Skip to content

mq-mcp v1.7.0 — Risk analysis layer

Choose a tag to compare

@MCamner MCamner released this 29 May 01:18
· 128 commits to main since this release

What's new

  • Added CRITICAL severity level to the severity engine — placed above RISK; has_blocking_findings updated to include CRITICAL.
  • Added reviews/contracts/risk-review.md — defines the risk review mode covering approval gate gaps, undeclared side effects, contract staleness, and cross-repo boundary drift.
  • Added reviews/skills/security-review.md — file-type-aware security pattern guide injected into security and risk mode prompts.
  • Added _detect_security_patterns() — grep-based pre-scan for 11 Python and 3 shell dangerous patterns. No API call.
  • Added route_file_for_mode() — overrides skill selection to inject security-review.md for security and risk modes.
  • Added risk_review_file MCP tool (Class A) — targeted risk pass with declared mode (security, risk, architecture).
  • Added risk_review_diff MCP tool (Class A) — risk pass over all changed files in working tree or staging area.
  • Tool count: 73 → 75.