prism-harness-suite
LOW
maintainer marmai
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package builds from source hosted on a project-owned git domain (sovereign-society.org), which is not on the default whitelist but plausibly official; the source is not a prebuilt binary, and the unverifiable checksum (SKIP) is acceptable for development versions, resulting in low risk.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 90%): The package builds from source hosted on a project-owned git domain (sovereign-society.org), which is not on the default whitelist but plausibly official; the source is not a prebuilt binary, and the unverifiable checksum (SKIP) is acceptable for development versions, resulting in low risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:13
source=("git+https://git.sovereign-society.org/prism/prism-harness.git#tag=v1.0.0-rc.3")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Markus Maiwald <markus@maiwald.tk>
2
pkgname=prism-harness-suite
3
pkgver=1.0.0_rc.3
4
pkgrel=1
5
pkgdesc="PRISM harness suite for AI coding agents: doctrine rules, review steering, overnight loops, model routing and security gates on one Bun runtime"
6
arch=('x86_64')
7
url=https://getharness.app
8
license=('custom:LSL-1.0')
9
depends=('bun')
10
makedepends=('git' 'bun')
11
provides=('prism-harness' 'prism-loop' 'prism-proxy' 'prism-route' 'prism-sober')
12
conflicts=('prism-harness' 'prism-loop' 'prism-proxy' 'prism-route' 'prism-sober')
13
source=("git+https://git.sovereign-society.org/prism/prism-harness.git#tag=v1.0.0-rc.3")
14
sha256sums=('SKIP')
15
16
build() {
17
cd "$srcdir/prism-harness"
18
19
# Clone the other components (they are separate repos on Forgejo)
20
for r in prism-loop prism-sober prism-proxy prism-route; do
21
if [ ! -d "../$r" ]; then
22
git clone --depth 1 "https://git.sovereign-society.org/prism/$r.git" "../$r"
23
fi
24
done
25
26
# Build small bundles (each package has its "build" script from the suite setup)
27
for d in . ../prism-loop ../prism-sober ../prism-proxy ../prism-route; do
28
if [ -f "$d/package.json" ]; then
29
(cd "$d" && bun install --frozen-lockfile 2>/dev/null || bun install; bun run --if-present build) || echo "note: build for $d"
30
fi
31
done
32
}
33
34
package() {
35
# git+https extracts the repo into "$srcdir/prism-harness/" — cd there
36
# so all paths align with build() (the build clones sibling components
37
# under "$srcdir/prism-harness/../$r" = "$srcdir/$r").
38
cd "$srcdir/prism-harness"
39
40
# Install each component's built tree to /usr/lib/prism/<name> and wrapper in /usr/bin
41
# This keeps node_modules for native deps (e.g. sharp in proxy) next to the code
42
# Small size, one Bun runtime
43
44
install -d "$pkgdir/usr/lib/prism"
45
install -d "$pkgdir/usr/bin"
46
47
for comp in prism-harness prism-loop prism-sober prism-proxy prism-route; do
48
srcdir_comp="."
49
if [ "$comp" != "prism-harness" ]; then
50
srcdir_comp="../$comp"
51
fi
52
53
if [ -d "$srcdir_comp/dist" ]; then
54
# Copy the full component (for deps) or at least dist + needed
55
install -d "$pkgdir/usr/lib/prism/$comp"
56
cp -r "$srcdir_comp/dist" "$pkgdir/usr/lib/prism/$comp/" 2>/dev/null || true
57
58
# For components with node_modules (proxy etc), copy if present after build
59
if [ -d "$srcdir_comp/node_modules" ]; then
60
cp -r "$srcdir_comp/node_modules" "$pkgdir/usr/lib/prism/$comp/" 2>/dev/null || true
61
fi
62
63
# Copy package.json if needed for resolution
64
if [ -f "$srcdir_comp/package.json" ]; then
65
install -Dm644 "$srcdir_comp/package.json" "$pkgdir/usr/lib/prism/$comp/package.json"
66
fi
67
68
# The bundle .js
69
bundle="$pkgdir/usr/lib/prism/$comp/dist/$comp.js"
70
if [ -f "$bundle" ]; then
71
# Wrapper script (ensures correct exec with bun and resolution)
72
cat > "$pkgdir/usr/bin/$comp" << WRAP
73
#!/usr/bin/env sh
74
exec /usr/bin/bun "/usr/lib/prism/$comp/dist/$comp.js" "\$@"
75
WRAP
76
chmod +x "$pkgdir/usr/bin/$comp"
77
fi
78
else
79
echo "warning: no dist for $comp"
80
fi
81
done
82
83
# Identity canon templates (scaffold by prism-harness init; reference doc for humans)
84
if [ -d "templates/identity" ]; then
85
install -d "$pkgdir/usr/lib/prism/prism-harness/templates/identity"
86
cp -r "templates/identity" "$pkgdir/usr/lib/prism/prism-harness/templates/" 2>/dev/null || true
87
fi
88
89
# Install helper
90
if [ -f "install.sh" ]; then
91
install -Dm755 "install.sh" "$pkgdir/usr/share/doc/$pkgname/install.sh"
92
fi
93
}
Changes since previous scan
--- PKGBUILD @ 2026-09-02 00:02+++ PKGBUILD @ 2026-09-17 00:27@@ -1,16 +1,16 @@ # Maintainer: Markus Maiwald <markus@maiwald.tk> pkgname=prism-harness-suite-pkgver=1.0.0_beta.8+pkgver=1.0.0_rc.3 pkgrel=1 pkgdesc="PRISM harness suite for AI coding agents: doctrine rules, review steering, overnight loops, model routing and security gates on one Bun runtime" arch=('x86_64')-url="https://getharness.app"+url=https://getharness.app license=('custom:LSL-1.0') depends=('bun') makedepends=('git' 'bun') provides=('prism-harness' 'prism-loop' 'prism-proxy' 'prism-route' 'prism-sober') conflicts=('prism-harness' 'prism-loop' 'prism-proxy' 'prism-route' 'prism-sober')-source=("git+https://git.sovereign-society.org/prism/prism-harness.git#tag=v1.0.0-beta.8")+source=("git+https://git.sovereign-society.org/prism/prism-harness.git#tag=v1.0.0-rc.3") sha256sums=('SKIP') build() {Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 13:53:13 | Medium | 1 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 19:51:22 | Medium | 1 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |