Skip to content

codeArbiter 2.8.11: tribunal remediation — 25 findings closed + update notifier

Choose a tag to compare

View all tags
@SUaDtL SUaDtL released this 02 Jul 21:05
v2.8.11
bea60f6
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

The tribunal remediation release. Closes all 25 findings from the 2026-07-01 deep-audit (#172–#196) — across security, reliability, performance, and observability — and adds an update-available notifier so third-party-marketplace installs stop running silently stale.

Highlights

  • Security — fail-closed-on-crash guards (#189/#193); H-05 audit-log tail-anchoring + a literal --no-verify block (#172/#175); a repo-resolution fix so the mechanical guards judge the repo the git operation actually fires in (#190); SHA-pinned GitHub Actions + dependabot (#202).
  • Reliability — atomic state writes, so a torn hook shim can no longer silently disable the git-enforce backstop; single-parse transcript prune (#191/#188).
  • Performance — lower SessionStart latency: a fail-safe hooks-install skip, concurrent git reads, and de-duplicated briefing reads (#194).
  • Observability — a durable .codearbiter/gate-events.log sink for every BLOCK/REMIND/WARN decision, plus an audit staleness-warn (#186).
  • Features — the update-available notifier (SessionStart + statusline, once-daily, fail-silent, HTTPS-only) (#209); farm dispatcher hardening (#183/#187/#192).
  • Refactors — statusline and command-helper thin entry points (#178/#179).

Per-version detail for 2.8.1 → 2.8.11 is in CHANGELOG.md.

Assets 2
Loading