AegisGate Lens v0.2.0
Release date: 2026-07-27
Tag: v0.2.0
What's new in v0.2.0
OPSEC hardening
- Pre-commit hook (
.githooks/pre-commit): detects private keys, local paths, internal doc references, CWS IDs, hardcoded secrets, binaries, and .env files before they reach the repo. - CI scan job (
opsec-scaninsecurity.yml): automated OPSEC scanning on every push and PR. - Unified OPSEC scanner (
tools/opsec-scan.sh): 12-check scanner matching the CI job. - Key rotation: CWS screenshot mock TLS key rotated from RSA-2048 to ECDSA P-256.
OPSEC sweep
- Removed all private keys, internal docs, build artifacts, and local paths from the public repo (PR #40).
Bearer token support
- Lens now supports bearer token authentication for self-hosted AegisGate Platform backends (PR #44).
Social links
- Added X/Twitter (@AegisGate) and Mastodon (@aegisgate@mastodon.social) to README and SECURITY docs.
Version bump
- All version strings bumped to v0.2.0 (manifest, source, docs).
Detection metrics (unchanged from v0.1.4)
- 4 detection facets: PII, secrets, XSS, compliance
- Sub-millisecond detection latency
- 100% on-device, zero network egress by default
Privacy & Security
- 12 privacy non-negotiables (no prompt text, no URLs, no page content, no PII, no credentials, no fingerprinting, no cross-site tracking, no AI provider metadata, no keystroke timing, no mouse movement, no session IDs, no IP addresses)
- Apache 2.0, zero external dependencies
- Strict MV3 CSP (no inline scripts, no remote code, no eval)
- All commits GPG-signed
- Vulnerability disclosure: RFC 9116, security@aegisgatesecurity.io
Supported providers
ChatGPT, Claude, Gemini, Microsoft Copilot, DuckDuckGo (Duck.ai), Perplexity, Mistral Le Chat, Grok.
Installation
- Chrome Web Store: search "AegisGate Lens" or visit the listing page
- Manual: unzip, load unpacked in chrome://extensions (Developer mode)
SHA-256 and binary assets available in the v0.2.0 tag.
Contributors
AegisGate