feat(nuclei): deep severity mode — per-scan/per-rule info/low unlock (P2-5)

feat(js): accept 2xx/206 + sourcemap recovery — sourcesContent scan (P2-13)

feat(param): hidden parameter discovery — katana -fx forms + arjun stage (P2-12)

feat(vhost): ffuf Host-header mode on live assets' origin IPs (P2-11)

feat(nuclei): port-aware network templates — naabu open ports → nuclei (P2-10)

feat(content): fuzz 4xx hosts + path-scoped origins + deep wordlist (P2-9)

feat(nuclei): scope-gated follow-redirects + WAF-aware rate/backoff (P2-8)

feat(naabu): fit port scan into wall-clock — top-100/rate 300/budget 1800s (P1-10)

feat(dns): classify SSRF-gate resolver outcomes — DNS-fail is not SSRF (P1-8)

feat(nuclei): salvage partial results of budget-killed batches (P1-9)

feat(nuclei): supply-chain pin for templates — commit + sha256, fail-closed (P2-1)

feat(diff): rescan diff / remediation tracking (P1-6)

feat(findings): FP-denylist per-program + severity-engine scoring (P1-5)

feat(nuclei): conditional CMS-tag exclusion via tech_stack fingerprint (P2-3)

feat(dns): DNS-enrichment worker for dns_jobs (P1-4)

feat(naabu): port-scan stage for services on non-standard ports (P1-1)

feat(js): structured secret scanning via gitleaks (P2-2)

docs(todo): reflect throughput scaling + runner kill fix in P2-6 notes

fix(runner): make kill escalation actually reach SIGKILL

fix(nuclei): scale batch -c/-rl by distinct hosts (throughput regression)