Skip to content

PromptTripwire v0.1.11

Choose a tag to compare

View all tags
@shuto-S shuto-S released this 20 Jul 06:57
· 4 commits to main since this release
v0.1.11
7f5d55c
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

PromptTripwire v0.1.11

Final Build Week judge distribution for macOS arm64. This release does not add
npm publication, public Plugin Directory submission, deployment, YouTube
upload, or Devpost submission.

What changed

  • Removed numeric Codex version gates from the runtime, Plugin adapter,
    installer, uninstaller, package checks, and active documentation.
  • Added one shared machine-readable normal App Server compatibility profile for
    every request, notification, response, required field, type, nullability, and
    known enum consumed by PromptTripwire.
  • Added a pre-repository compatibility gate that resolves and digests one Codex
    executable, generates its normal schema in private temporary storage, performs
    the normal handshake, and runs a bounded tool-free, read-only,
    network-disabled nonce canary through that same process.
  • Bound executable realpath/digest, reported version, profile version,
    normalized schema fingerprint, canary fingerprint, and compatibility
    fingerprint into the repository snapshot and therefore the immutable
    contract hash.
  • Re-measure compatibility immediately before approval and run. Failure or any
    exact attestation drift makes the run stale, and run reuses the verified
    process before creating its disposable worktree.
  • Allow safe additive optional schema, unused methods, and schema-only unknown
    enum variants. Unknown requests or variants actually observed at runtime are
    denied and interrupt the turn.
  • Keep the Plugin as a thin CLI adapter. Installation checks Codex command
    presence, output shape, and login rather than a version number. Uninstall
    requires no Codex version and does not guess-edit global configuration when
    the command is unavailable.
  • Declare policy.allow_implicit_invocation: false in the bundled Skill
    metadata and package that metadata as a required installer safety file. The
    canonical invocation is $prompt-tripwire:preflight; matching prose alone
    does not activate the Skill.
  • Align the Plugin manifest's interface.defaultPrompt with the current Codex
    array form while retaining the Skill-only adapter with no hook or MCP server.
  • Redact secret-like task and decision source text before the Japanese
    translation turn and sanitize the complete browser review DTO before display.
    Canonical persistence, decision and contract identity, and mutation payloads
    remain unchanged.

Safety boundaries unchanged

  • Human decisions and contract approval are never automated.
  • Runtime experimentalApi, MCP, hooks, hosted services, new credentials,
    network access, remote writes, deploy, release, secret access, destructive
    operations, and permission expansion remain denied.
  • Planning and comparison remain read-only and target writes remain contained
    in disposable worktrees with deviation interruption and sanitized reports.
  • OPENAI_API_KEY is not required; PromptTripwire reuses the existing local
    Codex login.

Compatibility policy

The code has no per-version allowlist or behavior branch. Historical 0.144.4
Build Week evidence and the current 0.144.6 development smoke are documented
known-good versions only. Other versions pass or fail based on measured normal
schema, handshake, and canary behavior.

The canary is intentionally bounded. Semantic drift that preserves the schema
and lies outside the observed nonce/tool/network behavior remains a residual
risk and is not claimed as verified.

An isolated archive install on 2026-07-20 JST enabled the Plugin using the
existing Codex login with API-key variables unset. A new Codex task explicitly
injected the Skill; after one fail-closed nested request, the single documented
direct-adapter retry reached needs_review, showed Japanese reference content,
selected nothing, approved nothing, and left the safe fixture unchanged. The
isolated Plugin, marketplace, runtime, and copied authentication directory were
then removed.

Install

shasum -a 256 -c SHA256SUMS.txt
tar -xzf prompt-tripwire-v0.1.11-macos-arm64.tar.gz
cd prompt-tripwire-v0.1.11-macos-arm64
./install.sh --with-codex-plugin
codex plugin list --json

Uninstall only PromptTripwire-owned runtime and Plugin state with:

~/.local/lib/prompt-tripwire/0.1.11/uninstall.sh --with-codex-plugin
Assets 4
Loading