Repository navigation
Bind reviewed exceptions to the configuration they approved and reopen changed findings under new-only review.
- Emit value-free configuration digests and require a matching binding before suppressing a finding
- Mark legacy unbound, expired and changed-configuration exceptions without applying them
- Keep baseline identity stable while reporting updated configuration and rechecking it under new-only
- Return actionable report-write errors without overwriting files
Install the wheel or build from the source distribution. The tagged README contains commands, supported inputs and limitations.
Validation: platform CI and CodeQL passed before merge and again on the merged commit. The attached distributions come from the successful annotated-tag build and passed independent installed-package acceptance. SHA256SUMS.txt records the attached distribution hashes.