v0.3.0

Changelog

• 094af3d Merge pull request #4 from DavidGodefroid/docs/readme-site
• 4d2518a Merge pull request #5 from DavidGodefroid/fix/v0.2.1-spec-gaps
• 89791b4 Merge pull request #6 from DavidGodefroid/feat/site-readme-polish
• ee7a757 Merge pull request #7 from DavidGodefroid/feat/site-responsive
• 3862413 build: bump lockkit to v0.2.1 (#20)
• b9bb98e chore(release): prepare v0.3.0 (#23)
• 966a9e5 ci(release): refuse to release a tag that is not on main
• 489c445 feat(doctor): report plugins recorded as yanked
• 4294992 feat(marketplace): warn about weak unofficial signer patterns
• 258f168 feat(plugin): persist yanked versions and refuse to run them
• 78ea251 feat: Docker deployment at parity with locksql, Docker-only docs (#12)
• 0075985 feat: single docker-backed lockfile command (#14)
• 9ac2754 fix(answers): check approved pins on the opened plugin
• dcda3d3 fix(backend): answer file.release at the next quantum
• 7a31849 fix(backend): expand ~/ in the SFTP known_hosts path
• 543ae4b fix(backend): scrub the profile's own location values from error text
• 398a045 fix(backend): show the canonical key on the approval screen
• 4a4596e fix(backend): take workspace limits from the approved policy only
• ade0e41 fix(cli): cap agent text output like JSON output
• df4b7a7 fix(cli): gate plugin list/verify and marketplace list to the lockfile account
• 52416b4 fix(cli): read typed confirmations from a terminal only
• 9539f91 fix(cli): unknown_profile exits 2 wherever it is detected
• 661234e fix(clientcmd): check the shape of every successful console result
• e7970dc fix(clientcmd): report busy consoles in status, reach busy hashed ones
• 4aafe2b fix(clientcmd): resolve profiles with fixed texts and a single probe
• 6741ea4 fix(console): require /proc hidepid=invisible before running plugins
• e799d58 fix(doctor): check work dir placement, local sources and socket dir owner
• 6de5275 fix(image)!: lockfile's own account ids 10030-10032 (#21)
• 06ba351 fix(install): always pin the binary the root script copies
• f77cc9c fix(marketplace): https-only redirects and a timeout on downloads
• a193306 fix(mcpserver): lockfile_status honours the pinned profile
• 7549996 fix(mcpserver): pace run heartbeats on the answer quantum
• 651ae3f fix(profile): classify prefix changes on path boundaries
• a921e6d fix(profile): marketplace remove keeps the comments of the next section
• 25a4dd2 fix(profile): state idle_timeout and max_session defaults at parse
• d4344c4 fix(sandbox): bound plugin address space and tasks
• 071c26b fix(sandbox): close seccomp holes and refuse unknown deny-list names
• af7a358 fix(sandbox): deny System V IPC and POSIX message queues to plugins
• c7bc653 fix(sandbox): deny descriptor-owner signals (F_SETOWN, FIOSETOWN) to plugins
• aa1ee51 fix(source): contain SFTP keys on the server, not only lexically
• 274e7c5 fix(update): refuse rolled-back indexes and releases
• 1cd2346 fix(workspace): reserve the budget before streaming and cap handles
• 9683c26 fix: build on GOOS=windows; gofmt (#15)
• 90ecf37 site: two-row phone header, 44px tap targets, 16px demo gutter
• f0c69c0 test(sandbox): assert stderr content reaches no returned value