Commit Graph

Select branches

Hide Pull Requests

chore/bump-norma-v0.4.7

chore/docker-verified-tools

chore/dockerignore-and-readme

chore/norma-v0.4.4

chore/norma-v0.4.5

chore/norma-v0.4.6

chore/release-0.6.0

chore/server-tests-skip-without-dsn

chore/use-norma-usage-fix

docs/anthropic-base-url

docs/openai-responses-base-url

feat/adversarial-verification-gate

feat/agentic-guards

feat/agentic-prompt-hardening

feat/ask-operator

feat/ask-operator-env-handoff

feat/ask-operator-target-tag

feat/backup-script

feat/bbot-orchestrator

feat/bbot-typed-ingest

feat/claim-heartbeat-fencing

feat/closed-question-judge

feat/codeaudit-skill

feat/cost-ledger

feat/coverage-ledger

feat/deadline-contract

feat/derived-field-envelope

feat/drostbench-flag-corpus

feat/egress-governor

feat/fact-provenance

feat/finding-dedup-discipline

feat/finding-evidence-schema

feat/finding-proof-and-measured-impact

feat/hierarchical-budgets

feat/ingest-bbot

feat/intercept-decided-by

feat/l3-benchmark

feat/llm-test-stored-key

feat/llm-user-agent

feat/mcp-health

feat/notify-configurable-limits

feat/notify-limits-ui

feat/ouroboros-takes

feat/per-intent-llm-rotation

feat/php2shell-skill

feat/planner-quiet-mode

feat/planner-quiet-mode-toggle

feat/profile-posture-check

feat/prompt-injection-hardening

feat/rea-mcp-integration

feat/recon-toolbox

feat/release-body-from-changelog

feat/retest-verification

feat/skill-frontmatter-safety

feat/skills-reverse-skill-ports

feat/submission-review

feat/target-gate-custom-tools

feat/target-gate-extract-resolve-gate

feat/target-gate-hooks-scope

feat/target-gate-inherit-spawn

feat/target-gate-pinned-dialer

feat/target-gate-redirect-hops

feat/target-gate-schema-request

feat/test-db-per-package

feat/tool-rag-lexical

feat/untrusted-boundary-default-on

feat/untrusted-boundary-toggle

feat/update-banner-opt-in

feat/verification-ui

feat/verified-findings

fix/apply-new-options

fix/auth-init-setup-token

fix/auto-scope-hygiene

fix/backup-keep-zero

fix/block-reason-bound

fix/ci-race-shellcheck

fix/clean-clone-build

fix/companies-overflow-count

fix/config-load-errors

fix/cost-ledger-fresh-input

fix/customtool-proxy-scheme

fix/drost-dynamic-port

fix/drost-finding-detail-resilience

fix/drostbench-goal-target

fix/enrich-http-gate

fix/escalation-test-signature

fix/feishu-digest-overflow

fix/gitignore-backups

fix/go-1.26.10-xnet

fix/inheritance-test-teardown-order

fix/intercept-decision-source-prefix

fix/jwt-key-volume

fix/llm-provider-env-case

fix/llm-stored-key-endpoint

fix/llm-test-stored-profile-endpoint

fix/login-rate-limit-hardening

fix/login-terms-authorized-use

fix/node-22

fix/notify-overflow-count

fix/paused-duration-freeze

fix/shell-env-secrets

fix/target-gate-declared-first

fix/task-detail-metrics

fix/toolbox-tar-paths

fix/verification-gzip-body

main

release/v0.5.0

release/v0.5.1

rsi/loop-c-contract

rsi/shadow-lessons

rsi/skill-gaps

rsi/task-outcome-card

#102

#104

#106

#108

#11

#110

#111

#112

#113

#114

#115

#116

#118

#12

#121

#122

#123

#125

#126

#127

#128

#130

#132

#133

#134

#135

#136

#137

#138

#139

#14

#140

#141

#142

#143

#144

#145

#146

#147

#148

#149

#150

#151

#152

#152

#153

#155

#157

#158

#159

#16

#160

#161

#162

#163

#164

#165

#166

#167

#169

#170

#171

#172

#173

#174

#175

#176

#177

#178

#179

#18

#180

#182

#183

#184

#185

#186

#187

#188

#189

#190

#191

#192

#193

#194

#195

#196

#197

#198

#199

#2

#20

#200

#201

#202

#203

#204

#205

#206

#207

#208

#208

#22

#24

#26

#28

#30

#34

#35

#36

#37

#4

#42

#43

#44

#45

#46

#47

#49

#51

#53

#55

#57

#59

#6

#61

#63

#65

#67

#69

#7

#71

#74

#75

#77

#81

#82

#83

#88

#92

#95

#96

#97

#98

v0.4.0

v0.5.0

v0.5.1

v0.6.0

Mono Color

• 246c625bf8 feat(bench): seed 起始清空全部拦截规则,放开 CTF 渗透操作防误拦 Autumn-27 2026-08-13 12:29:01 -04:00
• 688d73b07f feat(bench): 起题前按 host 清旧资产防跨题污染 + 提示词补 CTF 场景/深挖引导 + v2 基准脚手架 Autumn-27 2026-08-13 12:24:38 -04:00
• 14646d5bbc chore(plan): planner 心跳默认/下限 300s(5min) → 600s(10min) Autumn-27 2026-08-13 12:23:42 -04:00
• a3c179bd4e fix(bench): scheduler 真实 API 容错——建任务失败回滚/close 确认重试防泄漏名额/token 自动重登/VPN 断冻结补偿/重启重置进度追踪; 模拟器加故障注入 Autumn-27 2026-08-12 13:56:48 -04:00
• 489c371c3e feat(bench): 新增 CWF-DR 确定性调度器(scheduler.py)——算法编排替代 tec_benchmark agent，给难题不中断长窗口 Autumn-27 2026-08-12 13:44:09 -04:00
• d2f1d6c5f5 fix(llm): 连接测试对推理模型放足 MaxTokens，避免卡在思考里被截断 Autumn-27 2026-08-12 13:36:34 -04:00
• 1c3c9510b5 feat(bench): seed 双 LLM profile——planner 绑强模型、worker 绑弱模型、默认激活弱模型 Autumn-27 2026-08-12 12:18:51 -04:00
• adb3e73793 feat(planner): 触发上下文带实际变动 + 心跳触发改为「定时巡检」措辞 Autumn-27 2026-08-12 12:18:06 -04:00
• b1b42827fc fix(server): 删掉 seed() 的 t.Notify()——种子任务误触发首轮 planner 的真凶 Autumn-27 2026-08-12 11:41:43 -04:00
• de479b6c50 fix(engine): 种子意图任务误触发首轮 planner(Frontier 只数 open 与 worker claim 竞态) Autumn-27 2026-08-12 11:37:54 -04:00
• 7aa27abb5c feat(planner): finding 当场唤醒 + planner N 秒心跳触发(任务参数,默认5min) Autumn-27 2026-08-12 11:18:07 -04:00
• 009c54e454 fix(bench): 优化编排与规划提示词(深链势头豁免/时间预算重算/推进优先) Autumn-27 2026-08-12 10:19:37 -04:00
• 9ad38361e3 feat(agent): 支持为每个 agent 绑定 LLM 配置(agent 级默认模型) Autumn-27 2026-08-11 12:15:38 -04:00
• df50c281bc fix(security): jwt.key 移出可浏览工作区(存项目根,自动从 data 迁移) Autumn-27 2026-08-11 10:56:39 -04:00
• 6d6471f537 chore(bench): tec_benchmark 提示词整改 + seed 注入测评开始时间 Autumn-27 2026-08-11 10:45:12 -04:00
• a19baa39e0 feat(agent): 新增通用 {{.Now}} 提示词变量(每轮实时渲染) Autumn-27 2026-08-11 10:45:02 -04:00
• a25bf26578 fix(worker): 提示开场别做前置普查，减少 list_facts/findings/traces 的冗余调用 Autumn-27 2026-08-11 09:59:23 -04:00
• 46f2154657 docs: 新增 update.sh 更新脚本 + README 更新升级章节 Autumn-27 2026-08-11 09:50:38 -04:00
• 2803c4f91a Merge PR #18: delete traffic targets and LLM task conversations from UI (laohuan12138) Autumn-27 2026-08-11 09:31:31 -04:00
• b306d0a04e build(bench): 新增 tsecbench 测评环境 Autumn-27 2026-08-11 09:17:28 -04:00
• 4fdd13eeba chore(deps): 升级 Autumn-27/norma v0.2.7 → v0.2.8 Autumn-27 2026-08-11 09:17:14 -04:00
• 4a00729300 feat(activity): 任务会话历史反向分页 + SSE 可靠性整改 Autumn-27 2026-08-11 09:13:12 -04:00
• 91d141500d feat(activity): 丢弃记录日志合并为单条 error,带 reason/summary/累计数 Autumn-27 2026-08-11 09:10:35 -04:00
• 7d500d0a9d feat(activity): 写失败时带 expID,并对外键(23503)现场诊断 Autumn-27 2026-08-11 08:44:55 -04:00
• 61f5d18959 build: install telnet in runtime image Autumn-27 2026-08-10 11:21:47 -04:00
• 2ccf80d759 fix(mock): update DeepSeek base URL Autumn-27 2026-08-10 11:18:00 -04:00
• 6e623227a6 feat: delete traffic targets and LLM task conversations from UI FileShare Developer 2026-08-10 11:10:58 +08:00
• b76743c433 fix(scope): add_task_scope 支持 host:port 目标,入库前剥端口 Autumn-27andClaude Opus 4.8 2026-08-09 09:09:59 -04:00
• a632bb86d5 refactor(asset): delete_assets_by_host 改为平台工具(默认绑 Auto) Autumn-27andClaude Opus 4.8 2026-08-09 04:49:57 -04:00
• 88e536f30c feat(asset): 新增按 host 精确删除资产的工具 delete_assets_by_host Autumn-27andClaude Opus 4.8 2026-08-09 04:18:21 -04:00
• aef03762c3 fix(ui): 抽屉/对话框内 Select 等弹层不再误关抽屉 Autumn-27andClaude Opus 4.8 2026-08-09 03:17:49 -04:00
• 9cbcd57429 feat(task): 创建任务可选下发种子意图,worker 免等首轮规划直接开跑 Autumn-27andClaude Opus 4.8 2026-08-09 02:19:40 -04:00
• 0bebb4bf96 feat(trigger): 新增"任务创建"触发机制(on_task_create) Autumn-27andClaude Opus 4.8 2026-08-09 02:19:29 -04:00
• da6a466a4f feat(mock): 补全工具执行 / LLM 录制的 mock 数据 Autumn-27andClaude Opus 4.8 2026-08-09 01:33:23 -04:00
• c897869445 docs(readme): 增加资产覆盖图截图 Autumn-27andClaude Opus 4.8 2026-08-09 01:33:23 -04:00
• 1b5fedeb0c feat(mock): 补全新功能的 mock 数据(覆盖度/覆盖图/关联/工作空间) Autumn-27andClaude Opus 4.8 2026-08-09 01:23:59 -04:00
• 8c583c0ceb docs(readme): 新增系统技术架构章节 + Mermaid 架构图 Autumn-27andClaude Opus 4.8 2026-08-09 01:23:59 -04:00
• fd54f36be8 feat(workspace): 新增工作空间文件管理器(针对 workDir) Autumn-27andClaude Opus 4.8 2026-08-09 01:01:19 -04:00
• d709dd58a2 feat(agent): 按任务/意图预建 agent 工作目录，worker 免手动建目录 Autumn-27andClaude Opus 4.8 2026-08-09 00:40:31 -04:00
• ccde3454df feat(coverage): graph_overview 注入当前测试范围根资产(scope) Autumn-27andClaude Opus 4.8 2026-08-09 00:28:20 -04:00
• 6e37cb276f feat(coverage): 覆盖图节点用 lucide 图标 + 精简 label + 抽屉展示关联意图/事实 Autumn-27andClaude Opus 4.8 2026-08-09 00:28:19 -04:00
• 5731830b44 fix(worker): search_all_worker_traces 排除调用者自身的意图 trace Autumn-27andClaude Opus 4.8 2026-08-08 13:24:35 -04:00
• 65504adc1a refactor(coverage): 资产覆盖图改用 G6 真力导向布局 Autumn-27andClaude Opus 4.8 2026-08-08 13:14:49 -04:00
• b128818f25 fix(goals): URL/带子域目标登记为 subdomain，禁止缩成根域 Autumn-27andClaude Opus 4.8 2026-08-08 12:59:58 -04:00
• 8d3770c813 feat(worker): 派发意图时按 asset_ids 自动纳入任务测试范围 Autumn-27andClaude Opus 4.8 2026-08-08 12:59:58 -04:00
• 7d5df91582 feat(worker): 意图目标资产原始数据注入 + 覆盖度不再喂给 worker Autumn-27andClaude Opus 4.8 2026-08-08 12:40:26 -04:00
• 545fd535fa feat(goals): 目标设定 agent 提取并登记测试资产范围 Autumn-27andClaude Opus 4.8 2026-08-08 12:30:51 -04:00
• 51de16340a feat(coverage): 任务新增「资产覆盖图」力导向图 tab Autumn-27andClaude Opus 4.8 2026-08-08 12:30:41 -04:00
• e6ccaaf4b5 refactor(coverage): 覆盖度改按类型统计 + 新增 list_untested_assets 工具 Autumn-27andClaude Opus 5 2026-08-08 11:50:51 -04:00
• 0b16166f82 feat(coverage): 资产测试覆盖度（task_scope 范围 + fact 派生已测） Autumn-27andClaude Opus 5 2026-08-08 09:09:38 -04:00
• b179372bc8 chore(planner): 意图 summary 要求写测试目标完整地址 Autumn-27andClaude Opus 5 2026-08-08 07:54:17 -04:00
• 3e5b9a907f fix(asset): insert_assets 由程序权威赋 task_id + service/endpoint 补建 subdomain/root_domain Autumn-27andClaude Opus 5 2026-08-08 07:54:17 -04:00
• 67cc9d126d feat(assets): 资产页新增「应用」Tab + app 字段可搜 Autumn-27andClaude Opus 4.8 2026-08-08 06:19:11 -04:00
• 92041b9444 feat(agent): 触发后处理可配置(运行模式/合并模式/并发上限) + 修复抽屉内下拉误关 Autumn-27andClaude Opus 4.8 2026-08-08 04:23:09 -04:00
• 7bc0a00694 feat(agent): 触发器新增「工具调用」条件 + 定时触发改为复选框展开 Autumn-27andClaude Opus 4.8 2026-08-08 02:59:07 -04:00
• ebede294fd docs(tools): create_custom_tool 描述前置【重要】提示，引导安装平台外工具后登记 Autumn-27andClaude Opus 5 2026-08-07 12:21:12 -04:00
• c102043926 fix(ui): 表单弹窗溢出(#11) + LLM 配置弹窗点外部误关闭(#13) Autumn-27andClaude Opus 5 2026-08-07 12:20:15 -04:00
• 9edc458fd8 fix(chat): 修复会话刷新丢失最终答案(#3) + 反向分页/详情懒加载/会话URL持久化 Autumn-27andClaude Opus 5 2026-08-07 11:45:33 -04:00
• d86c75d6a9 feat(agent): 主 agent 默认工具集增加 report_finding/record_fact Autumn-27andClaude Opus 5 2026-08-07 10:04:21 -04:00
• 66a9fc4dee fix(web): 守卫跳转登录页前清除 cookie，修复 cookie 与 localStorage 不一致导致的无限重定向白屏 Autumn-27andClaude Opus 4.8 2026-08-07 09:43:30 -04:00
• 02781b2660 Merge: PR5 LLM 录制/工具执行 + session 修复/录制开关/模型列表回退 Autumn-27andClaude Opus 4.8 2026-08-07 09:35:06 -04:00
• ad9f14f140 feat: LLM 录制开关、模型列表第三方回退、命令页改为工具执行 Autumn-27andClaude Opus 4.8 2026-08-07 09:32:01 -04:00
• 10f891a21d fix(llmrec): 从 ctx 读取 session，修复 task/worker 列为空 Autumn-27andClaude Opus 4.8 2026-08-07 08:52:24 -04:00
• 464f1898b4 Update README.md Autumn 2026-08-07 10:20:56 +08:00
• 2ce2f8da79 add Cairn Autumn 2026-08-07 10:19:50 +08:00
• 5b58330f01 feat: 添加LLM模型清单、命令执行记录录制和LLM请求记录录制功能 lornlee 2026-07-30 15:14:46 +08:00
• 0f94849012 fix(docker): 用 NodeSource 装 Node 20（Playwright 要求 >=20） Autumn-27andClaude Opus 4.8 2026-07-28 12:11:04 -04:00
• 3f798ec74e chore(docker): 预装 Playwright MCP/CLI 及 chromium Autumn-27andClaude Opus 4.8 2026-07-28 11:52:53 -04:00
• abc551cc76 fix(worker): 写回计数按事实/资产/漏洞分开统计 Autumn-27andClaude Opus 4.8 2026-07-28 11:52:53 -04:00
• 2c3ca4b194 chore(skill): 更新 ScopeSentry skill 内容 Autumn-27andClaude Opus 4.8 2026-07-26 06:31:32 -04:00
• a1778e8990 fix(chat): 会话列表长标题溢出遮挡删除按钮 Autumn-27andClaude Opus 4.8 2026-07-26 06:30:03 -04:00
• 35648937e3 README 增加了 ScopeSentry 资产同步说明 Autumn-27andClaude Opus 4.8 2026-07-26 05:36:36 -04:00
• b284df2d93 docs(readme): 增加 ScopeSentry 资产同步说明 Autumn-27andClaude Opus 4.8 2026-07-26 05:34:46 -04:00
• 5dbede42b2 chore(web): 删除模板残留文档 Autumn-27andClaude Opus 4.8 2026-07-26 05:30:04 -04:00
• ee97991a5e docs: 重写 README（安装教程 + 12 张截图 + Demo 链接） Autumn-27andClaude Opus 4.8 2026-07-26 05:16:43 -04:00
• 0ef8561411 chore: ARTEX 初始化 Autumn-27andClaude Opus 4.8 2026-07-26 04:27:45 -04:00