mirror of https://github.com/prompt-security/clawsec.git synced 2026-06-13 05:28:02 +03:00

Files

T

David Abutbul 26af277afd feat(hermes-attestation-guardian): v0.1.0 release hardening (verify gate + trust policy + .mjs scan context) (#200 )

* feat(hermes-attestation-guardian): release v0.0.2 hardening

* docs(wiki): add v0.0.2 hardening update note

* docs: add Hermes support coverage to README and compatibility report

* fix(hermes-attestation-guardian): address baz review on crontab detection and doc dedup

* feat(wiki): add PR-200 skill feature/platform matrix

* docs(wiki): rewrite PR-200 matrix as narrative capability mapping

* docs(readme): add skill feature matrix with requested headers

* docs(readme): replace unknowns with mapped yes/no feature matrix

* docs: move NanoClaw and CI/CD details from README to wiki modules

* docs(readme): remove platform/suite sections and keep wiki module pointers

* docs(readme): refresh project structure to match current repo

* feat(hermes-attestation-guardian): add signed advisory feed verification pipeline

* feat(hermes-attestation-guardian): add advisory-gated guarded skill verification

* feat(hermes-attestation-guardian): add advisory scheduler helper and phase-3 parity docs

* docs(wiki): expand hermes attestation guardian capability coverage

* fix(pr-200): address Baz review findings across Hermes parity rollout

* test(sandbox): extend Hermes regression to cover feed, guarded verify, and advisory scheduler

* fix(pr-200): address Baz semver parsing and feed-state fallback visibility

* fix(ci): suppress shellcheck false positives in sandbox inline docker script

* fix(hermes-attestation-guardian): fail closed on unsupported advisory ranges

* fix(hermes-attestation-guardian): restore safe install verdict in sandbox

* fix(sandbox): capture guarded verify exit under set -e

* fix(semver): fail closed on malformed affected specifiers

* docs(readme): clarify hermes capability matrix wording

* refactor(feed): share signed artifact verification flow

* refactor(cron): share managed block helpers across setup scripts

* fix(feed): require checksum manifest artifacts when enabled

* chore(hermes-skill): relocate sandbox test, refresh docs, and add v0.1.0 release notes

* chore(docs): remove remaining hermes parity plan file

* chore(release): roll hermes-attestation-guardian to v0.1.0

* chore(release): remove standalone v0.1.0 release notes file

* docs(hermes): update README status to v0.1.0

---------

Co-authored-by: David Abutbul <David.a@prompt.security>

2026-04-21 13:56:50 +03:00

1.4 KiB

Raw Blame History

Wiki Generation Metadata

Commit hash: c3983a100581a9f27eb8cc3b5baa4f585e6c45e4
Branch name: codex/clawsec-scanner-0.0.2-dast-harness
Generation timestamp (local): 2026-03-10T19:06:29+0200
Generation mode: update
Output language: English
Assets copied into wiki/assets/:
- overview_img_01_prompt-security-logo.png (from img/Black+Color.png)
- overview_img_02_clawsec-mascot.png (from public/img/mascot.png)
- architecture_img_01_prompt-line.svg (from public/img/prompt_line.svg)

Notes

Migrated root documentation pages from docs/ into dedicated wiki/ operation pages.
Updated index and cross-links to use wiki/ as the documentation source of truth.
Added a dedicated module page for clawsec-scanner and linked it from wiki/INDEX.md.
Future updates should preserve existing headings and append Update Notes sections when making deltas.
2026-04-15: Expanded wiki/modules/hermes-attestation-guardian.md into full narrative claim breakdowns (people-speak + wiring + verification + scenario) and moved draft-plan context into wiki/modules/hermes-attestation-guardian-draft-history.md.

Source References

README.md
package.json
AGENTS.md
wiki/overview.md
wiki/architecture.md
wiki/modules/clawsec-scanner.md
wiki/dependencies.md
wiki/data-flow.md
wiki/glossary.md
wiki/security-signing-runbook.md
wiki/migration-signed-feed.md
wiki/platform-verification.md
wiki/remediation-plan.md

1.4 KiB Raw Blame History

Wiki Generation Metadata

Notes

Source References

1.4 KiB

Raw Blame History