Repository navigation
See CHANGELOG.md for the curated, human-edited changelog.
The auto-generated git-history summary below excludes docs/test/chore commits.
Changelog
- d06a4a3 ci: enforce least-privilege permissions and sha256-verified mcp-publisher in release workflow
- 174bc6c feat(memory): implement persistent repo-scoped NonceStore with auto-sweep, bootstrap support, and MCP grounding wiring
- c02e731 feat(sar): codify SAR-009 runtime isolation contract and implement resilient atomic file replacement
- 5dc56de feat(vtp): implement pure RFC 8785 JSON canonicalization with UTF-16 surrogate sorting and conformance suite
- b1273ef fix(fs): prevent symlink traversal via filepath.Rel containment and refuse leaf symlink overwrite
- ae46f54 fix(memory): calculate per-category new sections in provenance and enforce best-effort multi-file rollback
- d04e16c fix(memory): check pre-state file drift in RebaseStaged and add metamorphic composition test
- 2c3aa21 fix(retrieval): filter grammatical stopwords in buildFTSQuery and add negative eval cases (fixes #8)
- 87ef205 fix(security): complete Round 3 security hardening across VTP, NonceStore, FS, and rollback
- fdd1ad6 fix(vtp): enforce task-id settlement binding, identifiable assertions, spec commitments, and hermetic settlement gating
- 527b362 fix: resolve Astra Pro audit findings (AM-001, AM-002, AM-005, AM-006, AM-007, AM-008)
- f751576 test(index): add TestSAR010_UnicodeMultiLingualIndexingAndBinaryKeyCollation validating Invariant 2 and FTS5 unicode61
- e7e19dd test(memory): add regression test for manifest tampering and root bypass rejection
Full git changelog: v0.6.0...v0.6.1
Verify a downloaded archive:
sha256sum -c agent-memory_0.6.1_checksums.txt