v1.0.1

Changelog

• 77f1cc5: Check the line that says what version this is (#36) (@mmedum)
• 1d7070c: Move the gates to scripts, in Go, and check the two lists match (#37) (@mmedum)
• c5ee5f4: Let the parity gate see a run: block, and the identifier scan see a binary (#38) (@mmedum)
• 76c5344: Say why the consent screen needs four scopes (#39) (@mmedum)
• 7e74e27: Hold the setup step to the code it describes (#40) (@mmedum)
• e70b570: Tell the model about the server it is actually talking to (#41) (@mmedum)
• 41ee485: Name an exported file the way a person reads it (#42) (@mmedum)
• 4e2f80f: Release 1.0.1 (#43) (@mmedum)

Built by GoReleaser from the tag. Verify a download against
checksums.txt; every archive carries the binary, LICENSE and README.

v1.0.0

Changelog

• 2afa031: Release 1.0.0 (#35) (@mmedum)

Built by GoReleaser from the tag. Verify a download against
checksums.txt; every archive carries the binary, LICENSE and README.

v0.9.5

Changelog

• ed5caf0: Pin the shell in every workflow, and the scanner beside it (#30) (@mmedum)
• a7cfb7f: Say what cosign 3 actually changed (#31) (@mmedum)
• 8ce8972: Say less in doctor, and keep a person out of the transcript (#32) (@mmedum)
• dae68df: Make the gates see what they claim to see (#33) (@mmedum)
• 1450d32: Release 0.9.5 (#34) (@mmedum)

Built by GoReleaser from the tag. Verify a download against
checksums.txt; every archive carries the binary, LICENSE and README.

v0.9.4

Changelog

• cd25e1c: Make a delete name its target twice, and close three gate gaps (#26) (@mmedum)
• 1409fb9: Move the coverage and staleness gates into Go, with tests (#27) (@mmedum)
• 7a6bce5: Keep a verdict on main when a run is superseded (#28) (@mmedum)
• 87b264a: Release 0.9.4 (#29) (@mmedum)

Built by GoReleaser from the tag. Verify a download against
checksums.txt; every archive carries the binary, LICENSE and README.

v0.9.3

Changelog

• c111734: Make the error vocabulary one list, and split the two ambiguities (#23) (@mmedum)
• c66a290: Prove a dry run sends nothing, for every tool that offers one (#24) (@mmedum)
• fae543e: Release 0.9.3 (#25) (@mmedum)

Built by GoReleaser from the tag. Verify a download against
checksums.txt; every archive carries the binary, LICENSE and README.

v0.9.2

Changelog

• 9bb73d1: Audit the claims: ids in logs, and a pin that was not one (#21) (@mmedum)
• 018596c: Release 0.9.2 (#22) (@mmedum)

Built by GoReleaser from the tag. Verify a download against
checksums.txt; every archive carries the binary, LICENSE and README.

v0.9.1

Changelog

• fb7099b: Test the error path end to end, the history, and a conflict (#19) (@mmedum)
• b63c61a: Release 0.9.1 (#20) (@mmedum)

Built by GoReleaser from the tag. Verify a download against
checksums.txt; every archive carries the binary, LICENSE and README.

v0.9.0

Changelog

• 98ae73b: Run the ported harnesses, and fix everything the runs and three reviews found (#17) (@mmedum)
• 98095a3: Release 0.9.0 (#18) (@mmedum)

Built by GoReleaser from the tag. Verify a download against
checksums.txt; every archive carries the binary, LICENSE and README.

v0.8.1

Changelog

• 523ab71: Sign with a cosign bundle, and pin what the installers install (#14) (@mmedum)
• ab1bc27: Untrack Claude Code's local settings temp files (#15) (@mmedum)
• bc62301: Release 0.8.1 (#16) (@mmedum)

Built by GoReleaser from the tag. Verify a download against
checksums.txt; every archive carries the binary, LICENSE and README.

v0.7.0

Changelog

• 8b8f67f: Make releases verifiable, not just downloadable (@mmedum)
• f373e66: Release 0.7.0 (@mmedum)

Built by GoReleaser from the tag. Verify a download against
checksums.txt; every archive carries the binary, LICENSE and README.