v0.5.1

Changelog

• ef502b6 build: lockkit v0.8.1 (#24)
• 7a06cd7 chore(release): prepare v0.5.1 (#25)

v0.5.0

Changelog

• bc1884a chore(release): prepare v0.5.0 (#20)
• ffc3bac docs(gate): review nits from #16 (#21)
• 0dac70c feat(hub): lockkit v0.6.0: re-approval of expired tickets, reveal, standalone rollback (#16)

v0.4.0

Changelog

• 1425c9b chore(release): prepare v0.4.0 (#18)
• ddb1550 feat(gate): pin approval devices (lockkit v0.4.0 device decisions) (#17)

v0.3.0

Changelog

• 4c8e480 build: lockkit v0.3.1 (#13)
• b7b8195 chore(deps): Bump sigstore/cosign-installer (#2)
• b05174c chore(release): prepare v0.3.0 (#14)
• 9cde03d feat(gate): --hub-plain-http for a hub on its own network (#12)
• e575147 feat(gate): hub mode (#11)

v0.2.1

Changelog

• e18b40e fix(launcher): ca init under rootless Podman runs with --userns keep-id (#9)
• c8a637e fix(release): image version without the v, like the archives and the launcher (#8)

v0.2.0

Changelog

• bd59b4a feat!: Docker-only lockhttp: launcher, signed image, sidecar gate (#5)
• a2386b2 fix(install): fall back to the newest pre-release when no stable release exists

v0.1.0

Changelog

• 11b308c Initial commit
• 4e93814 Merge pull request #1 from DavidGodefroid/feat/site-logo
• 6649bd1 Merge remote-tracking branch 'origin/main' into feat/site-logo
• 4685d10 feat(cli): install (gate uid, rootless subuid), init, console, gate, signer, ca init, doctor
• eac52c9 feat(console): lockkit backend serving http.approve and policy.get
• 345685a feat(decide): floor, rules, defaults, Claude API allowlist, secrets, exfiltration score, shadow mode
• 6068d60 feat(gate): CONNECT/SNI gate, MITM, ask queue, grants, sources, audit; CA and signer
• 407258e feat(policy): canonical policy, loosening diff, auto-forbidden classes
• 3fe2f43 feat(site): lockhttp logo, banners, OG image and touch icon
• 6176c8e feat(site): lockhttp.com, deployed to GitHub Pages
• c381750 fix(decide): ask on ambiguous Claude API JSON, deny duplicate credentials
• ce105f6 fix(gate): fail-closed ClientHello, decided Host upstream, unambiguous body fingerprints
• 26d8240 fix(gate): hash JSON bodies with \u escapes raw
• 0a02c8f fix(policy): removing or narrowing a non-free rule is a loosening
• 45cc497 fix: canonical JSON only without duplicate keys, install checks parents and hard links, staticcheck
• 9b01e57 fix: hard checks before grants, deny list kept in shadow, full-header fingerprints; docs
• a95d3ab test(cli): skip Unix-only install and mode checks on Windows
• 7124a16 test(integration): gate against a real lockkit console in-process