v1.0.0

1.0.0 (2026-07-13)

Bug Fixes

• cli: resolve real paths in entrypoint guard so the pinned bundle runs behind symlinks (9dde7de)
• skills-only distribution + 3 correctness bugs found by real-world Claude testing (d5fc796)

Features

• claude-code: full adapter — prompt block with redacted copy, sensitive-path deny, redact-and-restore hooks, idempotent installer (5a37b72)
• cli: vault with HMAC placeholders + redact/restore + scan/pipe/allow/vault commands (ee7d251)
• codex: adapter (prompt block + tool-input protection, post no-op documented) + hooks.json/config.toml installer with managed TOML block (30d43c8)
• engine: gitleaks-derived detection engine — 222 converted rules, entropy/keyword/stopword gates, Luhn+IIN card rule, hybrid gitleaks pass (1ea6363)
• opencode: plugin with in-place prompt redaction, tool deny/restore, output redaction + installer (plugin-file and via-config modes) (9d8e4c8)
• scaffold secretgate CLI (family conventions, two-bundle tsup, vendored gitleaks rules) (6537602)
• status doctor, path-only/scoped rule semantics, self-scan dogfood clean, SKILL.md + README threat model, rules:sync (6bc1a6e)