Hedge v0.5.2 - Judge-ready real-repo release

Install without rebuilding and pin the Action to: b644e7b

Highlights:

• Evidence-linked security architecture diffs for supported TypeScript pull requests
• Next.js App Router and Pages API routes, plus basic Express and common Prisma, storage, network, workflow, and control patterns
• Repository compatibility reporting in hedge doctor
• Credential-separated collect, reason, and publish jobs
• No architecture delta means no model call and no PR comment
• Experimental draft remediation and four-part counterfactual verification

The frozen ten-case live batch is preserved as an operational FAIL: 12 of 30 runs failed, while accepted results retained exact evidence and the instruction boundary held. See the bundled documentation for the complete claim boundary and human adjudication.

Hedge v0.5.1 — Installable Build Week release

Hedge v0.5.1 is the directly installable OpenAI Build Week release.

What changed since v0.5.0:

• The bundled Node 24 Action entry point is committed and executable from repository refs.
• A GitHub-hosted self-test invokes uses: ./ and verifies Action outputs.
• Clean CI rebuilds the Action and rejects any stale or environment-dependent bundle.
• Optional packages outside the repository can no longer affect esbuild output.
• The public lockfile, deterministic evaluation/schema generators, hosted dashboard, provenance record, and full release matrix remain included.

Validation on merge commit 2c900a72eb3fc6b0b1e41633f0338bd57c6deb3f:

• GitHub Action self-test: passed
• Clean GitHub CI: passed
• 121 unit/contract/schema tests: passed
• 45/45 bundled deterministic evaluation cases: passed
• Release validation: passed
• Executable demo validation: passed
• npm high-severity audit: zero reported vulnerabilities

The attached dashboard is recorded deterministic output, not a live GPT-5.6 run. Hedge surfaces architecture changes and design risks; it does not claim to find or prove vulnerabilities.

Use SHA256SUMS to verify downloaded assets. Production workflows should resolve this tag and pin the full commit SHA.

Hedge v0.5.0 — OpenAI Build Week

Hedge is an evidence-linked security architecture diff for TypeScript pull requests. This Build Week release establishes the public, reproducible v0.5 judge experience.

Highlights:

• Deterministic Next.js and basic Express architecture extraction
• Silence when no modeled architecture delta exists
• GPT-5.6 Luna/Sol routing through strict Structured Outputs
• Evidence validation, explicit invariants, and recorded allow/warn/block decisions
• Approval-gated Codex draft-remediation workflow
• Counterfactual verification lifecycle and tamper-evident proof bundles
• 121 passing unit/contract/schema tests and 45/45 bundled deterministic evaluation cases
• Hosted no-install dashboard and prebuilt CLI/Action bundles

The attached dashboard is recorded deterministic output, not a live GPT-5.6 run. Hedge surfaces architecture changes and design risks; it does not claim to find or prove vulnerabilities.

Validation on the release commit:

• npm run typecheck
• npm test
• npm run eval
• npm run build
• npm run validate:release
• npm run validate:demo
• npm run audit:high

See SHA256SUMS before using downloaded assets.