Skip to content

NockGuard v0.7.1

Choose a tag to compare

View all tags
@miraanocktech miraanocktech released this 14 Oct 04:50
· 9 commits to main since this release
v0.7.1
4e6baf7
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

NockGuard v0.7.1 fixes a gateway race on the first request after initialize, keeps idle timing accurate after a slow initialize, and makes release binaries report a clean source tree.

Install on macOS: brew install nocktechnologies/tap/nockguard (installs nockguard and nockguard-wall). Existing users: brew upgrade nocktechnologies/tap/nockguard. Linux and macOS archives with SHA256SUMS are attached below.

Fixed

  • mcp-gateway releases an SSE initialize session before it delivers the matching result, so an immediate follow-up no longer gets a spurious 429 gateway busy.
  • mcp-gateway does the same for a validated JSON initialize session.
  • mcp-gateway refreshes the session idle timeout after a JSON or SSE initialize result finishes writing, without overwriting the state of a follow-up already in progress. A slow initialize write no longer uses up part of the idle timeout.
  • Release builds ignore the local dist/ directory, so release binaries no longer report a modified source tree (+dirty, vcs.modified=true).
  • The vuln-scan helper (.claude/commands/vuln-scan.md and the Warden template copy) shows the verify --all command again and rates a [SKIP] line (invalid agent name) as HIGH.

Documentation

  • Session handlers behind the hosted gateway must honor request cancellation. A handler that ignores it is outside the gateway's guarantee. A new test runs the production listener with required auditing, blocks another session's signed write, and shows the initialize result still arrives within two seconds.
  • The README shows the Live Wall over a real signed trail, CONTRIBUTING lists the checks CI runs (gofmt, go test -race, the Wall browser test and the quickstart acceptance), and the approvals page links to the README policy rules section.
Assets 7
Loading