Home / Articles / The rules of the game / Versions / v1.1.0
The rules of the game: what changed in v1.1.0
From v1.0.0 (2026-10-22, 08e700b32) to v1.1.0 (2026-10-27, db67c5ce1), paragraph by paragraph.
0 paragraphs added, 0 removed, 4 changed in place, 55 unchanged. About 0 words added and 134 removed. Insertions are marked like this, deletions like this; unchanged runs are folded to one line; figures appear as their file names.
2 unchanged paragraphs
!shot rg-zones.webp | images/ | The rules of the game in five zones: content, free; the gates, a second key; identity, the owner only; vendored code, from upstream only;code and the rules themselves, never by an agent.themselves. | concept
12 unchanged paragraphs, under In short {#in-short}, The hole {#hole}
!shot rg-commits.webp | images/ | Commits that touched the checks, by agent, from 11 to 22 October 2026: the writer 17 of 154, unlabelled commits 25 of 35, the UX agent 9 of 18, the wire agent 7 of 10, the dev agent 2 of 2, the newsletter agent 1 of 2 and the vault agent 1 of 1; 62 of 227 in all. | comparison
10 unchanged paragraphs, under The policy {#policy}, What GitHub offers today {#github}
!shot rg-github.webp | images/ | What GitHub offers a public repository today,today without a new tool: branch rulesetstool, and protection,what codeneeds owners and required reviewers on deployments are available; path rules for pushes are for private and internal repositories ona paid plans;plan requiredor workflowsan from rulesets are organisation-level and pull-request only; and a token without permission to change workflow files is available, set by the owner.organisation. | comparison
9 unchanged paragraphs, under The least we can do {#minimal}
!shot rg-layers.webp | images/ | The controls,controls in order, and what it takes to get round each:each, from the policy,policy nothing; a hook in the agent's harness, one change; a guard job in CI, a second deliberate change; a token that cannot change workflows, out of the agent's reach; andto the sidecar repository, out of reach even when the agent is fully compromised.repository. | concept
22 unchanged paragraphs, under Where it can still break {#gaps}, Second key, not never {#second-key}, What this does not claim {#limits}…