Added value: +[
+  {
+    "assertions": [
+      {
+        "tool": "search",
+        "type": "must_call"
+      }
+    ],
+    "trace": [
+      {
+        "role": "assistant",
+        "tool_calls": [
+          {
+            "function": {
+              "arguments": "{}",
+              "name": "search"
+            }
+          }
+        ]
+      }
+    ]
+  }
+]

Removed value: -"List of assertions to validate against the trace."

Previous value: -"[order] Tool that must be called after."New value: +"[order] Called after."

Previous value: -"[order] Tool that must be called first."New value: +"[order] Called first."

Removed value: -"Optional assertion identifier."

Previous value: -"[max_calls] Maximum number of allowed calls."New value: +"[max_calls]"

Previous value: -"[min_calls] Minimum number of required calls."New value: +"[min_calls]"

Previous value: -"[no_injection] Default low = critical patterns only (override, jailbreak, fake role delimiters). Higher catches more and fires on ordinary text (\"act as\", {{templates}}) — pattern matching, not a classifier."New value: +"[no_injection] Default low (critical patterns only); higher also fires on ordinary text."

Previous value: -"Tool name to check (for must_call, must_not_call, max_calls, min_calls)."New value: +"For must_call, must_not_call, max_calls, min_calls."

Previous value: -"Assertion type. no_injection runs prompt_injection_scan on every tool result (indirect injection: text a third party wrote that the agent then reads); no_pii runs redact_pii on the final answer (a leak to the user). Both report types and counts, never the matched values."New value: +"no_injection scans tool results (indirect injection); no_pii scans the final answer. Both report types and counts, never values."

Previous value: -"[no_pii] Comma-separated PII types (email, phone, ssn, credit_card, ip_address, jwt). Default: all."New value: +"[no_pii] Comma-separated: email, phone, ssn, credit_card, ip_address, jwt. Default all."

Previous value: -"[no_injection, no_pii] What to scan. Defaults: no_injection → tool_results, no_pii → answer (PII in a tool result is often legitimate — an order carries the customer email)."New value: +"[no_injection, no_pii] Override what is scanned."

Previous value: -"Trace format. auto (default) detects automatically."New value: +"Default auto."

Previous value: -"Agent execution trace as JSON (OpenAI messages array, LangChain run tree) or plain text log (Thought/Action/Observation format)."New value: +"The trace: JSON (messages array, run tree) or a Thought/Action/Observation text log."

Added value: +{
+  "description": "[no_injection] Default low = critical patterns only (override, jailbreak, fake role delimiters). Higher catches more and fires on ordinary text (\"act as\", {{templates}}) — pattern matching, not a classifier.",
+  "enum": [
+    "low",
+    "medium",
+    "high"
+  ],
+  "type": "string"
+}

Previous value: -"Assertion type."New value: +"Assertion type. no_injection runs prompt_injection_scan on every tool result (indirect injection: text a third party wrote that the agent then reads); no_pii runs redact_pii on the final answer (a leak to the user). Both report types and counts, never the matched values."

Previous value: -[
-  "order",
-  "must_call",
-  "must_not_call",
-  "max_calls",
-  "min_calls",
-  "no_error",
-  "recovery"
-]New value: +[
+  "order",
+  "must_call",
+  "must_not_call",
+  "max_calls",
+  "min_calls",
+  "no_error",
+  "recovery",
+  "no_injection",
+  "no_pii"
+]

Added value: +{
+  "description": "[no_pii] Comma-separated PII types (email, phone, ssn, credit_card, ip_address, jwt). Default: all.",
+  "type": "string"
+}

Added value: +{
+  "description": "[no_injection, no_pii] What to scan. Defaults: no_injection → tool_results, no_pii → answer (PII in a tool result is often legitimate — an order carries the customer email).",
+  "enum": [
+    "tool_results",
+    "answer"
+  ],
+  "type": "string"
+}

Removed value: -{
-  "items": {
-    "type": "object"
-  },
-  "type": "array"
-}

Removed value: -{
-  "type": "number"
-}

Removed value: -{
-  "type": "number"
-}

Added value: +{
+  "items": {
+    "type": "object"
+  },
+  "type": "array"
+}

Added value: +{
+  "additionalProperties": true,
+  "type": "object"
+}

Removed value: -{
-  "type": "number"
-}

Added value: +{
+  "items": {
+    "type": "string"
+  },
+  "type": "array"
+}

Added value: +{
+  "assertions": {
+    "items": {
+      "type": "object"
+    },
+    "type": "array"
+  },
+  "failed": {
+    "type": "number"
+  },
+  "passed": {
+    "type": "number"
+  },
+  "steps": {
+    "items": {
+      "type": "object"
+    },
+    "type": "array"
+  },
+  "total": {
+    "type": "number"
+  },
+  "verdict": {
+    "type": "string"
+  }
+}

Previous value: -[
-  {
-    "type": "string"
-  },
-  {
-    "type": "object"
-  },
-  {
-    "items": {},
-    "type": "array"
-  }
-]New value: +[
+  {
+    "type": "string"
+  },
+  {
+    "additionalProperties": true,
+    "type": "object"
+  },
+  {
+    "items": {},
+    "type": "array"
+  }
+]

Previous value: -[
-  {
-    "type": "string"
-  },
-  {
-    "type": "object"
-  },
-  {
-    "type": "array"
-  }
-]New value: +[
+  {
+    "type": "string"
+  },
+  {
+    "type": "object"
+  },
+  {
+    "items": {},
+    "type": "array"
+  }
+]

Previous value: -nullNew value: +{
+  "additionalProperties": true,
+  "type": "object"
+}