Core
Improvements
- Enhance Blackbit prompts and engagement policies
- Implement Geist font preset and associated assets
- Rename Swarm orchestration for clearer naming
Bugfixes
- Convert remaining model-facing orchestrate copy to Swarm
Core
Improvements
- New surface UI
- Map on-disk contracts in Ultra recon and stop host-seeded missions
- Resume graph orchestrations in the same scratch folder
Bugfixes
- Keep parent reasoning variant on orchestrate workers
- Keep chat out of crown_jewels until recon lands
- Reuse worker chats on orchestrate continue
- Electron-safe egress measure and reject scheme-only hosts
Desktop
Bugfixes
- Keep composer focused after Orchestrator toggle
- Highlight composer Orchestrator when toggled on
Desktop
Bugfixes
- Enable software WebGL fallback for GPU-less VMs
Core
Improvements
- Improved orchestrator and access control states in prompt input
- Enhanced surface artifact handling and session metadata management
- Added mid-inject remixed runtime for Ultra loop
- Added portable Ultra loop keep-going behavior
- Host now emits Evidence records for proven Ultra claims
- Added stacked control-plane layers for domain boundary, persona, and webfetch
- Added sticky Ultra operator mission latch for WAR drafts
- Improved cold local session loading performance
Bugfixes
- Checkpoint in-flight orchestrate workers on Stop
- Promoted leaf recon worklist to session root
- Treated stream/tool JSON errors as retryable
- Isolated orchestrate leaf writes and stopped host git add -A on task finish
- Fixed coverage upsert and report/finalize done gates
- Deferred mutate ledger writes until after OPSEC gates
- Accepted path@hex proof refs without sha256 prefix
- Filtered false-positive hosts in domain boundary checks
- Honored engagement target_urls in scope checks
- Stopped host ensureSynthesis from duplicating DAG merges
- Improved session write hygiene for root probe dumps
- Fixed fuzz jobs failing to respawn after sandbox wake
- Recovered repeated agent loops across all modes
- Fixed canonical remixed readiness issue
- Retried native OLLM stream decode and mid-stream read failures
- Retried native OLLM HTTP transport failures
- Stopped Orchestrator card flashing running after stop/reopen
Desktop
Improvements
- Improved Linux desktop packaging and testing configuration
- Improved session expansion logic
- Added FPS duty cycle management and settings overlay default-off behavior
- Reduced Blackbit cold-entry fanout for faster startup
- Lazy-loaded sidebar session descendants
- Completed Japanese translations
- Added Korean translations for terminal and session messages
- Added unsupported model version error handling
- Completed Korean localization
- Used the shared spinner for the file tab loading state
- Gave settings selects a resting border and scope row hover
- Optimized trusted host web contents management
Bugfixes
- Verified downloaded native tool binaries against pinned SHA-256
- Stopped rendering the [shell status] marker as command output
- Removed redundant terminal reconnecting message from Korean translations
- Upgraded Electron to 41.10.4 for security fixes
- Made perf overlay default off with duty-cycled updates
- Hardened logging against EPIPE on closed streams
- Avoided using destroyed webContents.id on window closed
- Upgraded electron-builder to fix AppImage CVE
- Stopped showing terminal error while auto-reconnecting
- Revealed rail labels on hover and explained disabled tools
- Made file tab strip scroll when tabs overflow
- Made Findings tab more flexible for agent-written markdown
- Kept WAR sidebar scroll position when worker list updates
- Unified appearance font controls
Core
Bugfixes
- Bumped Mermaid, DOMPurify, and reachable parser deps for security fixes (CDE-020/021)
Desktop
Bugfixes
- Fixed orchestrator sidebar click breaking chat scroll
- Skipped unsupported legacy stores during Tauri migration
- Hardened IPC fetch, WSL paths, store names, and senders (CDE-010/012/016/017)
Core
Improvements
- Refine session interruption handling and cleanup logic
- Improve fiber interrupt handling and session management
- Enhance challenge classification and live recon host ingestion
- Enhance provider disconnection logic and introduce visibility handling
- Enhance provider disconnection logic and add tests
- Implement stable fingerprinting for tool calls and enhance orchestration status handling
- Enhance orchestration status handling and add structured final validation
- Sync crown jewels after recon before each exploit wave
Bugfixes
- Refine tool part start time logic
- Refine structured final handling and terminal status logic
- Close crown-jewel compliance-theater loopholes
Desktop
Improvements
- Filter artifacts to display only markdown deliverables
- Add Berkeley Mono font support and update font preset handling
- Show connected providers in Blackbit model picker
Bugfixes
- Add X-Trial-Id/_trial to orgn.cde sandbox proxy clients
- Add Recent model section i18n for zh/zht parity
- Hug Agent/Ask mode selector to its label
- Unify session identity across shell
Core
- Fixed orchestrator fan-out starvation and torn handoff issue.
Desktop
- Added browser redaction helpers for sensitive data handling
- Improved domain discovery to collect and merge leaf loot host data
Core
Improvements
- Reconcile uncommitted orchestrate work from killed jobs on next wave
- Add radial view support and update D3 dependencies
- Commit operator tree and full host forensics at job completion
- Add new shell commands and update session metadata for enhanced testing
- Leaf proof scans and host-only job git catch-up
- Scan orchestrate leaf trees in prior inventory
- Inject sibling leaf paths for orchestrate synthesis
- Nest orchestrate jobs under parent leaf session_dir
- Spawn orchestrate leaves with private session_dir commits
- Fail-closed leaf write jail and leaf .blackbit audit root
- Pathspec engagement commits with sanitized leaf subjects
- Leaf taxonomy ensure and jail seed policy
- Resolve WAR roots from orchestrate leaf paths
- Enhance Blackbit Superiority Wave H and update C2 tooling
- Improve .blackbit tracking via engagement gitignore handling
Bugfixes
- Include WAR-root canonical loot store in operator tree commit
- Never stale-reap or abort a stage while its leaf commit is settling
- Commit leaf before publishing terminal stage status
- Jail typed blackbit session_dir to acting leaf, not operator root
- Block sessions/ trees rooted inside orchestrate leaves
- Default shell cwd to acting engagement dir so relative shell writes land correctly
- Re-root registry tool spans under leaf and cover end-to-end leaf write jail
- Read engagement config via operator walk-up from leaf paths
Desktop
- Add radial tree structure for session and job hierarchy
- Discover blackbit artifacts under orchestrate leaf dirs
Core
Improvements
- Add Blackbit Superiority Wave G Plan and enhance offensive tools
- Refactor endpoint handling and improve data parsing in Blackbit tools
Core
Improvements
- Add Blackbit Superiority Wave F Plan and Model Enhancements
- Add DeepSeek V4 Flash 0731 to BlackBit Allowed Models
- Commit engagement git after each subagent finishes
Bugfixes
- Fix engagement git commit typecheck failure
Desktop
- Show typed session-turn error details instead of a generic failure
Core
Improvements
- Add Ask Mode prompt and tests for agent functionality
- Implement Wave E adversarial integrity and sanitation enhancements
- Implement Blackbit Kerberos and relay tools with enhanced engagement signals
- Enhance usage line visibility in session tree row
- Retag and enhance nuclear geo sector site data
- Enhance Blackbit harness safety and credential management
- Add host-managed engagement session git for Blackbit
- Enhance orchestration handling and refine headline extraction
Bugfixes
- Host engagement git at WAR asset root
- Baseline engagement git per stage and ignore .blackbit
- Narrow completed task info for engagement git baseline
Desktop
Improvements
- Enhance sidebar session row styling and functionality
- Add WAR asset icon integration to project tabs
- Improve session page history management
- Add Chat16 icon
Bugfixes
- Rename context rail label
- Remove duplicate browser setting label
Core
Improvements
- Enhance math rendering options in chat context
- Improve Blackbit evidence handling and out-of-band claim propagation
- Add orchestrate dispute objects to catch contradicting claims
- Wipe context and reword safely before model-switch on safeguard trigger
- Show model vendor icon on orchestrator subagent rows
- Add CyberStrike verification stack: methodology tools, attack skills, hooks, adaptive budgets
- Enforce Blackbit engagement workspace hygiene and follow-up cleanup
- Update engagement workspace architecture docs
- Improve shell egress analysis and live-target detection
- Integrate VPN status handling into sidecar and live-probe decisions
- Improve session management and logging for nuclei commands
- Add sticky TLS JA3 fingerprint profile via curl-impersonate
- Require a stealth attack plan before high-noise exploit waves
- Add runtime counter-deception gate for operator-side pipe installs
- Hard-gate live probes until VPN or sticky proxy is set
- Add egress and proxy observability for redteam traffic
- Improve forensic signal map with LOD integration and async view handling
Bugfixes
- Fix gaps in Blackbit evidence harness
- Improve engagement workspace management and duplicate content handling
- Clarify engagement contract writing process
- Improve product mode tabs and prompt input UI
- Make coding agent prompt cooperate with harness runtime channels
- Make session Stop a genuine single-click interrupt
- Write orchestrate handoff before child launch
- Harden Blackbit evidence harness (refs, synthesis, WAR ledger)
- Fix shell Application Support mangling and scope hygiene reads
- Keep Blackbit workspace hygiene out of normal code mode
- Allow coding webfetch to localhost
- Restore harness work lost in a refactor
- Fix session containment, lease leak, and budget accounting issues
- Improve SQLi oracle health checks and probe integrity
- Fix findings content hash to support optional fields
- Require export report checksum and wire synthesis waive
- Improve export validation and orchestration stage handling
- Block synthesis seal when sibling stages are interrupted
- Make report MITRE mapping and export approval immutable
- Require live resolution for crown-jewel impact references
- Fix SQLi oracle false-positives and improve oracle honesty
- Require evidence for hard claims in gates and reports
- Enforce stable finding identities across waves
- Validate synthesis arithmetic and confirmed counts against ledger
- Require raw HTTP evidence instead of path names
- Prevent headline promotion without content-addressed evidence
- Require impact artifacts before crown-jewel settlement
- Allow mixed-success recon despite partial unreachable targets
- Reject confirmed findings with contradictory proof artifacts
- Gate finding promotion from Unverified to Confirmed
- Require raw HTTP corpus for injection and SSRF claims
- Restore unreachable-target detection accuracy
- Tighten blocked/unreachable stage classification
- Add hard claim gates against false promotions
- Detect semantic command failures beyond exit code
- Deny stage success when target is blocked or unreachable
- Split orchestrate stage status into process/test/impact
- Close OPSEC leaks in TLS/curl, live-target, counter-deception, and budget handling
- Close remixed OPSEC, webfetch user-agent, and proxy egress gaps
- Hard-gate scanner shells on VPN proxy check
- Honor sticky TLS profile in live probe path
- Apply stealth noise gate across engagement workers
- Default Web3 deliverable contract version so provenance gate enforces correctly
- Apply OPSEC and shell gates to general and explore workers
- Give redteam workers full OPSEC protections
- Enable Blackbit shell budget gates by default
- Budget background monitor and retry shell loops
- Align stealth navigator locale/timezone with latched geography
- Enforce WAF challenge stop/backoff and honest clearance state
- Ensure user-agent is injected consistently across chained shell commands
- Make sticky HTTP identity profile fail-closed across transports
- Apply engagement worker and host rate budgets consistently
- Strip product identity from outbound redteam traffic
- Fix pre-push typecheck blocking for app and opencode
- Fix Blackbit compaction continue framing gate
Desktop
Improvements
- Add DNS services icon on WAR page
- Show empty state in project filter submenu
- Add backdrop blur to dialog overlay
- Gate bypass-permissions behind a confirmation
- Unify selection state across the UI
- Add BlackBit stop controls for busy WAR assets
- Show agent status dots on BlackBit asset sidebar rows
- Hard-gate local BlackBit on host VPN
- Highlight find matches in transcript with design-aligned panel
- Add transcript turn index and find-in-session
- Add expandable right rail with text labels
Bugfixes
- Restyle release notes dialog to match design language
- Validate clone URL and scope it per clone mode
- Show team balance in bottom bar, amber below low threshold
- Repair branding gate and a flaky navigation test
- Lighten bypass chip, remember consent per chat, fix CTA
- Address review feedback on bypass-permissions gate and selection idiom
- Unify overlay dismissal through one shared Escape path
- Show session-row loader for cloud BlackBit chats
- Add Chinese localization for BlackBit stop controls
- Format credit balance as rounded USD and localize usage counts
Core
- Enhanced mindmap and forensic chart functionality
Desktop
- Enhanced findings board with markdown preview and domain discovery
- Full-width layout for WAR asset detail with improved target grouping
- Added D3 mindmap support and enhanced forensic signal map
Core
Improvements
- Enforce BlackBit agent spawning restrictions and permissions
- Improve report filename handling and update flow diagrams
- Add live C2, OPSEC/ENI overlays, cascade, scope bypass, spray/foundry/stagger
- Streamline orchestration handoff process
- Add Max Exploitation Remixed toggle (surface loop + forward chunks)
Bugfixes
- Harden Ultra exit and rename intensity tiers to Medium/Max/Ultra
Desktop
Improvements
- Bake admin district territories for all 196 geo packs
Bugfixes
- Fix tool group stability
- Snap impact territories to OSM coastlines
- Restore admin impact regions from territories.json
- Never render geoBoundaries polygons on the map
- Align impact zones to sites and add sector map filter
- Add missing Blackbit share and worldview translation keys
- Use state/province impact zones globally for visibility
Core
Improvements
- Added Antarctica section and global strategic sites generation to infra map
- Added User-Agent / header-persona WAF camouflage for Blackbit
Bugfixes
- Hardened WAF identity recovery based on real lab runs
Desktop
Improvements
- Integrated Blackbit share-invite API with improved error handling
Bugfixes
- Fixed missing Recycle16 icon typing in app
- Added missing Blackbit share and worldview translation keys
Core
- Enhance source control panel and session management
Core
- Improved sidebar behavior on mobile and desktop views
Core
Bugfixes
- Improved error handling for tool execution output
- Retry mid-stream connection drops for parallel subagents
Desktop
Improvements
- Added support for KwaiPilot models with new icon
- Added thinking effort icon and updated model selector for new vendors
- Added localization strings for share functionality and Windows support
- Updated agents tab icon
Bugfixes
- Fixed engagement file paths to be location-relative
- Fixed redteam Engagement UI display from blackbit_style
- Restored chat scroll when returning from subagent
- Disabled BlackBit local mode on Windows
Desktop
- Add settings button to bottom activity bar
- Unify team avatar handling across components
- Enhance bottom activity bar with environment toggle and product mode switcher
- Add sandbox URL support and localization to forensic signal panel
- Support reconnecting owned war assets
- Directly pin shared sandboxes