redact-secret · Evaluation · Qualification
aws-secret-access-key
Taxonomy families: aws · IAM user secret access key. The status and its evidence, then what each scanner recorded per population.
Support status of the product
Provisional The product’s qualification, derived by the adapter. It is not a scanner observation.
- Route
- No route
- Evidence tier
- T2
- Evidence basis
- corroborated
- Contract tier
- T2
- Fixture profile claimed
- context-constrained-empirical
- Fixture profile cells met
- context-constrained-empirical
Why the status is not stable
- metamorphic.criticalFailures: 7 > 0 — A metamorphic invariant violation (for example, detection lost after an envelope-preserving transform) shows the detector is not robust to construction, independent of how many cases were run.
- mutation.unresolvedCritical: 1 > 0 — An unresolved critical mutation finding is a fixture-versus-detector disagreement nobody has reviewed yet; tier or sample size cannot substitute for that review.
- differential.unresolvedContractDisagreements: 6 > 0 — An unresolved disagreement with a peer scanner over what the provider contract requires means the contract itself may be wrong; stable requires it settled.
Evidence the status was judged on
Floors and fixture-profile cells are read from public-evidence-snapshot alone; a gate reads each gate-bearing population on its own.
- Scored cases
- 64
- Positive cases
- 21
- Positive context axes
- 14
- Benign controls
- 23
- Benign control axes
- 6
- Twin pairs
- 20
- Metamorphic critical failures
- 7
- Mutation unresolved critical
- 1
- Differential unresolved disagreements
- 6
Zero-tolerance gates
The classifier receives the worst gate-bearing population, never a sum. Each population is shown on its own.
| Population | Twin pairs that did not discriminate | Benign controls flagged |
|---|---|---|
public-evidence-snapshot | 0 of 20 | 0 of 23 |
regression-corpus | No pair | No control |
Scanner observations
What each scanner recorded for this family, per population. These are counts and carry no support status; a case that is pending or not measured is not a miss.
| Population | Scanner | Cases | Positive spans | Span outcomes | Leaked | Benign controls flagged | Twin pairs discriminated | Pending / not measured |
|---|---|---|---|---|---|---|---|---|
policy-corpuspolicy route | flare-redact | 0 | No case | No case in this population | No positive span | No control | No pair | None |
policy-corpuspolicy route | gitleaks | 0 | No case | No case in this population | No positive span | No control | No pair | None |
policy-corpuspolicy route | redact-secret | 0 | No case | No case in this population | No positive span | No control | No pair | None |
policy-corpuspolicy route | trufflehog | 0 | No case | No case in this population | No positive span | No control | No pair | None |
public-evidence-snapshotfloors and gates | flare-redact | 64 | 28 | EXACT 22 · MISS 6 | 6 spans · 248 bytes | 1 of 23 | 17 of 20 | None |
public-evidence-snapshotfloors and gates | gitleaks | 64 | 28 | EXACT 13 · MISS 15 | 15 spans · 608 bytes | 0 of 23 | 16 of 20 | None |
public-evidence-snapshotfloors and gates | redact-secret | 64 | 28 | EXACT 27 · MISS 1 | 1 spans · 48 bytes | 0 of 23 | 20 of 20 | None |
public-evidence-snapshotfloors and gates | trufflehog | 64 | 28 | EXACT 2 · MISS 26 | 26 spans · 1,048 bytes | 0 of 23 | 2 of 20 | None |
regression-corpusgates | flare-redact | 0 | No case | No case in this population | No positive span | No control | No pair | None |
regression-corpusgates | gitleaks | 0 | No case | No case in this population | No positive span | No control | No pair | None |
regression-corpusgates | redact-secret | 0 | No case | No case in this population | No positive span | No control | No pair | None |
regression-corpusgates | trufflehog | 0 | No case | No case in this population | No positive span | No control | No pair | None |
Cases
Each case of this family, per population, with what every scanner recorded for it and the case’s own facts.