Skip to content

v0.1.1 — gate hardening (day-one bypass fixed and disclosed)

Choose a tag to compare

View all tags
@ralfyishere ralfyishere released this 08 Jul 06:29
· 11 commits to main since this release
v0.1.1
579084b

The v0.1.0 intake gate matched only Bash; an agent's file-write tools could forge the pass marker. Found in our own first live-session test, fixed the same day: the hook now gates all mutating tools and the marker must carry the scan's content signature. Full disclosure in SECURITY.md; the bypass is logged in COVERAGE.md's fixed-bypasses table with regression tests.

Checked: full suite incl. forged-marker rejection, CI green. Not checked: a second live-session test against v0.1.1 (deferred — an eval batch owns the current quota window; unit-level coverage of the bypass path is in CI).

Assets 2
Loading