Skip to content

v0.42.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 10 Sep 01:32
· 180 commits to main since this release
v0.42.0
049df7e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

SchemaForge v0.42.0 adds authorized audit browsing and scoped chain verification, resolving #149.

  • Platform administrators can inspect audit availability at /api/v1/forge/audit/status, browse events at /api/v1/forge/audit/events and request bounded integrity checks at /api/v1/forge/audit/verify.

  • Event pages use a fixed sequence snapshot and exclude request/source details and arbitrary metadata.

  • Verification distinguishes valid, broken, incomplete and unavailable results, including missing retention anchors. Access is deployment-wide; tenant administrators cannot use these endpoints.

  • Uses acton-service 0.42.0, including the suffix-verification correction from 0.40.1, shared access to the active audit store, and timestamp normalization before sealing new events so database round-trips preserve their hashes.

  • Audit IDs use UUIDv7-backed mti TypeIDs with the audit_ prefix. Historical UUIDs retain their original bits and hashes when represented as TypeIDs.

  • Fixes SurrealDB 3 audit persistence and native record-ID decoding, with statement errors propagated instead of silently ignored.

See the audit API reference for permissions, limits and verification guarantees. Chain consistency does not prove collection completeness or independently trusted history. Historical events whose timestamp precision was already lost in storage can still fail verification; they are not rewritten or treated as valid.

The release includes Linux x86-64 and ARM64 PostgreSQL/SurrealDB binaries, Linux x86-64 and Windows x86-64 SQL Server binaries, a signed checksum manifest, and a separate signature for the Windows executable.

Assets 11
Loading