trevato-apps/forge
5
0
Fork 4
Code Issues Pull requests 6 Releases 501 Packages 1 Wiki Activity Actions 6
501 releases 533 tags
  • v0.7.19 0092ddb8da

    v0.7.19
    Some checks failed
    sync-env / sync-env (push) Successful in 1s
    Details
    release / build (push) Successful in 2m58s
    Details
    check / check (push) Failing after 3m27s
    Details
    Stable

    plat released this 2026-09-21 23:43:20 +00:00 | 5886 commits to main since this release

    The contract: who may do what, as a table. An app declares its roles and, per resource, the least role each verb needs in contract.json; one self-contained evaluator (src/contract/can.ts) decides from it and is carried verbatim into every scaffolded app, proven by exhaustion against an independent oracle. The audit (/audit, MCP audit): every app's policy read from git, unsound contracts with their problems, apps without one listed as unread. The probe (MCP probe, Knock now): the forge knocks on a running app's doors as nobody, a user and an admin after every production deploy and nightly, compares with the table, keeps one issue while the app disobeys. The wall: a pull that loosens a cell is shown on its page and the studio as its own card, and the crew never lands it. Migration 25 adds the probe table.

    Downloads