ZV-2026-0199 · 2026-08-19 · ia-qa.com
ia-qa.com: risk_level on cors_test narrowed to a closed enum (safe, low, medium, high, critical, unknown); previously valid values may now be rejected.
breaking
What changed
risk_level on cors_test narrowed to a closed enum (safe, low, medium, high, critical, unknown); previously valid values may now be rejected.
What to do
If your agents call ia-qa.com, pin the new snapshot, patch the affected call sites, and let a green contract check confirm the fix. If you don't use the changed tools, nothing is required, but the rest of the ecosystem just learned about it at the same moment you did.
The redline
− open + enum[safe,low,medium,high,critical,unknown] cors_test − Audit the security attributes of cookies set by any URL. Fetches the URL and inspects all … + Audit the security attributes of cookies set by any URL. Fetches the URL and inspects all … cookie_security_audit − Test a URL for CORS misconfigurations. Sends preflight (OPTIONS) and cross-origin requests… + Test a URL for CORS misconfigurations. Sends preflight (OPTIONS) requests with various Ori… cors_test + error Field error was added to cors_test output. + origins_conclusive Field origins_conclusive was added to cors_test output. + origins_inconclusive Field origins_inconclusive was added to cors_test output. + origins_reachable Field origins_reachable was added to cors_test output. + warning Field warning was added to cors_test output. − Compute a deep structural diff between two JSON values. Returns added, removed, and change… + Compute a deep structural diff between two JSON values. Returns added, removed, and change… json_diff − Parse a CSV string into a JSON array of objects (or raw arrays). Handles RFC 4180 quoted f… + Parse a CSV string into a JSON array of objects (or raw arrays). Full RFC 4180: quoted fie… parse_csv − Test a regular expression pattern against an input string and return all matches with thei… + Test a regular expression pattern against an input string and return all matches with thei… regex_test + elapsed_ms Field elapsed_ms was added to regex_test output. + redos_detected Field redos_detected was added to regex_test output. + verdict Field verdict was added to regex_test output. − Scan text for toxic language, bias indicators, profanity, and harmful content categories. … + Scan text for toxic language, hate speech, bias/stereotype framing, violence, sexual and s… toxicity_scan + method Field method was added to toxicity_scan output.