| commit |
1.00 |
fix(agents): let an agent wait on what it already said (#102 |
|
Commit message contains explicit AI assi |
2026-08-08 |
| commit |
1.00 |
test(tui): correct the nudge the internal-turn test asserts |
|
Commit message contains explicit AI assi |
2026-08-08 |
| commit |
1.00 |
fix(tui): make the mount prompt clickable, and skip the moun |
|
Commit message contains explicit AI assi |
2026-08-08 |
| pr |
1.00 |
Feat/i18n portuguese |
|
PR body explicitly mentions AI collabora |
2026-08-11 |
| pr |
1.00 |
Feat/i18n spanish |
|
PR body explicitly mentions AI collabora |
2026-08-10 |
| pr |
1.00 |
test(tui): correct the nudge the internal-turn test asserts |
|
Explicit 'Generated with Claude Code' si |
2026-08-07 |
| pr |
1.00 |
fix(interface): clarify cached vs new input token breakdown |
|
Explicit statement of AI coding assistan |
2026-07-05 |
| pr |
0.95 |
feat: add STRIX_DISABLE_FIX_AGENTS to skip dedicated fix sub |
|
Explicit '🤖 Generated with Claude Code'; |
2026-06-29 |
| pr |
0.95 |
fix(proxy): actionable errors for bad list_requests/list_sit |
|
Explicit '🤖 Generated with Claude Code' |
2026-06-15 |
| pr |
0.90 |
feat(safety): add contextual action review with guarded and |
|
Claude Code attribution and emoji strong |
2026-08-07 |
| pr |
0.90 |
fix: replayed tool_call_item must not revert completed/faile |
|
Claude Code attribution and emoji signal |
2026-08-11 |
| pr |
0.90 |
fix: bound Caido readiness probe by wall-clock deadline, not |
|
Claude Code attribution and emoji signal |
2026-08-11 |
| pr |
0.90 |
fix(sessions): open a sqlite connection per operation, not p |
|
Formal tone and “Generated with Claude C |
2026-08-08 |
| pr |
0.90 |
fix(todo): stop a todo plan failing on priority or duplicate |
|
Formal phrasing and listed “Generated wi |
2026-08-08 |
| pr |
0.90 |
fix(agents): let an agent wait on what it already said |
|
Explanatory, formal style; ends with “Ge |
2026-08-08 |
| pr |
0.70 |
fix(runner): settle child agents before closing sessions at |
|
Contains explicit acknowledgement of Cla |
2026-08-09 |
| pr |
0.70 |
fix(tools): coerce an empty-string list/dict argument to an |
|
Ends with 'Generated with Claude Code', |
2026-08-08 |
| pr |
0.70 |
fix(runner): resume after a user interrupt instead of failin |
|
Includes 'Generated with Claude Code' an |
2026-08-08 |
| pr |
0.40 |
fix(config): preserve file-backed settings during persistenc |
|
Methodical technical writeup; lacks clea |
2026-08-08 |
| pr |
0.20 |
feat(skills): add expanded security testing guides |
|
Slightly more narrative style, but inclu |
2026-08-09 |
| pr |
0.20 |
Add Podman as working runtime backend |
|
Technical, template-based, domain-specif |
2026-05-28 |
| pr |
0.15 |
feat(skills): Add safe-mode crawling guard and network-layer |
|
Uses technical detail, domain-specific t |
2026-08-06 |
| pr |
0.15 |
feat: agent-ready — installable SKILL.md skills, AGENTS.md, |
|
Structured format, domain jargon, but wi |
2026-07-28 |
| pr |
0.10 |
fix(core): wake parent on terminal child status |
|
Detailed, technical, human-style rationa |
2026-07-25 |
| pr |
0.10 |
fix(core): set explicit max_tokens for Claude thinking model |
|
Concise technical explanation and no AI |
2026-08-11 |
| pr |
0.10 |
Honor LLM_TIMEOUT, expose generation params, and harden blac |
|
Technical breakdown, domain-specific con |
2026-06-09 |
| pr |
0.10 |
fix: bound Caido loginAsGuest retry to wall-clock boot deadl |
|
Technical summary, domain language, no A |
2026-08-11 |
| pr |
0.10 |
fix(interface): refuse container-runtime dirs and docker.soc |
|
Detailed technical security context, hum |
2026-08-11 |
| pr |
0.10 |
fix(interface): apply mount admission to workspace mounts |
|
Technical, concise, natural tone; human- |
2026-08-11 |
| pr |
0.10 |
fix(tui): use single space after ordered-list marker |
|
Natural technical writing, some template |
2026-08-10 |
| pr |
0.10 |
fix(agents): drop strict tool schemas on Bedrock Claude past |
|
Highly technical, domain-specific, detai |
2026-08-10 |
| pr |
0.10 |
feat: default STRIX_LLM to the ChatGPT subscription (chatgpt |
|
Detailed technical content, domain jargo |
2026-08-10 |
| pr |
0.10 |
fix(deps): bundle boto3 in release binaries and unbreak Bedr |
|
Technical, contextual, direct; lacks AI- |
2026-08-10 |
| pr |
0.10 |
docs: add OrcaRouter provider guide |
|
Technical writing, specific provider, cl |
2026-08-10 |
| pr |
0.10 |
fix(test): use real Settings object in runner root prompt te |
|
Direct technical rationale; domain termi |
2026-08-10 |
| pr |
0.10 |
fix(report): write the executive report atomically |
|
Technical changelog, domain-rich, direct |
2026-08-10 |
| pr |
0.10 |
fix(tui): show scan failure reason |
|
Technical, specific, informal notes, not |
2026-07-27 |
| pr |
0.10 |
fix(runtime): skip unreadable local source entries |
|
Contains technical detail, domain jargon |
2026-07-27 |
| pr |
0.10 |
fix(tui): use running state for app lifecycle guards |
|
Technical, uses domain-specific terms, c |
2026-07-27 |
| pr |
0.10 |
feat(report): suppress findings from a baseline run |
|
Detailed technical context, no AI-generi |
2026-07-27 |
| pr |
0.10 |
ci: publish strix-agent to PyPI on release tags |
|
Workflow change summary, declarative, na |
2026-07-27 |
| pr |
0.10 |
Raise on LiteLLM response.failed streams |
|
Detailed technical summary, validation s |
2026-07-27 |
| pr |
0.10 |
feat(config): add per-request token budget |
|
Domain-specific, concise, technical vali |
2026-07-27 |
| pr |
0.10 |
feat(llm): cache recent Claude prompt context |
|
Thorough but technical explanation, no A |
2026-07-27 |
| pr |
0.10 |
feat(runtime): cap spawned child agents |
|
Detailed, technical summary; no clear AI |
2026-07-27 |
| pr |
0.10 |
fix(tui): scrollbar visibility, findings scrolling, and repo |
|
Natural technical writing with specific |
2026-08-07 |
| pr |
0.10 |
Add safe first-run example with local demo app |
|
Brevity, directness, and context-specifi |
2026-08-06 |
| pr |
0.10 |
feat(web_search): add DuckDuckGo as opt-in backend |
|
Thorough but informal; domain-specific w |
2026-08-05 |
| pr |
0.10 |
feat: add opt-in completion nudge |
|
Technical, detailed, casual tone; not ov |
2026-07-10 |
| pr |
0.10 |
fix(tui): keep a long error inside the status row |
|
Slightly formal but highly technical and |
2026-08-04 |
| pr |
0.10 |
feat: support API specs and Postman collections as targets |
|
Technical, detailed, with ample domain j |
2026-07-23 |
| pr |
0.10 |
fix(interface): drop dead reasoning-effort branches, fix sta |
|
Technical, domain-specific, with informa |
2026-06-26 |
| pr |
0.10 |
fix: declare socksio and guard tracing init against SOCKS-pr |
|
Technical incident explanation; casual t |
2026-06-26 |
| pr |
0.10 |
Migrate task runner from Makefile to mise |
|
Structured summary with specific repo de |
2026-06-19 |
| pr |
0.10 |
added disposable email skill |
|
Slightly formal but direct; domain-speci |
2026-06-11 |
| pr |
0.10 |
Fix Bedrock reasoning for adaptive-thinking models (Claude O |
|
Domain-specific message; concise, techni |
2026-06-09 |
| pr |
0.05 |
Create credential files with owner-only permissions |
|
Direct, concise, technical style; inform |
2026-07-31 |
| pr |
0.05 |
fix: bind-mount local --target by default to avoid slow file |
|
Technical, with informal asides, typos, |
2026-07-22 |
| pr |
0.05 |
Handle large exec_command output and surface scan errors as |
|
Dense, technical free-text; natural styl |
2026-06-22 |
| commit |
0.00 |
chore: release v1.5.3 |
|
Pure changelog format; domain-specific, |
2026-08-10 |
| commit |
0.00 |
fix(llm): send OpenRouter app attribution on the request its |
|
— |
2026-08-10 |
| commit |
0.00 |
fix(container): write the browser profile as root |
|
Terse commit style with domain context, |
2026-08-10 |
| commit |
0.00 |
chore(container): drop explanatory comment |
|
Brief changelog; domain content, minimal |
2026-08-10 |
| commit |
0.00 |
fix(container): keep the browser env alive where image ENV i |
|
Changelog term, terse and domain-specifi |
2026-08-10 |
| commit |
0.00 |
fix(container): reclaim abandoned browser sessions (#1034) |
|
— |
2026-08-09 |
| commit |
0.00 |
chore: drop explanatory comment |
|
Short, terse commit message with no AI t |
2026-08-09 |
| commit |
0.00 |
fix(llm): omit parallel_tool_calls on tool-less requests |
|
Technical shorthand and precise fix, no |
2026-08-09 |
| commit |
0.00 |
chore: release v1.5.2 |
|
Standard version bump commit, no AI sign |
2026-08-09 |
| commit |
0.00 |
fix(runner): settle child agents before closing sessions at |
|
Technical, domain-specific, human commit |
2026-08-09 |
| commit |
0.00 |
fix(tools): coerce an empty-string list/dict argument to an |
|
Concise fix description, technical, no A |
2026-08-08 |
| commit |
0.00 |
fix(runner): resume after a user interrupt instead of failin |
|
Direct technical phrasing, no AI traits |
2026-08-08 |
| commit |
0.00 |
fix(sessions): open a sqlite connection per operation, not p |
|
Clear fix and technical jargon, human-wr |
2026-08-08 |
| commit |
0.00 |
fix(todo): stop a todo plan failing on priority or duplicate |
|
Brief, domain-typical commit message; no |
2026-08-08 |
| commit |
0.00 |
docs(skills): rename skills to descriptive names and broaden |
|
Standard commit style; changelog format, |
2026-08-07 |
| commit |
0.00 |
chore: release v1.5.1 |
|
Standard release note, terse and typical |
2026-08-07 |
| commit |
0.00 |
fix(tui): scrollbar visibility, findings scrolling, and repo |
|
Brief, technical summary; clear domain e |
2026-08-07 |
| commit |
0.00 |
expand firebase storage rules coverage (#1002) |
|
Short, domain-specific phrase, typical o |
2026-08-07 |
| commit |
0.00 |
ci: publish nested standalone archives as release assets |
|
Technical jargon, terse and domain-speci |
2026-08-06 |
| commit |
0.00 |
ci: tolerate repr-escaped backslashes in the release TUI-sid |
|
Terse, uses context-specific terms, not |
2026-08-06 |
| commit |
0.00 |
ci: match Windows backslash paths in the release TUI-sidecar |
|
Short, technical, no AI indicators prese |
2026-08-06 |
| commit |
0.00 |
chore(image): bump sandbox tag 1.2.0 -> 1.3.0 |
|
Jargon and terse git commit format, clea |
2026-08-06 |
| commit |
0.00 |
chore: release v1.5.0 |
|
Standard brief version bump commit, typi |
2026-08-06 |
| commit |
0.00 |
docs(skills): skipped symbol search must be disclosed in rea |
|
Technical, concise, no AI phrasing or st |
2026-08-06 |
| commit |
0.00 |
docs(skills): require per-CVE affected-symbol matching in de |
|
Jargon, terse style, typical of human te |
2026-08-06 |
| commit |
0.00 |
feat: agent-ready — installable SKILL.md skills, AGENTS.md, |
|
Uses abbreviations and commit convention |
2026-08-06 |
| commit |
0.00 |
update readme |
|
Very terse, typical human commit message |
2026-08-06 |
| commit |
0.00 |
prompt changes |
|
Minimal, lacks AI indicators, common hum |
2026-08-06 |
| commit |
0.00 |
prompt changes |
|
Terse and informal; clearly human shorth |
2026-08-06 |
| commit |
0.00 |
feat(report): keep dependency findings from distinct manifes |
|
Concise technical commit; uses domain-sp |
2026-08-05 |
| commit |
0.00 |
feat(reporting): require repo-relative manifest_path on depe |
|
Brief, domain-specific; no AI phrasing. |
2026-08-05 |
| commit |
0.00 |
feat(reporting): structured reachability evidence ladder for |
|
Commit message follows conventional styl |
2026-08-05 |
| commit |
0.00 |
fix(agents): collapse repeated waits queued inside one model |
|
— |
2026-08-05 |
| commit |
0.00 |
fix(llm): abandon a model stream that stops producing events |
|
— |
2026-08-05 |
| commit |
0.00 |
fix(llm): cap the tool calls one assistant response may queu |
|
— |
2026-08-05 |
| commit |
0.00 |
fix(llm): keep tool-call ids unique so a recycled id can't e |
|
— |
2026-08-05 |
| commit |
0.00 |
feat(reporting): record transitive dependency chain on SCA f |
|
— |
2026-08-04 |
| commit |
0.00 |
fix(tui): keep a long error inside the status row (#970) |
|
Brief commit message; concise, domain-sp |
2026-08-04 |
| commit |
0.00 |
feat: support API specs and Postman collections as targets ( |
|
Standard feature commit message with no |
2026-08-04 |
| commit |
0.00 |
build: add types-requests to dev deps |
|
Contains typos and domain-specific expla |
2026-08-04 |
| commit |
0.00 |
fix(core): settle a non-interactive agent's status before it |
|
Detailed technical explanation, uses dom |
2026-08-04 |
| commit |
0.00 |
fix(core): recover from hallucinated tool names instead of e |
|
Contains domain jargon, abbreviations, a |
2026-08-04 |
| commit |
0.00 |
fix(tui): drop the shift+enter newline hint from the setup f |
|
Concise description, no AI hallmarks. |
2026-08-04 |
| commit |
0.00 |
Create credential files with owner-only permissions (#945) |
|
Standard commit, contains human co-autho |
2026-08-04 |
| commit |
0.00 |
feat(tui): replace Textual with a Go/Bubble Tea interface (# |
|
Brief, technical commit message, no AI h |
2026-08-04 |
| commit |
0.00 |
fix: calibrate vulnerability severity to demonstrated impact |
|
Terse commit message using domain langua |
2026-08-03 |
| commit |
0.00 |
feat(runtime): mount local targets instead of copying them i |
|
— |
2026-08-02 |
| commit |
0.00 |
fix(tools): tell a waiting parent when stop_agent stops its |
|
Terse commit message, technical and succ |
2026-08-02 |
| commit |
0.00 |
fix(core): wake the parent when a child ends without a compl |
|
Brief, specific, and contains domain con |
2026-08-02 |
| commit |
0.00 |
perf(cli): ~10x faster startup via lazy imports (#920) |
|
— |
2026-08-02 |
| commit |
0.00 |
fix(tools): accept both the string and structured form of ev |
|
— |
2026-08-02 |
| commit |
0.00 |
feat(config): accept STRIX_REASONING_EFFORT=max for provider |
|
— |
2026-08-02 |
| commit |
0.00 |
docs(llm-providers): explain the structured tool_calls requi |
|
— |
2026-08-01 |
| commit |
0.00 |
docs(prompts): text-only turns no longer end an autonomous r |
|
Short, domain-specific, no AI tone detec |
2026-08-01 |
| commit |
0.00 |
refactor(tools): split wait_for_message into respond_to_user |
|
Explanatory but uses informal language a |
2026-08-01 |
| commit |
0.00 |
docs(core): correct the rationale for notifying a stalled ch |
|
Concise correction with domain-specific |
2026-08-01 |
| commit |
0.00 |
fix(core): tell the parent when an interactive subagent park |
|
Technical explanation, brief, no AI indi |
2026-08-01 |
| commit |
0.00 |
fix(tools): halve the wait_for_message ceiling to 300s |
|
Direct, technical, and contains informal |
2026-08-01 |
| commit |
0.00 |
fix(core): persist the tool-call recovery counter across res |
|
Technical, domain-specific language, no |
2026-08-01 |
| commit |
0.00 |
fix(core): stop interactive runs stalling on a missing tool |
|
Technical, informal and succinct style. |
2026-08-01 |
| commit |
0.00 |
docs(prompt): teach agents to recognize Caido proxy error pa |
|
— |
2026-08-01 |
| commit |
0.00 |
fix: pre-v1-style lifecycle resilience — mailbox delivery, u |
|
— |
2026-08-01 |
| commit |
0.00 |
fix(llm): surface structured provider refusals (#944) |
|
Commit message is terse and domain-speci |
2026-07-31 |
| commit |
0.00 |
fix(llm): avoid auth during ChatGPT lookup |
|
Terse commit and technical explanation, |
2026-07-30 |
| commit |
0.00 |
test(llm): cover the full run loop against a non-streaming g |
|
Commit message uses domain jargon and te |
2026-07-30 |
| commit |
0.00 |
feat(llm): opt-in LLM_DISABLE_STREAMING for non-streaming Op |
|
Commit message is concise, uses domain-s |
2026-07-30 |
| commit |
0.00 |
fix(llm): pass LLM_EXTRA_HEADERS through ModelSettings so th |
|
— |
2026-07-30 |
| commit |
0.00 |
fix(llm): apply LLM_EXTRA_HEADERS on native OpenAI route eve |
|
Short, technical fix message without AI |
2026-07-30 |
| commit |
0.00 |
feat(llm): custom request headers for OpenAI-compatible endp |
|
Short, direct, technical phrasing with d |
2026-07-30 |
| commit |
0.00 |
fix(runtime): label docker sandbox containers with the run i |
|
— |
2026-07-29 |
| commit |
0.00 |
fix(cost): capture OpenRouter streamed usage.cost (fixes $0 |
|
Commit is terse, technical, and informal |
2026-07-29 |
| commit |
0.00 |
Scope viewer session cookie to the bound port (#922) |
|
Concise commit message with Co-authored- |
2026-07-28 |
| commit |
0.00 |
fix: recoverable guardrail blocks and decoupled crash-notify |
|
— |
2026-07-27 |
| commit |
0.00 |
fix viewer tool call collisions across agents (#917) |
|
Terse commit message; standard human sty |
2026-07-27 |
| commit |
0.00 |
fix(cli): align View label spacing in final panel |
|
Terese technical summary, human-written, |
2026-07-27 |
| commit |
0.00 |
chore: release v1.4.1 |
|
Single-line release note; common for hum |
2026-07-27 |
| commit |
0.00 |
fix(tls): replace raw urllib with requests for external HTTP |
|
Commit has human co-authors, technical p |
2026-07-27 |
| commit |
0.00 |
chore: release v1.4.0 |
|
Single-line release version bump; univer |
2026-07-27 |
| commit |
0.00 |
fix(runtime): wake parent when child hits a terminal state ( |
|
Concise, domain-specific, typical human |
2026-07-27 |
| commit |
0.00 |
feat(runtime): graduated wrap-up warnings, budget reserve, a |
|
— |
2026-07-27 |
| commit |
0.00 |
fix(cli): don't dump raw warm-up traceback over the LLM erro |
|
— |
2026-07-27 |
| commit |
0.00 |
feat(llm): enable Bedrock/Anthropic prompt caching for Claud |
|
Standard feat commit with co-authors; te |
2026-07-27 |
| commit |
0.00 |
Add Linux ARM64 standalone release support (#886) |
|
Brief technical commit, release support |
2026-07-26 |
| commit |
0.00 |
fix(runtime): retry transient mid-stream provider errors ins |
|
— |
2026-07-26 |
| commit |
0.00 |
feat(context): spill oversized tool output into the sandbox |
|
— |
2026-07-26 |
| commit |
0.00 |
feat(context): model-aware conversation compaction for long |
|
— |
2026-07-26 |
| commit |
0.00 |
refactor(context): trim verbose comments |
|
Concise commit message with standard hum |
2026-07-26 |
| commit |
0.00 |
fix(context): reject tool-output byte ceilings below the not |
|
Technical explanation with domain detail |
2026-07-25 |
| commit |
0.00 |
fix(context): reserve notice budget so bounded output honors |
|
Technical jargon and structured but info |
2026-07-25 |
| commit |
0.00 |
fix(context): bound native filesystem tool output in Respons |
|
In-depth explanation and domain specific |
2026-07-25 |
| commit |
0.00 |
fix(context): clamp shell output cap and count byte-trimmed |
|
Domain-specific, terse description with |
2026-07-25 |
| commit |
0.00 |
feat(context): bound per-tool output before it enters agent |
|
Bullet points, domain jargon, and inform |
2026-07-25 |
| commit |
0.00 |
feat(reporting): add read-only list_reports + get_report too |
|
— |
2026-07-26 |
| commit |
0.00 |
docs(skills): remove references to tools not installed in th |
|
Long, technical and structured documenta |
2026-07-26 |
| commit |
0.00 |
fix: restore viewer-auth.json path in auth module docstring |
|
Brief, imperative tone typical of human |
2026-07-26 |
| commit |
0.00 |
refactor: move strix/viewer under strix/interface |
|
Standard refactor message; no signs of A |
2026-07-26 |
| commit |
0.00 |
refactor(reports): fold fence helpers into report writer |
|
Concise commit message with domain-speci |
2026-07-25 |
| pr |
0.00 |
WIP |
|
Single word 'WIP' is minimal, no AI sign |
2026-08-11 |
| pr |
0.00 |
fix(runtime): wait for Caido readiness by deadline |
|
Contains detailed validation steps and c |
2026-08-11 |
| pr |
0.00 |
chore: release v1.5.3 |
|
— |
2026-08-10 |
| pr |
0.00 |
fix(llm): send OpenRouter app attribution on the request its |
|
— |
2026-08-10 |
| pr |
0.00 |
denied retry fallback |
|
Extremely terse, typical human commit me |
2026-08-10 |
| pr |
0.00 |
fix(container): write the browser profile as root |
|
— |
2026-08-10 |
| pr |
0.00 |
fix(container): keep the browser env alive where image ENV i |
|
— |
2026-08-10 |
| pr |
0.00 |
fix(container): make headed browsing actually work in the sa |
|
— |
2026-08-09 |
| pr |
0.00 |
fix(container): reclaim abandoned browser sessions |
|
— |
2026-08-09 |
| pr |
0.00 |
feat(agents): evidence discipline, and coverage as a first-c |
|
— |
2026-08-03 |
| pr |
0.00 |
fix(llm): omit parallel_tool_calls on tool-less calls (Azure |
|
Detailed, technical, with domain-specifi |
2026-08-01 |
| pr |
0.00 |
fix(llm): omit parallel_tool_calls on tool-less requests |
|
— |
2026-08-09 |
| pr |
0.00 |
build(deps): bump pypdf from 6.14.2 to 6.15.0 |
|
— |
2026-08-09 |
| pr |
0.00 |
chore: release v1.5.2 |
|
— |
2026-08-09 |
| pr |
0.00 |
fix(tui): make the mount prompt clickable, and skip the moun |
|
Highly technical, detailed, with code co |
2026-08-07 |
| pr |
0.00 |
feat(llm): opt-in Grok/SuperGrok subscription sign-in |
|
Technical, domain-heavy prose with revie |
2026-07-29 |
| pr |
0.00 |
docs(skills): clearer description |
|
Terse, human style; typical for commit s |
2026-08-07 |
| pr |
0.00 |
chore: release v1.5.1 |
|
— |
2026-08-07 |
| pr |
0.00 |
fix(packaging): bundle certifi CA bundle in PyInstaller bina |
|
— |
2026-08-07 |
| pr |
0.00 |
fix(packaging): bundle certifi CA bundle in PyInstaller bina |
|
— |
2026-08-07 |
| pr |
0.00 |
expand firebase storage rules coverage |
|
Extremely detailed, technical, informal |
2026-08-06 |
| pr |
0.00 |
feat(reporting): additive shared-identity fields on dependen |
|
— |
2026-08-06 |
| pr |
0.00 |
fix(reporting): keep unknown-reachability evidence, align de |
|
— |
2026-08-06 |
| pr |
0.00 |
feat(skills): add MFA bypass testing skill |
|
Short, domain-specific commit; not AI-st |
2026-08-06 |
| pr |
0.00 |
feat(skills): add SNMP enumeration and exploitation skill |
|
Short, to the point skill addition; no A |
2026-08-06 |
| pr |
0.00 |
docs: add safe first-run guide with local vulnerable targets |
|
Well-structured, but motivation and summ |
2026-08-06 |
| pr |
0.00 |
feat(report): opt-in verify-before-emit pass to reject false |
|
Technical, detailed, safety caveats — al |
2026-08-06 |
| pr |
0.00 |
feat(skills): add WebSocket security testing skill |
|
Terse, technical; classic human commit s |
2026-08-06 |
| pr |
0.00 |
feat(skills): add validation methods doctrine skill |
|
Brief skill addition; uses idiomatic dev |
2026-08-06 |
| pr |
0.00 |
ci: publish nested standalone archives as release assets |
|
— |
2026-08-06 |
| pr |
0.00 |
ci: tolerate repr-escaped backslashes in the release TUI-sid |
|
— |
2026-08-06 |
| pr |
0.00 |
ci: fix Windows release build — TUI-sidecar archive check us |
|
— |
2026-08-06 |
| pr |
0.00 |
chore: release v1.5.0 + bump sandbox image to 1.3.0 |
|
— |
2026-08-06 |
| pr |
0.00 |
docs(skills): require per-CVE affected-symbol matching in de |
|
— |
2026-08-06 |
| pr |
0.00 |
update readme |
|
— |
2026-08-06 |
| pr |
0.00 |
prompt changes |
|
— |
2026-08-06 |
| pr |
0.00 |
feat(reporting): require repo-relative manifest_path on depe |
|
— |
2026-08-05 |
| pr |
0.00 |
feat(reporting): structured reachability evidence ladder for |
|
Commit subject follows standard conventi |
2026-08-05 |
| pr |
0.00 |
fix(agents): collapse repeated waits queued inside one model |
|
— |
2026-08-05 |
| pr |
0.00 |
fix(llm): abandon a model stream that stops producing events |
|
— |
2026-08-05 |
| pr |
0.00 |
fix(llm): cap the tool calls one assistant response may queu |
|
— |
2026-08-05 |
| pr |
0.00 |
fix(llm): keep tool-call ids unique so a recycled id can't e |
|
— |
2026-08-05 |
| pr |
0.00 |
feat(reporting): record transitive dependency chain on SCA f |
|
— |
2026-08-04 |
| pr |
0.00 |
build(deps): bump cryptography from 48.0.1 to 50.0.0 |
|
— |
2026-08-04 |
