tamperward 2.39.3 → 2.39.4

package/dist/cli/index.js

@@ -21371,6 +21371,8 @@ var init_evidence = __esm({
         ref: "copilot-sdk-capture-2026-09-20",
         source: "harness/adapters/copilot-sdk/evidence/capture-2026-09-20.json",
         source_artifact_sha256: "c46fba989dc0e772012c5fdb1291cf099326d24da2b551788be2e1e85113e49a",
+        // sha256sum of the committed capture (#619 re-grounded it on 2026-09-20; #697 pins it).
+        committed_artifact_sha256: "1c2d1acdfabc927e72dfa765cdb8da6fd995e6cbcad89812496d5c34e62e7903",
         binding: {
           runtime_id: "github-copilot-sdk-hosted",
           runtime_version: "copilot-runtime@1.0.85",
@@ -21393,16 +21395,19 @@ var init_evidence = __esm({
           {
             id: "pre-deny:shell",
             result: "proven",
+            capture_path: "returned-reject",
             detail: "returned-reject path (permission.completed result.kind denied): a rejected permission decision blocked shell tool dispatch \u2014 protected state not mutated (shell-pre-deny observation, boundary seq 2 < completion seq 3)"
           },
           {
             id: "hook-not-invoked",
             result: "proven",
+            capture_path: "callback-failure",
             detail: "callback-failure path: a broken permission callback (sync-throw, reject and adapter-throw, independently) failed CLOSED \u2014 the tool did not dispatch and protected state stayed intact"
           },
           {
             id: "transport:timeout",
             result: "inconclusive",
+            capture_path: "callback-timeout",
             detail: "callback-timeout path: a hung permission handler emits no permission.completed (the pinned SDK has no handler timeout), so non-dispatch is intrinsically unobservable \u2014 timeout is not proven either way"
           }
         ]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tamperward",
-  "version": "2.39.3",
+  "version": "2.39.4",
   "description": "The deterministic agent-integrity gate. One ruleset, evaluated on the actual diff/commands as a verdict, enforced everywhere a change can be made.",
   "license": "Apache-2.0",
   "author": "hexrift",