Sentinel v0.1.0-alpha.3

What's Changed

Release plumbing only — no changes to Sentinel itself.

• npx @nanocollective/sentinel installs the newest alpha. Pre-1.0 releases
  publish under the alpha tag and never claimed npm's latest, which was
  still pinned to 0.1.0-alpha.0 — so the documented npx install fetched the
  first alpha rather than the current one. The release workflow now moves
  latest onto each new prerelease until a stable version ships and claims the
  tag itself.
• Publish detection no longer trusts the latest tag. The version check
  reads the full published-versions list, so a lagging tag can no longer report
  an already-published version as new, and the release notes link to the right
  compare range.

Install

npx @nanocollective/sentinel@0.1.0-alpha.3 init

Full Changelog: v0.1.0-alpha.2...v0.1.0-alpha.3

Sentinel v0.1.0-alpha.2

What's Changed

Fixes from running the full audit loop live against a real repository. Several
of these affect correctness — an alpha.1 install has broken dedup and cannot
file on a fresh repo.

• Dedup no longer refiles duplicates. The content hash included the line
  range, which LLMs report inconsistently between runs, so the same finding got
  a new hash and was refiled. Identity is now rule + file + category, which
  stays stable across runs.
• Filing works on a fresh repo. Sentinel now creates its own labels
  (sentinel and the suppression labels) before filing, instead of crashing
  when gh issue create --label hits a label GitHub does not know about.
• A single filing failure no longer aborts the run. Each create/update/close
  is tolerated and reported; the batch continues.
• Dry-run no longer hides audit failures. A pack that fails validation is
  surfaced in the preview instead of reading as "clean".
• Truncated model output is salvaged. When a run is cut off mid-array, the
  leading complete findings are recovered rather than discarded.
• New --resolve-after-misses flag to tune auto-resolution.

Install

npx @nanocollective/sentinel@0.1.0-alpha.2 init

Full Changelog: v0.1.0-alpha.0...v0.1.0-alpha.2

Sentinel v0.1.0-alpha.1

What's Changed

Rounds out the v1 surface on top of the first alpha.

• Org pattern targets. pattern: "org/*" now enumerates the owner's
  repositories (via gh) and audits the matches, merging rule packs when a repo
  matches several targets — no more hand-listing every repo.
• Run records + dashboard. Each run commits a JSON record to runs/ and
  regenerates a self-contained static dashboard/index.html (GitHub Pages
  ready) — the read-side history, no database.
• Example rule packs. Three illustrative, CI-validated packs
  (node-server, rust-general, solana-anchor) under examples/rule-packs/.
• From-template install. A committed template/ directory (kept in sync
  with the scaffolder) for the npx-free degit / "Use this template" path.
• Hardening. npm publish provenance, issue/PR templates, SECURITY.md,
  CODEOWNERS.

Install

npx @nanocollective/sentinel@0.1.0-alpha.1 init

Full Changelog: v0.1.0-alpha.0...v0.1.0-alpha.1

Sentinel v0.1.0-alpha.0

What's Changed

The first published (prerelease) build of Sentinel — an installable, Nanocoder-driven workflow that runs continuous, configurable security and code audits across a GitHub organisation's repositories and files findings as issues.

Install

npx @nanocollective/sentinel@0.1.0-alpha.0 init

Full Changelog: v0.0.0...v0.1.0-alpha.0