Outrider Python 0.3.0

Outrider Python 0.3.0 release notes

Release date: 2026-07-14

Future tag name: python-v0.3.0

Python 0.3.0 is the next Python package release candidate for the completed
local web-control-plane phase. It is not a publication notice; maintainers still
publish tags, GitHub releases, and package artifacts separately.

Highlights

• Guarded workflow-state transitions through the loopback-only web plane.
• Atomic web run creation with safe server-derived run directories.
• Initialized-only scope replacement, scope checks, and scope-control history.
• Approval grants, revocation, and exact action-policy checks.
• Bounded artifact metadata inventory, registration of existing artifacts as
  evidence, and point-in-time evidence verification.
• Skill-request creation and request/result contract validation without skill
  execution or result upload.
• Explicit human-reviewed finding promotion and finding verification.
• Fixed five-tool MCP catalog, network-free preflight, and explicitly enabled
  transient invocation through the shared policy-gated enrichment module.
• CI split between base Python tests, Python 3.12 web-control tests, and
  release-readiness package validation.

Optional dependency structure

Base installs remain minimal and require PyYAML only. Optional extras are:

python -m pip install outrider_recon-0.3.0-py3-none-any.whl
python -m pip install 'outrider_recon-0.3.0-py3-none-any.whl[web]'
python -m pip install 'outrider_recon-0.3.0-py3-none-any.whl[enrichment]'
python -m pip install 'outrider_recon-0.3.0-py3-none-any.whl[mcp]'
python -m pip install 'outrider_recon-0.3.0-py3-none-any.whl[web,enrichment,mcp]'

The web extra installs FastAPI, Uvicorn, and HTTPX. Enrichment installs HTTPX.
MCP installs the MCP framework and HTTPX. DNS library support remains optional;
the enrichment code keeps the socket fallback.

Limitations

The web plane is loopback-only, single-operator, and unauthenticated. The control
token is a local mutation guard, not identity. The release does not add remote
hosting, reverse-proxy deployment, multiuser operation, background jobs, queues,
cancellation, recon orchestration, skill execution, automatic artifact capture,
automatic evidence registration, automatic contract creation, automatic finding
promotion, reports, exports, arbitrary MCP servers, or arbitrary provider
endpoints.

Artifacts

Expected unsigned candidate artifacts:

• outrider_recon-0.3.0-py3-none-any.whl
• outrider_recon-0.3.0.tar.gz
• SHA256SUMS

Checksum verification:

grep -E 'outrider_recon-0.3.0-py3-none-any.whl|outrider_recon-0.3.0.tar.gz' SHA256SUMS | sha256sum -c -

Upgrade from 0.2.0

Install the 0.3.0 wheel or sdist in a clean environment and choose only the
extras required for the intended adapter. Existing run schemas remain version 1,
and historical 0.2.0 read-only review-plane artifacts remain readable.

Outrider Claude Plugin/Content 3.1.0

Outrider Claude plugin/content 3.1.0 release notes

Release date: 2026-07-14

Future tag name: plugin-v3.1.0

Plugin/content 3.1.0 is the next installable content bundle candidate. It is not
a publication notice; maintainers still publish tags and release assets
separately. Python 0.3.0 is a separate version domain included in the bundle.

Highlights

• Bundle metadata is updated to plugin/content version 3.1.0.
• The bundle includes Python 0.3.0 package sources and packaged static web UI
  resources for the completed local control plane.
• The shared MCP companion server and documentation are updated for the fixed
  five-tool policy-gated enrichment catalog.
• Plugin metadata now describes deterministic Python controls, the optional
  loopback-only limited-control web plane, human-reviewed finding promotion, and
  optional fixed MCP enrichment without claiming autonomous recon orchestration.
• The 11-skill catalog is unchanged.
• Individual skill frontmatter versions are unchanged.
• Capability count remains 90 documented capabilities.
• Manifest, runtime, evidence, approval, skill-request, skill-result, and finding
  schema versions remain version 1.

Bundle artifact

Expected unsigned candidate artifact:

• outrider-recon-bundle-3.1.0.zip
• SHA256SUMS

Checksum verification:

grep 'outrider-recon-bundle-3.1.0.zip' SHA256SUMS | sha256sum -c -

Upgrade from 3.0.1

Install or unpack the 3.1.0 bundle over the previous plugin/content bundle using
the repository installation instructions. Do not create the future
plugin-v3.1.0 tag until maintainers intentionally publish the release.

Outrider Python 0.2.0

Python 0.2.0 release notes

Python 0.2.0 is a minor pre-1.0 release candidate for the Outrider Python control plane. It adds substantial backward-compatible functionality without claiming API stability beyond pre-1.0 expectations.

Major features

• Deterministic scope validation and default-deny scope decisions.
• Durable run identity, manifests, and workflow state.
• Evidence registration and integrity verification.
• Approval records and action-policy decisions.
• MCP guard integration for source-checkout companion services.
• Structured skill request/result contracts.
• Deterministic finding promotion.
• Optional local loopback-only web review.
• Packaged skill catalog, schemas, and web resources.
• Clean-install and release-readiness tooling.

Security and control boundaries

Python remains authoritative for deterministic scope, state, evidence, approval, action-policy, contract, and finding promotion checks. Denied MCP requests must not perform live network or DNS activity.

Installation from local artifacts

Base install from a downloaded wheel:

python -m pip install outrider_recon-0.2.0-py3-none-any.whl

Optional web review dependencies from a downloaded wheel:

python -m pip install "outrider_recon-0.2.0-py3-none-any.whl[web]"

This release note does not claim that outrider-recon==0.2.0 has been published to PyPI.

MCP companion limitation

The MCP server remains an optional source-checkout companion. It is not required for the base wheel and is not advertised as an installed console script in this candidate.

Supported Python versions

The project CI covers Python 3.10, 3.11, and 3.12.

Upgrade notes from 0.1.0

Upgrade local wheel installs by replacing the installed 0.1.0 wheel with the 0.2.0 candidate. Existing deterministic run-folder schemas remain version 1.

Compatibility notes

• Plugin/content version 3.0.1 is a separate domain.
• Individual skill versions remain unchanged.
• JSON schema versions remain at 1.

Known limitations

• Release publication, Git tags, and GitHub release records are manual maintainer actions.
• Web review is loopback-only and unauthenticated; bind it only to trusted local interfaces.
• MCP enrichment remains optional and source-checkout based.

Verification commands

outrider --version
python -m outrider --version
python tools/release_audit.py
python -m twine check dist/*
sha256sum -c dist/SHA256SUMS

Artifact names

• outrider_recon-0.2.0-py3-none-any.whl
• outrider_recon-0.2.0.tar.gz
• SHA256SUMS

Checksum verification

Place the artifacts and SHA256SUMS in the same directory, then run:

sha256sum -c SHA256SUMS

Outrider Claude Plugin/Content 3.0.1

Claude plugin/content 3.0.1 release notes

Claude plugin/content 3.0.1 is a patch release candidate for the existing 3.0 methodology and capability set. It corrects metadata and documentation boundaries without changing individual skill methodology.

Scope of the patch

• Plugin metadata reports 3.0.1.
• The bundle documents 11 shipped skills; skills/_shared is shared guidance and is not counted as a twelfth skill.
• The existing capability count is unchanged.
• Individual skill frontmatter versions did not change.
• Python 0.2.0 is a separate version domain.

Structured-run guidance

Skills continue to use shared structured-run contract guidance. Discovery signals do not expand scope, and skills may produce finding_candidate records but must not claim Python-validated findings.

Deterministic-control relationship

The Claude plugin/content describes methodology. The Python control plane remains authoritative for deterministic scope, state, evidence, approval, MCP guard, contract, and finding checks.

Optional MCP relationship

MCP enrichment remains optional and guarded. It must honor Python policy decisions and does not expand scope.

Local web relationship

The optional local web plane is read-only, loopback-oriented review UI for local run data. It does not mutate runs or publish artifacts.

Installation and update

Use the plugin/content bundle artifact:

• outrider-recon-bundle-3.0.1.zip

Extract it into a review directory, inspect RELEASE-MANIFEST.json, and follow the repository installation guide. Do not treat the unsigned candidate as an official release until maintainers create the appropriate tags and release records.

Known limitations

• Candidate artifacts are unsigned.
• No Git tag, GitHub release, PyPI upload, or plugin publication is performed by this preparation PR.
• MCP remains a source-checkout companion.

Checksum verification

sha256sum -c SHA256SUMS

v3.0 — Claude Code Plugin + One-Click Install + Full Coverage

Highlights

outrider-recon is now a Claude Code plugin. Install with one command:

curl -fsSL https://raw.githubusercontent.com/Ap6pack/outrider-recon/main/install.sh | bash

Or test locally:

claude --plugin-dir ./outrider-recon

What's new in v3.0

Plugin & Distribution

• Claude Code plugin manifest (.claude-plugin/plugin.json) — passes claude plugin validate clean
• One-click install script (install.sh) and uninstall script
• Optional MCP server with 5 live API tools: crt.sh lookup, HudsonRock Cavalier, EPSS scoring, Wayback CDX, DNS records

All 10 practitioner-identified coverage gaps closed

• Tool-chaining recipes — Recon-ng, SpiderFoot, Maltego module walkthroughs + bash-native multi-tool pipelines
• OPSEC infrastructure as code — Terraform VPS provisioning, SOCKS proxy stacks, HTTP redirectors, Axiom fleet, Ansible playbooks
• Adversary-emulation playbooks — APT29, APT28, FIN7, Lazarus external recon mapped to outrider-recon skills
• Sector-specific deep dives expanded — HL7/FHIR endpoints, FIX protocol, ICS Shodan dorks, SAM.gov, firmware extraction
• Report customization guide — template variables, pandoc delivery commands, per-client config
• Tool failure recovery — fallback chains for every recon tool category

Also in this release (v2.3 + v2.4 work)

• 30 cross-reference and count fixes from the v2.3 restructuring
• 8 new content implementations (BIMI/MTA-STS, scoring rubric, AI-assisted OSINT, evidence preservation, etc.)
• Continuous monitoring playbook, multi-tenant workflow, Burp/ZAP setup recipes
• 43/43 smoke tests passing (Grade A)

By the numbers

Metric	Value
Skills	11
Capabilities	90
Secret patterns	48
Dork corpus	70
Validators	9
Attack-path templates	35
Smoke tests	43/43 PASS
Coverage (OSINT phase)	~95-98%

Install

See the Quick Start for all install methods.

License

MIT