Skip to content

0.3.0 - 2026-09-19

Choose a tag to compare

View all tags
@github-actions github-actions released this 19 Sep 13:45
v0.3.0
d257325
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Release Notes

Added

  • A derived evidence tier below declarations: vendor Co-Authored-By trailers (built-in registry
    for Claude Code and Copilot, --agent-trailer EMAIL=AGENT to extend, --ignore-trailers to
    disable) and Agent Trace records (--agent-trace PATH) bound to a change's commits by
    vcs.revision. Both yield derived confidence; the operator is derived only when one human
    account authored every commit. Declarations and account mappings take precedence, and derived
    records naming two agents are not interpreted. Evidence sources commit_trailer and
    agent_trace; the table marks derived operators.
  • Matching agent-trailer, ignore-trailers and agent-trace inputs on the GitHub Action.
  • Specification 0.1 revision 2: §3.4 derived evidence, §11 relationship to Agent Trace.

Changed

  • The repository's self-check now installs the published 0.2.0 release.

Install agent-change-control 0.3.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/noru-tech/agent-change-control/releases/download/v0.3.0/agent-change-control-installer.sh | sh

Install prebuilt binaries via Homebrew

brew install noru-tech/tap/acc

Download agent-change-control 0.3.0

File Platform Checksum
agent-change-control-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
agent-change-control-x86_64-apple-darwin.tar.xz Intel macOS checksum
agent-change-control-aarch64-unknown-linux-musl.tar.xz ARM64 MUSL Linux checksum
agent-change-control-x86_64-unknown-linux-musl.tar.xz x64 MUSL Linux checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo noru-tech/agent-change-control

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation> --repo noru-tech/agent-change-control
Assets 16
Loading