Immutable
release. Only release title and notes can be modified.
What's changed
- chore(cli): bump version to 0.1.10 (#582)
- feat(agent-auth): add anonymous claimed flow (#581)
- Fix ephemeral publish links and claim-code attribution (#580)
Standalone CLI binaries cross-compiled with bun build --compile. macOS binary is codesigned + notarized. Each binary carries a GitHub build-provenance attestation (verify: gh attestation verify <binary> --repo zaks-io/agent-paste) and an attached SLSA provenance sidecar (*.intoto.jsonl). A CycloneDX SBOM of exactly what is compiled into the binary (agent-paste-cli.sbom.cdx.json), a blocking grype scan report (agent-paste-cli.grype.json), scanner/DB versions (scan-metadata.json), and repo security attestation bundle (repo-security-attestation.tgz) are attached. Draft - review and publish manually. Verify downloads against SHA256SUMS.