Skip to content

v1.1.0

Latest

Choose a tag to compare

@github-actions github-actions released this 28 Aug 14:20
f12bba5

v1.1.0

Policy configuration is now externalized and overridable without forking the binary.

Policy config

  • Policy tables moved from main.go into embedded config/policy.json, loaded at init via a hand-rolled JSON parser in policy.go (~6 µs/process, no measurable e2e regression).
  • ACG_POLICY_CONFIG is an overlay (union + disable via - prefix / clear via []), not a full replacement.
  • Default config/policy.json is self-protected from agent edits outside this repo (protected_paths + cwd gate).

Docs & tooling

  • README policy section rewritten: hard allow/deny vs macOS osascript install confirmation; Go 1.27 requirement.
  • policy_bench_test.go micro-benchmarks on the production loadMergedPolicyConfig path; notes in docs/config-extraction-experiments.md.

Install / upgrade

go run ./cmd/install

Or download agent-command-guard-1.1.0.tgz and run bun package/dist/install-cli.js.

Full changelog: v1.0.0...v1.1.0