v0.3.1

0.3.1 — Recording boundary hardening

Release commit: b11f3ab4ad6f465fc5ae93bd5e203f5879425155

Fixed

• Prevent late FFprobe validation from publishing a Saved Recording after terminal timeout, cancellation, or cleanup.
• Re-attest the approved top-level origin before and after each action and after pointer visual tails, so cross-origin transitions fail closed before another action can run.
• Add public-flow regressions for pointer-tail origin changes and late validation, plus a real subprocess cancellation test.

Verification

• 281 automated tests passed.
• Coverage: 92.01% lines, 84.24% branches, 91.90% functions.
• Official pinned and current OpenAI plugin and skill validators passed.
• GitHub Actions test, analyze, and CodeQL checks passed.
• Chrome 150.0.7871.125, Codex desktop/Chrome plugin 26.715.31925.
• Live frame-contract gate passed with one received and acknowledged frame.
• Two sequential H.264/yuv420p MP4 recordings passed with distinct paths, 10 fps, at most 720p, and no audio.
• Public W3C pointer-click/same-origin recording visibly confirmed the cursor and green click ring.
• Cross-origin transition failed with origin_changed_during_recording, skipped the next action, and published no media.
• The Codex in-app Browser remains unsupported and fails closed during preparation.

Assets

• codex-browser-recorder-v0.3.1.zip
• codex-browser-recorder-v0.3.1.zip.sha256
• SHA-256: 0a3e56b7fa750120626ee8b1cd9e38ff4e3ce1906c3c8ce5dd91f2eeea763869

Generated recordings and browser diagnostics are intentionally not attached.