RedDock v0.6.0 — Phase 5 Intelligence

RedDock Phase 5 — Intelligence

Phase 5 adds reviewable, evidence-grounded AI advice while preserving RedDock's local-first safety model and DockGuard's separation between evidence, findings, and operator actions.

Highlights

• Adds an optional OpenAI-compatible intelligence provider for local or cloud deployments.
• Keeps intelligence disabled by default and requires explicit environment configuration.
• Builds each request from the latest completed correlation snapshot and its retained evidence-linked findings.
• Shows the exact packet and SHA-256 digest before approval; approval is bound to the reviewed packet, provider, model, destination, locality, and prompt version.
• Stores hashed input, output, and execution metadata for provenance and later review.
• Returns structured advice and limitations only. Intelligence cannot execute tools, mutate RedDock findings, or create operator actions.

Security boundaries

• External or credentialed providers require verified HTTPS; unauthenticated HTTP is limited to loopback providers.
• Provider redirects are disabled.
• Absolute request deadlines and independent decoded-response, raw-wire, and read-iteration limits constrain provider responses.
• Strict schemas reject unexpected output and references outside the approved evidence packet.
• Atomic approval claiming prevents duplicate sends, and interrupted runs recover to a failed state.
• FastAPI, Starlette, and pytest dependencies were refreshed after audit review.

Validation

• 293 backend tests passed with Ruff clean.
• 23 frontend tests passed with lint, TypeScript checks, and production build clean.
• npm audit and pip-audit found no known dependency vulnerabilities.
• Docker build, health check, and Phase 0–5 smoke validation passed locally.
• Branch and tag GitHub CI passed frontend, backend, and container jobs.
• Two final security review passes were completed; the identified low-severity issues were fixed and independently verified.

The README, roadmap, changelog, security guidance, architecture documentation, and ADRs are updated for v0.6.0. RedDock's mixed-AI development approach documents contributions made with Claude Code and OpenAI Codex.