v0.6.0

Changelog

• addd15b docs(site): shareable section links, console relay refusals, new demo (#34)
• 21f8442 feat: fingerprint approvals and desktop isolation shape (#36)

v0.5.2

Changelog

• 982142d docs(site): run locksql with Docker (#31)
• 13a8f32 feat(console): k-anonymity warns before approval instead of refusing (#32)

v0.5.1

Changelog

• 789d9da fix(console): refuse a machinectl shell or loopback ssh relaying the agent's terminal (#30)

v0.5.0

Changelog

• 1022154 build(deps): Bump the github-actions group across 1 directory with 3 updates (#4)
• 0c3dee1 feat(console): live approval mode, clear-results toggle, status row; issues #24 #25 #19 #20 (#27)
• aec0c07 feat: Docker image with the separated setup baked in (#26)
• aceba09 feat: improvement backlog 01–11 (fuzzing, canary, TLS, refusal codes, setup, writes, Windows) (#28)
• 96ccd7a fix: close the PII oracles and size gaps of the 2026-10-10 review; intent, deny reason, session limits (#16)

v0.4.0

Changelog

• 00afef8 feat!: verified TLS and SSH tunnel for remote profiles (#14)
• 850cb31 fix(site): fit the demo video to the window (#13)

v0.3.0

Changelog

• 3127eeb feat(console): --show-results prints masked results in clear in the console (#11)

v0.2.0

Changelog

• 2ce4774 feat(console)!: refuse unmask requests unless the console runs with --allow-unmask (#10)

v0.1.3

Changelog

• 9973eb6 fix(console): keep PII mask modes when loading and extending the policy (#8)
• af8411e fix(install): setgid Linux socket directory so the separated console can start (#9)

v0.1.2

Changelog

• e653b3e Merge pull request #2 from DavidGodefroid/feat/onboarding
• 3070216 docs(agentinit): instructions that hold outside a project
• 951ab51 feat(agentinit): wire agents for the user account and detect installed agents
• 2f45a59 feat(cli): ASCII logo banner and a consistent terminal look (#5)
• 456eae6 feat(console): placeholders and cell references for PII searches (#7)
• e36cbc8 feat(pii): redact by default, opt-in quasi-identifiers; locksql.com site (#6)
• 9abdc36 feat(setup): append a validated profile to the user config
• 1b18b88 feat(setup): ask for a database profile, URL first
• fcfc081 feat(setup): parse database URLs without accepting a password
• ed01b8c feat: one-command onboarding with bare locksql
• c02e6d6 fix(agentinit): leave a wired Claude alone, refuse other accounts' files
• 0b3d35f fix(agentinit): read Claude's user MCP entry instead of probing the CLI
• 6833dc2 fix(client): name the project in no-console hints
• 6074f07 fix(console): keep PII rules in the user config directory outside a project
• 45dfe21 fix(onboard): separated mode uses a project config; safer wiring
• a630f3c fix(setup): check URL parts like step-by-step answers; sqlite without port or keychain
• b6c2d65 fix(setup): keep symlinked configs, refuse secrets in sqlite URLs and free-text answers
• 1c8da8c refactor(agentinit): make steps scope-aware
• a456295 refactor(config): parse profiles from bytes, expose the user config path
• 7486032 test(console): cover the PII rules path outside a project

v0.1.1

Changelog

• c6edbc1 Merge pull request #1 from DavidGodefroid/docs/readme-logo
• 4181ee1 build(release): ship package docs as 0644
• c86e2c4 feat(release): install without Go via a script and Linux packages