Repository navigation
cfctl v1.0.1
Documentation-focused follow-up to v1.0.0. No behavioral changes to the CLI.
Changed since v1.0.0
- Documentation corpus trimmed 25%; README rebuilt around a mermaid diagram of the governed loop (intent → resolve → call → plan → approve → run → verify → evidence) and the architecture doc around a crate/boundary graph.
- Install docs now teach the real paths for unsigned releases: direct download +
SHA256SUMSverification, the release's Homebrew formula, or source build. - Runbook documents the exit-code contract (0 success; 1 failure envelope with
next_step; 2 usage error).
Platforms
cfctl-aarch64-apple-darwin, cfctl-x86_64-apple-darwin, cfctl-aarch64-unknown-linux-musl, cfctl-x86_64-unknown-linux-musl, plus the Homebrew formula (cfctl.rb).
Integrity
Artifacts are unsigned (open-source CLI, checksum-based integrity): verify against SHA256SUMS; every binary is reproducible from the tagged source (double-built, hash-compared) with SPDX SBOMs and commit-bound provenance.json.