feat: three patch-apply modes — hosted, vendored, agent — with full ecosystem + VEX coverage#117

Merged

Mikola Lysenko (mikolalysenko) merged 30 commits into

mainfrom

feat/scan-redirect-mode

Jul 2, 2026

Commits on Jul 1, 2026

feat(cli): add `scan --redirect` hosted-vendored-patch mode
Mikola Lysenko (mikolalysenko)
committed
feat(vex): attest redirected patches with a (redirected) provenance marker
Mikola Lysenko (mikolalysenko)
committed
Merge remote-tracking branch 'origin/main' into feat/scan-redirect-mode
Mikola Lysenko (mikolalysenko)
committed
style: cargo fmt
Mikola Lysenko (mikolalysenko)
committed
test(vex): real-install npm redirect capstone + docker gem/composer VEX legs
Mikola Lysenko (mikolalysenko)
committed
fix(redirect,vex): fail-closed attestation, idempotent rewriters, surfaced record-fetch failures
Mikola Lysenko (mikolalysenko)
committed
fix(ci): check the redirect golden fixtures out byte-exact on Windows
Mikola Lysenko (mikolalysenko)
committed
chore: exclude test fixtures from Socket dependency scanning
Mikola Lysenko (mikolalysenko)
committed

Commits on Jul 2, 2026