salvacybersec/keyhunter
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs(05-01): complete verification foundation plan

Browse Source 
Wave 0 contracts for the verification engine are in place:
- VerifySpec extended with SuccessCodes/FailureCodes/RateLimitCodes/MetadataPaths/Body
- Finding extended with Verified/VerifyStatus/VerifyHTTPCode/VerifyMetadata/VerifyError
- findings table schema migrated with verify_* columns (fresh + legacy DBs)
- gjson dep wired as direct require
- VRFY-02, VRFY-03 marked complete
This commit is contained in:
salvacybersec
2026-04-05 15:44:20 +03:00
parent aec559d2aa
commit 177888bfa8
4 changed files with 143 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
.planning/STATE.md
View File

@@ -3,14 +3,14 @@ gsd_state_version: 1.0
milestone: v1.0
milestone_name: milestone
status: executing
stopped_at: Completed 04-05-PLAN.md
last_updated: "2026-04-05T12:29:09.228Z"
stopped_at: Completed 05-01-PLAN.md
last_updated: "2026-04-05T12:44:11.076Z"
last_activity: 2026-04-05
progress:
total_phases: 18
completed_phases: 4
total_plans: 23
completed_plans: 23
total_plans: 28
completed_plans: 24
percent: 20
---
@@ -21,12 +21,12 @@ progress:
See: .planning/PROJECT.md (updated 2026-04-04)
**Core value:** Detect leaked LLM API keys across more providers and more internet sources than any other tool, with active verification to confirm keys are real and alive.
**Current focus:** Phase 04 — input-sources
**Current focus:** Phase 05 — verification-engine
## Current Position
Phase: 5
Plan: Not started
Phase: 05 (verification-engine) — EXECUTING
Plan: 2 of 5
Status: Ready to execute
Last activity: 2026-04-05
@@ -69,6 +69,7 @@ Progress: [██░░░░░░░░] 20%
| Phase 04-input-sources P03 | 6m | 1 tasks | 2 files |
| Phase 04 P02 | 4min | 1 tasks | 3 files |
| Phase 04 P05 | 3min | 1 tasks | 2 files |
| Phase 05 P01 | 3m43s | 2 tasks | 10 files |
## Accumulated Context
@@ -91,6 +92,8 @@ Recent decisions affecting current work:
- [Phase 04]: Use 'go mod download' instead of 'go mod tidy' when bootstrapping dependencies ahead of their consumers
- [Phase 04-input-sources]: GitSource walks heads+tags+remotes+stash with per-OID blob dedup
- [Phase 04]: Introduced selectSource dispatcher with sourceFlags struct for testable CLI source routing
- [Phase 05]: Keep legacy VerifySpec ValidStatus/InvalidStatus alongside canonical SuccessCodes/FailureCodes; Effective*() helpers pick canonical-first with fallback
- [Phase 05]: Store Finding.VerifyMetadata as JSON TEXT column; legacy DBs migrated in-place via PRAGMA table_info + conditional ALTER TABLE in storage.Open()
### Pending Todos
@@ -105,6 +108,6 @@ None yet.
## Session Continuity
Last session: 2026-04-05T12:24:42.153Z
Stopped at: Completed 04-05-PLAN.md
Last session: 2026-04-05T12:44:04.063Z
Stopped at: Completed 05-01-PLAN.md
Resume file: None