CellFence v0.1.12
Summary
CellFence v0.1.12 is the npm-published pre-release hardening build. It keeps workspace package versions in lockstep, adds guarded npm trusted-publishing workflow support, hardens baseline signing documentation, and splits key engine internals without changing the public API.
Published Packages
Published to npm from the protected npm-publish environment using GitHub OIDC trusted publishing. The publish workflow completed successfully for the 15-package publish set. @cellfence/mcp-proxy remains intentionally unpublished until its first-publish ownership and Trusted Publisher path is decided.
Verification
- Commit:
7c4417d8ca53ced8af3654c5b6caaf38e7260fcc - Main CI: https://github.com/pushnanashi2/CellFence/actions/runs/29633527412
- npm publish workflow: https://github.com/pushnanashi2/CellFence/actions/runs/29634153016
- SBOM: attached CycloneDX JSON (
reports/sbom.cdx.json, sha2567d82f41544c827db11bd43012a799a5ed7010019301552de0d76e28dfeac7702)
Changelog
- Bump all workspace packages and internal
@cellfence/*dependency pins from0.1.11to0.1.12. - Split baseline sealing and ratchet comparison internals out of
packages/engine/src/index.tswithout changing the public engine API. - Add npm pre-publish documentation for trusted publishing, provenance, SBOM generation, GitHub Releases, and the local release gate.
- Add safer GitHub Actions examples for asymmetric baseline verification on PRs and approval-scoped baseline signing workflows.
- Reframe the A/B friction study as controlled mechanism validation, not evidence of natural autonomous-agent behavior.
- Add sanitized real-use fixtures for a Cash-style service layout, Python source layout, monorepo package imports, and runtime resource evidence.