Download Latest Version
v0.18.5 -- retention, self-awareness, and a tighter bar for tutorials source code.zip (2.5 MB)
Get an email when there's a new version of Doberman-Core
| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| README.md | 2026-07-23 | 1.2 kB | |
| v0.16.0 -- raise-only static egress classification (EB.1) source code.tar.gz | 2026-07-23 | 833.5 kB | |
| v0.16.0 -- raise-only static egress classification (EB.1) source code.zip | 2026-07-23 | 1.0 MB | |
| Totals: 3 Items | 1.9 MB | 0 | |
Egress-breakout defense (EB.1) — raise-only static egress classification
Doberman now parses the raw shell/package/git command an agent runs and surfaces the network destination hidden inside it — so an exfil attempt tucked into a shell_exec / package_install / git_op (curl, wget, pip, git push, …) is visible to the guardrails instead of slipping past as an opaque command.
- secret + command egress → BLOCK — the existing secret-exfil floor now fires
- command egress + one ambiguity signal → AUTH — dynamic host, route/proxy override, unbalanced quoting, the 256-char work cap, or multi-host, via
ExternalDestinationRule - parser crash → fail-closed objective floor — new
NormalizationFailureRule - command egress is excluded from the subjective baseline (can't be slow-boiled to "familiar"); secret-shaped host labels are HMAC-redacted before they reach the
SecurityObject
Strictly raise-only: never a new PASS, never a lowered verdict.
Also
doberman.__version__is now single-sourced from the installed package metadata, so it can never drift from the published version again.
Install: pip install doberman-core==0.16.0
