Sallyport 0.8.14
Sallyport 0.8.14
Transport and trust-context hardening:
- Pin each control-socket connection to one peer process instance
(connect-time audit token + kernel start time), re-validated on every
call; connection descriptors are close-on-exec on both ends. - Approval cards and the sessions list now flag interpreter and
shell origins whose signature names a runtime rather than one agent,
and show the requesting process's working directory. - Known-agents registry (Claude Desktop, Claude Code, Codex CLI) for
one-click strict allowlist entries with signer cross-check, and
one-ceremony pin updates when a pinned agent ships a new build. - Localize all new copy in German, Spanish, French, Brazilian
Portuguese, Russian, and Simplified Chinese.