Zum Hauptinhalt springen
tsecurity.de LIVE
Echtzeit-Radar & Feeds
Alle RSS Feeds
👥 Community & Social
YouTube Security VideosGoogle Cloud Tech: Gemini is coming to your city(24.09.2026 um 15:00 Uhr)
AI & KI NachrichtenGoogle’s latest moonshot to put machine learning in space(24.09.2026 um 15:12 Uhr)
Windows Tipps & SecurityPoll: What's your favorite Surface of 2026?(24.09.2026 um 14:58 Uhr)
Sichere ProgrammierungStreaming Materialized Views for Live Read Models (2026)(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungA Day Is Not 86400 Seconds: The DST Bug in Your Date Math(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungSetting up Traefik: reverse proxy with automatic HTTPS(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungA 200 OK response does not prove a secret leak(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungHow hot do you like it?(24.09.2026 um 15:05 Uhr)
YouTube Security VideosGoogle Cloud Tech: Gemini is coming to your city(24.09.2026 um 15:00 Uhr)
AI & KI NachrichtenGoogle’s latest moonshot to put machine learning in space(24.09.2026 um 15:12 Uhr)
Windows Tipps & SecurityPoll: What's your favorite Surface of 2026?(24.09.2026 um 14:58 Uhr)
Sichere ProgrammierungStreaming Materialized Views for Live Read Models (2026)(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungA Day Is Not 86400 Seconds: The DST Bug in Your Date Math(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungSetting up Traefik: reverse proxy with automatic HTTPS(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungA 200 OK response does not prove a secret leak(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungHow hot do you like it?(24.09.2026 um 15:05 Uhr)
Intelligence View
⚡ tsecurity.de Intelligence

PromptLedger v0.7 — Turning prompt evaluation into local regression gates

Devlog — Part 6 PromptLedger v0.7 is out. The previous release made prompt history easier to inspect. This release makes prompt changes easier to evaluate. Until now, PromptLedger could answer questions such as: What changed? Which v…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!




Devlog — Part 6



PromptLedger v0.7 is out.



The previous release made prompt history easier to inspect.



This release makes prompt changes easier to evaluate.



Until now, PromptLedger could answer questions such as:




  • What changed?

  • Which version is in production?

  • Which version was marked stable?

  • Why was a new version created?



But one important question was still missing:




Did the new prompt actually perform better?




A text diff can show that a prompt changed.



It cannot tell you whether accuracy improved, latency increased, cost became unacceptable, or an important behavior regressed.



PromptLedger v0.7 introduces evaluation runs, metric comparisons, and policy-based regression gates.



The workflow is now:




version → diff → review → evaluate → gate → promote












Evaluation runs



PromptLedger can now store benchmark results produced by external tools.



Each evaluation run is attached to a concrete prompt version and can include:




  • benchmark suite

  • model

  • dataset hash

  • numeric metrics

  • run metadata

  • creation time



For example:




{
"suite": "support-v1",
"model": "test-model",
"metrics": {
"accuracy": 0.91,
"latency_ms": 420,
"cost_usd": 0.018
},
"metadata": {
"seed": 42,
"sample_count": 500
}
}






A prompt version can have multiple evaluation runs.



This is important because the same prompt may be tested:




  • on multiple models

  • against different datasets

  • with different seeds

  • across several benchmark suites

  • multiple times as the surrounding system changes



Evaluation history is stored separately from prompt history, so repeated runs are preserved instead of overwriting each other.









Recording results



PromptLedger does not run the benchmark itself.



External tools produce the evaluation result, and PromptLedger records it.




promptledger eval record \
--id onboarding \
--ref staging \
--file evaluation-result.json






The reference may be a concrete version or a label such as prod or staging.



Even when a moving label is used, the evaluation is stored against the concrete version the label currently points to.



This keeps the historical record stable.









Comparing prompt versions



Evaluation runs can be compared between two prompt versions or labels:




promptledger eval compare \
--id onboarding \
--from prod \
--to staging \
--suite support-v1 \
--model test-model






Example output:




Evaluation comparison: onboarding
Suite: support-v1
Model: test-model

Metric prod/v1 staging/v2 Delta
accuracy 0.84 0.91 +0.07
latency_ms 380 410 +30
cost_usd 0.016 0.018 +0.002






PromptLedger selects compatible runs deterministically.



It does not silently compare results from unrelated benchmark suites or different models.



A comparison is only useful when both sides describe the same experiment.









Regression gates



Comparisons show what changed.



Regression gates decide whether the change is acceptable.



A gate policy defines:




  • whether a metric should be higher or lower

  • how much absolute regression is allowed

  • how much percentage regression is allowed



Example policy:




{
"suite": "support-v1",
"model": "test-model",
"metrics": {
"accuracy": {
"direction": "higher",
"max_regression": 0.02
},
"latency_ms": {
"direction": "lower",
"max_regression_percent": 15
},
"cost_usd": {
"direction": "lower",
"max_regression_percent": 20
}
}
}






Run the gate with:




promptledger eval gate \
--id onboarding \
--from prod \
--to staging \
--policy promptledger-gate.json






Example output:




PASS accuracy: candidate improved by 0.07
PASS latency_ms: regression within allowed threshold
PASS cost_usd: regression within allowed threshold

Gate passed.






When a regression exceeds the policy limit, the command returns a non-zero exit code.



That makes evaluation gates suitable for CI workflows.



A prompt change can now fail a build in the same way as a failed test or performance regression.









Dashboard evaluation history



The local dashboard has also been updated.



Prompt details can now show:




  • evaluation run history

  • benchmark suite

  • model

  • dataset information

  • metrics

  • metadata

  • metric differences between versions



This connects prompt history and evaluation history in the same interface.



A developer can inspect what changed in the prompt and how the measured behavior changed alongside it.



The dashboard remains local-first, and prompt content remains read-only.









Sequence-aware prompt diffs



The dashboard comparison system was also improved.



The previous implementation compared lines mainly by their array position.



That works for simple replacements, but inserting one new line could make every following line appear changed.



The new comparison uses a sequence-aware diff based on Python’s difflib.SequenceMatcher.



It now handles:




  • inserted lines

  • removed lines

  • replaced lines

  • unchanged sections

  • aligned line numbers



This produces a much more accurate view of how a prompt changed.









What changed in v0.7






Dedicated evaluation history



Benchmark results now live in their own evaluation-run records instead of being treated as static prompt metadata.






Version and label comparisons



Evaluation results can be compared through concrete versions or release labels such as prod and staging.






Policy-based regression gates



Teams can define acceptable quality, latency, and cost regressions through JSON policies.






CI-friendly exit codes



Passing gates, detected regressions, invalid input, and operational failures return distinct exit codes.






Dashboard evaluation visibility



Evaluation runs and metric differences are now visible alongside prompt history.






Improved visual diffs



Prompt comparisons now use a sequence-aware algorithm instead of simple line-position matching.






Non-destructive migration



Existing PromptLedger databases are migrated to the new schema without removing prompt versions, labels, markers, or metadata.









Design boundary



PromptLedger still does not execute prompts.



It does not call:




  • OpenAI

  • Anthropic

  • Gemini

  • Ollama

  • any other model provider



It also does not include an automatic LLM judge.



That separation is intentional.



PromptLedger should remain:




  • local-first

  • provider-independent

  • deterministic

  • lightweight

  • compatible with external benchmark systems



Your evaluation framework runs the experiment.



PromptLedger keeps the history, compares the results, and applies the release policy.









Testing



The v0.7 release includes 119 passing tests covering:




  • database migrations

  • repeated evaluation runs

  • label resolution

  • malformed metrics

  • non-finite values

  • comparison compatibility

  • deterministic ordering

  • missing metrics

  • zero baselines

  • regression policies

  • CLI exit codes

  • dashboard endpoints

  • sequence-aware diffs



The PowerShell file-based evaluation workflow was also tested end to end.









Installation






pip install --upgrade promptledger






Initialize a local database:




promptledger init






Launch the dashboard:




promptledger dashboard












Closing



Prompt version control is useful, but version history alone cannot tell you whether a release is safe.



A new prompt may look cleaner while producing worse answers.



It may improve accuracy while increasing latency or cost.



It may pass one benchmark while silently regressing another.



PromptLedger v0.7 connects prompt changes to measurable results.



The goal is not to build another evaluation framework.



The goal is to provide the missing release layer between prompt experimentation and production:




What changed?
How did performance change?
Is the regression acceptable?
Should this version be promoted?






PromptLedger is moving from a tool that stores prompt history to a tool that helps control prompt releases.








PyPI: PyPI



GitHub: GitHub



LinkedIn: LinkedIn



Website: Website

CTI Threat Relationship Graph3 Knoten / 2 Relationen
CVE / Incident Software MITRE ATT&CK CWE Weakness IoC
SOC Incident Playbook: Remote Code Execution (RCE) Defense
title: Detect Exploitation - PromptLedger v0.7 — Turning prompt evaluation into local regression gates
id: fc66282e-350e-4863-ad5e-ae25d08c64ac
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
  - attack.t1059
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-24"
        description = "YARA Signature for "
    strings:
        $str = "PromptLedger v0.7 — Turning pr" ascii wide
    condition:
        any of them
}
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich PromptLedger v0.7 — Turning prompt evalu.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten PromptLedger v0.7 — Turning prompt evaluation into local regression gates

Thematisch verwandte Begriffe: PromptLedger, Turning, prompt, evaluation · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-97179 | A security vulnerability has been detected in O2OA up to 9.5.3/10.0.2. T…
Advisory →
TTS Reader • tsecurity.de Voice
tsecurity.de Icon
tsecurity.de App
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
🔖 Gespeicherte Artikel
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel Rechts: nächster Artikel unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel TTP ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...

Zurück: vorheriger Vor: nächster
↗ Original-Quelle
Social Reaktionen Deine Reaktion zählt
Einstufung & Relevanz-Poll 0 Stimmen
In sozialen Netzwerken teilen 1-Klick