 Violin
|
58be36d628
|
refactor(guard): flatten resolve_target nesting from depth 5 to 2 via strategy helpers
|
2026-07-25 14:26:53 +01:00 |
|
|
Violin
|
fb25a56c2e
|
refactor(guard): decompose check_release into manifest, isolated import, snapshot, linter, and stale doc helpers
|
2026-07-25 14:26:02 +01:00 |
|
|
Violin
|
fb27692e41
|
refactor(guard): decompose handle_status into status blockers, phase metadata, and skill summary helpers
|
2026-07-25 14:25:12 +01:00 |
|
|
Violin
|
3d93298150
|
refactor(guard): decompose handle_review_batch into skill reservation and core execution helpers
|
2026-07-25 14:24:24 +01:00 |
|
|
Violin
|
502b8673cd
|
refactor(guard): decompose handle_record_ptt into focused helper functions
|
2026-07-25 14:23:35 +01:00 |
|
|
Violin
|
75de650f5e
|
refactor(guard): decompose _validate_review_batch into focused sub-validators
|
2026-07-25 14:22:55 +01:00 |
|
|
Violin
|
b274364118
|
feat: implement violin_guard plugin for secure pentest execution, target policy enforcement, and workflow orchestration
|
2026-07-25 14:13:38 +01:00 |
|
|
DanandGitHub
|
87ffbd4aef
|
Route PTT skill delivery from candidate source
Route PTT skill delivery from candidate source
|
2026-07-22 11:32:33 +01:00 |
|
|
Violin
|
db530964b4
|
Route PTT skill delivery from candidate source
|
2026-07-22 11:32:00 +01:00 |
|
|
DanandGitHub
|
6d585cb2e0
|
Record research receipts for semantic unlocks
Record research receipts for semantic unlocks
|
2026-07-22 11:30:14 +01:00 |
|
|
Violin
|
827ca411a0
|
Record research receipts for semantic unlocks
|
2026-07-22 11:29:35 +01:00 |
|
|
DanandGitHub
|
bcb75ae127
|
Clean release pytest basetemps
Clean release pytest basetemps
|
2026-07-22 11:26:06 +01:00 |
|
|
Violin
|
3f4c67bdfc
|
Clean release pytest basetemps
|
2026-07-22 11:25:26 +01:00 |
|
|
DanandGitHub
|
88dafad58e
|
Release Violin 3.0.0 profile
Release Violin 3.0.0 profile
|
2026-07-22 11:19:24 +01:00 |
|
|
Violin
|
5fc876367d
|
Release Violin 3.0.0 profile
|
2026-07-22 11:18:53 +01:00 |
|
|
DanandGitHub
|
c183730692
|
Remove obsolete skill marker contracts
Remove obsolete skill marker contracts
|
2026-07-22 11:10:07 +01:00 |
|
|
Violin
|
d3f3a587db
|
Remove obsolete skill marker contracts
|
2026-07-22 11:09:40 +01:00 |
|
|
Violin
|
5c40c33a1d
|
Merge master into dev before Violin 3.0 consolidation
|
2026-07-22 11:02:14 +01:00 |
|
|
DanandGitHub
|
3d7d2d513e
|
Add semantic anti-stuck enforcement
Add semantic anti-stuck enforcement
|
2026-07-22 11:01:32 +01:00 |
|
|
|
0e6f0d854f
|
fix: ruff format score.py (#46)
Co-authored-by: Violin <violin@local>
v2.0.8
|
2026-07-19 16:57:35 +01:00 |
|
|
Violin
|
b80acd2887
|
chore: v2.0.7+2.0.8 changelog, version bumps, lint fixes
|
2026-07-19 16:55:00 +01:00 |
|
|
Violin
|
397ba907d7
|
feat: add Duck Store benchmark harness
4-file suite evaluating Violin against escape.tech's Duck Store:
- benchmark/score.py — evidence-gated scorer (8 fixes from first run)
- benchmark/targets/duck-store/challenges.json — 20 article-parity vulns
- benchmark/targets/duck-store/scope.yaml — pre-baked scope
- benchmark/targets/duck-store/engage.md + report.md — prompts
Also adds explicit model section to config.yaml.
v2.0.7
|
2026-07-19 16:55:00 +01:00 |
|
|
|
c166e1a20b
|
docs: fix repo layout playbook breakdown for v2.0.6 (#32)
- Show pentest split: 7 operational + 16 vulnerability-class
- List web-attacks playbooks explicitly (SQLi, XSS, SSRF, cmdi, traversal)
- List access-control playbooks (auth-bypass, IDOR, JWT)
- Clarify template count includes reports, evidence, methodology, contracts
Co-authored-by: Violin <violin@local>
|
2026-07-19 09:01:22 +01:00 |
|
|
Violin
|
3f8eb5371f
|
Add semantic anti-stuck enforcement
|
2026-07-19 01:28:01 +01:00 |
|
|
DanandGitHub
|
75b32fe44e
|
Require proof-backed finding self-review
Require proof-backed finding self-review
|
2026-07-18 20:24:27 -04:00 |
|
|
Violin
|
dd557974a3
|
Require proof-backed finding self-review
|
2026-07-19 01:24:04 +01:00 |
|
|
DanandGitHub
|
d3a952d054
|
Enforce receipt bindings in hooks and browsers
Enforce receipt bindings in hooks and browsers
|
2026-07-18 20:18:37 -04:00 |
|
|
Violin
|
e625eb051c
|
Enforce skill receipts in hooks and browsers
|
2026-07-19 01:18:13 +01:00 |
|
|
DanandGitHub
|
d9b210c660
|
Gate execution on skill receipts
Gate execution on skill receipts
|
2026-07-18 20:08:53 -04:00 |
|
|
Violin
|
7ed3898dff
|
gate execution on skill receipts
|
2026-07-19 01:08:16 +01:00 |
|
|
DanandGitHub
|
fe66bbb3dd
|
Require skill delivery for PTT updates
Require skill delivery for PTT updates
|
2026-07-18 19:59:30 -04:00 |
|
|
Violin
|
a2837c6377
|
require skill delivery for PTT updates
|
2026-07-19 00:58:58 +01:00 |
|
|
DanandGitHub
|
289dd3b331
|
Add automatic Kali backend selection
Add automatic Kali backend selection
|
2026-07-18 19:44:34 -04:00 |
|
|
Violin
|
ae52d86e5a
|
add automatic Kali backend selection
|
2026-07-19 00:44:08 +01:00 |
|
|
DanandGitHub
|
b04f038059
|
Add skill delivery receipts
Add skill delivery receipts
|
2026-07-18 19:39:02 -04:00 |
|
|
Violin
|
2332c48a64
|
add skill delivery receipts
|
2026-07-19 00:38:34 +01:00 |
|
|
DanandGitHub
|
9c21b988df
|
Add v3 skill selection policy
Add v3 skill selection policy
|
2026-07-18 19:33:41 -04:00 |
|
|
Violin
|
5cf16544a7
|
add v3 skill selection policy
|
2026-07-19 00:31:20 +01:00 |
|
|
DanandGitHub
|
2626e53a1e
|
Merge pull request #24 from Strategic-Automation/dev
Release v2.0.6
v2.0.6
|
2026-07-18 19:15:07 -04:00 |
|
|
DanandGitHub
|
e23933099a
|
Merge pull request #23 from Strategic-Automation/codex/v2.0.6-code-quality
Resolve CodeQL standard quality findings (v2.0.6)
|
2026-07-18 19:07:24 -04:00 |
|
|
Violin
|
5873cf9ddd
|
fix CodeQL quality findings (v2.0.6)
|
2026-07-19 00:03:08 +01:00 |
|
|
DanandGitHub
|
6b555a945b
|
Merge pull request #22 from Strategic-Automation/codex/issue-3-history-exact-repeat
Fix exact-repeat history parsing (v2.0.5)
|
2026-07-18 18:35:54 -04:00 |
|
|
Violin
|
6e8ba6e77c
|
fix exact repeat history parsing (#3)
|
2026-07-18 23:31:16 +01:00 |
|
|
DanandGitHub
|
a0eb44f7b3
|
Merge pull request #21 from Strategic-Automation/codex/issue-2-secondary-host-primary-block
Block secondary-only primary targets (v2.0.4)
|
2026-07-18 18:22:06 -04:00 |
|
|
Violin
|
22560d57b4
|
block secondary-only primary targets (#2)
|
2026-07-18 23:19:50 +01:00 |
|
|
DanandGitHub
|
9b1092bc8c
|
Merge pull request #18 from Strategic-Automation/codex/issue-1-terminal-compound-policy
Fix compound terminal command policy (v2.0.3)
|
2026-07-18 18:12:33 -04:00 |
|
|
Violin
|
a7dffbd191
|
fix compound terminal command policy (#1)
|
2026-07-18 23:01:48 +01:00 |
|
|
DanandGitHub
|
37105bd1a7
|
Merge pull request #20 from Strategic-Automation/codex/workflow-least-privilege-v2-0-2
Restrict GitHub Actions token permissions (v2.0.2)
|
2026-07-18 17:58:19 -04:00 |
|
|
Violin
|
e2be6759a5
|
restrict workflow token permissions
|
2026-07-18 22:54:16 +01:00 |
|
|
DanandGitHub
|
9857463812
|
Merge pull request #19 from Strategic-Automation/codex/security-pytest-9-0-3
Upgrade pytest for CVE-2025-71176 (v2.0.1)
|
2026-07-18 17:49:23 -04:00 |
|