Skip to content

v0.4.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 19 Jul 01:37
· 96 commits to main since this release
v0.4.0
09d982a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Linmas 0.4.0

Proof Chain

  • Adds human decision receipts with per-finding dispositions and a derived overall disposition.
  • Creates portable offline proof bundles with hashed source evidence, Markdown and HTML reports, and fail-closed verification.
  • Adds optional SSH signatures with explicit distinction between cryptographic validity and trusted signer identity.
  • Adds a sealed Codex Security adapter that accepts only a completed scan directory with verified manifest, findings, coverage, and artifact hashes.
  • Adds an offline npm run demo:proof path for reproducible Build Week judging.

Linmas remains defensive-only. Proof bundles are evidence records, not approvals, certifications, or proof that software is secure. Human review remains required.

Assets 3
Loading