171 Commits
Author SHA1 Message Date
DanandGitHub 2932bdf46c Make execution lifecycle recovery PID-safe (#56)
Record PID creation times and deadlines, make restart recovery identity-safe, and use UUID batch IDs.
2026-08-01 22:32:27 +01:00
DanandGitHub 7607bcb181 Make burst admission atomic (#61)
Closes #11
2026-08-01 22:20:47 +01:00
DanandGitHub e5e258fa0b Fix dotted target parsing and network bookkeeping (#60)
Closes #17
2026-08-01 22:09:33 +01:00
DanandGitHub f72f838933 Recover interrupted skill delivery (#59)
Closes #55
2026-08-01 22:02:44 +01:00
DanandGitHub 09d8e842e3 Stabilize v3.0.0 workflow contracts (#58)
Closes #54
2026-08-01 21:56:15 +01:00
Violin 021fad0c0d chore: pin Python 3.11 in .python-version and pyproject.toml to match Hermes runtime 2026-07-26 17:25:27 +01:00
Violin acd270c171 fix(guard): use TypeVar for Python 3.11 compatibility in schemas.py 2026-07-26 17:23:25 +01:00
Violin d1ab4849bc docs: update CHANGELOG.md and README.md with merged branch features 2026-07-26 17:13:58 +01:00
Violin 6860f30876 style: format code with ruff 2026-07-26 17:11:10 +01:00
Violin 1e04f565b0 feat(guard): replace custom shell regexes with bashlex AST parsing 2026-07-26 17:11:05 +01:00
Violin 06a60afa47 feat(guard): upgrade IP/CIDR scope policy arithmetic to netaddr IPSet and yarl URL parsing 2026-07-26 17:10:27 +01:00
Violin 0b135660ee feat(guard): replace platform-specific process termination with psutil tree cleanup 2026-07-26 17:09:55 +01:00
Violin 58f487f19d feat(guard): migrate tool schemas and validation to Pydantic v2 2026-07-26 17:09:00 +01:00
Violin 7ee714a6ce fix(guard): resolve file path resolution and bootstrap issues 2026-07-26 16:03:02 +01:00
Violin 7979359855 feat: implement terminal_policy guard to restrict unsafe local command execution 2026-07-26 14:02:49 +01:00
Violin 19af0fcc52 feat: implement guard plugin PTT workflow automation and batch execution handlers with associated regression coverage 2026-07-26 11:06:27 +01:00
Violin e8c6a1c313 feat: implement terminal command guard policy to restrict target-touching actions 2026-07-26 11:04:05 +01:00
Violin 4fc7ffb4c6 feat: add terminal guard policy for filtering unsafe raw shell commands and include pentest playbook documentation. 2026-07-26 10:44:56 +01:00
Violin 728376fa0a perf(guard): pre-compile module-level regex constants in ptt.py 2026-07-25 14:28:35 +01:00
Violin af311a340e refactor(guard): flatten _has_target_literal nesting from depth 5 to 2 via token helper 2026-07-25 14:27:36 +01:00
Violin 58be36d628 refactor(guard): flatten resolve_target nesting from depth 5 to 2 via strategy helpers 2026-07-25 14:26:53 +01:00
Violin fb25a56c2e refactor(guard): decompose check_release into manifest, isolated import, snapshot, linter, and stale doc helpers 2026-07-25 14:26:02 +01:00
Violin fb27692e41 refactor(guard): decompose handle_status into status blockers, phase metadata, and skill summary helpers 2026-07-25 14:25:12 +01:00
Violin 3d93298150 refactor(guard): decompose handle_review_batch into skill reservation and core execution helpers 2026-07-25 14:24:24 +01:00
Violin 502b8673cd refactor(guard): decompose handle_record_ptt into focused helper functions 2026-07-25 14:23:35 +01:00
Violin 75de650f5e refactor(guard): decompose _validate_review_batch into focused sub-validators 2026-07-25 14:22:55 +01:00
Violin b274364118 feat: implement violin_guard plugin for secure pentest execution, target policy enforcement, and workflow orchestration 2026-07-25 14:13:38 +01:00
DanandGitHub 87ffbd4aef Route PTT skill delivery from candidate source
Route PTT skill delivery from candidate source
2026-07-22 11:32:33 +01:00
Violin db530964b4 Route PTT skill delivery from candidate source 2026-07-22 11:32:00 +01:00
DanandGitHub 6d585cb2e0 Record research receipts for semantic unlocks
Record research receipts for semantic unlocks
2026-07-22 11:30:14 +01:00
Violin 827ca411a0 Record research receipts for semantic unlocks 2026-07-22 11:29:35 +01:00
DanandGitHub bcb75ae127 Clean release pytest basetemps
Clean release pytest basetemps
2026-07-22 11:26:06 +01:00
Violin 3f4c67bdfc Clean release pytest basetemps 2026-07-22 11:25:26 +01:00
DanandGitHub 88dafad58e Release Violin 3.0.0 profile
Release Violin 3.0.0 profile
2026-07-22 11:19:24 +01:00
Violin 5fc876367d Release Violin 3.0.0 profile 2026-07-22 11:18:53 +01:00
DanandGitHub c183730692 Remove obsolete skill marker contracts
Remove obsolete skill marker contracts
2026-07-22 11:10:07 +01:00
Violin d3f3a587db Remove obsolete skill marker contracts 2026-07-22 11:09:40 +01:00
Violin 5c40c33a1d Merge master into dev before Violin 3.0 consolidation 2026-07-22 11:02:14 +01:00
DanandGitHub 3d7d2d513e Add semantic anti-stuck enforcement
Add semantic anti-stuck enforcement
2026-07-22 11:01:32 +01:00
0e6f0d854f fix: ruff format score.py (#46)
Co-authored-by: Violin <violin@local>
v2.0.8
2026-07-19 16:57:35 +01:00
Violin b80acd2887 chore: v2.0.7+2.0.8 changelog, version bumps, lint fixes 2026-07-19 16:55:00 +01:00
Violin 397ba907d7 feat: add Duck Store benchmark harness
4-file suite evaluating Violin against escape.tech's Duck Store:
- benchmark/score.py — evidence-gated scorer (8 fixes from first run)
- benchmark/targets/duck-store/challenges.json — 20 article-parity vulns
- benchmark/targets/duck-store/scope.yaml — pre-baked scope
- benchmark/targets/duck-store/engage.md + report.md — prompts

Also adds explicit model section to config.yaml.
v2.0.7
2026-07-19 16:55:00 +01:00
c166e1a20b docs: fix repo layout playbook breakdown for v2.0.6 (#32)
- Show pentest split: 7 operational + 16 vulnerability-class
- List web-attacks playbooks explicitly (SQLi, XSS, SSRF, cmdi, traversal)
- List access-control playbooks (auth-bypass, IDOR, JWT)
- Clarify template count includes reports, evidence, methodology, contracts

Co-authored-by: Violin <violin@local>
2026-07-19 09:01:22 +01:00
Violin 3f8eb5371f Add semantic anti-stuck enforcement 2026-07-19 01:28:01 +01:00
DanandGitHub 75b32fe44e Require proof-backed finding self-review
Require proof-backed finding self-review
2026-07-18 20:24:27 -04:00
Violin dd557974a3 Require proof-backed finding self-review 2026-07-19 01:24:04 +01:00
DanandGitHub d3a952d054 Enforce receipt bindings in hooks and browsers
Enforce receipt bindings in hooks and browsers
2026-07-18 20:18:37 -04:00
Violin e625eb051c Enforce skill receipts in hooks and browsers 2026-07-19 01:18:13 +01:00
DanandGitHub d9b210c660 Gate execution on skill receipts
Gate execution on skill receipts
2026-07-18 20:08:53 -04:00
Violin 7ed3898dff gate execution on skill receipts 2026-07-19 01:08:16 +01:00