Skip to content

Termaxa

v0.11.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 17d AI Agents & Assistants
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

agent-safety ai-agents claude-code cli developer-tools devops
+6 more
git git-safety llm postgresql rust terraform

Affected surfaces

auth rbac

Summary

AI summary

Session circuit breaker hard‑denies repeated destructive intents after two attempts, closing a retry‑evasion gap.

Full changelog

Session circuit breaker. When an agent retries the same destructive intent — file delete, DB destroy, git force-op, infra teardown — with different syntax in one session, Termaxa now notices and hard-denies further variants after the threshold (default: 2). This closes the retry-evasion gap found in live agent testing, where an agent cycled rm -rf → Remove-Item -Recurse -Force → del /s /q until one spelling slipped past policy as a mere ask. Configure via circuit_breaker: in policy.yaml. Also: the starter policy now denies bulk deletes by default, and audit entries carry an intent classification (fully backward compatible with existing logs).

Full Changelog: https://github.com/termaxa/termaxa/compare/v0.10.5...v0.11.0

Security Fixes

  • Circuit breaker closes retry‑evasion gap allowing agents to evade policy via syntax variations for destructive operations
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Termaxa

Get notified when new releases ship.

Sign up free

About Termaxa

All releases →

Related context

Beta — feedback welcome: [email protected]