redact-v0.1.6

What's Changed

• Guard the capture-scope timeout bound by @bogatyrjov1 in #181
• Pin the capture-scope timeout floor, not just its wiring by @bogatyrjov1 in #182
• Keep the cli tests out of the home directory, and give the fence a release path by @bogatyrjov1 in #183

Full Changelog: v0.26.0...redact-v0.1.6

v0.26.0

What's Changed

• Measure a relative path from the directory its own tool call ran in — and refuse the command when that cannot be proven by @bogatyrjov1 in #180

Full Changelog: v0.25.0...v0.26.0

v0.25.0

What's Changed

• Resolve a path against the filesystem before normalizing it by @bogatyrjov1 in #179

Full Changelog: v0.24.0...v0.25.0

v0.24.0

What's Changed

• Harden the session-path fence: symlink escape, dropped-path visibility, NUL bytes by @bogatyrjov1 in #178

Full Changelog: v0.23.0...v0.24.0

v0.23.0

What's Changed

• A worktree is the same repo, but the path harvest was treating it as somebody else's by @bogatyrjov1 in #175
• Measuring roots physically took the paths away from anyone behind a symlink by @bogatyrjov1 in #176
• Release 0.23.0, because a fix nobody can install is not a fix by @bogatyrjov1 in #177

Full Changelog: v0.22.0...v0.23.0

v0.22.0

What's Changed

• The agent stopped opening files and started running commands; the harvest never noticed by @bogatyrjov1 in #174

Full Changelog: v0.21.0...v0.22.0

v0.21.0

What's Changed

• The wire has said whether to try again for a while; now somebody reads it by @bogatyrjov1 in #173

Full Changelog: v0.20.0...v0.21.0

v0.20.0

What's Changed

• Nothing fires before an edit, and the guard that pinned the hook now forbids it by @bogatyrjov1 in #171
• The symlink-escape guard now fails when it stops working by @bogatyrjov1 in #172

Full Changelog: v0.19.1...v0.20.0

v0.19.1

What's Changed

• Give every CI gate its own job, and stop the runner corrupting its own report by @bogatyrjov1 in #157
• CI mode had no entrypoint a customer could run, so publish the client and its gate by @bogatyrjov1 in #161
• Stop justifying a formatting rule with a guard that no longer exists by @bogatyrjov1 in #162
• Dogfood the published client from this repository's own Actions by @bogatyrjov1 in #163
• The documented command did not work in the repos this client is for by @bogatyrjov1 in #164
• The producer disagreed with itself, and the check written to catch that had never run by @bogatyrjov1 in #165
• Say plainly that 0.1.0 and 0.1.1 could not complete an ingest by @bogatyrjov1 in #166
• Carry the one fact the OIDC token cannot by @bogatyrjov1 in #167
• Carry the code that connects a repository, and stop calling the running ref the default branch by @bogatyrjov1 in #168
• A claim that lives only in the payload cannot be refused cheaply by @bogatyrjov1 in #169
• Say what a lead can see, at the moment we ask someone to supply data about themselves by @bogatyrjov1 in #170

Full Changelog: v0.19.0...v0.19.1

ci-v0.3.0

What's Changed

• Carry the code that connects a repository, and stop calling the running ref the default branch by @bogatyrjov1 in #168
• A claim that lives only in the payload cannot be refused cheaply by @bogatyrjov1 in #169

Full Changelog: ci-v0.2.0...ci-v0.3.0