zof-vscode 0.1.2

Install Zof Local Verification 0.1.2 from the Visual Studio Marketplace:

code --install-extension zof-ai.zof-verification@0.1.2

Fresh Marketplace installations passed verification in VS Code 1.139.1 on macOS arm64: all five commands, diagnostics, evidence generation, restricted-workspace behavior, and uninstall. The extension runs locally without an account, telemetry, source upload, or workspace-script execution. Hosted Zof integration is not implemented.

The attached zof-verification-0.1.2.vsix supports direct installation through Extensions: Install from VSIX. See the README for source builds and requirements, including Python 3.10+ on PATH for secure filesystem access. Filesystem support is Linux/macOS; Windows operations fail closed. Missing or incomplete evidence never counts as passing verification.

This documentation patch updates public installation instructions and examples; runtime behavior is unchanged. Licensed Apache-2.0.

Reviewed source commit: 3969a28f6d9be3b2393f3058d0692ecb266b0c02.
Attached VSIX SHA-256: 8fc3b42e71a06323a9b47490017028b790407e16a39973dfd7c20c3853dc98a4.

zof-vscode 0.1.1

Security patch 0.1.1 for zof-vscode: fixes excessive CPU use when parsing malformed untrusted diff headers. Licensed Apache-2.0.

Reviewed source commit: 3a548266b6e9d3939be65bf22d3178b01c1c482b. Attached artifact SHA-256: 4c9a040b37a9d3c37fb143a49901572a118f9ed8f0aeac940f688a73b98c3556.

Clone this repository and follow its README. Source bootstrap retrieves only the pinned, checksum-verified dependency release assets after explicit --allow-network consent. These assets are GitHub releases; npm and VS Code Marketplace publication are separate channels and are not claimed here.

Filesystem tools require Linux or macOS, Node.js 22/24 and Python 3.10+. Git inspection uses a bounded sanitized snapshot; linked worktrees, submodules, object alternates, grafts and sparse checkouts are unsupported and rejected. Missing/incomplete evidence never counts as passing verification. Hosted Zof integration remains unimplemented; all documented basic features run locally.

zof-vscode 0.1.0

First public release of zof-vscode, licensed Apache-2.0.

Reviewed source commit: 1e9050187a068ffd63fe8e383313776c5be88571. Attached artifact SHA-256: 42b41b593b2934493a3b9bdf567bae6a2eaab33155a1bf7b4f49098855b42288.

Clone this repository and follow its README. Source bootstrap retrieves only the pinned, checksum-verified dependency release assets after explicit --allow-network consent. These assets are GitHub releases; npm and VS Code Marketplace publication are separate channels and are not claimed here.

Filesystem tools require Linux or macOS, Node.js 22/24 and Python 3.10+. Git inspection uses a bounded sanitized snapshot; linked worktrees, submodules, object alternates, grafts and sparse checkouts are unsupported and rejected. Missing/incomplete evidence never counts as passing verification. Hosted Zof integration remains unimplemented; all documented basic features run locally.

Security update: version 0.1.1 fixes excessive CPU use when parsing malformed untrusted diff headers. Upgrade to version 0.1.1. The original version tag and assets are retained.