Skip to content

Getzilla 2.3.0

Latest
Latest

Choose a tag to compare

View all tags
@Dimkox Dimkox released this 21 Oct 11:01
· 138 commits to main since this release
v2.3.0
2bb4174
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Getzilla 2.3.0 is built from merge commit 2bb417431f1e4b9494e4af71ebf27adb1d04d898. 2.2.2 was never published; its changes ship here.

Highlights

  • Honest defaults.

    • Stack registry with checksummed user-level toolchains for Node, .NET, Rust, PowerShell, Go and Java.
    • Honest not-verified markers, and per-route overhead metrics with getzilla report.
    • Human gates are advisory flags; only the first live paid run blocks.

  • Hooks.

    • Path misses are answered with the real paths.
    • Independent heavy work runs in parallel on every verified CPU.
    • Agents get a scratch area .getzilla/runtime/scratch/ that needs no grant.

  • Owner opt-ins in .getzilla/config/project-policy.json:

    • push to a listed protected branch with an exact grant;
    • secret handoff to an exact script.

    Both are hardened against redirections, wrappers, cd and hardlinks (#99–#102).

  • Control plane (#78, #80):

    • per-session routes;
    • short replies keep the current task;
    • argv literals are data;
    • independent circuit-breaker objectives;
    • a policy that fails to load still refuses protected actions.

  • Cost guard. Scheduled paid calls need a run budget. from google import genai and xAI are recognised (#76).

  • Optional EU AI Act evidence layer, off by default. It adds:

    • an AI system register;
    • draft risk classes that a person confirms;
    • Art. 5, 50 and 9–15 gates;
    • a release audit bundle (docs/eu-ai-act.md).

    The installer asks only on offline EU hints and never looks up your IP.

  • Install.

    • The plan classifies and preserves every untracked target path (#75).
    • Offline installer end-to-end tests.
    • Release packaging accepts eol=crlf launchers (#113).

  • Trust CI installs from hashed lockfiles that the OSV scan reads (#42). certifi 2026.10.19 fixes GHSA-6q48-6c7w-9gw2 in the factory lock (#115).

  • Review follow-ups: the harness write race is closed and the deferred review findings are fixed (#60, #71, #73). There is a new security model page, docs/SECURITY.md (#63).

Verification

  • CI. Public GitHub Actions linux and windows on the exact merge commit, plus CodeQL.
  • Local. Full core suite on Ubuntu 24.04 with 26 workers: 2219 passed. One load-timing test failed in that run and passes on its own.

Artifact

getzilla-2.3.0.zip, SHA-256 782219f8f74525a882f14ff2f457ee553ee725a6ba9ae434296c39be77946c11 (sidecar getzilla-2.3.0.zip.sha256). Built with scripts/package_stack.py from the tracked tree of the tagged commit.

Assets 4
Loading