v0.2.0

Changelog

• a35c04d Merge branch 'feat/drydock-integration' into dev/0.2.0
• f1106a8 Merge branch 'feat/ed25519-design' into dev/0.2.0
• 55db780 Merge branch 'feat/generic-rest' into dev/0.2.0
• 74c21f8 Merge branch 'feat/launch-docs' into dev/0.2.0
• cde7b30 Merge branch 'feat/mcp-server' into dev/0.2.0
• 304c25d Merge branch 'feat/prometheus-metrics' into dev/0.2.0
• 2ff4c86 Merge branch 'feat/release-integrity' into dev/0.2.0
• a591dd8 Merge branch 'feat/roadmap-2026' into dev/0.2.0
• 49d6d1b Merge branch 'feat/token-at-rest' into dev/0.2.0
• f92552d Merge pull request #6 from CodesWhat/dev/0.2.1
• ce2eccb ✨ feat(audit): structured JSON audit logging for security events
• 6c04f19 ✨ feat(auth): add Ed25519 request verifier (PR 2)
• 953f27a ✨ feat(auth): add key registry and nonce LRU (PR 1)
• 8359656 ✨ feat(auth,server): Model C enrollment endpoint (PR 6)
• c1bb3db ✨ feat(cli): lookout keygen subcommand (PR 8)
• affd3fe ✨ feat(drydock): close compatibility gaps + integration reference
• 538cddd ✨ feat(drydock): emit dd:watcher-snapshot SSE event
• 5e4668c ✨ feat(edge,protocol): signed hello in edge mode + keygen helpers (PR 5)
• 6564aa0 ✨ feat(examples): hardened compose deployment examples
• 57dc115 ✨ feat(generic): headless REST+SSE management API for standalone mode
• 4c1b6c3 ✨ feat(mcp): add read-only MCP server endpoint for AI assistant integration
• f29a31d ✨ feat(metrics): add token-authenticated Prometheus /metrics endpoint
• 207e201 ✨ feat(release-integrity): supply-chain hardening with cosign, SBOM, and provenance
• aa65a32 ✨ feat(security): Argon2id token-at-rest hashing
• 58e0589 ✨ feat(server,config): wire Ed25519 into auth middleware + new config fields (PRs 3 & 4)
• 9b98a8b ✨ feat: initial commit of Lookout remote Docker agent
• a8ee827 🎨 style(auth): gofmt formatting fixes in enroll.go and verify.go
• 9faa812 🎨 style: clear errcheck lint debt with deliberate error policy
• ddc1cd9 🎨 style: gofmt internal/adapter, internal/generic, internal/metrics
• c9224e5 🐛 fix(auth): harden Ed25519 implementation after security review
• 4df1da2 🐛 fix(ci): repair release.yml action pins and scope permissions
• 72fe6d3 🐛 fix(deps): drop semver-major-days cooldown for actions/docker
• f6bf762 🐛 fix(release): build container images from prebuilt binary on Wolfi scratch
• 73119b8 🐛 fix(release): container images from prebuilt binary on Wolfi scratch
• 04b5829 🐛 fix(release): emit cosign bundle for checksums
• 611cae3 🐛 fix(release): emit cosign bundle for checksums (new-bundle-format)
• ba7531d 🐛 fix(release): make version injection actually work
• 5e01c73 🐛 fix(release): sign manifest lists and gate attestation on public repos
• c77d1b3 🐛 fix(security): harden auth middleware and argon2 parameter validation
• 9a18eb8 🐛 fix(test): correct integration SSE parsing and container-list polling
• e376de8 🐛 fix: address CodeRabbit review findings
• 3bd1b1e 🐛 fix: correct corrupted gorilla/websocket go.mod checksum in go.sum
• 03a4e75 🐛 fix: restore streaming through auth middleware, fix SSE test race, repair compat script
• d93d0f0 📝 docs(auth): add Ed25519 per-client key authentication design
• 0950531 📝 docs(changelog): add 0.2.1 release notes
• fe0a50a 📝 docs(changelog): consolidate into a single 0.2.0 release
• a985557 📝 docs(changelog): cover Ed25519 auth, enrollment, and repo infrastructure
• d1ffa1b 📝 docs(readme): add placeholder logo mark so the header renders
• f54a655 📝 docs(readme): hardened-first Quick Start, Mermaid topology, drop logo
• faf9049 📝 docs(readme): restructure to drydock/sockguard parity with alpha banner
• a7d000e 📝 docs(roadmap): rewrite for June 2026 competitive landscape
• 2212444 📝 docs: CODEOWNERS, FUNDING, dependabot, issue templates, CHANGELOG, CONTRIBUTING
• 50f89c1 📝 docs: README badges, contents nav, feature parity, auth warning
• 2f1f518 📝 docs: add Control 11 Ed25519, update README auth section, OpenAPI enroll endpoint (PR 7)
• 1e8fcb9 📝 docs: community, security policy, release, and agent docs
• 34a168f 📝 docs: convert ASCII diagrams to Mermaid (renders natively on GitHub)
• 109e623 📝 docs: correct hash-token usage and document Bearer auth scheme
• 7fa65a9 📝 docs: launch documentation pack
• 187e425 📝 docs: remove fictional "DockPilot" gateway; document the real Drydock integration
• aa2b48b 📦 deps(docker): pin golang 1.26.4-alpine and derive alpine repo branch
• 0795e2a 🔄 refactor: merge feat/ed25519 — per-client Ed25519 key authentication
• 994952a 🔄 refactor: merge feat/repo-infra — full repo infrastructure parity
• ce9460b 🔧 config(docker): trim build context with .dockerignore
• 0e8c366 🔧 config(git): ignore internal roadmap and playwright artifacts
• 9c64107 🔧 config(hooks): lefthook pipeline + commit message validator
• c4f7920 🔧 config(lint): enable gosec, bodyclose, errorlint, misspell
• 636e2a1 🔧 config(release): disable unused artifact-metadata storage record on attest steps
• 756f92b 🔧 config: align toolchains and fix release attestation steps
• 54ef632 🔧 config: fix CI toolchain failures and roadmap consistency
• 6c6e071 🔧 config: pin Go 1.26 across the stack and harden README quickstart
• 88d7bf6 🚀 deploy(ci): harden and expand CI to sibling-repo parity
• f162832 🚀 deploy(release): finalize v0.2.0 changelog + explicit version input
• 3f81020 🚀 deploy(release): finalize v0.2.0 changelog + version input
• 4aa9d6c 🚀 deploy(release): merge dev/0.2.0 — v0.2.0
• 24ea8f8 🚀 deploy(release): release-cut dispatch workflow + verify-published job
• 41d56df 🧪 test(auth): use errors.Is for sentinel checks (errorlint)
• 4026312 🧪 test: add Go fuzz targets for all input parsers
• 1cb453e 🧪 test: integration suite against real dockerd + daily CI workflow
• 9e43e67 🧪 test: use short unix socket paths to fix macOS bind failures