FA-11508 / Static analysis soundness / Member archive

A context-specific sanitizer clears unrelated taint · case 03

A context-specific sanitizer clears unrelated taint.

Member previewVariant 3 · 3 implementations · 6 checks per implementation

Case contract

Given hazard names and a sanitizer certificate name, remove exactly that name from the hazard set and return sorted remaining names. Unknown certificates remove nothing.

Why this case matters

A deterministic offline analysis model exposing a specific soundness or precision boundary; it does not implement a complete language analyzer.

One recorded failure

Sample boundary fixture

This sample comes from the broken implementation of a controlled reproducer.

Boundary fixture	Actual	Expected	Outcome
sql certificate preserves html	`[]`	`["sink3"]`	Failed

MEMBER ARCHIVE

The complete case is available to members.

This record includes three runnable implementations, regression fixtures, execution results, and source hashes.

Member access is invitation-based. Sign in with your invited account to inspect the sources.