Skip to content

v0.3.4 — Path Safety, Integrity Verdicts, Auth Preflight

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Jun 21:27
v0.3.4
97e0bda
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Fixed

Path Policy Fails Closed

Allow/deny path policy now rejects unsafe `--allow-path` and `--deny-path` values (traversal, absolute patterns) before execution starts. Previously these passed preflight silently.

Verification Integrity Verdicts

`runs verify` now classifies receipt problems as `tampered_payload`, `missing_integrity_material`, or `schema_unknown_fields` — explicit verdicts instead of pass/fail.

Non-Canonical Selectors Fail Fast

`runs verify --file` rejects selectors outside the configured runs root and points operators to canonical selector forms.

OpenAI Auth Preflight

Missing `MARTIN_OPENAI_API_KEY` on hosted endpoints is now a hard blocker with model/quota hints, not a runtime crash.

MCP Scope Errors

Unsupported `--scope local` host errors now include direct `user/project` and Claude-local alternatives.

Install

```sh
npm install -g martin-loop@0.3.4
```

Assets 3
Loading