FA-11507 / Static analysis soundness / Member archive

A context-specific sanitizer clears unrelated taint · case 02

A context-specific sanitizer clears unrelated taint.

Member previewVariant 2 · 3 implementations · 6 checks per implementation

Case contract

Given hazard names and a sanitizer certificate name, remove exactly that name from the hazard set and return sorted remaining names. Unknown certificates remove nothing.

Why this case matters

A deterministic offline analysis model exposing a specific soundness or precision boundary; it does not implement a complete language analyzer.

One recorded failure

Sample boundary fixture

This sample comes from the broken implementation of a controlled reproducer.

Boundary fixture	Actual	Expected	Outcome
sql certificate preserves html	`[]`	`["sink2"]`	Failed

MEMBER ARCHIVE

The complete case is available to members.

This record includes three runnable implementations, regression fixtures, execution results, and source hashes.

Member access is invitation-based. Sign in with your invited account to inspect the sources.