Skip to content
← Bounds

Update log

Every published version of Bounds, newest first, with the change that shipped in it. The same record travels inside the package as CHANGELOG.md.

Releases
23
Newest
0.13.3
First release
31 October 2026
Latest0.13.36 November 2026
  • Every refusal carries a remedy: change_arguments, raise_budget, resume_task, request_approval or stop.
  • A call refused at its repeat ceiling three times stops the task, so a loop ends instead of hearing the same sentence.
  • A sparse array serialises as null; it used to sign [,1], which is not JSON and could never verify.
  • A broken file is named in the refusal, and recorded subjects can no longer repaint a terminal.
  1. 0.13.2
    6 November 2026
    • The serializer signs exactly what the file stores: an undefined member, a Date or an array hole can no longer make an entry unverifiable.
    • verify reports how many entries before a broken one still verify, and a torn final line is announced instead of passing.
    • status names the mode file it read and warns when a second one disagrees; --version answers.
    • The ledger records the engine that wrote it. Node 22 is the floor.
  2. 0.13.1
    5 November 2026
    • A read-only release check runs before a publish.
    • The ledger is read by byte range, and a preview read fails closed.
    • Preview capture is fuzzed over 2,000 seeded inputs.
  3. 0.13.0
    5 November 2026
    • Run boundaries: a signed run start and end, with an outcome.
    • A per-run budget in tokens or dollars, enforced on the next call.
    • A local redacted preview per tool call, read with attesso detail.
    • A rule can block while the rest of the file keeps observing.
  4. 0.12.3
    4 November 2026
    • A rule stops firing on fields the entry never had.
    • The 24-hour decision summary is published in the reference.
    • First run survives a real harness install.
  5. 0.12.2
    4 November 2026
    • A usage entry signs without a phantom model field.
  6. 0.12.1
    4 November 2026
    • Two writers can no longer reclaim the same dead lock at once.
  7. 0.12.0
    4 November 2026
    • Hosted review and decision views, with keyset cursors and filters.
    • Measured token usage, read from the hook payload and never inferred.
    • Every call for the day can be exported, not just the loaded page.
  8. 0.11.1
    4 November 2026
    • The source repository and its test workflow are published.
  9. 0.11.0
    3 November 2026
    • Packets and workspace setup from the local control surface.
    • The workspace config stays private and its key shape is validated.
  10. 0.10.0
    3 November 2026
    • Rule drafts stay scoped to the day they were written on.
    • Draft export is disabled until a draft exists, and says why.
  11. 0.9.0
    3 November 2026
    • Hosted policy bundles are pulled and verified before they apply.
    • Status tells the truth about the ledger the hook is wired to.
  12. 0.8.0
    2 November 2026
    • sync --watch keeps the hosted mirror current during a long session.
  13. 0.7.1
    2 November 2026
    • The sync cursor restarts when the ledger key changes.
  14. 0.7.0
    2 November 2026
    • A cursor, batches and a device id: the ledger mirrors to a workspace.
  15. 0.6.1
    2 November 2026
    • The first-run setup hint stops repeating.
  16. 0.6.0
    2 November 2026
    • Bounded day and cursor queries replace the single-page view.
    • Strict shell scope fails closed at the hook.
    • A stdio control server exposes status, connect, mode and paths over MCP.
  17. 0.4.1
    31 October 2026
    • setup, explain and suggest, with a repeat defined as the same arguments.
    • Ceilings on a task, not only on a step.
    • The package says it is Bounds.
  18. 0.4.0
    31 October 2026
    • Veto a tool call before it runs, from any harness that speaks the hook.
  19. 0.3.1
    31 October 2026
    • Republish: no package change is recorded for this version.
  20. 0.3.0
    31 October 2026
    • Rules judge the path of a task, not one call in isolation.
    • Any action can be logged, not only payments.
    • The overview makes the numbers legible.
  21. 0.0.1
    31 October 2026
    • A local signed ledger people can install and verify.
  22. 0.0.0-stage
    31 October 2026
    • The first publish, replaced a minute later by 0.0.1.

Install it and watch it refuse.

Free on your machine, no account. Every release above is a published version you can install today.