Skip to content

Release v1.0.0

Choose a tag to compare

View all tags
@ISO53 ISO53 released this 19 Sep 11:24
· 24 commits to main since this release
v1.0.0
a037faa
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

castiel - v1.0.0

This is the first stable release of castiel. After five tagged pre-releases (v0.0.0 → v0.7.6), the engagement workflow, the document model, and the tool-calling loop have hardened into something reliable enough to run real assessments against.

Highlights

  • AI operator with a full tool-calling loop - shell execution, managed background processes, file read/write/edit, workspace search, web search and fetch, and delegated sub-agents, guided by a system prompt covering phase confinement, noise discipline, and rules of engagement.
  • Human stays in charge - phase transitions happen only through the UI, scope boundaries are enforced from engagement.json, and the operator asks a structured question instead of guessing when it needs a decision.
  • Five-phase engagement model - planning, recon, scanning, exploitation, wrap-up. The operator works inside the active phase; you decide when to advance.
  • Structured engagement documents - findings live in plain JSON (network.json, web.json, vulnerabilities.json, evidence.json) with CVSS scoring, provenance stamps, evidence links, and user-owned note fields the operator never overwrites.
  • Live document views - an interactive network topology graph, a ports & services matrix, a web-app map with entry points and tech stack, a CVSS speedometer with a filterable findings table, and an evidence table with inline previews, image lightbox, and masked secrets. Views refresh the moment the operator writes to disk.
  • Workstation-style interface - streaming chat with reasoning traces and tool-call detail, a file tree toggling raw files and rendered views, live background-process and sub-agent docks, and an MCP panel with per-server enable/disable.
  • Model freedom - works with llama.cpp, Ollama, OpenRouter, and Cline. Reasoning effort adapts per model, chat history is compacted automatically, and malformed model output is repaired instead of crashing the turn.
  • Extensible via MCP - servers connect live from mcp.json without a restart and stand next to the built-in tools.

Changes since v0.7.6

  • Evidence: table view with artifact detail dialog, image/text preview, image lightbox, secret masking, and a simplified evidence document schema - @ISO53 in #19
  • Thinking: dynamic reasoning levels per model - @ISO53 in #18
  • Tasks: removed the tasks document and kanban board entirely - @ISO53 in #17
  • Tool call: handle truncated model output and malformed tool calls; reduced bash tool timeout defaults - @ISO53 in #16
  • CI: upgraded GitHub Actions to v5 - @ISO53 in #15

Full Changelog: v0.7.6...v1.0.0

Contributors

ISO53
Assets 6
Loading