Skip to content

v1.3.0 — Security Hardening + Performance

Latest
Latest

Choose a tag to compare

View all tags
@zgbrenner zgbrenner released this 24 Apr 10:03
v1.3.0
47965db
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's New in 1.3.0

Security Hardening

  • Secure file permissions: all files in ~/.sonomos/ created with owner-only access (umask 0077)
  • JSON injection prevention: record-llm-hit.sh uses jq -n --arg for safe JSON construction
  • Path traversal protection: scan-file.sh rejects paths containing ../
  • Expanded IPv4 exclusions: multicast, CGNAT, TEST-NET-2/3, broadcast ranges excluded from detection

Performance

  • Single-pass statusline: replaced 8 separate grep calls with one awk pass over leaks.jsonl — significant speedup for large detection logs

Rich HUD

  • 5-line bordered display with ANSI color-coding
  • Session-specific delta (▲N), type diversity, relative timestamps
  • Detection method breakdown (regex/llm/file)
  • Top 3 exposure categories
  • Dashboard link and skill shortcuts

Documentation

  • Redaction format documented (first 2 + last 2 chars)
  • Complete plugin structure tree in README
  • Optimized README for GitHub discovery

Install

/plugin marketplace add sonomos-ai/Canary-Plugin
/plugin install canary@sonomos

Full Changelog: https://github.com/sonomos-ai/Canary/blob/main/canary/CHANGELOG.md

Assets 2
Loading