Oh My Herdr v0.3.0
Pre-release
Pre-release
Linux x86_64 compatibility and host-native release preview.
Added
- A scheduled and manually dispatchable least-privilege workflow verifies the
complete isolated journey on a fresh Ubuntu x86_64 runner with exact pinned
Herdr 0.8.2 and Codex CLI 0.150.1 release assets. - The release workflow builds and tests host-native macOS Apple-silicon and Linux
x86_64 archives before assembling one exact dual-target release.
Release integrity
- Downloaded live-tool assets are size- and SHA-256-verified before extraction or
execution; unsafe or unexpected Codex archive members fail closed. - Release assembly rejects missing, extra, duplicate, renamed, or mismatched
inputs and emits one deterministic two-entry checksum manifest. - Both archives complete the installed command, guided setup, rollback, privacy,
preservation, and uninstall journey on their build hosts and receive GitHub
build-provenance attestations.
Security and compatibility
- Pull-request CI remains hermetic. Live compatibility downloads occur only on a
schedule, explicit dispatch, or clean tagged release path. - T020 adds no plugin execution, callback, paid agent task, Windows, Linux
aarch64, Homebrew, new profile, or live agent-state claim.