Agent Gate v0.2.6
Pre-release
Pre-release
Agent Gate v0.2.6 enriches workflow/permission-escalation evidence so reviewers can understand permission boundary changes more quickly.
Changed:
- Adds workflow/job scope context to workflow permission escalation findings.
- Detects job-level permission escalation, including restrictive job permission removal that exposes broader workflow permissions.
- Adds stable affected-capability evidence for escalated permissions.
- Keeps human-readable affected-area prose in report messages.
- Keeps the existing
workflow/permission-escalationrule ID. - Aligns package/report metadata to 0.2.6.
Not included:
- Permission necessity auto-detection.
- CODEOWNERS/reviewer sign-off evidence.
- History replay/audit mode.
- npm publish or Marketplace settings changes.
Recommended rollout remains warn mode first.