Skip to content

v0.5.2

Choose a tag to compare

View all tags
@lusblead lusblead released this 18 Aug 12:52
· 16 commits to main since this release
v0.5.2
989f3f1

v0.5.2 — True Governance Security Hotfix

Security (M1-B)

  • Trusted Governance Administration Plane: role appointment / dismissal / rebinding
    (kingdom_bind_role / kingdom_unbind_role / kingdom_bind_session) now require the
    real OWNER session under session-bound mode. A plain session can no longer appoint
    itself or seize a seat. (declarative demo mode stays as-is and is honestly labelled
    local-demo.)
  • GUI principal spoof removed: the gateway no longer trusts a client-supplied
    session_id. Under session-bound, all GUI write commands fail closed with
    SESSION_AUTH_REQUIRED — the GUI can never impersonate a governance role.
  • Session id exposure reduced: binding views expose only a masked
    sessionDisplay (e.g. …8f21); full session ids remain in the audit event surface only.
  • Audit actor correction: governance events now record the actual operator
    (actor_role=OWNER, actor_id=<owner binding>, target=<binding>), so "who appointed
    whom" is answerable.

Governance

  • Management actions are fail-closed when the OWNER binding has no session
    (cannot verify, does not guess).

Assets

  • dsh-kingdom-0.5.2.tgz (npm dsh-kingdom@0.5.2, latest)
  • dsh-kingdom-gui-0.5.2.zip (masked session display)

Quality

  • Plugin tests 13/13 (incl. admin-authz matrix, GUI guard, masking)
  • GUI tests 42/42
  • Source audit: docs/M1-TRUE-GOVERNANCE-AUDIT.md (G1–G4 evidence incl. end-to-end spoof chain)
Assets 4
Loading