v0.3.4

What's Changed

• feat(evals): add the sub-agent and modules explicit-request cases by @victorludvig in #349
• feat(evals): add the single-file explicit-request cases f02–f09 by @victorludvig in #354
• feat(evals): add input-level cases l3 and l4 by @victorludvig in #350
• test(evals): lint every case's own starting project by @victorludvig in #358
• fix(sdk): accept agent_usage as a constraint root in policy lint by @guillaume-hexamind in #363
• feat(evals): hold out four cases and add a model task parameter by @victorludvig in #364
• build(evals): cap parallel eval sandboxes at four by default by @victorludvig in #365
• feat(evals): route the Claude sandbox through an Anthropic-only egress proxy by @victorludvig in #355
• feat(evals): add must-refuse and robustness cases by @victorludvig in #366
• feat(evals): add security cases by @victorludvig in #367
• refactor(sdk): pass usage roots to policy engines as one decision input by @guillaume-hexamind in #369
• docs(sdk): fail on undocumented sdk surface and close the gaps by @quanghexa94 in #347
• fix(sdk): build the enforcer's usage source and audit sender from the platform client by @guillaume-hexamind in #371
• feat(platform-api): sign oauth access tokens with their own keypair by @victorludvig in #332
• feat(clickhouse,platform-api): roll usage up per end user and serve it by @guillaume-hexamind in #370
• feat(mcp): cache the api's jwks for the mcp server by @victorludvig in #333
• demo: 3-level DevOps deploy-chain showcase by @quanghexa94 in #360
• refactor(sdk): key usage ledgers and snapshots by usage scope by @guillaume-hexamind in #372
• feat(platform-api): fetch oauth client metadata behind an ssrf guard by @victorludvig in #334
• feat(platform-api): rank a project's end users by usage for the dashboard by @guillaume-hexamind in #373
• feat(dashboard): playground presentation mode by @quanghexa94 in #361
• feat(sdk): count usage per end user in bounded process-local ledgers by @guillaume-hexamind in #374
• feat(mcp): verify oauth tokens and serve the mcp app at /mcp by @victorludvig in #376
• feat(platform-api): cache oauth client metadata and match redirect uris by @victorludvig in #377
• feat(mcp): serve the policy reference and send server instructions by @victorludvig in #386
• feat(sdk): cap one end user's usage across agents with user_usage.* by @guillaume-hexamind in #378
• feat(sdk): read end-user usage from the platform, bounded per process by @guillaume-hexamind in #379
• feat(platform-api): serve oauth discovery metadata and jwks at the root by @victorludvig in #387
• fix(mcp): read the issuer from HEXGATE_PUBLIC_URL only and serve it unchanged by @victorludvig in #396
• build(mcp): build the mcp server image and check it in ci by @victorludvig in #397
• build: cap the project at python 3.13 (<3.14) by @quanghexa94 in #329
• feat(sdk): enforce user usage across processes at the run boundary by @guillaume-hexamind in #398
• feat(mcp): call the platform api as the caller and list their granted projects by @victorludvig in #390
• feat(platform-api): accept oauth access tokens in require_user on scoped routes only by @victorludvig in #403

Full Changelog: v0.3.3...v0.3.4