v0.2.0

github-actions released this 20 Jun 19:51

acc9d5d

Changelog

c609591: feat(analyze): wire semgrep runner with starter rules pack (@alexverify)
be87ef5: feat(approve): approve --all for bulk onboarding (@alexverify)
b0e3f6f: feat(shim): jsonrpc message model and tools/call tracker (@alexverify)
fa1761a: feat(shim): audit event model and jsonl sink (@alexverify)
cf20c46: feat(shim): byte-transparent mcp relay with tool-call auditing (@alexverify)
65abf57: feat(shim): agentguard mcp-shim command spawning and auditing the real server (@alexverify)
f8dc835: feat(wrap): mcp config rewrite adapter (wrap/unwrap/status) (@alexverify)
99be165: feat(wrap): wrap, unwrap, and wrap --status commands (@alexverify)
5b5f219: feat(wrap): discovery sees through shimmed servers, wrap causes no drift (@alexverify)
dd1ee88: feat(policy): per-server mcp tool rules with glob matching (@alexverify)
7b4959f: feat(shim): enforce mcp tool policy in the relay, deny with jsonrpc error (@alexverify)
52d2861: feat(shim): --policy flag, enforcement docs (@alexverify)
0dcf73b: feat(secrets): credential shape detection and redaction (@alexverify)
21ddb98: feat(policy): per-server egress host rules (@alexverify)
eee70dd: feat(proxy): egress proxy with host rules, body redaction, and audit (@alexverify)
ed24231: feat(shim): inject egress proxy into wrapped servers (@alexverify)
9211a57: feat(sandbox): seatbelt and bwrap profile generation (@alexverify)
32521e9: feat(sandbox): backend selection by platform with identity fallback (@alexverify)
44dc37e: feat(sandbox): confine wrapped servers via mcp-shim, --no-sandbox/--workspace (@alexverify)
e3c6823: test(sandbox): prove off-proxy egress is blocked under confinement (@alexverify)
5a296ee: feat(audit): read, filter, and summarize the audit log (@alexverify)
9fd2b62: feat(audit): agentguard audit command with summary, list, and filters (@alexverify)
498b2c1: feat(approve): sign and verify approvals over artifact id + content hash (@alexverify)
48f44bb: feat(approve): approve --sign and requireSignedApproval verify gate (@alexverify)
988097f: feat(wrap): --global to wrap the user-level ~/.claude.json config (@alexverify)
62ed8aa: feat(discover): windsurf and copilot cli discovery adapters (@alexverify)
24e073f: ci: add windows to the test matrix and release targets (@alexverify)
1eca3b8: fix(windows): force LF on checkout so gofmt and hashing are stable (@alexverify)
4b8136e: test(windows): portable shell, home redirect, and skip unix-only assertions (@alexverify)
3fd7fb4: fix(windows): override pre-existing proxy env vars when injecting the egress proxy (@alexverify)
84d6fcf: test(windows): add control var and stderr to egress-proxy diagnostic (@alexverify)
ee6958c: windows: gate proxy-value check to unix, surface sandbox absence, document platforms (@alexverify)
e3b2d4e: feat(dashboard): local read-only web dashboard served on loopback (@alexverify)
f739e99: feat(dashboard): next.js frontend, static-exported and embedded in the binary (@alexverify)
1b2df5a: feat(dashboard): adopt the dev-dashboard-creation design (mock data, static-exported) (@alexverify)
4855807: feat(dashboard): /api/scan assembles live inventory+drift in the UI shape (@alexverify)
fc32651: feat(dashboard): wire the UI to live /api/scan, fall back to mock in dev (@alexverify)
3c2685f: feat(dashboard): per-artifact detail data, real mtime and keyring-verified approvals (@alexverify)
bfea54c: feat(dashboard): per-artifact detail drawer (provenance, integrity, capabilities, findings, files, activity) (@alexverify)
f48215f: feat(lockfile): classify drift as updated/mutated/broken (@alexverify)
7303d37: feat(lockfile): diff declared capabilities across snapshots (@alexverify)
f5fbc39: feat(trust): additive per-artifact trust verdict (@alexverify)
d16a7a6: feat(dashboard): surface trust verdict, drift class, capability diff in API (@alexverify)
6c94a30: feat(dashboard-web): types and styles for verdict and capability diff (@alexverify)
3cffa9a: feat(dashboard-web): verdict badge, posture cards, updated-vs-drifted split (@alexverify)
9dd6312: feat(dashboard-web): trust breakdown and capability expansion in drawer (@alexverify)
bb557be: feat(report): baseline trust verdict column in list output (@alexverify)
3e8c611: build: re-embed dashboard with trust and drift UI (@alexverify)
183584f: feat(advisory): flag known-malicious artifacts from an offline feed (@alexverify)
faa2b03: feat(cli): add digest command summarizing changes since the lockfile (@alexverify)
f07a98b: feat(dashboard-web): changes view, activity timeline, advisory banner (@alexverify)
c180ded: build: re-embed dashboard with changes, activity, and advisory UI (@alexverify)
a919e66: feat(policy): enforce quarantine and freeze in the gate (@alexverify)
6ecce9c: feat(cli): add quarantine and freeze commands (@alexverify)
27e594e: feat(provenance): grade source verifiability as a ladder (@alexverify)
4167c24: feat(dashboard): surface quarantine/freeze state and provenance ladder (@alexverify)
4932d2c: feat(dashboard-web): provenance ladder and quarantine/freeze state in drawer (@alexverify)
3dfa43b: build: re-embed dashboard with quarantine and provenance UI (@alexverify)
80d7b46: feat(policy): allow/block lists for publishers and artifacts (@alexverify)
6ca1138: feat(cli): post the digest to a webhook with --notify (@alexverify)
97cde64: feat(dashboard): token-guarded approve/quarantine/freeze write endpoints (@alexverify)
f20eef6: feat(dashboard-web): approve/quarantine/freeze action buttons in drawer (@alexverify)
aa9dd89: feat(dashboard-web): egress map grouping audit egress by host (@alexverify)
4b39b22: build: re-embed dashboard with action buttons and egress map (@alexverify)
e3e064f: feat(provenance): verify npm build-provenance to satisfy the publisher rung (@alexverify)
2c48b46: feat(cli): export the lockfile as a CycloneDX SBOM (@alexverify)
612aabd: rename agentguard for assay (@alexverify)
04b2960: ci: exclude secret-detector fixtures from GitHub secret scanning (@alexverify)
4673182: feat(provenance): verify git commit signatures and cosign container images (@alexverify)
8ab2951: feat(policy): muted findings with rationale and a policy file writer (@alexverify)
0c5e237: feat(dashboard): shadow-extension detection and policy/mute/egress write endpoints (@alexverify)
405da58: feat(posture): first-run verdict, history trend, and /api/history (@alexverify)
bf3cfe2: feat(dashboard-web): policy tab, finding mute, egress allowlist, shadow banner, posture trend (@alexverify)
26a1657: license: relicense from Apache-2.0 to MIT (@alexverify)
d68c63c: feat(dashboard): file-manifest diff for drifted artifacts (H1) (@alexverify)
3c5b5f2: fix theme-toggle (@alexverify)
c918214: feat(dashboard): per-artifact usage telemetry and dormant-then-active sleeper (F1, F2) (@alexverify)
eed6dc6: feat(dashboard): per-artifact event timeline ribbon (F4) (@alexverify)
1db50fe: feat(dashboard): capability × usage risk fusion for findings (F3) (@alexverify)
32e7963: feat(fleet): team blast-radius from committed snapshots (G1) (@alexverify)
7a0a45c: feat(fleet): artifacts × developers inventory heatmap (G2) (@alexverify)
02a4b05: feat(fleet): policy conformance across the fleet (G3) (@alexverify)
69a7e79: feat(dashboard): reachability-aware findings demote inert paths (H2) (@alexverify)
508d845: feat(dashboard): opt-in hash-only community reputation signal (H3) (@alexverify)
20ffa63: feat(usage): activation telemetry extends usage to skills and subagents (F1b) (@alexverify)
c80ea05: feat(fleet): pure CI gate over conformance and blast radius (@alexverify)
006cd79: feat(fleet): assay fleet verify CI gate with committed blast-radius threshold (@alexverify)
f976dca: feat(textdiff): pure LCS line differ with hunking (@alexverify)
4ef9055: feat(snapshotstore): content-addressed store for approved file bytes (@alexverify)
b274591: feat(scan): capture file bytes for line-level drift diffs (@alexverify)
d1b017f: feat(dashboard): serve line-level drift diffs from captured blobs (@alexverify)
abe8ca9: fix(scan): anchor snapshot capture to the project path, capture only on scan and dashboard (@alexverify)
539ff22: feat(dashboard): render line-level drift diffs in the changed-files view (@alexverify)
5484519: feat(controlplane): snapshot ingest and aggregate service (@alexverify)
aa0c4e2: feat(controlplane): HTTP server with machine-token auth (@alexverify)
efee086: feat(cpstore): file-backed control-plane store (@alexverify)
21beaab: feat(client): control-plane HTTP client for snapshot submit and fleet read (@alexverify)
168aac7: feat(cli): assay serve, fleet push, and remote fleet view (@alexverify)
4c7389a: feat(controlplane): org config port serving policy and trusted keys (@alexverify)
43b8ddf: feat(cpstore): file-backed org policy and trusted keys (@alexverify)
b956bc1: feat(controlplane): GET /v1/policy and /v1/registry/keys with client (@alexverify)
cbfd845: feat(cli): verify and fleet verify pull org policy and keys from the control plane (@alexverify)
16d84fb: feat(controlplane): GET /v1/gate runs the fleet CI gate server-side (@alexverify)
83a9ca0: feat(cli): fleet verify --server gates the fleet on the control plane (@alexverify)
6f85ede: feat(controlplane): per-org audit event ingest and storage (@alexverify)
9a2b1bd: feat(alert): derive team alerts from fleet drift and audit denials (@alexverify)
3b6d444: feat(controlplane): POST /v1/audit ingest and GET /v1/alerts (@alexverify)
92e709a: feat(cli): audit push uploads events, alerts lists team alerts (@alexverify)
b5628b9: feat(controlplane): org reputation corpus and hash lookup (@alexverify)
143fc6c: feat(controlplane): POST /v1/reputation hash lookup with client (@alexverify)
4b2477c: feat(cli): live hash-only reputation lookup for dashboard and reputation command (@alexverify)
b8e6a18: feat(controlplane): GET /v1/conformance with client (@alexverify)
c188039: feat(dashboard): /api/alerts endpoint and Alerts dep (@alexverify)
94881db: feat(cli): dashboard --server reads fleet, conformance, and alerts from the control plane (@alexverify)
2b41dc5: feat(dashboard): Team Alerts tab on hosted data (@alexverify)
5973d3a: feat(make): add install target so assay runs from PATH; quickstart uses assay (@alexverify)
90f25c7: feat(dashboard): account for unaccounted artifacts from the UI (@alexverify)
e3ba629: feat(dashboard): auto-sign approvals with the local key; soften unsigned label (@alexverify)
f917da8: feat(dashboard): serve artifact file content for finding code view (@alexverify)
41d00a5: feat(dashboard): open a finding's source file in a code-view modal (@alexverify)
782c1e4: feat(dashboard): highlight flagged lines and jump to them in the code view (@alexverify)
877d5d8: feat(dashboard): snippet fallback and prev/next finding nav in the code view (@alexverify)
a7ff481: feat(dashboard): flag a finding as safe; the CI gate accepts it but keeps showing it (@alexverify)
ec33982: feat(dashboard): include the absolute file path in the source response (@alexverify)
3419713: feat(dashboard): show a finding's source as a full screen with back navigation (@alexverify)
f328147: feat(dashboard): add a context detail panel to the source screen (@alexverify)
a2b4065: feat(dashboard): flag-safe button and badge across the finding views (@alexverify)
7d607e4: fix(dashboard): drawer crashed on artifacts with no network/filesystem caps (@alexverify)
c68c273: feat(dashboard): plain-language capability summary at the top of the drawer (@alexverify)
208a1ec: feat(dashboard): view an artifact's source files from the drawer (@alexverify)
a8b7c5f: feat(dashboard): show an artifact's stated purpose from its frontmatter (@alexverify)
561309e: feat(dashboard): solo mode trusts approvals by status; expose teamMode (@alexverify)
93a3e80: feat(dashboard): solo mode shows Approved/Not approved, hides signing vocabulary (@alexverify)
8cb8bb5: feat(mcpconfig): wrap/unwrap Claude Code's per-project mcpServers store (@alexverify)
e09f535: feat(wrap): cover Claude Code's per-project store; tolerate a missing .mcp.json (@alexverify)
52381d0: test(wrap): build the per-project fixture with json.Marshal so Windows paths are valid (@alexverify)
32b96b8: rebrand: rename assay to eyebrow across the codebase (@alexverify)
505627c: release: publish a Homebrew cask to the tap (@alexverify)
0828687: feat: add checksum-verifying install.sh (@alexverify)
3b29566: fix: abort install when checksum entry is missing (@alexverify)
6a01289: ci: release on tags and check install.sh (@alexverify)
9d38652: ci: keep existing release workflow, add Homebrew tap token (@alexverify)
485a8b2: fix: improve install.sh diagnostics and packaging docs (@alexverify)
acc9d5d: Merge branch 'dist-channels': Homebrew cask, install.sh, release pipeline (@alexverify)

Contributors

alexverify

Assets 9