Michael Sitarzewski
bdad838aed
Merge #1075 : fix(security): export matching STIX patterns for admitted IOC types
2026-10-13 05:51:52 -05:00
Michael Sitarzewski
a7c1b85bdb
Merge #1064 : Reject trailing newlines in Security Architect usernames
2026-10-13 05:51:51 -05:00
Rudy Celekli
4ff8d66812
fix(security): match admitted IOC types in STIX exports
...
Signed-off-by: Rudy Celekli <rudy@gradiahq.com >
2026-10-07 18:54:29 -04:00
Rudy Celekli
744d32ed87
fix(security): validate the complete username
...
Signed-off-by: Rudy Celekli <rudy@gradiahq.com >
2026-10-07 16:20:36 -04:00
Rudy Celekli
80e2b2db30
fix(security): preserve IOC CSV record boundaries
...
Signed-off-by: Rudy Celekli <rudy@gradiahq.com >
2026-10-07 16:07:18 -04:00
Rudy Celekli
cb30409b87
Reject unexpected request fields in Security Architect input validation
...
Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com >
2026-10-05 12:59:26 -04:00
Michael Sitarzewski
4d93350a2d
Merge #1017 : Redact nested credentials in structured log examples
2026-10-04 11:46:28 -05:00
Michael Sitarzewski
48fa630f72
Merge #1009 : Require expiration and audit subject in Security Architect JWT verification
2026-10-04 11:46:17 -05:00
Michael Sitarzewski
bcc77c0232
Merge #996 : Reject malformed stored password records without throwing
2026-10-04 11:44:30 -05:00
Rudy Celekli
610ecc08aa
Redact nested credentials in structured log examples
...
Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com >
2026-10-03 01:03:30 -04:00
Rudy Celekli
363d6ac24b
fix(security): require JWT expiry and audit subject claims
...
Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com >
2026-10-02 23:06:12 -04:00
Rudy Celekli
baa773207b
Reject malformed stored password records without throwing
...
Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com >
2026-10-02 14:21:54 -04:00
Rudy Celekli
87dde74733
Preserve case-sensitive IOC paths and filter private IPv6 addresses
...
Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com >
2026-10-02 14:21:51 -04:00
Michael Sitarzewski
53ca655ad3
Merge commit 'refs/c35/924' into integ/content-batch
2026-09-30 21:38:25 -05:00
Michael Sitarzewski
22148bee9c
Merge commit 'refs/c35/923' into integ/content-batch
2026-09-30 21:38:25 -05:00
Michael Sitarzewski
9daffc0202
Merge commit 'refs/c35/922' into integ/content-batch
2026-09-30 21:38:25 -05:00
Michael Sitarzewski
f22a39c221
Merge commit 'refs/c35/921' into integ/content-batch
2026-09-30 21:38:25 -05:00
Michael Sitarzewski
3023be035f
Merge commit 'refs/c35/920' into integ/content-batch
2026-09-30 21:38:24 -05:00
Rudy Celekli
cde130414c
Fix PostgreSQL grants in Vault dynamic credential example
2026-09-29 20:08:39 -04:00
Rudy Celekli
82425f3fe3
Correct Chainlink decimal scaling in secure lending example
2026-09-29 20:08:39 -04:00
Rudy Celekli
ae70562a83
Create private incident triage directories atomically
2026-09-29 20:08:38 -04:00
Rudy Celekli
c23759b7bc
Remove attacker-controlled command-line detection exclusions
2026-09-29 20:08:38 -04:00
Rudy Celekli
7b5df086f8
Fix default-deny Kubernetes example with sender egress policies
2026-09-29 20:08:38 -04:00
Rudy Celekli
776cacf430
Fix dependency scanner JSON parsing and incomplete-scan handling
2026-09-29 20:08:38 -04:00
86a6695d4c
Add 6 specialists: security ×2, engineering ×3, specialized ×1 ( #720 )
...
Consolidates five gated PRs into one merge (each edited the README roster,
so landing individually would cascade conflicts):
- Security: AI-Generated Code Security Auditor, Secrets & Credential Hygiene
Engineer (#647 , #648 — @Synvoya)
- Engineering: Database Reliability, Developer Tooling, IoT Fleet Engineer
(#705 — @Hotragn)
- Specialized: Codebase Archaeologist (#681 — @Axion-Web-dev)
All six cleared the full gate: lint 0/0, originality 0.0-0.1% (no dupes vs
roster or each other), proper structure, valid divisions. Roster rows added
to the Security/Engineering/Specialized tables (every link verified). Full
guard suite green — divisions, tools, runbooks, and the Hermes plugin guard —
and the Hermes roster picks up all six (254 -> 260 agents).
Claude-Session: https://claude.ai/code/session_01WKnDRWM4izsB8WAXKszhsq
Co-authored-by: Synvoya <Synvoya@users.noreply.github.com >
Co-authored-by: Hotragn <Hotragn@users.noreply.github.com >
Co-authored-by: Axion-Web-dev <Axion-Web-dev@users.noreply.github.com >
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-07-15 18:50:22 -05:00
8237f99b85
feat: add Security division (resolves RFC #438 ) ( #566 )
...
New security/ division: 6 new agents (#223 , #326 ) + 4 relocated; differentiated Security Architect; 209 agents / 15 divisions. Closes #223 , #326 .
Co-Authored-By: anonym88-ai <anonym88-ai@users.noreply.github.com >
Co-Authored-By: caveat-ops <caveat-ops@users.noreply.github.com >
2026-06-04 16:55:28 -05:00
Michael Sitarzewski