v0.3.2

What's Changed

• fix(sdk, collector): apply role-keyed top-level constraints, widen revocation staleness by @guillaume-hexamind in #199
• feat(platform-api): compose policy-file store + resolve/check/preview API by @quanghexa94 in #179
• style(platform-api): ruff-format policy_modules service/router/tests by @quanghexa94 in #207
• feat(sdk): compose admission block (role→agent ingress access) by @quanghexa94 in #200
• feat(clickhouse): add llm_message table by @victorludvig in #183
• fix(redpanda): raise the record-size budget for message spans by @victorludvig in #185
• feat(platform-api, collector): soft-delete devtoken rows and filter revoked keys on every read path by @guillaume-hexamind in #206
• feat(platform-api): map hexgate.messages spans into LlmMessageEvent by @victorludvig in #186
• feat(sdk): add LlmMessageEvent and emit_llm_messages by @victorludvig in #187
• feat(platform-api): store llm_message rows from the enricher by @victorludvig in #188
• feat(sdk): add the MessageCursor delta helper by @victorludvig in #189
• feat(platform-api, dashboard): record who created and last updated every control-plane row by @guillaume-hexamind in #209
• feat(dashboard): compose policy editor (file store, live preview, graph, tester) by @quanghexa94 in #180
• feat(platform-api): add the session-scoped llm-messages read endpoint by @victorludvig in #190
• feat(dashboard): move org + account admin into a settings space by @quanghexa94 in #219
• feat(dashboard): theme system — light/dark modes and blue/plum accent by @quanghexa94 in #218
• feat(sdk): capture OpenAI Agents messages in HexgateUsageHooks by @victorludvig in #191
• fix(platform-api): union policy graph to the most-permissive verdict by @quanghexa94 in #222
• refactor(sdk): enable ruff isort and sort imports tree-wide by @quanghexa94 in #145
• test(platform-scripts): cover hexgate.messages in the OTLP smoke check by @victorludvig in #192
• fix(dashboard): resolved-tab agent dropdown, inline folder create, legible graph edges by @quanghexa94 in #223
• fix(platform-scripts): apply each store's migrations independently by @guillaume-hexamind in #220
• feat(sdk): capture LangChain messages in HexgateUsageCallbackHandler by @victorludvig in #193
• fix(platform-scripts): guard each migration against a table create_all has not built by @guillaume-hexamind in #224
• build(platform-api): rebuild the SDK wheel on every image build by @guillaume-hexamind in #227
• feat(dashboard): show LLM messages in the Audit decision drawer by @victorludvig in #195
• feat(sdk): capture Google ADK messages in HexgateUsagePlugin by @victorludvig in #194
• feat(sdk): emit a per-run message event for Pydantic AI by @victorludvig in #196
• feat(dashboard): modernize the playground into an agentic chat by @quanghexa94 in #226
• test(platform-api): execute the migrations in CI against real Postgres and ClickHouse by @guillaume-hexamind in #228
• feat(sdk): tabulate a resolved policy set as an authorisation matrix by @victorludvig in #238
• feat(platform-api): record the operator's AI Act classification per agent by @victorludvig in #235
• feat(platform-api): assemble and sign the AI Act evidence report by @victorludvig in #239
• feat(sdk): add skill definitions to the agent manifest by @guillaume-hexamind in #253
• fix(sdk): expand Google ADK toolsets in the manifest and policy gate by @guillaume-hexamind in #254
• feat(sdk): child.as_tool() for native agent-as-tool sub-agent reach by @quanghexa94 in #233
• feat(sdk): enumerate_subagents — per-framework sub-agent introspection by @quanghexa94 in #243
• feat(sdk): record sub-agent reach edges on the manifest + via-specific warn by @quanghexa94 in #244
• feat(cli): register the whole sub-agent tree (register_tree) + serve/register flags by @quanghexa94 in #245
• docs: add pr-description and write-adr agent skills by @quanghexa94 in #217
• feat(platform-api): persist agent skills from the manifest by @guillaume-hexamind in #256
• feat(dashboard): show registered skills on the agents page by @guillaume-hexamind in #258
• feat(sdk): discover Google ADK skills at registration by @guillaume-hexamind in #259
• feat(platform-api): render the AI Act evidence annex to PDF by @victorludvig in #237
• chore(skills): add write-policy Claude skill by @victorludvig in #263
• test(sdk): probe the ADK skills contract in the version matrix by @guillaume-hexamind in #261
• feat(sdk): add the skill policy key namespace by @guillaume-hexamind in #262
• chore(skills): add run-platform skill by @victorludvig in #265
• feat(cli): bind sub-agents to platform policy at serve by @quanghexa94 in #271
• docs(repo): rename CLAUDE.md to AGENTS.md by @victorludvig in #274
• feat(dashboard): ai act evidence report tab by @victorludvig in #236
• feat(sdk): evaluate skill keys closed-world on both engines by @guillaume-hexamind in #266
• feat(sdk): gate Google ADK skill activation under skill policy keys by @guillaume-hexamind in #267
• feat(platform-api): generate a skills block in the starter policy by @guillaume-hexamind in #270
• fix(sdk): discover the real tool surface of a compiled LangGraph agent by @guillaume-hexamind in #272
• test(sdk): assert the deepagents probe gates the top-level bound tool surface by @guillaume-hexamind in #275
• feat(sdk): discover deepagents skills at registration by @guillaume-hexamind in #278
• feat(sdk): gate deepagents skill activation under skill policy keys by @guillaume-hexamind in #282
• demo: support_bot + billing_bot policy showcase by @quanghexa94 in #264
• test(sdk): probe the deepagents skills contract in the version matrix by @guillaume-hexamind in #291
• feat(platform-scripts): seed llm_message transcripts alongside decisions by @victorludvig in #230
• fix(sdk): keep the cursor mark on an empty list and skip only a missing prompt by @victorludvig in #229
• docs(sdk): document agent skills, their policy block and both adapters by @guillaume-hexamind in #292
• fix(platform-api): install weasyprint system deps in the release job by @guillaume-hexamind in #296

Full Changelog: v0.3.1...v0.3.2