What changed, why it matters, and what to test next.
Follow the public preview without reading commit history. Every release stays linked to source, signed artifacts, and the operator action that matters.
· Public preview
Vexyl Guard v0.2.11
This release makes monitor-first deployments safer to configure and easier to validate before the service starts.
Use IPv4 and IPv6 CIDR ranges in the trusted-source allowlists.
Run sudo vexyl-guard validate-config before starting or restarting the service.
Invalid configuration now fails with specific errors instead of entering a restart loop.
Public AI-runtime contracts strengthen untrusted-content handling, tool scope, approval, and redaction checks.
This release adds a redacted support-report command so operators can share install and service context without posting raw logs or host-specific details.
Run sudo vexyl-guard support-report for a reviewable diagnostic summary.
Reports omit tokens, API URLs, hostnames, IP addresses, usernames, raw logs, and custom local paths.
Signed Debian/Ubuntu and RPM packages remain available alongside the verified installer.
Monitor mode remains the default after installation.
Vexyl Guard is ready for evaluation on non-critical Linux hosts. The project is still collecting clean-install, distribution, noise, and documentation feedback before making stronger production-readiness claims.
