Changelog - 2026-10-18

VULCAN 0.2.0-9: the remote-host guard closes six gaps

Type: Security, Enhancement

In one line. BANA fed the guard 208 commands; six that should ask passed, and one that should pass asked. All seven are fixed and each has a test.

What changed

• curl, wget, http, https and xh ask when the URL names a readOnly host. A URL on the open internet still passes.
• A command piped or fed into a shell asks. | sh, | bash, bash <<< and sh -s cannot be read.
• The remote command of an ssh is read. ssh lab1 "ssh prod1 id" asks unless prod1 is trusted.
• A command after do, then, else, elif, if, while, until, ! or { is read. A for h in ...; do ssh $h id; done no longer hid its host (the keyword was taken for the program).
• docker -H ssh://lab1 ps passes when lab1 is trusted. -H/--host are parsed; --context still asks.
• The prompt for a readOnly host names kubectl get|describe|logs|top. Those reads were always allowed; the guide and the prompt now say so.

Who is affected

• A project with remoteHosts. Upgrade and vulcan sync. A readOnly entry matches a whole name: list prod1.* for prod1.corp.example. git config core.sshCommand asks by design.
• Everyone else. No action needed.