Audit remediation: fix all 64 findings from the July 2026 audit - #36

Merged

alexnodeland merged 22 commits into

mainfrom

audit/2026-07-remediation

Jul 13, 2026

Commits on Jul 11, 2026

docs: add July 2026 audit findings document (FG-01..FG-64)

alexnodeland
and
claude
committed
1a79e69
audit(f-dist): fix distribution log-density guards, boundaries, caching, and add known-answer tests (FG-06, FG-07, FG-08, FG-27, FG-28, FG-29, FG-30, FG-32, FG-53)

alexnodeland
and
claude
committed
24b2760
audit(f-vi): fix VI scale optimization, CRN gradients, support-aware guides, ELBO honesty (FG-04, FG-16, FG-17, FG-18, FG-44, FG-45, FG-46, FG-60)

alexnodeland
and
claude
committed
fdd1997
audit(f-runtime): stack-safe interpreter, structure-varying scoring, address collisions, dup detection, fresh score logp, i64 path, pattern binds (FG-19, FG-20, FG-21, FG-26, FG-47, FG-48, FG-52, F…

alexnodeland
and
claude
committed
3fd1f27
audit(f-smc): fix SMC/ABC importance weights, add tempered SMC + evidence and correct ABC-SMC (FG-03, FG-09, FG-13, FG-34, FG-43, FG-56, FG-58, FG-59)

alexnodeland
and
claude
committed
08a0ac4
merge wp/f-dist
alexnodeland
committed
9fc7404
merge wp/f-runtime
alexnodeland
committed
2d0ebfe
merge wp/f-smc
alexnodeland
committed
68bf537
merge wp/f-vi
alexnodeland
committed
17aaaaf
audit(f-mcmc): correct MH proposal corrections, normalized/multi-chain ESS, split-R-hat, autocorr Geweke, and redundant-work fixes (FG-01, FG-02, FG-10, FG-11, FG-12, FG-35, FG-36, FG-37, FG-38, FG…

alexnodeland
and
claude
committed
223c003
audit(f-perf): Address Arc<str> + cut dead memory subsystem + real e2e benches (FG-05, FG-22, FG-24, FG-62, FG-63, FG-64)

alexnodeland
and
claude
committed
3ebfbc4
audit(f-hmc): add HMC gradient inference + 7 distributions, wire i64 path (FG-31)

alexnodeland
and
claude
committed
7b3a2db
audit(f-docs): honest positioning, SMC/ABC/VI examples, error taxonomy pruning, exact distribution count, verified MSRV (FG-23, FG-25, FG-33, FG-50, FG-51)

alexnodeland
and
claude
committed
965b7e1
audit(f-tests): sampler GOF coverage, exercise analytical-posterior harness, tighten e2e tolerances (FG-14, FG-15, FG-49)

alexnodeland
and
claude
committed
c7c866b
merge wp/f-tests
alexnodeland
committed
ebe9a6b
merge wp/f-docs
alexnodeland
committed
dac7859
audit(gate): fix Address field access in complex-models example

alexnodeland
and
claude
committed
a4e3629
audit(gate): fix duplicate group-address sampling in hierarchical example

alexnodeland
and
claude
committed
769612f
audit(f-validate): implement Validate for all exported distributions (FG-55)

alexnodeland
and
claude
committed
d6bebba
audit(fixup): address re-verification findings

alexnodeland
and
claude
committed
66c3112
audit(fixup): DiscreteUniform full-range, site-cache set invalidation, truthful perf claims (re-verification lows)

alexnodeland
and
claude
committed
7924f90
docs: fill all 64 audit resolutions + re-verification verdicts (remediation complete)

alexnodeland
and
claude
committed
5821d26

Navigation Menu

Audit remediation: fix all 64 findings from the July 2026 audit - #36

Audit remediation: fix all 64 findings from the July 2026 audit#36
alexnodeland merged 22 commits into
mainfrom
audit/2026-07-remediation

Commits on Jul 11, 2026

docs: add July 2026 audit findings document (FG-01..FG-64)

audit(f-dist): fix distribution log-density guards, boundaries, caching, and add known-answer tests (FG-06, FG-07, FG-08, FG-27, FG-28, FG-29, FG-30, FG-32, FG-53)

audit(f-vi): fix VI scale optimization, CRN gradients, support-aware guides, ELBO honesty (FG-04, FG-16, FG-17, FG-18, FG-44, FG-45, FG-46, FG-60)

audit(f-runtime): stack-safe interpreter, structure-varying scoring, address collisions, dup detection, fresh score logp, i64 path, pattern binds (FG-19, FG-20, FG-21, FG-26, FG-47, FG-48, FG-52, F…

audit(f-smc): fix SMC/ABC importance weights, add tempered SMC + evidence and correct ABC-SMC (FG-03, FG-09, FG-13, FG-34, FG-43, FG-56, FG-58, FG-59)

merge wp/f-dist

merge wp/f-runtime

merge wp/f-smc

merge wp/f-vi

audit(f-mcmc): correct MH proposal corrections, normalized/multi-chain ESS, split-R-hat, autocorr Geweke, and redundant-work fixes (FG-01, FG-02, FG-10, FG-11, FG-12, FG-35, FG-36, FG-37, FG-38, FG…

audit(f-perf): Address Arc<str> + cut dead memory subsystem + real e2e benches (FG-05, FG-22, FG-24, FG-62, FG-63, FG-64)

audit(f-hmc): add HMC gradient inference + 7 distributions, wire i64 path (FG-31)

audit(f-docs): honest positioning, SMC/ABC/VI examples, error taxonomy pruning, exact distribution count, verified MSRV (FG-23, FG-25, FG-33, FG-50, FG-51)

audit(f-tests): sampler GOF coverage, exercise analytical-posterior harness, tighten e2e tolerances (FG-14, FG-15, FG-49)

merge wp/f-tests

merge wp/f-docs

audit(gate): fix Address field access in complex-models example

audit(gate): fix duplicate group-address sampling in hierarchical example

audit(f-validate): implement Validate for all exported distributions (FG-55)

audit(fixup): address re-verification findings

audit(fixup): DiscreteUniform full-range, site-cache set invalidation, truthful perf claims (re-verification lows)

docs: fill all 64 audit resolutions + re-verification verdicts (remediation complete)