0.6.0
Release Notes
Added
- Multi-agent guardrail hooks.
vallum hook --agent claude|cursor|gemini|codex
extends the pre-exec Allow/Ask/Deny guardrail to Cursor
(beforeShellExecution, native ask), Gemini CLI (BeforeTool), and Codex
CLI (PreToolUse). On agents without a native ask, Ask fails closed as a
deny with instructions.vallum install-hook --agent <x>/
uninstall-hook --agent <x>perform idempotent JSON merges into each
agent's config;vallum doctorreports per-agent hook status;policy.log
lines now recordagent=. Barevallum hookstill means Claude Code, and
Claude hook output is byte-identical to v0.5.1.
Install vallum 0.6.0
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/kahramanemir/Vallum/releases/download/v0.6.0/vallum-installer.sh | shInstall prebuilt binaries via Homebrew
brew install kahramanemir/tap/vallumInstall prebuilt binaries into your npm project
npm install vallum@0.6.0Download vallum 0.6.0
| File | Platform | Checksum |
|---|---|---|
| vallum-aarch64-apple-darwin.tar.xz | Apple Silicon macOS | checksum |
| vallum-x86_64-apple-darwin.tar.xz | Intel macOS | checksum |
| vallum-aarch64-unknown-linux-musl.tar.xz | ARM64 MUSL Linux | checksum |
| vallum-x86_64-unknown-linux-musl.tar.xz | x64 MUSL Linux | checksum |
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo kahramanemir/VallumYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>