Skip to content

v0.1.7

Choose a tag to compare

View all tags
@wakamex wakamex released this 17 Aug 16:11
· 13 commits to main since this release
v0.1.7
7b2c817

AOP now keeps every canonical input snapshot in durable private storage beneath .aop/snapshots, including snapshots created by sealed runs. Isolated profiles continue to expose those inputs read-only to agent harnesses.

Highlights

  • Snapshot directories and files now use ordinary private controller permissions (0700 and 0600), so standard cleanup tools can remove test and project state without first undoing read-only modes.
  • Sealed runs use a short-lived opaque projection while executing, preventing Linux mount metadata from revealing the controller path. AOP removes the projection after execution and retains the canonical snapshot.
  • Exact sealed resumes validate the retained snapshot hashes and fail closed if input content changed.
  • Host-profile prompts and documentation now distinguish native host access from the read-only mount enforced by isolated profiles.

Changes

History

v0.1.6...v0.1.7

Assets 2
Loading