v0.222.0

[0.222.0] - 2026-08-04

Features

• (regions) A grant may name a credential store
• (regions) A third face, so a directory can be written into but not replaced

Bug Fixes

• (pulumi) Bound config to its bare form, and remove the get allowance
• (pathgate) Let a gate carry both a handler and flags
• (pulumi) Support -C/--cwd with a locus gate, and repair a file I corrupted
• (registry) Remove 30 dead duplicate declarations found by the tree guard
• (registry) Clear the last 5 duplicate declarations; backlog now empty
• (registry) Assert a candidate sub declares no nested subs
• (repo) Restore COMMANDS.md and make its generation atomic
• (regions) A grant covers the subtree it names
• (regions) Freeze writes to the harness settings file safe-chains trusts
• (nudge) Tell the user how to allow a credential path
• (regions) Compare the naming test against the deepest secret node
• (registry) Stdin is not a workspace file for any executor
• (engine) A process substitution is never an executor
• (nudge) Stop advising a grant for a write that can never be granted
• (engine) An informational flag is not a write with a hidden target
• (rmdir) Gate the operand locus, like every other destroy
• (regions) Stop a grant relocating the trust root
• (regions) A home-anchored node must protect the absolute spelling too
• (engine) Three defects in the rebind face, found reviewing it
• (cli) Default --root to --cwd, as the hook already does
• (regions) A freeze must survive a raised level, not just a grant
• (targets) Claude permission files are trust for Claude only
• (pathgate) Hand a colon-bearing value to the executor gate
• (engine) A URL is never an executor
• (pathgate) Judge a declared flag value instead of pre-filtering it
• (pathgate) Drop the positional pre-filter too, and delete it
• (fuzz) Silence the config diagnostic under cargo fuzz
• (cli) The CLI is the Claude persona, so it honors Claude grants
• (cli) Decide as the hook decides, coverage included

Refactor

• (copy) Write the shipped copy in sentences, not dashes
• (regions) Canonicalize at the choke point, not per caller
• (pathgate) Hide the fuzz-only judge seams from the public API

Documentation

• (todo) Correct the find "scale gap" entry — it was a misreading
• (todo) Re-verify the exec-gate class, and correct two stale headings
• (pulumi) Replace the doc-guessed config research with measured facts
• (pulumi) The config blocker rested on a wrong premise — config is a local FILE
• (pulumi) RESOLVE the config set question — the backend is ambient
• (todo) Record three structural classes probed clean, and the one real gap
• (design) Spec the refusal copy, keyed to emission rather than harness
• (design) Add ten worked examples to the refusal-copy spec, and a style rule
• (design) Revise the refusal examples on review, and record a UX inconsistency
• (design) Spec acknowledged grants so a user statement can cut through
• (design) A grant should cover what it names, not require an acknowledgement
• (design) Record partial-implementation risks for both specs
• (design) Enumerate every carve-out kind and rule on each
• (design) Decide system-integrity is absolute, correcting a false argument
• (design) Record what is settled and what still needs checking
• (design) Draft the user-facing docs change for grants
• (design) Record a blocker in the grants plan, and close two checks
• Document that a grant covers what it names
• (regions) Remove a doc comment stranded by the peer shield removal
• Say what write = true on a credential store actually allows
• Record what safe-chains cannot see, and the ~ decision
• (todo) Record what this stack defers, with the evidence
• (todo) Clear the nightly slow-units, and record how to measure them

Testing

• (registry) Guard the command TREE, not just its contents

Miscellaneous

• (fuzz) Replay every target per push, and test for drift