Skip to content

SecureFlow v0.1.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 23 Aug 21:30
· 12 commits to main since this release
v0.1.0
070ea25

SecureFlow v0.1.0 is the first public local-first research and engineering release for authorized security analysis. It keeps deterministic evidence, contextual review, benchmark results, AI assistance, and human validation as separate, auditable layers.

Included

  • A nine-package Rust workspace with strict versioned JSON contracts.
  • An authorization-gated Secure Engine process adapter with fail-closed Linux sandboxing, bounded execution, and SHA-256 provenance.
  • Human-only finding adjudication, Markdown reporting, and an append-only reviewed-finding ledger.
  • A local SQLite/FTS5 advisory catalog with exact alias reconciliation, snapshots, incremental deltas, quarantine, backup/restore, and conservative package correlation.
  • Offline SecureFlow Web inventory for Next.js, OpenAPI, manifests, GraphQL, and tRPC, with JSON/SARIF output and a 24-case development corpus.
  • Separate Secure Skill and Secure Bench adapters, prospective-study contracts, and redacted offline Luna request preparation.

Verification

  • Rust and Cargo 1.92.0.
  • 138 automated tests passed.
  • 167 locked Rust dependencies audited against 1,225 RustSec advisories with no reported vulnerabilities at release time.
  • Deterministic CycloneDX SBOM included in the bundle.
  • Downloadable archive checksum and per-file SHA256SUMS included and verified by the release workflow.

Important boundaries

Findings remain candidates until a human validates reproducible evidence. This release does not claim production readiness, general vulnerability-detection effectiveness, superiority over humans or other tools, or a global vulnerability database. Remote recon and provider transport for AI remain disabled. The annotated v0.1.0 tag is intentionally documented as unsigned.

See the changelog, evidence and claim boundaries, and completion audit.

Full changelog: https://github.com/danielcadev/secureflow/commits/v0.1.0

Assets 4
Loading