Skip to content

ARCHON v1.1.0 — Source Runtime redesign

Choose a tag to compare

View all tags
@ghostshift-content ghostshift-content released this 07 Jul 09:12
v1.1.0
94a7239

Static and white-box source review now runs as a few persistent, Claude-Code-style worker sessions instead of many short-lived spawns — closer to how a human reviewer works, and far easier on the rate limit.

Added

  • Source Runtime worker sessions — a planner sizes each run (session ladder by feature count, sharded by domain/risk, concurrency-capped); each worker maps many features in one long-lived context.
  • Rate-limit-aware execution that never stalls coverage — a rate limit becomes a typed, retryable deferred_rate_limit that pauses and resumes, no longer conflated with a permanent blocked coverage gap. Quota health feeds back into session sizing (warm → fewer, cooling → pause to one).
  • Honest mapping ledger — distinct counters for mapped / in-progress / queued / deferred / blocked / reviewed; progress reports real work done, not an accounted-for total that hid defers and blocks.
  • Source Runtime dashboard card — live per-worker progress, plan/session breakdown, deferred and blocked counts, and a White-Box Validation section (GET /api/source-runtime).

Changed

  • Explicit white-box source→runtime validation — a source candidate carries its live-validation target (affected endpoint + required black-box proof) to the board and the deferred pentest queue. A source-only finding stays SOURCE_CONFIRMED and is promoted to RUNTIME_CONFIRMED only with real captured runtime proof — never on a URL alone.

Full changelog: https://github.com/ghostshift-content/ARCHON/blob/main/CHANGELOG.md

Assets 2
Loading