@easonwumac/computer-linker 0.1.6 → 0.1.7

package/CHANGELOG.md

@@ -5,6 +5,18 @@ All notable changes to Computer Linker will be documented in this file.
 This project follows a small pre-1.0 changelog: breaking contract changes are
 called out even when the package version is still `0.x`.
 
+## 0.1.7 - 2026-06-27
+
+### Changed
+
+- Public release audit now scans tracked and packed text files for suspicious
+  third-party provenance markers, including source-copy, adaptation,
+  snippet-site, and vendored-code references before public release.
+- Public release audit now blocks retired product-name markers without keeping
+  that retired name in repository text.
+- Release checklist now documents the provenance marker scan alongside license
+  and secret checks.
+
 ## 0.1.6 - 2026-06-27
 
 ### Changed

package/docs/architecture.md

@@ -5,9 +5,9 @@ architecture should serve that spec: a local computer MCP service for controlled
 file access, commands, Codex, screenshots, computer info, and audit history.
 ChatGPT-specific setup is a client helper, not the product axis.
 
-## Product Name
-
-The product is named **Computer Linker**. It intentionally does not reuse DevSpace.
+## Product Name
+
+The product is named **Computer Linker**.
 
 ## Mental Model
 

package/docs/release-checklist.md

@@ -130,9 +130,10 @@ This is the release-oriented alpha readiness gate. It requires fresh external
 MCP evidence and a dated `CHANGELOG.md` heading for the current package version,
 so it reports both final blockers in one place before `public:mirror`.
 
-This adds the public-release audit: packed-file inspection, tracked and
-non-ignored untracked file secret-shape scanning, production `npm audit`,
-dependency license allowlist checks, and a high-risk Git history secret scan.
+This adds the public-release audit: packed-file inspection, tracked and
+non-ignored untracked file secret-shape scanning, production `npm audit`,
+dependency license allowlist checks, third-party provenance marker scanning,
+retired product-name marker scanning, and a high-risk Git history secret scan.
 
 Before changing the current GitHub repository to public visibility while
 preserving its Git history, run the stricter one-command gate:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@easonwumac/computer-linker",
-  "version": "0.1.6",
+  "version": "0.1.7",
   "description": "One computer, one permissioned MCP linker for local workspaces.",
   "type": "module",
   "main": "dist/client.js",