All pull requests

Pull requests

• fix(cc): calculate Platform Pulse total_users from User accounts

  #601·prince-shakyaa opened Oct 15, 2026·

  ·
  1

  1

• fix(mcp): prevent deletion of protected SystemUtils users

  #599·rohanbuilds-ai opened Oct 15, 2026·

  ·
  1

• fix(mcp): enforce SystemUtils enabled_tools allow-list

  #597·rohanbuilds-ai opened Oct 15, 2026·

  ·

• fix(detectors): harden tool call condition evaluation

  #596·rohanbuilds-ai opened Oct 15, 2026·

  ·

• fix(agents): handle unresolvable task_data IDs

  #595·rohanbuilds-ai opened Oct 15, 2026·

  ·
  1

• fix(ctf): reject None for list-typed detector config keys

  #594·Prasad-desh opened Oct 15, 2026·

  ·
  2

  1

• feat(ctf): add poisoned handoff challenge and detector

  #593·Dee-Tee11 opened Oct 12, 2026·

  ·

• Fix SSN and EIN classification in TaxCalc validation

  #592·rohanbuilds-ai opened Oct 11, 2026·

  ·
  2

• fix(findrive): reject empty or whitespace-only upload content

  #590·Prasad-desh opened Oct 7, 2026·

  ·
  1

  1

• test(agents): await _get_user_prompt in the two SAI-EDGE prompt tests

  #588·Prasad-desh opened Oct 4, 2026·

  ·
  3

• fix(finmail): BCC recipients no longer see each other's addresses

  #587·prince-shakyaa opened Sep 24, 2026·

  ·
  1

  1

• fix(auth): sign in via POST so link prefetches can't use magic links

  #584·steadhac opened Sep 17, 2026Contributor·

  ·
  2

  1

• feat:Add MCP scenario module with tool poisoning, policy misconfig, detectors and CTF challenges

  #581·nitinawari opened Aug 22, 2026Contributor·3 tasks·

  ·

• fix: reject whitespace-only task_summary in orchestrator context capture (#459)

  #580·Deez-Automations opened Aug 20, 2026·4 tasks done·

  ·
  1

  1

• fix: guard vendor_id/invoice_id=None in chat assistant tool callables (#418)

  #579·Deez-Automations opened Aug 20, 2026·4 tasks done·

  ·
  1

  1

• Fix: profile share-card cache key omits fields that affect the render

  #578·Deez-Automations opened Aug 20, 2026·4 tasks done·

  ·
  1

• Fix: Dark Lab tool override silently drops parameters/inputSchema

  #577·Deez-Automations opened Aug 20, 2026·5 tasks done·

  ·
  2

• Fix: guardrail payload corruption before signing + missing after_tool for complete_task

  #576·Deez-Automations opened Aug 20, 2026·8 tasks done·

  ·
  1

• Fix: DNS-based SSRF bypass in guardrail webhook URL validation

  #575·Deez-Automations opened Aug 19, 2026·8 tasks done·

  ·
  1

• Fix: orchestrator confirms payment to vendor even when it fails

  #574·Deez-Automations opened Aug 19, 2026·3 tasks done·

  ·
  7

• feat(trace): add investigation submission endpoint and The Debrief challenge

  #573·stealthwhizz opened Aug 17, 2026Contributor·3 tasks done·

  ·
  3

• feat(trace): add ContextInjectionDetector with 14 tests

  #572·stealthwhizz opened Aug 17, 2026Contributor·2 tasks done·

  ·

• feat(trace): add The Canary honeypot challenge

  #571·stealthwhizz opened Aug 17, 2026Contributor·2 tasks done·

  ·

• docs(trace): add multi-step challenge authoring guide

  #570·stealthwhizz opened Aug 17, 2026Contributor·

  ·

• feat(trace): add Canary throughput and Delegation Audit overhead benchmarks

  #569·stealthwhizz opened Aug 17, 2026Contributor·2 tasks done·

  ·