|
1 | 1 | # Changelog |
2 | 2 |
|
3 | | -## 0.0.20 -- Real-Client MITM Validation |
| 3 | +## 0.0.22 - Scanner Rule Upgrades |
| 4 | + |
| 5 | +**Release date:** 2026-03-16 |
| 6 | + |
| 7 | +4 new trading logic rules, 3 bug fixes, 45 total rules. |
| 8 | + |
| 9 | +### New Rules |
| 10 | + |
| 11 | +- **Extended Hours Without Limit Order** (HIGH) - Flags `extended_hours=True` without limit order context. Market orders and non-day TIF are rejected in extended sessions. |
| 12 | +- **Leverage Without Cap** (HIGH) - Detects bare `leverage = 4` assignments with no min/max/config guard. Over-leverage amplifies losses and triggers margin calls. |
| 13 | +- **Hardcoded Notional Amount** (MEDIUM) - Catches large fixed dollar values like `notional = 100000`. Use calculated position sizing with risk budgets instead. |
| 14 | +- **Hardcoded Crypto Pair** (LOW) - Flags hardcoded crypto pairs like `symbol="BTCUSDT"` or `pair='ETH/USD'`. Make configurable for reusability. |
| 15 | + |
| 16 | +### Bug Fixes |
| 17 | + |
| 18 | +- **Infinite Loop Risk** - Now catches `while 1:` in addition to `while True:` |
| 19 | +- **Sleep Without Kill Switch** - Now matches single-decimal sleeps like `time.sleep(0.5)` |
| 20 | +- **Custom rule loading** - `load_custom_rules()` now reads `category` from YAML, so custom rules work with `--mode trading` and `--mode agent` |
| 21 | + |
| 22 | +--- |
| 23 | + |
| 24 | +## 0.0.21 - Housekeeping |
| 25 | + |
| 26 | +**Release date:** 2026-03-15 |
| 27 | + |
| 28 | +Cleanup release with no functional changes to the scanner or guard engines. |
| 29 | + |
| 30 | +- **License**: Changed from Proprietary to MIT |
| 31 | +- **README**: Rewritten with quick start guide, usage examples, and PyPI badges |
| 32 | +- **Text cleanup**: Removed em dashes and non-ASCII characters from comments, docstrings, and documentation |
| 33 | +- **CI**: Fixed live test exclusion and cross-platform CLI test compatibility |
| 34 | + |
| 35 | +--- |
| 36 | + |
| 37 | +## 0.0.20 - Real-Client MITM Validation |
4 | 38 |
|
5 | 39 | **Release date:** 2026-03-14 |
6 | 40 |
|
7 | 41 | This release marks the transition from "structurally validated" to "live MITM validated." The HTTPS interception path has been proven end-to-end with real HTTP clients through a trusted local CA. |
8 | 42 |
|
9 | | -### HTTPS MITM -- Now Real-Client Validated |
| 43 | +### HTTPS MITM - Now Real-Client Validated |
10 | 44 |
|
11 | 45 | - Validated with **curl**, **requests**, and **httpx** using a trusted local CA |
12 | 46 | - 24 MITM live-validation tests covering: clean forward, blocked request, untrusted CA failure, secret in URL/header/body, binary passthrough, gzip body scanning, large body forwarding |
|
0 commit comments