interpose v3.6.0

Install

curl -fsSL https://github.com/interposed/interpose-releases/releases/download/v3.6.0/install.sh | sh

Or pin to this version explicitly:

curl -fsSL https://github.com/interposed/interpose-releases/releases/download/v3.6.0/install.sh | sh -s -- --version v3.6.0

Verify

Every artifact is signed with Sigstore cosign (keyless — no key to trust,
the signature is bound to this repo's release workflow and logged in Rekor).
Each <file> ships a <file>.sig and <file>.pem. To verify a download:

cosign verify-blob \
  --certificate interpose-v3.6.0-linux-amd64.tar.gz.pem \
  --signature   interpose-v3.6.0-linux-amd64.tar.gz.sig \
  --certificate-identity-regexp "^https://github.com/interposed/interpose/.github/workflows/release.yml@" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  interpose-v3.6.0-linux-amd64.tar.gz

---

v3.6.0 - sovereign onboarding, network egress enforcement, cooperative consent

• Sovereign onboarding and machine lifecycle: enrollment, org roster distribution, and machine-level ambient adoption hardened (real-time and TTY-less coverage, a system trust floor so adoption can't lock out the box, a per-machine SSH toggle, and a break-glass admin terminal).
• WS2 network egress enforcement: native DNS-name allow/deny, in-kernel SNI gating, encrypted-DNS containment (DoT + DoH), and default-deny egress without prompting.
• Cooperative intent plane: a baked-in pre-flight consent contract, one batched request_approval with per-scope reasons, and a granular consent card. Scopes are now classified per-resource so a mixed network+file grant actually reaches the wire, and request_approval returns the granted/denied subset so an agent reports a withheld scope as denied, not as a failure.
• Deferred decisions: an org-wide timeout baseline distributed on the signed roster with one tap, inherited per machine unless overridden, and always fail-closed on expiry.
• Audit: uniform member/agent actor attribution and a new console / fleet-mutation / roster-diff event taxonomy.
• Fixes: network approvals now reach the wire, a ptrace prompt-storm, and a latent BPF rebuild break under modern clang (clang-18 pinned).