v2.49.0

2.49.0 (2026-11-03)

Bug Fixes

• daemon: the activity socket comes back when its directory is removed (c665a8b)
• daemon: the activity socket lives in a private directory, and the hook checks its owner (78c6a90)
• engine: data.credential-files-unknown names its OWASP risk (fw#320) (9481d5d)
• posture: read instruction and settings files through one checked descriptor (e6e1ece)

Features

• engine: OWASP Agentic Top 10 risk on every check (node9Firewall#320) (257eabb)
• posture: every row names its OWASP risk (node9Firewall#320) (35b9f7d)
• posture: the OWASP phase 1 extension, every finding names its risk (node9Firewall#320) (8dd8a29)
• shipper: ship the check id and the canary flag on every audit row (fw#320) (1058e3e)