Repository navigation

H16: audit the sanitizer threat model instead of continuing the carrier search - #105

Closed

byte271 wants to merge 21 commits into

mainfrom

cursor/h16-threat-model-audit-e145

Closed

H16: audit the sanitizer threat model instead of continuing the carrier search#105
byte271 wants to merge 21 commits into
mainfrom
cursor/h16-threat-model-audit-e145

Commits on Aug 26, 2026
- Record Cycle 8 mix publishability gates and fail-close product promotion.
  
  cursoragent
  and
  byte271
  committed
  c035749
Commits on Aug 27, 2026
- Harden Cycle 8 mix publishability software and evidence gates.
  
  cursoragent
  and
  byte271
  committed
  09aec3b
- Record independent DeepMind 30-key mix 0/192 and DistilGPT2 n=16.
  
  cursoragent
  and
  byte271
  committed
  0d58e3c
- Keep Unicode feasibility scans portable across Python versions.
  
  cursoragent
  and
  byte271
  committed
  b0c1fe4
- Record H12 control-mix sanitizer research without product authorization.
  
  cursoragent
  and
  byte271
  committed
  a137aec
- Record H12 Chromium pixels as host-dependent.
  
  cursoragent
  and
  byte271
  committed
  6033a7c
- Record H13 post-sanitizer mechanism class without product authorization.
  
  cursoragent
  and
  byte271
  committed
  715bf10
- Record H14 extended sanitizer classes without product authorization.
  
  cursoragent
  and
  byte271
  committed
  191422e
- Trigger CI after retargeting H14 onto main.
  
  cursoragent
  and
  byte271
  committed
  2e0e13b
- Strip comments from H14 research tools.
  
  cursoragent
  and
  byte271
  committed
  74b5192
- Classify only simple empty TrueType glyphs in the H14 scan.
  
  cursoragent
  and
  byte271
  committed
  670209a
- Record H15 sequence sanitizer classes without product authorization.
  
  cursoragent
  and
  byte271
  committed
  5b3e3e1
- Add H16 threat-model audit research tools.
  
  cursoragent
  and
  byte271
  committed
  1c7a97f
- Record H16 threat-model audit of the H12-H15 sanitizer gate.
  
  cursoragent
  and
  byte271
  committed
  b82b6fc
- Record that the corrected gate is already met by evidence on record.
  
  cursoragent
  and
  byte271
  committed
  e17f7a1
- Refresh uv lock for the uharfbuzz and tokenizers research extras.
  
  cursoragent
  and
  byte271
  committed
  2f950a2
- Fold the one real deployed sanitizer into the H16 audit.
  
  cursoragent
  and
  byte271
  committed
  0a87bfb
- Close the outstanding H16 measurement: mix still evades the real sanitizer.
  
  cursoragent
  and
  byte271
  committed
  fc3d647
- Add the carrier-free control that attributes the evasion to the carrier.
  
  cursoragent
  and
  byte271
  committed
  c490d7e
- Correct the H16 single-context overclaim by running the real 12-context scan.
  
  cursoragent
  and
  byte271
  committed
  e1cd11a
- Bind every recorded H16 figure to its artifact so overclaims cannot recur.
  
  cursoragent
  and
  byte271
  committed
  4339c8e

Commits

Commits on Aug 26, 2026

Commits on Aug 27, 2026