dsh-armorbreak

ArmorBreak · 破甲

Evidence-first security analysis for AI agents.

Inspect with tools. Enforce scope in code. Keep the evidence.

ArmorBreak is an open-source toolkit for authorized reverse engineering, source-code review, packet analysis, digital forensics, and security research. One host-neutral Core powers DeepSeek Harness, MCP-capable agents, and standalone Node.js integrations. Models can help plan and interpret; they do not grant permission to act.

[Download Stable](https://github.com/LYL-Z/dsh-armorbreak/releases/tag/v2.2.0) · [Quick start](#quick-start) · [Integrations](#choose-an-integration) · [Release verification](#v220-stable-verification) · [Documentation](#documentation) · [中文](README.zh-CN.md)

> [!IMPORTANT]

> V2.2.0 Stable is published. It covers a Verified Core and Experimental Provider Integrations. Commercial OpenAI, Anthropic, and Gemini endpoints remain LIVE_UNVERIFIED; AI-assisted security review is not human certification. The historical Full GA contract remains gaReady:false with 18 blockers. Read [release verification](#v220-stable-verification) and [scope/limitations](#scope-and-limitations) before relying on a result.

> [!NOTE]

> V2.3.1 is the active Stable release candidate. V2.3.0 remains an unpublished historical candidate whose protected Tag Gate failed; its Tag and failure history are retained. V2.3.1 targets the Windows upgrade/rollback gate repair. It is not available as Stable until its public release page and exact assets are verified. The owner-approved implementation-agent self-review policy does not claim independent human security or legal certification. See [V2.3.1 release notes](docs/releases/v2.3.1.md), [V2.3.0 historical notes](docs/releases/v2.3.0.md), and [portable install requirements](docs/v2.3/portable-install.md).

Why ArmorBreak?

| The challenge | The design |

| --- | --- |

| Agent integrations reinvent execution | One Core behind DSH, MCP, CLI, and application APIs |

| Model output gets confused with permission | Policy and operator approval live outside the model |

| Findings are hard to reproduce | Task-scoped evidence, hashes, findings, and reports |

| First use assumes a paid model | Offline L0 analysis, with optional model integrations |

ArmorBreak is a research toolkit, not a guarantee that a target is vulnerable or a substitute for independent security assessment.

Quick start

Option A — verify the published Stable release

The release page carries six assets: the portable archive, its build manifest, CycloneDX SBOM, SHA-256 list, Stable Gate result, and GitHub attestation. Use Node.js 22+; the release CI used Node 24.

$rel = Join-Path $env:TEMP 'armorbreak-v2.2.0'
New-Item -ItemType Directory -Force $rel | Out-Null
gh release download v2.2.0 --repo LYL-Z/dsh-armorbreak --dir $rel

Get-FileHash "$rel\armorbreak-portable-2.2.0.tar.gz" -Algorithm SHA256
Get-Content "$rel\SHA256SUMS.txt"   # compare the archive and SBOM hashes

$extract = Join-Path $env:TEMP 'armorbreak-v2.2.0-extracted'
New-Item -ItemType Directory -Force $extract | Out-Null
tar -xzf "$rel\armorbreak-portable-2.2.0.tar.gz" -C $extract
Set-Location $extract

Expected archive SHA-256: 5e5aca98da18d4f0cb17db71cf57c5577f8f8f64810a30844bd5237b4ed7b630

Expected SBOM SHA-256: 2fd47a2b3970c563a747dffb093a33c042de2488b832604dbcce65ec374755a4

Verify provenance with GitHub CLI:

gh attestation verify "$rel\armorbreak-portable-2.2.0.tar.gz" `
  --repo LYL-Z/dsh-armorbreak `
  --cert-identity "https://github.com/LYL-Z/dsh-armorbreak/.github/workflows/attest.yml@refs/heads/main" `
  --source-ref refs/heads/main `
  --source-digest 94d606ed934d7d288c2946ae7d9d25582d8204a4 `
  --predicate-type https://slsa.dev/provenance/v1

Option B — run from the frozen source tag

git clone --branch v2.2.0 --depth 1 https://github.com/LYL-Z/dsh-armorbreak.git
cd dsh-armorbreak

First harmless L0 task

From either the extracted release or the tag checkout:

$demo = Join-Path $env:TEMP 'armorbreak-first-run'
New-Item -ItemType Directory -Force -Path "$demo/state", "$demo/workspace" | Out-Null
Copy-Item ./README.md "$demo/workspace/README.md"

$env:ARMORBREAK_STATE_ROOT = "$demo/state"
$env:ARMORBREAK_WORKSPACE = "$demo/workspace"
$env:ARMORBREAK_PRINCIPAL_ID = 'first-run-user'