v0.13.0

[0.13.0] - 2026-10-20

Documentation

• docs: document governance, roles and the security assurance case
• docs: list the project's repositories and narrow the complete mediation claims
• docs: say grant ttls are enforced at read time
• docs: add agent connect, ci grant and worktree demos
• docs: install from the shared interrupted-sh homebrew tap
• docs: describe crates.io attestation in the threat model

Fixed

• fix: honor DESTDIR and PREFIX in the installer
• fix: sign every release channel and document verification
• fix: include the thread in grant mint hints
• fix: run every bb agent as a murk agent context
• fix!: refuse to run when both key variables are set
• fix: never leave murk edit plaintext on disk
• fix: never forward a child's own early signal back to it
• fix: report an in-repo key file from doctor even with loose permissions
• fix: validate every field of a vault on load
• fix: ignore the unmaintained basic-toml advisory pulled in by age
• fix: resolve the open dependabot and scorecard alerts
• fix: let EDITOR values start with a variable assignment
• fix: upgrade rustls-webpki and webpki-roots for two tls advisories
• fix: harden pin writes and keep the key out of git subprocesses

Other

• test: cover verify, git and recover command paths
• style: apply rustfmt
• style: apply rustfmt
• test: cover secret command paths
• style: apply rustfmt
• style: apply rustfmt
• chore: add spdx headers, a header check and a code review policy
• chore: merge main into the spdx header branch
• chore: cover lint fixtures, demo tapes and new files with spdx headers
• test: cover recipient, supervision and shared command paths
• style: apply rustfmt
• test: signal from a running child, not during startup
• chore: add the spdx header to the recipient tests
• test: drop a rotation case vault validation now refuses at load
• test: drop the source-scanning git spawn invariant in favour of the behavioural test
• chore: release 0.13.0