Seryvon Core v1.0.0rc5

Updates :

Security:

• SSRF guard on every Playwright request (route interception, service workers blocked)
• Cap decoded HTTP bodies in safe_get (10 MB pages, 50 MB sitemaps; transport gzip bombs)
• Parse sitemaps with defusedxml (forbid_dtd); bound sitemap fan-out, same-host children
• nginx/Vite inject X-API-Key server-side so API auth works with the web UI
• Validate API inputs, hide internal task errors, reject malformed SERYVON_SECRET_KEY
• Compose: api/migrate/worker-io built on base (no Chromium); POSTGRES_PASSWORD honoured
• nginx: keep security headers on static assets, ^~ /api/

Correctness:

• Social platform detection by registrable domain (dropbox.com is not twitter)
• Citation domain matching via offline Public Suffix List (tldextract)
• Isolate failing rules as not_measured; reject negative weights
• Add crawl_scope to the measurement profile
• BYOK key status mirrors runtime precedence (env first)

Robustness / ops:

• Cap Crawl-delay at 10 s; run external connectors concurrently; pooled crawl client
• Run sync DB calls off the event loop in async routes; pool_pre_ping; Celery time limits
• persist_pages in one flush with the real signal schema version
• Frontend: reload tracking on domain change, surface storage-full errors, noopener,
  no overlapping polls
• Docker installs from uv.lock; CI frontend job, least-privilege permissions,
  metrics fed by real test reports; complete .env.example

Full Changelog: v1.0.0rc4...v1.0.0rc5

Seryvon Core v1.0.0rc4

What's Changed

• feat(scoring): experimental ASO + weight-only issue impact (review 9/13) by @bgrenat in #2
• feat(scoring): measurement profile + coverage labels (review 4/5) by @bgrenat in #3
• feat: artifact storage (C-P2), scorecard comparison (C-P3), React UI + EN/FR i18n by @bgrenat in #4
• feat: audit report screen + i18n Stage 2 (backend rule prose) by @bgrenat in #5
• feat(web): Phase 5 screens — ASO · History · Plan · Competitors comparison by @bgrenat in #6
• feat(byok): BYOK key management — backend + UI (Phase 5 completion) by @bgrenat in #7
• feat: async audit, citation tracking screen, vite 6 upgrade by @bgrenat in #8
• feat(web+api): Prompt Set screen — closes last nav 'soon' item (M4b) by @bgrenat in #9
• feat(geo): Playwright SSR detection + CSR re-extraction (signal schema v10) by @bgrenat in #10

New Contributors

• @bgrenat made their first contribution in #2

Full Changelog: https://github.com/seryvon-com/seryvon/commits/v1.0.0rc4