v0.3.0 — Enterprise Vulnerability Intelligence

AEGIS-Recon v0.3.0 — Enterprise Vulnerability Intelligence

🚀 Key Highlights & New Capabilities:

• Enterprise Cyber SOC Dashboard:

  • Live metric ticker: SQLite WAL engine status, threat feed sync (NIST NVD 2.0, CISA KEV, FIRST EPSS).
  • Target Fleet Matrix for heterogeneous benchmark evaluation (Metasploitable 2, Metasploitable 3 Windows, Metasploitable 3 Linux, Kioptrix Level 1).
  • CVSS v3.1 donut severity distribution and 4-tier evidence provenance bar chart.

• Evidence Provenance & Cryptographic Invariants:

  • 4-Tier evidence classification: OBSERVED → EXTERNAL_INTEL → HYPOTHESIS → RECOMMENDATION.
  • Every finding evidence artifact carries an immutable SHA-256 hash for forensic traceability.
  • In-page glassmorphism evidence modal replacing browser alert dialogues.

• Structured AI Threat Intelligence:

  • Categorized executive risk summaries and weaponization cards.
  • Priority-coded mitigation action cards (URGENT KEV, CRITICAL, HIGH, VERIFY, DEFENSE).
  • Air-gapped deterministic ground-truth fallback guaranteeing zero hallucination.

• Hardened Subprocess Execution & Scope Protection:

  • Strict subprocess.run(shell=False) with argument arrays (zero command injection risk).
  • CIDR subnet support (/24 to /16) and hostname allowlisting via config/allowlist.yaml.

• Quality & CI/CD Verification:

  • 534 automated tests passing across Python 3.11, 3.12, and 3.13.
  • 100% clean Ruff formatting and Bandit security verification.