← back to report

usestrix/strix

// all events — 2026-07-28

Type AI Score Description Actor Reason Date
commit 1.00 Pin release-workflow actions to commit SHAs + least-privileg Commit message contains explicit AI assi 2026-07-23
pr 0.15 feat: support API specs and Postman collections as targets Technical style, minor over-explanation 2026-07-23
pr 0.10 fix: resolve type checking and code quality warnings Slightly formal template section but con 2026-07-28
pr 0.10 fix(tui): use running state for app lifecycle guards Technical, domain-specific, no AI-style 2026-07-27
pr 0.10 fix(report): write executive report atomically Technical changelog language, no signs o 2026-07-27
pr 0.10 docs: explain local model context sizing Casual, list-driven doc updates; lacks A 2026-07-27
pr 0.10 feat(runtime): cap spawned child agents Clear, domain-specific summary; no obvio 2026-07-27
pr 0.10 feat(llm): cache recent Claude prompt context Direct technical language and test outpu 2026-07-27
pr 0.10 feat(config): add per-request token budget Concise summary; technical vocabulary do 2026-07-27
pr 0.10 fix(runtime): skip unreadable local source entries Human test debug output, concise technic 2026-07-27
pr 0.10 Raise on LiteLLM response.failed streams Uses specialized phrasing and test refer 2026-07-27
pr 0.10 fix(tui): show scan failure reason Domain-rich, detailed but direct; lacks 2026-07-27
pr 0.10 ci: publish strix-agent to PyPI on release tags Infrastructure/CI context, straightforwa 2026-07-27
pr 0.10 fix(core): treat cloned repo targets as source-aware whitebo Informal tone, domain-specific details, 2026-07-26
pr 0.10 security: redact session token from viewer access logs Technical detail, domain terms, no AI-st 2026-07-25
pr 0.10 security: mitigate ReDoS in proxy view_request regex search Concise, technical, with domain context; 2026-07-25
pr 0.10 security: bound Content-Length parsing in viewer server Direct, domain-specific, not overly form 2026-07-25
pr 0.10 fix(core): wake parent on terminal child status Casual tone, specific details, human-lik 2026-07-25
pr 0.10 runtime: resolve staged local-dir path to avoid symlink reje Contains inline code, clear macOS specif 2026-07-22
pr 0.10 feat(dedupe): add dedicated deduplication model Precise, technical, and informal; lacks 2026-07-21
pr 0.10 docs(cli): document exit code 1 and clarify exit 0 semantics Technical explanation, includes typos an 2026-07-24
pr 0.10 feat(verification): independent adversarial finding verifica Domain-specific, well-explained, uses te 2026-07-21
pr 0.10 Add Dependabot for dependency updates Clear, domain-specific explanation; info 2026-07-23
pr 0.10 Add an npm resolution cooldown for the local-viewer frontend Detailed, domain-focused, some informal 2026-07-23
pr 0.10 Sign in with a ChatGPT subscription for inference Text is technical and domain-focused, no 2026-07-22
pr 0.10 Add a uv resolution cooldown for the Python deps Technical writing with project-specific 2026-07-23
pr 0.10 Pin release-workflow actions to commit SHAs + least-privileg Strong domain context, informal phrasing 2026-07-23
pr 0.10 fix(report): use bare-model fallback in usage-ledger cost es Domain-specific, technical error explana 2026-07-23
pr 0.10 Quit after scan instead of hosting local viewer Direct phrasing, minor verbosity but hum 2026-07-22
pr 0.10 test(runner): repair the root-prompt settings stub so the su Detailed test fix log with code context; 2026-07-21
pr 0.10 fix(runtime): reap the sandbox container when Caido bootstra Detailed, domain-specific reasoning with 2026-07-21
pr 0.10 docs(reporting): add CVSS calibration guidance to reduce sev Uses domain-specific examples, concise e 2026-07-21
pr 0.10 fix(bedrock): give Claude an explicit, clamped output ceilin Highly technical with error context and 2026-07-02
pr 0.05 feat(report): suppress findings from a baseline run Technical, precise, CLI details; no AI h 2026-07-27
pr 0.05 feat(llm): enable Bedrock/Anthropic prompt caching for Claud Domain-specific, measured detail; human 2026-07-15
pr 0.05 fix(tui): show rejected vulnerability reports as rejected Technical, concise, domain-specific; no 2026-07-21
pr 0.05 Local viewer: prominent scan switcher + rename to "pentest" Contains informal notes and specific con 2026-07-22
pr 0.05 Local viewer: UI polish and a Feedback & support tab Polished human changelog, specific fixes 2026-07-22
pr 0.05 docs(llm): add NVIDIA Build provider setup Detailed technical reasoning, bullet poi 2026-07-22
pr 0.05 fix(report): write the executive report atomically Specific technical details, explanatory, 2026-07-21
pr 0.05 fix(tui): show proxy tool errors instead of dropping them Technical, concise, with clear issue con 2026-07-22
pr 0.04 docs(skills): add MCP/DB read-only guard bypass skill Domain jargon, terseness, truncated deta 2026-07-22
pr 0.03 fix(tls): replace raw urllib with requests for external HTTP Contains error messages and deep domain 2026-07-27
pr 0.02 fix(tls): fall back to certifi CA bundle for urllib callers Casual tone, uses jargon, direct; looks 2026-07-27
pr 0.02 fix(tui): guard app-level UI work with is_running Terse, domain-specific explanation; info 2026-07-27
pr 0.01 chore: release v1.3.0 Standard release message with template s 2026-07-22
commit 0.00 Scope viewer session cookie to the bound port (#922) Concise commit message with Co-authored- 2026-07-28
commit 0.00 fix: recoverable guardrail blocks and decoupled crash-notify — 2026-07-27
commit 0.00 fix viewer tool call collisions across agents (#917) Terse commit message; standard human sty 2026-07-27
commit 0.00 fix(cli): align View label spacing in final panel Terese technical summary, human-written, 2026-07-27
commit 0.00 chore: release v1.4.1 Single-line release note; common for hum 2026-07-27
commit 0.00 fix(tls): replace raw urllib with requests for external HTTP Commit has human co-authors, technical p 2026-07-27
commit 0.00 chore: release v1.4.0 Single-line release version bump; univer 2026-07-27
commit 0.00 fix(runtime): wake parent when child hits a terminal state ( Concise, domain-specific, typical human 2026-07-27
commit 0.00 feat(runtime): graduated wrap-up warnings, budget reserve, a — 2026-07-27
commit 0.00 fix(cli): don't dump raw warm-up traceback over the LLM erro — 2026-07-27
commit 0.00 feat(llm): enable Bedrock/Anthropic prompt caching for Claud Standard feat commit with co-authors; te 2026-07-27
commit 0.00 Add Linux ARM64 standalone release support (#886) Brief technical commit, release support 2026-07-26
commit 0.00 fix(runtime): retry transient mid-stream provider errors ins — 2026-07-26
commit 0.00 feat(context): spill oversized tool output into the sandbox — 2026-07-26
commit 0.00 feat(context): model-aware conversation compaction for long — 2026-07-26
commit 0.00 refactor(context): trim verbose comments Concise commit message with standard hum 2026-07-26
commit 0.00 fix(context): reject tool-output byte ceilings below the not Technical explanation with domain detail 2026-07-25
commit 0.00 fix(context): reserve notice budget so bounded output honors Technical jargon and structured but info 2026-07-25
commit 0.00 fix(context): bound native filesystem tool output in Respons In-depth explanation and domain specific 2026-07-25
commit 0.00 fix(context): clamp shell output cap and count byte-trimmed Domain-specific, terse description with 2026-07-25
commit 0.00 feat(context): bound per-tool output before it enters agent Bullet points, domain jargon, and inform 2026-07-25
commit 0.00 feat(reporting): add read-only list_reports + get_report too — 2026-07-26
commit 0.00 docs(skills): remove references to tools not installed in th Long, technical and structured documenta 2026-07-26
commit 0.00 fix: restore viewer-auth.json path in auth module docstring Brief, imperative tone typical of human 2026-07-26
commit 0.00 refactor: move strix/viewer under strix/interface Standard refactor message; no signs of A 2026-07-26
commit 0.00 refactor(reports): fold fence helpers into report writer Concise commit message with domain-speci 2026-07-25
commit 0.00 fix(reports): safe-fence code-location snippets in markdown Technical, terse, and domain-specific; n 2026-07-25
commit 0.00 fix(reports): safe-fence markdown PoC export and share fence Direct, technical commit message; no sig 2026-07-25
commit 0.00 fix(reports): auto-detect PoC language with Python fallback Clear, brief, and technical; fits human 2026-07-25
commit 0.00 fix(reports): strip markdown code fence from poc_script_code Technical terminology, concise phrasing; 2026-07-25
commit 0.00 Rename root agent to Strix Simple rename commit; no AI hallmarks. 2026-07-25
commit 0.00 feat(dedupe): add dedicated deduplication model (#823) Includes co-authors, but no AI-related t 2026-07-25
commit 0.00 runtime: resolve staged local-dir path to avoid symlink reje Technical, concise commit summary; human 2026-07-25
commit 0.00 docs(cli): document exit code 1 and clarify exit 0 semantics Detailed, domain-specific docs change; f 2026-07-24
commit 0.00 Sign in with a ChatGPT subscription for inference (#854) Contains co-author trailers; commit mess 2026-07-24
commit 0.00 chore(deps): bump setuptools to 83.0.0 (GHSA-h35f-9h28-mq5c) Standard dependency bump; no AI signals 2026-07-24
commit 0.00 Quit after scan instead of hosting local viewer Direct, concise commit; technical contex 2026-07-22
commit 0.00 fix(deps): cap cryptography <49 to keep Intel macOS universa Technical commit message with domain jar 2026-07-22
commit 0.00 chore(deps): bump cryptography to 49.0.0 and pyasn1 to 0.6.4 Standard dependency bump commit; uses te 2026-07-22
commit 0.00 feat(cli): update notifications + self-update (strix --updat Contains technical shorthand and informa 2026-07-22
commit 0.00 chore: release v1.3.1 Typical brief release commit message wit 2026-07-22
commit 0.00 sandbox: bump install.sh pre-pull tag to 1.1.0 (match runtim Short, technical commit; no signs of AI- 2026-07-22
commit 0.00 sandbox: bump default inner-sandbox image to 1.1.0 Short technical commit, domain-specific 2026-07-22
commit 0.00 chore: release v1.3.0 (#849) Standard release commit; minimal, human- 2026-07-22
commit 0.00 Local viewer: prominent scan switcher + rename to "pentest" Concise technical summary; no formal or 2026-07-22
commit 0.00 Local viewer: UI polish and a Feedback & support tab (#847) Terse UI update note; informal and domai 2026-07-22
commit 0.00 sandbox: shrink image 7.2GB → 3.8GB (cache cleanup, multi-st Terse, domain-specific changelog, no AI 2026-07-22
commit 0.00 fix(prompt): make root agent orchestrate-only and fold fixin Concise commit message, clear domain ter 2026-07-21
commit 0.00 fix(container): keep /app/.venv/bin on the login-shell PATH Compact technical fix, standard human su 2026-07-22
commit 0.00 chore: release v1.2.0 Standard release commit, no AI signals. 2026-07-21
commit 0.00 Local run viewer: email reports, run history, and the platfo Concise, technical summary with no AI ha 2026-07-21
commit 0.00 docs(skills): add Active Directory / Kerberos domain testing Detailed, domain-specific commit with ge 2026-07-21
commit 0.00 docs(reporting): add CVSS calibration guidance to reduce sev Domain-specific guidance and typical hum 2026-07-21
commit 0.00 fix(report): prevent code-fence breakout in vulnerability ma Deep technical details, human phrasing, 2026-07-21
commit 0.00 strip transfer encoding (#820) Brief/tacit commit, minimal detail, clea 2026-07-21
commit 0.00 fix(proxy): recompute Content-Length when replaying a modifi Contains a co-author GitHub trailer, but 2026-07-21
commit 0.00 docs(skills): add grafana_prometheus observability pivot ski Commit message uses concise, domain-spec 2026-07-20
commit 0.00 recon asset discovery skill (#809) Commit messages are terse and domain-spe 2026-07-19
commit 0.00 chore(llm): shorten timeout helper docstring; update tests Concise, domain-specific commit message; 2026-07-18
commit 0.00 fix(llm): use a JSON-serializable per-turn model timeout Technical language, references to code/d 2026-07-18
commit 0.00 fix(llm): use httpx.Timeout read-inactivity for per-turn mod Direct summary with technical phrasing; 2026-07-18
commit 0.00 fix(llm): add per-turn model request timeout so stalled stre Terse, technical message; no AI indicato 2026-07-18
commit 0.00 fix(llm): retry statusless mid-stream provider errors (quota Domain-specific, concise, references to 2026-07-17
commit 0.00 fix(llm): retry statusless mid-stream provider errors (quota Similar to prior; clear technical focus, 2026-07-17
commit 0.00 fix(report): restore cost tracking for OpenRouter and other — 2026-07-17
commit 0.00 revert(proxy): drop overfit Caido reconnect/HTTPQL band-aids — 2026-07-17
commit 0.00 fix(proxy,tooling): serialize+reconnect Caido client, action — 2026-07-17
commit 0.00 fix(prompt): down-rate or skip findings on demo data / demo — 2026-07-17
commit 0.00 fix(runtime): close the docker client on session cleanup (#7 Standard commit message style; brief and 2026-07-16
commit 0.00 fix(runtime): cap sandbox container logs to prevent host dis Domain-specific commit message; no AI st 2026-07-16
commit 0.00 docs(python skill): recommend a task-unique PoC filename to Direct, human-written doc change; concis 2026-07-16
commit 0.00 docs(python skill): use a distinctive PoC filename to avoid Clear domain context, no AI-typical phra 2026-07-16
commit 0.00 docs(prompts,skills): stop hardcoding /workspace/scratch pat Technical explanation, typical human com 2026-07-16
commit 0.00 docs(tools): guide proportional wait_for_message timeouts (# — 2026-07-16
commit 0.00 docs(skills): add research-backed katana output-reduction fl Uses specific tool flags and domain term 2026-07-16
commit 0.00 docs(prompts,skills): scope cleanup to own files; dedupe JSO Informal, references specific review and 2026-07-16
commit 0.00 docs(prompts,skills): bound recon output for shared-disk hyg Detailed, project-specific, uses domain 2026-07-16
commit 0.00 Revert "fix(runtime): retry transient sandbox startup failur — 2026-07-16
commit 0.00 fix(runtime): bound nano_cpus to docker's int64 NanoCPUs ran Technical, concise, updates bound for do 2026-07-16
commit 0.00 fix(runtime): also suppress OverflowError for non-finite STR Concise technical fix; domain context pr 2026-07-16
commit 0.00 feat(runtime): opt-in resource limits for docker sandbox con Technical commit message with abbreviati 2026-07-16
commit 0.00 fix(core): bound per-agent image memory (proactive budget + — 2026-07-16
commit 0.00 feat(runtime): resolve sandbox ports over a shared Docker ne — 2026-07-15
commit 0.00 fix(runtime): retry transient sandbox startup failures (#768 Commit messages are terse with technical 2026-07-15
commit 0.00 fix(runtime): stage symlink-safe copies for LocalDir uploads Technical language, concise commits, dom 2026-07-14
commit 0.00 chore: release v1.1.0 (#765) — 2026-07-14
commit 0.00 Default sandbox exec commands to Bash (#764) Standard Git commit, human co-author, te 2026-07-14
commit 0.00 Update README Extremely brief update message, no AI si 2026-07-14
commit 0.00 Warn when configured LLM is not frontier-recommended (#586) — 2026-07-14
commit 0.00 chore(telemetry): minor telemetry updates (#761) — 2026-07-13
commit 0.00 feat(llm): change OpenRouter LLM request headers (#760) — 2026-07-13
commit 0.00 fix(tui): restore snappy sweep/progress animation frame rate — 2026-07-13
commit 0.00 feat: add weak password detection skill (#621) (#654) Standard conventional commit, no AI hall 2026-07-13
commit 0.00 Deduplicate scan ended telemetry (#758) Commit messages and steps are natural an 2026-07-13
commit 0.00 docs(prompts): strengthen report guidance (severity, chainin — 2026-07-13
commit 0.00 fix(reporting): require advisory_cvss for dependency finding — 2026-07-13
commit 0.00 Use core LiteLLM dependency (#752) Terse, domain-specific commit, no AI phr 2026-07-12
commit 0.00 Add dependency reporting fields (#751) Straightforward commit message, typical 2026-07-12
commit 0.00 fix(deps): cap openai<2.45 and add litellm[proxy] so fresh i Commit messages and trailers are human s 2026-07-12
pr 0.00 fix: pre-v1-style lifecycle resilience — mailbox delivery, u — 2026-07-27
pr 0.00 fix(cost): capture OpenRouter streamed usage.cost (fixes $0 Terse fix commit, very typical human eng 2026-07-28
pr 0.00 Fix: tool events colliding across agents and status regressi Detailed explanation with domain specifi 2026-07-03
pr 0.00 fix: bind-mount local --target by default to avoid slow file Technical writing with issue references, 2026-07-22
pr 0.00 feat: agent-ready — installable SKILL.md skills, AGENTS.md, Contains domain jargon, minimal free-tex 2026-07-28
pr 0.00 feat: agent-ready — installable SKILL.md skills, AGENTS.md, — 2026-07-28
pr 0.00 Scope viewer session cookie to the bound port Succinct commit message; no AI hallmarks 2026-07-27
pr 0.00 perf(cli): ~10x faster startup — lazy heavy imports + onedir — 2026-07-27
pr 0.00 fix: recoverable guardrail blocks and decoupled crash-notify — 2026-07-27
pr 0.00 Scope viewer session cookie to the bound port — 2026-07-27
pr 0.00 feat(skills): add websocket protocol testing skill Uses markdown, domain jargon, and test o 2026-07-27
pr 0.00 fix viewer tool call collisions across agents Detailed, technical, human reasoning; no 2026-07-27
pr 0.00 fix(cli): align View label spacing in final panel — 2026-07-27
pr 0.00 chore: release v1.4.1 — 2026-07-27
pr 0.00 fix(runtime): fail fast when the LLM endpoint can't return s — 2026-07-27
pr 0.00 chore: release v1.4.0 — 2026-07-27
pr 0.00 fix(runtime): wake parent when a child hits a terminal state — 2026-07-27
pr 0.00 feat(runtime): graduated wrap-up warnings, budget reserve, a — 2026-07-26
pr 0.00 fix(cli): don't dump raw warm-up traceback over the LLM erro — 2026-07-27
pr 0.00 Add Linux ARM64 standalone release support Includes personal proof-of-work, casual 2026-07-26
pr 0.00 feat(llm): Claude prompt caching (system + tools + rolling t — 2026-07-26
pr 0.00 fix(runtime): retry transient mid-stream provider errors ins — 2026-07-26
pr 0.00 feat(context): spill oversized tool output into the sandbox — 2026-07-25
pr 0.00 feat(context): model-aware conversation compaction for long — 2026-07-25
pr 0.00 feat(context): bound per-tool output before it enters agent — 2026-07-25
pr 0.00 feat(reporting): add read-only list_reports + get_report too — 2026-07-26
pr 0.00 docs(skills): remove references to tools not installed in th — 2026-07-26
pr 0.00 refactor: move strix/viewer under strix/interface — 2026-07-26
pr 0.00 Rename root agent to Strix — 2026-07-25
pr 0.00 fix(reports): strip markdown code fence from poc_script_code — 2026-07-25
pr 0.00 security: harden self-update against supply-chain and path-t Detailed summary but domain-specific, wi 2026-07-25
pr 0.00 fix(container): keep /app/.venv/bin on the login-shell PATH Very terse, informal commit message; hum 2026-07-22
pr 0.00 chore(deps): bump setuptools from 82.0.1 to 83.0.0 — 2026-07-22
pr 0.00 chore(deps): bump setuptools to 83.0.0 in uv.lock — 2026-07-24
pr 0.00 fix(agents): stop repeat polls of dead PTY sessions Concise, domain-specific, uses technical 2026-07-23
pr 0.00 fix(cli): clarify Docker socket access errors Technical tone, targeted instructions, a 2026-07-23
pr 0.00 Feat/no progress breaker Ultra-terse commit title, no AI signals 2026-07-23
pr 0.00 fix(deps): cap cryptography <49 to keep Intel macOS universa Precise dependency pinning rationale, hu 2026-07-22
pr 0.00 Quit after scan instead of hosting the local viewer — 2026-07-22
pr 0.00 chore(deps): bump pyasn1 from 0.6.3 to 0.6.4 — 2026-07-22
pr 0.00 chore(deps): bump cryptography to 49.0.0 and pyasn1 to 0.6.4 Straightforward CVE/dependency rationale 2026-07-22
pr 0.00 feat(cli): update notifications + self-update (strix --updat Brief feature changelog, telegraphic, hu 2026-07-19
pr 0.00 chore: release v1.3.1 — 2026-07-22
pr 0.00 sandbox: bump default inner-sandbox image to 1.1.0 — 2026-07-22
pr 0.00 sandbox: shrink image 7.2GB → 3.8GB (cache cleanup, multi-st Detailed technical changelog, natural hu 2026-05-04
pr 0.00 sandbox: cut image ~7.2GB → ~3.8GB (multi-stage Go build, dr — 2026-07-22
pr 0.00 fix(prompt): make root agent orchestrate-only and fold fixin — 2026-07-21
pr 0.00 fix(container): keep /app/.venv/bin on the login-shell PATH — 2026-07-22
pr 0.00 fix(core): compile fallback report if agent misses lifecycle Template structure with authentic techni 2026-07-03
pr 0.00 Add explicit CSPT detection skill, categorization, fixtures, Contains domain jargon and review respon 2026-07-16
pr 0.00 chore: release v1.2.0 — 2026-07-21
pr 0.00 Local run viewer: email reports, run history, and the platfo Free-text is technical and direct; no AI 2026-07-20
pr 0.00 docs(skills): add Active Directory / Kerberos domain testing Direct, domain-specific skill addition; 2026-07-21
pr 0.00 feat(tui): add manual compact command Terse changelog, includes test output, n 2026-07-07
pr 0.00 fix: strip chatgpt transcript tags from agent messages Direct language, specific details, no ge 2026-07-10