v1.7.0

What's Changed

• docs(contributing): replace expired Discord invite by @Animesh-Sri-bugb in #113
• Record template completion and guard frozen reuse by @Animesh-Sri-bugb in #114
• Revert template completion receipt merge by @Animesh-Sri-bugb in #116
• feat(pentest): operator skills file and crush AI provider by @Shahid-BugB in #115
• fix: pin generated probe proof class to its hypothesis by @Animesh-Sri-bugb in #117
• fix: require observed controls for refutations and report skipped checks by @Animesh-Sri-bugb in #118
• pentest: built-in pollable OAST listener for egress-less targets by @Animesh-Sri-bugb in #119
• pentest: learn auth from the wire; fire concurrency as a single packet with a readback proof by @Animesh-Sri-bugb in #120
• pentest: gate cross-identity (IDOR) and auth_api promotion on engine-observed evidence by @Animesh-Sri-bugb in #123
• pentest: support web TLS, proxy, and client certificates by @Animesh-Sri-bugb in #124
• pentest: stage CSRF probes from a real cross-site origin and capture the form response by @Animesh-Sri-bugb in #125
• pentest: signed disposable-host scope grant + hardened brute-force proof by @Animesh-Sri-bugb in #126
• pentest: engine-owned proof oracles for the response-observable and in-band classes by @Animesh-Sri-bugb in #127
• Preserve binary raw responses and prove overlap by SHA-256 by @Animesh-Sri-bugb in #128
• fix: align generation prompts with engine proof contracts by @Animesh-Sri-bugb in #129
• feat(pentest): support multiple required template capabilities by @Animesh-Sri-bugb in #130
• feat: support scripted raw socket exchanges by @Animesh-Sri-bugb in #131
• Capture redacted HTTP archives and finding reproductions by @Animesh-Sri-bugb in #132
• feat: add cross-identity DOM driving and POST XSS probes by @Animesh-Sri-bugb in #133
• feat(pentest): add a boolean-blind SQL injection oracle by @Animesh-Sri-bugb in #135
• Stage SSRF redirects on the local OAST listener by @Animesh-Sri-bugb in #134
• feat: support named identities in pentest probes by @Animesh-Sri-bugb in #136
• Classify edge blocks and honor HTTP rate limits during pentests by @Animesh-Sri-bugb in #137
• Support scripted WebSocket exchanges and attacker-origin sockets by @Animesh-Sri-bugb in #138
• pentest: add user-enumeration, IP-header-bypass and business-logic vuln classes by @Animesh-Sri-bugb in #139
• Add mail, TOTP, and operator input primitives for auth probes by @Animesh-Sri-bugb in #140
• chore(release): v1.7.0 by @Animesh-Sri-bugb in #141

Full Changelog: v1.6.1...v1.7.0