v0.3.1

What's Changed

• refactor(dashboard): rename tokens page to API keys, tidy nav and copy by @guillaume-hexamind in #102
• refactor(platform-api): rename DevToken to ApiKey by @victorludvig in #108
• build(collector): scaffold the OTLP ingestion Collector (Go) by @victorludvig in #111
• docs(sdk): guards + official-plugins concept page by @quanghexa94 in #125
• fix(platform-api): make the signed token_id fact the api-key row id by @victorludvig in #126
• feat(collector): verify Hexgate API keys in the OTLP receiver by @victorludvig in #127
• feat(sdk): agent-level policy model with admission/agents blocks by @quanghexa94 in #122
• feat(sdk): official secret-detection guards (hexgate.plugins) by @quanghexa94 in #123
• feat(platform-api): add ClickHouse batch-insert functions for the enricher job by @victorludvig in #128
• feat(sdk): define otel span semconv, expose redaction pipeline by @victorludvig in #130
• fix(platform-api): cover llm_invocation in the startup schema check by @victorludvig in #131
• refactor(platform-api): aggregate schema gaps across features at startup by @victorludvig in #136
• feat(sdk): serve OpenAI, Google ADK, and Pydantic AI agents (framework-agnostic streaming) by @quanghexa94 in #147
• Revert "feat(sdk): serve OpenAI, Google ADK, and Pydantic AI agents (framework-agnostic streaming)" by @quanghexa94 in #148
• feat(platform-api): add the span-enricher job (redpanda to clickhouse) by @victorludvig in #133
• feat(sdk): RunFacts accumulator and run scope by @guillaume-hexamind in #129
• feat(platform-api): compile modular agents' bundles from resolved modules by @quanghexa94 in #121
• feat(sdk): serve OpenAI, Google ADK, and Pydantic AI agents (framework-agnostic streaming) by @quanghexa94 in #149
• test(sdk): pin run scope coverage for the streamed launch helper by @victorludvig in #163
• fix(platform-scripts): realign seed_audit with the audit column contract by @guillaume-hexamind in #159
• feat(sdk): emit audit events as otlp spans by @victorludvig in #146
• build(collector): ship the full otlp pipeline in the deploy stack by @victorludvig in #157
• build(platform-scripts): add the otlp pipeline smoke test as a post-deploy check by @victorludvig in #168
• feat(sdk): agent-level admission enforcement (AgentGate, closed-world agent keys) by @quanghexa94 in #124
• docs(platform-api): describe the otlp pipeline as the audit transport by @victorludvig in #170
• fix(platform-api): raise audit log retention to six months by @victorludvig in #174
• feat(sdk): run namespace and writer by @guillaume-hexamind in #150
• feat(sdk): compose policy.yaml grammar front-end by @quanghexa94 in #175
• feat(clickhouse, platform-api): run_id and run counters on policy_decision by @guillaume-hexamind in #153
• docs(sdk): marimo notebook demoing guards + plugins across frameworks by @quanghexa94 in #156
• feat(sdk): enforce agent reach + admission at runtime, cap handoff depth (A3+A4) by @quanghexa94 in #142
• feat(sdk): add hexgate.messages wire contract and content caps by @victorludvig in #182
• feat(sdk): compose import graph (position=scope imports) by @quanghexa94 in #176
• feat(sdk): run facts on the audit payload, and policy-level constraints by @guillaume-hexamind in #155
• refactor(dashboard): move workspace switcher into a collapsible sidebar by @quanghexa94 in #172

Full Changelog: v0.3.0...v0.3.1