Skip to content

0.1.0

Choose a tag to compare

View all tags
@leemour leemour released this 10 Oct 17:05
· 346 commits to main since this release
v0.1.0
This tag was signed with the committer’s verified signature.
leemour Viacheslav Ptsarev
SSH Key Fingerprint: LNIVrsBtryvr2FZb6/ljMo+wvsNZxKlVkKBIQPsOU90
Verified
Learn about vigilant mode.
f4ffce2
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Fixed

  • Agent fixtures support private dialogs with different addresses and message IDs per account.
    Set the sender's dialog and enable per-account IDs in the private cast; each case needs a unique
    synthetic label to prove receipt and cleanup on the owner's side.

Added

  • Security and agent commands create private run folders. security scan, security socket and
    agent wrap the existing scripts, record pins and exit codes, and leave crashes incomplete. Agent
    runs require an explicit live flag, caller-owned configuration, and a passing blocked-write canary.

  • Run comparison distinguishes new, fixed and returning scanner observations. Carry history with
    --previous; legacy scanner runs are read without edits. Transcript redactions support file snapshots.

  • The suite groups — SUITE_GROUPS: security, contract, performance, ux, analyzers, live, seed.

  • The security audit, written down to repeat — docs/security/ (method, runbook, agent test,
    reviewer prompts, lessons) and the scripts it uses: scripts/security/scan,
    scripts/security/socket, scripts/agent/run-agent, scripts/agent/run-payload.

Changed — may break callers

  • The project is now licensed under Apache License 2.0. See LICENSE for the terms.
Assets 2
Loading