Skip to content

0.1.3

Choose a tag to compare

View all tags
@christopherkarani christopherkarani released this 16 Sep 22:11
· 1037 commits to main since this release
v0.1.3
c5e9ce0

Hook-grade shell guard for Pi, Grok, OpenCode, Claude, Codex, Cursor, Hermes, and OpenClaw.

What's new since 0.1.2

  • Linux aarch64/x86_64 is a supported install platform (Darwin remains Apple Silicon)
  • File-tool Read / Edit / Write of catalog secret paths is denied on Grok, Claude, and Cursor
  • Host Ask: Claude and Hermes confirm-then-spend; OpenClaw spend-first Ask via plugin-owned wait
  • Hosts that cannot pause quiet-allow gray-area / mandatoryHuman; unlockable pack deny still denies
  • Hook deny mints allow-once; redeem with rv allow-once; default day-one includes system.disk
  • Deeper unwrap (pipes, stdin, process substitution; timeout/nice/mise/ssh prefixes)
  • Typed policy predicates and English compile (rv policy); --help / --version documentation flags are allowed
  • Setup-written host adapters are proven in CI on an isolated HOME

Install:

curl -fsSL https://rykanv.com/install | sh
Assets 7
Loading