v0.1.5

run enforces on Linux only. The macOS and Windows binaries provide
init, check and status, which is what CI and pre-commit hooks
need.

Verify a download against its .sha256 before trusting it, and read
security.md for what the guarantee covers — and what it does not.

Full Changelog: v0.1.4...v0.1.5

v0.1.4

run enforces on Linux only. The macOS and Windows binaries provide
init, check and status, which is what CI and pre-commit hooks
need.

Verify a download against its .sha256 before trusting it, and read
security.md for what the guarantee covers — and what it does not.

Full Changelog: v0.1.3...v0.1.4

v0.1.3

run enforces on Linux only. The macOS and Windows binaries provide
init, check and status, which is what CI and pre-commit hooks
need.

Verify a download against its .sha256 before trusting it, and read
security.md for what the guarantee covers — and what it does not.

Full Changelog: v0.1.2...v0.1.3

v0.1.2

run enforces on Linux only. The macOS and Windows binaries provide
init, check and status, which is what CI and pre-commit hooks
need.

Verify a download against its .sha256 before trusting it, and read
security.md for what the guarantee covers — and what it does not.

Full Changelog: v0.1.1...v0.1.2

v0.1.1

run enforces on Linux only. The macOS and Windows binaries provide
init, check and status, which is what CI and pre-commit hooks
need.

Verify a download against its .sha256 before trusting it, and read
security.md for what the guarantee covers — and what it does not.

Full Changelog: v0.1.0...v0.1.1

Ralon v0.1.0 — Initial Release

Ralon v0.1.0

Ralon is an OS-enforced filesystem protection tool for AI coding agents.

It uses an agent.lock policy file to declare files and directories that an agent-controlled process must not modify.

What's included

• agent.lock policy file
• Filesystem protection enforced outside the agent itself
• Linux process enforcement via mount namespaces and Landlock
• init, check, status, and run commands
• Protection for files and directories
• Enforcement tests covering common filesystem bypass attempts
• Framework and agent independent design

Example

Create an agent.lock:

version: 1

protect:
  - .env
  - src/auth.ts
  - database/schema.sql

**Full Changelog**: https://github.com/stoneware-dev/Ralon/commits/v0.1.0