Compartment 2.3

Improvements

• compartment audit verify stays true across restarts and across agents. The audit log is a hash chain, so each entry names the one before it and any edit to history breaks the link at a detectable point. Two things could leave that link dangling in ordinary use, and both are fixed: a write is now re-linked to the log's real head when it is replayed after a crash, and it keeps the time it actually happened.

• compartment audit repair for a log an older build already broke. It rebuilds the links forward from the first break and nothing else. What the log says is untouched: time, caller, operation and detail all stay exactly as written, and the repair records itself as an entry. If any entry fails its own content hash it refuses outright, because that is tampering rather than a dangling link, and re-linking would destroy the evidence.

Downloads

File	For
Compartment-2.3.pkg	macOS, one click, with the optional menu bar utility. Start here.
Compartment-2.3.dmg	macOS, drag to Applications
compartment-2.3-py3-none-any.whl	pip / offline installs, any OS
compartment-2.3.tar.gz	source distribution, packagers, air-gapped builds

pip install compartment

Upgrading from 2.1 or earlier: once 2.2 or later has opened a vault, older
builds cannot, so upgrade every install that shares one together - the MCP
server your agent launches, the menu bar app, and any copy on your PATH.

macOS blocks the first launch of anything not signed with a paid Apple
Developer ID. The .pkg handles that; with the .dmg you allow it once in
System Settings > Privacy & Security > Open Anyway.