feat: reactive engine expansion — DAG mutation, ephemeral proxy, HITL gates#11

Merged

Emperiusm merged 22 commits intomainfrom

feature/reactive-engine-expansion

Apr 13, 2026

Commits on Apr 13, 2026

docs: add Phase 3C.2 attack chain graph view design spec

Emperiusm
and
claude
committed
docs: add DAG mutation, ephemeral proxy, HITL gate, and Vultr provider plans

Emperiusm
and
claude
committed
docs: add Phase 3C.2 attack chain graph view implementation plan

Emperiusm
and
claude
committed
feat(mutation): add IntelBundle, DiscoveredService, KillChainState models

Emperiusm
and
claude
committed
fix(mutation): vuln dedup key includes port, add re-exports, type annotations

Emperiusm
and
claude
committed
feat(mutation): add OutputAnalyzer protocol with Nmap and Nuclei analyzers

Emperiusm
and
claude
committed
fix(mutation): guard extracted_results type in NucleiAnalyzer

Emperiusm
and
claude
committed
feat(mutation): add MutationStrategy protocol with RedisProbeStrategy

Emperiusm
and
claude
committed
feat(engine): integrate mutation layer — analyzer → state → strategy → inject

Emperiusm
and
claude
committed
feat(subprocess): add env parameter to run_streaming for proxy injection

Emperiusm
and
claude
committed
feat(infra): add CloudNodeProvider ABC with DigitalOcean implementation

Emperiusm
and
claude
committed
feat(infra): add VultrProvider with SSH key injection and 0.0.0.0 IP guard

Emperiusm
and
claude
committed
feat(infra): ephemeral_proxy context manager with shielded teardown

Emperiusm
and
claude
committed
feat(executor): add ProxiedShellExecutor with ephemeral proxy routing

Emperiusm
and
claude
committed
feat(infra): add orphan node sweeper for startup cleanup

Emperiusm
and
claude
committed
feat(models): add ApprovalRequirement, AWAITING_APPROVAL status, approval fields on ScanTask

Emperiusm
and
claude
committed
feat(approval): add ApprovalRegistry in-memory notification hub

Emperiusm
and
claude
committed
feat(engine): integrate HITL approval gate phase into _execute_task

Emperiusm
and
claude
committed
feat(api): add HITL gate endpoints — list, approve, reject with write-before-signal

Emperiusm
and
claude
committed
docs: add Phase 3C.3 global view + Bayesian calibration design spec

Emperiusm
and
claude
committed
fix: approval registry wiring, command injection guard, gate auth scoping

Emperiusm
and
claude
committed
docs: update README with reactive engine expansion features

Emperiusm
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: reactive engine expansion — DAG mutation, ephemeral proxy, HITL gates#11

feat: reactive engine expansion — DAG mutation, ephemeral proxy, HITL gates#11
Emperiusm merged 22 commits intomainfrom
feature/reactive-engine-expansion

Commits on Apr 13, 2026

docs: add Phase 3C.2 attack chain graph view design spec

docs: add DAG mutation, ephemeral proxy, HITL gate, and Vultr provider plans

docs: add Phase 3C.2 attack chain graph view implementation plan

feat(mutation): add IntelBundle, DiscoveredService, KillChainState models

fix(mutation): vuln dedup key includes port, add re-exports, type annotations

feat(mutation): add OutputAnalyzer protocol with Nmap and Nuclei analyzers

fix(mutation): guard extracted_results type in NucleiAnalyzer

feat(mutation): add MutationStrategy protocol with RedisProbeStrategy

feat(engine): integrate mutation layer — analyzer → state → strategy → inject

feat(subprocess): add env parameter to run_streaming for proxy injection

feat(infra): add CloudNodeProvider ABC with DigitalOcean implementation

feat(infra): add VultrProvider with SSH key injection and 0.0.0.0 IP guard

feat(infra): ephemeral_proxy context manager with shielded teardown

feat(executor): add ProxiedShellExecutor with ephemeral proxy routing

feat(infra): add orphan node sweeper for startup cleanup

feat(models): add ApprovalRequirement, AWAITING_APPROVAL status, approval fields on ScanTask

feat(approval): add ApprovalRegistry in-memory notification hub

feat(engine): integrate HITL approval gate phase into _execute_task

feat(api): add HITL gate endpoints — list, approve, reject with write-before-signal

docs: add Phase 3C.3 global view + Bayesian calibration design spec

fix: approval registry wiring, command injection guard, gate auth scoping

docs: update README with reactive engine expansion features