Repository navigation
Experimental OIE OWASP metadata agent (Nest + GitHub hybrid chat) - #1125
Draft
northdpole wants to merge 7 commits into
Draft
northdpole wants to merge 7 commits into
northdpole wants to merge 7 commits into
Conversation
Contributor
|
Important Draft PR not reviewedDraft PRs are not automatically reviewed by default.
To automatically review draft PRs, update your CodeRabbit configuration: reviews:
auto_review:
drafts: true
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
4 tasks
northdpole
force-pushed
the
cursor/owasp-agent-oie-a097
branch
from
October 3, 2026 21:54
fee35d3 to
b6319c7
Compare
cursor
Bot
changed the base branch from
main
to
stack/oie-p7-full-pipeline-docs
October 5, 2026 09:25
northdpole
force-pushed
the
stack/oie-p7-full-pipeline-docs
branch
from
October 5, 2026 09:26
3595b86 to
5659d5f
Compare
northdpole
force-pushed
the
cursor/owasp-agent-oie-a097
branch
from
October 5, 2026 09:26
b6319c7 to
2a731f4
Compare
northdpole
force-pushed
the
stack/oie-p7-full-pipeline-docs
branch
from
October 5, 2026 10:11
5659d5f to
a90594d
Compare
northdpole
force-pushed
the
cursor/owasp-agent-oie-a097
branch
from
October 5, 2026 10:11
2a731f4 to
629eb20
Compare
northdpole
force-pushed
the
stack/oie-p7-full-pipeline-docs
branch
from
October 7, 2026 18:43
5477f26 to
46249d7
Compare
northdpole
force-pushed
the
cursor/owasp-agent-oie-a097
branch
from
October 7, 2026 18:50
629eb20 to
5831fe9
Compare
- Forward leaf_drilldown_min_sections=0 instead of replacing it with 20. - Make queue wiping in run_full_pipeline opt-in via --wipe-queues and add the flag to the detached clone-DB runner, which now reports its real exit code. - Fall back to sys.executable when venv/bin/python is missing. - Fix the B2 report gate string (top-3) and drop the nonexistent make target from the docs. - Make the denied-resource drill-down test actually reach the allowlist gate.
Prior-caged retrieval embeds the same header and body several times per chunk. Prefetch the unique strings for a queue batch so those Gemini calls collapse into one list request.
Introduce a feature-flagged Nest+GitHub hybrid index and chat router so community/meta questions (chapters, projects, events, board history, geo-nearest meetups) are answered fail-closed without routing through CRE RAG. Includes strict auto-concepts, merge cron target, sync Makefile targets, and offline demo-scenario tests. Co-authored-by: Spyros <northdpole@users.noreply.github.com>
Keep Nest/GitHub concepts out of the CRE graph and citation table. Chat returns empty CRE references and external owasp_agent citations; the chatbot UI never links meta hits into OpenCRE nodes. MCP exposes local owasp_meta_* tools (flag-gated) that read the separate index. Co-authored-by: Spyros <northdpole@users.noreply.github.com>
northdpole
force-pushed
the
stack/oie-p7-full-pipeline-docs
branch
from
October 14, 2026 08:48
c41f35b to
0b797a5
Compare
northdpole
force-pushed
the
cursor/owasp-agent-oie-a097
branch
from
October 14, 2026 08:48
5831fe9 to
dfec9a8
Compare
Creates meta_entity, owasp_concept, sync_log, and concept_merge_audit when missing so IndexStore.create_all environments stay upgrade-safe.
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Adds an experimental Project OIE chat extension that answers OWASP community/metadata questions from a local Nest + GitHub hybrid index, without routing logistics through Module C (Librarian → CRE).
What’s included
application/utils/owasp_agent/— Nest client, GitHub crawler, SQLite index, geocode + Haversine, structured fail-closed queries, strict auto-concepts + merge, chat routerOWASP_AGENT_ENABLEDwired into/rest/v1/completion(meta failures do not fall through to CRE RAG)make owasp-agent-sync/make owasp-agent-merge-concepts+ scriptsHow to try
NEST_API_KEY(Nest GraphQL while logged in) and optionallyGITHUB_TOKENmake owasp-agent-sync(add--auto-conceptsviaOWASP_AGENT_SYNC_ARGS='--auto-concepts')OWASP_AGENT_ENABLED=1and use/chatbotOut of scope (per plan)
Prod deploy, CRE importer changes, writes to Nest/GitHub, full ontology redesign.
Verification
python3 -m unittest application.tests.owasp_agent...— 27 passedmypy application/utils/owasp_agent— cleanblack --checkon touched Python — cleanmake frontend)