Skip to content

GoldPan AI v3.2.0: Playwright Tier-2 Computed-Style DOM Firewall, Next.js E2E & Contributor CI

Choose a tag to compare

@ptai-eng ptai-eng released this 31 Oct 07:42
· 5 commits to main since this release

What's Changed in GoldPan AI v3.2.0

1. Playwright Tier-2 Computed-Style DOM Firewall

  • Dynamic CSS Injection Detection: Extends indirect prompt injection defense beyond static HTML attributes. Uses headless Chromium via Playwright to evaluate \window.getComputedStyle\ on all elements.
  • Advanced Stealth Pattern Stripping: Detects and removes elements hidden via external CSS stylesheets (\display: none, \�isibility: hidden), zero opacity (\opacity: 0), sub-pixel font sizes (\ ont-size <= 1px), CSS clip-paths (\inset(50%)), and off-screen translation offsets (\ ransform: translate(-9999px, 0)).
  • Telemetry Integration: Reports \playwright_computed_css_hidden\ signals directly into \FirewallReport\ with
    isk_score = 0.85\ and supports strict mode rejection.

2. Next.js 16 & React 19 Frontend Dashboard Telemetry

  • Firewall Alert & Clean Verification Badges: Live UI badge rendering security indicators from _meta.provenance.firewall. Renders alert badge with risk score and trigger signals when indirect injection is caught; renders clean verification badge when document is safe.
  • Offline OCR Control & Status: Added UI toggle for offline OCR extraction and live telemetry badge displaying active OCR backend and confidence score.
  • Syntax Modernization: Grounded in React 19 and Tailwind CSS v4 via Context7 documentation validation, ensuring zero deprecated API usage.

3. Open Source Contributor & DevOps Automation

  • GitHub Issue Forms: Added structured issue templates for bug reports (\�ug_report.yml), feature requests (\ eature_request.yml), and prompt injection sample submissions (\security_report.yml).
  • Pull Request Protocol: Added \PULL_REQUEST_TEMPLATE.md\ enforcing hardware diagnostics, 100% test passing, and CI regression gate checks.

4. Verification & Benchmarking

  • All 16 verification, security, OCR, and Playwright test suites passing with 100% success rate.