Changelog

All notable changes to this project. Each entry links to its full per-version file in changelog/.

0.3.0 — 2026-10-30

Pentest evidence-review skill and corrected encoding and guide suggestions.

0.2.0 — 2026-10-15 · ⚠️ Breaking

Payload-tool deployment controls and corrected security references.

0.1.10 — 2026-10-09

Framework input repairs and correlated errors, with native multi-arch dependency installs and corrected registry transport metadata.

0.1.9 — 2026-09-20

Adopt mcp-ts-core 0.13.6, declare an explicit stateless session mode, and migrate the skill tree to framework-skills/

0.1.8 — 2026-08-21

Run architecture-neutral Docker build work on the native builder for reliable multi-architecture images

0.1.7 — 2026-08-21

Adopt mcp-ts-core 0.12.3 and MCP SDK v2 with strict tool contracts and wire-ready error and enrichment metadata

0.1.6 — 2026-06-20

Adopt @cyanheads/mcp-ts-core 0.10.9 — check-dependency-specifiers devcheck guard, plugin-manifest packaging checks, fresh-scaffold and worktree-deletion guards; re-sync six vendored scripts and fourteen skills; dependency refresh

0.1.5 — 2026-06-12

Adopt @cyanheads/mcp-ts-core 0.10.6 — explicit createApp identity, ValidationError error codes, ctx.enrich.truncated overflow signal; MCPB bundle node_modules agent-doc strip; Docker HEALTHCHECK + version label

0.1.4 — 2026-06-04

pentest_lookup_group (ATT&CK threat group/software lookup) + expanded WAF bypass dataset (10 → 34 entries, 3 new WAF products)

0.1.3 — 2026-06-02

Adopt @cyanheads/mcp-ts-core 0.9.21: per-request log context fix, secret-stripping in error messages, withRetry fail-fast on non-retryable errors

0.1.2 — 2026-05-31

Populate detection from ATT&CK v17 detection-strategy graph; word-boundary text truncation

0.1.1 — 2026-05-30

Public hosted endpoint at https://pentest.caseyjhand.com/mcp

0.1.0 — 2026-05-30

Initial release — offline methodology engine and payload workshop for authorized penetration testing, CTF, security research, and education. 6 tools, embedded ATT&CK Enterprise v19.1 + OWASP TG v4.2, no external API.