@xaccefy/pi-casefile 0.7.4 → 0.7.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/package.json +1 -1
- package/src/workflow.ts +6 -0
package/package.json
CHANGED
package/src/workflow.ts
CHANGED
|
@@ -22,6 +22,12 @@ Think like a real external attacker, not a code reviewer. Technical bugs are che
|
|
|
22
22
|
|
|
23
23
|
**Subagent dispatch:** \`subagent({agent: "auditor"|"tracer"|"skeptic"|"exploit"|"chain"|"reporter", task: "..."})\` — dispatch specialists; do NOT do the specialist work yourself.
|
|
24
24
|
|
|
25
|
+
## Stage Machine (run in order — you are the coordinator)
|
|
26
|
+
|
|
27
|
+
RECON (you, inline) → **HUNT** (auditor subagents, one per attack class, parallel) → TRACE (tracer) → SKEPTIC (high-confidence only) → VALIDATE (exploit) → CHAIN (chain) → REPORT (reporter)
|
|
28
|
+
|
|
29
|
+
**HARD GATE — after RECON:** record the entry-point inventory, then STOP all inline reading/probing. Your very next tool call MUST be \`subagent({ tasks: [...] })\` dispatching HUNT auditors. If you catch yourself mapping a sink, reading a handler, or probing an endpoint beyond the recon inventory — that is HUNT work; stop, note it as a hunt task, and dispatch. Recon that bleeds into hunting is a pipeline violation, not progress.
|
|
30
|
+
|
|
25
31
|
## Case Lifecycle (State Machine)
|
|
26
32
|
|
|
27
33
|
\`\`\`
|