F12+F13 target 18/25 FP from review 2026-05-22. 3650 tests passed.

Layer 1b campaign name-pattern watch for active campaigns. 3617 tests passed.

Removes popularity-based pipeline skip. Popular packages now go through full pipeline like everything else. dep-diff extracted as standalone scanner. 3610 tests passed.

Third and final FP cap from audit week3 sprint. F9+F10+F11 cover 175/286 FP (61%). 3602 tests passed.

Contextual FP cap (35) for legitimate vendor CLIs/SDKs. 7-condition conjunction. 96 FP targeted, 3594 tests passed.

Contextual FP cap (30) for legitimate MCP servers. 5-condition conjunction discriminates from SANDWORM_MODE droppers. 25 FP targeted, 3586 tests passed.

Ecosystem prefix FP fix + boundary-squat scoring rebalance.

SC-C1, SC-C2, DF-C4. All 15 Critical findings from internal audit now resolved.

DF-C1, MR-C1, DF-H1.

DF-C3, DF-H2, RC-C3, RT-C1. ESM dataflow, execFile/fork, Worker threads, dependency boundary-squat.