Hacktoberfest 2026: los issues que los mantenedores marcaron para octubre, abiertos y aptos para principiantes. Explorar issues de Hacktoberfest

FEAT Add role-aware Scenario target-attempt accounting

Abierto
  • ¿Algo no está bien?
#3,043 3 comentarios 0 reacciones 1 asignado Ver en GitHub

Los mantenedores suelen responder en 2 días

@Nimit3418 ya está trabajando en esto.

Desde el 9/10/2026.

  • #3062 de @Nimit3418 — abierto

Evaluación

Dificultad
5/5
Tiempo estimado
Más de una semana
Aptitud para principiantes
35/100
Tipo de issue
Nueva funcionalidad
Claridad
Bastante claro
Estado de actividad
Activo
Stack tecnológico
azure, python, sqlite
Área
backend, data, databases

Línea de trabajo

Start with pyrit/analytics/scenario_statistics.py, pyrit/backend/services/scenario_progress_read_model.py, and pyrit/memory/memory_interface.py, plus the AttackResultMetadata contract and doc/code/framework.md. Trace how shared analytics policy reaches memory aggregation and backend/SDK/report consumers; the issue also calls for SQLite runtime and Azure SQL compilation parity checks. Done means adding role-aware target-facing counts while preserving existing logical-progress and raw-history semantics, with the listed edge cases covered.

Escrito por el modelo de indexación a partir del texto del issue.

Descripción

feature-request help wanted
Is your feature request related to a problem? Please describe.

Current main records producer roles but does not use them for target-attempt
rollups. The shared analytics helper, progress, and history SQL count attempts
without a producer-role predicate. Thus their existing
logical-unit/raw-history counts must not be presented as target-attempt counts.

For example, two target-facing child results plus one Sequential envelope
are three historical result rows, but only two target-facing producer attempts.
The envelope can still complete one outer planned logical unit. A preparation
error may also have a target-facing role, so this role alone does not prove a
target request occurred. This check inspected code; it did not run an attack.

Describe the solution you'd like

Add a consumed typed target-facing accounting projection using the existing
AttackResultMetadata contract and shared Scenario analytics/identity policy.
Keep planned logical progress, raw historical attempts, and target-facing
attempts distinct. Memory owns database aggregation; backend/SDK/report
consumers present the shared policy rather than independently infer roles.

Acceptance criteria:

  • Orchestration envelopes remain observable but contribute zero to target-facing
    attempts and their target-facing error/retry totals.
  • Preserve exact saved-plan denominators, outer-unit completion, existing
    latest-attempt identity/order, raw history, and #2551/#2820 cache inclusion.
    Add the new rollup without silently redefining existing unit/raw fields.
  • Legacy/malformed roles remain explicitly unknown using conservative decoding;
    never infer a role from a conversation ID, class name, display text, or index.
    Keep orchestration and unknown-role totals visible alongside target-facing
    totals so the producer categories reconcile with raw history.
  • Report unmatched attempts separately, with the same matching policy across
    progress, detail, SDK/report consumers, and history.
  • Real-domain/SQLite parity cases cover ordinary/baseline, flat and nested
    Sequential/Adaptive, retry/resume, recovered and unrecovered errors,
    preparation failure, negative retries, unknown roles, invalid plans,
    tied timestamps, and cache hits.
  • SQLite runtime and Azure SQL compilation cover equivalent database-side
    role filtering. Do not add full-result hydration, per-attempt queries, or
    Python grouping as a replacement for the new SQL aggregate.
  • Field names and documentation say target-facing producer attempts, not
    confirmed target invocations; no new request-tracing feature is required.

Dependencies: merged #2997 and #2820; coordinate indexed analytics #2792 and
history-query extractions #2768/#2769. The separate child-link fix #3039 and
dataset/technique UX are not hard dependencies for counting persisted roles.

Describe alternatives you've considered, if relevant

Do not redo shared success statistics, change logical completion to child
counts, or remove historical rows. Exclude schema/duplicate hierarchy stores,
child-link repair, hierarchy endpoints/UI, dataset/estimate changes, request
tracing, scorer semantics, and new attack algorithms.

Additional context

Roadmap: scope 8.
Design: original result/accounting references.
Evidence: upstream 58a93534838ed58e766276c060c4f0d9149d6483,
pyrit/analytics/scenario_statistics.py,
pyrit/backend/services/scenario_progress_read_model.py, and
pyrit/memory/memory_interface.py.
Follow doc/code/framework.md: models own types, analytics owns counting
policy, memory persists/aggregates, and backend/output present it.
No GUI change or unrelated screenshots are requested.

Lenguaje dominante
Python
Estrellas
4.6k
Forks
924
Merge medio
3 d 4 h
PR fusionados (30 d)
264

Preparar el entorno

Abrir en Codespaces

Inicia el contenedor de desarrollo del proyecto en tu navegador, con tu propia cuenta de GitHub.

  • Sin Dockerfile ni archivo de Docker Compose
  • Tiene una plantilla de pull request
  • Sin guía de contribución

Primeros pasos

  1. Lee el issue completo y luego la guía de contribución del proyecto.
  2. Comenta en el issue que vas a ocuparte — evita que dos personas hagan lo mismo.
  3. Haz un fork del repositorio y trabaja en una rama.
  4. Abre un pull request que haga referencia al número del issue.

Más de microsoft/PyRIT

Todos los issues de microsoft/PyRIT

Issues similares

Más issues de Python

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.