tamperward 2.39.17 → 2.39.19

package/dist/cli/index.js

@@ -20109,11 +20109,10 @@ function neutralOnlyCaveat(detected) {
   const neutral = detected.filter((r) => r.steering === "neutral");
   if (neutral.length === 0) return null;
   const names = neutral.map((r) => r.label).join(", ");
-  const tracking = [...new Set(neutral.map((r) => r.adapterTracking).filter(Boolean))].join(", ");
   const claudeAlso = hasInLoopRuntime(detected);
   const lead = claudeAlso ? `In-loop steering (deny-before-execute) ships for Claude Code only today: Claude Code here gets it, but on ${names} your live protection is ` : `In-loop steering (deny-before-execute) ships for Claude Code only today, so on ${names} your live protection is `;
   const tail = claudeAlso ? "" : " The Claude hook wiring is still written and is inert unless Claude Code runs in this repository.";
-  return `${lead}the agent-neutral layers: pre-commit and CI.${tail}${tracking ? ` A native in-loop adapter is tracked in ${tracking}.` : ""}`;
+  return `${lead}the agent-neutral layers: pre-commit and CI.${tail}`;
 }
 var KNOWN_RUNTIMES;
 var init_runtimes = __esm({
@@ -20138,24 +20137,21 @@ var init_runtimes = __esm({
         label: "Cursor",
         markers: [".cursor", ".cursorrules"],
         steering: "neutral",
-        adapterTracking: "#482",
-        note: "agent-neutral layers (pre-commit + CI) today; a native in-loop adapter is tracked in #482."
+        note: "agent-neutral layers (pre-commit + CI) today; no in-loop adapter ships for Cursor."
       },
       {
         id: "copilot",
         label: "GitHub Copilot",
         markers: [".github/copilot-instructions.md", ".github/copilot"],
         steering: "neutral",
-        adapterTracking: "#482",
-        note: "agent-neutral layers (pre-commit + CI) today; a native in-loop adapter is tracked in #482."
+        note: "agent-neutral layers (pre-commit + CI) today; the experimental Copilot adapters are not qualified for in-loop steering (see `tamperward runtime verify`)."
       },
       {
         id: "codex",
         label: "an AGENTS.md-aware agent (e.g. Codex)",
         markers: [".codex", "AGENTS.md"],
         steering: "neutral",
-        adapterTracking: "#482",
-        note: "agent-neutral layers (pre-commit + CI) today; a native in-loop adapter is tracked in #482."
+        note: "agent-neutral layers (pre-commit + CI) today; the experimental Codex adapter is not qualified for in-loop steering (see `tamperward runtime verify`)."
       }
     ]);
   }
@@ -20670,6 +20666,7 @@ var init_adapter2 = __esm({
         unsupported: [
           "pre-action deny enforcement not yet proven on a pinned Codex build (see probe:codex-runtime)",
           "fail-closed hook transport not yet proven (openai/codex#41979)",
+          "a PreToolUse hook that is killed, hits its timeout, exits non-zero, or exits 0 with empty or malformed output, or whose configured executable is missing, fails OPEN on the pinned Codex 0.154.0 probe run: the tool dispatched after the hook failure and the mutation landed in some cases (openai/codex#45293, #41979)",
           "network-egress control",
           "identity / authentication"
         ]
@@ -22691,7 +22688,7 @@ async function runOnboard(opts, io = {}) {
         if (!adapter) {
           status(
             "QUALIFY",
-            `${runtime.label}: no shipped qualification adapter; neutral layers remain the live protection. See #602 before treating this runtime as in-loop qualified.`,
+            `${runtime.label}: no shipped qualification adapter; neutral layers remain the live protection.`,
             "warn"
           );
           return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tamperward",
-  "version": "2.39.17",
+  "version": "2.39.19",
   "description": "The deterministic agent-integrity gate. One ruleset, evaluated on the actual diff/commands as a verdict, enforced everywhere a change can be made.",
   "license": "Apache-2.0",
   "author": "hexrift",