tamperward 1.4.2 → 1.4.3

package/README.md

@@ -19,7 +19,8 @@ lowering coverage gates, rewriting snapshots, editing CI, or bypassing hooks wit
 `--no-verify`. Tamperward treats the safety nets themselves as protected assets and
 blocks the **class** of bypass — one ruleset, evaluated on the actual diff and commands
 as a verdict, not a probability, enforced everywhere a change can be made: **inside the
-agent's loop, at the commit, and at the merge.**
+agent's loop (a deny before the tool runs, and a sweep at end of turn), at the commit,
+and at the merge.**
 
 > Apache-2.0 · zero runtime model calls · every headline claim below is measured, with
 > the pre-registered predictions (including the refuted ones) committed to this repo
@@ -30,8 +31,8 @@ agent's loop, at the commit, and at the merge.**
 npx tamperward init
 ```
 
-One idempotent command wires all four enforcement points — it never overwrites anything
-you wrote, and `--dry-run` shows the plan first:
+One idempotent command wires the policy and every enforcement point — it never
+overwrites anything you wrote, and `--dry-run` shows the plan first:
 
 | point | what it wires |
 | --- | --- |

package/dist/cli/index.js

@@ -2313,9 +2313,10 @@ Formats:
   tamperward hook claude                    PreToolUse gate (reads hook JSON on stdin)
   tamperward sweep claude                   Stop sweep (re-scan the turn's working tree)
   tamperward allow <rule> --reason "..."    record a human sign-off (local audit ledger)
-  tamperward init [--dry-run]               wire all four enforcement points: policy
-                                            file, Claude Code hooks, pre-commit, CI.
-                                            Idempotent; never overwrites your files.
+  tamperward init [--dry-run]               wire the policy file plus every
+                                            enforcement point: Claude Code hooks,
+                                            pre-commit, CI. Idempotent; never
+                                            overwrites your files.
 
 Exit code: check \u2192 1 if any blocking finding. hook/sweep \u2192 always 0; a deny is
            emitted as JSON on stdout (exit 2 makes Claude Code ignore the JSON).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tamperward",
-  "version": "1.4.2",
+  "version": "1.4.3",
   "description": "The deterministic agent-integrity gate. One ruleset, evaluated on the actual diff/commands as a verdict, enforced everywhere a change can be made.",
   "license": "Apache-2.0",
   "author": "hexrift",