Doberman-Core

Summary

Your AI's guard dog. Doberman sits at runtime, gating every input, output and tool call to stop unsafe or unintended actions before they execute.

Release history

1. v0.18.5 Aug 30, 2026 · issue 011

   Doberman-Core v0.18.5 adds log retention, version-check nudge, egress-threshold CLI, and richer doctor diagnostics

   └──▷ GET THIS VERSION
   copy

   $ git clone --branch v0.18.5 https://github.com/DobermanCore/Doberman-Core.git
   # already have the repo? check out this version:
   $ git checkout v0.18.5

   └──▷ TRY IT
   Tighten fanout detection live without hand-editing the policy file — the change is gated, ledgered, and effective immediately.
   copy

   $ doberman egress-velocity fanout 10

   Check whether Doberman itself is up to date and get the exact pip command to upgrade, without running the upgrade automatically.
   copy

   $ doberman update

   • ›Adds doberman egress-velocity [KNOB] [VALUE] to show or set the burst, volume-bytes, and fanout detection thresholds from the CLI, with approval gating and policy-ledger recording for threshold increases.
   • ›Adds doberman decision-log-prune to delete resolved decision-log rows by age and/or retained-row budget, without touching pending AUTH challenges or the policy-change ledger; mediated agents cannot invoke it via the shell.
   • ›Adds doberman update command for a timeout-bounded PyPI version check that prints the pip install -U upgrade command without installing anything; disabled under DO_NOT_TRACK, CI, or DOBERMAN_UPDATE_CHECK=off.
   • ›Adds a passive 'new version available' nudge to doberman status when a newer PyPI version is cached (24 h cache), on the same opt-out controls as doberman update.
   • ›Adds Password row to doberman doctor output, showing OK when a password factor is enrolled or a non-critical WARN with a doberman password set hint when not.
   +8 moreshow less

   • ›Adds Dash extra and TUI extra rows to doberman doctor, reporting whether starlette/textual are installed and printing pip install 'doberman[dash]'/[tui] hints when absent.
   • ›Adds --dry-run flag to install-hooks that previews the exact SessionStart command the installer writes, derived from the same DASHBOARD_COMMAND constant as the write path.
   • ›Adds --json flag to tune for compact JSON output (separators=(',', ':')) matching the machine-readable contract documented in docs/CLI.md.
   • ›Adds a Copy details action to each pending approval card in the dashboard, copying the redacted fields as formatted JSON.
   • ›Dashboard stats strip now triggers an immediate trailing-debounced 150 ms refresh when a decision lands in the live feed, with the 5 s interval retained as a fallback.
   • ›Dashboard header now renders the real Doberman mark as an embedded PNG data URI instead of the placeholder 'D', keeping doberman dash a single self-contained page.
   • ›Expands doberman decision-log-prune eligibility to any AUTH row with a recorded outcome (approval method, denied, blocked, error, executed), not only the original three literal values.
   • ›Changelog fragments now use per-PR files at changelog.d/<PR-number>.md, compiled by release tooling to eliminate merge conflicts on parallel pull requests.
2. v0.18.4 Aug 27, 2026 · issue 011

   Doberman-Core v0.18.4 adds opt-out telemetry, demo --quiet CI mode, global uninstall, doctor hook-path checks, and approval memory.

   └──▷ GET THIS VERSION
   copy

   $ git clone --branch v0.18.4 https://github.com/DobermanCore/Doberman-Core.git
   # already have the repo? check out this version:
   $ git checkout v0.18.4

   └──▷ TRY IT
   Run the demo engine as a silent CI smoke test — exits non-zero on mismatch, no log noise on success.
   copy

   $ doberman demo --quiet

   Completely remove Doberman from a machine (hooks, state, keys, and package) in a single command, skipping only the typed confirmation.
   copy

   $ doberman uninstall --global --yes

   Opt out of telemetry via environment variable in CI pipelines or per-session shells where you cannot run a subcommand.
   copy

   $ export DOBERMAN_TELEMETRY=0

   • ›Adds doberman demo --quiet flag to suppress banners, narration, and hints — keeping only the summary line/table and exit code — so demo can run as a CI smoke test without polluting build logs.
   • ›Adds doberman uninstall --global to perform a device-wide removal of Claude Code and Codex hooks, project state, possession factors, the fingerprint key, and device state before removing the package via pip or pipx; --yes skips the typed DOBERMAN confirmation, --dry-run changes nothing, and --keep-package preserves the package.
   • ›Adds ~/.doberman/excluded_projects.json device-wide exclusion list written by uninstall when global hooks are present, giving excluded projects a true no-op; run doberman install-hooks in a project to clear the exclusion.
   • ›doberman status now reports whether the current project is in the device-wide exclusion list.
   • ›Adds a new critical Hook command check to doberman doctor that fails and names a fix when hooks reference a doberman binary not on PATH — instructs user to restore the binary or run doberman uninstall-hooks.
   +3 moreshow less

   • ›Adds doberman approvals status|clear|ttl subcommands to expose bounded human controls over the new five-minute exact-action approval memory (HMAC-keyed, never downgrading destructive/critical/excluded/tainted-session actions).
   • ›Introduces a five-minute approval memory: a repeat of an exact previously approved action re-prompts at a one-click soft_confirm instead of the full ladder; soft confirms never chain.
   • ›Telemetry is now on by default (opt-out): anonymous usage counts for the same five allowlisted events are sent unless disabled via doberman telemetry off, DO_NOT_TRACK, DOBERMAN_TELEMETRY=0, or the CI environment variable; doberman setup prompts with a default of Yes, and the first CLI command prints a one-line notice to stderr before anything is sent.
3. v0.18.2 Aug 26, 2026 · issue 011

   Doberman-Core v0.18.2 adds opt-in CLI telemetry controls and a self-hardening secret rule that fails closed on invariant violations.

   └──▷ GET THIS VERSION
   copy

   $ git clone --branch v0.18.2 https://github.com/DobermanCore/Doberman-Core.git
   # already have the repo? check out this version:
   $ git checkout v0.18.2

   └──▷ TRY IT
   Check or toggle anonymous telemetry reporting before deploying Doberman in a shared environment.
   copy

   $ doberman telemetry status
   doberman telemetry on
   doberman telemetry off

   • ›Adds doberman telemetry on|off|status subcommand for opt-in anonymous CLI telemetry — off by default, limited to allowlisted counts and command names, never on the per-tool hook or proxy hot path.
   • ›Secret detector now verifies its own invariants at import and degrades to a fail-closed AUTH verdict if ever broken, preventing both silent secret leakage and tool mediation being bricked.
4. v0.18.0 Aug 15, 2026 · issue 011

   Doberman-Core v0.18.0 adds RAND-aligned guardrails, new CLI subcommands, a WebhookAuditSink, and a labeled detection corpus.

   └──▷ GET THIS VERSION
   copy

   $ git clone --branch v0.18.0 https://github.com/DobermanCore/Doberman-Core.git
   # already have the repo? check out this version:
   $ git checkout v0.18.0

   └──▷ TRY IT
   Reset a locked-out user's TOTP second-factor without destroying their seed, so they can re-enroll immediately.
   copy

   $ doberman 2fa reset-lockout

   Remove taint records that are blocking a pipeline after a false-positive secret detection.
   copy

   $ doberman taint clear

   • ›Adds doberman 2fa reset-lockout subcommand to reset TOTP lockout state.
   • ›Adds doberman taint clear subcommand to clear taint records.
   • ›Adds WebhookAuditSink for routing audit events to a webhook endpoint.
   • ›Introduces RAND-aligned guardrail rehaul including a session correlator, opt-in least-privilege default role, subjective-memory governance, and an egress task-match leg.
   • ›Ships a labeled detection corpus with per-category FPR/TPR metrics for guardrail tuning.
5. v0.17.1 Aug 7, 2026 · issue 011

   Doberman-Core v0.17.1 adds --json/--jsonl output to read-only commands, surfaces auth deadlines, and renames dashboard to session-summary.

   └──▷ GET THIS VERSION
   copy

   $ git clone --branch v0.17.1 https://github.com/DobermanCore/Doberman-Core.git
   # already have the repo? check out this version:
   $ git checkout v0.17.1

   └──▷ TRY IT
   Stream continuous log output in newline-delimited JSON into a SIEM or log aggregator.
   copy

   $ doberman log --jsonl >> /var/log/doberman/decisions.jsonl

   • ›Adds --json and --jsonl flags to scan, doctor, policy-history, and log commands, emitting machine-readable output with an explicit allowlist of already-redacted columns so future schema additions cannot leak into streams by default.
   • ›Renames doberman dashboard to doberman session-summary; the old name is retained as a hidden permanent alias so existing SessionStart hooks continue to work.
   • ›doberman status now surfaces auth challenges auto-denied in the last 24 hours.
   • ›Adds docs/CLI.md and docs/REASON_CODES.md, cataloguing all 51 ReasonCode values and the condition that fires each one.
   • ›Every AUTH channel now displays its auto-deny deadline in the TTY prompt, GUI dialog, and dashboard card expiry.