Skip to content

RedDock v0.7.0 — Phase 6 Reporting

Choose a tag to compare

View all tags
@chriswayneh chriswayneh released this 05 Sep 06:32
· 28 commits to master since this release
v0.7.0
3a2e362

Phase 6 — Reporting

RedDock v0.7.0 adds deterministic, evidence-backed reporting without adding a new active security capability.

Highlights

  • Technical JSON and Markdown reports plus an executive Markdown summary
  • Complete SHA-256 evidence manifest linking findings, runs, and retained artifacts
  • Portable, byte-reproducible DockPack ZIP exports
  • Reporting workspace with immutable history, previews, manifest review, and download
  • Dockyard-scoped reporting API documented in Swagger/OpenAPI
  • Real reporting and Swagger screenshots in the project README

Security properties

  • Empty report request body: no target, URL, output path, command, prompt, model, or source selector
  • Database-referenced evidence only, with containment and hash re-verification
  • Bounded queries, evidence reads, archive membership, and total DockPack size
  • Atomic retained-state snapshot and restart cleanup of partial reports
  • Delimiter-safe literal Markdown rendering for untrusted retained strings
  • Deterministic member ordering, timestamps, modes, canonical JSON, and package hashes

Verification

  • 307 backend tests passed, 1 skipped
  • Ruff passed
  • Frontend lint, type-check, 26 tests, and production build passed
  • npm audit reported 0 known vulnerabilities
  • End-to-end Docker smoke test passed through Phase 6 and verified identical DockPacks for unchanged state
  • GitHub CI passed backend, frontend, container build, health, and smoke jobs

See the updated README, SECURITY.md, architecture guide, ADR 0011, and DockPack format documentation for details.

Assets 2
Loading