2026-10-21
0.6.11
4 sections, 17 pull requests
Changelog
Generated from the scanner changelog
0.6.11
Latest release
117
Releases listed
0.1.0
First release
Each card below names a release and links to its full entry, where the limits are stated.
Releases
117 releases
2026-10-19
0.6.10
3 sections, 31 pull requests
2026-10-15
0.6.9
5 sections, 11 pull requests
2026-10-12
0.6.8
6 sections, 17 pull requests
2026-10-07
0.6.7
4 sections, 8 pull requests
2026-10-06
0.6.6
6 sections, 23 pull requests
2026-10-02
0.6.5
5 sections, 12 pull requests
2026-09-29
0.6.4
6 sections, 10 pull requests
2026-09-28
0.6.3
3 sections, 2 pull requests
2026-09-27
0.6.2
8 sections, 23 pull requests
2026-09-26
0.6.0
8 sections, 63 pull requests
PENDING — open, not shipped, and not to be described as shipped
What this release claims about the proxy, and what it does not
2026-09-16
0.5.9
4 sections, 3 pull requests
2026-09-14
0.5.8
4 sections
2026-09-10
0.5.7
3 sections
2026-09-09
0.5.6
3 sections
2026-09-04
0.5.5
1 section
2026-09-04
0.5.4
1 section
2026-09-02
0.5.3
1 section
2026-09-01
0.5.2
1 section
2026-08-31
0.5.1
5 sections
2026-08-30
0.5.0
4 sections
2026-08-24
0.4.9
1 section
2026-08-23
0.4.8
0 sections
2026-08-22
0.4.7
0 sections
2026-08-21
0.4.6
0 sections
2026-08-20
0.4.5
0 sections
2026-08-18
0.4.4
0 sections
2026-08-18
0.4.3
1 section
2026-08-12
0.4.2
2 sections
2026-08-12
0.4.1
2 sections
2026-08-12
0.4.0
3 sections
When this code actually reached you
2026-08-09
0.3.15
1 section
Day 17 — the V3 drain completes: cached credentials are not fresh approval, and evidence is not consent
2026-08-08
0.3.14
1 section
Day 16 of the V3 drain — status output is not a signature: dry-runs, sync receipts, and auth introspection
2026-08-07
0.3.13
2 sections
Day 15 of the V3 drain — repository instruction files, template comments, and generated receipts
2026-08-06
0.3.12
2 sections
Day 14 of the V3 drain — sampling parameters, speculative decode, and the carriers that hide in plain sight
2026-08-05
0.3.11
2 sections
Day 13 of the V3 drain — attestation lineage, credential-endpoint substitution, and provenance decay
2026-08-02
0.3.10
2 sections
Day 12 of the V3 drain — compaction artifacts, memory-state replay, and semantic-cache authority laundering
2026-08-01
0.3.9
1 section
Day 11 of the V3 drain — A2A agent cards, protocol-state envelopes, and delegation-bridge laundering
2026-07-31
0.3.8
1 section
Day 10 of the V3 drain — phantom tool-result frames, browser accessibility metadata, and cache/transport evidence laundering
2026-07-29
0.3.7
1 section
Day 9 of the V3 drain — the non-tool MCP surfaces, cached credential grants, and forged verdict receipts
2026-07-28
0.3.6
1 section
Day 8 of the V3 drain — CI/CD and infrastructure tool output laundered into agent authority
2026-07-21
0.3.5
2 sections
"A prompt injection is still a prompt injection through a tool" — tool_output channel-coverage fix
Day 7 of the V3 drain — tool-output responses claiming prior approval
2026-07-17
0.3.4
1 section
"Structured tool-output is not authority" — Day 6 of the V3 drain
2026-07-16
0.3.3
2 sections
"Decision layer" release — corroborate, don't stamp
2026-07-16
0.3.2
2 sections
2026-07-12
0.3.1
2 sections
"Receipts" release — the mechanism layer + a reproducible benchmark
2026-07-11
0.3.0
2 sections, 3 pull requests
"Adoption" release — fewer, better patterns + a browser demo
2026-07-05
0.2.73
2 sections
2026-07-04
0.2.72
2 sections
2026-06-30
0.2.71
2 sections
2026-06-29
0.2.70
2 sections
2026-06-27
0.2.69
3 sections
Fixed (false positives — credibility)
2026-06-19
0.2.68
4 sections
Fixed (structured_metadata_poisoning detection — 16 patterns)
Fixed (false positives — credibility)
2026-06-15
0.2.67
1 section
Added (mcp_threat — MCP resource-template metadata injection)
2026-06-11
0.2.66
1 section
Added (discovery_file_poisoning expansion — agent config/discovery-file class)
2026-06-10
0.2.65
2 sections
Added (discovery_file_poisoning expansion)
2026-06-09
0.2.64
1 section
Fixed (engine reliability — false positives + scanner hang)
2026-06-07
0.2.63
2 sections
Added (V2 SHIP #9 — discovery_file_poisoning continued + repo_metadata_poisoning new category)
2026-06-06
0.2.62
2 sections
Added (V2 SHIP #8 — discovery_file_poisoning continued + FP credibility fix)
2026-06-06
0.2.61
1 section
Added (V2 SHIP #7 — discovery_file_poisoning)
2026-06-04
0.2.60
1 section
Added (V2 SHIP #6 — cicd_metadata_poisoning + supply_chain_attestation_poisoning)
2026-06-03
0.2.59
1 section
Added (V2 SHIP #5 — agent_instruction_file_poisoning + mcp_threat)
2026-06-02
0.2.58
1 section
Added (V2 SHIP #4 — build_metadata_poisoning + tool_output_poisoning)
2026-06-01
0.2.57
1 section
Added (V2 SHIP #3 — api_descriptor_poisoning + mcp_tool_injection)
2026-05-31
0.2.56
2 sections
Added (V2 SHIP #2 — identity_discovery_poisoning)
2026-05-31
0.2.55
2 sections
Added (V2 FIRST SHIP — structured_metadata_poisoning)
2026-05-30
0.2.54
1 section
Added (V1 tail roundup — V1 FINISH)
2026-05-29
0.2.53
1 section
Added (context_flooding tail-A patterns)
2026-05-27
0.2.52
3 sections
Added (agent_workflow_security continuation + dogfood-failure fixes)
Fixed (May 27 dogfood-failure incident — first real use surfaced 4 bugs)
2026-05-26
0.2.51
2 sections
Added (agent_workflow_security expansion — Cava research bundle chunk 7 + agentic runtime visibility blog)
2026-05-26
0.2.50
2 sections
Added (agent_workflow_security expansion — Cava research bundle chunk 6)
2026-05-25
0.2.49
2 sections
Added (agent_workflow_security expansion — Cava research bundle chunk 5)
2026-05-24
0.2.48
2 sections
Added (provenance_chain_fracture — new category)
2026-05-23
0.2.47
2 sections
Added (agent_workflow_security expansion — Cava research bundle chunk 4)
2026-05-22
0.2.46
2 sections
Added (agent_workflow_security expansion — Cava research bundle chunk 3)
2026-05-21
0.2.45
2 sections
Added (agent_workflow_security expansion — Cava research bundle chunk 2)
2026-05-20
0.2.44
2 sections
Added (agent_workflow_security expansion — Cava research bundle chunk 1)
2026-05-19
0.2.43
2 sections
Added (agent_workflow_security expansion — Cava research bundle chunk 8)
2026-05-17
0.2.42
2 sections
Added (cross_agent_injection + tool_output_poisoning expansion — Cava research bundle)
2026-05-16
0.2.41
2 sections
Added (tool_metadata_smuggling + tool_poisoning expansion — Cava research bundle)
2026-05-15
0.2.40
2 sections
Added (policy_scope_redefinition category expansion — Cava research bundle)
2026-05-15
0.2.39
4 sections
Added (Red-Team Gym hardening sweep — 3 cycles, 4 attack families closed to 0–1 misses)
Gym scoreboard (template adversary, 500 payloads/run)
2026-05-13
0.2.38
2 sections
2026-05-13
0.2.37
2 sections
2026-05-10
0.2.36
2 sections
2026-05-08
0.2.35
1 section
2026-05-07
0.2.34
1 section
2026-05-06
0.2.33
1 section
2026-05-04
0.2.32
1 section
2026-05-03
0.2.31
1 section
2026-05-02
0.2.30
1 section
2026-05-02
0.2.29
1 section
2026-05-01
0.2.28
3 sections
2026-04-30
0.2.27
1 section
2026-04-29
0.2.26
2 sections
2026-04-28
0.2.25
1 section
2026-04-27
0.2.24
1 section
2026-04-26
0.2.23
1 section
2026-04-25
0.2.22
3 sections
2026-04-24
0.2.21
4 sections
2026-04-22
0.2.20
3 sections
2026-04-21
0.2.19
3 sections
Maturity signals (unchanged from v0.2.18)
2026-04-20
0.2.18
4 sections
2026-04-19
0.2.17
4 sections
2026-04-18
0.2.16
2 sections
2026-04-17
0.2.15
2 sections
2026-04-16
0.2.14
1 section
2026-04-15
0.2.13
1 section
2026-04-13
0.2.12
1 section
2026-04-12
0.2.11
1 section
2026-04-11
0.2.10
1 section
2026-04-04
0.2.3
2 sections
2026-04-04
0.2.2
2 sections
2026-04-04
0.2.1
2 sections
2026-04-03
0.2.0
2 sections
2026-04-02
0.1.1
1 section
2026-04-01
0.1.0
2 sections