mockryx v0.2.2

Upgrade: the event stream file

This is an operator-visible change that arrived in a patch release, and these notes say so rather than leave it out.

Since agent-stack-go v2, a stream file this service creates is mode 0640, not 0644: the owning account and its group can read it, and no other account can. A new stream file is created only in a directory this service's account owns. An existing file is opened as it is.

A bus directory that is shared between services and not owned by this service's account gets no new stream, unless each file is created beforehand by the uid of the service that writes it. Before you start this release, check who owns the bus directory and the mode of each stream file in it.

What's Changed

• The diagram had no way in, only a way out by @TAIPANBOX in #22
• docs: the stack sentence named seven services and no console by @TAIPANBOX in #23
• docs: scenarios are data, contributing described them as code by @TAIPANBOX in #24
• fix: exercise and document what ships (async scenario, verify recipe, fail-on-skip) by @TAIPANBOX in #25
• gate: prove the four gates can still fail by @TAIPANBOX in #26
• chore(deps): the shared contract moves from v0.4.0 to v0.6.0 by @TAIPANBOX in #27
• gate: refuse to judge a gate that is already failing by @TAIPANBOX in #28
• gate: the baseline applies to every case, not only the failing ones by @TAIPANBOX in #29
• feat(scenarios): the injected-page drill, and what it deliberately does not test by @TAIPANBOX in #30
• docs: the stack sentence knows scopyx by @TAIPANBOX in #31
• chore(deps): the shared contract moves from v0.6.0 to v0.7.0 by @TAIPANBOX in #32
• chore(deps): toolchain to go1.26.7, and the CI pins with it by @TAIPANBOX in #33
• The pinned agent-stack-go version is the one go.mod requires by @TAIPANBOX in #36
• Two drills that chase a reaction past the gateway's answer by @TAIPANBOX in #35
• chore(deps): agent-stack-go v0.8.0 by @TAIPANBOX in #38
• test(drills): fire every shipped scenario at a real gateway, and say what came back by @TAIPANBOX in #37
• mockryx declares the exit-code contract another repository reads by @TAIPANBOX in #39
• Pin staticcheck to 2026.2.1 instead of floating by @TAIPANBOX in #40
• Move to Go 1.27 by @TAIPANBOX in #41
• docs: the shared stack map shows the stack that exists by @TAIPANBOX in #42
• docs: the map carries the producer arrows too by @TAIPANBOX in #43
• ci(release): the workflow is proven on a pull request before a tag by @TAIPANBOX in #44
• security: CI permissions and pinned security-tool versions by @TAIPANBOX in #45
• security: pin GitHub Actions to commit SHAs by @TAIPANBOX in #46
• ci: bump the actions group with 7 updates by @dependabot[bot] in #47
• ci: publish an OpenSSF Scorecard by @TAIPANBOX in #48
• Pin agent-stack-go v1.0.0 by @TAIPANBOX in #49
• release: signed checksums, provenance attestations and SBOMs on every tag by @TAIPANBOX in #50
• ci: pin scorecard-action and codeql-action to their commits, not the tag objects by @TAIPANBOX in #52
• ci: read-only permissions at the top of every workflow, writes only in the jobs that publish by @TAIPANBOX in #54
• fix(watch): refuse a downstream match with no time or integrity proof by @TAIPANBOX in #55
• deps: agent-stack-go v1.0.1 by @TAIPANBOX in #56
• chore(deps): update agent-stack-go to v1.0.2 by @TAIPANBOX in #57
• ci: bump the actions group across 1 directory with 5 updates by @dependabot[bot] in #58
• ci: bump github/codeql-action/upload-sarif from 4.38.0 to 4.38.2 in the actions group by @dependabot[bot] in #59
• chore(deps): bump agent-stack-go to v1.1.0 by @TAIPANBOX in #60
• docs(readme): state the agent-stack-go v1.1.0 pin go.mod requires by @TAIPANBOX in #61
• build: move the Go toolchain to go1.27.2 by @TAIPANBOX in #62
• ci: the estate secret scan on every pull request and push to main by @TAIPANBOX in #63
• feat(scenarios): token-flood and pii-in-prompt drills by @TAIPANBOX in #65
• feat: tool history, tool_check and mcp steps, --mcp-broker by @TAIPANBOX in #66
• feat(scenarios): declared-tool-poisoning drill (TokenFuse invariant 93) by @TAIPANBOX in #67
• feat(scenarios): allow-list-renamed-tool drill; say when nothing was exercised by @TAIPANBOX in #68
• docs(readme): match release targets, signing and cluster claims to the record by @TAIPANBOX in #69
• docs(release): paraphrase the owner-attributed decision in release.yml by @TAIPANBOX in #70
• ci: bump the actions group with 4 updates by @dependabot[bot] in #64
• chore(deps): bump agent-stack-go to v1.2.0 by @TAIPANBOX in #71
• chore(deps): bump agent-stack-go to v1.3.0 by @TAIPANBOX in #72
• feat(drills): send a gateway client key, and report a refused credential as a finding by @TAIPANBOX in #74
• chore(deps): bump agent-stack-go to v2.0.0 by @TAIPANBOX in #75
• ci(release): sign the image in the legacy format policy-controller reads by @TAIPANBOX in #76
• docs(release): v0.2.2 is the first release whose image signature the admission policy reads by @TAIPANBOX in #77

New Contributors

• @dependabot[bot] made their first contribution in #47

Full Changelog: v0.2.1...v0.2.2