v0.8.7

• release: 0.8.7 — bridge cold-start fix + adversarial-audit hardening (#58) (ca0cea0)
• security(cli): round-2 audit follow-ups on the bridge (#57) (8a5da40)
• harden(cli): pre-audit hardening of the bridge cold-start change (#56) (3a066d1)
• fix(cli): bridge connects in a fresh terminal even when the app is down (#55) (c192083)
• chore(security): pre-push GATE 0 blocks re-introducing the private external-verifier name (dcd35d0)

v0.8.6

[0.8.6] - 2026-07-08

Security-focused release prep for the repo-local Verax pre-push gate. No public Rust API change and
no runtime plugin behavior change for Victauri users; the hardened files are repo developer tooling and
are not included in the published crates.

Security

• Closed a tracked core.hooksPath bypass in the gate installer. If a maintainer had configured
  core.hooksPath=.githooks, the installer wrote its verifier into the tracked .githooks/pre-push
  file itself. A hostile branch could then replace that tracked hook and execute on git push before
  any integrity check ran. The installer now refuses to install when Git's active pre-push hook path
  is tracked by the repo, preserving the invariant that the verifier lives only in untracked hook
  storage.
• Fixed Windows-native core.hooksPath normalization under Linux/WSL-style bash. Git can report
  a configured D:\...\hooks path as a repo-prefixed pseudo-path when that config is read by Linux Git
  from a mounted Windows checkout. The installer now normalizes Windows drive paths for the active shell
  before writing or asserting the hook location, preventing false-success installs into a path Git will
  not execute.
• Expanded the integrity pin set for gate tooling. The installed verifier now pins
  .githooks/pre-push, .verax/gate.json, tools/install-gate.sh, and
  tools/test-install-gate.sh, so the local gate cannot run a branch-modified helper script through a
  fixed gate.json command.
• Retained the unconditional .verax/gate.json absent sentinel from the round-2 release candidate.
  A branch that adds gate.json after install still reads as drift and fails closed.

Added

• tools/test-install-gate.sh regression harness. Covers default-hook drift, add-after-install
  gate.json, tracked .githooks refusal, Windows-native hook path normalization, relative custom
  hooks, and Husky-v9 .husky/_ hooks. The local Verax gate now includes this cheap installer harness
  before the Rust fmt/clippy/test jobs.

Fixed

• Cleared RUSTSEC-2026-0204 in the lockfile by bumping crossbeam-epoch from 0.9.18 to
  0.9.20. The dependency is reached through Criterion benchmarks/dev-dependencies, not Victauri
  runtime code.

v0.8.5

• Harden 0.8.5 release readiness (#40) (6cc2d5b)
• harden: pre-empt adversarial audit — close 11 verified Low/Med findings (no API change) (#39) (0243cc3)
• release: 0.8.5 — docs correctness + honesty pass + victauri check tool-count fix (#38) (e6088ce)
• fix(compat): clean 3-app green run + harness hardening (inject/diagnostics/window-show) (#37) (2b548a5)
• fix: honest compat claim + compat-matrix drift + victauri check tool count (#36) (ccee316)
• chore(vscode): bump extension to 0.8.4 (version-sync with 0.8.4 release) (#35) (21e52ae)

v0.8.4

• ci: wait for webview bridge before diagnostics (e74df6f)
• fix(cli): tighten version-skew diagnostics (cfa17b1)
• chore(release): prepare 0.8.4 (0c455db)
• fix(mcp): backfill compat Mcp-Session-Id for stateless transport + version-skew DX (9d572fb)
• chore(compat): Tauri-2-only compat suite + drop stale flat docs (#33) (26d30e5)
• docs: add "Will Victauri work on your app?" compatibility decision matrix (#32) (b49962c)
• chore(vscode): bump extension to 0.8.3 (version-sync with 0.8.3 release) (#31) (139aafb)

v0.8.3

• fix(0.8.3): hidden-window screenshot errors clearly + query_db sql alias (live-4DA DX) (#30) (e640a92)
• chore: record 0.8.2 host-crash as VERIFIED FIXED (89-min soak) + gitignore AGENTS.md (#29) (f689232)

v0.8.2

• release: 0.8.2 — REAL host-crash fix (drain-loop amplifier removed); 0.8.1 was partial (#28) (0a04f83)

v0.8.1

• fix(0.8.1): panic-proof on_main dispatcher (adversarial-audit hardening) (#27) (fc50918)
• release: 0.8.1 — host-crash fix (main-thread webview access) + security/robustness hardening (#26) (fbbc732)
• fix(mcp): accept window/window_label/webview_label interchangeably on all webview tools (#25) (ef5e380)
• chore(vscode): bump extension to 0.8.0 (ship 0.7.10 security hardening) (#24) (f7ba559)

v0.8.0

• fix(demo-app): ipc_integrity_check asserts round-trip soundness, not zero errors (#23) (a5e3640)
• release: 0.8.0 — command catalog, cross-engine, robustness (GPT-5.5 audit-hardened) (#22) (5512356)
• docs: record command_catalog action + gauntlet/robustness Current State (#20) (1015819)
• feat: scale gauntlet (cross-engine net) + IPC command catalog + robustness fixes (#19) (af27332)
• docs(readme): add browser-mode removal notice + migration pointer (#16) (d090bb7)
• chore: remove browser mode (victauri-browser crate + extensions + npm) (#14) (ead3a53)

v0.7.11

• fix(0.7.11): resolve all 6 in-the-wild issues from the live 4DA MCP session (#13) (efd46b1)
• ci: enforce CI as a gate (aggregator job + timeouts + audit escape hatch) (#12) (eb9d975)

v0.7.10

• fix(release): close round-4 GPT-5.5 audit blockers for 0.7.10 (#11) (6eda9ca)
• fix(security): close 0.7.10 release blockers from the round-3 GPT audit (#10) (9d14ed0)
• fix(mcp): run the Streamable-HTTP transport stateless by default (#9) (7abf9d0)
• security: round-2 red-team hardening for 0.7.10 (#8) (6d9d430)
• security: harden 0.7.10 release surfaces (red-team audit) (#7) (22bb537)
• chore(release): 0.7.10 — real-frontend-traffic profiling + honest ghost detection (#6) (b9fd6de)
• fix(introspect+ghost): profile REAL frontend traffic + honest ghost detection (#5) (7073930)
• fix(npm+docs): npm 0.7.9 (ships hardened native host) + accurate A4 trust-model docs (7cbce51)
• docs(claude): add v0.7.9 Current State — adversarial-audit hardening summary (b3dac2d)