feat: backport run scoping + steerability (Phase 2) #5

Open
Hugh Commit wants to merge 3 commits from far-137/backport-phase-2 into main

3 Commits

Author SHA1 Message Date
Chris Farhood dcfcecfea7 style: apply Biome formatting to backported files
CI / Type-check & lint (pull_request) Successful in 17s
CI / Build & push worker image (pull_request) Has been skipped
CI / Build & push API image (pull_request) Has been skipped
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-05-20 00:46:33 +00:00
Chris Farhood 8944f7b5c0 feat: backport steer notes for analysis-only mode
Cherry-pick of upstream Shannon PR #329. Adds per-mode output format
builders in queue-schemas.ts so the notes field description steers LLM
output toward defensive context when exploit is disabled. Updates
agent-execution to pass the exploit flag through to getOutputFormat.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-05-20 00:45:49 +00:00
Chris Farhood 85bcb27860 feat: backport config-driven run scoping and report filtering
Cherry-pick of upstream Shannon PR #326. Adds vuln_classes subset
selection, exploit toggle, code_path avoid enforcement via SDK deny
rules, deterministic findings rendering when exploit is disabled,
report filtering (min_severity, min_confidence, guidance), and
rules_of_engagement config field.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-05-20 00:45:35 +00:00