External/violin
1
0
Fork 0
mirror of https://github.com/Strategic-Automation/violin.git synced 2026-08-14 12:33:37 +02:00
Code Issues Packages Projects Releases Wiki Activity
127 Commits 2 Branches 8 Tags
master
Commit Graph
53 Commits
Author SHA1 Message Date
DanandGitHub 5071b9689f docs(release): align workflow instructions, hypothesis discipline, and release v3.0.1 (#64) 
Merge dev into master
 2026-08-04 17:18:44 +01:00
DanandGitHub 2932bdf46c Make execution lifecycle recovery PID-safe (#56) 
Record PID creation times and deadlines, make restart recovery identity-safe, and use UUID batch IDs.
 2026-08-01 22:32:27 +01:00
DanandGitHub 7607bcb181 Make burst admission atomic (#61) 
Closes #11
 2026-08-01 22:20:47 +01:00
DanandGitHub e5e258fa0b Fix dotted target parsing and network bookkeeping (#60) 
Closes #17
 2026-08-01 22:09:33 +01:00
DanandGitHub f72f838933 Recover interrupted skill delivery (#59) 
Closes #55
 2026-08-01 22:02:44 +01:00
DanandGitHub 09d8e842e3 Stabilize v3.0.0 workflow contracts (#58) 
Closes #54
 2026-08-01 21:56:15 +01:00
Violin 6860f30876 style: format code with ruff 2026-07-26 17:11:10 +01:00
Violin 1e04f565b0 feat(guard): replace custom shell regexes with bashlex AST parsing 2026-07-26 17:11:05 +01:00
Violin 06a60afa47 feat(guard): upgrade IP/CIDR scope policy arithmetic to netaddr IPSet and yarl URL parsing 2026-07-26 17:10:27 +01:00
Violin 0b135660ee feat(guard): replace platform-specific process termination with psutil tree cleanup 2026-07-26 17:09:55 +01:00
Violin 58f487f19d feat(guard): migrate tool schemas and validation to Pydantic v2 2026-07-26 17:09:00 +01:00
Violin 7ee714a6ce fix(guard): resolve file path resolution and bootstrap issues 2026-07-26 16:03:02 +01:00
Violin 7979359855 feat: implement terminal_policy guard to restrict unsafe local command execution 2026-07-26 14:02:49 +01:00
Violin 19af0fcc52 feat: implement guard plugin PTT workflow automation and batch execution handlers with associated regression coverage 2026-07-26 11:06:27 +01:00
Violin e8c6a1c313 feat: implement terminal command guard policy to restrict target-touching actions 2026-07-26 11:04:05 +01:00
Violin 4fc7ffb4c6 feat: add terminal guard policy for filtering unsafe raw shell commands and include pentest playbook documentation. 2026-07-26 10:44:56 +01:00
Violin b274364118 feat: implement violin_guard plugin for secure pentest execution, target policy enforcement, and workflow orchestration 2026-07-25 14:13:38 +01:00
Violin 827ca411a0 Record research receipts for semantic unlocks 2026-07-22 11:29:35 +01:00
Violin d3f3a587db Remove obsolete skill marker contracts 2026-07-22 11:09:40 +01:00
Violin 3f8eb5371f Add semantic anti-stuck enforcement 2026-07-19 01:28:01 +01:00
Violin dd557974a3 Require proof-backed finding self-review 2026-07-19 01:24:04 +01:00
Violin e625eb051c Enforce skill receipts in hooks and browsers 2026-07-19 01:18:13 +01:00
Violin 7ed3898dff gate execution on skill receipts 2026-07-19 01:08:16 +01:00
Violin a2837c6377 require skill delivery for PTT updates 2026-07-19 00:58:58 +01:00
Violin ae52d86e5a add automatic Kali backend selection 2026-07-19 00:44:08 +01:00
Violin 2332c48a64 add skill delivery receipts 2026-07-19 00:38:34 +01:00
Violin 5cf16544a7 add v3 skill selection policy 2026-07-19 00:31:20 +01:00
Violin 5873cf9ddd fix CodeQL quality findings (v2.0.6) 2026-07-19 00:03:08 +01:00
Violin 6e8ba6e77c fix exact repeat history parsing (#3) 2026-07-18 23:31:16 +01:00
Violin 22560d57b4 block secondary-only primary targets (#2) 2026-07-18 23:19:50 +01:00
Violin a7dffbd191 fix compound terminal command policy (#1) 2026-07-18 23:01:48 +01:00
Violin dc53bbb08a consolidate guard batch collaboration 2026-07-18 08:02:50 +01:00
Violin f461945394 Remove iteration cap and extend heartbeat cadence 2026-07-17 21:36:20 +01:00
Violin 2926beb3a7 Fix heartbeat command threshold 2026-07-17 21:06:51 +01:00
Violin 1a86fc7916 Fix release check in clean CI checkout 2026-07-17 20:44:06 +01:00
Violin dc6d9a41a8 Allow arbitrary Kali CLI tools through guarded execution 2026-07-17 20:31:28 +01:00
Violin 5870509fdb feat: implement violin_guard plugin for centralized command execution auditing, terminal policy enforcement, and history tracking. 2026-07-17 20:14:20 +01:00
Violin b739e0ff9e Refactor target extraction logic to simplify candidate identification and enhance test for explicit targets handling 2026-07-16 17:34:39 +01:00
Violin 0075850b61 Add playbooks for SQL Injection, SSRF, and XSS vulnerabilities; enhance testing suite 
- Created a comprehensive playbook for SQL Injection (SQLi) detailing types, detection methods, tools, and remediation strategies.
- Added a playbook for Server-Side Request Forgery (SSRF) covering classification, detection payloads, and remediation guidance.
- Introduced a playbook for Cross-Site Scripting (XSS) including types, detection techniques, and safe proof of concept examples.
- Expanded the test suite with new tests for command history deduplication, scope authorization, and structured argument handling.
- Improved existing tests for engagement and execution tracking, ensuring robust coverage of functionality.
 2026-07-16 17:20:00 +01:00
Violin a51aa00d06 Refactor playbooks and templates for improved evidence handling and research documentation 
- Updated various playbooks to use `$ENG_DIR` for storing evidence files instead of hardcoded paths.
- Enhanced documentation in playbooks to include mandatory CVE and exploit research fields in hypotheses.
- Introduced a new `pty-safe-delivery.md` reference for safe file delivery practices over PTY.
- Added a `shell_ctrl.py` template for PTY shell control with safeguards against long commands and file transfers.
- Improved tests to validate new hypothesis fields and ensure compliance with updated playbook requirements.
- General cleanup and consistency improvements across playbooks and templates.
 2026-07-13 21:10:43 +01:00
Violin e84de38943 Serialise concurrent guard state transitions 2026-07-13 08:49:36 +01:00
Violin 98b4d8ed7d Bind sync batches to captured PTT tasks 2026-07-13 08:45:44 +01:00
Violin ac5848a85a Enforce PTT phase and hypothesis relevance 2026-07-13 08:41:03 +01:00
Violin cdae366bdc Enforce scope authorization and exclusions 2026-07-13 08:36:02 +01:00
Violin a2c551ef59 Fix bounded sync credit enforcement 2026-07-13 08:30:07 +01:00
Violin ea7e094528 Remediate audit P0/P1 findings; migrate tests to green 
- state.py: fcntl/msvcrt file locking, reservation+finalization, history
  verification, remove dead subprocess bridges (p1-lock)
- hypotheses.py: enforce canonical status, phase/host/service/port match,
  reject unrelated hypotheses (p1-hyp)
- tools.py/__init__.py: retain kwargs (task_id), lifecycle hooks wired
  (REGISTERED_TOOLS + no-op-then-active hooks) (p1-life)
- Migrate tests from tests/*.py to tests/guard + tests/pentest_docs; align
  to actual API (handle_target returns ips[0], handle_exec_burst fail-closed,
  PTT self-certify uses real batch_id, post-exploitation requires hypothesis)
- scoping.md: add checkpoint.json continuity-artifact drift note
- pyproject.toml: v1.2.0, per-file-ignores for tests/scripts (E402/S101)
- Add .pytest-tmp-plugin/ to .gitignore

64 passed; ruff clean.
 2026-07-12 20:57:55 +01:00
Violin 48b8abd292 Audit pentest skill docs against guard surface 2026-07-12 17:18:49 +01:00
Violin 570eaf1605 Make guard test suite green and explicit in CI 2026-07-12 16:52:53 +01:00
Violin 426e7c4817 Align guard tests with plugin contract 2026-07-12 16:35:29 +01:00
Violin 8d8fb81ffb Consolidate Violin Guard into Hermes plugin 2026-07-12 16:00:16 +01:00