v1.2.0

Changelog

• 2986fb8 feat: catalog-sync visibility and alerting (#32)
• eb02d09 v1.1.2 follow-up: revert draft-then-publish pipeline + pin go install to v1.1.2 (#31)
• cbd774b ci(release): draft-then-publish so SLSA provenance survives immutable releases (#30)

v1.1.2

Changelog

• a0384e6 fix(catalog): rotate the self-catalog signing key off the public test key (#29)
• 95d8b0e docs(readme): use the cross-shell flag form for the check-by-hand example (#28)
• 9240f45 docs: remove em-dashes from prose and headings across the repo docs (#27)
• d9e56f7 docs(threat-model,readme): install/distribution integrity + framework-voice polish (#26)
• 04dee88 docs(release-runbook): add an every-release checklist (bump pinned go install) (#25)
• e3b3607 docs(readme): pin the go install command to a release tag (no @latest) (#24)
• 855e6bc fix(hooks): embed absolute beekeeper path in agent hook commands (fail-closed wiring) (#23)
• bcd6548 ci: importable branch ruleset for main with required checks (control 12) (#8)

v1.1.1

Changelog

• 9ca2f7c feat(cli): branded first-run welcome banner on bare beekeeper (#22)
• 0f6e07f Merge pull request #21 from home-beekeeper/docs/install-posture-accuracy
• 830618c docs(threat-model): replace stale package-manager nudge with install posture
• 0eaeed9 Merge pull request #20 from home-beekeeper/chore/archive-v1.5.0-milestone
• 2ce759f chore: remove REQUIREMENTS.md for v1.5.0 milestone close
• 9b1a598 chore: archive v1.5.0 milestone (Install Posture, released as v1.1.0)

v1.1.0

Changelog

• 4e92130 Merge pull request #19 from home-beekeeper/feat/install-posture-foundation
• 4971c3d docs(state): release-gate reviews done, H-01 fixed, PRs #19 + web #1 opened
• 1b76690 fix(31): reject posture allow --once --rule so the audit record can't over-claim (H-01)
• e1c330b docs(state): Phase 31 complete & verified; v1.5.0 code-complete, awaiting Gate 2
• 00d9f7d docs(31): install-posture coverage report with named gaps (REL-01)
• 11d383b ci(31): add e2e job and wire it into release-gate needs
• 96ab635 test(31): e2e posture git-remote warn + block at the live hook
• f87241a test(31): scoped override enforce-warn + ecosystem-scoped + persistence
• 35fff2b test(31): live-path block-mode for lifecycle + git-remote rules
• 44aa666 test(31): adapter fetch-timeout stays fail-soft warn under block mode
• a1b4452 test(31): release-age 24h boundary + each lifecycle script type fires
• 30b44cd docs(state): Phase 30 complete & verified (both repos); plan Phase 31
• 02def02 docs(30-01): add install-posture.md, document SENTRY-009 in threat model
• 0b0bfcf docs(30): plan Phase 30 install-posture docs, home page & boundary statements
• ed4958e docs: capture install-posture GSD handoff; record schema-keep decision
• 1b80fe2 docs(phase-29): mark complete (scoped override + per-rule severity)
• 6ee8185 test(29-02): scoped override tests incl. the catalog-bypass security distinction
• ead635d feat(29-02): posture override CLI + audit record + display-only TUI card (IPOVR-01/02)
• 1af13d5 feat(29-02): posture-scoped allowlist + allow-once store (IPOVR-01/02)
• 5771433 docs(phase-29): record 29-01 complete (per-rule severity); 29-02 in progress
• 86a5c9e test(29-01): per-rule posture severity + tighten-only + fail-soft-unknown (IPOVR-03)
• 9debb01 feat(29-01): posture adapter applies per-rule action; unknown stays warn (IPOVR-03)
• b2e316c feat(29-01): tighten-only untrusted posture merge (IPOVR-03 self-defense)
• cd5af47 feat(29-01): per-rule posture severity config + validation (IPOVR-03)
• bfca385 docs(phase-29): plan per-rule severity opt-up + scoped override
• 7a81ca2 docs(phase-28): mark complete; advance tracking to Phase 29
• cbc3ae3 feat(28-01): derive the displayed release-age window from the policy default
• 2e6f41f style(28-01): terminate the detected-version clause with a period
• b0b662f feat(28-01): read-only install-posture TUI dashboard panel (IPVIEW-01)
• eb53632 feat(28-01): beekeeper posture read-only CLI view (IPVIEW-02, IPBND-01)
• 3b1d61c feat(28-01): pure install-posture comparison model + npm detection (IPVIEW-01)
• 488d6a1 docs(phase-28): plan the read-only beekeeper posture view (CLI + TUI)
• d0ccd9a docs: Gate 1 PASSED — record boundary ratification + IPOVR-03 scope add
• 9658888 docs(27-03): tighten boundary copy so the shim reads as the opt-in exception
• 93312ba feat(27-03): make the shim actually enforce install posture (NMIG-04)
• 8de66fc docs(phase-27): mark implemented + verified; STOP at Gate 1
• 6387b20 style(phase-27): remove em-dashes from new install-posture code and comments
• 58921ff feat(27-02): Sentry observes install-class spawns (detection only, IPST-06)
• 391c4b4 feat(27-02): canonical install-posture boundary statement (IPBND-01)
• f575365 feat(27-01): wire install posture into the pre-exec hook (warn default)
• 5275296 feat(27-01): cached lifecycle-script adapter in internal/catalog
• df29105 docs(phase-27): plan Layer 1 hook enforcement + Sentry observation (Gate 1)
• 23decc6 docs(phase-26): mark complete; advance tracking to Phase 27
• fe1c692 feat(26-02): remove the package-manager nudge + repoint the shim
• 347e3cd feat(26-02): relocate pm-config readers into internal/posture
• 4451a1f feat(posture): detect git/remote-URL installs as a pure posture rule (IPST-04)
• c004b2d docs(phase-26): plan nudge removal + posture rule foundation
• 8ac429e docs: start milestone v1.5.0 Install Posture (ships as v1.1.0)

v1.0.1

Changelog

• 5d1db0b fix(security): repoint self-integrity feed off the defunct mzansi-agentive.io domain (F1) + accurate protect help (F2) (#18)

v1.0.0

Changelog

• db4f34f fix(release): make .goreleaser.yaml actually build (4 latent config bugs) (#17)
• 7d45496 fix(release): never abort the release on eBPF generate (fall back to stubs) (#16)
• b061013 fix(ci): kill corpus salt -race flake + add coverage-floor gate (#15)
• bc3288b docs: eBPF/kernel CI decoupling + gateway remote-bind accuracy (#14)
• 91973b1 feat(tui): structured audit log viewer with decision-logic detail (#12)
• acb4348 feat(tui): first-responder settings panel (auto-quarantine + corpus) (#13)
• 70638ff docs(ci): add CI/CD security hardening audit (Phase 1) (#1)
• 5d361f1 ci: add CODEOWNERS routing to the maintainer (control 10) (#7)
• 84694fc ci: Renovate digest pinning and 7-day cooldown (controls 8, 9) (#6)
• 42cf960 ci: harden all workflows (SHA-pin, least-privilege, Harden-Runner, zizmor) (#10)
• 4d476d1 test(check): skip the runCheck latency gate under -race (de-flake) (#11)
• 93fed18 docs(readme): reposition tagline to 'threat intelligence'; regenerate banner
• 695a905 fix(ci): unbreak CI — pollen path, cross-platform tests, sentry bug, eBPF/kernel decouple (#9)
• bdbdc6f docs(readme): adopt launch-approved README (copy/readme.md)
• 299e92f docs(readme): add banner GIF to header
• 51023a1 chore(ci): drop web paths-ignore; remove orphaned pnpm workspace files
• 98482b5 chore: rename to home-beekeeper org + threat-model §14 remediation
• 70b01e4 fix(sec): exit-2 self-quarantine under --hook + dry_run-honoring sync daemon (#3, exit-2)
• 32a977c Merge branch 'worktree-agent-a6a5852093b312aba' into security/remediation-260615
• 1d96a55 Merge branch 'worktree-agent-ae76318ef9361cc16' into security/remediation-260615
• 1af4c48 Merge branch 'worktree-agent-a68b9681ed0886cc1' into security/remediation-260615
• fa3fe4f Merge branch 'worktree-agent-a76a0d9a01b7d5bde' into security/remediation-260615
• ed35319 Merge branch 'worktree-agent-a81ee9b7f77c12025' into security/remediation-260615
• bc6c322 fix(check): close five self-protection bypasses in the hook handler
• ed5b74f fix(security): close untrusted-layer relaxations + quarantine TOCTOU + corpus fuzz
• a04dfca @ fix(gateway,ipc): close 5 proxy/IPC security findings
• f304bea fix(policy): close 5 egress/exfil/overlay/pkgparse bypasses
• 6725e13 fix(audit,sentry): redact sentry audit records, validate remote sinks, honor redact_patterns
• be79af2 fix(sec): gate BEEKEEPER_HOME + harden catalog integrity (findings #1,#2,#13,#14)
• 95193e0 @ chore: remove stale root PRDs + design prototype HTMLs
• b2be703 @ test(e2e): prove the live check binary applies the local overlay (FRB-05)
• c93596b @ chore: remove REQUIREMENTS.md for v1.4.0 milestone
• cb1feee @ chore: archive v1.4.0 milestone files
• ff352bb @ Merge branch 'style/home-ui-tweaks' into main
• ab0c411 @ docs(quick-260615-ky4): FRB-05 overlay-in-check-path fix (plan + summary + STATE)
• 91bc863 test(260615-ky4): add RunCheck-level overlay regression tests (FRB-05)
• 4d1a001 feat(260615-ky4): wire local catalog overlay into live check hot path (FRB-05)
• ca96755 @ docs(audit): v1.4.0 milestone audit — gaps_found (FRB-05 enforcement)
• b1e01e4 @ chore: add Codex AGENTS.md + home/TUI HTML prototypes
• ece24f3 @ docs(readme): document the v1.4.0 local adjudicated corpus
• 7d78452 @ chore(git): ignore local agent tooling state
• 0589a47 docs(25): record coverage-hardening + system-e2e in STATE
• b7de093 docs(25): v1.4.0 coverage-hardening + system-e2e report
• d9ce7e9 test(v1.4.0-e2e): add system-wide corpus moat-loop E2E gate
• ab93468 test(v1.4.0-cov): corpus write + catalogs sync branch coverage
• 1020b9c test(v1.4.0-cov): 100% coverage for mergeCorpus/mergeAutoQuarantine, local_overlay, firstresponder helpers
• 767a3a9 test(v1.4.0-cov): drive internal/corpus coverage 75.1% → 91.7%
• 4f1f59c docs(25): record code-review pass in STATE (4/4 warnings fixed)
• 59c600c docs(25): code review resolved — 4/4 warnings fixed
• 1ccf11c test(25): fix WR-02/WR-03 offline + p99 gates (LAUNCH-03)
• 24a3459 test(25): fix WR-01/WR-04 false-confidence gates in FRB evaluator (LAUNCH-01)
• 55780e5 docs(25): add code review report — 0 crit / 4 warn / 3 info
• c7145b0 docs(25): record secure-phase pass in STATE (8/8 T-25-* closed)
• e5f801e docs(phase-25): add security threat verification — 8/8 closed (threats_open:0)
• d4d4709 docs(phase-25): complete phase execution — verifier 4/4 passed (LAUNCH-01..04)
• 4f0904e docs(25-03): complete LAUNCH-04 docs -- THREAT-MODEL §13 + honesty checkpoint approved
• b8150cf docs(25-03): add THREAT-MODEL.md §13 corpus residual gaps + grep tripwire
• 41dac1a docs(25-02): complete LAUNCH-03/04 test gates — p99 latency + offline proof + no-exfil AST gate
• a0251d5 test(25-02): add TestCorpusStoreHasNoNetworkImports AST import-purity gate (LAUNCH-04)
• e315582 test(25-02): add TestBenchmarkRunCheckGate + TestOfflineProtective (LAUNCH-03)
• 198e015 docs(25-01): complete moat population proof — 11-pt gate + 8-pattern LAUNCH-02 table
• a155667 test(25-01): add TestAllSentryPatternsProduceMoatRecord — 8-pattern moat gate (LAUNCH-02)
• b93040a test(25-01): extend FRB evaluator gate to 11 assertions (LAUNCH-01)
• b35ba03 docs(25): plan-checker PASSED + STATE planned (Launch Readiness)
• ee0b80c docs(25): create phase plan (Launch Readiness, LAUNCH-01..04)
• ee61efe docs(25): pattern map for Launch Readiness
• 889e9d6 docs(25): research + validation strategy for Launch Readiness
• facdbc5 docs(24): record secure-phase pass in STATE (13/13 threats closed)
• c48db19 docs(24): add security threat verification — 13/13 closed
• 33b58a4 docs(24): complete phase — verifier 10/10 passed, FRB-03 approved
• a92abd9 docs(24-03): complete catalogs-sync wiring + Nx evaluator gate -- 24-03-SUMMARY.md
• b71c4a5 test(24-03): synthetic Nx Console evaluator gate + fix Corpus config merge
• 2448566 feat(24-03): wire FRB corpus pass into runCatalogsSync (FRB-01/04/05)
• e7981f5 test(24-03): TestRestoreCorpusQuarantineEntry FRB-03 reversibility
• 0bfe530 docs(24-02): complete first-responder corpus binding plan — 24-02-SUMMARY.md
• b048e6f test(24-02): FRB-02 static no-purge gate + full watch/corpus/catalog verification
• b1d1ac0 feat(24-02): extend RunFirstResponder with corpus-adjudication loop (FRB-01/02/04)
• 8fd529f test(24-02): RED corpus test cases for RunFirstResponder corpus path
• 0a557ea docs(24-01): complete corpus reader + local overlay plan — 24-01-SUMMARY.md
• 8f5c818 feat(24-01): local catalog overlay + MultiIndex overlay extension (FRB-05)
• 64cddc9 feat(24-01): implement ReadMaliciousRecords (FRB-01 signal source)
• aa530dd test(24-01): RED skeletons for ReadMaliciousRecords + local overlay tests
• 8b5e12c docs(24): mark phase planned in STATE + ROADMAP
• d3586fe docs(24): resolve plan-checker findings (2 blockers + 1 warning)
• 85e8072 docs(24): create phase plan — First Responder Corpus Binding (3 plans / 3 waves)
• 6deede3 docs(24): add pattern map (new files -> live analogs)
• 4bfb6bb docs(24): add phase research + validation strategy
• b252543 docs(23): record code-review pass + fixes in STATE
• 5994708...