Termaxa: matoleo yote na matoleo ya zamani

What's Changed
- GHSA-3hg6-x893-mfr4 is published: its row in SECURITY.md, 103 days exposed by @devdoc83 in #150
- Link the C runtime statically on Windows: the exe starts without the VC++ redistributable by @devdoc83 in #151
- v0.21.5: the Windows exe carries its runtime by @devdoc83 in #152
Full Changelog: v0.21.4...v0.21.5

What's Changed
- A path after a cd is judged where the cd went: path rules, the preview and the copy aside follow cd, pushd, subshells and git -C by @devdoc83 in #148
- v0.21.4: a path after a cd is where the cd went by @devdoc83 in #149
Full Changelog: v0.21.3...v0.21.4

What's Changed
- A directory a build rebuilds is not the floor, the gate's own files and the hook configs are path rules on the floor, and reading a hook config is ordinary work by @devdoc83 in #145
- v0.21.3: node_modules is not the floor by @devdoc83 in #146
Full Changelog: v0.21.2...v0.21.3

What's Changed
- rm -r -f / is the hard stop rm -rf / is, a glob is previewed as what it expands to and held in observe mode, and four fixes from the first field report by @devdoc83 in #143
- v0.21.2: rm -r -f / is rm -rf / by @devdoc83 in #144
Full Changelog: v0.21.1...v0.21.2

What's Changed
- release: the winget job runs a pinned, checksummed komac itself, and a hiccup in it is a warning, not a red check by @devdoc83 in #140
- A tool's global options and a program's path no longer hide a hard stop: kubectl -n, terraform -chdir=, docker --context and /usr/bin/kubectl are denied like their plain spelling, in both modes by @devdoc83 in #141
- v0.21.1: every spelling of kubectl, terraform and docker by @devdoc83 in #142
Full Changelog: v0.21.0...v0.21.1

What's Changed
- Observe mode answers nothing in every harness: Copilot treats a hook's allow as an approval by @devdoc83 in #132
- v0.20.1: observe mode says nothing by @devdoc83 in #133
Full Changelog: v0.20.0...v0.20.1

What's Changed
- SECURITY.md: every advisory with both endpoints of its exposure, in UTC by @devdoc83 in #125
- The circuit breaker holds across sessions and resumes only by a recorded act by @devdoc83 in #126
- replay --against-record: the transcript held against the record, with a witness the hook leaves before it judges by @devdoc83 in #127
- replay reads shell calls only: not files an agent wrote, a wrapper by its script, an interrupted call as not run by @devdoc83 in #128
- replay --against-record prints the not-run bucket, so its counts add up by @devdoc83 in #129
- Observe mode: records what enforcement would have done, except for the floor it cannot lower by @devdoc83 in #130
- v0.20.0: observe mode, and what it would have caught by @devdoc83 in #131
Full Changelog: v0.19.6...v0.20.0

What's Changed
- winget-releaser uses the devdoc83 fork, and cannot paint a release red by @devdoc83 in #120
- The README opens on the deny moment; the Herdr plugin gets its GIF by @devdoc83 in #121
- README: the real capture is a fresh session on 0.19.5 with approvals off by @devdoc83 in #122
- An option that writes or runs turns a reading allow into an ask, and its file is previewed and backed up; a push that removes refs says which by @devdoc83 in #123
- v0.19.6: the option beside the one a rule was written for by @devdoc83 in #124
Full Changelog: v0.19.5...v0.19.6