ShipGuard 2.18.2

ShipGuard 2.18.2

This release strengthens recorder transport and state export, review page requests and file reads, imported report links, site crawl boundaries, and the optional model controller. It preserves the existing Windows recorder export path with a clear warning that Windows ACLs are not checked.

Visible behavior changes: local HTTPS sites with self-signed certificates now require trust in the host environment; review server requests through a LAN host name are refused by the origin boundary; symbolic links under _results are refused even when they point within that directory; remote HTTP is refused for the optional model controller.

Existing projects that use copied recorder or review helpers should refresh those copies after updating ShipGuard with init --refresh-copies from the installed plugin. Older recorder state export files with broad POSIX permissions are now refused with a nonzero exit and a manual correction command; ShipGuard does not change their permissions automatically.

Site crawls now decline redirects to another origin. If the starting address redirects, the crawl may cover zero pages and exit with code 3. CI that relied on HTTP-to-HTTPS or www redirects may receive incomplete coverage; select the intended origin explicitly. No other origin is added automatically.

Validation scope: validé macOS/Linux ; Windows simulé, non validé sur machine réelle. All 38 repository smoke tests pass on macOS. The Linux container passes all tests covering these corrections; its full suite has the same five unrelated failures on this release and on the 2.18.1 baseline (33/38 in both cases).

This release does not claim to resolve the remaining private findings under review.