ContextFence v0.2.0

ContextFence v0.2.0

ContextFence turns a real access model into deterministic CI checks that prove restricted RAG context stays restricted.

Highlights

• Permission-matrix contracts. Declare identities, sources, and allow lists once; ContextFence expands them into the full set of positive and critical-deny probes.
• contextfence generate. Convert a portable access manifest into a reviewable boundary contract, with deterministic probe keys and synthetic canaries.
• A clearer first run. The interactive lab now begins with one visible cache-isolation failure, and its install and GitHub Action paths use the published package.
• Stronger discovery and handoff. This release adds citation metadata, a sitemap, expanded share metadata, and a public Boundary Baseline implementation scope.

Start here

npm install -g contextfence@0.2.0
curl -fsSLO https://raw.githubusercontent.com/devectorio/contextfence/v0.2.0/examples/contracts/mock.boundary.yaml
contextfence test mock.boundary.yaml

The CLI is Apache-2.0 open source and runs locally or in CI. It is not a security certification; validate only systems you own or are authorized to test.

If the project is useful to your team, a GitHub star helps other engineers discover it. Questions and design ideas belong in GitHub Discussions; reproducible defects belong in Issues.

ContextFence v0.1.0

What's Changed

• feat: complete ContextFence OSS launch kit by @devanchohan in #5
• chore(deps): bump the github-actions group across 1 directory with 13 updates by @dependabot[bot] in #1
• fix: preserve CLI binary in npm publish by @devanchohan in #6
• fix: smoke-test the release tarball locally by @devanchohan in #7
• fix: publish the release tarball as a local path by @devanchohan in #8

New Contributors

• @devanchohan made their first contribution in #5
• @dependabot[bot] made their first contribution in #1

Full Changelog: https://github.com/devectorio/contextfence/commits/v0.1.0