Skip to content

Execution Fidelity Guard 0.2.1

Choose a tag to compare

@rrrrrredy rrrrrredy released this 31 Aug 07:08
· 2 commits to main since this release

Execution Fidelity Guard 0.2.1

Execution Fidelity Guard is an Apache-2.0 open-source Codex plugin that checks
explicit task boundaries before tool execution and checks contract-bound
evidence when an Agent claims completion.

What changed

  • Added a dependency-free command that freezes and aggregates pseudonymous
    receipt exports while collecting a real 100-session shadow pilot.
  • Rejects duplicate sessions, events, one-event-to-many-receipt mappings,
    unknown reason codes, symlinked inputs, oversized bundles, and accidental
    output overwrite.
  • Lazy-loads persistence and event-specific modules so the ordinary
    no-persistence continue path does less work.
  • Preserves exact SessionEnd deletion when persistence is off and accepts
    verified non-link Windows 8.3 path aliases without relaxing junction checks.
  • Adds an empty-Node process-floor diagnostic to make Windows cold-start cost
    visible without subtracting it from Guard latency.
  • Pins CI actions to exact reviewed v7 commits and reports the actual Hook event
    when benchmarking a custom fixture.

Release evidence

  • 85 of 85 automated tests passed on the local Windows release candidate.
  • The source release validator passed 295 checks with zero runtime dependencies.
  • A real npm tarball was created, extracted, passed 293 internal validation
    checks, and returned deny for the prohibited-install simulation without
    installing the plugin.
  • Ten rounds of 20 simultaneous stale-lock contenders remained linearized:
    one transition at a time, complete results 1 through 20, and final state 20.
  • The final Windows x64 and Node.js 20.19.1 source benchmark measured 184.76 ms
    p50 and 296.05 ms p95 with persistence disabled. The same run's empty-Node
    process floor measured 189.73 ms p95.

Honest limits

  • The provisional 100 ms continue-path p95 target is not met.
  • The shadow summarizer enables auditable collection; it does not mean the 100
    real shadow tasks or 800-task controlled comparison have been completed.
  • Installed-client behavior remains intentionally untested on the maintainer's
    machine because this release process forbids local installation.
  • Product efficacy, false-positive rate, rework reduction, and outcome
    improvement are not yet established by controlled real-world use.
  • Live Intent Loop, Continuity, DeepSeek Harness, and other Host adapters are
    not implemented.