Skip to content

v2.0.11

Choose a tag to compare

View all tags
@github-actions github-actions released this 22 Sep 08:23
· 101 commits to main since this release
v2.0.11
635274d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Patch Changes

  • c45d22e: Harden Hub recovery, add fail-closed native write isolation, and confine scout to an isolated snapshot.

    Agent cancellation is fenced with fail-closed recovery categories, trusted runtime checks, and protocol diagnostics. Native child writes are allowlisted and kernel-enforced (bubblewrap/seatbelt); glob and escape refusals are reported before a missing sandbox backend. Scout runs against an isolated snapshot with filesystem data-path boundaries, copies only Pi runtime credentials into a private directory, and removes that directory after the phase — including Darwin tmpdir aliases. Project philosophy is documented as the shared source of intent.

Assets 2
Loading