Skip to content

Kxen v0.1.12: Isolated Agent Credential Boundaries

Choose a tag to compare

View all tags
@github-actions github-actions released this 14 Aug 14:51
Immutable release. Only release title and notes can be modified.
v0.1.12
9421b18
This commit was signed with the committer’s verified signature.
StringKe stringke
SSH Key Fingerprint: kZ9P7peNwpL9sSIBF7SuaI78sqyXAJSdPhU8u9LOZ8M
Verified
Learn about vigilant mode.

[0.1.12] - 2026-08-14

版本主题: Isolated Agent Credential Boundaries

本次更新

  • kxen-agent uses private one-shot auth files and process isolation to keep Provider credentials outside tool subprocesses. (10848a8)
  • GitHub Issue automation runs model roles without GitHub credentials and reserves write access for a clean trusted publisher. (10848a8)
  • Workflow command inputs, pinned containers, and deterministic diff gates protect autonomous Issue remediation from untrusted content. (10848a8)
  • Release notes are now validated before any platform build starts, preventing expensive late metadata failures. (10848a8)

问题修复

  • release: Validate release notes before builds (8c31044)

完整变更记录见 CHANGELOG.md。

下载与安装

  • 桌面版: macOS Apple Silicon/Intel、Windows x64/ARM64、Linux x86_64/ARM64。
  • macOS: DMG 与 updater archive 均经 Developer ID 签名和 Apple 公证。
  • Windows: 提供 NSIS installer；当前未做 Authenticode 签名，首次启动可能出现 SmartScreen reputation warning，可选择 More info -> Run anyway。
  • Linux: 提供 AppImage 与 deb。
  • Headless: kxen-<platform>.tar.gz 是 server，kxen-agent-<platform>.tar.gz 是独立 autonomous CLI；Windows 对应 .zip。两类资源参与同一版本发布。
  • 完整性: 使用 SHA256SUMS 校验下载文件；latest.json 和对应 .sig 供自动更新使用。
Assets 33
Loading