Release v5.0.0 · Brad-Edwards/aptl

5.0.0 (2026-07-15)

the aptl aces-inventory command is removed. Asset-inventory capture is owned by ACES.

aces: realize account/group placements via DeploymentBackend (#768) (a4a0984)
aces: realize TechVault content and account placements or fail closed (#750) (45c6ece)
deployment: surface a redacted stderr hint when a volume seed exits nonzero (#756) (f168e43)
deployment: surface redacted stderr hint on volume seed failure (f168e43)
realize runtime services and honest SEM-218 disclosure via RuntimeManager (#770) (10dc1e2)
run MCP build and SOC seed shell steps on native Windows (#729) (5a0b7f9)
web: add /config summary, Settings dialog, and local-use notice (#751) (98cabd2)

ci: clear Sonar test code smells (#771) (cf02a61)
cli: aptl lab info reflects live published ports, not compile-time defaults (9d2d29b), closes #737
cli+windows: clear #739 SonarCloud smells and green the suite on native Windows (#747) (dc4e2f1)
cli: reflect live published ports in aptl lab info (was hardcoded defaults) (#738) (9d2d29b)
compose: raise suricata memory limit 1g -> 3g so IDS stays up under full rule set (d9b7676)
compose: suricata memory 1g -> 3g so IDS stays up under full APTL rule set (#731) (d9b7676)
constrain ACES and define libvirt service boundary (#767) (2bf9988)
lab: cross-platform lab-start fixes (indexer wait, WSL detection, Sonar smells) (#740) (40244be)
lab: restart wazuh-manager between compose retries if daemons never spawn (#736) (75a050d)
lab: use resolved indexer host port in readiness probe (was hardcoded 9200) (#735) (e45c3a6), closes #733
make generated cert mounts container-readable (#734) (ac5224a)
narrow evaluator surface to conditions and objectives (#749) (1b2159d)
techvault: stop lab-boot crash on prose content and realize weak-password accounts (#754) (c6bda8b)