Violin
48a4f214d6
feat(guard): add receipt integrity verifier, fail-closed state parsers, and guard runtime tests
2026-08-10 08:54:56 +01:00
Violin
9ed494d439
feat: introduce benchmark runner with Docker support and automated vulnerability calibration evidence
2026-08-08 13:29:11 +01:00
Violin
7ee714a6ce
fix(guard): resolve file path resolution and bootstrap issues
2026-07-26 16:03:02 +01:00
Violin
b274364118
feat: implement violin_guard plugin for secure pentest execution, target policy enforcement, and workflow orchestration
2026-07-25 14:13:38 +01:00
Violin
827ca411a0
Record research receipts for semantic unlocks
2026-07-22 11:29:35 +01:00
Violin
e625eb051c
Enforce skill receipts in hooks and browsers
2026-07-19 01:18:13 +01:00
Violin
5873cf9ddd
fix CodeQL quality findings (v2.0.6)
2026-07-19 00:03:08 +01:00
Violin
dc53bbb08a
consolidate guard batch collaboration
2026-07-18 08:02:50 +01:00
Violin
909b66cd52
feat: implement violin_guard plugin registration and command execution hooks
2026-07-17 20:35:43 +01:00
Violin
f65b70871d
feat: add violin_guard plugin with tool registration and execution hooks
2026-07-17 20:34:06 +01:00
Violin
5870509fdb
feat: implement violin_guard plugin for centralized command execution auditing, terminal policy enforcement, and history tracking.
2026-07-17 20:14:20 +01:00
Violin
0075850b61
Add playbooks for SQL Injection, SSRF, and XSS vulnerabilities; enhance testing suite
...
- Created a comprehensive playbook for SQL Injection (SQLi) detailing types, detection methods, tools, and remediation strategies.
- Added a playbook for Server-Side Request Forgery (SSRF) covering classification, detection payloads, and remediation guidance.
- Introduced a playbook for Cross-Site Scripting (XSS) including types, detection techniques, and safe proof of concept examples.
- Expanded the test suite with new tests for command history deduplication, scope authorization, and structured argument handling.
- Improved existing tests for engagement and execution tracking, ensuring robust coverage of functionality.
2026-07-16 17:20:00 +01:00
Violin
ea7e094528
Remediate audit P0/P1 findings; migrate tests to green
...
- state.py: fcntl/msvcrt file locking, reservation+finalization, history
verification, remove dead subprocess bridges (p1-lock)
- hypotheses.py: enforce canonical status, phase/host/service/port match,
reject unrelated hypotheses (p1-hyp)
- tools.py/__init__.py: retain kwargs (task_id), lifecycle hooks wired
(REGISTERED_TOOLS + no-op-then-active hooks) (p1-life)
- Migrate tests from tests/*.py to tests/guard + tests/pentest_docs; align
to actual API (handle_target returns ips[0], handle_exec_burst fail-closed,
PTT self-certify uses real batch_id, post-exploitation requires hypothesis)
- scoping.md: add checkpoint.json continuity-artifact drift note
- pyproject.toml: v1.2.0, per-file-ignores for tests/scripts (E402/S101)
- Add .pytest-tmp-plugin/ to .gitignore
64 passed; ruff clean.
2026-07-12 20:57:55 +01:00
Violin
8d8fb81ffb
Consolidate Violin Guard into Hermes plugin
2026-07-12 16:00:16 +01:00
Violin
283f2683a9
feat: improve guard and workflow reliability
2026-07-12 09:39:55 +01:00
Violin
3d821d6e13
v1.1.0: guarded pentest workflow
2026-07-12 09:39:55 +01:00
Violin