v0.7.1 — Execution Security & Deep Audit

v0.7.1 — Execution Security, Reliability & Deep Audit

PATCH CERTIFIED — Hardening of the v0.7.0 execution optimization layer.

🛡️ Deep Audit — 78 Adversarial Tests

Area	What was tested
Plan Consistency	plan() vs best() vs explain() produce identical results
Determinism	1,000 identical evaluations, score breakdowns, candidate ordering
Hard Constraints	needsVision, needsTools, maxCost, minContextWindow, excludeModels
Cost Security	Total cost estimates, maxFallbackCost, budget alignment
Retry/Fallback	Independent dimensions, bounded execution
Infinite Loop Defense	One model, empty registry, bounded fallback list
Fallback Safety	Respects vision, tools, cost, context constraints
Provider Failures	HTTP 400-503, network errors, timeouts
Streaming Safety	Failure before/after first chunk, maxRetries=0
Policy Isolation	Independent copies, per-request overrides
State Isolation	Separate clients, provider removal
Observability	Event ordering, requestId consistency, listener safety
Security	API keys not in errors/routing/execution plans
Prompt Injection	Malicious task strings handled safely
Plan Immutability	Mutating plan doesn't affect router
Backward Compat	Explicit provider+model still works

Finding

Circuit breaker state leaks between independent test runs — the global CircuitBreakerRegistry singleton accumulates failures across test cases. Tests now disable circuit breakers via policy when testing error paths. This is a test infrastructure concern, not a production bug.

500 Tests Passing

78 new audit tests added (422 → 500 total).

---

Changelog: https://github.com/Hilbras/Hilbras-ai-sdk/blob/main/CHANGELOG.md