Repository navigation
DoubleAgent v3.3.26 — Reliable finding status and assessment continuity
This release brings Agent B's local improvements since v3.3.4 to the public Mac and web editions. Agent A remains the Burp authority for scope, target traffic, findings and write-back.
Agent B now keeps exact queue identity across a saved assessment, resumes only the intended item, and reports coverage gaps rather than claiming untested routes. Bounded parallel workers can help plan and review evidence; the UI shows their actual model calls and measured aggregate output rate. The chat has a simpler composer, visible thinking, clearer activity and Day/Night themes. Test accounts can be added by username, password and role when cross-account testing needs them; credentials stay in local app settings.
Finding review now distinguishes a candidate's confidence from its validation status. Agent B uses human-readable finding numbers in chat, ties validation to captured baseline, mutation and control evidence, and writes accepted verdicts back to DoubleAgent. A gated queue result cannot silently label a finding Valid. A separately accepted finding-level verdict with three captured responses can clear a prior gate, while missing or mismatched evidence stays Needs Investigation. Duplicate review preserves exact affected-location checks and writes accepted hide decisions back to Burp.
The target boundary remains enforced by Burp for assessment traffic. Out-of-scope internet access asks for an explicit Allow or Deny decision with the reason and proposed transfer visible. Parallel workers do not make target requests.
Validation: 102 extension tests, 468 Agent B Python tests and 10 JavaScript UI test files pass in the release checkout. The Mac bundle was also checked with strict code-signature, notarization, stapling, Gatekeeper and isolated-runtime smoke checks. These checks do not establish that any particular target finding is exploitable. A quarantined clean-Mac installation and all supported macOS versions were not independently exercised.
Downloads: the Apple Silicon Mac app, Burp extension source, full source archive and SHA-256 checksums are attached to the GitHub release. Quit Agent B before replacing the app; local settings and conversations are stored outside the app bundle.