Package com.tnsai.quality.security.harness

package com.tnsai.quality.security.harness

Code-review harness — agent-driven security-review pipeline (TNS-291).

Pluggable, idempotent, fan-out-safe pipeline that takes a codebase, runs static matchers as a pre-filter, then invokes a review agent on each candidate file to produce structured findings.

Inspired by Vercel-Labs' deepsec project; pattern adapted, code not ported.

Since:

0.10.0 (TNS-291)

See Also:

• CodeReviewPipeline

Related Packages

Package	Description
com.tnsai.quality.security
com.tnsai.quality.security.audit
com.tnsai.quality.security.llm	LLM-specific safety guardrails for prompt injection and input manipulation.
com.tnsai.quality.security.moderation	Content moderation for agent inputs, outputs, and tool results.
com.tnsai.quality.security.validation	Input validation framework for agent security boundaries.

Class	Description
AgentRun	History entry for one ReviewAgentSpi invocation against a single FileRecord (TNS-291).
BuiltInMatchers	Factory for the framework's built-in CWE matchers (TNS-291).
CodeReviewPipeline	Top-level orchestrator for the agent-driven code-review pipeline (TNS-291).
CodeReviewPipeline.Builder	Builder for CodeReviewPipeline.
EnrichStage	The enrich stage (TNS-291).
ExportFormat	Output formats supported by the export stage (TNS-291).
ExportStage	The export stage (TNS-291).
FileRecord	Per-file canonical state in the code-review pipeline (TNS-291).
FileSystemPipelineStateStore	Disk-backed PipelineStateStore (TNS-291 phase 2).
MatcherSpi	SPI for static vulnerability matchers — regex / AST / dependency-version checks that pre-filter files for the agent stage (TNS-291).
MatcherSpi.Hit	One location matched by a MatcherSpi.
PipelineContext	Read-only context passed to every PipelineStage (TNS-291).
PipelineStage	Pipeline stage SPI (TNS-291).
PipelineStateStore	Persistence layer for the code-review pipeline (TNS-291).
PipelineStateStore.RunMetadata	Audit-trail entry for one stage execution.
ProcessStage	The process stage (TNS-291).
RegexMatcher	Generic regex-based MatcherSpi (TNS-291).
RevalidateStage	The revalidate stage (TNS-291).
ReviewAgent	Default ReviewAgentSpi backed by an LLMClient (TNS-291).
ReviewAgentSpi	SPI for an agent backend that analyses a FileRecord and returns structured ReviewFindings (TNS-291).
ReviewAgentSpi.ReviewContext	Read-only context handed to ReviewAgentSpi.runOnFile(com.tnsai.quality.security.harness.FileRecord, com.tnsai.quality.security.harness.ReviewAgentSpi.ReviewContext).
ReviewFinding	One vulnerability discovered by the code-review pipeline (TNS-291).
ScanStage	The scan stage (TNS-291).
Severity	Severity classification for a ReviewFinding (TNS-291).
StageResult	Outcome of one PipelineStage execution (TNS-291).