v1.0.12

Full Changelog: v1.0.9...v1.0.12

v1.0.8: Ship Wave 8 audit remediation

1.0.8 — Ship Wave 8 audit remediation (Triad VERDICT: PASS)

Version-bump-only release on top of b7b6dea (Merge wave-8-audit-remediation).

Changed

• package.json 1.0.7 → 1.0.8
• src/version.ts HARNESS_RELEASE_VERSION 1.0.7 → 1.0.8

Shipped since v1.0.7 (Wave 8, already on main)

• P0: harness execute guard (every tool consults permission guard), destructive-shell evasion hardening (split flags, sudo -u/-g, absolute paths, git -C/--git-dir, ../ + backslash-newline), taint for real _ MCP ids + fork inheritance, symlink escape containment, mutating-shell write classification
• P1: role normalization (default-deny unknown roles), SSRF loopback/LAN fail-closed gate, rename rollback + invalid-api-key retry sabotage-caught tests, sudo/tilde corpus gaps
• P2/P3: zod 3 → 4.6.7 (archived bridge removed), TS 5.9 → 7.0.2, playwright → optional peers, CI SHA-pinned, bun run accept entrypoint, bare-hunk fail-closed, scoped-test traversal fix

Gates (release worktree, all exit 0)

• bun run check, bun test 267 pass / 0 fail, make accept (waves 1–7) green, bash scripts/accept/wave-8.sh green, bun run build green
• QA PASS with S1/S2 red-proofs (desync→fail→restore, tag-gate fail→pass)
• Drift-guard VERDICT: PASS

Tag v1.0.8 matches package.json 1.0.8 per publish.yml gate; push of this tag triggers npm trusted publish.