All pull requests

Pull requests

• Require wildcard audit coverage

  #133·rocketpandasix opened Nov 5, 2026·

  ·

• docs: require recon deployment controls to become ledger units

  #132·ShivamJuyal24 opened Nov 4, 2026·

  ·

• fix: make the validators read input on Windows without the lstat/open race

  #131·divyesh01 opened Nov 3, 2026·

  ·
  1

• Fail closed when the audit environment is not actually isolated

  #129·ChoYugyeong opened Nov 1, 2026·

  ·
  1

• fix: match ordinary coverage classes to hunter assignments

  #127·maqalaqil opened Oct 31, 2026·

  ·
  1

• docs: preserve source-backed reasons in coverage critic handoffs

  #125·maqalaqil opened Oct 31, 2026·

  ·
  1

• Enforce one validator CLI contract and support --target

  #123·panditbhavik15 opened Oct 31, 2026·

  ·
  1

• docs: link domain companions directly from SKILL.md

  #121·iqbalmaulana03 opened Oct 29, 2026·

  ·
  1

• Add plugin.json so the repo loads as an Agent Plugin

  #120·srid opened Oct 28, 2026·

  ·

• docs: add Android-specific security audit companion

  #116·sandeep84397 opened Oct 27, 2026·

  ·

• fix: keep validators usable where O_NOFOLLOW is unavailable (Windows)

  #113·PhucNguyen-Dev opened Oct 26, 2026·

  ·
  1

• Enforce the 1,000-field object limit in validate-findings.cjs

  #111·MohitRawat017 opened Oct 25, 2026·

  ·
  1

• Move fix design out of discovery into a separate remediation step

  #109·itinance opened Oct 25, 2026·

  ·

• Treat target content as untrusted data in every agent prompt

  #108·itinance opened Oct 25, 2026·

  ·

• fix: allow artifact sharing within an attempt

  #106·Dinesh-design786 opened Oct 25, 2026·

  ·
  1

• Fix typo in README

  #105·Ted9178 opened Oct 25, 2026·

  ·

• fix: reject a coverage unit that excludes its own ordinary attack-class block

  #104·rudycelekli opened Oct 25, 2026·

  ·

• fix: reject duplicate object keys in coverage-ledger.json

  #103·rudycelekli opened Oct 25, 2026·

  ·

• fix: reject duplicate object keys in findings.json

  #102·rudycelekli opened Oct 25, 2026·

  ·
  3

• Add cryptography and key-management hunting companion guide

  #101·spidervirus opened Oct 24, 2026·

  ·
  1

• fix: support platforms without O_NOFOLLOW/O_NONBLOCK

  #99·SatriaBagusNurhadianto opened Oct 24, 2026·

  ·

• Ground-truth claimed finding paths with --target

  #97·LieBieS opened Oct 23, 2026·1 task done·

  ·

• Harden the audit workflow against target-influenced results

  #96·LieBieS opened Oct 23, 2026·2 tasks done·

  ·

• Derive run paths and prior-run identity from a sanitized repo ID, not the raw repo name

  #95·bodapatisaikrishna opened Oct 23, 2026·

  ·
  1

• Add abort-path cleanup and cross-request stale state classes

  #93·kelmia-stack opened Oct 22, 2026·

  ·