Skip to content

PermitWeave v0.6.1

Choose a tag to compare

View all tags
@Alqudimi Alqudimi released this 22 Aug 11:07
· 2 commits to main since this release
v0.6.1
4827c7e

Changelog

All notable changes to PermitWeave are documented here.

[0.6.1] - 2026-08-22

Fixed

  • Sequence report records now expose session rule counters after each step, matching the documented post-step semantics and improving audit readability.

[0.6.0] - 2026-08-21

Added

  • Session Policy Sequences for deterministic simulation of ordered tool-call traces with bounded in-memory session counters.
  • max_calls_per_session rule constraint with stable SESSION_CALL_LIMIT blocking reason.
  • sequence CLI command with JSON reports, per-step counter snapshots, first-blocked position, canonical report digest, and optional --fail-on-block CI gate.
  • Session sequence examples and focused tests covering determinism, order-sensitive limits, report integrity, and CLI behavior.
  • Session sequence schema, semantics, threat boundary, and operational guidance in docs/session-sequences.md.

Security

  • Sequence simulation performs no tool execution, network access, model inference, or external state mutation.
  • Session state is explicit and bounded to the current invocation; v0.6 does not claim distributed coordination, replay protection, crash recovery, or executor enforcement.

[0.5.0] - Unreleased

Added

  • Deterministic Policy Impact Analysis comparing baseline and candidate authorization behavior over a typed request corpus.
  • Impact classes for unchanged, newly allowed, newly denied, approval changes, reason-code changes, and rule-match changes.
  • impact CLI command with repeatable --fail-on drift gates for CI.
  • Example policy corpus and dedicated impact documentation.

Security

  • Impact analysis reuses the production decision engine and performs no tool execution, network access, or model inference.
  • Reports are digest-protected and explicitly limited to the supplied corpus; they are not equivalence proofs for unseen requests.

[0.4.0] - 2026-08-19

Added

  • Deterministic Decision Evidence Packs joining signed bundle provenance, contract status, receipt-chain verification, and redacted decision summaries.
  • evidence and verify-evidence CLI commands with reproducible --generated-at support.
  • Evidence-pack schema and threat-model documentation.

Security

  • Evidence generation verifies the signed policy bundle before producing the artifact.
  • Evidence packs contain no private keys and decision summaries exclude request arguments.
  • Pack integrity is protected by a canonical SHA-256 digest and verification fails closed.

[0.3.0] - 2026-08-18

Added

  • Ed25519 signed policy bundles with canonical payloads and policy digest binding.
  • Keypair generation, policy signing, bundle verification, and verified decision CLI commands.
  • Explicit issuer, key ID, creation, and expiry metadata with fail-closed verification.
  • Regression tests for tampering, expiry, wrong keys, and end-to-end CLI lifecycle.

Security

  • Signed bundles are verified before compilation and decision evaluation.
  • Private keys are supplied by the operator and are never generated into the repository.
  • Public-key trust roots remain explicit; PermitWeave does not fetch keys from the network.

[0.2.0] - 2026-08-17

Added

  • Declarative Policy Contract Testing with typed YAML/JSON suites.
  • Deterministic JSON and JUnit reports for local and CI workflows.
  • permitweave explain for side-effect-free decision inspection.
  • POST /v1/decisions/explain for read-only API inspection.
  • Contract fixtures covering allow, deny, approval, and default-deny behavior.
  • CI artifact upload for policy contract reports.

Compatibility

  • Existing validate, decide, serve, and verify-receipts commands remain compatible.
  • Existing /v1/decisions behavior remains receipt-producing; only the new /explain endpoint is side-effect-free.

[0.1.0] - 2026-08-16

Added

  • Deterministic versioned policy model and compiler.
  • Allow, deny, and approval-required decisions with stable reason codes.
  • Redacted append-only hash-linked receipt chain and verification command.
  • CLI for validation, decisions, receipt verification, and local serving.
  • FastAPI health, policy validation, decision, and receipt verification endpoints.
  • Unit and API integration tests, documentation, and GitHub Actions quality workflow.

Security

  • Default deny policy behavior.
  • Bounded policy inputs and strict Pydantic models.
  • No subprocess, dynamic import, URL fetching, model call, or credential forwarding path.
Assets 4
Loading