Skip to content

v4.0.0 — Plugin Registry + REST API Server

Choose a tag to compare

View all tags
@M4NT M4NT released this 31 Jul 13:04
v4.0.0
09d02ee

hemlock-rag v4.0.0

Major release — hemlock transitions from a security lab to an extensible platform.

What's new in v4.0

  • Plugin registry (hemlock/plugin_registry.py) — discover community attacks and defenses via Python entry points (hemlock.attacks, hemlock.defenses). hemlock plugin list/info.
  • REST API server (hemlock/api_server.py) — FastAPI server exposing /health, /scan, /eval, /report. Run with hemlock serve. Optional dep: pip install hemlock-rag[api].

Full changelog since v3.0

Version Feature
v3.1 AttackMonitor — real-time LangChain callback injection detection
v3.2 Report templates — executive/technical Markdown + remediation_hints()
v3.3 SwarmAttack + SwarmDefense — multi-agent mesh, majority-vote consensus
v3.4 EvalBenchmark — 0–100 score per attack category, hemlock eval
v3.5 HemJudge + SelfHealingAdversary — LLM-as-Judge, iterative payload healing
v3.6 AttackChain — sequential multi-hop attack composition
v3.7 EvalComparison — multi-model benchmark side-by-side
v3.8 DefenseSynthesizer — auto-build defenses from a HemReport
v3.9 HemWatcher — continuous monitoring, webhook alerts
v4.0 Plugin registry + FastAPI REST server

Install

pip install hemlock-rag==4.0.0

# With REST API server
pip install "hemlock-rag[api]==4.0.0"

Quick start

# Unified threat assessment (no API keys)
hemlock threat-model

# Eval benchmark
hemlock eval

# Generate executive report
hemlock report --template executive

# Start REST API server
hemlock serve
Assets 2
Loading