Skip to content

v0.14.1 — publish-gate honesty, token taint closure, receipt truth

Choose a tag to compare

View all tags
@zk-xyz zk-xyz released this 18 Jul 05:59
v0.14.1
ced7e5e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Truth-and-trust patch from adversarial review of 0.13.4. All five findings fixed:

  • Publish gate honesty: pass_with_advisories + publish_ready: false while color governance is unresolved — the strongest publication approval can no longer bless an unconfirmed primary
  • tokens.json taint closed + collision-safe keys: central colorTokenKey() (sanitized slug + hex suffix) for runtime and DTCG unknown-role colors; sanitized $description
  • Reproducible receipts: tree state recorded, timestamp+commit filenames
  • Structural output contracts in the second-agent benchmark (sentence limits, required shapes, fence-only)
  • Honest dogfood counting (record_kind excludes test records; real count: 4)

Full changelog: https://github.com/Brandcode-Studio/brandsystem-mcp/blob/main/CHANGELOG.md

Assets 2
Loading