Changelog

Bug fixes

• b1f8ec9: fix: enforce requirement for fence CLI binary in runtimeExecPolicy (@jy-tan)

Documentation updates

• c6d0f78: docs: update hooks doc (@jy-tan)

Changelog

New Features

• 0a707a0: feat: add Windsurf hook support (#163) (@jy-tan)

Bug fixes

• 918977b: fix: require explicit settings files and preserve child flags (#164) (@jy-tan)

Changelog

Bug fixes

• fa8bad5: fix: bind -p reverse bridge on 127.0.0.1 by default (#154) (@jy-tan)
• e86e450: fix: probe Linux seccomp capabilities before use (#158) (@jy-tan)

Changelog

New Features

• 6e308bc: feat: add hook for Hermes Agent (#149) (@jy-tan)

Bug fixes

• d738225: fix: don't put bwrap in its own pgrp in argv runner (#153) (@jy-tan)

Changelog

Bug fixes

• 13f777d: fix: prevent argv-mode runner deadlock on sandbox shutdown (#151) (@jy-tan)
• 39acbd1: refactor: unify SIGINT/SIGTERM forwarders and add SIGHUP handling (#152) (@jy-tan)

Other work

• 7adabf6: chore: update dependabot (@jy-tan)

Changelog

New Features

• 48463de: feat: add OpenCode plugin hook integration (#145) (@jy-tan)

Other work

• 552dc6d: Add deepwiki badge to README.md (@jy-tan)
• 679ff71: Update docs to call out child-process enforcement (@jy-tan)
• b187926: golangci-lint v2 (#144) (@dtomasi)

Changelog

Bug fixes

• 2bc292f: fix: make strict sandbox survive docker-compose services (#139) (@jy-tan)

Other work

• 3bfe9f6: Update README.md (@jy-tan)
• 7cfc40f: perf: update benchmarks (#138) (@jy-tan)

Changelog

New Features

• d966dea: feat: discover fence.jsonc files alongside fence.json (#135) (@jy-tan)

Bug fixes

• 6189be8: fix: make allowLocalOutbound work on Linux via an explicit localhost port bridge (#136) (@jy-tan)

Changelog

Bug fixes

• 56e9549: fix: mach-lookup/mach-register wildcard patterns were completely broken (#127) (@Songmu)

Changelog

New Features

• ba0efc7: feat: add dedicated log file support (#126) (@jy-tan)

Bug fixes

• 92bbc6d: fix: scope mandatory deny paths to the sandbox workdir (#125) (@jy-tan)