Skip to content

MoonPermit v0.2.0 — acceptance repairs

Latest
Latest

Choose a tag to compare

View all tags
@doffice doffice released this 30 Sep 15:58
v0.2.0
22878a7
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

MoonPermit v0.2.0 fixes delegation-aware audit replay and ambiguous process argument identities, with expanded CLI and security regression coverage.

Highlights

  • Runtime::events() records checks and successful child-budget reservations; audit_events() replays both in order. Failed delegation remains atomic.
  • Command canonical identifiers preserve argv boundaries using JSON arrays. Migration: retain v0.1 implementations for old permits/receipts; normalized command strings and some grant ordering change.
  • CLI rejects non-positive repeat counts and consistently reports version 0.2.0. All six subcommands and both examples are exercised on three operating systems.
  • Public derived methods and generated interfaces are compatible with MoonBit 0.10.14.

Verified source and quality

Source commit: 22878a794c7e3fe063f62ee3681798a66ea046fa (merged PR #10).
Source tree: eed119d5fec8dcab38c4fb44c94854388d435e2c.

Main CI 36739700598 passed Ubuntu, macOS, Windows and quality jobs, using compiler/core 0.10.14+7d59c7ec9.

  • 87/87 default-Wasm tests on each platform, strict check/build/format/generated-API gates.
  • All CLI workflows and both runnable examples pass.
  • Core coverage: 565/583 (96.9%); all instrumented source: 821/939 (87.4%).
  • Three default-Wasm release benchmarks pass.
  • The attached package was generated with moon package --list; a fresh extracted copy passed 87/87 native tests.

Attached doffice-moonpermit-0.2.0.zip SHA-256:
af9224600c9a37b0a2c19258b896a91a7565dbc2512ffdef4576753b353f49c2

Distribution status

This is the verified GitHub source/package release. Mooncakes 0.2.0 publication still requires the owner's existing Mooncakes login; the registry currently contains 0.1.1. Do not claim that moon add doffice/moonpermit@0.2.0 works until registry publication and a fresh consumer test are verified. The release guide includes the exact consumer sample.

Security and provenance

Original MoonBit implementation, Apache-2.0. Replay establishes internal consistency, not cryptographic authenticity or complete-log proof; a coherently rewritten or truncated valid prefix may still pass. The guarded host uses a deterministic fake executor and is not an OS sandbox.

Assets 3
Loading