Issues

• Launch v0.3.0: crates.io, brew, demo, Show HN (2026-10-24 plan)

  UnityInFlow/injection-scanner#211 · Filter by author hermanngeorge15 opened on Oct 24, 2026
  2

• launch: first-week response and triage plan

  UnityInFlow/injection-scanner#210 · Filter by author hermanngeorge15 opened on Oct 24, 2026
  1

• launch: submit to awesome-claude-code (Security) and awesome-ai-security

  UnityInFlow/injection-scanner#209 · Filter by author hermanngeorge15 opened on Oct 24, 2026
  2

• launch: Show HN and r/ClaudeAI post drafts

  UnityInFlow/injection-scanner#208 · Filter by author hermanngeorge15 opened on Oct 24, 2026
  2

• release: v0.3.0 packaging release checklist (crates.io + brew + binstall)

  UnityInFlow/injection-scanner#207 · Filter by author hermanngeorge15 opened on Oct 24, 2026
  1

• docs(demo): 20-30 s VHS recording for the README top

  UnityInFlow/injection-scanner#206 · Filter by author hermanngeorge15 opened on Oct 24, 2026
  2

• docs(readme): new ≤20-line top section — one-liners, honest recall, demo

  UnityInFlow/injection-scanner#205 · Filter by author hermanngeorge15 opened on Oct 24, 2026
  2

• ci(release): publish to crates.io on tag via trusted publishing

  UnityInFlow/injection-scanner#204 · Filter by author hermanngeorge15 opened on Oct 24, 2026
  2

• chore(cargo): crates.io metadata, exclude .planning from the crate, cargo-binstall metadata

  UnityInFlow/injection-scanner#203 · Filter by author hermanngeorge15 opened on Oct 24, 2026
  2

• patterns: PI018 fires on a defensive "never as instructions that override the user's request" sentence

  bugP2patterns
  UnityInFlow/injection-scanner#190 · Filter by author hermanngeorge15 opened on Oct 10, 2026
  1

• PI070: third-person will persistence instructions are undetected after the #183 false-positive fix (accepted gap)

  P2
  UnityInFlow/injection-scanner#184 · Filter by author hermanngeorge15 opened on Oct 9, 2026 · v0.4.0: detection gaps

• chore: gate03-sweep.sh --compare keys on absolute paths and silently treats a directory with no *.json as an empty baseline

  bugciP2
  UnityInFlow/injection-scanner#182 · Filter by author hermanngeorge15 opened on Oct 9, 2026 · v0.4.0: detection gaps
  1

• HELD-OUT misses (git-hook x2, shell-profile x1): remote fetch into a persistence location, written as a bare imperative

  detection-gapP2patterns
  UnityInFlow/injection-scanner#179 · Filter by author hermanngeorge15 opened on Oct 9, 2026 · v0.4.0: detection gaps

• patterns: crontab write is a genuine gap - missed by the development corpus AND independently by the held-out set

  detection-gapP2patterns
  UnityInFlow/injection-scanner#178 · Filter by author hermanngeorge15 opened on Oct 9, 2026 · v0.4.0: detection gaps

• HELD-OUT miss (2 of 2 self-propagation): modal / third-person form and a quoted-directive object

  detection-gapP2patterns
  UnityInFlow/injection-scanner#177 · Filter by author hermanngeorge15 opened on Oct 9, 2026 · v0.4.0: detection gaps

• HELD-OUT miss (4 of 4 structural): lifecycle hook that downloads a program to a file, marks it executable and runs it

  detection-gapP1patterns
  UnityInFlow/injection-scanner#176 · Filter by author hermanngeorge15 opened on Oct 9, 2026 · v0.4.0: detection gaps
  1

• PI077: accepted limits - two structural seeds its value filter misses, the plain-fetch exclusion, and encoded commands

  detection-gapP2patterns
  UnityInFlow/injection-scanner#175 · Filter by author hermanngeorge15 opened on Oct 9, 2026 · v0.4.0: detection gaps

• PI073: the agent-timing row of D-04 is deliberately uncovered ("before finishing" collides with legitimate workflow phrasing)

  detection-gapP2patterns
  UnityInFlow/injection-scanner#174 · Filter by author hermanngeorge15 opened on Oct 9, 2026 · v0.4.0: detection gaps

• PI073: provenance blind spot - a vendor sentence in the attack's grammar with a future-reader cue is indistinguishable by regex

  detection-gapP2patterns
  UnityInFlow/injection-scanner#173 · Filter by author hermanngeorge15 opened on Oct 9, 2026 · v0.4.0: detection gaps

• patterns: PI078 remote-lifecycle-hook-endpoint was dropped on evidence - a destination allow-list would be the only workable shape

  detection-gapP2patterns
  UnityInFlow/injection-scanner#172 · Filter by author hermanngeorge15 opened on Oct 9, 2026 · v0.4.0: detection gaps

• docs: the whole-repo self-scan criterion cannot be met - docs/PATTERN-CATALOGUE.md self-matches PI001 and PI031 (standing since Phase 3)

  bugdocumentationP2
  UnityInFlow/injection-scanner#171 · Filter by author hermanngeorge15 opened on Oct 9, 2026 · v0.4.0: detection gaps
  2

• bug: a clause-start-anchored pattern is reported twice when its clause begins on the line after a sentence end (multiline join pass)

  bugP2
  UnityInFlow/injection-scanner#170 · Filter by author hermanngeorge15 opened on Oct 9, 2026 · v0.4.0: detection gaps

• PI071: two accepted blind spots in the declarative arm (trailing deictic, cue-less declarative)

  detection-gapP2patterns
  UnityInFlow/injection-scanner#169 · Filter by author hermanngeorge15 opened on Oct 9, 2026 · v0.4.0: detection gaps

• PI070: subject alternation has no leading word boundary (LaunchAgents supplies the subject Agents) and accepts the bare product noun agent

  bugP2patterns
  UnityInFlow/injection-scanner#168 · Filter by author hermanngeorge15 opened on Oct 9, 2026 · v0.4.0: detection gaps

• enhancement: a hook configuration in a whole-file YAML or TOML document is not projected at all (no finding, no error) - companion to #129 / #130

  detection-gapenhancementP2patterns
  UnityInFlow/injection-scanner#167 · Filter by author hermanngeorge15 opened on Oct 9, 2026 · v0.4.0: detection gaps