CyberSecurityUPandClaude Opus 4.8 99d91101ac fix(models): force subscription login + add claude-opus-4-6 ...

Subscription runs were failing with "Invalid API key · Fix external API
key": the claude/codex subscription CLIs inherit the harness environment,
and a stray ANTHROPIC_API_KEY/OPENAI_API_KEY (e.g. a stale key saved in the
web console) made them switch to API-key billing and reject the request.
Strip those vars before spawning the CLI so the subscription login is always
used on the CLI path (API-key users go through the HTTP path, unaffected).

Also register claude-opus-4-6 in the anthropic model list — both the harness
allowlist (so it's no longer auto-corrected to claude-opus-4-8) and the web
console provider list.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-10-15 14:42:26 -03:00

..

agents_md/mobile

feat(mobile): binary/APK/IPA testing mode + 12 RE skills — v4.2.0

2026-09-20 21:08:14 -03:00

app

feat: CLI/REPL/web parity — /compliance, /budget, vuln-class focus from the web

2026-10-14 20:01:58 -03:00

crates/harness

fix(models): force subscription login + add claude-opus-4-6

2026-10-15 14:42:26 -03:00

templates

feat(mobile): binary/APK/IPA testing mode + 12 RE skills — v4.2.0

2026-09-20 21:08:14 -03:00

tools

feat(decision): pluggable System One backend — TypeSafe (hosted) or Laya (local)

2026-09-20 19:27:14 -03:00

.gitignore

chore: remove test artifacts, ignore scan debris (#35)

2026-07-31 15:39:00 -03:00

Cargo.lock

v4.3.0: web console parity + report redaction + per-finding wire evidence & re-test

2026-10-14 19:42:16 -03:00

Cargo.toml

v4.3.0: web console parity + report redaction + per-finding wire evidence & re-test

2026-10-14 19:42:16 -03:00

creds.example.yaml

docs: full creds.yaml reference (web/multi-role/ssh/windows/cloud) in TUTORIAL + example file

2026-07-02 08:44:00 -03:00