Skip to content

PermitWeave v0.2.0

Choose a tag to compare

View all tags
@Alqudimi Alqudimi released this 17 Aug 11:16
· 13 commits to main since this release
v0.2.0
5c59e7e

Changelog

All notable changes to PermitWeave are documented here.

[0.2.0] - Unreleased

Added

  • Declarative Policy Contract Testing with typed YAML/JSON suites.
  • Deterministic JSON and JUnit reports for local and CI workflows.
  • permitweave explain for side-effect-free decision inspection.
  • POST /v1/decisions/explain for read-only API inspection.
  • Contract fixtures covering allow, deny, approval, and default-deny behavior.
  • CI artifact upload for policy contract reports.

Compatibility

  • Existing validate, decide, serve, and verify-receipts commands remain compatible.
  • Existing /v1/decisions behavior remains receipt-producing; only the new /explain endpoint is side-effect-free.

[0.1.0] - 2026-08-16

Added

  • Deterministic versioned policy model and compiler.
  • Allow, deny, and approval-required decisions with stable reason codes.
  • Redacted append-only hash-linked receipt chain and verification command.
  • CLI for validation, decisions, receipt verification, and local serving.
  • FastAPI health, policy validation, decision, and receipt verification endpoints.
  • Unit and API integration tests, documentation, and GitHub Actions quality workflow.

Security

  • Default deny policy behavior.
  • Bounded policy inputs and strict Pydantic models.
  • No subprocess, dynamic import, URL fetching, model call, or credential forwarding path.
Assets 2
Loading