All pull requests

Pull requests

• fix: report unreadable and non-UTF-8 input files as validation errors

  #199·drk-ram opened Oct 31, 2026·8 tasks done·

  ·
  1

• fix(trace): reject traces with no recognized fields or misspelled field names

  #198·drk-ram opened Oct 31, 2026·8 tasks done·

  ·
  1

• feat(assertions): implement no_secret_disclosure assertion

  #194·drk-ram opened Oct 31, 2026·8 tasks done·

  ·
  1

• fix(adapters): preserve OpenAI Agents events and harden LangChain/LangGraph extraction

  #193·drk-ram opened Oct 28, 2026·

  ·
  1

• feat(cli): add --junit-out and --sarif-out support to suite runner

  #191·drk-ram opened Oct 28, 2026·

  ·
  1

• feat(mcp): add read_resource and get_prompt lifecycle methods to MCPHostContext

  #189·drk-ram opened Oct 28, 2026·

  ·

• feat(assertions): add opt-in bounded encoding ladder to memory_isolation

  #188·drk-ram opened Oct 28, 2026·

  ·

• fix(mcp): enforce registered server metadata precedence and harden host evidence guards

  #185·drk-ram opened Oct 28, 2026·8 tasks done·

  ·
  1

• fix(adapters): restrict run_http_target to http/https URLs and wrap read/decode errors

  #184·drk-ram opened Oct 28, 2026·8 tasks done·

  ·
  1

• feat(assertions): add scope_attenuation and commit_point_approval assertions

  #181·drk-ram opened Oct 28, 2026·8 tasks done·

  ·
  2

• Add two Chinese prompt-injection scenarios (retrieved-doc poisoning, authority pretext)

  #178·Croesus-K opened Oct 1, 2026·

  ·

• Add six MCP abuse-case scenarios with passing and failing traces

  #177·astrogilda opened Sep 16, 2026·8 of 10 tasks·

  ·
  1

• fix(assertions): detect nested/non-standard recipient keys in no_exte…

  #176·rivalsxninjax1 opened Sep 13, 2026·9 of 10 tasks·

  ·
  1

  8

• fix(assertions): approval_required accepted approvals a target could fabricate

  #175·avp9-nexus opened Sep 1, 2026·9 of 10 tasks·

  ·
  2

• feat: add stateful forbidden_state_not_reached assertion

  #174·abhinav-phi opened Aug 30, 2026·

  ·
  1

  9

• test: discover nested and yml scenarios in parity tests

  #172·juliosuas opened Aug 26, 2026Contributor·

  ·
  1

• test: discover bundled scenarios against the loader's contract

  #170·avp9-nexus opened Aug 13, 2026·8 of 10 tasks·

  ·
  1

  3

• Add expected-fail scenarios for recipient-allowlist shape evasion (no_external_recipient, #167)

  #168·ossumpossum opened Aug 9, 2026·

  ·

• fix: enforce recipient allowlists for lists and cc/bcc

  #165·rksharma-owg opened Jul 27, 2026·

  ·
  6

• feat: add Streamable HTTP transport to MCP host

  #164·Flames4fun opened Jul 27, 2026Contributor·9 of 10 tasks·

  ·
  1

  2