416rehman-DeepZero-Agentic-Vulnerability-Research-Pipeline/CHANGELOG.md

Changelog

0.4.0 (2026-07-27)

Features

• decompile: record whether a device exists without the hardware (6030ae1), closes #20
• engine: tell running out of time apart from going wrong (696a46b), closes #19
• pipeline: catch a prompt asking for values no stage produces (1c937fa), closes #23
• report: let the reader record what they have actually checked (523ed1a), closes #24
• report: rank results in one list and rebuild the palette (9aafd6a)
• report: record a result that was checked and did not hold up (3fd55ac), closes #25

Bug Fixes

• report: tell the two kinds of filter apart (6aa9320)
• scan: stop one bad batch from discarding a whole corpus of results (6a6badf), closes #21
• test: check the bundled prompt without needing a full environment (5c0fbda)

Refactors

• report: name the two assessment outcomes for what they are (93619be)

Documentation

• decompile: record what decompilation writes and guard its shape (ccca456), closes #22

0.3.0 (2026-07-26)

Features

• add a preflight check that catches an unauthenticated LLM before a run (d6023d6)
• assess drivers with Opus in the bundled loldrivers pipeline (190aeb5)
• assess every driver that survives scanning, worst first (0b1f899)
• browse a run's results in the browser, plus resume and auth fixes (cf6a7d0)
• Claude Code LLM backend (no API key) + fixes to run the loldrivers pipeline end-to-end on Windows (1c3e0e2)
• cli: calculate running stage stats dynamically from live manifest for real-time status accuracy (c4e467c)
• cli: scope each run's work directory per corpus (8f0e973)
• max concurrency pooling and rich progress bars (65397dd)
• report a vulnerability with what is needed to reproduce it (1ff9f7c)
• review a run's results in the browser with deepzero report (f2f8fe4)
• run pipelines with your Claude Code subscription, no API key required (d83d171)
• run the bundled loldrivers pipeline on Claude Code out of the box (9b41502)
• ui: complete overhaul of CLI dashboard and pipeline visualizations (4485608)

Bug Fixes

• bound decompilation concurrency (#12) + add auth preflight (#14) (c71dba1)
• cap decompilation concurrency so large runs don't exhaust memory (a9ed18f)
• cli: align status table to unconditionally display all pipeline stages in sequence (d60e30d)
• cli: bypass manifest cache and calculate stats directly from live sample files (1a5ce38)
• cli: gracefully handle validation and authorization exceptions without dumping tracebacks (66269a8)
• cli: uniformly load environment variables in dry-run commands (05f621e)
• decompile drivers that expose IOCTL handlers (dd0e861)
• explain why a vulnerability scan failed instead of failing silently (cab855c)
• explicit internal dev bindings mapping pytest-asyncio directly against Github Actions environment containers (3de5cba)
• ghidra: resolve UnicodeEncodeError in Jython environment (7eaa260)
• ghidra: sync internal timeout to prioritize global StageSpec timeouts (b8cd205)
• give a clear error when the vulnerability scan can't find its rules (dc2fee1)
• give the model the driver code it is asked to assess (caa3b0d)
• globally silence tool info logs during progress loop (fae8541)
• keep already-analysed samples in the pipeline when a run resumes (64f0003)
• keep runs from crashing when printing results on Windows (981c684)
• runner: flush active manifest metrics and state.json on forced sigint hard-kills (036bb1c)
• say whether a run is still going, not just what it last claimed (9dc0fb3)
• say whether a sample was examined or excluded (a2b471e)
• scan large corpora without losing every result (210f49f)
• show a clear error when a required pipeline setting is missing (9330427)
• show results as they land, and explain every outcome label (e687c75)
• stage: import threading for type hints (7664d5c)
• stop scanning the same routine once per IOCTL code (0a9146b)
• stop the driver vulnerability scan from silently finding nothing (ec7ea00)
• tell the user how to fix Claude Code auth when it is not signed in (07c85f3)

Refactors

• complete processor architecture and pipeline engine overhaul (7d67f93)
• drop #nosec tag and switch ghidra decompile processor to native asyncio execution (8413638)
• extract subprocess utils to engine/process.py, rename _run_inner, add --model to resume (9776aae)
• resolve pipeline coupling and technical debt (8764640)
• simplify logging color schema and enforce proper signal handling encapsulation (06e68c1)

Documentation

• add .env.example template for quick setup (2948862)
• add code of conduct, contributing guide, issue and PR templates (#8) (030e962)
• Completely overwrite README to precisely standardize project architecture and workflow execution schema (49a749f)
• fix baseurl for github pages routing (#10) (eb0e775)
• overhaul README with updated features and architecture (6afd696)
• prominently mark REST API as WIP / experimental in CLI usage section (98c3d6d)
• prominently mark REST API as WIP / experimental in CLI usage section (82a4d2a)
• streamline quickstart and eliminate fragmented installation section (4640b6c)
• strip explicitly opinionated terminology and genericize README scope correctly (4382889)
• update readme with new documentation links (#11) (c6ef8a9)
• use mark_interrupted (6ff7ad1)