Skip to content

0.1.5

Choose a tag to compare

View all tags
@christopherkarani christopherkarani released this 21 Sep 14:38
· 1001 commits to main since this release
v0.1.5
854e691

Hook-grade shell guard for Pi, Grok, OpenCode, Claude, Codex, Cursor, Hermes, and OpenClaw.

What's new since 0.1.4

  • Isolation: compile a contained IsolationPlan and apply it through Seatbelt (macOS) and Landlock (Linux) so outside writes fail closed
  • LocalExecutor.perform runs an already-decided authorization once; pending cannot spawn
  • launchContainedHost starts OpenCode under a contained plan with inherited stdio
  • Unquoted newlines are command separators, so a later-line printf of .env is not a pipe operand
  • Repeat denials reuse the same allow-once code instead of minting a treadmill
  • Doctor pack health reads from config, not a stale rvd catalog
  • Host Ask resolve is pause then grant; leftover hookWire adapter retired
  • Typed AgentRequest, IsolationPlan, ExecutableAction, and IPC helper boundaries

Install:

curl -fsSL https://rykanv.com/install | sh
Assets 7
Loading