Commit Graph
2363 Commits
Author SHA1 Message Date
Sycun 8149201ef2 fix: carry canonical user ledger through native model-input merging 2026-10-12 18:08:59 +08:00
Sycun b642fc7c83 fix: preserve compaction provenance through resume and harden memory retrieval
Carry allowlisted summary origin and host user ledger across the trace recovery boundary. Keep immutable snapshot links after alias failures, scope legacy padded keys, remove stale indexes under small budgets, reuse retrieval clues for labels, and add cross-platform memory CI.
2026-10-12 17:56:43 +08:00
Sycun c96c4666a9 fix: check HITL reviewer field in canonical database schema 2026-10-12 14:06:29 +08:00
Sycun 2c311a6ab1 fix: harden checkpoint provenance, scope and atomic binding 2026-10-12 10:49:23 +08:00
Sycun 015e16457e fix: label generated context provenance in transcript evidence 2026-10-12 10:14:25 +08:00
Sycun 60d76be064 fix: exclude generated summaries from original user intent 2026-10-12 10:10:52 +08:00
Sycun 6b8bbbe91b feat: scope automatic working memory to the current conversation 2026-10-12 09:59:15 +08:00
Sycun 1d2e900e88 feat: simplify snapshot retrieval and add readable timestamps 2026-10-12 00:33:17 +08:00
Sycun e073709e8f fix: preserve evidence across truncated indexes and failed writes 2026-10-11 23:58:07 +08:00
Sycun 68c01d3429 feat: index compaction evidence for targeted context recovery 2026-10-11 23:43:07 +08:00
Sycun 616726d452 feat: persist compaction checkpoints in the project blackboard 2026-10-11 23:08:54 +08:00
Ed1s0nZ deda642bd6 docs: document SQLite startup repair release readiness 2026-10-10 20:46:29 +08:00
Ed1s0nZ f2f4416af2 docs: record SQLite reconciliation verification 2026-10-10 20:45:59 +08:00
Ed1s0nZ 7f8dab4ec9 feat: reconcile SQLite tables and columns at startup 2026-10-10 20:45:39 +08:00
Ed1s0nZ 8cc575b6ae docs: plan SQLite startup reconciliation implementation 2026-10-10 20:37:28 +08:00
Ed1s0nZ 1d73bb944d docs: design SQLite schema reconciliation 2026-10-10 20:37:12 +08:00
Ed1s0nZ ceaf63afc5 docs: confirm startup schema reconciliation requirements 2026-10-10 20:36:49 +08:00
Ed1s0nZ a7b3bec3ee docs: record startup schema reconciliation intake 2026-10-10 20:32:11 +08:00
Ed1s0nZ 78d8862979 docs: record verified main integration of REST semantics fix 2026-10-10 18:43:37 +08:00
Ed1s0nZ 3da1d22b76 docs: add REST semantics fix release record 2026-10-10 18:03:12 +08:00
Ed1s0nZ b1124fbe1e docs: record REST semantics verification and API contract 2026-10-10 18:02:52 +08:00
Ed1s0nZ 9f111a1389 fix: normalize missing deletes and empty REST lists 2026-10-10 18:02:02 +08:00
Ed1s0nZ f201397796 docs: plan REST contract regression coverage 2026-10-10 18:00:02 +08:00
Ed1s0nZ c629b08b0d docs: define REST response semantics 2026-10-10 17:59:52 +08:00
Ed1s0nZ b2b76b7193 docs: confirm REST error and empty-list requirements 2026-10-10 17:59:32 +08:00
Ed1s0nZ 35955e4740 docs: record REST semantics fix intake 2026-10-10 17:59:13 +08:00
Ed1s0nZ 68df7c1aff docs: record PR 351 review and merge to main 2026-10-10 17:35:53 +08:00
公明 2335f1b639 Merge pull request #351 from AIPentest/codex/tool-guard-conflict-detection
fix: detect concurrent interception rule edits
2026-10-10 17:34:51 +08:00
Ed1s0nZ 5d44b59c2f docs: link interception conflict fix pull request 2026-10-10 17:19:54 +08:00
Ed1s0nZ 8477bfcc74 docs: finalize interception conflict fix review record 2026-10-10 17:19:28 +08:00
Ed1s0nZ 7302c3d822 docs: record interception conflict fix verification 2026-10-10 17:18:51 +08:00
Ed1s0nZ 1ecbd4054c fix: reject stale concurrent interception rule saves 2026-10-10 17:18:13 +08:00
Ed1s0nZ 4a1d0e114e docs: plan interception conflict fix validation 2026-10-10 17:15:05 +08:00
Ed1s0nZ 23034ffa45 docs: design interception optimistic concurrency contract 2026-10-10 17:14:48 +08:00
Ed1s0nZ 7e6feeb96b docs: record authorized conflict protection requirements 2026-10-10 17:14:29 +08:00
Ed1s0nZ 65f947c9df docs: record interception conflict fix intake 2026-10-10 17:14:13 +08:00
Ed1s0nZ a8321c4bff fix(vulnerability): allow standalone manual findings and validate links 2026-10-10 16:03:42 +08:00
Ed1s0nZ 088d6da3c1 fix(rbac): revoke only affected role sessions 2026-10-10 15:42:42 +08:00
Ed1s0nZ 9e7eb2db5f docs: record Russian layout fix merge to main 2026-10-10 13:45:10 +08:00
Ed1s0nZ ab04c86459 docs: add Russian layout fix release record 2026-10-10 13:41:29 +08:00
Ed1s0nZ 6626a820d4 docs: record multilingual layout verification 2026-10-10 13:41:27 +08:00
Ed1s0nZ 132babe3a9 fix: prevent long localized dashboard labels from overflowing 2026-10-10 13:41:00 +08:00
Ed1s0nZ f6f93a1b9f docs: plan Russian overflow fix and visual checks 2026-10-10 13:37:07 +08:00
Ed1s0nZ 3889de4693 docs: design content-aware dashboard layout 2026-10-10 13:37:05 +08:00
Ed1s0nZ c356e51418 docs: define layout overflow acceptance criteria 2026-10-10 13:36:45 +08:00
Ed1s0nZ e82ee59fbb docs: record Russian layout fix intake 2026-10-10 13:36:31 +08:00
公明 8ce6281396 Update config.example.yaml v1.7.23 2026-10-10 09:45:18 +08:00
公明 e77606b58d Merge pull request #348 from Sycun/feat/vulnerability-retest
feat: add vulnerability retest branches with an isolated evidence log
2026-10-10 09:41:35 +08:00
Sycun 6a67364947 feat: add vulnerability retest branches with an isolated evidence log
Retesting a finding creates an independent conversation branch that
snapshots the source history and model trace, so verification can run
multi-turn without writing to the original session.

- POST /api/vulnerabilities/:id/retest creates the branch and persists the
  prompt, so a lost response, navigation or refresh can resume it
- new update_vulnerability_status tool closes the loop; a retest branch may
  only read and update its own finding
- {{vulnerability_id}}, {{conversation_id}} and {{source_conversation_id}}
  resolve on send, in the first turn and in follow-ups
- evidence appends to a read-only vulnerabilities.retest_log column instead
  of retest_notes: that field is operator-authored and the edit form
  rewrites it wholesale, so a routine edit used to erase the retest trail
- the retest prompt is prefilled with the operator's retest_notes, which
  already states how to verify the fix
- copied messages are re-bound as time.Time. Scanning a DATETIME column into
  a string yields RFC3339Nano while AddMessage writes the driver's
  space-separated format, and messages sort on the raw created_at text, so a
  branch rendered its new turn above the inherited history
2026-10-10 07:21:20 +08:00
公明 a3edab47f9 Merge pull request #347 from AIPentest/codex/self-update-recovery-fixes
fix: preserve stopped MCPs and reject ambiguous update recovery
2026-10-09 14:23:05 +08:00