v0.1.0

Changelog

• 671b082 docs(architecture): sync shell/MCP sections and repo tree with this session's fixes
• 53c8ed3 docs(bdd): soften overpromising Gherkin wording for disclosed pass-through steps
• 5484f51 docs(ci): fix release.yml comment's stale brews: reference
• 22a539c docs(claude.md): clarify the external materials folder is an active planning hub, not just an archive
• b7dc586 docs(claude.md): codify README public-only scope + current repo status
• 8b22e91 docs(claude.md): describe damping/ as one product under a shared project root
• 06b900b docs(claude.md): remove private-process content, keep only repo-specific technical conventions
• c7b070e docs(cli-reference): fix hook contract, policy schema drift, dashboard, --follow contradiction
• 5fc3c83 docs(readme): add the competitor comparison table the plan doc requires
• 0e7ad15 docs(readme): document the BDD development process
• 32b7461 docs(readme): expand quick-start into a real 5-step tutorial with a live dashboard screenshot
• 9e4dcd4 docs(readme): fix stale dangerous_command.feature scenario count (20 → 24)
• 4a39d0c docs(readme): sync shell-detection description and scenario count with reality
• 3f6f1ee docs(security): document damping dashboard's threat model and reporting scope
• c8f5668 docs(threat-model): correct degraded-event check's actual semantics
• 211c129 feat(cli): implement documented UX that was never actually built (init/off transcripts)
• 53580b4 feat(dashboard): add ?limit= to /api/events for CLI/dashboard parity
• 7feee2b feat(dashboard): add damping dashboard — a local, single-user audit-log viewer
• 035aa35 feat(dashboard): add row-click detail view for the full ActionEvent
• c1446e7 feat(log): add "damping log --follow" (tail -f style live streaming)
• 9a9ad34 feat(mcp): persist "always allow/deny" choices for MCP tool calls
• 23f8c22 feat(policy): add embedded OPA/Rego policy engine (Phase 3)
• 3051745 feat: add 4 new dangerous-command rule categories, fix a real OPA-parity bug
• 3d3981b feat: add real Codex support, consolidate agent detection into a registry
• 08dd0f8 feat: add release engineering (GoReleaser, install.sh, release CI)
• 4abaaaf feat: implement damping mcp wrap + always-allow/deny persistence (Phase 1 complete)
• 4531c68 feat: initial Damping V1 scaffold — core engine, CLI, docs, BDD
• 567cb55 feat: intercept Claude Code Write/Edit/MultiEdit tool calls, not just Bash
• 328d377 feat: wave 2 dangerous-command coverage — kubectl/cloud-CLI/disk/publish/webhook
• d0f17a1 fix(agent): --force no longer wipes unrelated PreToolUse hook entries
• 1562d67 fix(agent): stop truncating Claude Code/Cursor settings files on write
• bc3c755 fix(agent): write the required top-level "version" field to hooks.json
• 6680cc3 fix(audit): seed Follow's rotation detection with the caller's real stat
• 9d95c03 fix(audit): tolerate a torn trailing write instead of erroring ReadAll
• c202727 fix(audit): wire Rotate into Append, fix a same-second rename collision
• f139bfe fix(bdd): actually verify the --for 30m duration and auto-reenable in self_protection.feature
• 9c82ccd fix(bdd): guard against a stale w.decision in self_protection_test.go
• 3caeb56 fix(bdd): isolate local_dashboard_test.go from real machine state
• ad32ede fix(bdd): stop mcp_tool_governance_test.go from polluting the real audit log
• 596c3c0 fix(bdd): strengthen 3 weak/no-op steps in dangerous_command.feature
• b31dc7b fix(bdd): strengthen audit_log.feature's prompt-decision assertion, disclose degraded-crash simulation
• bfda252 fix(cmd,dashboard): surface audit-log read errors instead of a false all-clear
• 7624dce fix(dashboard): clear the truncated-note when an events fetch fails
• 2283bf7 fix(dashboard): fix misleading spec citation, add dialog focus management
• c6d3c06 fix(dashboard): roving tabindex on the event table, not one Tab stop per row
• 2a4f678 fix(hook): actually evaluate Cursor commands (was silently allowing all of them)
• 5c15d7d fix(hook): recover() around shell-parser analysis instead of relying on Go's default panic exit code
• 58bb2e1 fix(log): mark degraded events visually in the plain-table view
• 424387a fix(mcp): close a race in always-allow/deny persistence
• ff2faab fix(mcp): stop silently discarding audit failures and respect damping off
• 742b02a fix(policy): check every rm -rf path operand, not just the last word
• f059c5e fix(policy): recognize base32/uudecode/xxd -r/openssl decode pipelines
• ebdbb71 fix(policy): recognize real MongoDB destructive operations via mongosh
• 641ace8 fix(policy): refuse to auto-persist an always-pattern ending in "*"
• c4004da fix(policy): reject an unrecognized rule risk at config load time
• 12be536 fix(policy): scope damping_off_attempt to the subcommand position
• 1e0ab5f fix(policy,event): carry each rule's declared risk into RiskLevel
• 8a27c54 fix(shell): detect destructive commands hidden in substitutions and heredocs
• 27fcd6b fix(shell): resolve aliases consistently in pipeline stages; fix doc overclaim
• 8c7eaf9 fix(status): warn on the headline ON line when the policy fails to load
• 554dabb fix(status,on): non-zero exit on broken policy; warn on damping on too
• 626f52e fix: address HIGH/MEDIUM findings from adversarial code review
• b959677 fix: address findings from release engineering review
• 018f3a8 fix: address the first real golangci-lint/gosec findings, ever
• 1fdbea5 fix: log degraded instead of silently allowing unrecognized hook agents
• 6177c65 harden(audit): cap ActionEvent.Raw so Append stays within Go's single-syscall guarantee
• 3734430 refactor(audit): extract ParseFilter for CLI/dashboard vocabulary parity
• 5e3ba67 refactor(cli): extract enforcement.IsDisabled + paths.ClaudeSettings/CursorHooks
• 40dcac2 test(agent): assert writeJSONObject's actual permission bits
• b36bb8d test(bdd): wire every V1-scope feature file to real godog execution
• baba928 test(shell): add native Go fuzz coverage for the shell parser
• 73aaffb test(shell): seed the fuzzer with the new substitution/heredoc bypass shapes