brig docs

Reference

Changelog

On this page

Every stable Brig release, newest first, with its release notes. The newest is v0.5.2, released 2026-11-06.

Each release lists its breaking changes first. Read that section before you upgrade across a minor release. Stability has the version rules. Migration lists every retired spelling and its replacement. To upgrade, repeat the install method you used: see Install.

Release candidates and Homebrew channel builds are not listed. Install describes the channels. The binaries, checksums and signatures of every build are on GitHub.

v0.5.2 #

Released 2026-11-06. Release page · Compare with v0.5.1.

Breaking changes #

  • profile: Rename the herd profile to herdr (3f61dbe) the herd profile is herdr. Remove herd@<label> sandboxes before upgrading or with brig rm --all after; attach policies to herdr again; update the ssh ProxyCommand to herdr-sshd.

Features #

  • policy: Add the gcp preset with a list of services (eac9a1d) #578
  • broker: Route a gcp route to each service's host (5f8f969) #578
  • injector: Point gcloud at each service of a gcp route (b6b904e) #578
  • gcpcred: Read a pointer at the host's gcloud login (e6bcfc9) #578
  • gcpcred: Mint a Google token with the host's gcloud (0594d5b) #578
  • gcpcred: Cache minted tokens per sandbox and route (582ad1c) #578
  • broker: Inject a minted token on a gcp route (a85bd6d) #578
  • broker: Mint the gcp route's token in brig-broker (34acdb5) #578
  • secret: Import a pointer at the host's gcloud login (4f732cf) #578

Documentation #

  • Describe the gcp route (2e2af9e) #578
  • Describe gcloud pointers for the gcp route (2cea62d) #578
  • migration: Name v0.5.2 as the release that renames herd (1c4962a)

Contributors #

v0.5.1 #

Released 2026-11-03. Release page · Compare with v0.5.0.

Features #

  • wrap: Warn when the project's .git changes (15398a0) #413
  • policy: Add the aws route preset (7889b34) #302 #524
  • awscred: Fetch AWS credentials through the aws CLI (4272268) #302 #524
  • broker: Vend credentials on a route that cannot inject (e96685d) #302
  • run: Reach the routes that vend on the link-local address (96f1b1e) #302 #524
  • broker: Check and serve the aws route in brig-broker (0db4137) #302 #524
  • secret: Import an AWS profile and role as a pointer (fb4575b) #302 #524
  • policy: Add inject.tls to the route schema (925565e)
  • policy: Validate inject.tls on a route (9bfdfc8)
  • policy: Print a tls row in policy check (dc64d6d)
  • wrap: Keep a route's certificate secrets on the host (01f57ef)
  • wrap: Refuse inject.tls until the broker serves it (18a06fe)
  • secret: Add tlspem checks for certificate secrets (07a5e5f)
  • secret: Check a certificate or CA bundle with --type (9e63487)
  • secret: Name the certificates a client certificate leaves out (02b6159)
  • broker: Build a transport per sandbox and route (0d4dc0e)
  • broker: Present a route's client certificate upstream (f02d1c0)
  • wrap: Warn of a client certificate expiring within 3 days (9d9e4e9)
  • doctor: Check what a Linux run needs from the host (1251fd1) #529
  • wrap: Set BRIG_PROJECT to the guest path of the project (e26d9fb)

Fixes #

  • verify: Point Linux at Brig's installer for cosign (1810486) #540
  • install: Say to run this install again when the runtime stops (6607399)
  • termfilter: End an open sequence at a newline (1cf4644) #534
  • install: Keep the bundle's broker and pins.env in step with brig (775ab6d)
  • runtime: Refuse the runc shim binary by name (94498cf) #468
  • wrap: Watch .git/commondir (025b7d1) #413
  • wrap: Quote guest names in the .git warning (0bb2af5) #413
  • wrap: Read .git dirs only up to the bound (c239071) #413
  • wrap: Watch a hooksPath inside the project (24d7536) #413
  • wrap: Keep the .git look on brig ls (d6c3e53) #413
  • wrap: Compare .git before rm --all forgets it (e5ffc77) #413
  • wrap: Look on past a hooksPath that fails (78b656f) #413
  • wrap: Cap the .git look at 32 levels (9413fe4) #413
  • broker: Challenge a refused token on basic auth (c2bb98f)
  • doctor: Report each host prerequisite once, with the right fix (b909742) #529
  • doctor: Tell the bundle's nerdctl by its tree (a9f2f1c) #529
  • doctor: Fit the host lines to Ubuntu and to a bypassed bundle (6202eb0) #529
  • doctor: Look for the monitor a run boots on (5c4c392) #529
  • doctor: Look for CNI plugins in nerdctl's default directories (b8cd704) #529
  • doctor: Ask the kernel which AppArmor profiles are loaded (8c6b5d4) #529
  • doctor: Ask whether a device reaches a rootless run (b709832) #529
  • install: Pin the runtime bundle at rc21 (5cb77b7)
  • release: Keep a breaking-change footer whole in the notes (06497c0)

Documentation #

  • troubleshooting: Say when the launcher warning prints (6cf167f) #531
  • Name the runc shim binaries in refusal lists (c806d22) #468
  • security: Name the .git files the host runs (0a23688) #413
  • security: Two more limits of the .git look (9161580) #413
  • security: Correct what the .git look bounds (96b1aa9) #413
  • security: Name three more hooksPath limits (269775b) #413
  • broker: Document the Basic challenge on a refused token (0dee941)
  • Describe the aws route (b0883d2) #302 #524
  • policies: Describe inject.tls on a route (8c35ca7)
  • broker: Describe the client certificate path (85c6861)
  • broker: Say the client key never leaves the broker (577cea1)
  • secrets: Document --type tls and ca (45b0c2e)
  • cli: Show --type on brig secret create and update (ec578a5)
  • claims: Tie the client certificate claims to tests (a6700d8)
  • runtime: Record the bundle layout InBundleTree relies on (6f1c69c) #529

Contributors #

New contributors #

v0.5.0 #

Released 2026-10-31. Release page · Compare with v0.4.1.

Breaking changes #

  • cli: Remove the spellings v0.5.0 retires (23e2dd0) brig profiles, agents, profile, template, import, export, policies, create, env and reset, the subcommands agent list|save|load, policy list and secret list|rm, the run-line flags -t, -m, -n, --name, -w and --workspace, and -q after the verb are removed.
  • profile: Remove the keys v0.5.0 retires (168e543) the profile keys forward:, statePaths:, shell: and gui: are removed, and a profile that still has one does not parse. BRIG_TEMPLATE_DIR is removed, and brig refuses to start while it is set and BRIG_PROFILE_DIR is not.

Features #

  • policy: Add the v1alpha1 policy envelope (35a283c) #302
  • policy: Add brokered routes and presets (41eb967) #302
  • secret: Add the broker and renewer seams (20418b8) #302
  • renew: Refresh the Claude OAuth pair (ad48e99) #302 #275
  • broker: Add the route broker (522d26d) #302
  • broker: Add the brig-broker injector (6a549e8) #302
  • creds: Deliver routes to the guest (36c4721) #302
  • broker: Refuse tokens outside their carrier (0c500b5) #302
  • renew: Journal each refresh in the store (4c6e0e3) #302
  • cli: Show the broker in brig info (c9a046f) #302
  • runtime: Route brig.internal to microVMs (8f9ac18) #302 #265
  • policy: Add a route mode registry (8e175a3) #302
  • envelope: Name the rootfs type and the Linux hypervisor (a2c427d) #30
  • profile: Add the herd profile (278b890) #335
  • runtime: Boot a Linux generic boot on hvi (0cbe087)
  • runtime: Add BRIG_ROOTFS_MODE for an overlay root on two disks (3377c07)
  • runtime: Boot overlay roots by default (92c0244)
  • doctor: Say if an overlay root is available (b2cdf86)

Fixes #

  • policy: Allow the betas Claude Code sends (a44c4be) #302
  • doctor: Check the image against the host trust policy (b716df5) #283
  • doctor: Read the per-agent verify mode the way a run does (4fda2a7) #283
  • sh: Describe the argv form in brig sh -h and drop its flag notice (7e61c48)
  • runtime: Wait for a gateway to stop listening (9704236)
  • verify: Stop suggesting brew for cosign on Linux (bb4f8ea) #540
  • verify: Test both cosign hints on any host, and match the docs (89b7f44) #540
  • runtime: Consume a pending terminal EOF before the nerdctl handover (2a91d24) #460
  • cask: Render the completion stanzas as bash, zsh, fish (29402c9)
  • runtime: Boot the urunc monitor BRIG_HYPERVISOR names on Linux (269dc80)
  • install: Pin the runtime bundle at rc19 (1d90a40)
  • wrap: Say what a guest said when it does not answer (c4d1b92) #533 #534
  • wrap: Read a dead guest's log per stream and probe it once (edd047e) #533 #534
  • wrap: Stop the guest log tail at a kernel panic (a116534) #534
  • wrap: Show the monitor's error beside the guest's console (3f41228) #534
  • wrap: Print the guest log as a terminal would show it (b0d9f6c) #534
  • runtime: Warn when the bundle's brig runs without its launcher (daa0774) #531 #529
  • runtime: Warn about the launcher before the runtime is asked (8059e00) #531

Refactors #

  • runtime: Keep the launcher sentence in one place (eef5311) #531

Documentation #

  • broker: Document the injector (c0f561c) #302
  • broker: Describe routes on microVMs (37624d1) #302 #265
  • broker: Add a figure of one routed request (64ec8b1) #302
  • say who writes the exec argv line and where it lands (f006543)
  • non-goals: Reopen a rules language for policy (04c9a38)
  • herd: Narrow the exec exemption and fail closed on an empty key (4fed3cc)
  • Mark the v0.5.0 spellings removed (fc419f4)
  • runtimes: Name the urunc branch the bundle builds again (f1b2b1a)
  • Describe the overlay root as the default (3288c28)
  • troubleshooting: Give the recovery that avoids the bridge collision (d61c89a) #541

Contributors #

New contributors #

v0.4.1 #

Released 2026-10-16. Release page · Compare with v0.4.0.

Fixes #

  • install: Pin the runtime bundle at rc17 (823f9e5)

Documentation #

Contributors #

v0.4.0 #

Released 2026-10-06. Release page · Compare with v0.3.0.

Breaking changes #

  • wrap: isolate new sandbox networks by default (39f4047) #369
  • runtime: refuse a containerd shim that shares the host kernel (09ed158) BRIG_CONTAINERD_RUNTIME no longer accepts a shim that shares the host kernel. brig refuses a boot or a join while the variable names runc or crun, by name or by path, or a shim name that containerd resolves to the runc shim, such as io.containerd.runc.v2. Unset the variable to use the default urunc shim, io.containerd.urunc.v2. A sandbox already running under one of them is found by name, not by its shim, so once the variable is unset the next brig run can join it rather than boot a microVM, and the ISOLATION row then names urunc. Stop such a sandbox with brig stop <ref> before that run. The run after the stop boots it again on urunc.
  • cli: Exit 7 when a runtime cannot enforce a planned property (7b5500e) #237 an egress policy refused on hull's vz or qemu backend, on nerdctl or docker, on hvi when the gateway probe finds no --egress-default, or on a hull backend brig holds no answer for, now exits 7 where v0.3.0 exits 1. So does brig network publish on a sandbox whose policy its backend cannot enforce, and brigd reports the same 7 in a response's code. A failed hvi gateway probe also exits 7. On a failed probe, v0.3.0 started the gateway with the rules anyway. The run booted with the rules on the gateway, or exited 1 when the gateway did not come up.
  • wrap: Pass brig sh's command words through as arguments (51043b1) #307 brig sh <ref> <words...>, and brig run on a kind: shell profile, pass each word to the guest command as one argument and no shell parses them. A script typed as one quoted word, or an assignment such as FOO=bar in front of the command, no longer runs. Run a script with brig sh <ref> -c '<script>', and set a variable with brig sh <ref> env FOO=bar <cmd>.
  • profile: Refuse an unquoted mode in a files: binding (b65ef46) #453 a profile whose files binding has an unquoted mode is refused. Quote it, for example "0644". An unquoted 644, which happened to give 0o644, is refused as well. A file that overrides a built-in profile is then ignored with a warning, and the built-in profile runs instead.

Features #

  • runtime: Answer egress enforcement through one capability contract (b05c01e) #237 #245
  • verify: Refuse a boot asset whose digest differs from the bundle (38e5c5c) #234 #168
  • verify: Check the runtime bundle's record (c3b3b10) #234
  • runtime: Spin while hull pulls an image (5501940) #306
  • wrap: print first-run notices as short blocks (29b274d)
  • wrap: print verification alerts as blocks (988ce36)
  • wrap: print run warnings as blocks (d0068ef)
  • brig: print command notices as blocks (555c3e6)
  • cli: Add brig plan to preview a run without decrypting secrets (141df7e) #240
  • sh: Run a script with brig sh -c (1b46340) #307
  • runtime: Enforce egress policies on nerdctl (784fd4e) #266
  • telemetry: Send brig's own events (6dcb23c) #428
  • profile: let a tmpfs volume mount at a fixed guest path (e5fb812)
  • wrap: mount a tmpfs with at: off the home share (9d555b4)
  • wrap: seed and migrate agent state inside the config dir (d22a8db)

Fixes #

  • runtime: Pass BRIG_BOOT_ASSETS_REF to hull assets pull (047d63e) #234
  • runtime: Say when the nerdctl adapter falls back to docker (ff2a6ae) #30
  • brigd: Return the docker fallback note with the warnings (7e969cb) #30
  • runtime: Refuse a boot with a policy when the gateway probe fails (29df3b1) #171 #237
  • runtime: Replace or stop a shared gateway no sandbox is on (fc9de73) #366
  • wrap: Name the posture a running sandbox has (616bc36) #368
  • wrap: Stop calling a kept policy a changed one on restart (d76be84) #368
  • runtime: Stop an isolated gateway left up by a failed release (4628834) #368
  • verify: Stop quoting cosign's deprecation warning as the reason (ac03cb5) #365
  • verify: Say when cosign timed out and kill its helpers too (7e4c2c5) #365
  • agent: Refuse to remove a profile its sandboxes still use (eb2c646) #367
  • runtime: Stop pointing refused isolated runs at the shared network (8c49500) #364
  • wrap: re-check hostmount sources before handing them to the runtime (20de0ce)
  • brigd: refuse a symlinked or hard-linked socket lock (2e4de3f)
  • verify: Fetch the boot bundle that verified (7b412f8) #234
  • install: Pin the Linux runtime bundle at v0.1.0-rc13 (82977fe) #234
  • notice: address review of the block layout (bde00d4)
  • runtime: recover networks with urunc's helper TAP (6f48092) #369
  • script: stop parsing a deprecation notice as profile JSON (96f897c)
  • wrap: mark a profile-chosen network without matching its wording (759ce7d) #433
  • rm: forget the session when rm finds the sandbox already gone (3f68a43) #432
  • cli: correct the help text and a retired spelling in an error (5c58571)
  • cli: answer --help and -h on the top-level verbs (309cf0b) #357
  • cli: answer --help on brig plan (8e9d2ff) #357
  • profile: keep claude-code's tmpfs off the shared guest home (ce4af86)
  • wrap: refuse to relocate a tmpfs a running sandbox has in home (30294e7)
  • wrap: migrate .claude.json only in a home brig prepared (b769d28)
  • wrap: write a hostmounted trust file in place (e1df7bd)
  • wrap: stop calling a credential in the workspace unused (dd3b6ba)
  • profile: refuse a tmpfs nested in another when either sets at: (99e15dd)
  • wrap: say when a .claude.json stays behind unmigrated (d2c9cf0)
  • cli: Retire the old spellings in v0.5.0 (f685ee9)

Refactors #

  • runtime: Resolve boot assets before the verify summary (9fcbd4b) #234
  • lay out every warning block in internal/notice (72a46cc)

Documentation #

  • runtime: Say which urunc reads the boot annotations (bcf4057) #325
  • Add AGENTS.md for coding agents working in the repository (9218fcb)
  • stability: State the compatibility policy and removal release (a39408d) #60
  • security: Say ISOLATION prints under --verbose and in brig info (3664606) #30
  • policies: Say info names the posture the sandbox runs with (d502731) #368
  • troubleshooting: Add the case where cosign does not answer (03f0910) #365
  • rm: Correct the exit code sandboxPresent's comment gives (1a5733c) #367
  • security: Say shared sandboxes reach each other on hvi (f8fe3dc) #364
  • show warnings in their block layout (8f21ff1)
  • security: record the Linux microVM measurements (1731cf5) #369
  • security: record the amd64 Linux reachability run (d872cb5) #434
  • readme: show Claude Code running in a sandbox (7b4739d)
  • readme: put prerequisites and expected output first (306e9ae)
  • security: correct telemetry counts and tighten the prose (6f7af08)
  • install: say what each method installs and fix stale facts (2b2df11)
  • cli: correct the reference against the code (f11cca6)
  • profiles: correct profile and secret pages against the specs (8993963)
  • troubleshooting: match quoted messages to the code (d83b9ee)
  • assets: add four diagrams for the docs pages (8897f0c)
  • security: state each limit once and lead with what you control (a8a8319)
  • cli: give each verb one shape and move cases into tables (6f6f8cb)
  • policies: open with an example policy and tabulate the postures (7d51895)
  • profiles: name each field heading after the field (dbb4491)
  • secrets: split login tasks from the store, compare run paths (2b62828)
  • troubleshooting: give every entry the same four parts (be0bb34)
  • tighten the first pages a new reader meets (d2b2e76)
  • contributing: tighten the contributor and maintainer pages (95fe9c8)
  • readme: shorten the README and link to brig.sh (a82606a)
  • document tmpfs at: and claude-code's move to /brig/claude (735f708)
  • security: state where the claude-code credential can reach disk (ab150a1)
  • bring comments and profiles.md in line with /brig/claude (fa81fd4)
  • security: Say hull filters terminal output (c405276) #463

Contributors #

New contributors #

v0.3.0 #

Released 2026-09-26. Release page · Compare with v0.2.0.

Highlights #

  • Linux support out of the box, including rootless #310 install.sh now installs the whole Linux runtime: nerdctl, containerd, the urunc shim, the monitors and the guest kernel, from the brig-standalone-linux bundle. In 0.2.0 you installed those yourself. Run it under sudo for a node-wide install, or as a normal user for a rootless one, which lands under $HOME with a containerd of your own and never asks for sudo. A rootless host needs one-time preparation by root (a subuid range, access to /dev/kvm and /dev/vhost-vsock, uidmap, and an AppArmor profile on Ubuntu 24.04 and later), and the installer reports what is missing. See Linux.

Breaking changes #

  • profile: remove hostCredential: and its run-path keychain read (edd8b8c) #190 #22 hostCredential: is removed from the profile schema. A profile file that carries it no longer parses. BRIG_ALLOW_EXPIRED, which only applied to that field, is removed.
  • rm: delete the guest home brig created on rm (bcb057a) #328 brig rm deletes the guest home brig created. For codex, cursor, gemini, grok, opencode and ubuntu this includes an in-guest login. Pass --home <dir> to keep a guest home across rm.
  • network: Keep the posture a sandbox was started with (7d6efa9) #340 A profile's network: now sets the posture of a new sandbox only. Changing it no longer moves a sandbox that already has a recorded posture, including across a stop and a later run. Pass --network, or remove the sandbox with brig rm, to apply the new value.
  • cli: Remove brig shell (590cf69) #338 brig shell is removed. Use brig sh.
  • profiles: Boot the agents on root, so a rootless install works (8bd991b) #310 claude-code, codex, gemini, grok and opencode now boot the -stock:root images and run as root in the guest. Their guest home moves from /home/<agent> to /root. A script, hook or setting in the guest that names the old home by its absolute path needs updating. cursor, claude-desktop and ubuntu are unchanged.

Features #

  • buildinfo: read the version and commit from the binary's build info (9eef136) #230
  • cli: report the build behind the binary in brig version (4fa37fb) #230
  • cli: add --json to brig version (be43eeb) #230
  • brigd: report the build in the version op (6c198ff) #230
  • cli: name the brig and brigd builds in doctor (07ec0c8) #230
  • secret: seal the value into a second keychain item, key in the first (179428f) #313 #189
  • cli: raise the secret read cap to 64 KiB (1842b90) #313
  • install: install the Linux runtime bundle (67c7cb2)
  • install: Pin the runtime bundle to v0.1.0-rc8 (1aea70c)
  • ci: Publish a main and an experimental Homebrew channel (96e9cc7)
  • network: Open a guest port on the host (7d3c349) #18. #312.

Fixes #

  • hostsrc: check every linked package for the keychain tool (c19b3c1) #190
  • secret: say when a profile has nothing to import (29b8eea) #178
  • cli: refuse a trailing word on the policy listing and version (9bce59f) #164 #145 #165
  • policy: find a session's policy under its slug, not the name typed (431d2c8) #172
  • wrap: deliver a credential file in pieces hull's exec can carry (cd7d5c1) #313
  • secret: let an import repair a damaged secret, and drop Sizer (c16e816) #313
  • secret: name a sealed line that is not base64, refuse an empty value (18a0036) #313
  • verify: phrase a refusal as one, rather than decorating a warning (b86c527) #167
  • verify: name the registry a refused third-party image is not under (fdce82a) #167
  • verify: separate a missing cosign from a stale BRIG_COSIGN_BIN (3886ae1) #167
  • verify: say what a boot-asset check could not do, and how to get past it (3843640) #167
  • verify: offer warn alone when a replaced policy refuses an image (5644311) #167
  • cli: drop the project-argument notice from brig run (1b27a67) #315
  • runtime: Read hull's version from the word shaped like one (461cde4)
  • doctor: check the boot assets where hull keeps them (e97ff40) #314
  • doctor: bound only doctor's assets question, and fix its advice (18ea386) #314
  • install: Stop on a missing signature, and install brig before cosign (83938f9)
  • install: Install the release's brig into the Linux runtime (d5bfe70)
  • wrap: Set HOME to the guest home on every boot and exec (b69947d)
  • ci: Stop stamping every channel build +dirty (02c7b15)
  • cask: Name a generator path that resolves in the repository (e74dd27)
  • ci: Push the channel cask with the bot App's token (f175881)
  • ci: Publish each channel build as its own release (324b8a2)
  • wrap: reach the project by handle, refusing a planted link (05c22a2)
  • wrap: report the project brig resolved, not the path typed (92757a3)
  • install: Pick only v-tagged releases as the newest (8489e08)
  • ci: Sign and notarize the channel builds (4ce5eee)
  • runtime: Keep the guest HOME out of the runtime's own environment (80e3797) #337
  • wrap: Delete the guest home a failed first boot created (1c64e78) #328
  • wrap: Name --home in the advice for a linked guest home (02792b7)
  • install: Tell a user install how to put its launcher first (77d44b1)
  • network: Record the posture at boot, in a file of its own (676dd0e) #340
  • cli: Refuse brig shell with a usage error naming brig sh (a0cefdc) #338
  • install: Pin the Linux runtime bundle at v0.1.0-rc9 (3e5ae98) #232
  • install: Pin the Linux runtime bundle at v0.1.0-rc10 (91b0c7b) #232

Security #

  • Project-mount symlink traversal gives access to host directories outside the guest home (GHSA-wp6x-29qx-fpr7, High) #332 A sandbox could replace a directory in its project with a symlink, and a later run naming a path through it exported the link's target read-write. Brig now refuses a project path that passes through a symlink below the first directory you can write, including a link you made yourself: name the real directory instead. Reported by Peyton Kennedy of Endor Labs (@p80n-sec).

Refactors #

  • secret: one security runner, and the feed bound on the runtime (cc927c8)

Documentation #

  • secret: describe the two-item layout in place of the size limit (4fda764)
  • migration: say the second word on brig run changed meaning (b5f5cb6) #315
  • migration: qualify what a project run prints about the mount (57496a3) #315
  • secrets: Say what the root guest leaves of the symlink guards (5195b3f)
  • Name the :root images and the /root guest home (a029c43)
  • runtime: Mark the monitor annotation as unconditional (110d546)
  • security: document the control on the project mount (c547a5a)
  • troubleshooting: Name the warning for a changed posture (9ce9cd4) #340
  • policies: Say an older release leaves the posture record stale (ae27ec1) #340
  • migration: List brig shell as removed (8836408) #338
  • comments: Name brig sh where comments still said brig shell (1d3de46) #338
  • migration: Put the removed spellings after the verbs notes (7bf5fbe) #338

Contributors #

v0.2.0 #

Released 2026-09-15. Release page · Compare with v0.1.0-rc18.

Breaking changes #

  • rm: say what rm removes, ask before --all, and add --dry-run (9ca17e2) #11 brig rm --all and brig reset without a terminal on stdin now refuse unless -y is passed. A script that ran either unattended needs brig rm --all -y.

Features #

  • install: Install hull and cosign, and refuse an Intel Mac (7c026ca)

Fixes #

  • release: Bring the cask description under the length brew enforces (63a16bd)
  • rm: name the sandbox in the --all preview and correct the docs (625771d) #11
  • rm: send the --dry-run workspace notice to stderr (e83fb13) #202
  • reset: refuse --all instead of reading past it (b83ba49) #202

Documentation #

  • Rewrite the README and add the missing doc pages (11ee3b7) #111, #47
  • Rewrite the docs around what the code does (4fefa93) #111, #47
  • Point the cross-references at sections that exist (383fe7d)
  • Correct what two accuracy passes found (871814e)
  • Refresh the brand marks to the pixel wordmark (12e8700)
  • Trim CONTRIBUTING to what affects a contribution (2a0c0c4)
  • Give every troubleshooting entry a confirm step and add three (01bfe67)
  • Split profiles.md into a user half and an author half (9606d5e)
  • Rewrite the README as a front door (17d80dc)
  • Reorder the install and quickstart pages by platform (8466a0a)
  • Tighten the sessions, runtimes, brigd and non-goals pages (075bfa0)
  • State the security boundary as three lists and trim the rest (c4b3a0d)
  • Correct the CLI reference and add an everyday commands section (c97f963)
  • Fix the credential pages against the code (7e715e6)
  • fix grammar and wording in security.md (c9ce39c)

Type a command, a flag or an error message.