v2.28.0

2.28.0 (2026-10-09)

Bug Fixes

• audit: avoid splitting Unicode in argument previews (1c70898)
• audit: keep argument previews within the API's UTF-16 length (6913603)
• audit: size the open audit log with fstat in outboxBacklog (2f7a84c)
• ci-check: count untrusted text the agent reads itself as reach (S.1) (aaa2fec)
• ci-check: every top-level || branch of a job if must be gated (S.2) (1934d24)
• ci-check: interpreter, network, shell-runner and gh grants are broad (S.3) (7516e75)
• ci-check: parse if: expressions; review findings on S.1-S.4 (S.5) (60cbe2e)
• ci-check: second review of the if: parser before release (984484c)
• ci-check: third-party claude-code-action builds, and the workflow_run actor check by release (S.4a, S.4b) (480919f), closes #1590
• explain: sanitize printed input and add --json output (f8857cd)

Features

• cli: refine package checks and report device heartbeat (06db2e5)
• supply-chain: per-outcome knobs, local npx resolution, version-true age (ef9c69f)