Skip to content

Feature/externalize signatures#2

Merged
jaschadub merged 4 commits intomainfrom
feature/externalize-signatures
Mar 10, 2026
Merged

Feature/externalize signatures#2
jaschadub merged 4 commits intomainfrom
feature/externalize-signatures

Conversation

@jaschadub
Copy link
Copy Markdown
Contributor

No description provided.

symbibot added 4 commits March 9, 2026 21:08
- Move all signature data (LLM domains, agent infra domains, domain
  suffixes, frameworks, ports, TLS fingerprints, MCP methods) from
  hardcoded Python lists in config.py to JSON files in signatures/
- Add SchemaPin signature verification on load — warns if any .sig
  file fails ECDSA P-256 verification (tamper detection)
- Add 'agentsniff update-signatures' CLI command to pull latest
  signatures from GitHub with optional verification
- Show signature status in CLI banner (warning on invalid, green
  checkmark on verified)
- Add signature status to /api/health endpoint and dashboard header
  badge (red warning on invalid, green on verified)
- Config module now loads from JSON singleton, re-exports same names
  for full backwards compatibility with all detectors
Use canonicalize_schema, hash_canonical, verify_schema_signature
to match schemapin 1.3.0 API.
Ensures users can add their own agent infrastructure domains via
YAML config, env vars, or CLI alongside the built-in list.
SSE agent_detected events for the same IP were appended as new rows
instead of updating the existing row. Now deduplicates by ip_address.
@jaschadub jaschadub merged commit 4f45ea5 into main Mar 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants