github.com/fencesandbox/fence

Changelog

Bug fixes

• 5e3cee0: fix: canonicalize Linux cross-mount bind paths (#209) (@jy-tan)
• 9adadfe: fix: prevent hook policy substitution via nested Fence commands (#214) (@jy-tan)
• 75bd8c4: refactor: make Linux bootstrap independent of shell utilities (#203) (@jy-tan)

Changelog

New Features

• 4671217: feat(linux): bridge localhost-outbound ports over IPv6 as well as IPv4 (#206) (@hwalinga)

Bug fixes

• 9603143: fix: allow MiniMax API endpoints in code template (#207) (@octo-patch)
• 88f5cd1: fix: keep explicitly allowed dangerous files readable on Linux (#208) (@jy-tan)

Changelog

New Features

• 2611d1b: feat: allow writes to .claude agents and commands dirs (#200) (@jy-tan)

Bug fixes

• 88c755b: fix: limit Codex hooks to Bash tool calls (#198) (@jy-tan)

Changelog

New Features

• dcf1054: feat: add Codex hook integration (#192) (@jy-tan)

Changelog

New Features

• 79607fb: feat: add public policy preflight checks for paths, commands, and URLs (#190) (@jy-tan)

Documentation updates

• 247a419: docs: update docs to call out differences between CLI and library (@jy-tan)

Changelog

Bug fixes

• 6bc53a9: fix: priority of default deny read on macos (#184) (@shfx)

Changelog

Bug fixes

• c52f511: fix: preserve readable linux submounts in non-defaultDenyRead mode (#180) (@jy-tan)
• 09fdb24: fix: split Linux-only lint paths behind build tags (#181) (@jy-tan)

Documentation updates

• 67c6897: docs: update README.md with repo move notice (#179) (@jy-tan)

Other work

• af7895d: chore: update opencode hooks (@jy-tan)

Changelog

New Features

• 4837892: feat: add upstream proxy support for grey-zone traffic inspection (#165) (@tharwan)
• 5bfc2ab: feat: handle Ctrl-Z / fg transparently for wrapped commands (#174) (@voidexpr)

Other work

• ebc4f91: Update .gitignore (@jy-tan)
• 7da8743: chore: update Go module paths (#177) (@jy-tan)
• 53f973e: chore: update repository references (#178) (@jy-tan)