1.17.1 — Command-free MojoSec and faster test runs

2026-08-23

MojoSec can start reliably on standard Amazon Linux 2023 hosts without Python RPM bindings or package-manager commands, while the test runner gains faster, safer tiered execution and several shutdown and test-path fixes.

Added

• Added named core, framework, and all test tiers with tier listing, execution budgets, structured reports, and slow-test stack diagnostics.
• Added configurable TOTP recovery-code bcrypt cost while retaining the production default.

Changed

• Made framework test runs faster through longest-first scheduling, cached isolation analysis, HTTP readiness polling, and cheaper generated test-project settings.
• Isolated tests from ambient AWS credentials and external package-index access, and moved long-running or boot-time harnesses into explicit slow or serial tiers.

Fixed

• Fixed local queue shutdown deadlocks and job-engine waits that could delay process termination.
• Fixed fictional Mojo SMS sends incorrectly requiring unrelated provider configuration.

Security

• Replaced MojoSec's RPM bindings and RPM/DNF command execution with fast in-process discovery and bounded, descriptor-safe file integrity monitoring for approved system Python roots.
• Preserved metadata for oversized files while marking their content hash as skipped, keeping integrity scans bounded without silently dropping paths.