← back to report

usestrix/strix

// all events — 2026-08-03

Type AI Score Description Actor Reason Date
commit 1.00 Pin release-workflow actions to commit SHAs + least-privileg Commit message contains explicit AI assi 2026-07-23
pr 0.20 feat: implement retry logic for restartable stream errors in Slightly more formal, but still typical 2026-07-01
pr 0.20 feat(models): add MiniMax-M3 and MiniMax-M2.7 to recommended Filled template sections use technical d 2026-07-29
pr 0.15 feat: support API specs and Postman collections as targets Technical style, minor over-explanation 2026-07-23
pr 0.10 feat(tui): add Bubble Tea interface with provider setup Well-structured summary but technical an 2026-07-30
pr 0.10 guardrails: block destructive commands in exec_command (fix Technical detail, domain-specific, human 2026-08-01
pr 0.10 security: harden self-update against supply-chain and path-t Uses audit language and specifics, no AI 2026-07-25
pr 0.10 security: redact session token from viewer access logs Security context, specific technical det 2026-07-25
pr 0.10 security: mitigate ReDoS in proxy view_request regex search Technical content, domain-specific, not 2026-07-25
pr 0.10 security: bound Content-Length parsing in viewer server Technical analysis, detailed explanation 2026-07-25
pr 0.10 feat(warmup): fail fast when a streamed request yields no to Technical, concise, abbreviations presen 2026-07-29
pr 0.10 perf(tui): cache terminal-state tool widgets in BaseToolRend Technical changelog, domain-specific, me 2026-08-01
pr 0.10 runtime: resolve staged local-dir path to avoid symlink reje Technical explanation, platform-specific 2026-07-22
pr 0.10 docs(cli): document exit code 1 and clarify exit 0 semantics Concise, domain-specific, and neutral fr 2026-07-24
pr 0.10 fix(core): wake parent on terminal child status Problem/Root cause/Changes are technical 2026-07-25
pr 0.10 feat(llm): opt-in Grok/SuperGrok subscription sign-in Clear, domain-focused explanations witho 2026-07-29
pr 0.10 Make write_executive_report atomic to avoid destroying prior Technical summary with informal notes an 2026-07-31
pr 0.10 fix(llm): surface structured provider refusals Template filled with domain specifics; s 2026-07-31
pr 0.10 perf(tui): cache terminal-state tool widgets in BaseToolRend Technical changelog, domain-specific, me 2026-08-01
pr 0.10 fix(llm): omit parallel_tool_calls on tool-less calls (Azure Problem/Solution format, direct with tec 2026-08-01
pr 0.10 test(runner): repair the root-prompt settings stub so the su Changelog-like, concrete bug description 2026-07-21
pr 0.10 Create credential files with owner-only permissions Technical explanation using code example 2026-07-31
pr 0.10 perf(tui): skip redundant status/animation updates while age Technical rationale and changelog, natur 2026-05-22
pr 0.10 perf(tui): cache terminal-state tool widgets in BaseToolRend Technical changelog, domain-specific, me 2026-08-01
pr 0.10 fix: resolve type checking and code quality warnings Slightly formal template section but con 2026-07-28
pr 0.10 fix(tui): use running state for app lifecycle guards Technical, domain-specific, no AI-style 2026-07-27
pr 0.10 fix(report): write executive report atomically Technical changelog language, no signs o 2026-07-27
pr 0.10 docs: explain local model context sizing Casual, list-driven doc updates; lacks A 2026-07-27
pr 0.10 feat(llm): cache recent Claude prompt context Direct technical language and test outpu 2026-07-27
pr 0.10 fix(runtime): skip unreadable local source entries Human test debug output, concise technic 2026-07-27
pr 0.10 Raise on LiteLLM response.failed streams Uses specialized phrasing and test refer 2026-07-27
pr 0.10 fix(tui): show scan failure reason Domain-rich, detailed but direct; lacks 2026-07-27
pr 0.10 ci: publish strix-agent to PyPI on release tags Infrastructure/CI context, straightforwa 2026-07-27
pr 0.10 fix(core): treat cloned repo targets as source-aware whitebo Informal tone, domain-specific details, 2026-07-26
pr 0.10 feat(dedupe): add dedicated deduplication model Precise, technical, and informal; lacks 2026-07-21
pr 0.10 feat(verification): independent adversarial finding verifica Domain-specific, well-explained, uses te 2026-07-21
pr 0.10 Add Dependabot for dependency updates Clear, domain-specific explanation; info 2026-07-23
pr 0.10 Add an npm resolution cooldown for the local-viewer frontend Detailed, domain-focused, some informal 2026-07-23
pr 0.10 Sign in with a ChatGPT subscription for inference Text is technical and domain-focused, no 2026-07-22
pr 0.05 feat(report): suppress findings from a baseline run Technical, precise, CLI details; no AI h 2026-07-27
pr 0.05 feat(llm): enable Bedrock/Anthropic prompt caching for Claud Domain-specific, measured detail; human 2026-07-15
pr 0.03 fix(tls): replace raw urllib with requests for external HTTP Contains error messages and deep domain 2026-07-27
pr 0.02 fix(tls): fall back to certifi CA bundle for urllib callers Casual tone, uses jargon, direct; looks 2026-07-27
pr 0.02 fix(tui): guard app-level UI work with is_running Terse, domain-specific explanation; info 2026-07-27
commit 0.00 fix: calibrate vulnerability severity to demonstrated impact Terse commit message using domain langua 2026-08-03
commit 0.00 feat(runtime): mount local targets instead of copying them i — 2026-08-02
commit 0.00 fix(tools): tell a waiting parent when stop_agent stops its Terse commit message, technical and succ 2026-08-02
commit 0.00 fix(core): wake the parent when a child ends without a compl Brief, specific, and contains domain con 2026-08-02
commit 0.00 perf(cli): ~10x faster startup via lazy imports (#920) — 2026-08-02
commit 0.00 fix(tools): accept both the string and structured form of ev — 2026-08-02
commit 0.00 feat(config): accept STRIX_REASONING_EFFORT=max for provider — 2026-08-02
commit 0.00 docs(llm-providers): explain the structured tool_calls requi — 2026-08-01
commit 0.00 docs(prompts): text-only turns no longer end an autonomous r Short, domain-specific, no AI tone detec 2026-08-01
commit 0.00 refactor(tools): split wait_for_message into respond_to_user Explanatory but uses informal language a 2026-08-01
commit 0.00 docs(core): correct the rationale for notifying a stalled ch Concise correction with domain-specific 2026-08-01
commit 0.00 fix(core): tell the parent when an interactive subagent park Technical explanation, brief, no AI indi 2026-08-01
commit 0.00 fix(tools): halve the wait_for_message ceiling to 300s Direct, technical, and contains informal 2026-08-01
commit 0.00 fix(core): persist the tool-call recovery counter across res Technical, domain-specific language, no 2026-08-01
commit 0.00 fix(core): stop interactive runs stalling on a missing tool Technical, informal and succinct style. 2026-08-01
commit 0.00 docs(prompt): teach agents to recognize Caido proxy error pa — 2026-08-01
commit 0.00 fix: pre-v1-style lifecycle resilience — mailbox delivery, u — 2026-08-01
commit 0.00 fix(llm): surface structured provider refusals (#944) Commit message is terse and domain-speci 2026-07-31
commit 0.00 fix(llm): avoid auth during ChatGPT lookup Terse commit and technical explanation, 2026-07-30
commit 0.00 test(llm): cover the full run loop against a non-streaming g Commit message uses domain jargon and te 2026-07-30
commit 0.00 feat(llm): opt-in LLM_DISABLE_STREAMING for non-streaming Op Commit message is concise, uses domain-s 2026-07-30
commit 0.00 fix(llm): pass LLM_EXTRA_HEADERS through ModelSettings so th — 2026-07-30
commit 0.00 fix(llm): apply LLM_EXTRA_HEADERS on native OpenAI route eve Short, technical fix message without AI 2026-07-30
commit 0.00 feat(llm): custom request headers for OpenAI-compatible endp Short, direct, technical phrasing with d 2026-07-30
commit 0.00 fix(runtime): label docker sandbox containers with the run i — 2026-07-29
commit 0.00 fix(cost): capture OpenRouter streamed usage.cost (fixes $0 Commit is terse, technical, and informal 2026-07-29
commit 0.00 Scope viewer session cookie to the bound port (#922) Concise commit message with Co-authored- 2026-07-28
commit 0.00 fix: recoverable guardrail blocks and decoupled crash-notify — 2026-07-27
commit 0.00 fix viewer tool call collisions across agents (#917) Terse commit message; standard human sty 2026-07-27
commit 0.00 fix(cli): align View label spacing in final panel Terese technical summary, human-written, 2026-07-27
commit 0.00 chore: release v1.4.1 Single-line release note; common for hum 2026-07-27
commit 0.00 fix(tls): replace raw urllib with requests for external HTTP Commit has human co-authors, technical p 2026-07-27
commit 0.00 chore: release v1.4.0 Single-line release version bump; univer 2026-07-27
commit 0.00 fix(runtime): wake parent when child hits a terminal state ( Concise, domain-specific, typical human 2026-07-27
commit 0.00 feat(runtime): graduated wrap-up warnings, budget reserve, a — 2026-07-27
commit 0.00 fix(cli): don't dump raw warm-up traceback over the LLM erro — 2026-07-27
commit 0.00 feat(llm): enable Bedrock/Anthropic prompt caching for Claud Standard feat commit with co-authors; te 2026-07-27
commit 0.00 Add Linux ARM64 standalone release support (#886) Brief technical commit, release support 2026-07-26
commit 0.00 fix(runtime): retry transient mid-stream provider errors ins — 2026-07-26
commit 0.00 feat(context): spill oversized tool output into the sandbox — 2026-07-26
commit 0.00 feat(context): model-aware conversation compaction for long — 2026-07-26
commit 0.00 refactor(context): trim verbose comments Concise commit message with standard hum 2026-07-26
commit 0.00 fix(context): reject tool-output byte ceilings below the not Technical explanation with domain detail 2026-07-25
commit 0.00 fix(context): reserve notice budget so bounded output honors Technical jargon and structured but info 2026-07-25
commit 0.00 fix(context): bound native filesystem tool output in Respons In-depth explanation and domain specific 2026-07-25
commit 0.00 fix(context): clamp shell output cap and count byte-trimmed Domain-specific, terse description with 2026-07-25
commit 0.00 feat(context): bound per-tool output before it enters agent Bullet points, domain jargon, and inform 2026-07-25
commit 0.00 feat(reporting): add read-only list_reports + get_report too — 2026-07-26
commit 0.00 docs(skills): remove references to tools not installed in th Long, technical and structured documenta 2026-07-26
commit 0.00 fix: restore viewer-auth.json path in auth module docstring Brief, imperative tone typical of human 2026-07-26
commit 0.00 refactor: move strix/viewer under strix/interface Standard refactor message; no signs of A 2026-07-26
commit 0.00 refactor(reports): fold fence helpers into report writer Concise commit message with domain-speci 2026-07-25
commit 0.00 fix(reports): safe-fence code-location snippets in markdown Technical, terse, and domain-specific; n 2026-07-25
commit 0.00 fix(reports): safe-fence markdown PoC export and share fence Direct, technical commit message; no sig 2026-07-25
commit 0.00 fix(reports): auto-detect PoC language with Python fallback Clear, brief, and technical; fits human 2026-07-25
commit 0.00 fix(reports): strip markdown code fence from poc_script_code Technical terminology, concise phrasing; 2026-07-25
commit 0.00 Rename root agent to Strix Simple rename commit; no AI hallmarks. 2026-07-25
commit 0.00 feat(dedupe): add dedicated deduplication model (#823) Includes co-authors, but no AI-related t 2026-07-25
commit 0.00 runtime: resolve staged local-dir path to avoid symlink reje Technical, concise commit summary; human 2026-07-25
commit 0.00 docs(cli): document exit code 1 and clarify exit 0 semantics Detailed, domain-specific docs change; f 2026-07-24
commit 0.00 Sign in with a ChatGPT subscription for inference (#854) Contains co-author trailers; commit mess 2026-07-24
commit 0.00 chore(deps): bump setuptools to 83.0.0 (GHSA-h35f-9h28-mq5c) Standard dependency bump; no AI signals 2026-07-24
commit 0.00 Quit after scan instead of hosting local viewer Direct, concise commit; technical contex 2026-07-22
commit 0.00 fix(deps): cap cryptography <49 to keep Intel macOS universa Technical commit message with domain jar 2026-07-22
commit 0.00 chore(deps): bump cryptography to 49.0.0 and pyasn1 to 0.6.4 Standard dependency bump commit; uses te 2026-07-22
commit 0.00 feat(cli): update notifications + self-update (strix --updat Contains technical shorthand and informa 2026-07-22
commit 0.00 chore: release v1.3.1 Typical brief release commit message wit 2026-07-22
commit 0.00 sandbox: bump install.sh pre-pull tag to 1.1.0 (match runtim Short, technical commit; no signs of AI- 2026-07-22
commit 0.00 sandbox: bump default inner-sandbox image to 1.1.0 Short technical commit, domain-specific 2026-07-22
commit 0.00 chore: release v1.3.0 (#849) Standard release commit; minimal, human- 2026-07-22
commit 0.00 Local viewer: prominent scan switcher + rename to "pentest" Concise technical summary; no formal or 2026-07-22
commit 0.00 Local viewer: UI polish and a Feedback & support tab (#847) Terse UI update note; informal and domai 2026-07-22
commit 0.00 sandbox: shrink image 7.2GB → 3.8GB (cache cleanup, multi-st Terse, domain-specific changelog, no AI 2026-07-22
commit 0.00 fix(prompt): make root agent orchestrate-only and fold fixin Concise commit message, clear domain ter 2026-07-21
commit 0.00 fix(container): keep /app/.venv/bin on the login-shell PATH Compact technical fix, standard human su 2026-07-22
commit 0.00 chore: release v1.2.0 Standard release commit, no AI signals. 2026-07-21
commit 0.00 Local run viewer: email reports, run history, and the platfo Concise, technical summary with no AI ha 2026-07-21
commit 0.00 docs(skills): add Active Directory / Kerberos domain testing Detailed, domain-specific commit with ge 2026-07-21
commit 0.00 docs(reporting): add CVSS calibration guidance to reduce sev Domain-specific guidance and typical hum 2026-07-21
commit 0.00 fix(report): prevent code-fence breakout in vulnerability ma Deep technical details, human phrasing, 2026-07-21
commit 0.00 strip transfer encoding (#820) Brief/tacit commit, minimal detail, clea 2026-07-21
commit 0.00 fix(proxy): recompute Content-Length when replaying a modifi Contains a co-author GitHub trailer, but 2026-07-21
commit 0.00 docs(skills): add grafana_prometheus observability pivot ski Commit message uses concise, domain-spec 2026-07-20
commit 0.00 recon asset discovery skill (#809) Commit messages are terse and domain-spe 2026-07-19
commit 0.00 chore(llm): shorten timeout helper docstring; update tests Concise, domain-specific commit message; 2026-07-18
commit 0.00 fix(llm): use a JSON-serializable per-turn model timeout Technical language, references to code/d 2026-07-18
commit 0.00 fix(llm): use httpx.Timeout read-inactivity for per-turn mod Direct summary with technical phrasing; 2026-07-18
commit 0.00 fix(llm): add per-turn model request timeout so stalled stre Terse, technical message; no AI indicato 2026-07-18
commit 0.00 fix(llm): retry statusless mid-stream provider errors (quota Domain-specific, concise, references to 2026-07-17
commit 0.00 fix(llm): retry statusless mid-stream provider errors (quota Similar to prior; clear technical focus, 2026-07-17
commit 0.00 fix(report): restore cost tracking for OpenRouter and other — 2026-07-17
commit 0.00 revert(proxy): drop overfit Caido reconnect/HTTPQL band-aids — 2026-07-17
commit 0.00 fix(proxy,tooling): serialize+reconnect Caido client, action — 2026-07-17
commit 0.00 fix(prompt): down-rate or skip findings on demo data / demo — 2026-07-17
commit 0.00 fix(runtime): close the docker client on session cleanup (#7 Standard commit message style; brief and 2026-07-16
commit 0.00 fix(runtime): cap sandbox container logs to prevent host dis Domain-specific commit message; no AI st 2026-07-16
commit 0.00 docs(python skill): recommend a task-unique PoC filename to Direct, human-written doc change; concis 2026-07-16
commit 0.00 docs(python skill): use a distinctive PoC filename to avoid Clear domain context, no AI-typical phra 2026-07-16
commit 0.00 docs(prompts,skills): stop hardcoding /workspace/scratch pat Technical explanation, typical human com 2026-07-16
pr 0.00 fix: calibrate vulnerability severity to demonstrated impact Detailed technical changelog; clear dire 2026-08-03
pr 0.00 fix(agents): stop repeat polls of dead PTY sessions Technical summary with test info; struct 2026-07-23
pr 0.00 fix(tui): show rejected vulnerability reports as rejected Conversational, technical, code referenc 2026-07-21
pr 0.00 feat(report): opt-in deterministic version-range check for d Technical, informal, domain-specific det 2026-08-03
pr 0.00 feat(agents): evidence discipline, shared coverage ledger, a — 2026-08-03
pr 0.00 ci: publish the sandbox image with buildx for amd64 and arm6 — 2026-08-02
pr 0.00 perf(runtime): import local sources via single tar put_archi Contains domain jargon, informal tone, a 2026-07-05
pr 0.00 feat(runtime): mount local targets instead of copying them i — 2026-08-02
pr 0.00 fix(core): a child never leaves its parent waiting silently — 2026-08-02
pr 0.00 perf(cli): ~10x faster startup via lazy imports — 2026-07-27
pr 0.00 fix(tools): accept both the string and structured form of ev — 2026-08-02
pr 0.00 feat(config): accept STRIX_REASONING_EFFORT=max for provider — 2026-08-01
pr 0.00 docs(llm-providers): explain the structured tool_calls requi — 2026-07-27
pr 0.00 fix(core): explicit lifecycle contract — plain text never en — 2026-08-01
pr 0.00 docs(prompt): teach agents to recognize Caido proxy error pa — 2026-08-01
pr 0.00 fix: pre-v1-style lifecycle resilience — mailbox delivery, u — 2026-07-27
pr 0.00 OpenAI endpoint required toolchoice No free-text, only section title; no AI 2026-07-29
pr 0.00 fix(runtime): label docker sandbox containers with the run i — 2026-07-29
pr 0.00 Rename root agent to Strix — 2026-07-25
pr 0.00 fix(cost): capture OpenRouter streamed usage.cost (fixes $0 Minimal, colloquial title with no AI hal 2026-07-28
pr 0.00 nonstreaming custom endpoint No free-text, only a short code phrase a 2026-07-30
pr 0.00 feat(llm): custom request headers for OpenAI-compatible endp — 2026-07-30
pr 0.00 fix(llm): pass LLM_EXTRA_HEADERS through ModelSettings so th — 2026-07-30
pr 0.00 feat(context): spill oversized tool output into the sandbox — 2026-07-25
pr 0.00 feat: agent-ready — installable SKILL.md skills, AGENTS.md, — 2026-07-28
pr 0.00 security: fix token exposure, info disclosure, and path vali Security PR with technical, specific lan 2025-12-21
pr 0.00 fix(llm): prevent ChatGPT subscription scan freezes Template with detailed technical explana 2026-07-30
pr 0.00 Prevent ChatGPT subscription scan freezes Template structured, detailed technical 2026-07-30
pr 0.00 feat(runtime): cap spawned child agents Template filled with terse technical wri 2026-07-27
pr 0.00 feat(config): add per-request token budget Template filled with technical detail an 2026-07-27
pr 0.00 fix(llm): add a stall deadline to the codex stream Template with detailed, technical, infor 2026-07-30
pr 0.00 fix(tui): use the is_running property for app guards that ne Domain-specific language and details; cl 2026-07-30
pr 0.00 # feat: add an agent-native Strix skill and MCP runtime (pro Human-typical proof-of-concept and limit 2026-07-06
pr 0.00 feat(llm): opt-in LLM_DISABLE_STREAMING for non-streaming Op — 2026-07-30
pr 0.00 feat: agent-ready — installable SKILL.md skills, AGENTS.md, Bullet format with informal, jargon-fill 2026-07-28
pr 0.00 Fix: tool events colliding across agents and status regressi Detailed explanation with domain specifi 2026-07-03
pr 0.00 fix: bind-mount local --target by default to avoid slow file Technical writing with issue references, 2026-07-22
pr 0.00 Scope viewer session cookie to the bound port Succinct commit message; no AI hallmarks 2026-07-27
pr 0.00 fix: recoverable guardrail blocks and decoupled crash-notify — 2026-07-27
pr 0.00 Scope viewer session cookie to the bound port — 2026-07-27
pr 0.00 feat(skills): add websocket protocol testing skill Uses markdown, domain jargon, and test o 2026-07-27
pr 0.00 fix viewer tool call collisions across agents Detailed, technical, human reasoning; no 2026-07-27
pr 0.00 fix(cli): align View label spacing in final panel — 2026-07-27
pr 0.00 chore: release v1.4.1 — 2026-07-27
pr 0.00 chore: release v1.4.0 — 2026-07-27
pr 0.00 fix(runtime): wake parent when a child hits a terminal state — 2026-07-27
pr 0.00 feat(runtime): graduated wrap-up warnings, budget reserve, a — 2026-07-26
pr 0.00 fix(cli): don't dump raw warm-up traceback over the LLM erro — 2026-07-27
pr 0.00 Add Linux ARM64 standalone release support Includes personal proof-of-work, casual 2026-07-26
pr 0.00 feat(llm): Claude prompt caching (system + tools + rolling t — 2026-07-26
pr 0.00 fix(runtime): retry transient mid-stream provider errors ins — 2026-07-26
pr 0.00 feat(context): model-aware conversation compaction for long — 2026-07-25
pr 0.00 feat(context): bound per-tool output before it enters agent — 2026-07-25
pr 0.00 feat(reporting): add read-only list_reports + get_report too — 2026-07-26
pr 0.00 docs(skills): remove references to tools not installed in th — 2026-07-26
pr 0.00 refactor: move strix/viewer under strix/interface — 2026-07-26
pr 0.00 fix(reports): strip markdown code fence from poc_script_code — 2026-07-25