Publish curated ITWorx-ModelForge source from 990401737f96c8d46a9f7b0d84994516cadcb6a0
This commit is contained in:
Public Source Publisher committed
1 parent
7082ab955a
commit
848f0d8f8a
434 files changed
+67298
-4315
No files matched your search
@@ -0,0 +1,17 @@
|
||||
capability: creative.resource
|
||||
version: 1
|
||||
description: Cross-project capacity coordination for creative workloads executed by registered external providers.
|
||||
input_schema: {type: object}
|
||||
output_schema: {type: object}
|
||||
modalities: {input: [text], output: [json]}
|
||||
languages: [nl, en]
|
||||
streaming: false
|
||||
structured_output: true
|
||||
quality_metrics: [admission_correctness, allocation_reconciliation]
|
||||
upgrade_class: behavioral
|
||||
fallback: {allowed: false, mode: hard_fail}
|
||||
privacy: {classification: confidential, allow_persistence: false, allow_logging_payloads: false, allow_network_egress: false}
|
||||
resources: {accelerator_required: true, cpu_fallback_allowed: false}
|
||||
production_priority: interactive
|
||||
default_residency: load_on_demand
|
||||
estate: {category: GENERATION, purpose: Cross-project GPU coordination, stability: experimental, resource_class: EXCLUSIVE_GPU, evaluation_type: generation, consumers: [privatemuse], payload_limits: {max_bytes: 16384, max_batch_count: 1}}
|
||||
@@ -1,23 +1,6 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"reviewed_at": "2026-09-01",
|
||||
"review_reference": "docs/quality/V1_2_1_RELEASE_VERIFICATION.md",
|
||||
"vulnerabilities": [
|
||||
{"vulnerability_id": "CVE-2026-41992", "package": "gzip", "installed_version": "1.13-1", "severity": "HIGH"},
|
||||
{"vulnerability_id": "CVE-2026-54369", "package": "libacl1", "installed_version": "2.3.2-2+b1", "severity": "HIGH"},
|
||||
{"vulnerability_id": "CVE-2025-69720", "package": "libncursesw6", "installed_version": "6.5+20250216-2", "severity": "HIGH"},
|
||||
{"vulnerability_id": "CVE-2026-11822", "package": "libsqlite3-0", "installed_version": "3.46.1-7+deb13u1", "severity": "HIGH"},
|
||||
{"vulnerability_id": "CVE-2026-11824", "package": "libsqlite3-0", "installed_version": "3.46.1-7+deb13u1", "severity": "HIGH"},
|
||||
{"vulnerability_id": "CVE-2025-69720", "package": "libtinfo6", "installed_version": "6.5+20250216-2", "severity": "HIGH"},
|
||||
{"vulnerability_id": "CVE-2025-69720", "package": "ncurses-base", "installed_version": "6.5+20250216-2", "severity": "HIGH"},
|
||||
{"vulnerability_id": "CVE-2025-69720", "package": "ncurses-bin", "installed_version": "6.5+20250216-2", "severity": "HIGH"},
|
||||
{"vulnerability_id": "CVE-2026-13221", "package": "perl-base", "installed_version": "5.40.1-6", "severity": "CRITICAL"},
|
||||
{"vulnerability_id": "CVE-2026-42496", "package": "perl-base", "installed_version": "5.40.1-6", "severity": "CRITICAL"},
|
||||
{"vulnerability_id": "CVE-2026-8376", "package": "perl-base", "installed_version": "5.40.1-6", "severity": "CRITICAL"},
|
||||
{"vulnerability_id": "CVE-2026-42497", "package": "perl-base", "installed_version": "5.40.1-6", "severity": "HIGH"},
|
||||
{"vulnerability_id": "CVE-2026-48962", "package": "perl-base", "installed_version": "5.40.1-6", "severity": "HIGH"},
|
||||
{"vulnerability_id": "CVE-2026-57432", "package": "perl-base", "installed_version": "5.40.1-6", "severity": "HIGH"},
|
||||
{"vulnerability_id": "CVE-2026-57433", "package": "perl-base", "installed_version": "5.40.1-6", "severity": "HIGH"},
|
||||
{"vulnerability_id": "CVE-2026-9538", "package": "perl-base", "installed_version": "5.40.1-6", "severity": "HIGH"}
|
||||
]
|
||||
"reviewed_at": "2026-09-12",
|
||||
"review_reference": "docs/quality/RC_NODE_IMAGE_REMEDIATION.md",
|
||||
"vulnerabilities": []
|
||||
}
|
||||
@@ -0,0 +1,27 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"target_version": "1.3.0-rc.1",
|
||||
"baseline_commit": "9b61f23ea3ed102ec58c9966c027b50ebd6a22b6",
|
||||
"ledger": "docs/quality/RC_GAP_MATRIX.md",
|
||||
"roadmap": "docs/product/RC_EXECUTION_ROADMAP.md",
|
||||
"packets": [
|
||||
{"id":"P00","depends_on":[],"gaps":["RC-SEC-01","RC-SEC-02","RC-DEL-01","RC-DB-01"]},
|
||||
{"id":"P01","depends_on":["P00"],"gaps":["RC-CFG-01","RC-CFG-02","RC-CFG-03","RC-AUTH-01","RC-AUTH-02"]},
|
||||
{"id":"P02","depends_on":["P00","P01"],"gaps":["RC-CAP-01","RC-SUP-01"]},
|
||||
{"id":"P03","depends_on":["P02","P06"],"gaps":["RC-LAB-01"]},
|
||||
{"id":"P04","depends_on":["P03"],"gaps":["RC-LAB-02","RC-LAB-03"]},
|
||||
{"id":"P05","depends_on":["P04"],"gaps":["RC-LIF-01","RC-LIF-02"]},
|
||||
{"id":"P06","depends_on":["P00","P01"],"gaps":["RC-NOD-01","RC-NOD-02","RC-NOD-03","RC-SCH-01","RC-SCH-02"]},
|
||||
{"id":"P07","depends_on":["P00","P01","P03","P06"],"gaps":["RC-OPS-01","RC-OPS-02","RC-OPS-03","RC-OPS-04","RC-OPS-05"]},
|
||||
{"id":"P08","depends_on":["P01","P07"],"gaps":["RC-REC-01","RC-UPD-01","RC-UPD-02"]},
|
||||
{"id":"P09","depends_on":["P01","P02","P03","P04","P05","P06","P07","P08"],"gaps":["RC-SEA-01","RC-UX-01","RC-UX-02","RC-UX-03","RC-UX-04"]},
|
||||
{"id":"P10","depends_on":["P01","P02","P03","P04","P05","P06","P07","P08"],"gaps":["RC-API-01","RC-API-02"]},
|
||||
{"id":"P11","depends_on":["P09","P10"],"gaps":["RC-SEC-03","RC-DEL-02"]},
|
||||
{"id":"P15A","depends_on":["P11"],"gaps":["RC-REL-01","RC-REL-04"]},
|
||||
{"id":"P12","depends_on":["P00","P01","P06","P11","P15A"],"gaps":["RC-RC-01"]},
|
||||
{"id":"P13","depends_on":["P02","P03","P04","P05","P06","P12"],"gaps":["RC-PRJ-01","RC-PRJ-02","RC-PRJ-03","RC-CON-01","RC-CON-02"]},
|
||||
{"id":"P14","depends_on":["P07","P08","P09","P10","P11","P12","P13"],"gaps":["RC-QUAL-01","RC-QUAL-02","RC-QUAL-03","RC-QUAL-04","RC-QUAL-05","RC-QUAL-06"]},
|
||||
{"id":"P15","depends_on":["P11","P12","P13","P14","P15A"],"gaps":["RC-REL-02","RC-REL-03","RC-DOC-01"]}
|
||||
],
|
||||
"deferred_gaps": ["RC-POST-01","RC-POST-02","RC-POST-03","RC-POST-04","RC-POST-05"]
|
||||
}
|
||||
@@ -0,0 +1,4 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"accepted_risks": []
|
||||
}
|
||||
@@ -0,0 +1,13 @@
|
||||
# Hash-locked release and CI build toolchain, verified against the official PyPI JSON API.
|
||||
# msgpack hashes cover CPython 3.11-3.14 glibc x86_64/aarch64 and CPython 3.12-3.14 Alpine musl x86_64/aarch64.
|
||||
editables==0.5 --hash=sha256:61e5ffa82629e0d8bfe09bc44a07db3c1ab8ed1ce78a6980732870f19b5e7d4c
|
||||
hatchling==1.32.4 --hash=sha256:08ecf7548fb48205e7f213d70c71e67b8271b7242093dc3f1da578b42c734a2c
|
||||
msgpack==1.2.2 --hash=sha256:f11e09f10210a91c169e39c7a5a1f9090eaa73ad75555fafad5023c3053c47ba --hash=sha256:b9b0c1f2aa7b0026b4bd50718100e8b04175e4f36e160aa852502377b5e572e7 --hash=sha256:77c2e018417dc1d66f235e383877ee885b60ade9d29e494dd581e08af2cb1923 --hash=sha256:90986cc9aab9d7d1d8f38bcbf65d3f7ac83bdd90c35765db7d691b4829698cba --hash=sha256:d24b38a825bcca41bb956de50eb98451ef291304a8607fad99e619043d3e79b9 --hash=sha256:1814f92306ae7862908e9ece7cfd90e0dc87ded3e89b6ae7ffdd1175d6376fdc --hash=sha256:4b554d8164ebb526892194f71dcd96ef1fefe0c250087498785d3ffc04a80be3 --hash=sha256:3e915d390d7068b257ca8b62f3fc59fad135c8631d1017ab03b0b924b07c5367 --hash=sha256:4d9a562aec0a92fe536da2e533d313b3d2a6b929157b1dec7ff623446dc0a8ab --hash=sha256:682804bf31e43d46e51a9a33bd575b51e839d715ce6bd5612c055f7b28ad637b --hash=sha256:73b0e05c32c3cfc3cd84994908e57430c0ebc6813abf905d3f18ff115d54df3f --hash=sha256:8dc4487097571f7311188c3eca2a3e86cd1f1db4c37c7a017bcc3fd38486cbfe --hash=sha256:b8dd6c71d20c28d2d0eb0c51e7cccf3584afde3b1364f6629596186c9025bd54 --hash=sha256:ccfd880988f8438d1c91c77d7edc58e70f4d2012e999167bc154c64c6f06ea6b
|
||||
packaging==26.3 --hash=sha256:d7193f7c8e4e93f444fde0262bf90af30e16fa0ad0ad44cb553c87339b23cd1c
|
||||
pathspec==1.1.1 --hash=sha256:a00ce642f577bf7f473932318056212bc4f8bfdf53128c78bbd5af0b9b20b189
|
||||
pip==26.2.1 --hash=sha256:71138adf1f4ca900cdb7d289c21b7494329f2332b6d85f0e1c42108c0384ed3e
|
||||
pluggy==1.6.0 --hash=sha256:e920276dd6813095e9377c0bc5566d94c932c33b27a3e3945d8389c374dd4746
|
||||
setuptools==84.0.0 --hash=sha256:51a52592b3b99e102b609654876bd65f19f999935166d1352678931132b0c670
|
||||
tomlkit==0.14.0 --hash=sha256:592064ed85b40fa213469f81ac584f67a4f2992509a7c3ea2d632208623a3680
|
||||
trove-classifiers==2026.9.21.13 --hash=sha256:8b1ff4f9c191b1040b71c37f1e445ab99732911e3cd91de52838453a854d7a17
|
||||
wheel==0.48.0 --hash=sha256:3217dcc807155e45db462d7ef2431f5ddda0d7273b700d05a67b271ceb1287ab
|
||||
@@ -0,0 +1,24 @@
|
||||
[
|
||||
{
|
||||
"scanner": "gitleaks",
|
||||
"rule_id": "generic-api-key",
|
||||
"fingerprint_sha256": "b25524088aadca143f5b33de32f1af64497427a4b465a5caf0ce1e49bf7c16d2",
|
||||
"classification": "FALSE_POSITIVE",
|
||||
"owner": "ModelForge security owner",
|
||||
"classified_on": "2026-09-30",
|
||||
"review_on": "2026-10-30",
|
||||
"tracking": "RC-DEL-02 supply-chain gate review",
|
||||
"reason": "Historical unit-test-only AES fixture; the decoded bytes are synthetic test material and were never a credential or production backup key."
|
||||
},
|
||||
{
|
||||
"scanner": "gitleaks",
|
||||
"rule_id": "generic-api-key",
|
||||
"fingerprint_sha256": "6114f9e29b47c068fb0913c6465915044ff9fef7dcf53d4a60ff1776c8404ddb",
|
||||
"classification": "FALSE_POSITIVE",
|
||||
"owner": "ModelForge security owner",
|
||||
"classified_on": "2026-09-30",
|
||||
"review_on": "2026-10-30",
|
||||
"tracking": "RC-DEL-02 supply-chain gate review",
|
||||
"reason": "Historical unit-test-only AES fixture; the decoded bytes are synthetic test material and were never a credential or production backup key."
|
||||
}
|
||||
]
|
||||
@@ -0,0 +1,34 @@
|
||||
# Fully resolved pip-audit 2.10.1 scanner toolchain for CPython 3.12 / Linux x86_64.
|
||||
# Generated only from https://pypi.org/simple with:
|
||||
# python -m pip download --only-binary=:all: --platform manylinux2014_x86_64 \
|
||||
# --python-version 312 --implementation cp --abi cp312 pip-audit==2.10.1
|
||||
# Every selected official wheel is pinned and hash-checked again by pip at managed-gate install.
|
||||
boolean.py==5.0 --hash=sha256:ef28a70bd43115208441b53a045d1549e2f0ec6e3d08a9d142cbc41c1938e8d9
|
||||
cachecontrol==0.14.4 --hash=sha256:b7ac014ff72ee199b5f8af1de29d60239954f223e948196fa3d84adaffc71d2b
|
||||
certifi==2026.7.22 --hash=sha256:62f22742b58a1a33014a2b6b706588a8d7e2a88ae7bd1a6ebe8c992928483775
|
||||
charset-normalizer==3.5.1 --hash=sha256:b9af956078716df40d985fb0dfeb2c2120c5ca92ba4ff4b388acfd01cdc14d08
|
||||
cyclonedx-python-lib==11.12.0 --hash=sha256:0e807521a921a5c3cb8ce1153f8a61d29eedfe76a46aac2796b7c6b573391a54
|
||||
defusedxml==0.7.1 --hash=sha256:a352e7e428770286cc899e2542b6cdaedb2b4953ff269a210103ec58f6198a61
|
||||
filelock==3.32.4 --hash=sha256:22e58ca3b1ae3b98993b762d7338367ae64fe50252bf78d59da3bfebcdf1cedd
|
||||
idna==3.19 --hash=sha256:815e7be7a7806d54abb586dc943addc79e8b2ee16915059658cbeff4b1b43bf4
|
||||
license-expression==30.4.4 --hash=sha256:421788fdcadb41f049d2dc934ce666626265aeccefddd25e162a26f23bcbf8a4
|
||||
markdown-it-py==4.2.0 --hash=sha256:9f7ebbcd14fe59494226453aed97c1070d83f8d24b6fc3a3bcf9a38092641c4a
|
||||
mdurl==0.1.2 --hash=sha256:84008a41e51615a49fc9966191ff91509e3c40b939176e643fd50a5c2196b8f8
|
||||
msgpack==1.2.2 --hash=sha256:77c2e018417dc1d66f235e383877ee885b60ade9d29e494dd581e08af2cb1923
|
||||
packageurl-python==0.17.6 --hash=sha256:31a85c2717bc41dd818f3c62908685ff9eebcb68588213745b14a6ee9e7df7c9
|
||||
packaging==26.3 --hash=sha256:d7193f7c8e4e93f444fde0262bf90af30e16fa0ad0ad44cb553c87339b23cd1c
|
||||
pip==26.2.1 --hash=sha256:71138adf1f4ca900cdb7d289c21b7494329f2332b6d85f0e1c42108c0384ed3e
|
||||
pip-api==0.0.34 --hash=sha256:8b2d7d7c37f2447373aa2cf8b1f60a2f2b27a84e1e9e0294a3f6ef10eb3ba6bb
|
||||
pip-audit==2.10.1 --hash=sha256:99ef3f600a317c1945f1e89e227ef26e1c2d618429b8bd3fa6f4f7c440c4611a
|
||||
pip-requirements-parser==32.0.1 --hash=sha256:4659bc2a667783e7a15d190f6fccf8b2486685b6dba4c19c3876314769c57526
|
||||
platformdirs==4.11.5 --hash=sha256:89f8d42695853b89c7170bd49bc3dc593f98a71e695ede88e06a3b247bc4563b
|
||||
py-serializable==2.1.0 --hash=sha256:b56d5d686b5a03ba4f4db5e769dc32336e142fc3bd4d68a8c25579ebb0a67304
|
||||
pygments==2.21.0 --hash=sha256:2363c69b61c4a97c838da3b130dcd6468f4848992b21a82f2a63ec34377137d9
|
||||
pyparsing==3.3.2 --hash=sha256:850ba148bd908d7e2411587e247a1e4f0327839c40e2e5e6d05a007ecc69911d
|
||||
requests==2.34.2 --hash=sha256:2a0d60c172f83ac6ab31e4554906c0f3b3588d37b5cb939b1c061f4907e278e0
|
||||
rich==15.0.0 --hash=sha256:33bd4ef74232fb73fe9279a257718407f169c09b78a87ad3d296f548e27de0bb
|
||||
sortedcontainers==2.4.0 --hash=sha256:a163dcaede0f1c021485e957a39245190e74249897e2ae4b2aa38595db237ee0
|
||||
tomli==2.4.1 --hash=sha256:136443dbd7e1dee43c68ac2694fde36b2849865fa258d39bf822c10e8068eac5
|
||||
tomli-w==1.2.0 --hash=sha256:188306098d013b691fcadc011abd66727d3c414c571bb01b1a174ba8c983cf90
|
||||
typing-extensions==4.16.0 --hash=sha256:481caa481374e813c1b176ada14e97f1f67a4539ce9cfeb3f350d78d6370c2e8
|
||||
urllib3==2.7.0 --hash=sha256:9fb4c81ebbb1ce9531cce37674bbc6f1360472bc18ca9a553ede278ef7276897
|
||||
Reference in new issue
Block a user