Skip to content

v4.1.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 02 Sep 04:43
· 7 commits to main since this release
v4.1.0
9d07309
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

HydraSight 4.1.0 — OBSIDIAN

AI-assisted offensive-security orchestration for authorized lab environments — now a one-line install:

pip install hydrasight==4.1.0

Highlights

  • 🔐 Mandatory authorization attestation (authorize <cidr> → I AUTHORIZE, or a pre-signed hydrasight.authorization.json) enforced at the dispatch chokepoint alongside ROE — deny by default
  • 🧾 Tamper-evident audit trail — SHA-256 hash-chained JSONL of every proposed/allowed/blocked command, with AuditLogger.verify() and secret redaction
  • 📦 Real packaging: single-sourced version, sdist+wheel, Docker + docker-compose (Kali MCP backend), Makefile, MkDocs Material docs (--strict)
  • 🚀 Tokenless release pipeline: PyPI publish via OIDC trusted publishing (auto-created the hydrasight project) + this release, on v* tags — see RELEASING.md
  • 🧪 Quality gates: 797 tests, 75.75% branch coverage (CI floors at 75%), ruff, pylint 9.18, mypy strict contracts
  • ♻️ Architecture: post_access package refactor (shadowed legacy module removed pre-tag), core/hash_crack, reporting/outcome, narrowed exception boundaries

Verify (sha256)

5fe1e3bb0f027457a845700ac66c22191bda12fa476355dc32c6bfa08e6f1d51 hydrasight-4.1.0-py3-none-any.whl
6a96d48742e8224cf38584f5d1cc0f11d092ecc087a4602c9c01177cb086e079 hydrasight-4.1.0.tar.gz

What's Changed

  • #1 chore: fix CI gates, refactor dispatcher, harden post-exploit, sync docs
  • #2 Release 4.1.0: authorization gate, tamper-evident audit, packaging, docs, hardening
  • #3 Fix PyPI trusted publishing failure in release workflow

Full Changelog: v4.0.0...v4.1.0

Assets 4
Loading