v0.1.10

The first stable release of Panorama. It contains the fixes from a real deploy test of v0.1.10-beta.3 (#9) and moves the build to Go 1.27.3 (#10).

Deploying on AWS

• IngressCidr takes up to four CIDRs, and the new IngressPrefixListId takes a managed prefix list.
• The stack owns the database's and Container Insights' log groups, with LogRetentionDays, and deletes them with itself.
• A new RunTaskNetwork output feeds aws ecs run-task.
• The shipped template leaves out its comments, so it stays well under the 51,200-byte limit for aws cloudformation deploy.
• The manual now names --region on every aws command, and gives monthly costs and a cheaper evaluation setup.

Signing in without SSO

• Until single sign-on is configured, a personal gateway token signs a browser in to the console.

Bedrock refusals

• The provider check streams like real traffic and tries the models your routes use first.
• Settings → Model providers shows Bedrock's own reason for the latest refused request, and tells apart the Anthropic use case form, a model not offered to the account, an SCP, IAM, Marketplace and a retired model.

CLI and policy

• Flags work in any position. A stray argument is refused rather than silently dropping the flags after it.
• panorama policy apply reports unchanged routes and writes only what changed.
• A route change is served within about a second on every replica.

Security

• Built with Go 1.27.3, which fixes GO-2026-6809 in crypto/x509.