ReproCrate v0.3.0 (CLI pre-release)

ReproCrate v0.3.0 — experimental pre-release notes

This milestone expands privacy controls and portable local diagnostic bundles. It is not stable v1.0.0.

Added

• reprocrate review: explicitly preview a report's JSON, mask project-specific literal strings from a private file, exclude selected fields, and save a new candidate without modifying the original.
• reprocrate bundle create: require acknowledgment of manual review and individually selected attachments; create bounded local ZIP bundles with versioned manifests and SHA-256 integrity checks.
• reprocrate bundle inspect / verify: reject inconsistent, oversized, traversal, duplicate, symlink, unsupported-schema, or altered archives.
• reprocrate bundle extract: verify everything before extraction; use a new output directory and only fixed safe archive paths.
• Cross-platform integration tests for review, archive verification, extraction and rejection behavior.

Important limitations

Pattern-based redaction cannot certify privacy. Attachments are included verbatim once explicitly approved and may contain sensitive data. SHA-256 checksums authenticate bytes against the included manifest, not an external trusted publisher. Imported recipes/commands stay inert and should be considered untrusted. The tool never uploads diagnostics automatically.

No desktop GUI, database history, full reproduction sandbox, complete test framework parsers, or stable v1.0.0 quality claim. See privacy and bundles.