mirror of
https://github.com/usestrix/strix.git
synced 2026-09-14 14:19:09 +08:00
95e085eb6c
Agents mostly left http_exchange_ids empty because the only nudge was the parameter docstring. The REPORTING rules now state that a finding validated through the proxy is not fully filed until the ids of its proving exchanges (exploit plus baseline) are attached, copied from list_requests/view_request, omitted only for findings with no captured HTTP at all, and attached after the fact with update_vulnerability_report when needed. The Caido section tells agents to note the ids as they test.