Commit Graph

Select branches

Hide Pull Requests

chore/bump-norma-v0.4.7

chore/docker-verified-tools

chore/dockerignore-and-readme

chore/norma-v0.4.4

chore/norma-v0.4.5

chore/norma-v0.4.6

chore/release-0.6.0

chore/server-tests-skip-without-dsn

chore/use-norma-usage-fix

docs/anthropic-base-url

docs/openai-responses-base-url

feat/adversarial-verification-gate

feat/agentic-guards

feat/agentic-prompt-hardening

feat/ask-operator

feat/ask-operator-env-handoff

feat/ask-operator-target-tag

feat/backup-script

feat/bbot-orchestrator

feat/bbot-typed-ingest

feat/claim-heartbeat-fencing

feat/closed-question-judge

feat/codeaudit-skill

feat/cost-ledger

feat/coverage-ledger

feat/deadline-contract

feat/derived-field-envelope

feat/drostbench-flag-corpus

feat/egress-governor

feat/fact-provenance

feat/finding-dedup-discipline

feat/finding-evidence-schema

feat/finding-proof-and-measured-impact

feat/hierarchical-budgets

feat/ingest-bbot

feat/intercept-decided-by

feat/l3-benchmark

feat/llm-test-stored-key

feat/llm-user-agent

feat/mcp-health

feat/notify-configurable-limits

feat/notify-limits-ui

feat/ouroboros-takes

feat/per-intent-llm-rotation

feat/php2shell-skill

feat/planner-quiet-mode

feat/planner-quiet-mode-toggle

feat/profile-posture-check

feat/prompt-injection-hardening

feat/rea-mcp-integration

feat/recon-toolbox

feat/release-body-from-changelog

feat/retest-verification

feat/skill-frontmatter-safety

feat/skills-reverse-skill-ports

feat/submission-review

feat/target-gate-custom-tools

feat/target-gate-extract-resolve-gate

feat/target-gate-hooks-scope

feat/target-gate-inherit-spawn

feat/target-gate-pinned-dialer

feat/target-gate-redirect-hops

feat/target-gate-schema-request

feat/test-db-per-package

feat/tool-rag-lexical

feat/untrusted-boundary-default-on

feat/untrusted-boundary-toggle

feat/update-banner-opt-in

feat/verification-ui

feat/verified-findings

fix/apply-new-options

fix/auth-init-setup-token

fix/auto-scope-hygiene

fix/backup-keep-zero

fix/block-reason-bound

fix/ci-race-shellcheck

fix/clean-clone-build

fix/companies-overflow-count

fix/config-load-errors

fix/cost-ledger-fresh-input

fix/customtool-proxy-scheme

fix/drost-dynamic-port

fix/drost-finding-detail-resilience

fix/drostbench-goal-target

fix/enrich-http-gate

fix/escalation-test-signature

fix/feishu-digest-overflow

fix/gitignore-backups

fix/go-1.26.10-xnet

fix/inheritance-test-teardown-order

fix/intercept-decision-source-prefix

fix/jwt-key-volume

fix/llm-provider-env-case

fix/llm-stored-key-endpoint

fix/llm-test-stored-profile-endpoint

fix/login-rate-limit-hardening

fix/login-terms-authorized-use

fix/node-22

fix/notify-overflow-count

fix/paused-duration-freeze

fix/shell-env-secrets

fix/target-gate-declared-first

fix/task-detail-metrics

fix/toolbox-tar-paths

fix/verification-gzip-body

main

release/v0.5.0

release/v0.5.1

rsi/loop-c-contract

rsi/shadow-lessons

rsi/skill-gaps

rsi/task-outcome-card

#102

#104

#106

#108

#11

#110

#111

#112

#113

#114

#115

#116

#118

#12

#121

#122

#123

#125

#126

#127

#128

#130

#132

#133

#134

#135

#136

#137

#138

#139

#14

#140

#141

#142

#143

#144

#145

#146

#147

#148

#149

#150

#151

#152

#152

#153

#155

#157

#158

#159

#16

#160

#161

#162

#163

#164

#165

#166

#167

#169

#170

#171

#172

#173

#174

#175

#176

#177

#178

#179

#18

#180

#182

#183

#184

#185

#186

#187

#188

#189

#190

#191

#192

#193

#194

#195

#196

#197

#198

#199

#2

#20

#200

#201

#202

#203

#204

#205

#206

#207

#208

#208

#22

#24

#26

#28

#30

#34

#35

#36

#37

#4

#42

#43

#44

#45

#46

#47

#49

#51

#53

#55

#57

#59

#6

#61

#63

#65

#67

#69

#7

#71

#74

#75

#77

#81

#82

#83

#88

#92

#95

#96

#97

#98

v0.4.0

v0.5.0

v0.5.1

v0.6.0

Mono Color

• 9a927846ef Intercept judge: closed-question mode, fail-closed to ask feat/closed-question-judge BaaRai 2026-11-12 22:35:11 +01:00
• 558b685886 Merge pull request #207 from BaaRai/feat/coverage-ledger main BaaRai 2026-11-12 22:00:29 +01:00
• 101c92d516 Coverage ledger: review fixes (one-line capped fields, framed gap lines, per-run end_reason) feat/coverage-ledger BaaRai 2026-11-12 20:48:34 +01:00
• 6f3a59e205 Coverage ledger: record examined, ruled-out and untested risk classes BaaRai 2026-11-12 20:16:23 +01:00
• afa6f4faab Merge pull request #206 from BaaRai/feat/hierarchical-budgets BaaRai 2026-11-12 19:53:52 +01:00
• d234e341fc Budget docs: wrap-up is typical, not deterministic; [budget] logged per planner round only feat/hierarchical-budgets BaaRai 2026-11-12 19:18:07 +01:00
• 4cde1a889f Budgets: revive clears the settle state, document config, allow update_finding_report in wrap-up BaaRai 2026-11-12 18:48:41 +01:00
• 16ddfc7779 Hierarchical run budgets: min(child, parent) with forced wrap-up (off by default) BaaRai 2026-11-12 17:27:28 +01:00
• 4f2c6ef789 Merge pull request #205 from BaaRai/feat/egress-governor BaaRai 2026-11-12 17:00:40 +01:00
• d116517c64 Egress: return large unshared responses without an error, namespace the transport cache per client, pace WebFetch only feat/egress-governor BaaRai 2026-11-12 16:44:08 +01:00
• 6a5adf73fe Docs: WebFetch results are coalesced, not cached BaaRai 2026-11-12 16:33:22 +01:00
• 3b5b2c3b88 WebFetch: coalesce only, never cache; pin the gate-off redirect test to the off profile BaaRai 2026-11-12 16:33:14 +01:00
• 0b59f4670b Egress governor: noise profiles (off by default), per-host rate limit, dedupe and short cache BaaRai 2026-11-12 16:30:56 +01:00
• b789dd2eae Merge pull request #204 from BaaRai/feat/tool-rag-lexical BaaRai 2026-11-12 16:16:22 +01:00
• e640c1b0fd Tool RAG: pin the keep set (harness, Skill, deferred) in a test feat/tool-rag-lexical BaaRai 2026-11-12 15:58:34 +01:00
• f3a20ef2c6 Tool RAG: lexical projection of the bound tool catalog (off by default) BaaRai 2026-11-12 15:42:31 +01:00
• 34ece5937a Merge pull request #203 from BaaRai/feat/untrusted-boundary-default-on BaaRai 2026-11-12 14:53:27 +01:00
• 8c3bae41f6 Untrusted boundary ON by default (opt-out via ARTEX_UNTRUSTED_BOUNDARY=0) feat/untrusted-boundary-default-on BaaRai 2026-11-12 14:46:44 +01:00
• 6109917957 Merge pull request #202 from BaaRai/feat/update-banner-opt-in BaaRai 2026-11-12 13:38:14 +01:00
• e5202b1c34 Merge pull request #201 from BaaRai/feat/release-body-from-changelog BaaRai 2026-11-12 13:38:10 +01:00
• e59db80173 Opt-in update banner, off by default feat/update-banner-opt-in BaaRai 2026-11-12 12:54:25 +01:00
• 1e3c858b4e release: build release body from CHANGELOG section feat/release-body-from-changelog BaaRai 2026-11-12 12:43:10 +01:00
• f90589c03c Merge pull request #200 from BaaRai/feat/ingest-bbot BaaRai 2026-11-12 12:41:19 +01:00
• 0f5d93fbee Add ingest_bbot tool (bbot JSONL, typed scope split) feat/ingest-bbot BaaRai 2026-11-12 12:35:06 +01:00
• 840bc53023 Merge pull request #199 from BaaRai/feat/bbot-typed-ingest BaaRai 2026-11-12 12:27:03 +01:00
• aefc8c68ec agent: typed parser for bbot JSONL output (F10b) feat/bbot-typed-ingest BaaRai 2026-11-12 12:15:37 +01:00
• 8a937ab306 Merge pull request #198 from BaaRai/fix/enrich-http-gate BaaRai 2026-11-12 12:11:29 +01:00
• 64dabdfbaf Merge pull request #197 from BaaRai/feat/ask-operator-target-tag BaaRai 2026-11-12 12:11:25 +01:00
• 3528287d61 enrich: route the HTTP probe through the pinned dialer (F13) fix/enrich-http-gate BaaRai 2026-11-12 11:53:33 +01:00
• a7e91c81e6 fix(ask_operator): seed the goal targets with bare goal domains (F12) feat/ask-operator-target-tag BaaRai 2026-11-12 11:51:38 +01:00
• 6dbcd33552 feat(ask_operator): tag requests that name hosts outside the goal (F12) BaaRai 2026-11-12 11:10:31 +01:00
• 2c1a49058e Merge pull request #196 from BaaRai/fix/auto-scope-hygiene BaaRai 2026-11-12 11:03:10 +01:00
• 88306a0567 fix(tools): migrate the add_task_scope description on existing databases (F8) fix/auto-scope-hygiene BaaRai 2026-11-12 09:38:52 +01:00
• cd8a830b53 docs(coverage): say "declared domain or IP root" for auto-scope roots (F8) BaaRai 2026-11-12 09:38:52 +01:00
• 37fab18809 fix(coverage): count auto-scope only under a declared root (F8) BaaRai 2026-11-12 07:37:58 +01:00
• 0dc8bdf179 Merge pull request #195 from BaaRai/feat/derived-field-envelope BaaRai 2026-11-12 07:26:56 +01:00
• 975f63434b agent: frame agent-derived fields in a per-message nonce envelope (#124, F3) feat/derived-field-envelope BaaRai 2026-11-12 01:30:17 +01:00
• ff75bfaf1f Merge pull request #194 from BaaRai/feat/fact-provenance BaaRai 2026-11-12 01:22:00 +01:00
• bc33db2735 server: add the record_fact source enum to existing databases feat/fact-provenance BaaRai 2026-11-12 01:09:30 +01:00
• 62c9b4a178 agent: fact provenance (declared source plus server-set origin) BaaRai 2026-11-12 00:37:44 +01:00
• a13c68cb70 Merge pull request #191 from BaaRai/chore/release-0.6.0 v0.6.0 BaaRai 2026-11-12 00:17:29 +01:00
• 9fddb83d2d docs(changelog): date 0.6.0 as 2026-11-12 chore/release-0.6.0 BaaRai 2026-11-12 00:06:57 +01:00
• 6f42db90bc docs(changelog): add #192 and #193 to 0.6.0 BaaRai 2026-11-11 23:52:27 +01:00
• 9355a373f1 Merge pull request #193 from BaaRai/feat/finding-evidence-schema BaaRai 2026-11-11 23:51:40 +01:00
• f92938836d Merge pull request #192 from BaaRai/fix/block-reason-bound BaaRai 2026-11-11 23:51:36 +01:00
• 8c9c1fc0ab feat(findings): optional counterevidence and confidence_rationale feat/finding-evidence-schema BaaRai 2026-11-11 23:43:12 +01:00
• 1f297d75f2 guard: bound the length of block reasons sent to the model fix/block-reason-bound BaaRai 2026-11-11 23:33:53 +01:00
• 80c192d8ac release: v0.6.0 BaaRai 2026-11-11 22:58:09 +01:00
• a1f3256cf6 Merge pull request #190 from BaaRai/feat/agentic-guards BaaRai 2026-11-11 22:53:54 +01:00
• 4bcb6d7250 Add agentic guards for goals, hint origin and planner Bash (F5, F6, F11) feat/agentic-guards BaaRai 2026-11-11 22:39:13 +01:00
• 2945f58b01 Merge pull request #189 from BaaRai/feat/agentic-prompt-hardening BaaRai 2026-11-11 22:11:40 +01:00
• 09ef702c24 agent: untrusted-content tail for every chat agent; evidence wording fits the reporter feat/agentic-prompt-hardening BaaRai 2026-11-11 21:59:09 +01:00
• 8acf1be46e agent: code-owned prompt-injection tails and planner goal anchor (#124) BaaRai 2026-11-11 21:47:44 +01:00
• 271f3b088a Merge pull request #188 from BaaRai/chore/docker-verified-tools BaaRai 2026-11-11 21:04:43 +01:00
• ac003ede28 chore(docker): verify tool downloads and pin build inputs chore/docker-verified-tools BaaRai 2026-11-11 20:38:33 +01:00
• 31e56a16fc Merge pull request #187 from BaaRai/fix/customtool-proxy-scheme BaaRai 2026-11-11 20:27:16 +01:00
• bbc4f6269a Fix doubled scheme in the custom http tool's recording proxy URL fix/customtool-proxy-scheme BaaRai 2026-11-11 20:20:16 +01:00
• e38e48e80e Merge pull request #186 from BaaRai/feat/target-gate-pinned-dialer BaaRai 2026-11-11 19:54:37 +01:00
• f6b29b835b feat(intercept): pinned dialer for WebFetch and the custom http tool (S3b 2.1) feat/target-gate-pinned-dialer BaaRai 2026-11-11 19:19:55 +01:00
• 08830365c4 Merge pull request #185 from BaaRai/feat/target-gate-redirect-hops BaaRai 2026-11-11 17:15:06 +01:00
• 1c3a5f4ffa feat(intercept): check every redirect hop against the target gate (S3b 1.9) feat/target-gate-redirect-hops BaaRai 2026-11-11 17:07:35 +01:00
• 1e616c9286 Merge pull request #184 from BaaRai/chore/bump-norma-v0.4.7 BaaRai 2026-11-11 16:43:00 +01:00
• 46e81f5f67 chore: bump norma to v0.4.7 chore/bump-norma-v0.4.7 BaaRai 2026-11-11 16:33:04 +01:00
• c5e12541bd Merge pull request #183 from BaaRai/fix/target-gate-declared-first BaaRai 2026-11-11 16:05:15 +01:00
• 743e6b0d15 Merge pull request #182 from BaaRai/feat/target-gate-inherit-spawn BaaRai 2026-11-11 15:58:15 +01:00
• ca15063db7 fix(intercept): match block rules on the declared targets before any lookup fix/target-gate-declared-first BaaRai 2026-11-11 15:47:58 +01:00
• f07e84ac7a feat(intercept): spawned tasks and triggered conversations inherit the target gate feat/target-gate-inherit-spawn BaaRai 2026-11-11 15:47:21 +01:00
• a77851db7d Merge pull request #180 from BaaRai/feat/target-gate-custom-tools BaaRai 2026-11-11 15:32:57 +01:00
• c0b741bcf6 feat(intercept): gate the rendered targets of custom tools (S3b 1.8) feat/target-gate-custom-tools BaaRai 2026-11-11 15:04:42 +01:00
• ec3db7fdec Merge pull request #179 from BaaRai/feat/target-gate-extract-resolve-gate BaaRai 2026-11-11 14:42:45 +01:00
• 78f92f44fc feat(intercept): target extraction, resolver, exemptions and the gate in the hook (S3b 1.5-1.7) feat/target-gate-extract-resolve-gate BaaRai 2026-11-11 00:34:55 +01:00
• 923c4a813a Merge pull request #178 from BaaRai/feat/target-gate-schema-request BaaRai 2026-11-10 23:35:55 +01:00
• 1f4cb65ca6 feat(intercept): target-gate schema, opt-in flag and approval requests (S3b 1.2-1.4) feat/target-gate-schema-request BaaRai 2026-11-10 23:05:47 +01:00
• ce9f4d0107 Merge pull request #177 from BaaRai/feat/target-gate-hooks-scope BaaRai 2026-11-10 22:36:27 +01:00
• 135b083b9a feat(guard): planner and main-agent hooks, target-gate scope in every session (S3b 1.1) feat/target-gate-hooks-scope BaaRai 2026-11-10 22:14:24 +01:00
• 7ccae15e3f Merge pull request #176 from BaaRai/feat/claim-heartbeat-fencing BaaRai 2026-11-10 19:13:54 +01:00
• c0e713d32f feat(engine): intent claim heartbeat, TTL and fencing token (S3c) feat/claim-heartbeat-fencing BaaRai 2026-11-10 17:45:11 +01:00
• b51a0bf74b Merge pull request #175 from BaaRai/chore/server-tests-skip-without-dsn BaaRai 2026-11-10 17:06:23 +01:00
• b847867e5c Merge pull request #174 from BaaRai/fix/feishu-digest-overflow BaaRai 2026-11-10 17:06:19 +01:00
• 9b7276d65a Merge pull request #173 from BaaRai/feat/notify-limits-ui BaaRai 2026-11-10 17:06:15 +01:00
• 542582e3bc notify: pack Feishu digests against the serialized request body fix/feishu-digest-overflow BaaRai 2026-11-10 16:28:30 +01:00
• a422a071f6 server: skip Postgres-backed tests when no database is configured chore/server-tests-skip-without-dsn BaaRai 2026-11-10 16:28:26 +01:00
• 0cc22cb794 web: add the notification render limits to the notify settings page feat/notify-limits-ui BaaRai 2026-11-10 16:23:57 +01:00
• 3b6eb2fd2c Merge pull request #172 from BaaRai/feat/notify-configurable-limits BaaRai 2026-11-10 16:16:30 +01:00
• 2ab1046746 Merge pull request #171 from BaaRai/fix/companies-overflow-count BaaRai 2026-11-10 16:16:24 +01:00
• 809436e111 notify: make the summary and asset limits configurable feat/notify-configurable-limits BaaRai 2026-11-10 16:05:31 +01:00
• c84f124cb4 db: report hidden asset count in malformed-ip warning suffix fix/companies-overflow-count BaaRai 2026-11-10 15:49:41 +01:00
• cf0b0c1002 Merge pull request #170 from BaaRai/fix/notify-overflow-count BaaRai 2026-11-10 15:44:46 +01:00
• b17a0ea796 notify: report hidden asset count in overflow suffix fix/notify-overflow-count BaaRai 2026-11-10 15:07:37 +01:00
• 59c3702a5e Merge pull request #169 from BaaRai/fix/verification-gzip-body BaaRai 2026-11-10 14:31:37 +01:00
• 05df40eecb test(verification): lock that an empty bound body never satisfies a quote fix/verification-gzip-body BaaRai 2026-11-10 12:52:56 +01:00
• f4f0df128a fix(verification): decode gzip/deflate response bodies before the S1 quote check BaaRai 2026-11-10 12:33:40 +01:00
• 00f5d8c103 Merge pull request #130 from kiserufetch/fix/list-task-credentials-empty-required BaaRai 2026-11-10 10:43:29 +01:00
• a44af3ca2b fix(tools): harden obj against blank required names and heal seeded list_task_credentials rows BaaRai 2026-11-10 09:46:49 +01:00
• 81eab87d16 Merge pull request #166 from BaaRai/feat/untrusted-boundary-toggle BaaRai 2026-11-09 23:51:52 +01:00
• 06453409ea chore: pass ARTEX_UNTRUSTED_BOUNDARY to the artex service feat/untrusted-boundary-toggle BaaRai 2026-11-09 23:44:38 +01:00
• c73e2872a3 feat: enable the untrusted-output boundary with ARTEX_UNTRUSTED_BOUNDARY BaaRai 2026-11-09 23:42:49 +01:00
• a83f494d03 Merge pull request #165 from BaaRai/feat/intercept-decided-by BaaRai 2026-11-09 23:28:17 +01:00
• 52ea3f65c6 fix: rename the model filter option to AI-decided feat/intercept-decided-by BaaRai 2026-11-09 23:17:08 +01:00
• 2218480eba feat: show and filter the decided_by actor in the approval records BaaRai 2026-11-09 22:35:09 +01:00