Skip to content

πŸš€ Siber Akademi T-Zero v4.0.0 β€” Enterprise Zero-Hallucination AST Engine & 21 MCP Tools

Choose a tag to compare

@toprakahmetaydogmus toprakahmetaydogmus released this 12 Oct 05:08
· 10 commits to main since this release

⚑ Siber Akademi T-Zero Context Architect v4.0.0 (Enterprise Release)

🌟 Highlights & Major Innovations

πŸ”’ Enterprise Zero-Leak & Core Security

  • PBKDF2-HMAC-SHA256 Authenticated Backup: Upgraded KeyringSecretsBackupManager to NIST-compliant PBKDF2-HMAC-SHA256 (600,000 iterations, 16-byte random salt, b"TZB2" magic header, HMAC authentication tag) with transparent legacy XOR fallback.
  • AST Pre-Parse Secret Sanitization: Reordered secret masking in app.py so tokens and API keys are sanitized before AST parsing, preventing sensitive credentials from ever touching AST symbol memory.
  • Hardened Web Dashboard: Eliminated path traversal in DashboardRequestHandler by switching from SimpleHTTPRequestHandler to BaseHTTPRequestHandler with strict CORS, no-cache headers, and automatic file modification time (mtime) cache invalidation.
  • Precise Relative Import Boundaries: ArchitectureRuleEngine now correctly resolves relative imports (node.level > 0) and dotted submodules to enforce strict layer isolation.

🧠 Zero-Hallucination AST Engine

  • 100% Schema Preservation: Preserves field declarations, type annotations, and default values in Pydantic (BaseModel), @dataclass, TypedDict, Enum, and SQLAlchemy ORM models during ultra context compression.
  • REST & API Endpoint Extractor: Automatically synthesizes FastAPI and Flask routes (@app.get, @router.post, etc.) into formal Tier T-3 contract blocks.
  • Polyglot Brace-Balanced Parser: Deep multi-line brace balancing for Go, Rust, Java, C#, and C++ prevents truncated struct and interface signatures.
  • PageRank + Git Recency Token Budgeting: Token budgets prioritize architectural core modules and recently modified files instead of arbitrary alphabetical slices.
  • Fuzzy Did-You-Mean Guard: ZeroHallucinationGuard validates proposed code against workspace AST contracts, offering difflib-powered suggestions for mismatched imports and parameters.

πŸ€– 21 Autonomous MCP Tools

  • Full suite of 21 tools synchronized across tzero_mcp.py, addmcp.py, action.yml, and documentation.
  • Added find_dead_code (DeadCodeFinder) to discover unreferenced functions and classes.
  • Added detect_circular_dependencies to catch import loops early.
  • High-performance _ast_cache and fast substring filtering for instant diff and impact analysis.

πŸš€ CI/CD & Developer Experience (DX)

  • GitHub PR Report Mode: --pr-report <ref> generates rich architectural impact and risk tables, exporting directly to $GITHUB_STEP_SUMMARY.
  • SARIF 2.1.0 & JSON Export: --audit <dir> --format sarif integrates seamlessly into GitHub Advanced Security / Code Scanning.
  • Instant Quickstart: uvx tzero-mcp runs the MCP server with zero manual installation.
  • 100% Test Coverage: 131 tests passing across Python 3.9 through 3.14 without regressions.

Full Changelog: v3.0.17...v4.0.0