Getzilla 2.3.0

Getzilla 2.3.0 is built from merge commit 2bb417431f1e4b9494e4af71ebf27adb1d04d898. 2.2.2 was never published; its changes ship here.

Highlights

• Honest defaults.

  • Stack registry with checksummed user-level toolchains for Node, .NET, Rust, PowerShell, Go and Java.
  • Honest not-verified markers, and per-route overhead metrics with getzilla report.
  • Human gates are advisory flags; only the first live paid run blocks.

• Hooks.

  • Path misses are answered with the real paths.
  • Independent heavy work runs in parallel on every verified CPU.
  • Agents get a scratch area .getzilla/runtime/scratch/ that needs no grant.

• Owner opt-ins in .getzilla/config/project-policy.json:

  • push to a listed protected branch with an exact grant;
  • secret handoff to an exact script.

  Both are hardened against redirections, wrappers, cd and hardlinks (#99–#102).

• Control plane (#78, #80):

  • per-session routes;
  • short replies keep the current task;
  • argv literals are data;
  • independent circuit-breaker objectives;
  • a policy that fails to load still refuses protected actions.

• Cost guard. Scheduled paid calls need a run budget. from google import genai and xAI are recognised (#76).

• Optional EU AI Act evidence layer, off by default. It adds:

  • an AI system register;
  • draft risk classes that a person confirms;
  • Art. 5, 50 and 9–15 gates;
  • a release audit bundle (docs/eu-ai-act.md).

  The installer asks only on offline EU hints and never looks up your IP.

• Install.

  • The plan classifies and preserves every untracked target path (#75).
  • Offline installer end-to-end tests.
  • Release packaging accepts eol=crlf launchers (#113).

• Trust CI installs from hashed lockfiles that the OSV scan reads (#42). certifi 2026.10.19 fixes GHSA-6q48-6c7w-9gw2 in the factory lock (#115).

• Review follow-ups: the harness write race is closed and the deferred review findings are fixed (#60, #71, #73). There is a new security model page, docs/SECURITY.md (#63).

Verification

• CI. Public GitHub Actions linux and windows on the exact merge commit, plus CodeQL.
• Local. Full core suite on Ubuntu 24.04 with 26 workers: 2219 passed. One load-timing test failed in that run and passes on its own.

Artifact

getzilla-2.3.0.zip, SHA-256 782219f8f74525a882f14ff2f457ee553ee725a6ba9ae434296c39be77946c11 (sidecar getzilla-2.3.0.zip.sha256). Built with scripts/package_stack.py from the tracked tree of the tagged commit.

Getzilla 2.2.1

Getzilla 2.2.1 binds passing independent reviews to the exact source commit inspected by each reviewer. Receipt consumption revalidates that binding. Missing legacy bindings and unreviewed source changes are refused.

Grok skills now come from canonical sources through the harness generator. Installed-consumer parity and safe retirement are checked. Conventional global review reports and low-risk micro routes without a package remain supported; malformed selected metadata and missing durable packages fail closed.

Fresh-agent handoff now identifies Getzilla and separates published source from the release candidate. Local owner overrides must record their scope, deferred checks and later verification. They do not replace external checks or grant production authority.

Recovery: obtain fresh independent reviews for legacy unbound PASS receipts. For a regression, use the prior immutable v2.2.0 source in a fresh isolated installation; do not overwrite an existing consumer or reuse stale receipts.

The attached ZIP and SHA-256 file identify the exact merged release source. Installation and source checks qualify the recorded source only. No unspecified production installation, unattended factory runner or autonomous business task is certified by this release.

Release source: merged commit 05f85f12b72b3a897c45c24e172fac8317120b7c, tree ea0e67c678c90764196dadce09910954d6be0371. The full local PR suite passed on the identical tree at 89b131e7b20afeafc02bf859131e449fa618c702; that evidence is reused with its original identity, not claimed as a fresh merged-commit run.

ZIP SHA-256: 0eb872f02f96f246965004637c2c1d6b32cadb988b6c84513a55b251f7fefc68. Two fresh merged-source builds matched; CRC, manifest, 640 installed-file hashes, harness parity, doctor and overwrite refusal checks passed.

Getzilla v2.2.0

Repository release of Getzilla, the renamed successor of adaptive-grok-build-pro.

Changes

• Scoped Cursor rules generated from the canonical harness sources. Empty source sets are rejected; protected move sources require the same protection as writes.
• Hardened command classification, secret-read restrictions and exact-resource grants.
• OpenGrep pinned by version and SHA-256 at installation and execution. OSV archive validation and a declared updater network boundary.
• Tagged installers verified by SHA-256 before execution.
• Linux and Windows PR checks; the informational Windows full suite runs separately on its nightly schedule.
• ASD-STE100 communication rule, L5 process delegation, lean reviews and batched low-priority findings.
• Bounded local M8 activation, admission and revocation.

Verification

Release commit: 5d5b45f42f8a9f2bc0303b4d16b5d4e54caad5b9.
Required Linux and Windows checks passed on PR #67 and on the merged main commit.
Main CI: https://github.com/Dimkox/Getzilla/actions/runs/37870792637
PR #70 and #67 are merged; all review threads are resolved. PR #52, #55 and #58 are superseded and closed.

Known follow-ups

• #71: parent-directory rename race in the harness writer; selecting one verifier command for landing-only changes.
• #63: remaining security documentation and operational guidance.
• Cursor rules are generated for this repository; consumer installation and live Cursor behavior are not newly qualified by this release.

Source publication does not activate production services or establish general M9 operational qualification.