| commit |
1.00 |
Pin release-workflow actions to commit SHAs + least-privileg |
|
Commit message contains explicit AI assi |
2026-07-23 |
| pr |
1.00 |
feat(safety): add contextual action review with guarded and |
|
Explicit 'Generated with Claude Code' in |
2026-08-07 |
| pr |
1.00 |
test(tui): correct the nudge the internal-turn test asserts |
|
Explicit 'Generated with Claude Code' si |
2026-08-07 |
| pr |
1.00 |
fix(interface): clarify cached vs new input token breakdown |
|
Explicit statement of AI coding assistan |
2026-07-05 |
| pr |
0.95 |
feat: add STRIX_DISABLE_FIX_AGENTS to skip dedicated fix sub |
|
Explicit '🤖 Generated with Claude Code'; |
2026-06-29 |
| pr |
0.95 |
fix(proxy): actionable errors for bad list_requests/list_sit |
|
Explicit '🤖 Generated with Claude Code' |
2026-06-15 |
| pr |
0.30 |
Add Codex OAuth provider |
|
Mostly technical; a bit generic but like |
2026-05-12 |
| pr |
0.30 |
Add custom headers from the env var LLM_EXTRA_HEADERS |
|
Domain-specific, with minor formal phras |
2026-05-05 |
| pr |
0.25 |
Adds scan resumption capability to Strix, allowing users to |
|
Long, technical, some polish but contain |
2026-01-02 |
| pr |
0.20 |
Add Podman as working runtime backend |
|
Technical, template-based, domain-specif |
2026-05-28 |
| pr |
0.20 |
fix: update vulnerable dependencies |
|
Thorough dependency update, technical de |
2026-05-07 |
| pr |
0.20 |
fix: apply assistant-prefill guard to Anthropic models in in |
|
Detailed technical bugfix explanation, h |
2026-04-28 |
| pr |
0.20 |
fix: persist scan data on exit and save partial reports |
|
Technical detail, domain knowledge, and |
2026-04-24 |
| pr |
0.20 |
feat: add MiniMax as LLM provider (M3 default, with M2.7 fal |
|
Structured changelog, domain details, te |
2026-03-23 |
| pr |
0.20 |
feat: browser-use tool migration |
|
Informal explanations, markdown, and tec |
2026-03-11 |
| pr |
0.20 |
feat: Add live tracing mode for complete audit trail |
|
Detailed, domain‑specific changelog and |
2026-02-03 |
| pr |
0.20 |
feat(prompts): add 6 new vulnerability prompt modules |
|
Domain-heavy, technical, well-structured |
2025-12-21 |
| pr |
0.20 |
# feat: add an agent-native Strix skill and MCP runtime (pro |
|
Long and detailed but still natural; som |
2026-07-06 |
| pr |
0.20 |
fix: resolve workspace materialization race on Windows (#671 |
|
Detailed technical explanation, human pr |
2026-07-05 |
| pr |
0.15 |
feat(skills): Add safe-mode crawling guard and network-layer |
|
Uses technical detail, domain-specific t |
2026-08-06 |
| pr |
0.15 |
feat: agent-ready — installable SKILL.md skills, AGENTS.md, |
|
Structured format, domain jargon, but wi |
2026-07-28 |
| pr |
0.15 |
feat: add graceful wrap-up command for agents |
|
Concise, stepwise; lots of domain jargon |
2026-01-04 |
| pr |
0.15 |
fix: execute tool calls emitted as plain text in interactive |
|
Technical, focused narrative without AI- |
2026-07-04 |
| pr |
0.10 |
fix(tui): scrollbar visibility, findings scrolling, and repo |
|
Natural technical writing with specific |
2026-08-07 |
| pr |
0.10 |
Add safe first-run example with local demo app |
|
Brevity, directness, and context-specifi |
2026-08-06 |
| pr |
0.10 |
feat(web_search): add DuckDuckGo as opt-in backend |
|
Thorough but informal; domain-specific w |
2026-08-05 |
| pr |
0.10 |
feat: add opt-in completion nudge |
|
Technical, detailed, casual tone; not ov |
2026-07-10 |
| pr |
0.10 |
fix(tui): keep a long error inside the status row |
|
Slightly formal but highly technical and |
2026-08-04 |
| pr |
0.10 |
feat: support API specs and Postman collections as targets |
|
Technical, detailed, with ample domain j |
2026-07-23 |
| pr |
0.10 |
fix(interface): drop dead reasoning-effort branches, fix sta |
|
Technical, domain-specific, with informa |
2026-06-26 |
| pr |
0.10 |
fix: declare socksio and guard tracing init against SOCKS-pr |
|
Technical incident explanation; casual t |
2026-06-26 |
| pr |
0.10 |
Migrate task runner from Makefile to mise |
|
Structured summary with specific repo de |
2026-06-19 |
| pr |
0.10 |
added disposable email skill |
|
Slightly formal but direct; domain-speci |
2026-06-11 |
| pr |
0.10 |
Fix Bedrock reasoning for adaptive-thinking models (Claude O |
|
Domain-specific message; concise, techni |
2026-06-09 |
| pr |
0.10 |
Honor LLM_TIMEOUT, expose generation params, and harden blac |
|
Straightforward, technical commits; info |
2026-06-09 |
| pr |
0.10 |
feat: dynamic skill loading tools |
|
Terse, lowercase, with typos; very human |
2026-03-05 |
| pr |
0.10 |
feat: Firecrawl web search integration |
|
Informal, domain-specific and includes p |
2025-12-30 |
| pr |
0.10 |
Fix: Add macOS Docker socket detection fallback (Fixes #164) |
|
Technical troubleshooting, some informal |
2025-12-12 |
| pr |
0.10 |
test: add unit tests for llm/utils module |
|
Conversational, specific, personal reply |
2025-12-05 |
| pr |
0.10 |
Implement architectural upgrades for advanced red-teaming |
|
Enumerates domain features, no AI hallma |
2025-12-01 |
| pr |
0.10 |
Dane/strix resumable execution |
|
Technical and concise; brief note about |
2025-11-20 |
| pr |
0.10 |
Add proxy support for corporate networks |
|
Short, technical, and uses some abbrevia |
2025-11-06 |
| pr |
0.10 |
fix(tui): show proxy tool errors instead of dropping them |
|
Highly technical, with code and specific |
2026-07-22 |
| pr |
0.10 |
fix(agents): force tty for exec_command on Windows |
|
Detailed technical problem/solution, dom |
2026-07-11 |
| pr |
0.10 |
fix: propagate sandbox proxy environment aliases |
|
Technical, domain-specific and uses inli |
2026-07-10 |
| pr |
0.10 |
fix: strip chatgpt transcript tags from agent messages |
|
Technical, dense with detail and code, d |
2026-07-10 |
| pr |
0.10 |
feat(tui): add manual compact command |
|
Domain-specific, references tests/regres |
2026-07-07 |
| pr |
0.10 |
fix: prevent premature subagent termination, add attack plan |
|
Detailed, technical, includes code files |
2026-07-06 |
| pr |
0.10 |
fix(tui): remove double space after numbered-list marker |
|
Terse, focused explanation, domain-appro |
2026-07-04 |
| pr |
0.10 |
fix: join root task sections with newlines |
|
Very focused technical fix, tight change |
2026-07-04 |
| pr |
0.10 |
fix(proxy): preserve existing query params when replaying re |
|
Focused technical bugfix, terse, with ex |
2026-07-04 |
| pr |
0.10 |
fix(telemetry): stop finding() telemetry from blocking the a |
|
Highly domain-specific, with problem con |
2026-07-04 |
| pr |
0.10 |
feat(skills): resolve-time path containment for load_skills |
|
Precise security-focused free-text, ters |
2026-07-04 |
| pr |
0.10 |
feat(telemetry): default-off + first-run disclosure |
|
Domain-specific compliance points, not A |
2026-07-04 |
| pr |
0.10 |
fix(config): atomic write + 0o600 enforcement in persist_cur |
|
Highly technical, concise bug/fix explan |
2026-07-04 |
| pr |
0.10 |
test: add skills catalog loading and validation tests |
|
Terse, test-focused, typical human commi |
2026-07-04 |
| pr |
0.10 |
fix(todo): stop json.loads corrupting bare numeric-looking t |
|
Detailed developer reasoning, no ChatGPT |
2026-07-03 |
| pr |
0.05 |
Create credential files with owner-only permissions |
|
Direct, concise, technical style; inform |
2026-07-31 |
| pr |
0.05 |
fix: bind-mount local --target by default to avoid slow file |
|
Technical, with informal asides, typos, |
2026-07-22 |
| pr |
0.05 |
Handle large exec_command output and surface scan errors as |
|
Dense, technical free-text; natural styl |
2026-06-22 |
| pr |
0.05 |
Feat: add traces in posthog + support for 2 accounts |
|
Terse, informal tone and domain context; |
2026-01-18 |
| pr |
0.05 |
FIX Strix fails to connect to Docker on macOS |
|
Very terse commit, no AI signals, likely |
2025-12-06 |
| pr |
0.05 |
fix(core): ensure tool_choice maps to structured object for |
|
Brief, domain-specific, non-AI bugfix no |
2026-07-04 |
| pr |
0.05 |
Add Express.js and WebSocket security skills |
|
Brief, domain-specific, with bulleted de |
2026-07-03 |
| commit |
0.00 |
docs(skills): rename skills to descriptive names and broaden |
|
Standard commit style; changelog format, |
2026-08-07 |
| commit |
0.00 |
chore: release v1.5.1 |
|
Standard release note, terse and typical |
2026-08-07 |
| commit |
0.00 |
fix(tui): scrollbar visibility, findings scrolling, and repo |
|
Brief, technical summary; clear domain e |
2026-08-07 |
| commit |
0.00 |
expand firebase storage rules coverage (#1002) |
|
Short, domain-specific phrase, typical o |
2026-08-07 |
| commit |
0.00 |
ci: publish nested standalone archives as release assets |
|
Technical jargon, terse and domain-speci |
2026-08-06 |
| commit |
0.00 |
ci: tolerate repr-escaped backslashes in the release TUI-sid |
|
Terse, uses context-specific terms, not |
2026-08-06 |
| commit |
0.00 |
ci: match Windows backslash paths in the release TUI-sidecar |
|
Short, technical, no AI indicators prese |
2026-08-06 |
| commit |
0.00 |
chore(image): bump sandbox tag 1.2.0 -> 1.3.0 |
|
Jargon and terse git commit format, clea |
2026-08-06 |
| commit |
0.00 |
chore: release v1.5.0 |
|
Standard brief version bump commit, typi |
2026-08-06 |
| commit |
0.00 |
docs(skills): skipped symbol search must be disclosed in rea |
|
Technical, concise, no AI phrasing or st |
2026-08-06 |
| commit |
0.00 |
docs(skills): require per-CVE affected-symbol matching in de |
|
Jargon, terse style, typical of human te |
2026-08-06 |
| commit |
0.00 |
feat: agent-ready — installable SKILL.md skills, AGENTS.md, |
|
Uses abbreviations and commit convention |
2026-08-06 |
| commit |
0.00 |
update readme |
|
Very terse, typical human commit message |
2026-08-06 |
| commit |
0.00 |
prompt changes |
|
Minimal, lacks AI indicators, common hum |
2026-08-06 |
| commit |
0.00 |
prompt changes |
|
Terse and informal; clearly human shorth |
2026-08-06 |
| commit |
0.00 |
feat(report): keep dependency findings from distinct manifes |
|
Concise technical commit; uses domain-sp |
2026-08-05 |
| commit |
0.00 |
feat(reporting): require repo-relative manifest_path on depe |
|
Brief, domain-specific; no AI phrasing. |
2026-08-05 |
| commit |
0.00 |
feat(reporting): structured reachability evidence ladder for |
|
Commit message follows conventional styl |
2026-08-05 |
| commit |
0.00 |
fix(agents): collapse repeated waits queued inside one model |
|
— |
2026-08-05 |
| commit |
0.00 |
fix(llm): abandon a model stream that stops producing events |
|
— |
2026-08-05 |
| commit |
0.00 |
fix(llm): cap the tool calls one assistant response may queu |
|
— |
2026-08-05 |
| commit |
0.00 |
fix(llm): keep tool-call ids unique so a recycled id can't e |
|
— |
2026-08-05 |
| commit |
0.00 |
feat(reporting): record transitive dependency chain on SCA f |
|
— |
2026-08-04 |
| commit |
0.00 |
fix(tui): keep a long error inside the status row (#970) |
|
Brief commit message; concise, domain-sp |
2026-08-04 |
| commit |
0.00 |
feat: support API specs and Postman collections as targets ( |
|
Standard feature commit message with no |
2026-08-04 |
| commit |
0.00 |
build: add types-requests to dev deps |
|
Contains typos and domain-specific expla |
2026-08-04 |
| commit |
0.00 |
fix(core): settle a non-interactive agent's status before it |
|
Detailed technical explanation, uses dom |
2026-08-04 |
| commit |
0.00 |
fix(core): recover from hallucinated tool names instead of e |
|
Contains domain jargon, abbreviations, a |
2026-08-04 |
| commit |
0.00 |
fix(tui): drop the shift+enter newline hint from the setup f |
|
Concise description, no AI hallmarks. |
2026-08-04 |
| commit |
0.00 |
Create credential files with owner-only permissions (#945) |
|
Standard commit, contains human co-autho |
2026-08-04 |
| commit |
0.00 |
feat(tui): replace Textual with a Go/Bubble Tea interface (# |
|
Brief, technical commit message, no AI h |
2026-08-04 |
| commit |
0.00 |
fix: calibrate vulnerability severity to demonstrated impact |
|
Terse commit message using domain langua |
2026-08-03 |
| commit |
0.00 |
feat(runtime): mount local targets instead of copying them i |
|
— |
2026-08-02 |
| commit |
0.00 |
fix(tools): tell a waiting parent when stop_agent stops its |
|
Terse commit message, technical and succ |
2026-08-02 |
| commit |
0.00 |
fix(core): wake the parent when a child ends without a compl |
|
Brief, specific, and contains domain con |
2026-08-02 |
| commit |
0.00 |
perf(cli): ~10x faster startup via lazy imports (#920) |
|
— |
2026-08-02 |
| commit |
0.00 |
fix(tools): accept both the string and structured form of ev |
|
— |
2026-08-02 |
| commit |
0.00 |
feat(config): accept STRIX_REASONING_EFFORT=max for provider |
|
— |
2026-08-02 |
| commit |
0.00 |
docs(llm-providers): explain the structured tool_calls requi |
|
— |
2026-08-01 |
| commit |
0.00 |
docs(prompts): text-only turns no longer end an autonomous r |
|
Short, domain-specific, no AI tone detec |
2026-08-01 |
| commit |
0.00 |
refactor(tools): split wait_for_message into respond_to_user |
|
Explanatory but uses informal language a |
2026-08-01 |
| commit |
0.00 |
docs(core): correct the rationale for notifying a stalled ch |
|
Concise correction with domain-specific |
2026-08-01 |
| commit |
0.00 |
fix(core): tell the parent when an interactive subagent park |
|
Technical explanation, brief, no AI indi |
2026-08-01 |
| commit |
0.00 |
fix(tools): halve the wait_for_message ceiling to 300s |
|
Direct, technical, and contains informal |
2026-08-01 |
| commit |
0.00 |
fix(core): persist the tool-call recovery counter across res |
|
Technical, domain-specific language, no |
2026-08-01 |
| commit |
0.00 |
fix(core): stop interactive runs stalling on a missing tool |
|
Technical, informal and succinct style. |
2026-08-01 |
| commit |
0.00 |
docs(prompt): teach agents to recognize Caido proxy error pa |
|
— |
2026-08-01 |
| commit |
0.00 |
fix: pre-v1-style lifecycle resilience — mailbox delivery, u |
|
— |
2026-08-01 |
| commit |
0.00 |
fix(llm): surface structured provider refusals (#944) |
|
Commit message is terse and domain-speci |
2026-07-31 |
| commit |
0.00 |
fix(llm): avoid auth during ChatGPT lookup |
|
Terse commit and technical explanation, |
2026-07-30 |
| commit |
0.00 |
test(llm): cover the full run loop against a non-streaming g |
|
Commit message uses domain jargon and te |
2026-07-30 |
| commit |
0.00 |
feat(llm): opt-in LLM_DISABLE_STREAMING for non-streaming Op |
|
Commit message is concise, uses domain-s |
2026-07-30 |
| commit |
0.00 |
fix(llm): pass LLM_EXTRA_HEADERS through ModelSettings so th |
|
— |
2026-07-30 |
| commit |
0.00 |
fix(llm): apply LLM_EXTRA_HEADERS on native OpenAI route eve |
|
Short, technical fix message without AI |
2026-07-30 |
| commit |
0.00 |
feat(llm): custom request headers for OpenAI-compatible endp |
|
Short, direct, technical phrasing with d |
2026-07-30 |
| commit |
0.00 |
fix(runtime): label docker sandbox containers with the run i |
|
— |
2026-07-29 |
| commit |
0.00 |
fix(cost): capture OpenRouter streamed usage.cost (fixes $0 |
|
Commit is terse, technical, and informal |
2026-07-29 |
| commit |
0.00 |
Scope viewer session cookie to the bound port (#922) |
|
Concise commit message with Co-authored- |
2026-07-28 |
| commit |
0.00 |
fix: recoverable guardrail blocks and decoupled crash-notify |
|
— |
2026-07-27 |
| commit |
0.00 |
fix viewer tool call collisions across agents (#917) |
|
Terse commit message; standard human sty |
2026-07-27 |
| commit |
0.00 |
fix(cli): align View label spacing in final panel |
|
Terese technical summary, human-written, |
2026-07-27 |
| commit |
0.00 |
chore: release v1.4.1 |
|
Single-line release note; common for hum |
2026-07-27 |
| commit |
0.00 |
fix(tls): replace raw urllib with requests for external HTTP |
|
Commit has human co-authors, technical p |
2026-07-27 |
| commit |
0.00 |
chore: release v1.4.0 |
|
Single-line release version bump; univer |
2026-07-27 |
| commit |
0.00 |
fix(runtime): wake parent when child hits a terminal state ( |
|
Concise, domain-specific, typical human |
2026-07-27 |
| commit |
0.00 |
feat(runtime): graduated wrap-up warnings, budget reserve, a |
|
— |
2026-07-27 |
| commit |
0.00 |
fix(cli): don't dump raw warm-up traceback over the LLM erro |
|
— |
2026-07-27 |
| commit |
0.00 |
feat(llm): enable Bedrock/Anthropic prompt caching for Claud |
|
Standard feat commit with co-authors; te |
2026-07-27 |
| commit |
0.00 |
Add Linux ARM64 standalone release support (#886) |
|
Brief technical commit, release support |
2026-07-26 |
| commit |
0.00 |
fix(runtime): retry transient mid-stream provider errors ins |
|
— |
2026-07-26 |
| commit |
0.00 |
feat(context): spill oversized tool output into the sandbox |
|
— |
2026-07-26 |
| commit |
0.00 |
feat(context): model-aware conversation compaction for long |
|
— |
2026-07-26 |
| commit |
0.00 |
refactor(context): trim verbose comments |
|
Concise commit message with standard hum |
2026-07-26 |
| commit |
0.00 |
fix(context): reject tool-output byte ceilings below the not |
|
Technical explanation with domain detail |
2026-07-25 |
| commit |
0.00 |
fix(context): reserve notice budget so bounded output honors |
|
Technical jargon and structured but info |
2026-07-25 |
| commit |
0.00 |
fix(context): bound native filesystem tool output in Respons |
|
In-depth explanation and domain specific |
2026-07-25 |
| commit |
0.00 |
fix(context): clamp shell output cap and count byte-trimmed |
|
Domain-specific, terse description with |
2026-07-25 |
| commit |
0.00 |
feat(context): bound per-tool output before it enters agent |
|
Bullet points, domain jargon, and inform |
2026-07-25 |
| commit |
0.00 |
feat(reporting): add read-only list_reports + get_report too |
|
— |
2026-07-26 |
| commit |
0.00 |
docs(skills): remove references to tools not installed in th |
|
Long, technical and structured documenta |
2026-07-26 |
| commit |
0.00 |
fix: restore viewer-auth.json path in auth module docstring |
|
Brief, imperative tone typical of human |
2026-07-26 |
| commit |
0.00 |
refactor: move strix/viewer under strix/interface |
|
Standard refactor message; no signs of A |
2026-07-26 |
| commit |
0.00 |
refactor(reports): fold fence helpers into report writer |
|
Concise commit message with domain-speci |
2026-07-25 |
| commit |
0.00 |
fix(reports): safe-fence code-location snippets in markdown |
|
Technical, terse, and domain-specific; n |
2026-07-25 |
| commit |
0.00 |
fix(reports): safe-fence markdown PoC export and share fence |
|
Direct, technical commit message; no sig |
2026-07-25 |
| commit |
0.00 |
fix(reports): auto-detect PoC language with Python fallback |
|
Clear, brief, and technical; fits human |
2026-07-25 |
| commit |
0.00 |
fix(reports): strip markdown code fence from poc_script_code |
|
Technical terminology, concise phrasing; |
2026-07-25 |
| commit |
0.00 |
Rename root agent to Strix |
|
Simple rename commit; no AI hallmarks. |
2026-07-25 |
| commit |
0.00 |
feat(dedupe): add dedicated deduplication model (#823) |
|
Includes co-authors, but no AI-related t |
2026-07-25 |
| commit |
0.00 |
runtime: resolve staged local-dir path to avoid symlink reje |
|
Technical, concise commit summary; human |
2026-07-25 |
| commit |
0.00 |
docs(cli): document exit code 1 and clarify exit 0 semantics |
|
Detailed, domain-specific docs change; f |
2026-07-24 |
| commit |
0.00 |
Sign in with a ChatGPT subscription for inference (#854) |
|
Contains co-author trailers; commit mess |
2026-07-24 |
| commit |
0.00 |
chore(deps): bump setuptools to 83.0.0 (GHSA-h35f-9h28-mq5c) |
|
Standard dependency bump; no AI signals |
2026-07-24 |
| commit |
0.00 |
Quit after scan instead of hosting local viewer |
|
Direct, concise commit; technical contex |
2026-07-22 |
| commit |
0.00 |
fix(deps): cap cryptography <49 to keep Intel macOS universa |
|
Technical commit message with domain jar |
2026-07-22 |
| commit |
0.00 |
chore(deps): bump cryptography to 49.0.0 and pyasn1 to 0.6.4 |
|
Standard dependency bump commit; uses te |
2026-07-22 |
| commit |
0.00 |
feat(cli): update notifications + self-update (strix --updat |
|
Contains technical shorthand and informa |
2026-07-22 |
| commit |
0.00 |
chore: release v1.3.1 |
|
Typical brief release commit message wit |
2026-07-22 |
| commit |
0.00 |
sandbox: bump install.sh pre-pull tag to 1.1.0 (match runtim |
|
Short, technical commit; no signs of AI- |
2026-07-22 |
| pr |
0.00 |
fix(tui): make the mount prompt clickable, and skip the moun |
|
Highly technical, detailed, with code co |
2026-08-07 |
| pr |
0.00 |
feat(llm): opt-in Grok/SuperGrok subscription sign-in |
|
Technical, domain-heavy prose with revie |
2026-07-29 |
| pr |
0.00 |
docs(skills): clearer description |
|
Terse, human style; typical for commit s |
2026-08-07 |
| pr |
0.00 |
chore: release v1.5.1 |
|
— |
2026-08-07 |
| pr |
0.00 |
fix(packaging): bundle certifi CA bundle in PyInstaller bina |
|
— |
2026-08-07 |
| pr |
0.00 |
fix(packaging): bundle certifi CA bundle in PyInstaller bina |
|
Detailed, technical, checklist style ref |
2026-08-07 |
| pr |
0.00 |
expand firebase storage rules coverage |
|
Extremely detailed, technical, informal |
2026-08-06 |
| pr |
0.00 |
feat(reporting): additive shared-identity fields on dependen |
|
— |
2026-08-06 |
| pr |
0.00 |
fix(reporting): keep unknown-reachability evidence, align de |
|
— |
2026-08-06 |
| pr |
0.00 |
Coverage as a first-class artifact: what was tested, what wa |
|
— |
2026-08-03 |
| pr |
0.00 |
feat(skills): add MFA bypass testing skill |
|
Short, domain-specific commit; not AI-st |
2026-08-06 |
| pr |
0.00 |
feat(skills): add SNMP enumeration and exploitation skill |
|
Short, to the point skill addition; no A |
2026-08-06 |
| pr |
0.00 |
docs: add safe first-run guide with local vulnerable targets |
|
Well-structured, but motivation and summ |
2026-08-06 |
| pr |
0.00 |
feat(report): opt-in verify-before-emit pass to reject false |
|
Technical, detailed, safety caveats — al |
2026-08-06 |
| pr |
0.00 |
feat(skills): add WebSocket security testing skill |
|
Terse, technical; classic human commit s |
2026-08-06 |
| pr |
0.00 |
feat(skills): add validation methods doctrine skill |
|
Brief skill addition; uses idiomatic dev |
2026-08-06 |
| pr |
0.00 |
ci: publish nested standalone archives as release assets |
|
— |
2026-08-06 |
| pr |
0.00 |
ci: tolerate repr-escaped backslashes in the release TUI-sid |
|
— |
2026-08-06 |
| pr |
0.00 |
ci: fix Windows release build — TUI-sidecar archive check us |
|
— |
2026-08-06 |
| pr |
0.00 |
chore: release v1.5.0 + bump sandbox image to 1.3.0 |
|
— |
2026-08-06 |
| pr |
0.00 |
docs(skills): require per-CVE affected-symbol matching in de |
|
— |
2026-08-06 |
| pr |
0.00 |
update readme |
|
— |
2026-08-06 |
| pr |
0.00 |
prompt changes |
|
— |
2026-08-06 |
| pr |
0.00 |
feat(reporting): require repo-relative manifest_path on depe |
|
— |
2026-08-05 |
| pr |
0.00 |
feat(reporting): structured reachability evidence ladder for |
|
Commit subject follows standard conventi |
2026-08-05 |
| pr |
0.00 |
fix(agents): collapse repeated waits queued inside one model |
|
— |
2026-08-05 |
| pr |
0.00 |
fix(llm): abandon a model stream that stops producing events |
|
— |
2026-08-05 |
| pr |
0.00 |
fix(llm): cap the tool calls one assistant response may queu |
|
— |
2026-08-05 |
| pr |
0.00 |
fix(llm): keep tool-call ids unique so a recycled id can't e |
|
— |
2026-08-05 |
| pr |
0.00 |
feat(reporting): record transitive dependency chain on SCA f |
|
— |
2026-08-04 |
| pr |
0.00 |
fix(llm): omit parallel_tool_calls on tool-less calls (Azure |
|
Detailed technical template use and clea |
2026-08-01 |
| pr |
0.00 |
build(deps): bump cryptography from 48.0.1 to 50.0.0 |
|
— |
2026-08-04 |
| pr |
0.00 |
feat: add file-based config and web api workflow |
|
No content to analyze; review is human a |
2026-03-25 |
| pr |
0.00 |
fix: reject submit-only XSS false positives |
|
Very terse, direct, uses domain abbrevia |
2026-07-12 |
| pr |
0.00 |
fix(tests): skip symlink test when Windows lacks privilege |
|
Concise, technical, with platform-specif |
2026-07-11 |
| pr |
0.00 |
perf(runtime): import local sources via single tar put_archi |
|
Terse, domain-specific technical languag |
2026-07-11 |
| pr |
0.00 |
Fix ordered-list spacing in TUI markdown renderer |
|
Concise bullet-points, technical referen |
2026-07-10 |
