agent-threat-rules reached 783 detection rules, auto-published with no human in the release loop.

v3.5.12 carries 783 rules, up from 768. The release note describes the pipeline plainly: "tc-pr-back → safety gate → auto-merge → this release." GitHub The prior tagged release recorded 10/10 OWASP Agentic Top 10 coverage and PINT results of 62.7% recall at 99.7% precision, plus a precision repair taking four auto-blocking rules from 149 false positives to 37. Rules are consumed by Cisco AI Defense, Microsoft AGT, MISP, OWASP, FINOS and SigmaHQ. Detection content shipping to npm without a human release decision is a supply chain question all by itself.