v0.1.0

Changelog

• b567a56 build(deps): Bump actions/upload-artifact from 4.6.2 to 7.0.2 in the github-actions group across 1 directory (#90)
• dec64c4 build(deps): lockkit v0.8.0, new detectors wired (LL-04b) (#44)
• 953e8dc build: image, launcher, install.sh, release workflow, visibility probe (#8)
• 906d33c ci(fuzz): tolerate end-of-fuzztime 'context deadline exceeded' without a crasher (#60)
• a583fbd ci: run macOS on main and nightly, not on pull requests (#119)
• f7680a9 feat(config): profiles, sources, budgets and the policy diff (#6)
• 07347a1 feat(console): log methods over a seam to the engine, launcher checks, audit, --allowed-uids (#20)
• 396eb3e feat(console): open Loki and Elasticsearch/OpenSearch sources from the config (#97)
• ac4b937 feat(egress): pinned client, allowlist, TLS modes, unauthenticated-read check (#10)
• aa68c03 feat(engine): context, trace, tail; refs (LL-14) (#58)
• 09ea8d3 feat(engine): patterns (LL-13) (#57)
• 45b0ef1 feat(engine): query, granule plans, cost model, mask-all evaluator, search, count (LL-06) (#40)
• 5ff84d4 feat(mask): the masking pipeline (#18)
• a74ac8b feat(mcp): locklog_* tools, host-agent production guard, agent assets, init (#22)
• 98f792a feat(parse): core formats and event assembly (#5)
• c4f3982 feat(parse): syslog, combined, cri and docker-json formats (LL-12) (#34)
• 17bd107 feat(source/docker): Docker source, map loop and refresh, attrs allowlist (#29)
• cc78853 feat(source/elastic): Elasticsearch / OpenSearch source, privilege check (LL-25) (#77)
• 88c6c79 feat(source/file): file source and local index (#12)
• 3406c5e feat(source/journald): pure-Go journal reader, field allowlist (LL-10) (#23)
• 091ad8c feat(source/loki): Loki source, metric counts, auth-proxy material (LL-18) (#41)
• ebedda4 feat: rolling budgets, scan (whole-plan approval), unmask, lookup, change requests (LL-19) (#89)
• 387b53f feat: setup, doctor, five-minute job, own-container recipe (LL-15) (#80)
• 867f9e5 fix(config): budget defaults from the spike numbers (#28)
• 9e75bd0 fix(engine): bound a group by the call's byte budget; incidents on a calibrated cost model (#88) (#95)
• 2ac0d0b fix(mask): step 1 settles; secrets uncovered by later steps are redacted (#45)
• 15bc5a3 fix(source/loki): split a slice larger than the call budget into sub-slices (#72)
• e457488 fix: console clear view (Ctrl-O), --allowed-uids through the launcher, setup hint (#109)
• 48be5ca perf(index): backfill at full speed — memoized sensitivity, hand-written combined matcher (R6-P1) (#82)
• 6d0488e release: v0.1.0 (#108)
• 20e892a test(engine): context, trace and tail in the LL-16 suites and incidents (#103)
• e2a6624 test(engine): local leak, oracle (latency), equivalence, injection suites and local incidents (LL-16) (#83)
• 030d416 test(engine): make the -race suite fast enough for CI and add a race job (#76)