v0.9.0

Changes since v0.8.1

Fixes

• validators: block a mandatory validator whose Python module is missing c904abe (#1)
• gates: consolidate only the latest attempt of each validator 6134e30 (#2)
• runtime: bound process output while reading it a43f20d (#9)
• capabilities: accept workspace paths reached through a symlinked ancestor 69e0437 (#19)
• application: reject task files with missing fields or unknown keys 5947bb2 (#29)
• cli: print camelCase keys from gate decide db5e6de (#30)
• evidence: write artifacts on platforms without os.fchmod 442406e
• runtime: resolve .cmd executables such as npm on Windows b6e3106

Documentation

• monitoring: Scorecard runs on develop 46070cc
• ship the full Apache-2.0 license text 9d3eb37
• readme: add SonarQube Cloud badges 3e89163
• brownfield: the itsdangerous case closes with a plain APPROVE f6827f9
• describe the 0.9.0 behavior and its difference with the thesis cut 6600713

Tests

• update the demonstration flows to the latest-attempt gate 74054b3

Build and packaging

• deps-dev: update mypy requirement from <2,>=1.11 to >=1.11,<3 e745078

CI/CD

• scorecard: run on the default branch b0d382e
• windows: run the documented flows and drop the informational label a024f7f (#31)

Maintenance

• release: prepare 0.9.0 e1ae4b6

Issues closed

#1, #2, #9, #19, #29, #30, #31

Verification

sha256sum -c SHA256SUMS
gh attestation verify governed_agent_harness-0.9.0-py3-none-any.whl --repo SebasBarrera/harness-engineering