record contract.
Before target commands, follow its project guidance.
Do not use to repair a PoC, develop a patch, or infer reproduction from the reproducer's narrative.
Read finding.json, the reproduction's proof type, commands, any PoC, and raw receipts.
Do not read the reproducer's transcript.
Rerun the same baseline compiler command for compile failures, or rebuild and rerun
the unchanged runtime PoC and planned scoped inputs. Save stdout, stderr, exit
status and timing in validate/receipts/. If an observation is unreliable,
return inconclusive instead of inferring either presence or absence.
Decide whether the target diagnostic or runtime assertion demonstrates the exact claim and
violates the stated invariant. Write validate.json as confirmed,
not_confirmed, or inconclusive with a short reason and agent identity.
{
"schema_version": 1,
"outcome": "confirmed",
"agent": "validator-1",
"reason": "The unchanged PoC reached the assertion and demonstrated the claim."
}
validate/ directory with
uv run --no-project <script> manifest <validate-step-dir>, then run the
record checker. Return
the package without editing the PoC or finding.| Shortcut | Required action |
|---|---|
| Fix the PoC to make the claim work. | Mark it inconclusive and explain why. |
| Trust the reproducer's conclusion. | Rerun the unchanged package independently. |
还没有评价。欢迎分享你的使用感受。
无需登录即可发表。欢迎分享使用感受、提问，或说明在哪些环境下无法运行。
还没有评论。来写第一条吧。
Build and test code with AddressSanitizer, a tool that detects invalid memory access during execution. Configure checks for C/C++ and unsafe Rust, investigate crash reports, and adjust settings for fuzzing, or testing with generated inputs.
中文简介正在准备中。当前显示英语简介。
Assess source code and live reproduction evidence to decide whether a change introduced a regression, a newly caused defect. Record supported conclusions, exclusions, severity, and unresolved gaps in an evidence-linked decision file.
中文简介正在准备中。当前显示英语简介。
Sets up AFL++ to test C/C++ programs with varied generated inputs, a technique called fuzzing. Covers running tests across CPU cores, monitoring progress, reducing input collections, and reproducing crashes for investigation.
中文简介正在准备中。当前显示英语简介。
Audits GitHub Actions workflows that run AI coding agents. Traces how attacker-controlled content reaches prompts, checks permissions and sandbox settings, and reports evidence, severity, and fixes for prompt injection and related configuration risks.
中文简介正在准备中。当前显示英语简介。
Reviews Algorand smart contracts written in TEAL or PyTeal for 11 vulnerability patterns. Produces a complete coverage table and findings with code references, severity ratings, and suggested fixes, with optional automated checks using Tealer.
中文简介正在准备中。当前显示英语简介。
Set up Atheris to test Python code and C extensions with automatically varied inputs. It guides test harness creation, coverage tracking to explore more code, and AddressSanitizer setup for finding memory errors.
中文简介正在准备中。当前显示英语简介。