Initial server source import

2026-09-30 20:30:56 +03:00
commit 170dd941b9
498 changed files with 261563 additions and 0 deletions
@@ -0,0 +1,56 @@
+## ADDED Requirements
+
+### Requirement: Source-specific zero-alive retirement rule
+The system SHALL retire an exact source/query pair only when it has at least 1,000 successful completed scans, zero historically alive linked credentials, and zero pending candidate checks at the reviewed evidence cutoff.
+
+#### Scenario: Historical alive result preserves the pair
+- **WHEN** any credential linked through a candidate occurrence for the exact source/query pair has ever produced `status_group='alive'`
+- **THEN** that source/query pair SHALL remain active regardless of the credential's current status
+
+#### Scenario: Pending candidate preserves the pair
+- **WHEN** an otherwise zero-alive source/query pair has a pending or leased candidate check
+- **THEN** the pair SHALL remain active until the candidate evidence matures
+
+#### Scenario: Insufficient scan exposure preserves the pair
+- **WHEN** a zero-alive mature pair has fewer than 1,000 successful completed scans
+- **THEN** the pair SHALL remain active
+
+#### Scenario: Exact pair qualifies for retirement
+- **WHEN** the exact pair has at least 1,000 successful completed scans, zero historical alive credentials, and zero pending or leased candidates
+- **THEN** the pair SHALL qualify for reviewed retirement without affecting the same query in another source
+
+### Requirement: Rejected query evidence remains visible
+Canonical configuration SHALL retain a machine-checkable rejection record for every retired source/query pair while keeping rejected pairs absent from active query rotation.
+
+#### Scenario: Rejected pair is loaded
+- **WHEN** canonical query policy is validated
+- **THEN** every rejected entry SHALL identify its exact source, query, status `rejected_zero_alive`, evidence cutoff, successful scans, findings, unique credentials, pending candidates, historical alive credentials, and reviewed queue count
+
+#### Scenario: Active and rejected policy overlaps
+- **WHEN** the same exact source/query pair appears in both active rotation and rejected evidence
+- **THEN** policy validation SHALL fail closed
+
+#### Scenario: Rejection evidence is incomplete
+- **WHEN** a rejected entry omits or weakens the approved zero-alive evidence fields
+- **THEN** policy validation SHALL fail closed
+
+## MODIFIED Requirements
+
+### Requirement: Operational and historical authority is preserved
+Keyword retirement SHALL stop future discovery and SHALL permit existing unfenced pending/deferred targets attributed to retired exact source/query pairs to enter an audited, reversible cold state without deleting or rewriting historical authority.
+
+#### Scenario: Dedicated source sentinels remain
+- **WHEN** archive, gist, CI-log, or HuggingFace source rotations are loaded
+- **THEN** their operational sentinel queries SHALL remain configured and SHALL NOT be evaluated as interchangeable discovery keywords
+
+#### Scenario: Persisted rotation index remains valid
+- **WHEN** an existing query index exceeds a shortened query list
+- **THEN** normal modulo-based rotation SHALL select a valid configured query without a state-file edit
+
+#### Scenario: Existing backlog is preserved but held
+- **WHEN** a previously admitted unfenced target is attributed to a retired exact source/query pair and selected by reviewed policy
+- **THEN** its queue row SHALL remain present with all attribution, retry, deduplication, scan, reservation, and coverage history preserved while its status becomes unclaimable `cold`
+
+#### Scenario: Historical records remain unchanged
+- **WHEN** a zero-alive policy cold transition is applied
+- **THEN** existing target scans, findings, candidates, credentials, keycheck results, completed queue rows, and coverage records SHALL NOT be deleted or rewritten
@@ -0,0 +1,37 @@
+## ADDED Requirements
+
+### Requirement: Reviewed zero-alive backlog is held across source scopes
+The system SHALL apply the existing exact audited cold lifecycle to every approved source/platform/query scope in a reviewed zero-alive cohort.
+
+#### Scenario: Eligible rejected-query row is selected
+- **WHEN** an unfenced `pending` or `deferred` row has an exact source/platform/query absent from active policy and present in approved rejected evidence
+- **THEN** the reviewed manifest SHALL be permitted to transition the row to `cold`
+
+#### Scenario: Rejected cohort contains a fenced row
+- **WHEN** any selected row has an active queue, resolver, reservation, or Docker content lease
+- **THEN** apply SHALL fail closed without partially transitioning that manifest
+
+#### Scenario: Retired pair is rediscovered
+- **WHEN** ordinary enqueue or rediscovery encounters a cold target previously attributed to a rejected pair
+- **THEN** the target SHALL remain cold until an explicit reviewed reactivation
+
+## MODIFIED Requirements
+
+### Requirement: Stale-query selection follows canonical policy
+The system SHALL evaluate query staleness using case-sensitive exact source, platform, and query policy derived from canonical active and rejected configuration.
+
+#### Scenario: Configured query remains active
+- **WHEN** a queue row's exact source/platform/query triple remains configured in active policy
+- **THEN** automatic stale-policy planning SHALL NOT select the row
+
+#### Scenario: Attribution cannot be classified safely
+- **WHEN** query attribution is null, blank, operational, non-rotation, or belongs to an unknown source/platform pair
+- **THEN** automatic planning SHALL skip and report the row rather than inferring retirement
+
+#### Scenario: Rejected source cohort is planned
+- **WHEN** policy planning is scoped to an affected source/platform from the reviewed zero-alive cohort
+- **THEN** it SHALL include only eligible pending/deferred rows attributed to exact rejected queries and SHALL expose no target values
+
+#### Scenario: Rejected evidence and active policy disagree
+- **WHEN** rejected evidence does not match the canonical active-query omission or approved evidence identity
+- **THEN** planning and apply SHALL fail closed