v0.10.0 — Security hardening + opt-in cloud models#3

Merged

lavindeep merged 42 commits into

mainfrom

feat/v0.10.0-security-cloud

Jun 25, 2026

Commits on Jun 20, 2026

Commits on Jun 21, 2026

feat(cloud): opt-in cloud models behind a fail-closed egress-consent gate
lavindeep
committed
docs: document opt-in cloud models and correct the local-first framing
lavindeep
committed
feat(skills): add opt-in debugging, verification, code-review, git-workflow skills
lavindeep
committed
feat(cli): add boot banner renderer with fighter-jet logo
lavindeep
committed
feat(cli): use the panel boot banner; drop the old 2-line banner
lavindeep
committed
feat(cli): streamline the boot picker to a one-key last-model confirm
lavindeep
committed
feat(cli): add the persistent active-cloud locality indicator
lavindeep
committed
test(cli): guard one-key cloud-confirm reaches consent gate
lavindeep
committed
feat(cli): cap long approval diffs with a (+N more) footer
lavindeep
committed
feat(cli): reveal approval diffs with a bounded scrolling animation
lavindeep
committed
docs(readme): v0.10.0 — cloud opt-in, workflow skills, honesty conditionals
lavindeep
committed
docs(design): correct section 15.1 egress-chokepoint scope to conversational requests
lavindeep
committed
docs(design): v0.10.0 final pass + security-hardening section
lavindeep
committed
fix(model): detect :cloud-tagged Ollama models as cloud egress
lavindeep
committed
chore(release): v0.10.0
lavindeep
committed
feat(cli): redesign boot banner — sectioned omp-style layout, fix jet symmetry
lavindeep
committed
feat(cli): wire ! as a manual-shell escape
lavindeep
committed
fix(cli): sanitize recent-session labels in the boot banner
lavindeep
committed
feat(config): allow confirmed runtime /config set for egress keys; keep env blocked
lavindeep
committed
fix(config): /config set security_profile applies this session, not next
lavindeep
committed
refactor(cli): drop /quit (keep /exit); hoist config.model imports
lavindeep
committed
refactor(cli): retire /prefs into /memory; demote /config reset <key> alias
lavindeep
committed
docs: correct user-facing claims the v0.10.0 hardening invalidated
lavindeep
committed
fix(cli): render changed diff lines as full-width red/green bars
lavindeep
committed
feat(cli): /config edit writes a starter config.toml when none exists
lavindeep
committed
fix(security): show resolved action path in approvals, not the raw model arg
lavindeep
committed
feat(approval): add reject-and-steer [e]dit option to tool/command approvals
lavindeep
committed
feat(cli): persistent status bar (V1) folding in cloud indicator + context %
lavindeep
committed

Commits on Jun 25, 2026

docs: pre-release accuracy pass for v0.10.0
lavindeep
committed