Changelog

All notable changes to Oh My Herdr are documented here. The project follows
Semantic Versioning while the public API is experimental.

0.1.2 - 2026-08-26

Security-hardening patch for the Herdr 0.8.2 Codex profile boundary.

Profile mutation checks the selected herdr executable is exactly 0.8.2
before invoking its installer, and verification cannot pass on another version.
Staged and live herdr-agent-state.sh files must match the reviewed Herdr 0.8.2
integration-v8 SHA-256 and exact executable mode; markers alone are rejected.
Managed SessionStart hooks use an exact path-aware command, type, timeout, and
object shape, preserving unrelated commands that contain similar words.
Output-capture failures terminate the complete command process group even when
the parent process has already exited.

The immutable v0.1.1 candidate stopped before packaging when its committed
third-party notice failed the release integrity check; it has no release assets.
v0.1.0 users should upgrade before applying or verifying the Codex profile.
Read-only diagnosis remains available for other Herdr versions; mutation
remains limited to Herdr 0.8.2 on macOS Apple silicon.

First public preview for macOS on Apple silicon with Herdr 0.8.2.

Read-only omhr doctor with bounded Herdr and Codex discovery, stable
diagnostics, remediation ownership, and versioned JSON.
Portable Codex awareness profile with deterministic plan output.
Exact preview and approval-bound apply using private upstream staging,
preconditions, backups, atomic writes, and a transaction journal.
Configuration-readiness verification, idempotent reapply, drift rejection, and
guarded byte-exact rollback.
Checksummed Apple silicon archive, build-provenance attestation, install and
uninstall smoke tests, compatibility evidence, and public support workflows.

No third-party Herdr plugin is installed or executed.
Unknown Herdr versions remain read-only.
Existing Codex notify and unrelated hooks are preserved.
Portable reports omit credentials, prompts, transcripts, source snippets,
private paths, configuration values, hook arguments, and raw command output.
Linux is CI-only; Windows and live state or delivery verification are not
supported in this preview.