What’s new on Windows

Naevik 1.0.45

Installed copies of Naevik update themselves: when the banner appears, click it and approve the administrator prompt. New installs: naevik.ai/download.

Getting started

• First-run setup. On the first launch a short wizard explains what Naevik does and lets you pick your project folders. Agents work in those folders freely and quietly (no event for each file they touch); everything you can see and change afterwards in the rules editor.
• The main window tells you when your rules file did not load.

Rules

• Drag rules to reorder them. Rules are checked from the top and the first match decides, so order matters: drag the grip at the start of a row to put a narrow block above a broad allow. With the keyboard, focus the grip and press Up or Down.
• Your own rule groups. Collect related rules under a name and switch the whole group on or off.
• Built-in packs open up. Expand a built-in pack, file or network, to switch single rules in it on or off.
• Wildcards. In file and process rules, * matches within one folder and ** matches any number of folders: C:\src\* covers what is directly inside C:\src, C:\src\** covers everything inside it. In the middle of a rule \**\ also matches no folder, so C:\src\**\.env covers C:\src\.env too. Test path follows the same matching as the driver.
• Limits when you save. A rule can use at most 4 wildcards (** counts as two) and about 255 characters. Saving a rule over a limit is refused with a message that names the rule.
• Starter rules. Git’s credential store under .config\git is now blocked along with .git-credentials. A rule for .npmrc (npm tokens) is included, switched off; turn it on in the rules editor if you keep tokens there.

Agents

• GitHub Copilot is recognised as an AI agent — the Copilot CLI (copilot.exe, standalone or the copy Visual Studio ships) and the Copilot agent runtime VS Code starts (copilot-runtime.exe). Copilot’s work is covered without putting all of VS Code under your rules.

Events

• Network events show the name an agent connected to next to the address (203.0.113.7:443 · api.example.com). For an international domain name, the event’s detail pane also shows it as written, in its own alphabet.
• The Denied filter shows every block in the chosen time window, not only the most recent events.
• Agent names stay attached to their events after Naevik restarts, and file paths no longer show a \??\ prefix.
• The tray’s Monitored list scrolls inside its box when many agents are running.

WSL2

• The Naevik Linux agent the app installs into a WSL2 distro uses the same wildcards (/home/me/src/** is everything inside the folder), and handles a few failure cases more safely. See WSL2 coverage.

Questions or problems? hello@naevik.ai