Commit Graph
20 Commits
Author SHA1 Message Date
Michael Sitarzewski 4d93350a2d Merge #1017: Redact nested credentials in structured log examples 2026-10-04 11:46:28 -05:00
Michael Sitarzewski 48fa630f72 Merge #1009: Require expiration and audit subject in Security Architect JWT verification 2026-10-04 11:46:17 -05:00
Michael Sitarzewski bcc77c0232 Merge #996: Reject malformed stored password records without throwing 2026-10-04 11:44:30 -05:00
Rudy Celekli 610ecc08aa Redact nested credentials in structured log examples
Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>
2026-10-03 01:03:30 -04:00
Rudy Celekli 363d6ac24b fix(security): require JWT expiry and audit subject claims
Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>
2026-10-02 23:06:12 -04:00
Rudy Celekli baa773207b Reject malformed stored password records without throwing
Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>
2026-10-02 14:21:54 -04:00
Rudy Celekli 87dde74733 Preserve case-sensitive IOC paths and filter private IPv6 addresses
Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>
2026-10-02 14:21:51 -04:00
Michael Sitarzewski 53ca655ad3 Merge commit 'refs/c35/924' into integ/content-batch 2026-09-30 21:38:25 -05:00
Michael Sitarzewski 22148bee9c Merge commit 'refs/c35/923' into integ/content-batch 2026-09-30 21:38:25 -05:00
Michael Sitarzewski 9daffc0202 Merge commit 'refs/c35/922' into integ/content-batch 2026-09-30 21:38:25 -05:00
Michael Sitarzewski f22a39c221 Merge commit 'refs/c35/921' into integ/content-batch 2026-09-30 21:38:25 -05:00
Michael Sitarzewski 3023be035f Merge commit 'refs/c35/920' into integ/content-batch 2026-09-30 21:38:24 -05:00
Rudy Celekli cde130414c Fix PostgreSQL grants in Vault dynamic credential example 2026-09-29 20:08:39 -04:00
Rudy Celekli 82425f3fe3 Correct Chainlink decimal scaling in secure lending example 2026-09-29 20:08:39 -04:00
Rudy Celekli ae70562a83 Create private incident triage directories atomically 2026-09-29 20:08:38 -04:00
Rudy Celekli c23759b7bc Remove attacker-controlled command-line detection exclusions 2026-09-29 20:08:38 -04:00
Rudy Celekli 7b5df086f8 Fix default-deny Kubernetes example with sender egress policies 2026-09-29 20:08:38 -04:00
Rudy Celekli 776cacf430 Fix dependency scanner JSON parsing and incomplete-scan handling 2026-09-29 20:08:38 -04:00
86a6695d4c Add 6 specialists: security ×2, engineering ×3, specialized ×1 (#720)
Consolidates five gated PRs into one merge (each edited the README roster,
so landing individually would cascade conflicts):

- Security: AI-Generated Code Security Auditor, Secrets & Credential Hygiene
  Engineer (#647, #648 — @Synvoya)
- Engineering: Database Reliability, Developer Tooling, IoT Fleet Engineer
  (#705 — @Hotragn)
- Specialized: Codebase Archaeologist (#681 — @Axion-Web-dev)

All six cleared the full gate: lint 0/0, originality 0.0-0.1% (no dupes vs
roster or each other), proper structure, valid divisions. Roster rows added
to the Security/Engineering/Specialized tables (every link verified). Full
guard suite green — divisions, tools, runbooks, and the Hermes plugin guard —
and the Hermes roster picks up all six (254 -> 260 agents).





Claude-Session: https://claude.ai/code/session_01WKnDRWM4izsB8WAXKszhsq

Co-authored-by: Synvoya <Synvoya@users.noreply.github.com>
Co-authored-by: Hotragn <Hotragn@users.noreply.github.com>
Co-authored-by: Axion-Web-dev <Axion-Web-dev@users.noreply.github.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-15 18:50:22 -05:00
8237f99b85 feat: add Security division (resolves RFC #438) (#566)
New security/ division: 6 new agents (#223, #326) + 4 relocated; differentiated Security Architect; 209 agents / 15 divisions. Closes #223, #326.

Co-Authored-By: anonym88-ai <anonym88-ai@users.noreply.github.com>
Co-Authored-By: caveat-ops <caveat-ops@users.noreply.github.com>
2026-06-04 16:55:28 -05:00