Anonmyz v0.2.0
Anonmyz v0.2.0 is the first release under the Anonmyz name with the hardened local-first DLP pipeline, reproducible privacy demo, and one-command installation.
Install
Linux and macOS:
curl -fsSL https://raw.githubusercontent.com/3mre0s/ai-firewall/main/scripts/install.sh | shWindows PowerShell:
irm https://raw.githubusercontent.com/3mre0s/ai-firewall/main/scripts/install.ps1 | iexThen run anonmyz demo --non-interactive. The demo needs no API key and contacts only dynamically selected loopback ports.
Highlights
- Shared DLP engine for explicit proxy and MITM traffic, including bounded stream inspection and placeholder restoration.
- Large-body performance hardening: a safe 32 MiB body now allocates about 21 KiB instead of roughly 1.07 GiB.
- Configuration validation through
anonmyz doctorandanonmyz --check-config. - Safer Codex sessions with protected provider routing and fail-closed behavior.
- Trusted binary discovery and lifecycle tests for the VS Code and JetBrains integrations.
- Checksum-verifying installers for Linux, macOS, and Windows.
- Release archives for five OS/architecture targets, compatibility binaries, VSIX, SPDX SBOMs, checksums, and GitHub/Sigstore provenance attestations.
Security notes
- Remote upstreams require HTTPS; plaintext HTTP is limited to loopback development services.
- Standard upstream responses are capped at 64 MiB.
- New encrypted MITM CA keys use PBKDF2-HMAC-SHA-256 with 210,000 iterations and retain legacy read compatibility.
- Workspace and project-root binaries are not automatically trusted by IDE extensions.
Anonmyz remains pre-1.0. Explicit proxy mode and the VS Code integration are the recommended paths; evaluate transparent MITM and JetBrains support in your own environment before broad rollout.