Skip to content

Releases: MailGuardianReddit/autoenforcerreddit

AutoEnforcer Extension v0.1.77 STABLE

Choose a tag to compare

@MailGuardianReddit MailGuardianReddit released this 02 Jun 16:31

AutoEnforcer browser extension v0.1.75.

Important: Rule Studio URL now required

This latest extension release requires using the Rule Studio URL.
The extension no longer reads/writes the mods-only wiki page — point it at
your subreddit's Rule Studio instead. More info: New update on the way: no more wiki read/writes.

Be Sure to have updated to the latest Version 0.0.58 of AutoEnforcer!

Install: unzip and load via chrome://extensions -> Developer Mode -> Load unpacked.

Most Browsers will automatically flag the zip as a virus because of how its packaged, it's a false positive.

AutoEnforcer Extension v0.1.76 STABLE

Choose a tag to compare

@MailGuardianReddit MailGuardianReddit released this 02 Jun 16:27

AutoEnforcer browser extension v0.1.76.

Install: unzip and load via chrome://extensions -> Developer Mode -> Load unpacked.

Integrity

Some browsers / AV tools flag unsigned extension zips as suspicious. Verify
the download against the published SHA256 before loading:

f4737754fa5c893f36a77705165f31fc272def07f2ae03535632a10a33e8a253  autoenforcer-extension-v0.1.76.zip

PowerShell: Get-FileHash autoenforcer-extension-v0.1.76.zip -Algorithm SHA256
macOS / Linux: shasum -a 256 autoenforcer-extension-v0.1.76.zip

The full SHA256SUMS-ext-v0.1.76.txt is also attached to this release.

Provenance (Sigstore keyless signature)

A GitHub Actions workflow (.github/workflows/sign-release.yml) signs the
zip with cosign using GitHub OIDC and attaches .sig + .pem artifacts
shortly after this release is published. Verify with:

cosign verify-blob \
  --certificate autoenforcer-extension-v0.1.76.zip.pem \
  --signature   autoenforcer-extension-v0.1.76.zip.sig \
  --certificate-identity-regexp 'https://github\.com/.+/AutoEnforcer/\.github/workflows/sign-release\.yml@.+' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  autoenforcer-extension-v0.1.76.zip

The certificate is short-lived and bound to the signing workflow; a Rekor
transparency-log entry is created automatically.

AutoEnforcer Extension v0.1.75 STABLE

Choose a tag to compare

@MailGuardianReddit MailGuardianReddit released this 29 May 06:13

v0.1.75 Updates
-Fixed CSP Errors

AutoEnforcer browser extension v0.1.75.

Install: unzip and load via chrome://extensions -> Developer Mode -> Load unpacked.

Integrity

Some browsers / AV tools flag unsigned extension zips as suspicious. Verify
the download against the published SHA256 before loading:

d281c20bbbccf580ada5a3b03c6ec5735ffa6a563614ce2d5daf71ea4849d085  autoenforcer-extension-v0.1.75.zip

PowerShell: Get-FileHash autoenforcer-extension-v0.1.75.zip -Algorithm SHA256
macOS / Linux: shasum -a 256 autoenforcer-extension-v0.1.75.zip

The full SHA256SUMS-ext-v0.1.75.txt is also attached to this release.

Provenance (Sigstore keyless signature)

A GitHub Actions workflow (.github/workflows/sign-release.yml) signs the
zip with cosign using GitHub OIDC and attaches .sig + .pem artifacts
shortly after this release is published. Verify with:

cosign verify-blob \
  --certificate autoenforcer-extension-v0.1.75.zip.pem \
  --signature   autoenforcer-extension-v0.1.75.zip.sig \
  --certificate-identity-regexp 'https://github\.com/.+/AutoEnforcer/\.github/workflows/sign-release\.yml@.+' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  autoenforcer-extension-v0.1.75.zip

The certificate is short-lived and bound to the signing workflow; a Rekor
transparency-log entry is created automatically.

AutoEnforcer Extension v0.1.74 STABLE

Choose a tag to compare

@MailGuardianReddit MailGuardianReddit released this 29 May 04:02

AutoEnforcer browser extension v0.1.74.

Install: unzip and load via chrome://extensions -> Developer Mode -> Load unpacked.

Integrity

Some browsers / AV tools flag unsigned extension zips as suspicious. Verify
the download against the published SHA256 before loading:

1e12453d6173b0abae7384b13cd5ad52b02fe8de286d4b2d27af4ae8d73861a2  autoenforcer-extension-v0.1.74.zip

PowerShell: Get-FileHash autoenforcer-extension-v0.1.74.zip -Algorithm SHA256
macOS / Linux: shasum -a 256 autoenforcer-extension-v0.1.74.zip

The full SHA256SUMS-ext-v0.1.74.txt is also attached to this release.

Provenance (Sigstore keyless signature)

A GitHub Actions workflow (.github/workflows/sign-release.yml) signs the
zip with cosign using GitHub OIDC and attaches .sig + .pem artifacts
shortly after this release is published. Verify with:

cosign verify-blob \
  --certificate autoenforcer-extension-v0.1.74.zip.pem \
  --signature   autoenforcer-extension-v0.1.74.zip.sig \
  --certificate-identity-regexp 'https://github\.com/.+/AutoEnforcer/\.github/workflows/sign-release\.yml@.+' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  autoenforcer-extension-v0.1.74.zip

The certificate is short-lived and bound to the signing workflow; a Rekor
transparency-log entry is created automatically.

AutoEnforcer Extension v0.1.73 STABLE

Choose a tag to compare

@MailGuardianReddit MailGuardianReddit released this 29 May 01:04

AutoEnforcer browser extension v0.1.73.

Install: unzip and load via chrome://extensions -> Developer Mode -> Load unpacked.

Integrity

Some browsers / AV tools flag unsigned extension zips as suspicious. Verify
the download against the published SHA256 before loading:

735d80eccb86eaa448dec0cedb1f97fc372e3e7f44757076b0e8c02245a57028  autoenforcer-extension-v0.1.73.zip

PowerShell: Get-FileHash autoenforcer-extension-v0.1.73.zip -Algorithm SHA256
macOS / Linux: shasum -a 256 autoenforcer-extension-v0.1.73.zip

The full SHA256SUMS-ext-v0.1.73.txt is also attached to this release.

Provenance (Sigstore keyless signature)

A GitHub Actions workflow (.github/workflows/sign-release.yml) signs the
zip with cosign using GitHub OIDC and attaches .sig + .pem artifacts
shortly after this release is published. Verify with:

cosign verify-blob \
  --certificate autoenforcer-extension-v0.1.73.zip.pem \
  --signature   autoenforcer-extension-v0.1.73.zip.sig \
  --certificate-identity-regexp 'https://github\.com/.+/AutoEnforcer/\.github/workflows/sign-release\.yml@.+' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  autoenforcer-extension-v0.1.73.zip

The certificate is short-lived and bound to the signing workflow; a Rekor
transparency-log entry is created automatically.

AutoEnforcer Extension v0.1.72 STABLE

Choose a tag to compare

@MailGuardianReddit MailGuardianReddit released this 29 May 00:32

AutoEnforcer browser extension v0.1.72.

Install: unzip and load via chrome://extensions -> Developer Mode -> Load unpacked.

Integrity

Some browsers / AV tools flag unsigned extension zips as suspicious. Verify
the download against the published SHA256 before loading:

9b388917991ace0c5cedef3f415f7fb3427868842d0484e1f548f2a2dc734820  autoenforcer-extension-v0.1.72.zip

PowerShell: Get-FileHash autoenforcer-extension-v0.1.72.zip -Algorithm SHA256
macOS / Linux: shasum -a 256 autoenforcer-extension-v0.1.72.zip

The full SHA256SUMS-ext-v0.1.72.txt is also attached to this release.

Provenance (Sigstore keyless signature)

A GitHub Actions workflow (.github/workflows/sign-release.yml) signs the
zip with cosign using GitHub OIDC and attaches .sig + .pem artifacts
shortly after this release is published. Verify with:

cosign verify-blob \
  --certificate autoenforcer-extension-v0.1.72.zip.pem \
  --signature   autoenforcer-extension-v0.1.72.zip.sig \
  --certificate-identity-regexp 'https://github\.com/.+/AutoEnforcer/\.github/workflows/sign-release\.yml@.+' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  autoenforcer-extension-v0.1.72.zip

The certificate is short-lived and bound to the signing workflow; a Rekor
transparency-log entry is created automatically.

AutoEnforcer Extension v0.1.71 STABLE

Choose a tag to compare

@MailGuardianReddit MailGuardianReddit released this 29 May 00:26

AutoEnforcer browser extension v0.1.71.

Install: unzip and load via chrome://extensions -> Developer Mode -> Load unpacked.

Integrity

Some browsers / AV tools flag unsigned extension zips as suspicious. Verify
the download against the published SHA256 before loading:

d96901617861f6829fe136ad7341a410da10ea563319fbdf213e5d1b6ef46c5a  autoenforcer-extension-v0.1.71.zip

PowerShell: Get-FileHash autoenforcer-extension-v0.1.71.zip -Algorithm SHA256
macOS / Linux: shasum -a 256 autoenforcer-extension-v0.1.71.zip

The full SHA256SUMS-ext-v0.1.71.txt is also attached to this release.

Provenance (Sigstore keyless signature)

A GitHub Actions workflow (.github/workflows/sign-release.yml) signs the
zip with cosign using GitHub OIDC and attaches .sig + .pem artifacts
shortly after this release is published. Verify with:

cosign verify-blob \
  --certificate autoenforcer-extension-v0.1.71.zip.pem \
  --signature   autoenforcer-extension-v0.1.71.zip.sig \
  --certificate-identity-regexp 'https://github\.com/.+/AutoEnforcer/\.github/workflows/sign-release\.yml@.+' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  autoenforcer-extension-v0.1.71.zip

The certificate is short-lived and bound to the signing workflow; a Rekor
transparency-log entry is created automatically.

Full Changelog: ext-v0.1.42...ext-v0.1.71

AutoEnforcer Companion 0.1.0 (Pre-release)

Choose a tag to compare

AutoEnforcer Companion - unofficial pre-release sideload build.

The official Chrome Web Store listing has been submitted and is pending review. In the meantime, side-load this zip directly.

SHA256: f5ebad627d38fc93cf1d2109afc810f831ab6e9689f0cd26a4c47604d91102ff

What's new in this build

  • Debug logging toggle in the popup. Off by default. When on, the extension emits structured console.debug([AE ...], { ... }) entries from the dossier/diagnostics/snapshot fetch path. View in DevTools console (Service Worker context for background, page context for content scripts).

Install

  1. Download AutoEnforcerCompanion-0.1.0.zip from this release.
  2. Extract the zip to a folder you will keep (Chrome reads the files from disk on every launch - do not delete the folder).
  3. Open chrome://extensions
  4. Toggle Developer Mode on (top right).
  5. Click Load unpacked and select the extracted folder.
  6. Pin the AutoEnforcer Companion icon, click it, and add your subreddit + decryption key from the AutoEnforcer Devvit app.

Verify integrity

PowerShell:
Get-FileHash AutoEnforcerCompanion-0.1.0.zip -Algorithm SHA256

Bash:
shasum -a 256 AutoEnforcerCompanion-0.1.0.zip

Compare against the SHA256 above.

What's inside

  • Manifest V3, reddit.com hosts only.
  • No remote code, no telemetry, no third-party network.
  • Permissions: storage, activeTab, scripting, host_permissions for reddit.com only.
  • Source: /extension in this repo. Build with npm install && npm run build.

See the README and PRIVACY_POLICY for the full security posture.