Doberman-Core — The AI Toolchain

Doberman-Core v0.18.5

Sun, 30 Aug 2026 10:13:09 GMT

Doberman-Core v0.18.5 adds log retention, version-check nudge, egress-threshold CLI, and richer doctor diagnostics • Adds `doberman egress-velocity [KNOB] [VALUE]` to show or set the `burst`, `volume-bytes`, and `fanout` detection thresholds from the CLI, with approval gating and policy-ledger recording for threshold increases. • Adds `doberman decision-log-prune` to delete resolved decision-log rows by age and/or retained-row budget, without touching pending AUTH challenges or the policy-change ledger; mediated agents cannot invoke it via the shell. • Adds `doberman update` command for a timeout-bounded PyPI version check that prints the `pip install -U` upgrade command without installing anything; disabled under `DO_NOT_TRACK`, `CI`, or `DOBERMAN_UPDATE_CHECK=off`. • Adds a passive 'new version available' nudge to `doberman status` when a newer PyPI version is cached (24 h cache), on the same opt-out controls as `doberman update`. • Adds `Password` row to `doberman doctor` output, showing OK when a password factor is enrolled or a non-critical WARN with a `doberman password set` hint when not. • Adds `Dash extra` and `TUI extra` rows to `doberman doctor`, reporting whether `starlette`/`textual` are installed and printing `pip install 'doberman[dash]'`/`[tui]` hints when absent. • Adds `--dry-run` flag to `install-hooks` that previews the exact SessionStart command the installer writes, derived from the same `DASHBOARD_COMMAND` constant as the write path. • Adds `--json` flag to `tune` for compact JSON output (separators=(',', ':')) matching the machine-readable contract documented in `docs/CLI.md`. • Adds a **Copy details** action to each pending approval card in the dashboard, copying the redacted fields as formatted JSON. • Dashboard stats strip now triggers an immediate trailing-debounced 150 ms refresh when a decision lands in the live feed, with the 5 s interval retained as a fallback. • Dashboard header now renders the real Doberman mark as an embedded PNG data URI instead of the placeholder 'D', keeping `doberman dash` a single self-contained page. • Expands `doberman decision-log-prune` eligibility to any AUTH row with a recorded outcome (approval method, denied, blocked, error, executed), not only the original three literal values. • Changelog fragments now use per-PR files at `changelog.d/.md`, compiled by release tooling to eliminate merge conflicts on parallel pull requests.

Doberman-Core v0.18.4

Thu, 27 Aug 2026 05:57:08 GMT

Doberman-Core v0.18.4 adds opt-out telemetry, `demo --quiet` CI mode, global uninstall, doctor hook-path checks, and approval memory. • Adds `doberman demo --quiet` flag to suppress banners, narration, and hints — keeping only the summary line/table and exit code — so `demo` can run as a CI smoke test without polluting build logs. • Adds `doberman uninstall --global` to perform a device-wide removal of Claude Code and Codex hooks, project state, possession factors, the fingerprint key, and device state before removing the package via pip or pipx; `--yes` skips the typed `DOBERMAN` confirmation, `--dry-run` changes nothing, and `--keep-package` preserves the package. • Adds `~/.doberman/excluded_projects.json` device-wide exclusion list written by `uninstall` when global hooks are present, giving excluded projects a true no-op; run `doberman install-hooks` in a project to clear the exclusion. • `doberman status` now reports whether the current project is in the device-wide exclusion list. • Adds a new critical `Hook command` check to `doberman doctor` that fails and names a fix when hooks reference a `doberman` binary not on PATH — instructs user to restore the binary or run `doberman uninstall-hooks`. • Adds `doberman approvals status|clear|ttl` subcommands to expose bounded human controls over the new five-minute exact-action approval memory (HMAC-keyed, never downgrading destructive/critical/excluded/tainted-session actions). • Introduces a five-minute approval memory: a repeat of an exact previously approved action re-prompts at a one-click `soft_confirm` instead of the full ladder; soft confirms never chain. • Telemetry is now on by default (opt-out): anonymous usage counts for the same five allowlisted events are sent unless disabled via `doberman telemetry off`, `DO_NOT_TRACK`, `DOBERMAN_TELEMETRY=0`, or the `CI` environment variable; `doberman setup` prompts with a default of Yes, and the first CLI command prints a one-line notice to stderr before anything is sent.

Doberman-Core v0.18.2

Wed, 26 Aug 2026 07:02:29 GMT

Doberman-Core v0.18.2 adds opt-in CLI telemetry controls and a self-hardening secret rule that fails closed on invariant violations. • Adds `doberman telemetry on|off|status` subcommand for opt-in anonymous CLI telemetry — off by default, limited to allowlisted counts and command names, never on the per-tool hook or proxy hot path. • Secret detector now verifies its own invariants at import and degrades to a fail-closed `AUTH` verdict if ever broken, preventing both silent secret leakage and tool mediation being bricked.

Doberman-Core v0.18.0

Sat, 15 Aug 2026 07:42:42 GMT

Doberman-Core v0.18.0 adds RAND-aligned guardrails, new CLI subcommands, a WebhookAuditSink, and a labeled detection corpus. • Adds `doberman 2fa reset-lockout` subcommand to reset TOTP lockout state. • Adds `doberman taint clear` subcommand to clear taint records. • Adds `WebhookAuditSink` for routing audit events to a webhook endpoint. • Introduces RAND-aligned guardrail rehaul including a session correlator, opt-in least-privilege default role, subjective-memory governance, and an egress task-match leg. • Ships a labeled detection corpus with per-category FPR/TPR metrics for guardrail tuning.

Doberman-Core v0.17.1

Fri, 07 Aug 2026 22:15:38 GMT

Doberman-Core v0.17.1 adds `--json`/`--jsonl` output to read-only commands, surfaces auth deadlines, and renames `dashboard` to `session-summary`. • Adds `--json` and `--jsonl` flags to `scan`, `doctor`, `policy-history`, and `log` commands, emitting machine-readable output with an explicit allowlist of already-redacted columns so future schema additions cannot leak into streams by default. • Renames `doberman dashboard` to `doberman session-summary`; the old name is retained as a hidden permanent alias so existing `SessionStart` hooks continue to work. • `doberman status` now surfaces auth challenges auto-denied in the last 24 hours. • Adds `docs/CLI.md` and `docs/REASON_CODES.md`, cataloguing all 51 `ReasonCode` values and the condition that fires each one. • Every AUTH channel now displays its auto-deny deadline in the TTY prompt, GUI dialog, and dashboard card expiry.