v1.11.0

1.11.0 (2026-06-28)

Features

• arena: RPS-gated arena (token-bucket rate gate) + RPS recon as a campaign wave (42d2a5a)
• coordination: fold source IPs to /64 origins for ipv6 (8c511fd)
• detector: bh.action_cadence_deliberative — llm think-time tell (0897572)
• detector: bh.input_via_paste — programmatic form-input AI-agent tell (dd97933)
• detector: bh.scroll_teleport — programmatic scroll AI-agent tell (031963c)
• detector: convict no-js scrapers via ja4 tool-vs-ua coherence (eca5b9d)
• detector: is_abuse_listed IP reputation from Spamhaus DROP + IPsum (9ccb130)
• edge: DNS-free declared-crawler verification via deploy-refreshed CIDR feeds (3661696)
• edge: expand ja4 hint table from ja4db (public BSD-3 JA4→client data) (81f613d)
• evaders: camoufox executes the behavioral task DSL (a second, Playwright backend) (e7821d6)
• evaders: KS_REAL_INPUT — real OS-level (XTEST) pointer input beats the behavioral layer (0645d15)
• harness: add a managed real-evader fleet orchestrator (mixed images, retry, capture+grade) (a3a8799)
• harness: adversary archetype catalog — named personas the fleet emulates (209242e)
• harness: archetype validation harness — run each persona live, check it matches the catalog (dacf42b)
• harness: axis A — population/aggregate coordination (campaign detector) (150b6ea)
• harness: bake the red-team evasion ladder into the fleet manager (named evasions) (b8a6a11)
• harness: behavioral task scripts for fleet workers (DSL + CDP executor) (3670bef)
• harness: declarative engagement plans for the fleet manager (YAML/JSON + examples) (84fb79e)
• harness: distinct-builds lever + multi-cluster fragmentation reporting (730ad43)
• harness: multi-wave campaigns — an engagement as a sequence of fleet waves (302f984)
• harness: review-farmer archetype — the behavioral (trace_collision) binding (b770ec3)
• harness: RPS scoping — the recon RATE dimension (ramp + throttle-knee budget) (4c1176d)
• harness: structured engagement report — the red⇄blue finding a fleet run produces (1f0ff2a)
• harness: tool-ja4 corroborates a no-js coordination fleet (63d6583)
• harness: wire KS_REAL_INPUT into the fleet as the real-input evasion (efb55a8)