Oh My Herdr v0.1.3

Changelog

All notable changes to Oh My Herdr are documented here. The project follows
Semantic Versioning while the public API is experimental.

0.1.3 - 2026-08-26

External-ownership safety patch for the Codex profile boundary.

Fixed

• Profile mutation rejects every present non-writable managed target before the
  Herdr installer runs, preserving configuration owned by Nix, Home Manager,
  chezmoi, another owner, or a read-only policy.
• Apply rejects a non-writable CODEX_HOME, and apply plus semantic verification
  reject a final-component root symlink instead of following it into another
  configuration root.
• Read-only diagnosis resolves regular relative CODEX_HOME values to the same
  physical managed-hook identity used by apply and verification.

Security and compatibility

• v0.1.2 remains suitable for read-only diagnosis but must be upgraded before
  profile mutation or semantic verification.
• The supported runtime remains Herdr 0.8.2 on macOS Apple silicon; no plugin,
  agent, or platform claim is broadened.

0.1.2 - 2026-08-26

Security-hardening patch for the Herdr 0.8.2 Codex profile boundary.

Fixed

• Profile mutation checks the selected herdr executable is exactly 0.8.2
  before invoking its installer, and verification cannot pass on another version.
• Staged and live herdr-agent-state.sh files must match the reviewed Herdr 0.8.2
  integration-v8 SHA-256 and exact executable mode; markers alone are rejected.
• Managed SessionStart hooks use an exact path-aware command, type, timeout, and
  object shape, preserving unrelated commands that contain similar words.
• Output-capture failures terminate the complete command process group even when
  the parent process has already exited.

Security and compatibility

• The immutable v0.1.1 candidate stopped before packaging when its committed
  third-party notice failed the release integrity check; it has no release assets.
• v0.1.0 users should upgrade before applying or verifying the Codex profile.
• Read-only diagnosis remains available for other Herdr versions; mutation
  remains limited to Herdr 0.8.2 on macOS Apple silicon.

0.1.0 - 2026-08-26

First public preview for macOS on Apple silicon with Herdr 0.8.2.

Added

• Read-only omhr doctor with bounded Herdr and Codex discovery, stable
  diagnostics, remediation ownership, and versioned JSON.
• Portable Codex awareness profile with deterministic plan output.
• Exact preview and approval-bound apply using private upstream staging,
  preconditions, backups, atomic writes, and a transaction journal.
• Configuration-readiness verification, idempotent reapply, drift rejection, and
  guarded byte-exact rollback.
• Checksummed Apple silicon archive, build-provenance attestation, install and
  uninstall smoke tests, compatibility evidence, and public support workflows.

Security and compatibility

• No third-party Herdr plugin is installed or executed.
• Unknown Herdr versions remain read-only.
• Existing Codex notify and unrelated hooks are preserved.
• Portable reports omit credentials, prompts, transcripts, source snippets,
  private paths, configuration values, hook arguments, and raw command output.
• Linux is CI-only; Windows and live state or delivery verification are not
  supported in this preview.