numbat — The Cyber Toolchain

numbat v0.3.0

Mon, 19 Oct 2026 21:18:04 GMT

numbat v0.3.0 adds Muse Code monitoring/scanning, `rules test --json` output, retained tool I/O for rules, and opt-in compound-command enforcement.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `rules test --json` flag to `numbat rules test` for machine-readable rule-test output suitable for automation pipelines.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `--content full --content-scope messages` flags to scope full-content exports to message bodies only, now that `--content full` also captures redacted tool arguments and results. • Adds Muse Code live-hook monitoring, opt-in enforcement, and forensic at-rest session scanning via `numbat hook install --agent muse-code` and `numbat scan --agent muse-code`. • Retains tool inputs and results in the event record so CEL rules and content exports can act on them, including MCP tool inputs and browser context. • Adds opt-in enforcement for statically resolvable POSIX compound commands via rules marked `enforce: true`, extending blocking coverage beyond single-command pre-action hooks. • Improves subagent attribution in timeline and event records, preserving subagent identity and correlation across capture paths. Breaking changes: • Output schema is now `0.5.0`; update any downstream validators that enforce an exact version or closed schema. • `--content full` now includes redacted tool arguments and results (source code, file contents, patches); use `--content full --content-scope messages` to restore message-body-only export behaviour. • Rerun `numbat hook install` for each installed agent with the same options to update generated hooks and plugins after upgrading. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/numbat

numbat v0.2.0

Mon, 17 Aug 2026 20:57:45 GMT

numbat v0.2.0 adds live assistant/reasoning text capture and explicit message output controls for content inspection. • Adds explicit message output controls for governing what content is emitted from inspected message bodies. • Supports bounded message body inspection, limiting content analysis to defined byte ranges. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/numbat

numbat v0.1.1

Wed, 29 Jul 2026 16:53:49 GMT

numbat v0.1.1: initial release — endpoint visibility into AI agent activity with local detection, blocking, and forensic reconstruction. • Adds `numbat hook install --agent NAME|all` and `numbat hook uninstall --agent NAME|all` to wire and remove live integrations for supported desktop, CLI, IDE, and gateway AI agents. • Adds `numbat hook status [--agent NAME|all]` to inspect numbat-owned live integration configuration. • Adds `numbat scan [--agent NAME ... | --path FILE|DIR ...]` for read-only forensic reconstruction from on-disk agent session artifacts, emitting versioned NDJSON records without prior instrumentation. • Adds `numbat collect [--addr HOST:PORT]` to receive OTLP/HTTP protobuf logs from supported agents and emit normalized records. • Adds `numbat agents [--all]` for read-only discovery of supported local agents, reporting config signals, artifacts, live capture mode, and wired status. • Adds `numbat timeline [--agent NAME ... | --path FILE|DIR ...]` to reconstruct per-session chronological views from agent artifacts. • Adds `numbat ship --input-file F --http-url U` to tail a local NDJSON record file to an HTTP endpoint for remote delivery. • Adds `--rules-dir DIR` (repeatable) and `--no-builtin-rules` flags to `scan`, `collect`, `hook install`, and `rules check|list|test` for loading operator-authored YAML rules or replacing built-in rules by id. • Adds `numbat rules check`, `numbat rules list`, and `numbat rules test --fixture FILE` for validating, compiling, and evaluating CEL and multi-step sequence rules against NDJSON event fixtures. • Adds `numbat case build --from FILE` and `numbat case verify DIR` to create and verify portable case bundles with SHA-256 manifests. • Adds opt-in pre-action blocking via `--enforce` on `hook install`; rules with `enforce: true` in an operator `--rules-dir` emit enforcement decisions; all shipped rules are monitor-only by default. • Adds `--emit all` flag to `hook install` to write events, findings, indicators, and enforcement decisions to `~/.numbat/records.ndjson`. • Emits versioned NDJSON records (schema v0.2.0) for events, findings, enforcement decisions, indicators, and scan summaries, with JSON Schemas published under `docs/schema/v0.2.0/`. • Ships built-in CEL and multi-step sequence detection rules evaluated locally; supports custom YAML rules in operator-controlled directories. • Supports read-only artifact scanning with secret redaction; raw evidence files are opt-in via case bundles. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/numbat