mirror of
https://github.com/NicolasBohn/NexQuant.git
synced 2026-07-27 15:37:44 +00:00
TPTBusiness
2cec08bc91
- Add rdagent/log/daily_log.py: daily-rotating structured logs per command (fin_quant, strategies, evaluate, parallel) with loguru; all.log combined sink - predix.py: route TeeWriter output to logs/YYYY-MM-DD/ instead of root dir; wrap quant() and evaluate() in daily_log.session() for start/stop/duration tracking - rdagent/app/cli.py: fin_quant_cli waits for llama.cpp /health endpoint before starting pipeline (up to 300 s); daily_log integration for fin_quant, generate_strategies, eval_all, parallel commands - scripts/predix_gen_strategies_real_bt.py: daily_log integration with per-strategy ACCEPTED/REJECTED entries and summary on completion - rdagent/components/coder/factor_coder/auto_fixer.py: new module that patches common LLM-generated factor issues (min_periods, inf/NaN, groupby.transform, MultiIndex corrections) - rdagent/components/coder/factor_coder/prompts.yaml: add critical rules for EURUSD 1-min intraday factors (min_periods, inf handling, groupby, date range) - README.md: document --reasoning off and --n-gpu-layers 28 for llama-server; explain VRAM constraints when Ollama is running alongside llama.cpp - .bandit.yml: suppress B615 (HuggingFace unsafe download) for RL benchmark files Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
40 lines
1.6 KiB
YAML
40 lines
1.6 KiB
YAML
# Bandit security scanning configuration
|
|
# This file configures which security checks to skip
|
|
|
|
skips:
|
|
# B101: assert_used - assert statements are used for development
|
|
- 'B101'
|
|
# B104: hardcoded_bind_all_interfaces - we bind to 0.0.0.0 intentionally
|
|
- 'B104'
|
|
# B108: hardcoded_tmp_directory - /tmp is used intentionally for Docker volumes
|
|
- 'B108'
|
|
# B301: pickle - pickle is used for session serialization (internal data only)
|
|
- 'B301'
|
|
# B310: urllib_urlopen - used for internal URL fetching
|
|
- 'B310'
|
|
# B311: random - random is used for non-crypto purposes
|
|
- 'B311'
|
|
# B404: subprocess - subprocess is used for process management
|
|
- 'B404'
|
|
# B603: subprocess_without_shell_equals_true - intentional usage
|
|
- 'B603'
|
|
# B608: hardcoded_sql_expressions - false positive
|
|
- 'B608'
|
|
# B609: linux_commands_wildcard_injection - intentional usage
|
|
- 'B609'
|
|
# B102: exec_used - required for sandboxed strategy code evaluation
|
|
- 'B102'
|
|
# B602: subprocess_popen_with_shell_equals_true - intentional for Docker/Conda env setup
|
|
- 'B602'
|
|
# B701: jinja2_autoescape_false - internal template rendering, no user XSS exposure
|
|
- 'B701'
|
|
# B113: requests_without_timeout - internal API calls, timeout not critical
|
|
- 'B113'
|
|
# B614: pytorch_load - internal benchmark code loading .pt files from workspace only
|
|
- 'B614'
|
|
# B307: eval_used - internal config parsing with controlled input
|
|
- 'B307'
|
|
# B615: huggingface_unsafe_download - RL benchmark files use HuggingFace Hub for
|
|
# research datasets; revision pinning is not required for benchmark reproducibility
|
|
- 'B615'
|