This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
+12 more
Affected surfaces
Summary
AI summaryFixed a bug where a trust grant outliving its profile kept the turn‑end gate running on an ungoverned repo.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Bugfix | Medium |
gate_one_root now requires a COMMITTED profile on disk, preventing advisories for un-profiled repos. gate_one_root now requires a COMMITTED profile on disk, preventing advisories for un-profiled repos. Source: llm_adapter@2026-07-17 Confidence: high |
— |
Full changelog
Fixed
- A trust grant that outlives its profile no longer keeps the turn-end gate
running on an ungoverned repo:gate_one_rootnow requires a COMMITTED
profile on disk, matching every other surface's treatment of a
profile-less root. Previously a repo that was once trusted and later
un-profiled (its.chameleon/deleted) kept receiving Stop-hook
advisories — observed live as a "no passing test run" nag on a repo with
no profile at all — and could even be turn-end blocked, while status and
every read tool correctly reported no profile. The per-edit
credential/eval security floor is unchanged (it is PreToolUse's,
independent of this gate).
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Chameleon
All releases →Beta — feedback welcome: [email protected]