Skip to content

v2.1.0 — Global-First + Anti-Bypass Lockdown + claude-unlock 2FA

Latest
Latest

Choose a tag to compare

View all tags
@anotherben anotherben released this 27 Mar 23:29
· 13 commits to main since this release
v2.1.0
432d042

What's New

Global-First Architecture (Breaking)

Hooks, skills, and commands now live in ~/.claude/ — shared by all projects. No more stale per-project copies that agents can exploit. Updates apply everywhere instantly.

claude-unlock — 2FA for Infrastructure Edits

Agents can't modify hooks, settings, or evidence without a one-time 6-digit code from the user. Single-use, 10-minute expiry. Marker forgery is never elevatable.

$ claude-unlock
  Elevation code: 847291
  Expires: 10 minutes
  Single use — burned after one write operation

Anti-Bypass Protections (8 layers)

Attack Protection
Touch plan-approval marker HMAC-signed — unsigned rejected
Touch vault-context marker HMAC-signed — unsigned rejected
Write source via Bash scripts Filesystem audit detects + reverts
Echo fake test summary Output parser strips non-ANSI, uses last match
Hand-write evidence JSON HMAC integrity signature
cp/sed hooks via Bash Write-verb detection blocks protected paths
Edit/Write hooks via tools Requires claude-unlock elevation code
Forge markers even with code Never elevatable — always blocked

Zero-Friction /enterprise

The orchestrator auto-handles vault context and capture. Just run /enterprise "your task" — full pipeline start to finish. Resume by running /enterprise again.

Audit Hook Fix

Timestamp marker refreshes per-command (not per-session). Whitelists git operations, build tools, package managers, test runners. No more false-positive reverts.

Personal Data Scrubbed

All hardcoded paths, project names, and credentials removed. Uses $HOME, {{VAULT_PATH}}, ${OBSIDIAN_VAULT_PATH} throughout.

Stats

Component Count
MCP servers 3 (cortex-engine, vault-index, skills-index)
MCP tools 57
Skills 64
Hooks 45
Slash commands 11
Anti-bypass layers 8
Tree-sitter languages 8

Quick Start

git clone https://github.com/<your-org>/claude-harness.git ~/claude-harness
cd ~/claude-harness && ./install.sh --global

Upgrade from v1.x

cd ~/claude-harness && git pull && ./install.sh --update
Assets 2
Loading