Skip to content

Anonmyz v0.2.0

Latest

Choose a tag to compare

@github-actions github-actions released this 25 Aug 13:52
3c48b36

Anonmyz v0.2.0

Anonmyz v0.2.0 is the first release under the Anonmyz name with the hardened local-first DLP pipeline, reproducible privacy demo, and one-command installation.

Install

Linux and macOS:

curl -fsSL https://raw.githubusercontent.com/3mre0s/ai-firewall/main/scripts/install.sh | sh

Windows PowerShell:

irm https://raw.githubusercontent.com/3mre0s/ai-firewall/main/scripts/install.ps1 | iex

Then run anonmyz demo --non-interactive. The demo needs no API key and contacts only dynamically selected loopback ports.

Highlights

  • Shared DLP engine for explicit proxy and MITM traffic, including bounded stream inspection and placeholder restoration.
  • Large-body performance hardening: a safe 32 MiB body now allocates about 21 KiB instead of roughly 1.07 GiB.
  • Configuration validation through anonmyz doctor and anonmyz --check-config.
  • Safer Codex sessions with protected provider routing and fail-closed behavior.
  • Trusted binary discovery and lifecycle tests for the VS Code and JetBrains integrations.
  • Checksum-verifying installers for Linux, macOS, and Windows.
  • Release archives for five OS/architecture targets, compatibility binaries, VSIX, SPDX SBOMs, checksums, and GitHub/Sigstore provenance attestations.

Security notes

  • Remote upstreams require HTTPS; plaintext HTTP is limited to loopback development services.
  • Standard upstream responses are capped at 64 MiB.
  • New encrypted MITM CA keys use PBKDF2-HMAC-SHA-256 with 210,000 iterations and retain legacy read compatibility.
  • Workspace and project-root binaries are not automatically trusted by IDE extensions.

Anonmyz remains pre-1.0. Explicit proxy mode and the VS Code integration are the recommended paths; evaluate transparent MITM and JetBrains support in your own environment before broad rollout.