v1.67.2

1.67.2 (2026-08-20)

Bug Fixes

• auth: a shadowMode response must not resolve a taint review either (review finding) (b38e3a5)
• auth: a taint review is never resolved by the SaaS immediate-allow (task #16 C) (e29956c)
• config: a local observe must not nullify EVERY org mandate, only shields floored (task #21) (eb1a761), closes #1
• config: advisory eviction must never weaken the developer; repo layer is tighten-only for egress too (b915989)
• config: an org mandate survives a local ignoredTools carve-out (task #24) (ccb7820)
• config: managed advisory knobs survive local rules; repo config is tighten-only; egress mode floor honours absent-local (48e6ea1)
• config: one floor primitive; the advisory mandate is always injected, never negotiated (f33d69a)
• dlp: an org DLP mandate survives a local scanIgnoredTools carve-out (task #23) (ecd831d), closes #19
• engine,tests: env-assignment wrapper args; make three tests able to fail (e356d55)
• engine: a command has more than one true reading, and rules must see all of them (c9e526b)
• engine: a Windows absolute path in a command is data, not obfuscation (49c840c)
• engine: AST tiers cover every shell-shaped tool; eval-dynamic no longer pre-empts inline-exec (83bb2ee)
• engine: Class-A tiers precede inline-exec on inspected tools; bash rules cover every shell-shaped tool (31471c7)
• engine: competing built-in detectors resolve by strictness, not by statement order (833e8bf)
• engine: detectInlineExec sees through wrappers, keywords, herestrings, and mainstream interpreters (19128c9)
• engine: rebuild detectInlineExec on the mvdan AST (14b8137)
• engine: the inline-exec detector stops flagging ordinary script runs (129576c)
• jail: a Windows profile path no longer produces a silently-dead jail rule (6976dc3), closes #20
• jail: an ORG-managed jail was still bypassed by Read/Grep/Glob (task #22) (b68a6d4), closes #20 #20
• jail: the credential jail now actually blocks Read/Grep/Glob (task #20) (e5c3368)
• scan,explain: one shell-shape definition shared by the gate, scan and explain (23e74e3)
• scan,explain: one shell-shape predicate, so the gate, the report and explain agree (eb07de5)
• undo: snapshots ship OFF, and a disabled engine says so (0bca111)