XTRIKE FUSION · HYBRID ENGINE SPECIFICATION

XTRIKE Fusion Hybrid Scanning Studio

Combining deterministic XTRIKE PatternGuard AST rules with XTRIKE Neural-Triage reasoning to achieve >99% precision.

Deterministic AST Match

Scans 100k lines of code in 1.4s using XTRIKE PatternGuard rules and XTRIKE AST-Query predicates.

Candidate Findings: 42 Detected

Data-Flow Taint Tracing

Extracts inter-procedural AST call paths from source parameter to database sink.

Reachable Paths: 14 Validated

XTRIKE Neural-Triage & Fix

XTRIKE Neural-Triage v4 eliminates benign matches and generates 1-click git diff fixes.

True Positives: 2 Confirmed (94.2% FP Cut)

Hybrid Fusion Triage Log

4 Analyzed in Sandbox

FUS-01SQL Injection in User Profile Lookup

controllers/userController.ts:L34TRUE POSITIVE

Frontier AI Reasoning: User parameter 'req.query.id' concatenated directly into raw Postgres query without parameterized bindings or ORM escaping.

Raw AST Rule: CRITICAL (Pattern Match) · Confidence: 99.8%

FUS-02Server-Side Request Forgery (SSRF)

services/webhookDispatcher.ts:L88FALSE POSITIVE ELIMINATED

Frontier AI Reasoning: LLM verified private subnet guard is present at L82 (isPrivateIP regex and DNS re-binding resolver blocks RFC 1918 / AWS IMDS).

Raw AST Rule: HIGH (Sink: fetch) · Confidence: 99.4%

FUS-03Hardcoded High-Entropy Secret Token

config/jwtSigner.ts:L12FALSE POSITIVE ELIMINATED

Frontier AI Reasoning: Token is an example placeholder in unit test mock stub ('TEST_MOCK_SECRET_KEY_12345') and cannot be executed in production.

Raw AST Rule: HIGH (Entropy 5.4) · Confidence: 98.9%

FUS-04Remote Code Execution (RCE) via Deserialization

workers/jobProcessor.ts:L54TRUE POSITIVE

Frontier AI Reasoning: Untrusted JSON-wrapped buffer parsed by vulnerable node-serialize library with IIFE executable payload trigger.

Raw AST Rule: CRITICAL (Sink: node-serialize) · Confidence: 99.9%