Commit Graph

Select branches

Hide Pull Requests

chore/bump-norma-v0.4.7

chore/docker-verified-tools

chore/dockerignore-and-readme

chore/norma-v0.4.4

chore/norma-v0.4.5

chore/norma-v0.4.6

chore/release-0.6.0

chore/server-tests-skip-without-dsn

chore/use-norma-usage-fix

docs/anthropic-base-url

docs/openai-responses-base-url

feat/adversarial-verification-gate

feat/agentic-guards

feat/agentic-prompt-hardening

feat/ask-operator

feat/ask-operator-env-handoff

feat/ask-operator-target-tag

feat/backup-script

feat/bbot-orchestrator

feat/bbot-typed-ingest

feat/claim-heartbeat-fencing

feat/closed-question-judge

feat/codeaudit-skill

feat/cost-ledger

feat/coverage-ledger

feat/deadline-contract

feat/derived-field-envelope

feat/drostbench-flag-corpus

feat/egress-governor

feat/fact-provenance

feat/finding-dedup-discipline

feat/finding-evidence-schema

feat/finding-proof-and-measured-impact

feat/hierarchical-budgets

feat/ingest-bbot

feat/intercept-decided-by

feat/l3-benchmark

feat/llm-test-stored-key

feat/llm-user-agent

feat/mcp-health

feat/notify-configurable-limits

feat/notify-limits-ui

feat/ouroboros-takes

feat/per-intent-llm-rotation

feat/php2shell-skill

feat/planner-quiet-mode

feat/planner-quiet-mode-toggle

feat/profile-posture-check

feat/prompt-injection-hardening

feat/rea-mcp-integration

feat/recon-toolbox

feat/release-body-from-changelog

feat/retest-verification

feat/skill-frontmatter-safety

feat/skills-reverse-skill-ports

feat/submission-review

feat/target-gate-custom-tools

feat/target-gate-extract-resolve-gate

feat/target-gate-hooks-scope

feat/target-gate-inherit-spawn

feat/target-gate-pinned-dialer

feat/target-gate-redirect-hops

feat/target-gate-schema-request

feat/test-db-per-package

feat/tool-rag-lexical

feat/untrusted-boundary-default-on

feat/untrusted-boundary-toggle

feat/update-banner-opt-in

feat/verification-ui

feat/verified-findings

fix/apply-new-options

fix/auth-init-setup-token

fix/auto-scope-hygiene

fix/backup-keep-zero

fix/block-reason-bound

fix/ci-race-shellcheck

fix/clean-clone-build

fix/companies-overflow-count

fix/config-load-errors

fix/cost-ledger-fresh-input

fix/customtool-proxy-scheme

fix/drost-dynamic-port

fix/drost-finding-detail-resilience

fix/drostbench-goal-target

fix/enrich-http-gate

fix/escalation-test-signature

fix/feishu-digest-overflow

fix/gitignore-backups

fix/go-1.26.10-xnet

fix/inheritance-test-teardown-order

fix/intercept-decision-source-prefix

fix/jwt-key-volume

fix/llm-provider-env-case

fix/llm-stored-key-endpoint

fix/llm-test-stored-profile-endpoint

fix/login-rate-limit-hardening

fix/login-terms-authorized-use

fix/node-22

fix/notify-overflow-count

fix/paused-duration-freeze

fix/shell-env-secrets

fix/target-gate-declared-first

fix/task-detail-metrics

fix/toolbox-tar-paths

fix/verification-gzip-body

main

release/v0.5.0

release/v0.5.1

rsi/loop-c-contract

rsi/shadow-lessons

rsi/skill-gaps

rsi/task-outcome-card

#102

#104

#106

#108

#11

#110

#111

#112

#113

#114

#115

#116

#118

#12

#121

#122

#123

#125

#126

#127

#128

#130

#132

#133

#134

#135

#136

#137

#138

#139

#14

#140

#141

#142

#143

#144

#145

#146

#147

#148

#149

#150

#151

#152

#152

#153

#155

#157

#158

#159

#16

#160

#161

#162

#163

#164

#165

#166

#167

#169

#170

#171

#172

#173

#174

#175

#176

#177

#178

#179

#18

#180

#182

#183

#184

#185

#186

#187

#188

#189

#190

#191

#192

#193

#194

#195

#196

#197

#198

#199

#2

#20

#200

#201

#202

#203

#204

#205

#206

#207

#208

#208

#22

#24

#26

#28

#30

#34

#35

#36

#37

#4

#42

#43

#44

#45

#46

#47

#49

#51

#53

#55

#57

#59

#6

#61

#63

#65

#67

#69

#7

#71

#74

#75

#77

#81

#82

#83

#88

#92

#95

#96

#97

#98

v0.4.0

v0.5.0

v0.5.1

v0.6.0

Mono Color

• 8f50b81792 feat: record which actor decided an intercept approval BaaRai 2026-11-09 22:17:56 +01:00
• 3e75f1f954 Merge pull request #164 from BaaRai/feat/retest-verification BaaRai 2026-11-09 21:56:06 +01:00
• 8634ddbf23 feat: a completed retest updates the verification state feat/retest-verification BaaRai 2026-11-09 21:47:40 +01:00
• ec89070b8e Merge pull request #163 from BaaRai/feat/verification-ui BaaRai 2026-11-09 21:21:42 +01:00
• 1810a82187 feat: verification status badge, filter and note in the findings UI feat/verification-ui BaaRai 2026-11-09 21:04:12 +01:00
• 34cbbeadb7 Merge pull request #162 from BaaRai/feat/verified-findings BaaRai 2026-11-09 20:50:13 +01:00
• a1426bbd35 test: use an 8+ rune quote in the unreadable-store case feat/verified-findings BaaRai 2026-11-09 20:43:25 +01:00
• 0a740f0894 fix: ignore evidence quotes shorter than 8 runes BaaRai 2026-11-09 20:27:42 +01:00
• f938ba00d9 feat: verified findings backend (S1) BaaRai 2026-11-09 20:21:27 +01:00
• f5db962eeb Merge pull request #161 from BaaRai/chore/norma-v0.4.6 BaaRai 2026-11-09 20:06:48 +01:00
• 62571c9b34 chore: keep untrusted-output boundary off until isolated smoke test chore/norma-v0.4.6 BaaRai 2026-11-09 19:24:24 +01:00
• 4fe80b860c chore: bump norma to v0.4.6 and enable untrusted-output boundary BaaRai 2026-11-09 19:19:42 +01:00
• fbe78395d5 Merge pull request #160 from BaaRai/chore/norma-v0.4.5 BaaRai 2026-11-09 15:54:39 +01:00
• 6ce50b7d13 deps: bump Norma replace to v0.4.5 chore/norma-v0.4.5 BaaRai 2026-11-09 15:42:49 +01:00
• 9c2b56001d Merge pull request #159 from BaaRai/fix/intercept-decision-source-prefix BaaRai 2026-11-09 12:31:38 +01:00
• 9481b8e962 fix(intercept): judge decisions were stored as unknown (prefix case mismatch) fix/intercept-decision-source-prefix BaaRai 2026-11-09 12:22:46 +01:00
• f90e8d2bcb Merge pull request #158 from BaaRai/docs/openai-responses-base-url BaaRai 2026-11-09 12:04:10 +01:00
• cab0a10c6f docs: openai-responses base URL suffix docs/openai-responses-base-url BaaRai 2026-11-09 11:53:01 +01:00
• 180538e463 Merge pull request #157 from BaaRai/docs/anthropic-base-url BaaRai 2026-11-09 11:37:27 +01:00
• a7da0559f3 docs: Anthropic base URL must not end in /v1 docs/anthropic-base-url BaaRai 2026-11-09 11:27:54 +01:00
• 9bf5d816ae Merge pull request #155 from BaaRai/feat/llm-user-agent BaaRai 2026-11-08 18:26:58 +01:00
• 4acdf3bb26 fix(llm): validate custom User-Agent in the connection-test path feat/llm-user-agent BaaRai 2026-11-08 18:15:33 +01:00
• 13dde2da15 feat(llm): optional custom User-Agent for LLM requests BaaRai 2026-11-08 17:11:43 +01:00
• a908e1ec17 Merge pull request #153 from BaaRai/chore/dockerignore-and-readme BaaRai 2026-11-06 14:41:29 +01:00
• 9784bb192c chore: keep secrets out of the Docker build context; drop stale README step chore/dockerignore-and-readme BaaRai 2026-11-06 14:31:52 +01:00
• 44d755fb2e Merge pull request #132 from htcom-code/fix/131-mcp-version-fallback BaaRai 2026-11-06 14:31:44 +01:00
• ce279d77d3 Merge pull request #151 from BaaRai/release/v0.5.1 v0.5.1 BaaRai 2026-11-05 18:17:19 +01:00
• 41e10456d7 release: v0.5.1 release/v0.5.1 BaaRai 2026-11-05 18:09:19 +01:00
• 43424404ee Merge pull request #150 from BaaRai/fix/login-rate-limit-hardening BaaRai 2026-11-05 18:08:11 +01:00
• cb13a22673 ci: retrigger after PR head sync fix/login-rate-limit-hardening BaaRai 2026-11-05 17:30:24 +01:00
• 8beb9c50d6 fix(ci): drop unused variable in reset-password.sh (SC2034) BaaRai 2026-11-05 17:11:41 +01:00
• 4be2fc5c9a docs, ci: proxy setup for host and Docker, shellcheck reset-password.sh BaaRai 2026-11-05 17:06:10 +01:00
• d0d153b768 fix(auth): trusted proxies for the login rate limit, 12 characters in reset-password.sh BaaRai 2026-11-05 16:57:48 +01:00
• 2419038884 fix(auth): rate-limit login per IP, 12-character passwords, loopback default BaaRai 2026-11-05 16:48:27 +01:00
• e6e9b2f978 Add Trendshift badge to README BaaRai 2026-11-04 21:29:45 +01:00
• 248d9d9673 Merge pull request #149 from BaaRai/fix/jwt-key-volume BaaRai 2026-11-04 09:57:52 +01:00
• 65bdc5d73c fix(auth): keep the JWT signing key in a dedicated volume fix/jwt-key-volume BaaRai 2026-11-04 09:18:11 +01:00
• fc35dddee8 release: v0.5.0 (#148) v0.5.0 BaaRai 2026-11-04 01:26:24 +01:00
• 11a9587617 release: v0.5.0 release/v0.5.0 GRAB Racem 2026-11-04 01:18:08 +01:00
• 668e099dd8 fix(docker): build the image from source so a fresh clone builds (#147) BaaRai 2026-11-04 01:06:59 +01:00
• 1a49abaf09 fix(docker): build the image from source so a fresh clone builds fix/clean-clone-build GRAB Racem 2026-11-04 00:26:39 +01:00
• 04777513b6 ci: give the race run its own database BaaRai 2026-11-03 23:58:15 +01:00
• 90e7b3ef55 Merge pull request #146 from BaaRai/fix/apply-new-options BaaRai 2026-11-03 23:52:28 +01:00
• b100848ebf Merge pull request #144 from BaaRai/fix/ci-race-shellcheck BaaRai 2026-11-03 23:49:40 +01:00
• 0093781c8b Merge pull request #142 from BaaRai/fix/llm-stored-key-endpoint BaaRai 2026-11-03 23:49:33 +01:00
• e94471609f Merge pull request #141 from BaaRai/fix/config-load-errors BaaRai 2026-11-03 23:49:26 +01:00
• 77e2c5f9fa Merge pull request #145 from BaaRai/fix/go-1.26.10-xnet BaaRai 2026-11-03 23:49:20 +01:00
• 41fe40af07 Merge pull request #143 from BaaRai/fix/node-22 BaaRai 2026-11-03 23:49:03 +01:00
• 0d9602dc56 Merge pull request #140 from BaaRai/fix/llm-provider-env-case BaaRai 2026-11-03 23:48:56 +01:00
• 5e872ccc15 Merge pull request #139 from BaaRai/fix/backup-keep-zero BaaRai 2026-11-03 23:48:49 +01:00
• d3c4d21086 Merge pull request #138 from BaaRai/fix/gitignore-backups BaaRai 2026-11-03 23:48:42 +01:00
• 69831f5cdf fix(security): apply New options so the secret scrub actually runs fix/apply-new-options BaaRai 2026-11-03 23:47:49 +01:00
• 3322ecd6a6 ci: run shellcheck at warning severity fix/ci-race-shellcheck GRAB Racem 2026-11-03 23:36:00 +01:00
• 7b2a5fb05e build: go 1.26.10, golang.org/x/net v0.62.0 fix/go-1.26.10-xnet GRAB Racem 2026-11-03 23:34:39 +01:00
• 2d373ae77a ci: add a race-detector step and shellcheck for the install scripts GRAB Racem 2026-11-03 23:30:08 +01:00
• fc08133ab2 fix(docker): install Node 22 in the runtime image fix/node-22 GRAB Racem 2026-11-03 23:26:50 +01:00
• 334f6fdddc fix(llm): send a saved API key only to the endpoint it was saved for fix/llm-stored-key-endpoint GRAB Racem 2026-11-03 23:25:47 +01:00
• a20628d334 fix(config): fail on a malformed config.json and escape install.sh values fix/config-load-errors GRAB Racem 2026-11-03 23:22:34 +01:00
• a6e3fd0a2e fix(agent): match ARTEX_LLM_PROVIDER case-insensitively fix/llm-provider-env-case GRAB Racem 2026-11-03 23:20:21 +01:00
• ddddddd1f3 fix(backup): reject --keep 0 so the new dump is never pruned fix/backup-keep-zero GRAB Racem 2026-11-03 23:18:45 +01:00
• f3f9b8d4fd fix(gitignore): split the merged bench/backups line so backups/ is ignored fix/gitignore-backups GRAB Racem 2026-11-03 23:17:56 +01:00
• 23cf14cf0a Merge pull request #137 from BaaRai/fix/auth-init-setup-token BaaRai 2026-11-03 22:22:30 +01:00
• 5bad722593 fix(auth): make the published bind address configurable fix/auth-init-setup-token BaaRai 2026-11-03 22:10:45 +01:00
• 2aab3e8210 fix(auth): require a setup token for /api/auth/init and bind 8787 to localhost GRAB Racem 2026-11-03 21:54:37 +01:00
• d45f0c7811 Merge pull request #136 from BaaRai/fix/shell-env-secrets BaaRai 2026-11-03 22:17:26 +01:00
• e6f4de5ddc fix(security): scrub startup secrets before any child can spawn fix/shell-env-secrets BaaRai 2026-11-03 22:10:41 +01:00
• ac601b7e59 fix(security): remove startup secrets from the environment before child processes spawn GRAB Racem 2026-11-03 21:46:40 +01:00
• f6583b4bad fix(mcp): omit protocol version header on initialize htjulia 2026-11-03 09:24:05 +09:00
• 9ebc8b6703 docs: recovery note for clones made before the history rewrite BaaRai 2026-11-02 17:07:32 +01:00
• 1c35c9cf68 fix(ollama): normalize the base URL on the environment path too BaaRai 2026-11-02 17:03:57 +01:00
• 1ed154e86c fix: build the image locally instead of pulling a third-party namespace BaaRai 2026-11-02 17:03:53 +01:00
• 4034ce4562 docs: correct the 0.4.0 changelog against the released tree BaaRai 2026-11-02 16:58:46 +01:00
• 934568f336 fix(mcp): negotiate protocol version with fallback htjulia 2026-11-02 15:40:45 +09:00
• a66c716c0a fix(tools): drop empty required entry from list_task_credentials schema kiserufetchandClaude Opus 4.8 2026-11-02 09:05:03 +03:00
• 7f8c7cbcae docs: changelog entry for Ollama support (#128) BaaRai 2026-10-25 19:19:11 +01:00
• 9e63a8031b Merge pull request #128 from glauberportella/develop BaaRai 2026-10-25 19:19:05 +01:00
• 978f308a9e fix(ollama): keyless env config and /v1 base URL normalization BaaRai 2026-10-25 19:18:25 +01:00
• 80a1ee96f6 ollama llm Glauber Portella 2026-10-23 18:12:38 -03:00
• b3717f7a5f release: v0.4.0 v0.4.0 BaaRai 2026-10-23 14:40:39 +02:00
• 5d3b1d142d Merge pull request #125 from stevenAthompson/chore/remove-self-update BaaRai 2026-10-23 14:28:51 +02:00
• 2d5f9677f4 chore: remove automatic update check and in-app self-update stevenAthompson 2026-10-22 23:58:37 -04:00
• faf76d5f10 Merge pull request #123 from BaaRai/docs/ai-pr-review-technology BaaRai 2026-10-22 14:51:28 +02:00
• 27d2241cda docs: cover the platform's continuous red-teaming offering BaaRai 2026-10-22 14:49:52 +02:00
• 70f9ea3f01 docs: add AI PR review REA analysis and ARTEX integration plan BaaRai 2026-10-22 14:42:56 +02:00
• 271deabeb0 Merge pull request #121 from BaaRai/chore/norma-v0.4.4 BaaRai 2026-10-22 13:07:26 +02:00
• e6b4f6c5f4 chore: bump norma to v0.4.4 (fork synced to upstream tag) chore/norma-v0.4.4 BaaRai 2026-10-22 13:04:12 +02:00
• c7bef98689 Merge pull request #118 from BaaRai/feat/bbot-orchestrator BaaRai 2026-10-22 12:07:53 +02:00
• 4c62b57bcc feat(skills): bbot recursive recon orchestrator with policy gates feat/bbot-orchestrator BaaRai 2026-10-22 12:03:24 +02:00
• b5bee2b8d2 Merge pull request #116 from BaaRai/fix/toolbox-tar-paths BaaRai 2026-10-21 15:55:20 +02:00
• b48c58d3b6 fix(image): toolbox tar extraction paths + dalfox version flag fix/toolbox-tar-paths BaaRai 2026-10-21 15:52:04 +02:00
• 4dcba3d07e Merge pull request #115 from BaaRai/fix/escalation-test-signature BaaRai 2026-10-21 15:20:16 +02:00
• a195dfee2a fix(test): escalation test to the ctx-aware hooks.current signature fix/escalation-test-signature BaaRai 2026-10-21 15:16:25 +02:00
• ff017216bf Merge pull request #114 from BaaRai/feat/per-intent-llm-rotation BaaRai 2026-10-21 15:13:56 +02:00
• 1ec2511c4b Merge pull request #113 from BaaRai/feat/php2shell-skill BaaRai 2026-10-21 15:13:52 +02:00
• b757fc7e62 Merge pull request #112 from BaaRai/feat/recon-toolbox BaaRai 2026-10-21 15:13:47 +02:00
• 72b79af758 Merge pull request #111 from BaaRai/feat/ouroboros-takes BaaRai 2026-10-21 15:13:44 +02:00
• 579012e09d Merge pull request #110 from BaaRai/fix/paused-duration-freeze BaaRai 2026-10-21 15:13:40 +02:00
• 6894c391dd fix: test isolation for the escalation streak + compliant goal fixtures feat/ouroboros-takes BaaRai 2026-10-21 15:08:37 +02:00
• 89348b5512 feat(engine): per-intent LLM chain-head rotation (opt-in llm_rotate) feat/per-intent-llm-rotation BaaRai 2026-10-21 15:00:16 +02:00
• 750f4eb091 feat(skill): php2shell - gated session.upload_progress LFI-to-RCE skill with vendored PoCs feat/php2shell-skill BaaRai 2026-10-21 14:52:40 +02:00