Changelog
- ce7afb5 feat: ClusterFuzzLite integration and Hangul Filler normalization (#339)
- be84440 fix: SSRF hex/octal IP decoding + separate subdomain entropy threshold (#336)
- 5b12011 fix: SSRF trust gap for allowlisted domains resolving to internal IPs (#334)
- 0889578 fix: harden MCP input DLP with new patterns and path coverage (#337)
- 94d99be fix: harden chain detection and shell obfuscation coverage (#338)
- 6da4a85 fix: recursive response decode + remove numbered comment lists (#344)
- c3d7bf4 fix: reject MCP batch requests at ingress (#335)
- 4c4a7cb fix: widen DLP and tool scanner patterns for gauntlet coverage (#348)
- 208bedc fix: widen Tool Invocation pattern and add SYS closing tag to Instruction Boundary (#350)
- 7951e28 refactor: BodyScanRequest struct, server timeout constants, token field docs (#345)
- e71b19d refactor: consolidate signal recording + split mcp/input.go (#346)
- 3f0911a refactor: extract LogContext and InterceptContext structs for audit + intercept pipelines (#340)
- e0b2b07 refactor: extract relay and hop-by-hop helpers into relay.go (#347)