What's Changed
- fix(policy): destructive-command catches the root wipe closed by nested quotes by @Ar9av in #895
- fix(context): a rewrite-only match inside a data heredoc is inert (#894 follow-up) by @Ar9av in #896
- feat(audit): resource + policy version on records, approver on approvals, re-check after approval by @Ar9av in #906
- fix(policy): local policy can't loosen a rule the org sets by @Ar9av in #907
- fix(trail): approval records carry the resource and the refusing rule by @Ar9av in #909
- fix(semantic): exempt chained Prismor help and cloak list output by @krishyogee in #903
- feat(mcp-gateway): limit repeated identical tool calls by @qipchip31 in #905
- preserve safety floor categories across overrides by @Madhumasa84 in #900
- fix(cloak): unwrap decloak tail that carries PRISMOR_CLOAK_SESSION by @Ar9av in #910
- docs(cli-reference): add hosted-proxy, copilot-studio and system-sync by @Ar9av in #911
- fix(runtime): detect --mount bind and absolute home in host policy check by @sharmis-tp in #902
- docs: flag console-only feature pages by @Ar9av in #914
- fix(self-protection): fail closed for compose and local-cluster kubectl payloads by @Ar9av in #916
- fix(semantic-guard): stop flagging first-party and descriptive text as exfiltration by @Ar9av in #917
- fix(self-protection): guard relative container bind mounts by @qipchip31 in #913
- fix(identity): an asserted subject can't pick user exemptions on device surfaces by @Ar9av in #919
- feat(hosted-mcp): accept the endpoint key as a bearer header by @Ar9av in #920
Full Changelog: v1.74.0...v1.75.0