Skip to content

v0.18.0 — spec 0.18 (the trust-trio)

Choose a tag to compare

View all tags
@tombaldwin tombaldwin released this 16 Jul 19:53
v0.18.0
dad4699

candor spec 0.18 — the trust-trio floor.

A pinned-tool-surface rung (no report/verdict change), pinned four-way in the conformance suite:

  • --strict advisory-verb CI gate — fix-gate/gains/unverified are advisory (exit 0); --strict makes each a CI gate (exit 1 while a finding remains). A typo'd flag is rejected loud (exit 2), never a swallowed disarmed gate; gains has no --policy (a passed one names the scan-time deny <E> gained gate, AS-EFF-005).
  • surface/tour mostly-Unknown disclosure — never "nothing hidden" (nor a tour --json {"reaches":[]}) over a ≥⅓-Unknown graph.
  • Hardened by a Fable-model code review (caught two latent cardinal-sin edges: an un-gated scan opener; a single-dash flag swallow).

See CHANGELOG.md for the per-engine detail.

Assets 2
Loading