feat: backport config-driven run scoping and report filtering

Cherry-pick of upstream Shannon PR #326. Adds vuln_classes subset
selection, exploit toggle, code_path avoid enforcement via SDK deny
rules, deterministic findings rendering when exploit is disabled,
report filtering (min_severity, min_confidence, guidance), and
rules_of_engagement config field.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

This commit is contained in:

Chris Farhood

2026-05-20 00:45:35 +00:00

committed by

Hugh Commit [agent]

parent 70af2b12db

commit 85bcb27860

30 changed files with 1116 additions and 170 deletions

apps/worker/prompts/shared/_rules-of-engagement.txt

View File

@@ -0,0 +1,3 @@
 <rules_of_engagement>
 {{RULES_OF_ENGAGEMENT}}
 </rules_of_engagement>