{ "module": "scanner", "lastUpdated": "2026-02-13T18:10:00Z", "features": { "3-bit-reachability-gate": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "canonical-node-hash-and-path-hash-recipes-for-reachability": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "cbom-cryptographic-bill-of-materials-analysis-with-post-quantum-readiness-assess": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "claim-id-generator-for-static-runtime-linkage": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "compositional-library-aware-call-graph-reachability": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "composition-recipe-api-for-sbom-determinism-verification": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "container-layout-discovery-contract": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "cross-analyzer-identity-safety-contract": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "cyclonedx-1-7-cbom-support": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "cyclonedx-1-7-native-evidence-field-population": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "dataflow-aware-diffs": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "delta-layer-scanning-engine": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "derivative-distro-mapping-for-backport-detection": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "deterministic-diff-aware-rescans": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "ebpf-capture-abstraction": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "ecosystem-specific-version-comparator-factory": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "entropy-analysis-for-binaries": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "entrytrace-unified-entrypoint-analysis-framework": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "epss-change-events-for-reanalysis-triggers": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "etw-collector-for-runtime-traces": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "evidence-privacy-controls": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "explainable-triage-ux-with-evidence-linked-findings": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "exploit-path-grouping-service": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "false-negative-drift-tracking-and-metrics": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "falsification-conditions-per-finding": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "feature-flag-gate-conditions-in-reachability-verdicts": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "finding-evidence-api-contracts": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "findingevidence-composition-api-endpoint": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "funcproof-pipeline": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "gated-triage-contracts": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "github-code-scanning-endpoints": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "ground-truth-corpus-and-benchmark-evaluator": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "ground-truth-corpus-with-reachability-tiers": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "human-approval-attestation-service": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "idempotent-attestation-submission": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "java-dependency-scope-classification": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "java-gradle-build-file-parsing": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "java-license-metadata-with-spdx-normalization": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "java-lockfile-collector-and-cli-validator": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "java-maven-parent-pom-resolution-with-property-interpolation": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "java-multi-version-conflict-detection": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "java-osgi-bundle-manifest-parsing": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "java-shaded-shadow-jar-detection": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "kubernetes-boundary-extraction-for-reachability-and-proof-analysis": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "layer-aware-sbom-diff-engine": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "layered-resolver-pipeline": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "layer-sbom-cache-with-hash-based-reuse": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "macos-bundle-inspector-with-capability-overlays": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "macos-homebrew-package-analyzer": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "macos-pkgutil-receipt-analyzer": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "material-changes-orchestrator": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "mesh-entrypoint-graph": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "model-version-change-detection": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "multi-ecosystem-vulnerability-surface-builder": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "multi-language-call-graph-extractors-and-analyzers": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "oci-ancestry-extraction": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "oci-artifact-storage-for-reachability-slices": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "oci-image-inspector-service": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "oci-layer-manifest-infrastructure-for-delta-scanning": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "offline-kit-import-and-attestation-verification": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "offline-slice-bundle-export-import": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "os-rootfs-fingerprint-and-surface-cache": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "outbox-pattern-for-event-dispatch": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "package-name-normalization-service": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "path-explanation-service-with-multi-format-rendering": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "per-layer-sbom-content-addressable-storage": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "per-layer-sbom-export-api": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "plt-iat-resolution-and-dynamic-loading-detection-for-binary-analysis": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "policy-version-binding-to-reachability-slices": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "predictive-entrypoint-risk-scoring": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "proc-snapshot-collectors": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "progressive-fidelity-scan-mode": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "proof-bundle-api-for-exploit-paths": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "python-egg-info-and-editable-install-support": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "quiet-scans-validation": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "reachability-caching-with-incremental-updates": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "reachability-mini-map-visualization-api": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "reachability-slice-dsse-predicate": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "reachability-status-classification": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "reachability-subgraph-extraction-and-proof-of-exposure": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "reachability-trace-export-endpoint-with-runtime-evidence-overlays": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "remediation-pr-generator": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "reproducible-rebuild-service": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "rpm-legacy-bdb-packages-database-fallback": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "runtime-observation-record": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "runtime-static-sbom-reconciliation": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "runtime-timeline-api": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "runtime-to-static-graph-merge-algorithm": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "runtime-witness-predicate-types": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "sarif-2-1-0-export-system": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "sbom-dependency-reachability-inference": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "sbom-sources-manager-backend": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "sbom-source-trigger-dispatch-service": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "sca-failure-catalogue-test-fixtures": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "scan-manifest-with-dsse-signing": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "scanner-analyzers": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "scanner-multi-language-license-detection-framework": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "scanner-pr-mr-evidence-annotations": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "secret-detection-tenant-configuration-api": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "semantic-entrypoint-engine": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "service-endpoint-security-analysis": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "signed-sbom-archive-format": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "signed-triage-decisions": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "slice-query-and-replay-rest-apis": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "smart-diff-material-risk-change-detection": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "speculative-execution-engine": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "stack-trace-exploit-path-view": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "suppression-witness-proof-model": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "surface-aware-reachability-analysis-with-confidence-tiers": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "surface-env-strongly-typed-environment-accessors": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "surface-fs-file-manifest-store": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "surface-secrets-provider-chain": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "surface-validation-framework": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "symbol-mappers-for-net-jvm-node-python": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "third-party-scanner-output-ingestion": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "threat-vector-inference-and-capability-detection": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "tiered-scanner-precision": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "time-to-first-signal-metrics-telemetry-and-benchmarks": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "trace-retention-and-pruning-manager": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "triage-database-schema-and-api-endpoints": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "triage-lanes": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "trigger-method-vulnerable-function-extraction": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "unified-binary-source-reachability": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "unified-evidence-endpoint": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "version-comparison-explainability-ux": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "vex-auto-generation-and-auto-downgrade": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "vex-decision-filter-with-reachability": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "vex-exception-approval-flow": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "vex-first-gating-service": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "vulnerability-first-triage-ux-with-exploit-path-grouping": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "windows-chocolatey-package-analyzer": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "windows-winsxs-manifest-analyzer": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "yarn-pnp-cache-package-parsing": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] }, "zero-day-window-tracking": { "status": "done", "tier0": "pass", "tier1": "pass", "tier2": "pass", "runs": ["run-001"] } }, "summary": { "done": 134, "not_implemented": 0, "blocked": 0, "failed": 0, "skipped": 0, "queued": 0, "checking": 0 } }