OpenSocrates 1.1.5

OpenSocrates 1.1.5

OpenSocrates 1.1.5 fixes three issues found during a clean-install deep review:
Claude grounding under default permissions, honest Codex hook-trust guidance,
and real installed-package integrity diagnosis.

Highlights

• Claude grounding files now prefer a private .opensocrates area inside the
  active workspace. Claude can read them without --add-dir, the area is
  invisible to git status, and OS-temp fallback plus cross-root cleanup keep
  read-only or upgrade scenarios fail-open.
• diagnose now hashes the complete installed package against
  checksums.sha256 and validates the release manifest's version, host, and
  content revision. It reports explicit mismatch or unavailable states instead
  of treating file presence as verification.
• The installer and Codex package README explain the required one-time
  interactive hook approval. Until approval, non-interactive codex exec may
  silently skip the untrusted hooks.
• Release tests cover workspace placement, fallback, cross-root receipts and
  cleanup, Git invisibility, intact packaged runtimes, and staged package
  tampering.

Upgrade notes

Update both managed hosts together with:

npx --yes opensocrates@1.1.5 update --host all

After the Codex update, open one interactive Codex session and approve the
OpenSocrates hooks before relying on automatic selection. The released native
package remains limited to Apple-silicon macOS (darwin-arm64). Package
checksums detect local change or damage but are not a signed authenticity proof.

OpenSocrates still retains no raw prompts, transcripts, credentials, local
paths, hook payloads, tool output, selector reasoning, or user identity.