v0.3.0

Changelog

• 9e50fbd Launcher: mount the managed directory read-only (#146) (#149)
• 9bff8d3 build(deps): Bump sigstore/cosign-installer from 4.1.2 to 4.1.3 in the github-actions group (#143)
• d36d89b feat: enforce the [locklog] section of managed.toml (#147) (#148)
• 05ac46e fix(launcher): pick the stat flavour by probing stat; PII tests without journald (#153)
• d066b94 fix(mcp): refuse container as a field, name stale cursor params (#144) (#145)
• 3e30061 perf(parse): decode JSON lines with a scanner of our own (#150) (#151)
• c943403 release: v0.3.0 (#154)

v0.2.1

Changelog

• 7c8c8f8 ci(release): Homebrew tap bump on release; install docs through brew and lox (#135)
• d714ab5 fix(console): a local-only console accepts lox run's internal hub network only (#136) (#137)
• 75d9dae release: v0.2.1 (#141)
• 28409fc test(leak): blank the random scan id from the whole-corpus scan (#139)

v0.2.0

Changelog

• 1b0675f feat!: hub only, started by lox run; launcher verbs; lockkit v0.13.0 (#127)
• d58692d feat(console): serve pii.list/pii.add; approved pii.toml allow rules apply (#128)
• 79086f9 feat(hub): HubOptions, tickets, read-pii facade check, SubmitClear, RenewResp, devices, hub-key (LL-23) (#114)
• 65d5680 feat: per-profile auto rules for lox run (auto / ask / deny, profile rules --json) (#131)
• 796ee17 fix(console): confinement and lost-session follow-ups, leak harness over the console's bytes (#62, #86) (#129)
• c67117f fix(engine): bound every answer, a call's planning and the calls run at once (#121)
• 1e11de5 fix(engine): serve numeric terms from the index, resume journald walks, log source errors (#124)
• 8d56037 fix: LL-16b suites; Loki stats and metric budget; unmasked trusted counts; faster masking; plan-bound scan TTL (#101)
• 91650cd fix: hub mode and approval follow-ups, unmask exposure count (#115, #98, #91) (#125)
• 22ef499 fix: remote-source, egress, MCP schema and audit follow-ups (#69, #106, #93, #78, #92) (#123)
• 4bc7969 fix: setup/doctor follow-ups after hub mode; last LL-16 suite items (#87, #63) (#132)
• 95b49f6 release: v0.2.0 (#133)

v0.1.0

Changelog

• b567a56 build(deps): Bump actions/upload-artifact from 4.6.2 to 7.0.2 in the github-actions group across 1 directory (#90)
• dec64c4 build(deps): lockkit v0.8.0, new detectors wired (LL-04b) (#44)
• 953e8dc build: image, launcher, install.sh, release workflow, visibility probe (#8)
• 906d33c ci(fuzz): tolerate end-of-fuzztime 'context deadline exceeded' without a crasher (#60)
• a583fbd ci: run macOS on main and nightly, not on pull requests (#119)
• f7680a9 feat(config): profiles, sources, budgets and the policy diff (#6)
• 07347a1 feat(console): log methods over a seam to the engine, launcher checks, audit, --allowed-uids (#20)
• 396eb3e feat(console): open Loki and Elasticsearch/OpenSearch sources from the config (#97)
• ac4b937 feat(egress): pinned client, allowlist, TLS modes, unauthenticated-read check (#10)
• aa68c03 feat(engine): context, trace, tail; refs (LL-14) (#58)
• 09ea8d3 feat(engine): patterns (LL-13) (#57)
• 45b0ef1 feat(engine): query, granule plans, cost model, mask-all evaluator, search, count (LL-06) (#40)
• 5ff84d4 feat(mask): the masking pipeline (#18)
• a74ac8b feat(mcp): locklog_* tools, host-agent production guard, agent assets, init (#22)
• 98f792a feat(parse): core formats and event assembly (#5)
• c4f3982 feat(parse): syslog, combined, cri and docker-json formats (LL-12) (#34)
• 17bd107 feat(source/docker): Docker source, map loop and refresh, attrs allowlist (#29)
• cc78853 feat(source/elastic): Elasticsearch / OpenSearch source, privilege check (LL-25) (#77)
• 88c6c79 feat(source/file): file source and local index (#12)
• 3406c5e feat(source/journald): pure-Go journal reader, field allowlist (LL-10) (#23)
• 091ad8c feat(source/loki): Loki source, metric counts, auth-proxy material (LL-18) (#41)
• ebedda4 feat: rolling budgets, scan (whole-plan approval), unmask, lookup, change requests (LL-19) (#89)
• 387b53f feat: setup, doctor, five-minute job, own-container recipe (LL-15) (#80)
• 867f9e5 fix(config): budget defaults from the spike numbers (#28)
• 9e75bd0 fix(engine): bound a group by the call's byte budget; incidents on a calibrated cost model (#88) (#95)
• 2ac0d0b fix(mask): step 1 settles; secrets uncovered by later steps are redacted (#45)
• 15bc5a3 fix(source/loki): split a slice larger than the call budget into sub-slices (#72)
• e457488 fix: console clear view (Ctrl-O), --allowed-uids through the launcher, setup hint (#109)
• 48be5ca perf(index): backfill at full speed — memoized sensitivity, hand-written combined matcher (R6-P1) (#82)
• 6d0488e release: v0.1.0 (#108)
• 20e892a test(engine): context, trace and tail in the LL-16 suites and incidents (#103)
• e2a6624 test(engine): local leak, oracle (latency), equivalence, injection suites and local incidents (LL-16) (#83)
• 030d416 test(engine): make the -race suite fast enough for CI and add a race job (#76)