What's new in each zn-gate release: new features, fixes and security notices, and how to update.
zn-gate 1.12.0 adds zn-gate reach, a read-only report of what your coding agents can reach, builds releases to SLSA Build Level 3, signs tags with gitsign and fixes GHSA-rccq-h3xc-j9qj in the agent hooks. How to update.
Galvanize 2 is our new prompt-injection detector, fine-tuned from Horizon Labs' open small model. On our held-out test set it catches 83.4% of attacks with a 0.81% false positive rate, and it stops flagging long legitimate documents. Here are the numbers, the weak spots and how we measured.
1.4.0 sent tool output to our API without redaction when an API key was set. 1.4.1 removes that path, makes the cloud opt-in and redacted, and we deleted the text our API had stored. Here is exactly what happened and what to do.
We are open-sourcing Galvanize-60M on Hugging Face: a small prompt injection classifier that runs on CPU, built for the tool loop of AI agents. Read the October 2026 update note before relying on the numbers in this post.