All pull requests

Pull requests

• FIX TAP and PAIR run their first turn after a prepended conversation

  #2822·Utkarsh Bahuguna (u7k4rs6) opened Sep 24, 2026Contributor·

  ·
  1

• FIX Scenario success rates ignore ERROR attempts recovered by retry or resume

  #2820·Utkarsh Bahuguna (u7k4rs6) opened Sep 24, 2026Contributor·

  ·
  1

• FIX HarmBench loader includes ContextString for contextual behaviors

  #2818·Utkarsh Bahuguna (u7k4rs6) opened Sep 24, 2026Contributor·

  ·
  1

• FIX MultiPromptSendingAttack reuses caller user_messages safely and keeps harm categories

  #2816·Utkarsh Bahuguna (u7k4rs6) opened Sep 24, 2026Contributor·

  ·
  1

• FIX HTTP targets store decoded response text and JSON keys may contain digits or hyphens

  #2814·Utkarsh Bahuguna (u7k4rs6) opened Sep 24, 2026Contributor·

  ·
  1

• FIX Retry out-of-range judge scores in scale scorers instead of failing

  #2812·Utkarsh Bahuguna (u7k4rs6) opened Sep 24, 2026Contributor·

  ·
  1

• FIX Seed removal list filters match whole elements instead of JSON substrings

  #2811·Utkarsh Bahuguna (u7k4rs6) opened Sep 24, 2026Contributor·

  ·
  1

• FIX JBB-Behaviors loader uses Goal instead of the Behavior label as the seed value

  #2810·Utkarsh Bahuguna (u7k4rs6) opened Sep 24, 2026Contributor·

  ·
  1

• FIX: reject invalid approximate matching thresholds

  #2806·fei (feiiiiii5) opened Sep 24, 2026Contributor·

  ·
  1

• FIX preserve empty Git settings

  #2805·Roman Lutz (romanlutz) opened Sep 24, 2026Contributor·

  ·

• FEAT: Shared sending core

  #2804·Roman Lutz (romanlutz) opened Sep 24, 2026Contributor·

  ·

• MAINT: Extract scenario-history page query into private memory component (#2766)

  #2803·Amruth Vamshi (AmruthVamshi) opened Sep 24, 2026Contributor·

  ·
  1

• FEAT: Add a HackAPrompt target

  #2801·Dmitry Voropaev (v0ropaev) opened Sep 23, 2026Contributor·

  ·
  1

  12

• MAINT: extract attack factory converter configuration composition

  #2799·ahcrm-core opened Sep 23, 2026·

  ·
  3

• FIX: stop scorer-metrics registry rewrites from deleting entries they could not read

  #2797·fei (feiiiiii5) opened Sep 23, 2026Contributor·

  ·
  1

  9

• FEAT: Extract attack factory constructor compatibility rules (#2764)

  #2795·Vardhman Gupta (Kaap10) opened Sep 23, 2026Contributor·

  ·
  1

  2

• FEAT: Indexed attack analytics

  #2792·Roman Lutz (romanlutz) opened Sep 23, 2026Contributor·

  ·

• FIX: report canonical technique identity for PromptInject run summaries

  #2791·Mallika Kalangi (bhargavikvmpl-2001) opened Sep 23, 2026Contributor·

  ·
  1

  1

• FIX preserve browser auth lifecycle through cancellation

  #2789·Roman Lutz (romanlutz) opened Sep 23, 2026Contributor·

  ·

• [BREAKING] FEAT Add Scenario dataset cap scopes and provenance

  #2787·Roman Lutz (romanlutz) opened Sep 23, 2026Contributor·

  ·
  6

• FEAT: openTelemetry tool-call scorer attack

  #2778·Richard Lundeen (richlundeen) opened Sep 22, 2026Contributor·

  ·
  2

• MAINT: Fix JUnit result publication condition and add raw artifact upload

  #2777·Tech Guy (lukiod) opened Sep 22, 2026·

  ·
  1

  1

• FEAT: Plan-Time Modality Validation and Policy for Scenario Runs

  #2773·Victor Valbuena (ValbuenaVC) opened Sep 22, 2026Contributor·

  ·
  17

• FEAT: Add LayaRefusalScorer, a local CPU refusal scorer

  #2772·WatchTree-19 opened Sep 22, 2026Contributor·

  ·
  9

• FEAT: Add A2ATarget for Agent-to-Agent protocol communication

  #2771·Radoslaw Brus (rbrus) opened Sep 22, 2026·

  ·
  1