v1.2.8

Release Notes: v1.2.8

Date: 2026-11-02 | Previous: v1.2.7 | Commits: 2 | Tests: 585 → 600

Highlights

Root Shell Hardening

• Implemented four layers of security protection specifically when operating inside root shells (UID 0):
  1. Disabled arbitrary execution capabilities in fuzzy finder widgets.
  2. Isolated clipboard buffer files to user-restricted runtime directories instead of public temporary paths.
  3. Disabled automatic SSH agent forwarding by default in administrative sessions.
  4. Provided a locked-down prompt profile free from unvetted custom command modules.
• Standard non-root user sessions remain completely unaffected.

Commits

#	Commit	Purpose
1	aa4eb52 release(v1.2.8): root profile hardening M1-M4	Implement 4-tier security defense for root terminal sessions
2	45ddf97 fix(tests): isolate clipboard fallback and hermetic test runner paths	Ensure hermetic test isolation for clipboard security suites

Breaking Changes

None.

Upgrade

ziro update && exec zsh

Rollback

git revert v1.2.8