requirements.txt

# Core AI providers
anthropic>=0.40.0
openai>=1.56.0
tenacity>=9.0.0

# Data validation
pydantic>=2.0.0  # Typed schemas for pipeline data flow

# Security scanning tools
semgrep>=1.100.0  # SAST scanning with 2,000+ security rules

# Threat modeling
pytm>=1.3.0  # Deterministic threat modeling (STRIDE analysis)

# System monitoring (for performance tests)
psutil>=6.1.0  # Process and system utilities

# Sandbox validation (Phase 4)
docker>=7.0.0  # Docker Python SDK for isolated exploit validation

# Additional security dependencies
pyyaml>=6.0.2  # CVE-2020-14343 fixed in 5.4+
requests>=2.32.0  # Multiple CVEs fixed
urllib3>=2.0.0  # Security updates
certifi>=2024.8.30  # Certificate validation
cryptography>=44.0.0  # Multiple CVEs fixed
defusedxml>=0.7.1  # Prevent XML bomb attacks (billion laughs, entity expansion)

# Progress tracking and UI
rich>=13.0.0  # Beautiful progress bars and terminal UI

# Vulnerability chaining (Phase 5.5)
networkx>=3.0  # Graph algorithms for attack chain detection