v0.3.0 makes Codex ProofKit usable as a reusable GitHub Action while preserving its dependency-free, offline core.
Highlights
- Add a root composite Action for strict Git-tracked release audits.
- Write privacy-safe JSON and Markdown reports and a GitHub Job Summary.
- Add
receipt --git-trackedto hash the complete public release surface. - Expose proof-file paths without implicit uploads; maintainers choose whether to upload
.codex-proof/. - Add a structured, privacy-aware maintainer feedback issue form.
- Preserve the
codex-proofkit-receipt-v1schema and existing CLI exit behavior.
Quick start
steps:
- uses: actions/checkout@v5
- uses: benzzy1287/codex-proofkit@v0.3.0Verification
- 15 standard-library unit tests passed.
- GitHub-hosted
testandaction-smokejobs passed on the PR and mergedmain. - Strict Git-tracked privacy audit passed with 0 errors and 0 warnings.
- CI generated and verified the v1 SHA-256 receipt and published only the 2 KB proof artifact.
Privacy
The CLI and composite Action contain no credentials, telemetry, subscription dependency, paid service, source upload, or implicit network call. Optional artifact upload is explicit and limited to generated proof files.
Full changelog: v0.2.0...v0.3.0