ponder-lab / Hybridize-Functions-Refactoring / #2375

81%

main: 83%

Pull #743

github

Address review: precise callee return-taint; clarify the two failure messages

The return-taint tracking in `scanForTaintedNumpySinks` was dead: the generic def-taint loop ran unconditionally, so a call site was tainted even when every analyzed callee returned clean. Now an analyzed-clean callee set skips the def-taint (precise), while an unanalyzed callee (library summary, no IR) or a tainted return falls through to the conservative path. The code-15 message now cites `Tensor.numpy()` (disambiguating from the new numpy-module precondition) and the code-16 message says "values derived from its parameters" (the condition is transitive flow, not direct application).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01He1ULx8nRoHzGicMryry1A

101 of 112 new or added lines in 4 files covered. (90.18%)

1927 of 2389 relevant lines covered (80.66%)

0.81 hits per line