Skip to content

v0.2.6

Choose a tag to compare

View all tags
@dahai80 dahai80 released this 30 Aug 07:10
· 7 commits to main since this release
v0.2.6
e92d81a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Patch Release v0.2.6

Patch over v0.2.5. Ships fusion-guard Phase 3 executor consumer (Issue #23, PR #30):

  • New crate fe-guard — sync UDS client + local wire-type mirror + rules cache (unsafe_code="deny", 0 new deps).
  • fe-security — guard orchestration + verdict mapping (Block|L4→block, L3→block, Redact→block, Preview→allow, Allow+L1/L2→allow) + degraded fail-closed on daemon down (never fail-open).
  • fe-core — ExecutionResult.guard_action_id + seatbelt gating E7 + TOCTOU recheck H4 (symlink_metadata, safe Rust).
  • fe-pyo3 + Python — guard_sock/guard_tenant plumbing, guard OFF by default (backward-compatible).

R4 resolution: existing static blocklist + whitelist fence = compile-time fail-closed fallback; DANGEROUS_BINS const not reintroduced.

Verification

  • 496 Rust tests + 206 Python tests green (1 TCC skip).
  • clippy/fmt/ruff clean (only upstream block v0.1.6 baseline warning).
  • maturin develop --release builds; __version__ == "0.2.6".

Full Changelog: v0.2.5...v0.2.6

Assets 2
Loading