34 Commits
Author SHA1 Message Date
Violin abf8e001ca test: normalize coverage-matrix fixture literal formatting 2026-08-13 17:59:04 +01:00
Violin 4fc6e0c22b fix(guard): coverage-gate error teaches remediation per cell status
Run 20260813_101504 burned ~15 min and 19 close attempts on the
undispositioned-coverage gate: the error listed failures without naming
the fix, so the agent flailed (even reading guard source) and wrote
invalid reasons ('evidence: none else'). The error now spells out the
exact remediation per cell status (tested/not_applicable/blocked/missing).
2026-08-13 12:31:41 +01:00
Violin 46bad5c1a8 refactor(guard): de-benchmark production code; route-level coverage obligations
- Remove challenge_ids seeding (vulnerability-name leak) from scope;
  seed engagement.coverage_obligations (client-style in-scope endpoints)
  + generic engagement.audit_mode flag instead
- plugins/violin_guard now contains zero benchmark/run-id references;
  gates are framework-owned and audit-mode-gated
- Cross-engagement guard blocks ANY foreign engagement dir, not just
  benchmark-run-*
- Anti-cheat regression test asserts no vuln names in generated scope
2026-08-12 07:09:51 +01:00
Violin 61e3ed8b61 fix(guard): coverage completeness — every scored challenge needs an evidence-backed matrix cell 2026-08-11 20:20:07 +01:00
Violin 132e6f7c9a fix(guard): require Validated hypotheses to link canonical FIND files at VULN_RESEARCH close 2026-08-11 18:24:32 +01:00
Violin 9a40ec645c fix(guard): block rejections that never ran their cheapest discriminating test 2026-08-11 17:57:02 +01:00
Violin 6b2bc26af3 fix(benchmark): seed engage brief, close phase-skip loophole, evidence-backed coverage 2026-08-11 17:09:35 +01:00
Violin 48a4f214d6 feat(guard): add receipt integrity verifier, fail-closed state parsers, and guard runtime tests 2026-08-10 08:54:56 +01:00
Violin d41aec7457 fix(guard): stabilize engagement path resolution 2026-08-08 13:29:11 +01:00
Violin d7e139c486 feat: implement violin_guard plugin with secure execution adapters, terminal policies, and pentest skill frameworks 2026-08-08 13:29:11 +01:00
Violin 5e21f2257f fix(benchmark,guard): enhance benchmark profiling, guard UX, and findings integration 2026-08-08 13:29:11 +01:00
Violin 9ed494d439 feat: introduce benchmark runner with Docker support and automated vulnerability calibration evidence 2026-08-08 13:29:11 +01:00
Violin 4b21dce94a feat: harden benchmark evaluation and guard runtime 2026-08-08 13:29:11 +01:00
DanandGitHub 5071b9689f docs(release): align workflow instructions, hypothesis discipline, and release v3.0.1 (#64)
Merge dev into master
2026-08-04 17:18:44 +01:00
DanandGitHub 2932bdf46c Make execution lifecycle recovery PID-safe (#56)
Record PID creation times and deadlines, make restart recovery identity-safe, and use UUID batch IDs.
2026-08-01 22:32:27 +01:00
DanandGitHub 7607bcb181 Make burst admission atomic (#61)
Closes #11
2026-08-01 22:20:47 +01:00
DanandGitHub e5e258fa0b Fix dotted target parsing and network bookkeeping (#60)
Closes #17
2026-08-01 22:09:33 +01:00
DanandGitHub f72f838933 Recover interrupted skill delivery (#59)
Closes #55
2026-08-01 22:02:44 +01:00
DanandGitHub 09d8e842e3 Stabilize v3.0.0 workflow contracts (#58)
Closes #54
2026-08-01 21:56:15 +01:00
Violin 7ee714a6ce fix(guard): resolve file path resolution and bootstrap issues 2026-07-26 16:03:02 +01:00
Violin 19af0fcc52 feat: implement guard plugin PTT workflow automation and batch execution handlers with associated regression coverage 2026-07-26 11:06:27 +01:00
Violin b274364118 feat: implement violin_guard plugin for secure pentest execution, target policy enforcement, and workflow orchestration 2026-07-25 14:13:38 +01:00
Violin 827ca411a0 Record research receipts for semantic unlocks 2026-07-22 11:29:35 +01:00
Violin 3f8eb5371f Add semantic anti-stuck enforcement 2026-07-19 01:28:01 +01:00
Violin dd557974a3 Require proof-backed finding self-review 2026-07-19 01:24:04 +01:00
Violin e625eb051c Enforce skill receipts in hooks and browsers 2026-07-19 01:18:13 +01:00
Violin 7ed3898dff gate execution on skill receipts 2026-07-19 01:08:16 +01:00
Violin a2837c6377 require skill delivery for PTT updates 2026-07-19 00:58:58 +01:00
Violin ae52d86e5a add automatic Kali backend selection 2026-07-19 00:44:08 +01:00
Violin 2332c48a64 add skill delivery receipts 2026-07-19 00:38:34 +01:00
Violin 5873cf9ddd fix CodeQL quality findings (v2.0.6) 2026-07-19 00:03:08 +01:00
Violin 22560d57b4 block secondary-only primary targets (#2) 2026-07-18 23:19:50 +01:00
Violin dc53bbb08a consolidate guard batch collaboration 2026-07-18 08:02:50 +01:00
Violin 5870509fdb feat: implement violin_guard plugin for centralized command execution auditing, terminal policy enforcement, and history tracking. 2026-07-17 20:14:20 +01:00