This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+14 more
Affected surfaces
Summary
AI summaryDirectly reports compliance for PII scans and marks other items as "await verification" instead of false positives.
Full changelog
回应"待核验的不能直接做吗"。
变更
- 「敏感个人信息识别」(PIPL §28) 直接连扫描结果:扫描本就在文件里找身份证/手机号/银行卡——发现即判「🔴 不合规 + N 处」,未发现即判「🟢 合规」,不再标 ⚪ 待核验
- 诚实边界:其余待核验项(网络日志留存 6 个月、运行时拦截违禁内容、数据外发拦截、访问控制等)本质是运行时行为,静态扫描看文件原理上查不了——标"待核验"而非虚报"已合规"(那才是骗你)
全套 303 测试通过。
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About jnMetaCode/shellward
AI Agent Security Middleware & MCP Server with 8-layer defense including prompt injection detection, DLP data flow tracking, command blocking, and PII detection. 7 MCP tools, zero dependencies.
Related context
Related tools
Beta — feedback welcome: [email protected]