5 Commits

Author	SHA1	Message	Date
Tom Boucher	7c93d9e222	feat(#1463): add capability outdated (per-source update check); drop phantom slash-command docs ... Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-20 10:50:12 -04:00
Tom Boucher	08d1c57d6e	fix(#1460): verify-or-reject capability --integrity per source; confine hook commands to the bundle ... Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-20 09:10:04 -04:00
Tom Boucher	e7855bc217	fix(#1459): user-owned consent store gates third-party capability activation; env/cwd in disclosure; loader validator parity (#1473)	2026-06-20 01:59:03 -04:00
Tom Boucher	c866ac1b24	fix(#1462): fail closed without data loss on a corrupt capability ledger; atomic ledger write (#1469)	2026-06-19 19:55:10 -04:00
Tom Boucher	9219af3360	feat(#1433): capability trust gate + upgrade/compat (ADR-1244 Phase 4) (#1449) ... ADR-1244 Phase 4 (D5 trust + D6 upgrade/compat). capability-trust.cjs (disclosure/consent, strict_known_registries, engines+compatVersions, reserved namespace) + capability-lifecycle.cjs (install/upgrade/remove/reconcile; ledger-as-commit-point _pending intent; atomic stage-then-swap; surgical marker-isolated shared-edit strip; owner-token lock) + capability-source promote/skipEnginesGate seams + loader pending-skip + config keys. No sandbox re-derived (consent+integrity+reversibility). 6 Codex adversarial rounds + /security-review (no HIGH) + /code-review; gsd-test green both platforms; CI green. Phase 5 (#1434) wires the CLI dispatch. Closes #1433. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-18 21:40:37 -04:00