v0.1.3

Changelog

Verify this release: every binary's SHA-256 is listed in
checksums.txt in this release's assets. This checks the release
artifact you downloaded — it's separate from agentgate-verify, which
verifies a running gateway's signed receipt chain.

v0.1.2

Changelog

• ff98b06 feat: add Calendly service configuration (#29)
• 8022c9b feat: add JSON verifier output (#27)
• 529e912 feat: add bearer token connections (#30)
• e154050 feat: add quiet verifier output (#28)
• bb80706 feat: refresh expiring OAuth tokens before dispatch (#26)

Verify this release: every binary's SHA-256 is listed in
checksums.txt in this release's assets. This checks the release
artifact you downloaded — it's separate from agentgate-verify, which
verifies a running gateway's signed receipt chain.

v0.1.1

Changelog

• 4119274 ci: add pull_request/push:main workflow (#21)
• 46f27b2 feat(deps): replace mattn/go-sqlite3 with modernc.org/sqlite (pure Go) (#20)
• 1d9c395 feat(release): add GoReleaser config and release CI workflow (#19)
• a5a3286 fix(release): give GoReleaser docker builds a separate release Dockerfile (#23)
• a768269 fix(security): close remaining unescaped interpolation and add nosniff (#18)

Verify this release: every binary's SHA-256 is listed in
checksums.txt in this release's assets. This checks the release
artifact you downloaded — it's separate from agentgate-verify, which
verifies a running gateway's signed receipt chain.

v0.1.0

First tagged release.

What's in it

• Signed, gap-free receipts. Every authenticated action attempt commits one
  hash-chained, Ed25519-signed receipt before the HTTP response.
• Offline verification. agentgate-verify checks a SQLite or JSONL receipt
  chain against a pinned trust file with no network call and no shared secret.
• Signed bounded export. GET /v1/receipts/export returns a snapshot-consistent
  JSONL range whose manifest embeds its own trust keys.
• Attenuated Biscuit delegation. Presented delegation tokens are verified and
  bound to the specific agent/principal/service/action/expiry before any registry,
  vault, or upstream access; ordered attenuation commitments land in the receipt.
• Connectors: GitHub, Slack, Stripe, Google Workspace (Gmail labels).
• Admin dashboard. Static single-page ledger view served same-origin at
  /dashboard/.
• 5-minute quickstart and a documented, sourced comparison against Nango,
  Composio, Astrix, and Oasis (docs/comparison.md).
• Contribution path: CONTRIBUTING.md plus starter good first issue tasks.

Verify it yourself

docker compose exec agentgate sh -c 'wget -qO- http://localhost:8080/v1/receipts/pubkey > /tmp/trust.json && agentgate-verify --source sqlite --path /data/agentgate.db --trust-root /tmp/trust.json'