Fetching metadata from the HF Docker repository...
Oct 20 2 days ago 20:05 fix(auth): exact-match open paths for engine/status, metrics/inference, smtp/probe FortyDN Dev
_is_open_path() excludes exact prefix equals by design (health needed its own
_OPEN_EXACT entry); the new ops + worker routes are exact equals, so they were
still license-gated. Add them to _OPEN_EXACT — worker probes keep their own
X-Worker-Token guard. 19:53 v3.0.0: fully autonomous engine — remove MillionVerifier, add DoH DNS worker, AI risk scorer (HF PRO, circuit breaker), i18n, normalized verdicts, remote SMTP worker FortyDN Dev
- Autonomy: MillionVerifierProvider + mv_api_key/prefer_api_provider removed
by design; mailbox verdicts come only from the built-in SMTP engine or the
new remote SMTP probe worker (SMTP_WORKER_URL, shared-secret guarded).
- DNS/MX worker (spec 3.2/7.3): DNS-over-HTTPS on Google + Cloudflare with a
dual-resolver consistency check (dns_inconsistent), 24h MX / 1h negative
TTL cache, Punycode normalization; legacy dnspython stays as fallback.
- AI Risk Scorer (spec 3.4/Phase 4/6): HF Inference API (zero-shot NLI or
text-classification), circuit breaker (429/402/quota open permanently,
transient failures open after threshold), rule-based heuristic fallback,
PII-free feature strings, burn-rate instrumentation at /metrics/inference.
- i18n (spec 7.1/7.2): Punycode via idna, EAI/SMTPUTF8 deterministic refusal
(unsupported_eai) instead of fake verdicts.
- Normalized verdict (spec Phase 5) on ValidationResult: deterministic_verdict,
ai_risk_score, ai_label, fallback_used, cach… Sep 18 11:27 chore: squash history after secret scrub sitcod3 +1: uranusmediaconn Co-authored-by: uranusmediaconn <uranusmediaconn@users.noreply.huggingface.co> 
