Changelog

• 473f4c5 feat(codex): enforce policy through native lifecycle hooks
• ae67a17 feat: verify Hermes and modernize Claude hooks
• fd2f7f2 fix: align security claims with verified boundaries
• 067c940 security(hermes): enforce policy across batched patches
• 71e3413 security: add executable assurance baseline
• c974d19 test codex through isolated host boundary

Changelog

• 7e698f5 Add isolated Linux E2E lab runner
• 0e6aac7 Add zero-config OpenClaw protection
• 7c97ee6 Fix Windows protection tests
• eaa926e Fix lab runner PATH initialization
• 98905cf Fix lab runner tool discovery over SSH
• 00bea04 Harden zero-config OpenClaw protection
• ec7f5b4 fix: close final v1.3.0 review gaps
• daaca15 fix: detect Windows directory traversal lockout
• cb84621 fix: harden Windows token ACL handling
• 7cbba9b fix: recover legacy Windows ACL lockouts
• e763cd0 fix: support OpenClaw 2026.7 migration output

Rampart v1.2.0

This release adds the hosted approval API foundation for host-owned approval flows, strengthens experimental Hermes Agent audit correlation, refreshes OpenClaw compatibility coverage, and hardens audit-chain recovery for release-grade operation.

Added

• Hosted approval API foundation for hosts that own the user-facing approval and exact resume flow.
• Hermes audit/tool-call correlation for the experimental Hermes policy gate.
• Latest-agent compatibility gates for OpenClaw and Hermes release validation.
• OpenClaw provider-surface replay coverage for canonical exec normalization and related tool surfaces.

Changed

• Bundled OpenClaw and experimental Hermes plugin metadata now report 1.2.0 consistently.
• Release-facing docs, installer examples, troubleshooting examples, and container examples now point at v1.2.0.
• CI, release, Docker, and upstream compatibility workflows now use Go 1.25.11.

Fixed

• Audit-chain recovery now resumes from the latest valid JSONL event instead of relying on absent, stale, or tampered anchor state.
• rampart audit verify --since now handles intentionally truncated history while continuing to verify included chain and anchor data.
• OpenClaw plugin discovery setup now preserves existing discovery defaults and avoids unnecessary restrictive configuration.
• Hermes plugin manifest loading avoids duplicate manifest-type registration issues.

Validation summary

• GitHub Actions passed on the final release candidate commit 54fcc7a before promotion.
• Release workflow completed successfully for tag v1.2.0.
• OpenClaw latest isolated compatibility passed against OpenClaw 2026.6.1.
• OpenClaw live runtime proof passed with a native bash trajectory and correlated Rampart canonical exec audit event.
• Hermes latest isolated compatibility passed against Hermes Agent v0.16.0 for deny, allow, ask-blocking, fail-closed, and configured read fail-open behavior.

Support note

Hermes support remains experimental in this release. The policy gate, audit correlation, and fail-closed behavior are validated, but full Hermes-hosted approval/resume support is not claimed yet.

Added

• Experimental Hermes Agent policy gate — rampart setup hermes installs a user plugin that evaluates Hermes pre_tool_call events through Rampart without patching Hermes itself.

Changed

• Bundled OpenClaw plugin metadata is aligned for v1.1.1 — The package manifest, OpenClaw manifest, runtime export, and user-facing examples now report 1.1.1.

Fixed

• Serve tokens stay out of non-interactive logs — rampart serve redacts full tokens when output may be captured by service logs while preserving local token persistence.
• Policy polish for agent integration maintenance — Standard policy now allows safe setup help and hook inspection forms while continuing to deny setup execution, hook mutation, compound inspection-plus-mutation commands, and high-risk environment assignments.
• Filtered audit views include sidecar files — rampart log --deny searches all audit JSONL files before filtering so deny events are not hidden by later-sorting sidecar logs.

Changelog

• 8b3b34f feat: add inventory json command
• 802d8f3 feat: add observability schema foundations
• 9e6c69d feat: harden doctor json contract
• c217250 fix: avoid empty audit rotation headers
• 82f41a3 fix: normalize OpenClaw exec tool aliases
• bb76371 fix: support OpenClaw gateway protocol v4

Changelog

• 2d7838f Polish 1.0 release packaging and docs
• ed28ece ci: quiet workflow runtime warnings (#305)
• 76319f0 ci: smoke test Docker before releases (#304)
• 3845b7d fix: align OpenClaw plugin license metadata
• d1d08f3 fix: flag stale OpenClaw plugin prereleases

Changelog

• 3bfed7d ci: pin govulncheck for Go 1.24
• d92e765 ci: use Go 1.25.9 in workflows
• 5538279 fix(openclaw): run Rampart tool hook last
• 36d18e5 fix: avoid prerelease downgrade update hints
• f87932a fix: keep durable override reporting strict
• a13b360 fix: make durable user overrides authoritative
• 53c59e4 fix: update root installer for release archives
• ddf66a3 fix: warn on permissive OpenClaw policy layering

Changelog

• 3bfed7d ci: pin govulncheck for Go 1.24
• d92e765 ci: use Go 1.25.9 in workflows
• b73c582 fix: align degraded-mode config contract
• b8aee9c fix: align openclaw plugin activation contract
• a72c345 fix: align openclaw plugin gateway contract
• 36d18e5 fix: avoid prerelease downgrade update hints
• 1a5e39c fix: detect latest openclaw approval bundles
• 8cc8317 fix: fall back to background serve during openclaw setup
• 53ee1af fix: harden OpenClaw approval fallback behavior (#275)
• ef59268 fix: harden agent integration checks (#261)
• 4e074a8 fix: harden config resolution and hook approval integrity (#286)
• c455e2f fix: harden openclaw rc diagnostics
• 6e91fb5 fix: harden rc policy matching edge cases
• 9d0cd38 fix: harden rc wrapper normalization
• f87932a fix: keep durable override reporting strict
• a13b360 fix: make durable user overrides authoritative
• 94f2e00 fix: preserve modified built-in policy profiles (#273)
• c9b4a79 fix: preserve openclaw approval ownership
• 230a904 fix: suppress pseudo-version plugin mismatch warning
• 2682a12 fix: tighten OpenClaw trust signals and setup coherence (#278)
• 2f87829 fix: treat native openclaw plugin approvals as healthy
• 53c59e4 fix: update root installer for release archives
• ddf66a3 fix: warn on permissive OpenClaw policy layering
• 6811761 merge: resolve landing page conflict for main deploy
• e9043be merge: resolve main conflicts for 1.0 rc promotion
• b12def6 merge: resolve main release conflicts for v0.9.20
• 5125de2 merge: resolve main release conflicts for v0.9.21
• 6422af9 merge: resolve main release metadata conflicts for v0.9.22

Changelog

• b73c582 fix: align degraded-mode config contract
• b8aee9c fix: align openclaw plugin activation contract
• a72c345 fix: align openclaw plugin gateway contract
• 1a5e39c fix: detect latest openclaw approval bundles
• 8cc8317 fix: fall back to background serve during openclaw setup
• 53ee1af fix: harden OpenClaw approval fallback behavior (#275)
• ef59268 fix: harden agent integration checks (#261)
• 4e074a8 fix: harden config resolution and hook approval integrity (#286)
• c455e2f fix: harden openclaw rc diagnostics
• 6e91fb5 fix: harden rc policy matching edge cases
• 9d0cd38 fix: harden rc wrapper normalization
• 94f2e00 fix: preserve modified built-in policy profiles (#273)
• c9b4a79 fix: preserve openclaw approval ownership
• 230a904 fix: suppress pseudo-version plugin mismatch warning
• 2682a12 fix: tighten OpenClaw trust signals and setup coherence (#278)
• 2f87829 fix: treat native openclaw plugin approvals as healthy
• 6811761 merge: resolve landing page conflict for main deploy
• e9043be merge: resolve main conflicts for 1.0 rc promotion
• b12def6 merge: resolve main release conflicts for v0.9.20
• 5125de2 merge: resolve main release conflicts for v0.9.21
• 6422af9 merge: resolve main release metadata conflicts for v0.9.22

Changelog

• 82aaeb1 release: promote staging to main for v0.9.22 (#287)