Security-hardened release. This release supersedes v1.0.0.
Key hardening:
- Apply/Restore no longer accept a manifest override
- Exact canonical live
cua_nodehelper path only - Reparse-point checks cover every existing component from the drive root through the helper and backup path
- Process enumeration fails closed and blocks the Codex UI, code-mode host,
node_repl, and runtime Node - Syntax validation uses only the same runtime's valid OpenAI-signed
node.exe; no PATH fallback - Complete manifest and all mutable trust checks are repeated immediately before atomic replacement
- Shared transform module and expanded public guardrail tests
- Sanitized validation-evidence register with direct issue-comment links
Validation: 99 public guardrail assertions passed; 102 passed with the private exact-hash fixture. No live runtime was modified.
Current @oai/sky 0.6.6 builds remain audit-and-retest only. Do not apply the legacy patch when the regression gate passes.