Release Violin v3.1.0 - #71
Open
Dan-StrategicAutomation wants to merge 1 commit into
Open
Conversation
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
![github-code-quality[bot]](https://avatars.githubusercontent.com/u/9919?s=60&v=4){kind=small}
Collapse 72 development commits into a single coherent release commit. Benchmark & evaluation: - Automated benchmark runner (benchmark/run.py) with OpenRouter/Docker support - Evidence-gated scorer, proof verifier, AI judge, and bounded artifact indexer - Duck Store calibration suite (known-good / known-bad baselines) Guard & scope policy: - AST-based scope parsing (bashlex + yarl + netaddr) eliminating false positives - Receipt integrity verifier, fail-closed state parsers, record-as-you-go recency gates - Hypothesis disposition deadlock resolution; case-insensitive REPORTING phase gate - Block messages name remediation tools with concrete parameter templates Skills & methodology: - 31 playbooks / 17 references / 12 templates routed across pentest, web-attacks, access-control - De-benchmarked production code (no scorer/challenge references leak into the framework) - Evidence-path and open-redirect routing corrections; single-step win formalization Docs: - Corrected benchmark results to measured values (best 17/20, stable 14-17) - Sourced Duck Store ranking table with citations and model-agnostic cost/speed comparison Tests: 443 passed, 1 skipped; ruff clean.
Dan-StrategicAutomation
force-pushed
the
dev
branch
from
August 15, 2026 19:43
fbdab95 to
1c1f7ee
Compare
Dan-StrategicAutomation
marked this pull request as ready for review
August 15, 2026 19:47
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Overview
Promote the verified Violin 3.1.0 release from
devtomaster. This is a single consolidated commit (the 72-commit development history was squashed into one coherent release commit).Highlights
Benchmark & evaluation
benchmark/run.py) with OpenRouter/Docker supportGuard & scope policy
bashlex+yarl+netaddr) eliminating benign-command false positivesSkills & methodology
Docs
Validation
pytest: 443 passed, 1 skippedruff check/ruff format --check: passedscripts/violin_guard.py check-release: passedgit diff --check: passedNotes
devhistory was squashed from 72 commits into one (1c1f7ee) and force-pushed. A recovery tagbackup/dev-pre-squash-20260815203544preserves the pre-squash state.fixed).