v1 (floating — currently v0.3.0)

Floating tag maintained by release.yml. Always mirrors the latest stable release (v0.3.0 as of this run) — do not depend on this tag pointing at a fixed commit. Pin an exact release (e.g. v0.3.0) instead if you need reproducibility.

v0.3.0

Changelog

• 1d29690 Merge pull request #10 from yebiguo/v0.3-tamper-evident-receipts
• b3aa21d Merge pull request #11 from yebiguo/v0.3-day2-signing
• a1606f1 Merge pull request #13 from yebiguo/codex/v0.3-release-prep
• 3fb4391 Merge pull request #8 from yebiguo/docs/post-v0.2-cleanup
• be4949e Merge pull request #9 from yebiguo/test/format-status-direct-coverage
• dad474a docs: align v0.3 tamper-evidence guarantees
• eeebb53 docs: fix staleness left over from the v0.2.0 ship
• 9ab1816 docs: stop the release-prep step from going stale at every release
• b86e2ce release: prep v0.3.0 action pin
• fe2412e v0.3 Day 1: local signing key management for tamper-evident receipts
• c635567 v0.3 Day 2: sign CheckResult on write, verify on read, bump schema to proofrun/v2
• c5bfb0a v0.3 Day 3: CLI-level adversarial test for the hand-edited-receipt scenario
• 244a8aa v0.3 Day 4: docs, orphan-check regression test, Roadmap reorder
• bc1b6da v0.3: fix 2 SHOULD FIX from review — secret git-exposure + symlink write-through
• 9e72235 v0.3: fix MUST FIX — a symlinked .proofrun parent let a known key sign real results
• c74105e v0.3: fix SHOULD FIX — a symlinked .proofrun/ itself bypassed every file-level defense

v0.2.0

Changelog

• 2d57862 Merge pull request #4 from yebiguo/v0.2-github-action
• 604fed4 docs: document the GitHub Action and its known limitation in both READMEs
• 3ae2aac release: prep v0.2.0 — pin the Action's binary version to this release
• 8db5af7 v0.2 Day 2: action.yml composite action + dogfood workflow
• a844265 v0.2 Day 4: automate the v1 floating tag, document the Action in AGENTS.md
• 1d520e3 v0.2: fix two MUST-FIX false-PASS gaps from external review + harden action.yml
• b200d60 v0.2: harden checksums.txt parsing against CRLF line endings
• c360619 v0.2: pin the Action's binary version literally instead of guessing from action_ref
• 53fe975 v0.2: run dogfood across ubuntu/macos/windows, not just ubuntu
• 39fdefa v0.2: strip stray backslash from sha256sum output on Windows runners

v0.1.0

Changelog

• 74c3572 Merge pull request #1 from yebiguo/v0.1-dev
• 245ba56 Merge pull request #2 from yebiguo/demo-workflow
• 7c829ef chore: add VHS tape + CI workflow to render the README demo GIF
• 212e928 docs: add rendered demo.gif
• 127104b docs: expand project documentation
• 0ab1fc4 docs: point install commands at v0.1.0 instead of v0.1.0-alpha

v0.1.0-alpha

Changelog

• a13f2bb Day 0: repo skeleton and AGENTS.md
• 8e2590c Day 1: CLI skeleton, git fingerprinting, config, init command
• db64027 Day 2-3: command runner, receipt schema, proofrun run
• 93d3535 Day 4: STALE determination and proofrun status
• 8d065e9 Day 5: proofrun report and CI across all three platforms
• 53a4c9a Day 6: goreleaser config, release CI, version flag
• 5b86fb8 Day 7: README, LICENSE, dogfood ProofRun on itself
• 052d27a Fix release archive naming to match README install command
• a40e010 Fix review findings: command-forging gap, broken install URL, Windows/macOS-blind release gate
• d36539e Fix review round 2: empty command in config re-opens the forgery gap
• 709b870 Fix review round 3: string-join command comparison enables argv-collision false PASS
• f3cfc5a Self-review fixes: gate release on tests, tighten tag trigger, doc gaps