Update to RegSentry

Changed files

Choose a file to see its text changes. Binary or large files show metadata only.

plugin.json →

skills/consent-evidence-review/SKILL.md →

skills/regsentry-consent-evidence-review/SKILL.md →

plugin.json

− removed · + added

--- before
+++ after
@@ -1,8 +1,8 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "regsentry",
-  "version": "1.1.3",
-  "description": "Inspect authorized public tracking signals and interpret consent evidence with RegSentry.",
+  "version": "1.2.1",
+  "description": "Inspect static tracking signals on an authorized public website, observe bounded browser behavior before consent and after supported reject-all or accept-all controls, compare dated observations, and export a plain-text evidence report. Incomplete phases stay unresolved. Results describe observed request attempts and supplied evidence, not legal compliance or proof that a fix is complete.",
   "author": {
     "name": "Soxoa LLC",
     "email": "hello@soxoa.com",
@@ -19,8 +19,8 @@
     "com.openai": {
       "interface": {
         "displayName": "RegSentry",
-        "shortDescription": "Review tracking consent",
-        "longDescription": "Use RegSentry to perform a bounded authorized static inspection, grade supplied consent evidence, and retrieve deterministic remediation playbooks without certifying legal compliance.",
+        "shortDescription": "Check website tracking",
+        "longDescription": "Inspect static tracking signals on an authorized public website, observe bounded browser behavior before consent and after supported reject-all or accept-all controls, compare dated observations, and export a plain-text evidence report. Incomplete phases stay unresolved. Results describe observed request attempts and supplied evidence, not legal compliance or proof that a fix is complete.",
         "developerName": "Soxoa LLC",
         "category": "Security",
         "capabilities": [],
@@ -31,68 +31,14 @@
         "composerIcon": "./assets/icon.png",
         "logo": "./assets/icon.png",
         "defaultPrompt": [
-          "Inspect the tracking setup on a public domain I am authorized to test.",
-          "Grade these consent-flow observations and show what still needs verification.",
-          "Give me the remediation playbook for this tracker."
+          "Review tracking signals on this public site I am authorized to test.",
+          "Compare these before-and-after consent observations.",
+          "Prepare an evidence report and retest plan."
         ]
       },
-      "review": {
-        "test_cases": {
-          "positive": [
-            {
-              "description": "authorized-static-inspection",
-              "prompt": "Inspect regsentry.com as a public domain I am authorized to test, with authorization acknowledged. Limit the inspection to the homepage static HTML.",
-              "tools_triggered": "inspect_site_tracking",
-              "expected_behavior": "Returns a bounded structured observation. States the static-scan scope. Returns runtimeVerificationRequired true."
-            },
-            {
-              "description": "default-deny-and-tracker-markup",
-              "prompt": "Inspect the owned reviewer-controlled public homepage regsentry-review-fixture.johnrarndt.workers.dev with authorization acknowledged. It contains inert Cookiebot automatic-blocking markup and an inert Hotjar reference. Report actual static signals without claiming runtime tracker firing.",
-              "tools_triggered": "inspect_site_tracking",
-              "expected_behavior": "Reports the Cookiebot default-deny signal. Reports the Hotjar markup. Does not claim that Hotjar fired at runtime."
-            },
-            {
-              "description": "before-consent-evidence",
-              "prompt": "Interpret this synthetic redacted observation for example.com, with consentBannerPresent true: one Hotjar request before_consent, requestCount 1, typedValueTransmitted false. Do not fetch the domain.",
-              "tools_triggered": "interpret_consent_evidence",
-              "expected_behavior": "Returns evidence grade strong. Keeps the interpretation technical rather than legal."
-            },
-            {
-              "description": "typed-value-evidence",
-              "prompt": "Interpret this synthetic redacted observation for example.com, with consentBannerPresent true: one Hotjar request before_consent, requestCount 1, typedValueTransmitted true. No actual typed value is supplied. Do not fetch the domain.",
-              "tools_triggered": "interpret_consent_evidence",
-              "expected_behavior": "Returns evidence grade direct. Includes a technical-only disclaimer."
-            },
-            {
-              "description": "hotjar-remediation-playbook",
-              "prompt": "Give me RegSentry's remediation playbook for Hotjar.",
-              "tools_triggered": "get_remediation_playbook",
-              "expected_behavior": "Returns ordered consent-gating steps. Includes a snippet and vendor documentation URL when present in the maintained playbook. Does not mutate a site."
-            }
-          ],
-          "negative": [
-            {
-              "description": "authorization-not-acknowledged",
-              "prompt": "Inspect regsentry.com with authorizationAcknowledged false. Preserve false and make no outbound inspection.",
-              "expected_behavior": "Rejects the input. Makes no outbound request."
-            },
-            {
-              "description": "reject-private-or-malformed-target",
-              "prompt": "Inspect private IP literal 127.0.0.1 with authorization acknowledged. Reject the target without internal-network access or substituting a public host.",
-              "expected_behavior": "Rejects the target. Performs no internal-network access."
-            },
-            {
-              "description": "reject-non-product-tracker-input",
-              "prompt": "Get a remediation playbook with the invalid tracker product value \"<script>alert(1)</script>\". Do not execute, fetch, or normalize the code into a product name.",
-              "expected_behavior": "Rejects the invalid tracker input. Does not execute or fetch the supplied content."
-            }
-          ]
-        },
-        "commerce": false,
-        "demo_recording_url": "https://soxoa-mcp-distribution.johnrarndt.workers.dev/videos/regsentry-1.1.0.mp4"
-      },
+      "review": {},
       "publication": {
-        "release_notes": "Portable public distribution package with existing live MCP tools, explicit task descriptions, five positive and three negative review cases. Version 1.1.1 corrects the directory category to match the existing tools; tool behavior and walkthrough are unchanged. Version 1.1.2 makes reviewer examples reproducible with an owned inert public HTML fixture and explicit synthetic consent observations; tools are unchanged. Version 1.1.3 removes an unsupported violation classification from static MCP tracker output and its declared schema. Tracker names, categories, consent signals and runtime-verification requirements remain available; internal product detection is unchanged."
+        "release_notes": "1.2.1: Updated portable workflow skills and current account, consent and recovery guidance. Package validation is separate from connected account acceptance and directory review."
       },
       "apps": "./.app.json"
     }