mirror of
https://github.com/BaaRai/ARTEX.git
synced 2026-11-13 11:40:53 +08:00
BaaRai
37fab18809
Auto task_scope rows (source='auto') come from insert_assets and intent asset_ids, i.e. from target-derived content. They now count toward the coverage denominator and list_untested_assets only when they sit under a root the same task declared (a non-auto row: goal target registered via add_task_scope, or manual scope): the same or a deeper domain of a declared root_domain/subdomain, or a net inside a declared ip/cidr. The direct-source coverage view also stops counting an asset from an intent anchor alone; fact anchors still count, so tested evidence is unchanged. Without this, insert_assets put a planted host back into the backlog through its intent anchor. task_scope is described as "coverage scope, not enforced" in the code comments, the add_task_scope description, the goal-decomposer tail and the task overview UI, instead of "authorization boundary". Audit F8, 0.7.0.