0.6.16

One record system for the curl command and Omna for Chrome. Every receipt is now built from the masking engine's own audit events: what was found (kind, which layer caught it, what was done) and a fingerprint of each value — never the value.

• Value fingerprints are keyed per computer. A plain hash of a short value (a 9-digit ID, a phone number) can be worked back out by hashing every possible value; Omna's fingerprints are keyed with a secret that never leaves your machine, so they cannot. The same value is still recognised again on the same machine.
• Omna for Chrome's records join this chain. While the curl command runs, what Omna for Chrome masks (text you hid, files, pictures) is added to the same hash-chained receipts, and omna report shows it under the "chrome" door.
• The totals in a receipt are worked out from what was found, so they can never disagree with it.
• The WebSocket path now records which layer caught each value, like every other way in.

Needs the masking engine omna-pii-mask 0.2.19 (installed automatically).

Install or upgrade: curl -fsSL https://omna.dev/cli/install.sh | sh · brew upgrade --cask gaurjin/omna/omna