Changelog
Alpha breaks things. Here is what broke.
Breaking changes come first in every entry, before the good news. Read this page before
upgrading a machine you rely on.
v0.1.0a17
2026-08-11
Current release BREAKING
- policy.toml route keys moved under [network]. Re-run setup to migrate; old files are rejected, not auto-upgraded.
- mordred check is now hermes-mordred status.
SECURITY
- The guard no longer writes matched spans to the log in debug builds. MRD-0142
ADDED
- TPM 2.0 support on Linux, matching the macOS Enclave path.
- setup --review prints the policy answers without rewriting the file.
FIXED
- A stalled Tor circuit could hang the run instead of failing closed.
BREAKING
- Audit logs are now sealed with the device key. Logs written by a16 and earlier cannot be read by this version.
ADDED
- Reason codes on every refusal, and a table of them in USAGE.md.
ADDED
- First public alpha: six plugins, macOS Secure Enclave only.
[TBD]Entries above are placeholders — engineering to supply the real release history.