Skip to content

v0.1.0 — first release

Choose a tag to compare

View all tags
@ralfyishere ralfyishere released this 08 Jul 06:20
· 12 commits to main since this release
v0.1.0
7c4f1c7

Zero-trust repo intake for AI coding agents. Deterministic, offline, single-file; inventories the instruction environment (14+ file classes incl. MCP configs, hooks, .envrc, folderOpen tasks) and flags known injection/execution/exfiltration shapes, including the documented HTML-comment technique. Gate mode wires a PreToolUse hook so sessions can't run shell commands until an intake scan passes.

Ships its own false-negative ledger: corpus/misses/ contains working attacks this scanner does NOT catch, asserted undetected in CI (COVERAGE.md). A clean scan means 'no known-shape red flags' — never 'safe'.

Checked: full corpus + unit suite, false-positive regression at zero, exit-code contract, gate cycle, CI green on Python 3.9/3.12 (ubuntu). Not checked: live agent-session test of gate mode (unit-level only).

Assets 2
Loading