v2.27.0

2.27.0 (2026-10-04)

Bug Fixes

• daemon: report the engine default mode, not audit, when none is set (eee0c7e)
• dlp: redact only a declared group, keep the frame in shims, close extractor gaps (73c91b7)
• dlp: redact whole tool results, unforgeable untrusted frame, CASK delimiters (31581ef)
• supply-chain: extract installs from every command shape and check all packages (6f8ce9e)
• supply-chain: versioned interpreters, +o shell options, comma --with lists (4e271f2)
• two CodeQL alerts on the release PR (label regex, registry URL) (b2f19ab)

Features

• catalog: every check explains itself in plain words (d06f26b)
• catalog: one list of checks, checkId on every verdict, node9 checks (ec79adc)
• config: v2 config file keyed by check, one writer, automatic migration (e3a6305)
• dlp: validate GitHub token checksums and add Microsoft CASK pattern (9967e7a)
• mcp-gateway: scan tool results before delivery to the agent (f76cb50)
• supply-chain: check packages against OSV malicious-package data before install (b2e36f5)
• sync: read the workspace checks from the sync body's config block (93d3ecb)