15 Commits

Include renames

Author	SHA1	Message	Date
Sharang ParnerkarandClaude Fable 5	8cf3d09a23	feat(agent): cache control embedding index + auto-wire semantic pass (gated) ... Item 2 of the semantic-mapping follow-ups. Caching (2a): ControlIndex::load_or_build persists the embedded corpus to snapshot_dir keyed by a corpus hash (control ids + requirement text). A later scan reuses the embeddings unless the catalog changed, turning the per-scan re-embed of the ~13.6k master-control corpus into a one-time cost. Atomic write (temp + rename); self-invalidates on catalog change. ControlCheckSpec gains Serialize/Deserialize to persist. Auto-wire (2b): orchestrator Stage 5c runs semantic_stamp_findings after control triage, gated on breakpilot.semantic_mapping (env BREAKPILOT_SEMANTIC_MAPPING, default off). Stays off until verified live against a deployed master-controls catalog; safe no-op meanwhile (the endpoint 400s pre-deploy and the pass warns + returns 0). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-21 13:12:01 +02:00
sharang	5285fb67ae	feat(oscal): live assessment endpoint POST /api/v1/oscal/assess (#212)	2026-07-20 19:13:47 +00:00
sharang	91a87677bc	feat(werkbank): runner queue endpoints + result persistence (WB-05) (#207)	2026-07-17 11:42:29 +00:00
sharang	7ad7bce9db	feat(plc): dynamic PLC testing via ephemeral soft-PLC (#193)	2026-07-17 07:47:43 +00:00
sharang	a981311413	refactor: rip out the legacy TrackedRepository / repositories path (#161)	2026-07-16 07:25:45 +00:00
sharang	bf32b9939a	fix(onboarding): targets visibility + unified pipeline by default (#154)	2026-07-13 07:29:04 +00:00
sharang	c6a02f0ac3	feat(pipeline): unified run_target execution behind UNIFIED_PIPELINE (#145)	2026-07-12 21:31:21 +00:00
sharang	ef6ee3dcd1	feat(onboarding): artifact ingest + classifier + native tramiton + suite seams (#138)	2026-07-10 16:00:51 +00:00
sharang	ac24ca766a	feat(m7.3): cross-tenant admin HTTP endpoints (#95) ... GET /api/admin/tenants lists tenant DBs; DELETE /api/admin/tenants/{tenant_id} drops them (GDPR). Behind a separate auth path that rejects customer realm tokens.	2026-06-30 15:23:39 +00:00
Sharang ParnerkarandClaude Opus 4.6	a509bdcb2e	fix: require TLS for IMAP auth, close port 143 (CERT-Bund compliance) ... - Remove port 143 from mailserver (only expose 993/IMAPS) - Enable SSL_TYPE=manual with Let's Encrypt certs - Set DOVECOT_DISABLE_PLAINTEXT_AUTH=yes - Add pentest_imap_tls config field (defaults to true) Fixes CERT-Bund report: IMAP PLAIN/LOGIN without TLS on 46.225.100.82:143 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-18 09:29:34 +01:00
sharangandSharang Parnerkar	c461faa2fb	feat: pentest onboarding — streaming, browser automation, reports, user cleanup (#16) ... Complete pentest feature overhaul: SSE streaming, session-persistent browser tool (CDP), AES-256 credential encryption, auto-screenshots in reports, code-level remediation correlation, SAST triage chunking, context window optimization, test user cleanup (Keycloak/Auth0/Okta), wizard dropdowns, attack chain improvements, architecture docs with Mermaid diagrams. Co-authored-by: Sharang Parnerkar <parnerkarsharang@gmail.com> Reviewed-on: #16	2026-03-17 20:32:20 +00:00
sharang	46bf9de549	feat: findings refinement, new scanners, and deployment tooling (#6)	2026-03-09 12:53:12 +00:00
sharangandSharang Parnerkar	0cb06d3d6d	feat: add Keycloak authentication for dashboard and API endpoints (#2) ... Dashboard: OAuth2/OIDC login flow with PKCE, session-based auth middleware protecting all server function endpoints, check-auth server function for frontend auth state, login page gate in AppShell, user info in sidebar. Agent API: JWT validation middleware using Keycloak JWKS endpoint, conditionally enabled when KEYCLOAK_URL and KEYCLOAK_REALM are set. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> Co-authored-by: Sharang Parnerkar <parnerkarsharang@gmail.com> Reviewed-on: #2	2026-03-07 23:50:56 +00:00
sharangandSharang Parnerkar	42cabf0582	feat: rag-embedding-ai-chat (#1) ... Co-authored-by: Sharang Parnerkar <parnerkarsharang@gmail.com> Reviewed-on: #1	2026-03-06 21:54:15 +00:00
Sharang ParnerkarandClaude Opus 4.6	0867e401bc	Initial commit: Compliance Scanner Agent ... Autonomous security and compliance scanning agent for git repositories. Features: SAST (Semgrep), SBOM (Syft), CVE monitoring (OSV.dev/NVD), GDPR/OAuth pattern detection, LLM triage, issue creation (GitHub/GitLab/Jira), PR reviews, and Dioxus fullstack dashboard. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-02 13:30:17 +01:00