Skip to content

v0.2.0 — Chain of Custody

Choose a tag to compare

View all tags
@github-actions github-actions released this 31 Jul 12:51
· 266 commits to dev since this release
v0.2.0
63ee8a7
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

A managed-lifecycle and security-hardening release: safer credential
handling, a distinct human-approval gate on orchestrator grants, and a
truthful interactive-delivery model.

Added

  • One-command project upgrades reconcile schema, binary, and daemon state
    automatically, with automatic backups and full post-upgrade verification
    (RFC 0011).
  • Breaking: orchestrator grants now require a separate, explicitly
    human-approved decision — closes a self-escalation gap.
  • A passphrase-protected elevated signing key now gates the most sensitive
    actions.
  • Agent identities can be deleted and safely reused; every signed event
    carries its signer's key fingerprint (RFC 0012).
  • Interactive delivery is now a real, auditable state machine — no connector
    can falsely report a message as delivered (RFC 0013).
  • The TUI is a full control center: write actions everywhere, new panels,
    typo-proof pickers, redesigned views.

Fixed

  • A duplicate agent register call could silently destroy an existing
    agent's credential with no recovery path — now rejected before any
    credential is generated.
  • MCP's agent_register tool could register or squat an unrelated agent
    identity — now enforces its documented self-registration invariant.
  • Assorted authorization and Postgres reliability fixes.

Full technical detail is below and in CHANGELOG.md.

Full Changelog: v0.1.0...v0.2.0

Assets 33
Loading