@integrity-labs/agt-cli 0.28.569 → 0.28.570

package/dist/{chunk-7O2TXBWR.js → chunk-6XCGZUSS.js}

@@ -10619,13 +10619,30 @@ var FLAG_REGISTRY = [
     // safe default — it resolves to `honors`, reporting every host as honouring
     // the flip, including hosts whose agt-cli has no reader at all.
     //
-    // 0.28.566 is the auto-publish cut from the ENG-8575 merge (583cef8d9,
-    // published 2026-08-12T08:32Z). Verified against the published tarball
-    // rather than inferred from the merge: `maybeScanToolCalls`,
-    // `tool-call-audit` and `tool-call-path-salt` are all present in
-    // package/dist/lib/manager-worker.js — the manager, which is the actual
-    // reader. The dist/mcp/* occurrences are bundling artifacts, not readers.
-    since: "0.28.566"
+    // WHAT THIS VERSION HAS TO MEAN. Not "the first build with a reader" — the
+    // first build where flipping the flag does what the flag is documented to
+    // do. Those diverged twice already, in the same direction:
+    //
+    //   0.28.566 (ENG-8575) — the first build with a reader. Pinned here and
+    //     correct on the day. It has the unbounded scan window and the coverage
+    //     rows that overstate (both ENG-8740), and no `logging_mode` enforcement
+    //     at all (ENG-8726) — so a hash-only agent on it emits plaintext
+    //     `argv0` / `url_host` / `mcp_tool`, which is precisely the governance
+    //     breach this epic exists to prevent.
+    //   0.28.569 (ENG-8740) — bounded window, honest coverage intervals. Still
+    //     no hash-only enforcement. The pin was NOT moved at that merge and went
+    //     stale for a day; reach reported those hosts `honors`.
+    //   0.28.570 (ENG-8726) — hash-only honoured at runtime. Current pin.
+    //
+    // MOVE THIS PIN whenever a change alters what arming the flag DOES on a
+    // host, and verify it against the published tarball rather than inferring it
+    // from the merge — `npm pack @integrity-labs/agt-cli@<v>` and grep
+    // package/dist/lib/manager-worker.js (the manager is the actual reader; the
+    // dist/mcp/* occurrences are bundling artifacts). For 0.28.570 the markers
+    // are `readAgentLoggingMode` and `loggingModeWithholdsTargets`. Auto-publish
+    // patch-bumps from whatever is on main, so if another CLI-touching PR lands
+    // first the real cut is higher than this and the pin under-reports.
+    since: "0.28.570"
   },
   {
     key: "conversation-eval-backend",
@@ -15815,4 +15832,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-7O2TXBWR.js.map
+//# sourceMappingURL=chunk-6XCGZUSS.js.map