Repository navigation
Getzilla v2.2.0
Repository release of Getzilla, the renamed successor of adaptive-grok-build-pro.
Changes
- Scoped Cursor rules generated from the canonical harness sources. Empty source sets are rejected; protected move sources require the same protection as writes.
- Hardened command classification, secret-read restrictions and exact-resource grants.
- OpenGrep pinned by version and SHA-256 at installation and execution. OSV archive validation and a declared updater network boundary.
- Tagged installers verified by SHA-256 before execution.
- Linux and Windows PR checks; the informational Windows full suite runs separately on its nightly schedule.
- ASD-STE100 communication rule, L5 process delegation, lean reviews and batched low-priority findings.
- Bounded local M8 activation, admission and revocation.
Verification
Release commit: 5d5b45f42f8a9f2bc0303b4d16b5d4e54caad5b9.
Required Linux and Windows checks passed on PR #67 and on the merged main commit.
Main CI: https://github.com/Dimkox/Getzilla/actions/runs/37870792637
PR #70 and #67 are merged; all review threads are resolved. PR #52, #55 and #58 are superseded and closed.
Known follow-ups
- #71: parent-directory rename race in the harness writer; selecting one verifier command for landing-only changes.
- #63: remaining security documentation and operational guidance.
- Cursor rules are generated for this repository; consumer installation and live Cursor behavior are not newly qualified by this release.
Source publication does not activate production services or establish general M9 operational qualification.