Morph MORPH
SIGN IN SIGN UP
dhruvhead / release-gate UNCLAIMED
0 0 1 Python

COMMITS

main
July 31, 2026
C
Add corpus triage tool and a second, smaller-server MCP batch
Claude committed
1c8ef51
July 30, 2026
C
A central gate layer suppresses per-tool gate findings (ha-mcp maintainer reply)
Claude committed
6572c67
C
Namespaced tool names are still read-only (homeassistant-ai/ha-mcp)
Claude committed
f2b86c8
C
In-memory collection mutation is not an irreversible action (awslabs postgres-mcp)
Claude committed
a63e145
C
Add the MCP-server corpus and document what triage caught
Claude committed
2e2115a
C
A read-only tool name overrides body plumbing too (awslabs aws-iac-mcp-server)
Claude committed
82bf9d0
C
Read-verb prefix beats an irreversible noun in a tool name (awslabs/mcp)
Claude committed
6079287
C
Fix docstring-placeholder secret FP found dogfooding a 28-server MCP corpus
Claude committed
27d6de7
C
Publish the verified deployed-agent corpus number for 0.9.4
Claude committed
edb1613
C
Set 0.9.4 release date; refresh perf numbers and the cross-module milestone note
Claude committed
493091a
C
Gate the summary fixpoint on the only shape that needs it
Claude committed
a9a3ed5
C
Method summaries: taint through the client-class shape agents actually use
Claude committed
861a42d
C
Cross-module and file-mediated taint: follow the flow real agents actually use
Claude committed
7091258
C
Inter-procedural taint: follow a helper's return across the call boundary
Claude committed
cf5c0e2
C
Fix silent scan truncation; make blast radius work on real agent apps
Claude committed
2b3a967
July 29, 2026
C
Site: make the live demo findable, and replace an unverifiable precision claim
Claude committed
b078231
C
Make the demo self-verifying and reproducible on GitHub and the website
Claude committed
49dcab9
C
Three-tier evidence contract: a variable name can no longer produce a HIGH
Claude committed
9716d1b
July 28, 2026
C
Precision: MCP notifications + allowlisted placeholder secrets (mcp-context-forge)
Claude committed
547a3a6
C
Re-scope RG-EXEC-003 (JS/TS): fire only in agent code, not on CLI plumbing
Claude committed
c2280a5
C
Fix langflow FPs: HMAC guard-clause deser + compile()-without-exec (0.9.4)
Claude committed
02cc739
C
Fix JS/TS system-prompt false positive; stage 0.9.4 (untagged)
Claude committed
b8294bb
C
Release v0.9.3 — integrity-verified deserialization is not RCE (AutoGPT FP fix)
Claude committed
7d6e6cb
C
Release v0.9.2 — lean CLI packaging, reproducible benchmark, slimmed README
Claude committed
65c1dfe
V
Merge pull request #163 from VamsiSudhakaran1/claude/release-gate-ux-polish-ncpscq
Vamsi Sudhakaran committed
8cf4721
C
README: slim to a landing page; move the manual to docs/REFERENCE.md
Claude committed
f77c6a0
C
Packaging: lean CLI base install; web/SaaS stack behind an [api] extra
Claude committed
de748af
C
Benchmark: cover the full v0.9.0 catalog; make the 0-FP claim reproducible
Claude committed
6dd9fc0
C
Release v0.9.1 — precision patch (subprocess list-argv false positive)
Claude committed
fe593f2
C
Fix false positive: subprocess list-argv concatenation is not a string command
Claude committed
f9aa5eb