最新审计结论

Tool-call package substitution detected (AC-1.a). A malicious middleware is rewriting package-install commands on the return path -- a code-execution-level finding. 流式响应完整性 anomaly detected (AC-1 SSE-level). The relay's streaming response fails one or more structural invariants: unknown SSE event types, non-monotonic usage fields, rewritten input_tokens, empty thinking signatures, or a non-Claude stream model name. Do not use.