Maintenance updates
deep-security-recon
— Clearer scan results
- Domain blocklist checks now distinguish a confirmed listing from a provider query that could not be completed.
- Incomplete checks remain visible. A genuine listing is preserved when another provider is unavailable.
- Eight offline regression tests, existing scanner/security tests and the production build passed locally. Publication at preparation was pending release checks; change #16 records the verified rollout and any remaining limits.
- Lookup authorization now uses expiring identity- and target-bound grants. Related lookup scopes come only from server-observed results.
- Paid-provider operations use atomic claims and bounded response caching to prevent repeated/concurrent purchases under the same grant. Existing independent API/MCP authorization remains separate.
- Added grant regression tests; full tests and production build passed. Live scope rejection and free-DNS lookup checks passed without invoking paid providers.
Backfilled from merged changes and their recorded validation. This page records shipped maintenance; it does not claim every security issue is resolved.