Skip to content
SecHelixSecurity / Variant Analysis
Canonical demonstration dataGold workflow

Root cause → sibling paths

One verified bug should teach the repository something.

Generalize the broken invariant carefully, search related paths, refute lookalikes, and compile regression coverage.
variant-analysis / SHX-AUTHZ-L02-DEMO
Verified root cause

Seller identity omitted from repository ownership constraint

Original finding: GET /seller/listings · invariant: caller identity must reach the repository predicate

Confirmed
01
GET /seller/listingsVerified root cause · seed invariant for the search
ORIGINAL
02
GET /seller/ordersSame ownership helper absent · same invariant, different route
VARIANT
03
POST /seller/exportSibling repository query crosses the same boundary
VARIANT
04
GET /seller/filesCentral ownership guard present with recorded evidence
REFUTED
05
WS seller:inventoryReachability evidence unknown · stays open, never assumed safe
BLOCKED
EXACT and VARIANT are discovery classifications. Their claim status remains HYPOTHESIS until applicability, evidence, and independent verification are complete.
Original1verified root cause
Sibling paths4selected for review
Variants2need independent proof
Refuted / blocked1 + 1guard present · evidence unknown
01Match the originalProve the query pattern and ownership omission are represented precisely.
02Generalize one dimensionKeep the security invariant stable while varying route, repository, or transport.
03Refute candidatesCompensating controls and unreachable paths reject false similarity.
04Compile regressionTurn the verified class into durable tests or static rules.
This surface demonstrates the workflow; candidates are not promoted to findings without evidence.Return to evidence