Home / Articles / The sidecar repository / Versions / v1.1.0
The sidecar repository: what changed in v1.1.0
From v1.0.0 (2026-10-22, 08e700b32) to v1.1.0 (2026-10-27, db67c5ce1), paragraph by paragraph.
0 paragraphs added, 0 removed, 3 changed in place, 62 unchanged. About 0 words added and 161 removed. Insertions are marked like this, deletions like this; unchanged runs are folded to one line; figures appear as their file names.
2 unchanged paragraphs
!shot zq-flow.webp | images/ | The sidecar,sidecar end to end:end, from the agent pushes aagent's release push to the site's repository; its CI runs the tests and signs the result; the sidecar reads the commit, checks the paths against the policy, compares the workflow and tests with approved hashes, verifies the signed result, runs its own private checks, asks the owner when something in the gates changed, and deploys the site.deployment. | concept
24 unchanged paragraphs, under In short {#in-short}, Why a second repository {#why}, What it holds {#holds}…
!shot zq-trust.webp | images/ | When the sidecar trusts a check and when it runs it again:again, ifdepending the workflow and every test file matchon the lock and the attestation is valid for the commit, the result is trusted and nothing is re-run; if anything in the gates differs, the owner decides, and the tests run again in the sidecar, without secrets.attestation. | comparison
5 unchanged paragraphs, under Assume total compromise {#compromise}
!shot zq-compromise.webp | images/ | What a fully compromised agent can try, and what the sidecar does:does removeabout itseach hooks, nothing relies on them; rewrite the workflow or the tests, the lock differs and the owner decides; fake a status, ignored; forge a signed result, it fails verification; add a workflow to steal secrets, the site's repository holds none; bring back an old workflow, the lock differs; rewrite history, the sidecar deploys only from the last release; ring the doorbell, it reads the state itself; leak in content, the private lists catch it.attempt. | comparison
31 unchanged paragraphs, under What remains {#residual}, The cost {#cost}, The steps {#next}…