v0.7.2

What's Changed

• fix(rules): stop reading an IMDSv2 token request as an upload by @christian-taillon in #182
• ci: pin published v0.7.1 artifacts for native verification by @christian-taillon in #188
• refactor(cli): retire migrate commands, rules serve and Event 1/2 inputs by @christian-taillon in #185
• chore(release): prepare v0.7.2 by @christian-taillon in #190

Full Changelog: v0.7.1...v0.7.2

v0.7.1

What's Changed

• ci: verify stable releases natively; pin v0.7.0 by @christian-taillon in #163
• fix: harden operational settings and scanner health UX by @christian-taillon in #164
• fix: parse Codex copied subagent history safely by @christian-taillon in #165
• deps(deps): bump jsonschema from 0.60.1 to 0.60.2 in the rust-dependencies group by @dependabot[bot] in #167
• fix: reduce repeated scanner warnings and inflated detections by @christian-taillon in #166
• fix: preserve structured errors during outbox path-validation races by @christian-taillon in #176
• feat: optional scanner liveness heartbeat by @christian-taillon in #173
• feat: segment-scoped Rule v1 selection and exclusion (#172) by @christian-taillon in #174
• docs: AI assisted development note by @christian-taillon in #181
• chore(release): prepare v0.7.1 by @christian-taillon in #186

Full Changelog: v0.7.0...v0.7.1

v0.7.0

Highlights

• Source-native Canonical Observation v2 acquisition and Detection v2 evaluation now power CLI scan/watch and Rust embedding scans, with typed errors, detailed action findings, resumable scanning and structured MCP inventory.
• Compatibility fixes for current Claude Code transcripts, Codex rollouts and OpenCode v2 stores. Claude transcript ownership follows sessionId when an outer session_id differs after continuation; conflicting transcript identities still fail closed.
• Larger JSONL sessions use size-scaled bounds. Unsupported or oversized units are quarantined individually with content-free diagnostics; action evidence centers on the matched text while preserving redaction.
• Bundled telltale.community 0.1.1 rules, namespaced rule packages, command-effect matching and linked chains. Destructive-command alerts cannot distinguish requested actions from unrequested ones; review changed detection results and rebaseline deliberately.
• Operational settings files with effective-value provenance, hardened input and sink admission, and transactional Windows installation with verified artifacts and digest-bound receipts.

Compatibility

• Event 3.0 is frozen and unchanged. It remains the production output contract; already-persisted Event 3 bytes remain supported. Event 4 output is not activated. Rule v1 remains the rule-content format.
• New embedding wire forms: action record v1 (telltale.action.v1) and rule catalog v1 (telltale.rule_catalog.v1). Action record v1 is transitional and remains available for at least one minor release after its planned Event 4 successor ships. Move Git-pinned producers and consumers together.
• Embedding crates require Rust 1.88. The CLI and Console use the pinned toolchain without an MSRV promise. Retired record-evaluation APIs and source identities such as gemini.tmp are removed, not retained as compatibility aliases.
• Crates.io publication is not part of this GitHub Release.

Upgrade

1. Review the 0.7 migration guide and installation instructions. Pause scanning and back up configuration, scanner state, canonical JSONL and optional durable-delivery state as a coordinated set.

2. When upgrading from 0.6.x state with baseline schema 1 or 2, run the new binary's explicit state migration before scanning:

   telltale migrate state --from <OLD> --to <NEW>

   Use an absent destination and select the migrated destination for subsequent scans. Migration promotes the baseline to schema 3 and clears incompatible baseline contributions and derived snapshots; fingerprints, cursors, observations and other state families are preserved. Normal loading rejects the old baseline schema rather than silently resetting it.

3. Preserve OpenCode resume cursors. A first OpenCode v2 scan covers only the newest 5,000 messages, not the entire store; select explicit history scanning for older coverage. Cursor reset is intentionally lossy, not history recovery or safe rollback.

4. Validate configuration and rule packages, review detection changes and resume scanning. Replacing only the binary is not a coordinated rollback.

Verification

Stable source: 4201dcf8c09d0d8f471262bcf9bcd4dad9a5d90d.
The seven assets are five platform archives, telltale-sbom.cdx.json and SHA256SUMS.
The required-SBOM manifest, all checksums and six source-bound attestations passed verification.
Follow security and release operations to verify downloaded artifacts before execution.

Exact-source CI, CodeQL and the release workflow passed. Published-archive native verification passed on Windows x86-64, macOS x86-64/ARM64 and Linux x86-64/ARM64. This is not clean-host qualification: clean-host Linux and Windows checks remain BLOCKED. See the release qualification record for gate results and limitations.

Full Changelog: v0.6.0...v0.7.0

v0.7.0-rc.4

What's Changed

• ci: pin published v0.7.0-rc.3 artifacts for native verification by @christian-taillon in #159
• fix(claude): own continued transcripts by sessionId; prepare 0.7.0-rc.4 by @christian-taillon in #160

Full Changelog: v0.7.0-rc.3...v0.7.0-rc.4

v0.7.0-rc.3

What's Changed

• ci: pin published v0.7.0-rc.2 artifacts for native verification by @christian-taillon in #92
• docs: record v0.7.0-rc.2 publication and qualification status by @christian-taillon in #93
• docs: consolidate documentation and clarify agent navigation by @christian-taillon in #94
• fix(security): bound untrusted inputs and durable delivery work by @christian-taillon in #95
• feat(windows): add verified current-user install and uninstall lifecycle by @christian-taillon in #96
• chore(release): prepare 0.7.0-rc.3 source and exact-SHA gates by @christian-taillon in #97
• Add focused agent guidance and a bounded simplification workflow by @christian-taillon in #100
• chore: stop tracking AGENTS.md by @christian-taillon in #102
• feat(opencode)!: ingest OpenCode v2 session stores with quarantine, rolling drain and history scans by @christian-taillon in #101
• fix(claude): parse current Claude Code transcripts on Windows by @christian-taillon in #103
• fix(claude): close desktop install, CLAUDE_CONFIG_DIR and outage-alert gaps by @christian-taillon in #104
• fix(opencode): never sort v2 message payloads in SQLite by @christian-taillon in #106
• fix(codex): parse current Codex rollouts on Windows by @christian-taillon in #105
• ci(deps): bump the actions group with 3 updates by @dependabot[bot] in #98
• fix: align documentation and consolidate detection contracts by @christian-taillon in #108
• fix: resume unfinished OpenCode overlap from its raw cut by @christian-taillon in #109
• Add Windows development build and read-only host verification by @christian-taillon in #107
• test: check pinned upstream harness formats and generate contributor catalogs by @christian-taillon in #112
• feat: add explicit source-bound OpenCode cursor reset by @christian-taillon in #114
• fix(rules): reject unsupported detection severities before activation by @christian-taillon in #115
• fix(sources): expose reported Codex file-change results by @christian-taillon in #116
• Fix canonical efficacy misses (approval bypass, instruction override, Codex argv view) by @christian-taillon in #117
• test(sink): make durable dispatch timing deterministic by @christian-taillon in #118
• test(windows): capture lifecycle lock failures before cleanup by @christian-taillon in #119
• fix: reject Unicode line separators in rule packages by @christian-taillon in #121
• fix: close three detection gaps found by lab scenarios by @christian-taillon in #123
• chore: embed the published telltale.community 0.1.0 release by @christian-taillon in #127
• fix: harden rule packages and test embedded community detections by @christian-taillon in #128
• feat: add versioned action record and rule catalog for embedding hosts by @christian-taillon in #126
• test(windows): isolate bounded sharing-violation diagnostics by @christian-taillon in #129
• fix(copilot): detect CLI installs; retain unqualified home-log gap by @christian-taillon in #120
• Fix pinned Codex search, Plan, and assistant record gaps by @christian-taillon in #122
• fix: restore shell scoring parity without exhausting evidence by @christian-taillon in #130
• feat: give embedding hosts the record delivery key and event link by @christian-taillon in #133
• fix: make bundled detections follow what commands do by @christian-taillon in #135
• test(windows): capture first replacement refusal before rollback by @christian-taillon in #134
• test(windows): capture recovery-False sharing failures within existing bounds by @christian-taillon in #132
• fix(opencode): discover relocated and channel databases by @christian-taillon in #124
• test: refresh four active harness source pins by @christian-taillon in #125
• docs: define outcome-oriented PR scope and Git workflow by @christian-taillon in #136
• fix: repair harness parsing and bounded history processing by @christian-taillon in #139
• test: separate WAL creation from strict watch assertions by @christian-taillon in #140
• feat(config): deployable operational settings by @christian-taillon in #137
• chore(deps): update Rust and dependencies to stable by @christian-taillon in #138
• Correct responsibility ownership for MCP acquisition and JSONL persistence by @christian-taillon in #141
• chore(embedding): support Rust 1.85 and enforce the embedding MSRV by @christian-taillon in #143
• ci(deps): bump dtolnay/rust-toolchain from e2a55d2ffb04f378e9626c28d38b36d230d1e12f to 683b588c487a69d01f6c6ddf40f036ff682cc2c8 in the actions group across 1 directory by @dependabot[bot] in #110
• docs(codex): align fork-history ordinal contract with acquisition by @christian-taillon in #146
• Add agent instruction write and tool-result upload detections by @christian-taillon in #144
• fix(privacy): keep command flags and plain identifiers in evidence by @christian-taillon in #149
• feat(embedding): complete action record and rule catalog v1 by @christian-taillon in #150
• docs(embedding): correct inventory, wire and chain guidance; pin action precision by @christian-taillon in #151
• feat(scan): evaluate JSONL session sources up to 64 MiB whole (TT7) by @christian-taillon in #152
• deps(deps): bump notify from 8.2.0 to 8.2.1 in the rust-dependencies group by @dependabot[bot] in #153
• docs: record deferred OpenClaw and Qwen compatibility for 0.7 by @christian-taillon in #154
• chore: embed the published telltale.community 0.1.1 release by @christian-taillon in #155
• fix(deps): require Rust 1.88 and patched time for embedding by @dependabot[bot] in #145
• chore: keep internal docs, specs and agent tooling out of the repository by @christian-taillon in #156
• docs: put ownership notes in the code and trim release history by @christian-taillon in #157
• docs: mark action record v1 as transitional for 0.7.0 by @christian-taillon in #158

Full Changelog: v0.7.0-rc.2...v0.7.0-rc.3

v0.7.0-rc.2

What's Changed

• ci(deps): bump dtolnay/rust-toolchain from 6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 to 02cb101ec7c40f2c49e1d9714d64511d8e1b74de in the actions group across 1 directory by @dependabot[bot] in #52
• Prepare the 0.7 embedding contract for continued development by @christian-taillon in #89
• 0.7.0-rc.2 reconciliation: resume, URL-fact and rule-set hardening by @christian-taillon in #90

Full Changelog: v0.7.0-rc.1...v0.7.0-rc.2

v0.7.0-rc.1

What's Changed

• Record v0.6.0 stable deployment status by @christian-taillon in #47
• Update rustls for RUSTSEC-2026-0285 by @christian-taillon in #48
• deps(deps): bump the rust-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #35
• feat: add process-chain session correlation by @christian-taillon in #50

Full Changelog: v0.6.0...v0.7.0-rc.1

v0.6.0

What's Changed

• Restore strict Clippy compatibility with current stable Rust by @christian-taillon in #32
• Establish v0.6.0 detection evaluation contract and labeled corpus by @christian-taillon in #30
• Persist detection evaluation OpenSpec specification by @christian-taillon in #33
• Harden the v0.6.0 privacy and redaction boundary by @christian-taillon in #34
• Prepare v0.6.0 stable release metadata by @christian-taillon in #46

Full Changelog: v0.5.0...v0.6.0

v0.6.0-rc.3

Full Changelog: v0.6.0-rc.2...v0.6.0-rc.3

v0.6.0-rc.2

Full Changelog: v0.6.0-rc.1...v0.6.0-rc.2