redact-secret · Evaluation · Qualification
vercel-app-refresh-token
Taxonomy families: vercel · App refresh token. The status and its evidence, then what each scanner recorded per population.
Support status of the product
Provisional The product’s qualification, derived by the adapter. It is not a scanner observation.
- Route
- No route
- Evidence tier
- T2
- Evidence basis
- corroborated
- Contract tier
- T2
- Fixture profile claimed
- stable-empirical
- Fixture profile cells met
- arrival-provisional, stable-documented
Why the status is not stable
- empirical.minimumTwinPairs: 5 < 8 — Eight independently authored twin pairs complete the 40-fixture empirical profile.
- twinFailures: 1 > 0 — A twin failure is a recorded false negative on the exact discrimination this project exists to make; stable tolerates none, however small the sample.
- mutation.unresolvedCritical: 2 > 0 — An unresolved critical mutation finding is a fixture-versus-detector disagreement nobody has reviewed yet; tier or sample size cannot substitute for that review.
- fixtureProfile stable-empirical: 37 total fixtures < 40 (3 short)
- fixtureProfile stable-empirical: 5 twin pairs < 8 (3 short)
Evidence the status was judged on
Floors and fixture-profile cells are read from public-evidence-snapshot alone; a gate reads each gate-bearing population on its own.
- Scored cases
- 37
- Positive cases
- 18
- Positive context axes
- 10
- Benign controls
- 14
- Benign control axes
- 5
- Twin pairs
- 5
- Metamorphic critical failures
- 0
- Mutation unresolved critical
- 2
- Differential unresolved disagreements
- 0
Zero-tolerance gates
The classifier receives the worst gate-bearing population, never a sum. Each population is shown on its own.
| Population | Twin pairs that did not discriminate | Benign controls flagged |
|---|---|---|
public-evidence-snapshot | 1 of 5 | 0 of 14 |
regression-corpus | No pair | No control |
Scanner observations
What each scanner recorded for this family, per population. These are counts and carry no support status; a case that is pending or not measured is not a miss.
| Population | Scanner | Cases | Positive spans | Span outcomes | Leaked | Benign controls flagged | Twin pairs discriminated | Pending / not measured |
|---|---|---|---|---|---|---|---|---|
policy-corpuspolicy route | flare-redact | 0 | No case | No case in this population | No positive span | No control | No pair | None |
policy-corpuspolicy route | gitleaks | 0 | No case | No case in this population | No positive span | No control | No pair | None |
policy-corpuspolicy route | redact-secret | 0 | No case | No case in this population | No positive span | No control | No pair | None |
policy-corpuspolicy route | trufflehog | 0 | No case | No case in this population | No positive span | No control | No pair | None |
public-evidence-snapshotfloors and gates | flare-redact | 40 | 18 | OVERBROAD 1 · MISS 17 | 17 spans · 1,020 bytes | 0 of 14 | 0 of 5 | 3 pending |
public-evidence-snapshotfloors and gates | gitleaks | 40 | 18 | EXACT 12 · MISS 6 | 6 spans · 360 bytes | 0 of 14 | 3 of 5 | 3 pending |
public-evidence-snapshotfloors and gates | redact-secret | 40 | 18 | EXACT 18 | 0 spans · 0 bytes | 0 of 14 | 4 of 5 | 3 pending |
public-evidence-snapshotfloors and gates | trufflehog | 40 | 18 | MISS 18 | 18 spans · 1,080 bytes | 0 of 14 | 0 of 5 | 3 pending |
regression-corpusgates | flare-redact | 0 | No case | No case in this population | No positive span | No control | No pair | None |
regression-corpusgates | gitleaks | 0 | No case | No case in this population | No positive span | No control | No pair | None |
regression-corpusgates | redact-secret | 0 | No case | No case in this population | No positive span | No control | No pair | None |
regression-corpusgates | trufflehog | 0 | No case | No case in this population | No positive span | No control | No pair | None |
Cases
Each case of this family, per population, with what every scanner recorded for it and the case’s own facts.