Version 1.0.0
In preparation — not yet distributedThe launch version number, currently in preparation: there are no packaged installers or signed binaries yet, so nothing is distributed. This is what the first build will contain, shaped by a full GA readiness audit.
Security
- Required URL assertions can no longer falsely pass: a relative expectation resolves against the origin recorded for the step instead of falling back to a substring match.
- The controlled browser runs with its Chromium sandbox enabled. Sandbox-defeating launch arguments are refused, running as root is refused, and a sandbox that cannot start fails closed.
- A second application instance can no longer corrupt the first one’s state: the data root is held under an OS-level exclusive lock, and each worker carries a durable ownership lease.
- A cloned repository can no longer redirect WeftKit-owned directories through a symlink or reparse point into a directory outside the project.
- Suites are validated against a closed schema when saved and again at run start. Credential-shaped literals are refused under any key; fields recorded as credentials must use a vault reference.
- A click on an icon or label inside a destructive control now keeps that control’s identity — and its required approval checkpoint.
Reliability
- Configured replay retries actually run. Only failures that never reached the page are retried; a mutating action that may already have landed is flagged for reconciliation instead of repeated.
- A cancelled run can no longer finalize as Passed: cancellation is rechecked after every step and immediately before the terminal verdict.
- Visible-text and title assertions wait to a deterministic deadline instead of resolving immediately, and visible-text accepts any visible match.
Features
- An always-visible emergency stop with a global shortcut, reachable from any view and never disabled by the general busy flag.
- Assertion evidence: every required assertion records its normalized inputs and comparison verdict in the run report, so a reported pass can be re-checked without replaying the run.
- Governance and legal surfaces: a license, security policy, contributing guide, generated notices, this changelog, and pinned toolchains.