Freeze and publish DataFlowBench v0.5.0

[DavidBakerEffendi]

The v0.5.0 release: the Bifrost v0.10.7 fix cycle measured, and the first publication of the modeling (#15) and tool-native (#16) tiers. Four commits: the 66-report re-run at one fixture revision, the freeze manifest, the audited results, and the release notes + site snapshot.

Freeze

852 cases / 66 reports / 4 analyzers — Bifrost v0.10.7 (build 44d9a5be, identity witnessed per PR #87), CodeQL 2.26.3, Joern 4.0.610, Semgrep CE 1.174.0 — fixture revision sha256:9df209ed…, tag v0.5.0 at main tip 7d688c6 (already pushed). validate-freeze green; the v0.4.0 manifest is superseded, never mutated.

Fix-cycle headlines (derived from the frozen results, diffed against v0.4.0's)

• Bifrost runner errors 22 → 0; kernel decisive-correct 222 → 435; smoke 115 → 117 of 118.
• Ruby kernel decides for the first time: 0/58 → 21/58 (36 inconclusive, 1 FP). Rust gap_contract crash class (bifrost-dev#2638): 12 runner errors → 10 correct + 2 inconclusive.
• Honest negatives, published: four new v0.10.7 false positives (bifrost-dev#2731 — C#/Go loop-carried, C#/Ruby infeasible-branch); the ten element-object crash cases resolve to inconclusive, not correct; the Java direct-propagation smoke-vs-kernel instability persists unreconciled on this build; inconclusive concentrations remain (Ruby 36, Kotlin 30, PHP/C++ 26, C#/TS 24).

First tier publications

• Modeling (benchmark-controlled): Bifrost's Amendment-A9 category-Z cells decide 12/12 correct in their first scored run; CodeQL 24/24 ×3; Joern 14/16 (A2 partition, 4/6 categories); Semgrep 10/10 over its 5-template A3 partition.
• Tool-native: CodeQL Java 11/12, Python 10/12, JavaScript 9/12 — misses are the preregistered hazards; Semgrep's vendored-snapshot asymmetry (Python 8/12 with 4 FPs via a shipped audit rule vs JS/Java 0/6); Bifrost and Joern decline-all with witnessed run identity (A10 rationale).
• The landing page gains two separately fenced tier sections — the core-kernel filter that guarantees no pooling stays; declined tiers render as "declines the tier", never 0/N; a Model profile column keeps benchmark-controlled and tool-native visually distinct; vendor colors keep the fixed identity map.

Site

v0.4.0 archived with evidenceRef pinned to 86a29e0; v0.5.0 snapshot pages added; /current redirects to v0-5-0; astro check clean, 31 pages build.

Verification

cargo fmt --check · cargo test 162 · validate 852 · validate-reports 66 · validate-freeze green · generate-results --check current · astro check + build clean.

🤖 Generated with Claude Code