Darkmoon v1.1.0 — Authoritative reporting & adversarial qualification

Darkmoon v1.1.0

Highlights

Authoritative findings persistence & reporting

• The pentest engine now persists every finding to a server-side store the moment it is discovered (init → push → finalize), and the final Markdown report is generated from that store instead of being re-written from memory.
• Result: the report is complete and authoritative by construction — its finding count equals the number of findings actually discovered. No more vulns silently dropped from the report.

Adversarial status qualification (anti-false-positive)

• A lightweight, adversarial qualification step governs each finding's status (EXPLOITED / CONFIRMED / UNCONFIRMED) and severity by demonstrated impact, not mere observation.
• Bare HTTP 200s, differential-only responses, payloads echoed in JSON, files served-but-not-executed, and public-by-design secrets are qualified honestly — better qualification, never fewer findings.

Notes

• Applies across the orchestrator and all specialized sub-agents.
• conf/tui version: opencode-darkmoon-1.1.0.