Skip to content

FailproofAI v1.0.13

Latest
Latest

Choose a tag to compare

View all tags
@NiveditJain NiveditJain released this 02 Nov 10:27
· 12 commits to main since this release
v1.0.13
c0b7d8a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

failproofai 1.0.13

This release restores policy enforcement on OpenClaw 2026.9.6+ and on Antigravity's current file tools, and makes daemon setup work on Fedora, RHEL, Rocky and Alma.

Fixes

Antigravity

  • Path policies enforce again. Antigravity's read_file, write_file and edit_file tools were not recognized, so path-based policies and the guard protecting failproofai's own config saw no path and allowed the call. An agent could read and overwrite .env, create id_rsa, and overwrite .failproofai/policies-config.json. These calls are now denied. (#961)
  • A file call with no recognizable path is now denied. If Antigravity renames these arguments again, the tools stop with a message saying why, rather than every path policy silently allowing them.

OpenClaw

  • Enforcement works again on OpenClaw 2026.9.6 and later. Those releases load plugins from a copy that broke the plugin's path to the CLI, and the plugin read that failure as an allow, so every tool call ran unchecked. The plugin now asks failproofaid for each verdict over its socket. (#956)

Daemon setup and uninstall

  • failproofai config works on Fedora, RHEL, Rocky and Alma. SELinux doesn't let systemd run files from a home directory, so the daemon failed with 203/EXEC. The binary now runs from a root-owned copy under /opt/failproofai/<user>/bin/. (#957)
  • Manual root commands quote every path, so a home directory with a space no longer breaks the install commands, and the removal command's rm -rf can't be pointed at the wrong path.
  • uninstall and uninstall --purge remove the /opt copy even if the service unit is already gone. They used to leave it behind and report success.

Dependencies

  • minimatch is overridden to 11.0.3 for GHSA-g3hv-75wg-m249. It is ESLint tooling only and ships in neither package.
  • nltk is bumped to 3.10.4 in the Python SDK's dev/test lockfile for GHSA-j456-xh4h-cpf2. The SDK itself has no runtime dependencies.

Upgrading

  1. Run npm i -g failproofai@latest.
  2. Run failproofai config. This moves an existing Linux daemon to the /opt path and restarts it.
  3. If you use OpenClaw, restart the gateway so it loads the new plugin.

Behaviour changes

  • OpenClaw now requires the daemon. Install refuses without it. If no verdict comes back, tool calls and prompts are blocked rather than allowed.
  • Antigravity file tools can now stop outright. If a future Antigravity version renames its path arguments, read_file, write_file and edit_file calls are denied until failproofai is updated. A session pause lifts this, unless an enforcing Cloud policy is deployed.
Assets 8
Loading