v0.3.0

Security-hardening release from a line-wide code review. Highlights: secure-by-default approver gate for high/critical operations (init seeds a starter rules.yaml), percent-encoded URL path segments, single-sourced version, governance persistence + CLI write-path tests. See CHANGELOG.md for the full list. BREAKING: fresh installs with no rules.yaml now deny high/critical writes until an approver is recorded.

K8s-AIops v0.2.1

Patch: config.yaml now honors the *_AIOPS_HOME env var; CLI writes are now audited + undo-recorded through the governance path (previously MCP-only). See CHANGELOG.

v0.2.0

v0.2.0

Security

• Encrypted credential store — secrets now stored in ~/.<tool>/secrets.enc (Fernet + scrypt-derived master password), never plaintext on disk (chmod 600). Legacy .env still works as a deprecated fallback; secret migrate imports it.

Onboarding

• Friendly interactive <tool> init wizard + <tool> secret set/list/rm/migrate/rotate-password commands. doctor now reports store health.

Expanded operations

• Many new day-2 MCP tools covering common scenarios (see SKILL.md). Every tool runs through the governance harness (audit / budget / risk-tier / undo).

Note: still validated against mocked APIs; verify against a live system before production use.

v0.1.0 — first release (preview)

Standalone governed Kubernetes ops — 15 MCP tools (pods, deployments, services, nodes, namespaces, events) for any kubeconfig cluster, with a built-in audit/budget/undo/risk-tier harness. See RELEASE_NOTES if present / README.