Skip to content

Rootloom Personal Core 3.2.0

Choose a tag to compare

View all tags
@qingye-lab qingye-lab released this 15 Jul 15:20
v3.2.0
9935bbd
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Rootloom Personal Core 3.2.0 closes the reviewable-path capture and privacy boundary.

Fixed

  • Reject ignored, assume-unchanged, skip-worktree, hardlinked, and case-ambiguous reviewable targets at Intake and during stable capture.
  • Treat DER as ambiguous secret material and keep common PEM/DER key names non-overridable.
  • Expose the Intake-sealed reviewability paths, policy hash, source, and captured identity/link metadata in Summary revision 5.

Compatibility

  • Default baseline v3 and the published baseline-v4 schema remain unchanged.
  • Baseline v2, v3, and v4 evidence remains readable and sealable; unsafe declarations now fail closed.

Verification

  • Local and clean-clone make check: 181 tests passed with 2 filesystem-dependent skips.
  • Codex CLI 0.144.2 compatibility smoke passed locally and in a clean clone.
  • PR #9 and exact merged-main run 29427110772 each passed all seven Linux, macOS, Windows, and Codex CI jobs.

Full details are in CHANGELOG.md and the accepted material/capture decision record.

Assets 2
Loading