Repository navigation
First public release of RangeSpec, an offline-first authorization and scope manifest plus CLI for controlled security ranges.
Highlights:
- Draft 2020-12 manifest schema for targets, permitted actions, time and rate limits, safe state, stop conditions, recovery, approvals, and evidence handling
- Deterministic validation, normalization, SHA-256 fingerprints, fail-closed redaction, and semantic diffs
- Local advisory review plus an optional Claude structured-output adapter that receives only redacted manifests
- 24 behavior tests, strict typing, pinned dependencies, fresh-wheel verification, and passing public CI
RangeSpec does not scan networks, exploit targets, execute tests, or establish authorization by itself.