Dan and GitHub
5071b9689f
docs(release): align workflow instructions, hypothesis discipline, and release v3.0.1 ( #64 )
...
Merge dev into master
2026-08-04 17:18:44 +01:00
Dan and GitHub
2932bdf46c
Make execution lifecycle recovery PID-safe ( #56 )
...
Record PID creation times and deadlines, make restart recovery identity-safe, and use UUID batch IDs.
2026-08-01 22:32:27 +01:00
Dan and GitHub
7607bcb181
Make burst admission atomic ( #61 )
...
Closes #11
2026-08-01 22:20:47 +01:00
Dan and GitHub
e5e258fa0b
Fix dotted target parsing and network bookkeeping ( #60 )
...
Closes #17
2026-08-01 22:09:33 +01:00
Dan and GitHub
f72f838933
Recover interrupted skill delivery ( #59 )
...
Closes #55
2026-08-01 22:02:44 +01:00
Dan and GitHub
09d8e842e3
Stabilize v3.0.0 workflow contracts ( #58 )
...
Closes #54
2026-08-01 21:56:15 +01:00
Violin
6860f30876
style: format code with ruff
2026-07-26 17:11:10 +01:00
Violin
1e04f565b0
feat(guard): replace custom shell regexes with bashlex AST parsing
2026-07-26 17:11:05 +01:00
Violin
06a60afa47
feat(guard): upgrade IP/CIDR scope policy arithmetic to netaddr IPSet and yarl URL parsing
2026-07-26 17:10:27 +01:00
Violin
0b135660ee
feat(guard): replace platform-specific process termination with psutil tree cleanup
2026-07-26 17:09:55 +01:00
Violin
58f487f19d
feat(guard): migrate tool schemas and validation to Pydantic v2
2026-07-26 17:09:00 +01:00
Violin
7ee714a6ce
fix(guard): resolve file path resolution and bootstrap issues
2026-07-26 16:03:02 +01:00
Violin
7979359855
feat: implement terminal_policy guard to restrict unsafe local command execution
2026-07-26 14:02:49 +01:00
Violin
19af0fcc52
feat: implement guard plugin PTT workflow automation and batch execution handlers with associated regression coverage
2026-07-26 11:06:27 +01:00
Violin
e8c6a1c313
feat: implement terminal command guard policy to restrict target-touching actions
2026-07-26 11:04:05 +01:00
Violin
4fc7ffb4c6
feat: add terminal guard policy for filtering unsafe raw shell commands and include pentest playbook documentation.
2026-07-26 10:44:56 +01:00
Violin
b274364118
feat: implement violin_guard plugin for secure pentest execution, target policy enforcement, and workflow orchestration
2026-07-25 14:13:38 +01:00
Violin
827ca411a0
Record research receipts for semantic unlocks
2026-07-22 11:29:35 +01:00
Violin
d3f3a587db
Remove obsolete skill marker contracts
2026-07-22 11:09:40 +01:00
Violin
3f8eb5371f
Add semantic anti-stuck enforcement
2026-07-19 01:28:01 +01:00
Violin
dd557974a3
Require proof-backed finding self-review
2026-07-19 01:24:04 +01:00
Violin
e625eb051c
Enforce skill receipts in hooks and browsers
2026-07-19 01:18:13 +01:00
Violin
7ed3898dff
gate execution on skill receipts
2026-07-19 01:08:16 +01:00
Violin
a2837c6377
require skill delivery for PTT updates
2026-07-19 00:58:58 +01:00
Violin
ae52d86e5a
add automatic Kali backend selection
2026-07-19 00:44:08 +01:00
Violin
2332c48a64
add skill delivery receipts
2026-07-19 00:38:34 +01:00
Violin
5cf16544a7
add v3 skill selection policy
2026-07-19 00:31:20 +01:00
Violin
5873cf9ddd
fix CodeQL quality findings (v2.0.6)
2026-07-19 00:03:08 +01:00
Violin
6e8ba6e77c
fix exact repeat history parsing ( #3 )
2026-07-18 23:31:16 +01:00
Violin
22560d57b4
block secondary-only primary targets ( #2 )
2026-07-18 23:19:50 +01:00
Violin
a7dffbd191
fix compound terminal command policy ( #1 )
2026-07-18 23:01:48 +01:00
Violin
dc53bbb08a
consolidate guard batch collaboration
2026-07-18 08:02:50 +01:00
Violin
f461945394
Remove iteration cap and extend heartbeat cadence
2026-07-17 21:36:20 +01:00
Violin
2926beb3a7
Fix heartbeat command threshold
2026-07-17 21:06:51 +01:00
Violin
1a86fc7916
Fix release check in clean CI checkout
2026-07-17 20:44:06 +01:00
Violin
dc6d9a41a8
Allow arbitrary Kali CLI tools through guarded execution
2026-07-17 20:31:28 +01:00
Violin
5870509fdb
feat: implement violin_guard plugin for centralized command execution auditing, terminal policy enforcement, and history tracking.
2026-07-17 20:14:20 +01:00
Violin
b739e0ff9e
Refactor target extraction logic to simplify candidate identification and enhance test for explicit targets handling
2026-07-16 17:34:39 +01:00
Violin
0075850b61
Add playbooks for SQL Injection, SSRF, and XSS vulnerabilities; enhance testing suite
...
- Created a comprehensive playbook for SQL Injection (SQLi) detailing types, detection methods, tools, and remediation strategies.
- Added a playbook for Server-Side Request Forgery (SSRF) covering classification, detection payloads, and remediation guidance.
- Introduced a playbook for Cross-Site Scripting (XSS) including types, detection techniques, and safe proof of concept examples.
- Expanded the test suite with new tests for command history deduplication, scope authorization, and structured argument handling.
- Improved existing tests for engagement and execution tracking, ensuring robust coverage of functionality.
2026-07-16 17:20:00 +01:00
Violin
a51aa00d06
Refactor playbooks and templates for improved evidence handling and research documentation
...
- Updated various playbooks to use `$ENG_DIR` for storing evidence files instead of hardcoded paths.
- Enhanced documentation in playbooks to include mandatory CVE and exploit research fields in hypotheses.
- Introduced a new `pty-safe-delivery.md` reference for safe file delivery practices over PTY.
- Added a `shell_ctrl.py` template for PTY shell control with safeguards against long commands and file transfers.
- Improved tests to validate new hypothesis fields and ensure compliance with updated playbook requirements.
- General cleanup and consistency improvements across playbooks and templates.
2026-07-13 21:10:43 +01:00
Violin
e84de38943
Serialise concurrent guard state transitions
2026-07-13 08:49:36 +01:00
Violin
98b4d8ed7d
Bind sync batches to captured PTT tasks
2026-07-13 08:45:44 +01:00
Violin
ac5848a85a
Enforce PTT phase and hypothesis relevance
2026-07-13 08:41:03 +01:00
Violin
cdae366bdc
Enforce scope authorization and exclusions
2026-07-13 08:36:02 +01:00
Violin
a2c551ef59
Fix bounded sync credit enforcement
2026-07-13 08:30:07 +01:00
Violin
ea7e094528
Remediate audit P0/P1 findings; migrate tests to green
...
- state.py: fcntl/msvcrt file locking, reservation+finalization, history
verification, remove dead subprocess bridges (p1-lock)
- hypotheses.py: enforce canonical status, phase/host/service/port match,
reject unrelated hypotheses (p1-hyp)
- tools.py/__init__.py: retain kwargs (task_id), lifecycle hooks wired
(REGISTERED_TOOLS + no-op-then-active hooks) (p1-life)
- Migrate tests from tests/*.py to tests/guard + tests/pentest_docs; align
to actual API (handle_target returns ips[0], handle_exec_burst fail-closed,
PTT self-certify uses real batch_id, post-exploitation requires hypothesis)
- scoping.md: add checkpoint.json continuity-artifact drift note
- pyproject.toml: v1.2.0, per-file-ignores for tests/scripts (E402/S101)
- Add .pytest-tmp-plugin/ to .gitignore
64 passed; ruff clean.
2026-07-12 20:57:55 +01:00
