Skip to content

Agent Gate v0.2.6

Pre-release
Pre-release

Choose a tag to compare

@sjh9714 sjh9714 released this 30 Jun 11:09
75b52b1

Agent Gate v0.2.6 enriches workflow/permission-escalation evidence so reviewers can understand permission boundary changes more quickly.

Changed:

  • Adds workflow/job scope context to workflow permission escalation findings.
  • Detects job-level permission escalation, including restrictive job permission removal that exposes broader workflow permissions.
  • Adds stable affected-capability evidence for escalated permissions.
  • Keeps human-readable affected-area prose in report messages.
  • Keeps the existing workflow/permission-escalation rule ID.
  • Aligns package/report metadata to 0.2.6.

Not included:

  • Permission necessity auto-detection.
  • CODEOWNERS/reviewer sign-off evidence.
  • History replay/audit mode.
  • npm publish or Marketplace settings changes.

Recommended rollout remains warn mode first.