What's Changed

• feat(help): separate read-only and read-write paths in help by @matt-dz in #545
• Document process argv privacy rules by @AlexandreYang in #547
• docs: expand CONTRIBUTING.md by @julesmcrt in #548
• fix(deps): vuln minor: golang.org/x/net, golang.org/x/sys by @gh-worker-campaigns-3e9aa4[bot] in #549
• fix(deps): vuln minor: golang.org/x/net, golang.org/x/sys [internal/version] by @gh-worker-campaigns-3e9aa4[bot] in #550
• feat: add system service allowlist policy by @matt-dz in #552

Full Changelog: v0.0.22...v0.0.23

What's Changed

• feat(help): show mode in header; hide remediation-only commands in read-only mode by @julesmcrt in #535
• fix(truncate): block --help in read-only mode, consistent with disallowed commands by @julesmcrt in #534
• Enforce AllowedPaths read/write modes by @matt-dz in #271
• feat(builtins): add logrotate by @matt-dz in #536
• Address AllowedPaths follow-up nits by @matt-dz in #541
• Document CLI development scope by @AlexandreYang in #543
• fix(ci): skip Static Analysis Verification in MQ by @Ishirui in #544

New Contributors

• @Ishirui made their first contribution in #544

Full Changelog: v0.0.21...v0.0.22

What's Changed

• feat(interp): add RemediationMode() RunnerOption [PR A] by @julesmcrt in #524
• feat(help): move command count to Commands section header by @julesmcrt in #527
• allowedpaths: relax sandbox to permit write opens (remediation series PR B) by @julesmcrt in #525
• feat(analysis): split interpAllowedSymbols into per-mode lists [PR C] by @julesmcrt in #528
• feat(interp): wire RemediationMode into file-target output redirections [PR D] by @julesmcrt in #526
• feat(builtins): add truncate builtin (remediation mode only) by @julesmcrt in #532
• feat(analysis): track CallContext field usage per builtin by @julesmcrt in #533

Full Changelog: v0.0.20...v0.0.21

What's Changed

• Stop ps from exposing process argv by @AlexandreYang in #269

Full Changelog: v0.0.14...v0.0.14-1

What's Changed

• Stop ps from exposing process argv by @AlexandreYang in #269

Full Changelog: v0.0.19...v0.0.20

What's Changed

• docs(agents): scope RULES.md under Builtin Implementation section by @AlexandreYang in #259
• test: vuln-hunt 2026-05-18 regression suite (blocked-attack & isolation tests) by @AlexandreYang in #257
• fix(interp): restore prior value for same-name inline-command vars by @AlexandreYang in #262
• fix(interp): cap r.stderr at 10 MiB by @AlexandreYang in #263
• test(df): make POSIX/PT/-h row parsing resilient to whitespace in source/mountpoint by @AlexandreYang in #265
• fix(analysis): audit all non-exempt top-level builtins/ files by @AlexandreYang in #261
• Add vuln-hunt regression tests across builtins and shell features by @AlexandreYang in #264
• Fix absolute glob expansion in sandbox by @AlexandreYang in #268

Full Changelog: v0.0.18...v0.0.19

What's Changed

• feat(help): list configured AllowedPaths in help output by @AlexandreYang in #248

Full Changelog: v0.0.16...v0.0.18

What's Changed

• feat(cd): add cd builtin with -L/-P symlink modes by @julesmcrt in #237
• fix(builtins): honor --help argv order and rewrite pflag errors to GNU style by @julesmcrt in #238

Full Changelog: v0.0.15...v0.0.17

What's Changed

• feat(cd): add cd builtin with -L/-P symlink modes by @julesmcrt in #237
• fix(builtins): honor --help argv order and rewrite pflag errors to GNU style by @julesmcrt in #238

Full Changelog: v0.0.15...v0.0.16

What's Changed

• chore(deps): unstable: golang.org/x/sys, golang.org/x/tools by @gh-worker-campaigns-3e9aa4[bot] in #198
• chore(deps): runtime go runtime go1.25.6 → go1.26.2 [internal/version/testdata/depcheck] by @gh-worker-campaigns-3e9aa4[bot] in #194
• chore(deps): runtime go runtime go1.25.6 → go1.26.2 by @gh-worker-campaigns-3e9aa4[bot] in #195
• feat(sort): drop -h short alias from --help by @julesmcrt in #203
• feat(pwd): add pwd builtin with -L/-P symlink resolution by @julesmcrt in #208
• Update rshell help command output by @AlexandreYang in #213
• feat(interp): support while/until loops with bash-compatible semantics by @AlexandreYang in #223
• feat(du): add disk-usage builtin by @julesmcrt in #207
• feat(interp): default working dir to first allowed path by @julesmcrt in #225
• fix(skills): match codex bot in GraphQL author.login filters by @AlexandreYang in #227
• test(help): make help tests resilient to new builtins by @AlexandreYang in #226
• feat(xargs): implement xargs builtin with sandboxed sub-command execution by @AlexandreYang in #224
• docs: remove Testing section from README by @AlexandreYang in #230
• feat(read): implement read builtin with IFS field-splitting by @matt-dz in #211
• feat(df): add df builtin for disk space usage reporting by @julesmcrt in #205
• docs(skills): rework /improve-test-coverage and apply it to the test suite by @AlexandreYang in #236
• fix(help): list while/until as supported in help output by @AlexandreYang in #242

New Contributors

• @gh-worker-campaigns-3e9aa4[bot] made their first contribution in #198

Full Changelog: v0.0.14...v0.0.15