open/llm-security
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity Actions
llm-security/STATE.md

2.5 KiB
Raw Blame History

STATE — llm-security

Active focus: NONE active — v7.8.0 RELEASED (commit e9476ea). Security-fix track (F-1/F-2/F-3) + TRG/SIG/AST (TRG/SIG/AST) + the release are ALL DONE. Only loose end = F-4 (optional, LOW), still open. Plugin is in a clean, quiescent, shippable state.

What just shipped (DONE — do NOT re-derive)

  • v7.8.0 release — Session C. DONE (e9476ea). Pure version-sync, no production code.
    • Bumped 7.7.2 → 7.8.0 in every CURRENT pointer: .claude-plugin/plugin.json, package.json, README.md badge, CLAUDE.md header + "release notes" range sentinel.
    • Narrative added (prior releases kept as history): CHANGELOG.md [7.8.0], docs/version-history.md v7.8.0 section, README "Recent versions" 7.8.0 row, CLAUDE.md v7.8.0 highlights paragraph.
    • Release gate: full node --test suite 1863/0 after the doc edits. gitleaks clean.
  • TRG/SIG/AST (TRG/SIG/AST) — Steps 1–7. DONE (54115a9..d19abf0). Three deterministic deep-scan scanners: scanners/trigger-scanner.mjs (TRG, LLM06/AST04), scanners/signature-scanner.mjs (SIG, rules in knowledge/signatures.json, LLM03/LLM02), scanners/ast-taint-scanner.mjs (AST, parse-only scanners/lib/py-ast-taint.py + regex fallback, LLM01/LLM02/AST02). Wired into orchestrator + policy; prefixes registered in output.mjs.
  • Security-fix track — F-1/F-2/F-3 + F-5/F-6. DONE (Sessions A+B, 5f50899 + 3f64aa5). From docs/security-fix-brief-2026-06-20.md. All shell-injection / path-traversal sinks closed.

Still open (optional only)

  • F-4 — optional, LOW (by-design MCP spawn; a confirm-gate is a judgment call). NOT required. Decide deliberately if/when picked up — do not auto-escalate to it.
  • Residual gap (documented inline in the F-2 fix): prefix containment in auto-cleaner.mjs does NOT stop a symlink inside the tree pointing out. Known, accepted.

COLD START (next session)

  1. pwd + git status. Confirm e9476ea (v7.8.0) is present AND pushed (weekend window — should be on origin/main).
  2. No active task queued. Options: (a) implement F-4 confirm-gate if the operator wants it; (b) new direction from the operator. Do NOT invent scope — ask.

Continuity notes

  • origin = Forgejo open/llm-security (never GitHub). Push window: weekdays 20:00–23:00; weekends/holidays anytime. Outside window at session end → commit locally, PARK the push, say so.
  • Plan of record for TRG/SIG/AST: docs/plans/trekplan-2026-06-20-TRG/SIG/AST-gap-analysis.md (Step 8 = this release, now complete).