Gergo Magyar b294a387a5 feat(cfg): call-site sites[] taint substrate for C-family (#2195 U6) ... Extend the C/C++/C#/Java/Go harvests with the call-site sites[] taint substrate (SiteRecord/SiteArgOccurrence), mirroring the TS shape so the shared taint matcher consumes all languages uniformly. Extract the grammar-agnostic site machinery into cfg/visitors/call-site-harvest.ts (CallSiteFactAccumulator -- names no language); each harvest adds only its per-grammar visitCall/walkChain over its call node (C/C++ call_expression, C# invocation_expression, Java method_invocation, Go call_expression). INERT BY DESIGN: no C-family taint model exists (registerBuiltinTaintModels is TS/JS only), so getSourceSinkConfig returns undefined for these languages and the harvested sites produce ZERO TAINTED edges -- the positive source->sink->TAINTED path is deferred with the model authoring. sites emitted only when non-empty; facts-only attachment, block/edge topology unchanged (pre-existing topology + def/use tests byte-identical). 23 new substrate tests; 574 green across the cfg/taint/emit suites; gate green; tsc clean. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-06-14 11:56:21 +00:00
..
fixtures	fix(cpp): suppress deleted overload winners (#2094)	2026-06-10 18:41:30 +01:00
helpers	test(cfg): language-agnostic CFG unit-test harness (#2195 U1)	2026-06-14 10:43:00 +00:00
integration	feat(cfg): Go CFG visitor + def/use harvest (#2195 U5)	2026-06-14 11:33:58 +00:00
unit	feat(cfg): call-site sites[] taint substrate for C-family (#2195 U6)	2026-06-14 11:56:21 +00:00
utils	perf(hooks): cmdline-first Linux db-lock scan, drop the lsof fallback (#2180) (#2183)	2026-06-13 11:52:14 +01:00