Skip to content

AI Shield v0.1.1 — Public Alpha

Choose a tag to compare

View all tags
@BetabotOC BetabotOC released this 10 Aug 18:06
· 3 commits to main since this release
v0.1.1
52eb471

AI Shield v0.1.1 — Public Alpha

AI Shield v0.1.1 strengthens the local, deterministic pre-flight scan for AI-built and downloaded software. It remains source-only: no official PyPI package is published with this release.

What changed

  • Hardened scanning of hostile repository inputs: bounded traversal, symlink and replacement-race defenses, explicit unreadable/invalid-file handling, bounded reports, and fail-closed behavior when coverage or rule execution is incomplete.
  • Added metadata-only preflight estimates and finite scan-budget controls, including safe higher-budget recommendations.
  • Added dependency-free Python-app heuristics for common high-risk execution, deserialization, configuration, route, and user-input patterns.
  • Improved evidence sanitization and version-correct report metadata.

Verification

The exact tagged commit passed:

  • 78 unit tests
  • GitHub CI on Python 3.11, 3.12, 3.13, and 3.14
  • Repository-boundary and CodeQL checks
  • Release-profile self-scan: NO CRITICAL RISKS FOUND, complete, zero findings
  • Clean wheel and source-distribution build
  • Fresh wheel-install smoke tests: clean fixture exit 0; deliberately risky Python fixture exit 2
  • Full-history Gitleaks scan: zero findings

Install from source

git clone --branch v0.1.1 https://github.com/BlockhouseSoftware/ai-shield.git
cd ai-shield
python3 -m aishield scan ./tests/fixtures/clean-project

Important limitations

AI Shield is an alpha deterministic scanner. It does not prove a project is safe, replace a full security audit, or detect every logic, dependency, obfuscation, generated-code, or runtime-only risk. Treat findings as evidence for review and DO NOT RUN as a stop-and-review signal.

Licensed under the GNU Affero General Public License v3.0 only (AGPL-3.0-only).

Assets 2
Loading