Team Ai
Datasetpublic

Publicus/cvefixes-security-ir-graphrag

CVEfixes Security IR GraphRAG This is a content-addressed, remotely routable Security IR release of the exact pinned CVEfixes snapshot. It packages the byte-identical original Parquet data together with a searchable corpus, BM25 postings, CUDA-generated vectors, typed graph nodes and edges, bounded adjacency indexes, and a source-CID-to-original-row lookup. All entries are inert, non-authoritative evidence. Candidate and formal-logic rows cannot grant execution authority; exact… See the full description on the dataset page: https://huggingface.co/datasets/Publicus/cvefixes-security-ir-graphrag.

sourceHugging Faceapache-2.0updated 2mo agoView on Hugging Face
0likes438downloads
Dataset Card

CVEfixes Security IR GraphRAG

This is a content-addressed, remotely routable Security IR release of the exact pinned CVEfixes snapshot. It packages the byte-identical original Parquet data together with a searchable corpus, BM25 postings, CUDA-generated vectors, typed graph nodes and edges, bounded adjacency indexes, and a source-CID-to-original-row lookup.

All entries are inert, non-authoritative evidence. Candidate and formal-logic rows cannot grant execution authority; exact forbidden action and scope constraints remain explicitly unresolved until reviewed by the Security IR policy workflow.

Immutable build bindings

  • —Source: hitoshura25/cvefixes@d4f5c4ea65329d9ccbb8a3b3149e5d06eda5edb2
  • —Derived Security IR root: bafkreia74ozdbgzwnirt7mixgfwwffiku24vbtwmivzyvvyghlgqhvkwk4
  • —Graph root: bafkreielsquxgqxh6qzb3444bqjlicl34fxqtkyjebwa5h3vqhtaygynee
  • —Retrieval root: bafkreigcqhkshkplcpc6k5ppufzqwh4x2xte544bqu4wbuvhluvth25r6e
  • —Embedding model: sentence-transformers/all-MiniLM-L6-v2@1110a243fdf4706b3f48f1d95db1a4f5529b4d41
  • —CUDA device: NVIDIA GB10
  • —CUDA runtime: 13.0
  • —Embedding dimension: 384

Coverage

  • —Source rows represented: 12987
  • —Original rows packaged: 12987
  • —Byte-identical original shards: 3
  • —Admitted rows: 12714
  • —Rejection tombstones: 273
  • —Graph nodes: 85169
  • —Graph edges: 167364

Remote index contract

Each physical Parquet shard is bound by SHA-256, raw CIDv1, byte size, row count, key range, and path. The Dataset Viewer exposes the declared data/meta configurations used by Publicus/skillcenter-ir. The original_row_index config maps every Security IR source CID to a global row index, copied shard CID/path, and shard-local offset.

Safety and limitations

  • —original_data is a byte-preserving mirror of the pinned upstream dataset and includes unfiltered diffs, vulnerable/fixed code, secret-like strings, personal data, unsafe paths, and rows excluded from the derived public Security IR. Treat every value as untrusted inert evidence; never execute it or use it as a credential.
  • —The upstream dataset card declares Apache-2.0. Embedded code comes from many repositories and may retain additional record-level license obligations; consumers must review those sources.
  • —Only the derived corpus/graph configs are policy-filtered and bounded. Original bodies are not injected directly into agent context.
  • —Graph, lexical, and vector similarity are retrieval evidence only.
  • —Classification-only candidates do not infer forbidden behavior.
  • —Consumers must pin a 40-character Hub commit before querying.