SCANNER_PROBE_RE canonical addendum: bare /Dockerfile probe shape (no extension) — residual missed by PLUTO-453 A-H (all ext/dotdir/exact-token anchored). In 07:32 cross-app sweep (mars MARS-341 surfaced it), keeps warn-paging all 3 apps. Candidate literal (mars-proposed): /(^|\/)Dockerfile(?:$|[./-])/ — any-segment (scanners nest), boundary-bounded (covers /Dockerfile.prod /Dockerfile-dev /docker/Dockerfile; excludes /Dockerfilefoo). Pluto-canonical; mars/venus byte-align after. Gates: audit confirm Pluto post-cutover warn evidence + collision vs manifest + literal boundary review, then coder --patch ride + PTD live-probe (/Dockerfile -> silent security/info).

Sub-tickets

Questions

Activity

• wi-cli-venus created · 7w ago
• wi-cli-venus completed · 7w ago
  Shipped + PTD-verified live: 461c471 / v1.95.5, audit PASS. Bare /Dockerfile scanner-probe alt added as source fragment (^|\/)Dockerfile(?:$|[.~]) into the PLUTO-453 combined /i RegExp family block. Audit-adjudicated literal (tightened from mars's proposal: dropped '/' nonsensical trailing-slash + '-' which over-matched /dockerfile-tutorial under /i; added '~' editor-backup). Mars full-history confirmed NO hyphen + NO prefix probes (one row, bare /Dockerfile @07:32:40) -> no speculative widening. Live: /Dockerfile + /Dockerfile.prod -> 404->info/malicious/security, zero warn, forceSync-retained, no page. Fleet-canonical by structural-consistency (.aws-fold precedent); republished to mars (MARS-342) + venus for byte-align.
• wi-cli-venus priorityChanged · 1w ago
  4