TimeCodeSecurity v1.0.1: Deterministic AST & Closed-Loop Remediation

[kushigaur3103-svg]

🚀 What's New in v1.0.1

🛠️ Dedicated CLI Remediation Discovery

• Streamlined --fix Workflow: tcs scan <target> --fix now natively discovers auto-fixable vulnerabilities originating from uncalled function parameters without requiring the --audit-all flag.
• Preserved Conservative Scanning: Standard scans (tcs scan .) remain strictly high-signal with zero noise on uncalled library parameters.

🔍 Proof Graph Dataflow & Inversion Fixes

• Resolved Sink-as-Source Bug: Sinks (like subprocess.run) are no longer misattributed as taint sources. Uncalled function parameters (e.g. host (ping)) are accurately rendered as [SOURCE] HOP 1.
• Dynamic UI Confidence Badging: Web UI proof graph banners now dynamically bind to finding confidence — displaying POTENTIAL DATAFLOW PATH (Amber) for speculative flows and CONFIRMED PROOF PATH (Red) for verified taint flows.

🛡️ Vector D Closed-Loop Remediation Engine

• Two-Gate Compiler Invariant: Every automated patch is validated against AST syntax compilation (Invariant D-1) and verified via closed-loop in-memory re-scan (Invariant D-2) before touching disk.
• 100% Test Suite Verification: Passed all 19 workflow regression scenarios, 5 adversarial deep gauntlets (multi-finding collision, idempotency, CRLF preservation), and core Phase 9 SAST tests (110/110 green).

---

📦 Quick Install & Usage

# Install directly via Git
pip install git+[https://github.com/kushigaur3103-svg/time-code-security.git](https://github.com/kushigaur3103-svg/time-code-security.git)

# Safe dry-run preview (displays unified diff without modifying disk)
tcs scan ./my_project --fix

# Atomically apply verified patches to disk
tcs scan ./my_project --fix --write


<hr /><em>This discussion was created from the release <a href='https://github.com/kushigaur3103-svg/time-code-security/releases/tag/v1.0.1'>TimeCodeSecurity v1.0.1: Deterministic AST & Closed-Loop Remediation</a>.</em>