Skip to content

CellFence v0.1.12

Choose a tag to compare

@pushnanashi2 pushnanashi2 released this 18 Jul 06:37
· 155 commits to main since this release

Summary

CellFence v0.1.12 is the npm-published pre-release hardening build. It keeps workspace package versions in lockstep, adds guarded npm trusted-publishing workflow support, hardens baseline signing documentation, and splits key engine internals without changing the public API.

Published Packages

Published to npm from the protected npm-publish environment using GitHub OIDC trusted publishing. The publish workflow completed successfully for the 15-package publish set. @cellfence/mcp-proxy remains intentionally unpublished until its first-publish ownership and Trusted Publisher path is decided.

Verification

Changelog

  • Bump all workspace packages and internal @cellfence/* dependency pins from 0.1.11 to 0.1.12.
  • Split baseline sealing and ratchet comparison internals out of packages/engine/src/index.ts without changing the public engine API.
  • Add npm pre-publish documentation for trusted publishing, provenance, SBOM generation, GitHub Releases, and the local release gate.
  • Add safer GitHub Actions examples for asymmetric baseline verification on PRs and approval-scoped baseline signing workflows.
  • Reframe the A/B friction study as controlled mechanism validation, not evidence of natural autonomous-agent behavior.
  • Add sanitized real-use fixtures for a Cash-style service layout, Python source layout, monorepo package imports, and runtime resource evidence.