Context
Filed from Track A smoke / Research nits on #83 (head 5572a1f). Not a merge blocker — Track A landed with YES-WITH-NITS.
Problem
Coverage ledger heuristics can under-credit authorization / access-control surface when the finding path is IDOR-shaped (object-level authz), so a run that did check authz may still look thin on that unit in the ledger.
Desired
When the hunter/verifier path exercises IDOR-style object access, the coverage unit(s) for authz / access-control should credit that work (or document an explicit taxonomy rule so scoring stays honest).
Notes
Source
SLM Desk + Research dogfood notes from 24 Sep 2026 smoke on #83.
Context
Filed from Track A smoke / Research nits on #83 (head
5572a1f). Not a merge blocker — Track A landed with YES-WITH-NITS.Problem
Coverage ledger heuristics can under-credit authorization / access-control surface when the finding path is IDOR-shaped (object-level authz), so a run that did check authz may still look thin on that unit in the ledger.
Desired
When the hunter/verifier path exercises IDOR-style object access, the coverage unit(s) for authz / access-control should credit that work (or document an explicit taxonomy rule so scoring stays honest).
Notes
KBotEpisodeAdapter) stays stub / parked on Track B: agentic swarm (≥10 roles) + team scoring eval #82.Source
SLM Desk + Research dogfood notes from 24 Sep 2026 smoke on #83.