Skip to content

Vanta v0.9.8

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 24 Jul 15:04
· 1 commit to main since this release
v0.9.8
7189b76

Vanta v0.9.8

Vanta v0.9.8 turns successful Desktop work into reusable, inspectable runs while preserving the kernel boundary on every replay.

Added

  • Each Desktop user turn becomes a versioned local run record containing its prompt, structured file inputs, provider/model, redacted timeline, approval receipts, output, status, usage, and lineage.
  • Saved runs supports search, progressive inspection, save/delete, editable fork, and replay.
  • Replay review compares file hashes, project root, provider, model, and available tools before a fresh turn is submitted.
  • Safe snapshots are project-scoped, owner-only, secret-scanned, and limited to 10 MB per file and 50 MB per run.
  • Legacy sessions and interrupted checkpointed turns appear with explicit incomplete provenance.
  • Content-free metrics record save/reuse activity, time to submit, completion status, and drift blocks.
  • Buzz ACP commands and a broader integration catalog connect Vanta to Buzz, Dropbox, Google Drive, Slack, and Trello.
  • A per-turn tool-budget circuit breaker yields before tool use becomes unbounded.

Fixed

  • Recorded approvals and tool calls never become replay authority. Current kernel policy applies, and replayed actions request fresh approval when required.
  • PDF loading uses the pdf.js-compatible typed-array input.
  • Terminal resize recovery, clipboard-image parsing, model identity reporting, and expired Claude Code credential fallback are repaired.

Verification

  • Full TypeScript suite: 1,473 test files and 13,687 tests passed, with 3 intentional skips.
  • TypeScript typecheck, production Desktop build, architecture tests, and production Electron layout/replay smoke passed.
  • The Electron smoke loaded a saved run from isolated disk state, inspected provenance, reviewed drift, and dispatched a fresh replay with structured file metadata. Its final provider response was mocked; it does not establish a live paid-provider completion.
  • Production feature sources and built assets produced zero secret-scanner hits. No smoke records were left in the operator's run library.
  • The tag workflow builds and publishes cross-platform kernel assets. This release does not claim a new notarized Desktop DMG.

Full changelog: v0.9.7...v0.9.8

Assets 14
Loading