• v0.3.2 4bed6dd461

    v0.3.2 — Shell Safety, :system :eval Approval, Skill Sandbox
    Some checks failed
    Deploy (Gitea) / deploy (push) Failing after 3s

    amr released this 2026-05-06 16:47:07 -04:00

    1. Shell actuator: removed double bash -c wrapping (format ~s unsafe)
      — cmd passed directly to (timeout N bash -c cmd).

    2. Dispatcher: extended high-impact approval gate to :system :eval
      — now requires Flight Plan HITL, same as :shell.

    3. Skill sandbox: scans jailed skill packages for restricted symbols
      (uiop:run-program, uiop:shell, uiop:run-shell-command) before
      promotion to :passepartout. New :sandbox-blocked status.

    Test: 91 pass, 0 fail across 13 suites.

    Downloads