v0.7.0

0.7.0 (2026-10-06)

Features

• hold the CLI to its conventions at the process seam, and answer help and --json as they say (#267) (e9518b2)

v0.6.0

0.6.0 (2026-10-05)

Features

• hand the Release Gate the migration it starts, and refuse a changelog nothing gates (#263) (4cfbdd9)
• render auth, with its migration Jobs, its autoscaler and its disruption budget (#260) (f417250)

v0.5.1

0.5.1 (2026-10-05)

Bug Fixes

• keep the estate-scoped tree out of apps/, so a Project named edge is delivered as itself (#255) (319f714), closes #253

v0.5.0

0.5.0 (2026-10-05)

Features

• check the participants list in composition, and isolate a participant that is missing, stale or unlisted (#250) (323e73f)
• write an artifact's pin source the first time it is delivered (#254) (f7d0a96), closes #232

v0.4.0

0.4.0 (2026-10-04)

Features

• a Process declares the Kubernetes API access it needs, the platform admits who may hold any, and the delivery machinery renders (#245) (eb3afa7)
• give each backup identity a network policy of its own, from the surface its method dumps and where its off-cluster copy goes (#243) (5377ee3)
• render the Release Gate's inputs as a ConfigMap, and name a Vault role for its namespace and identity (#239) (131a8e3)
• render the Vault policy job, named by the digest of the documents it writes (#246) (885d7aa), closes #202

v0.3.0

0.3.0 (2026-10-04)

⚠ BREAKING CHANGES

• the library entry no longer exports the hand-written domain types (Project, Application, Process, Platform, Tier and the vocabulary unions). A checked Intent Set now carries the authored Platform document and each project's Effective Intent.

Features

• add prepare Processes for forward-only setup (#166) (f04b5b6), closes #156
• ci: comment each pull request's shape and publish a release candidate (#116) (4ff3284)
• compose the estate, and the deploy-kit command that validates, publishes and composes (#228) (912cf63)
• declare migrations on the Application (#165) (83ba2b4), closes #155
• deliver each Project as a signed artifact pinned by digest (#169) (84a89e2), closes #154
• gate switchover per Application with the Release Gate (#167) (44d115e), closes #152
• give every Application a revision (#164) (bf9a7b9), closes #150
• give the Resolved Deployment and the node contract their metamodels (#135) (179cbe8)
• hand Projects over from fleet-infra one at a time (#172) (ed0a8b7), closes #159
• keep secret rotation outside a release (#170) (db27cce), closes #153
• keep the production implementation portable (#227) (b9ac258)
• lay the compiler out as a chain of steps, and lower to the Effective Intent (#184) (e771f46)
• link a route's and a scrape's names to the Process and surface they mean (#118) (da54c8e)
• make cutover continuous or interrupted and derive blue/green from it (#163) (7e1d8b0), closes #151
• pack each fragment's share of the images lock, and union the shares in composition (#238) (d47bd56)
• parse the minimal project intent in both implementations and match its oracle (#112) (506619b)
• prove every migration safe and undo a held one (#171) (e7383c4), closes #157
• publish JSON Schemas for the Resolved Deployment, the composition lock and the pin annotations (#211) (0fb5f6c)
• read the Platform document and refuse what it and the project files break together (#120) (ede5e91), closes #41
• refuse a broken document with the code and pointer both implementations agree on (#114) (dede1fa)
• refuse a settled decision that is not accepted (#207) (1be1eb8)
• render data, with Vault delivery, Assets, sidecars and backups (#192) (d4b0719)
• render Flagger-ready objects (#173) (b851060), closes #158
• render minimal's share of the tree through typed objects and one serializer (#186) (4943053)
• resolve auth, with migration, engine grants and placeholders (#194) (621639e)
• resolve data, with grants, Assets, sidecars and the Secret Store (#190) (31380c3)
• resolve every example the production implementation resolves, through QVT-Operational (#216) (c75d586)
• resolve minimal to its Resolved Deployment, with the foundation declared (#185) (7ea3422)
• resolve minimal with QVT-Operational, reading the pinned inputs through their own grammars (#215) (1aa4cdc)
• resolve volumes and render stop-start Processes, and settle engine, size and at-rest (#188) (f06b963)
• run the secret scan locally, not only in CI (#74) (ec9746b)
• share more than secrets between the authored levels (#143) (bdffe10)
• ship the deploy-kit command in the published package, built when it is packed (#237) (7cbc7e6)
• take delivery into the model and retire the push design (#162) (9fdafa7), closes #149
• widen the Project Intent metamodel to every worked example, with its descriptor and JSON Schema (#113) (76919ca)

Bug Fixes

• deps: update minor and patch dependencies (#176) ([922615c](922615ceefb1c4aeadb0da0687...

v0.2.0

0.2.0 (2026-09-14)

⚠ BREAKING CHANGES

• placement dimensions and one intent file per domain (#9)

Features

• grade sidecars as Workload vocabulary (#11) (57dd98e)
• placement dimensions and one intent file per domain (#9) (fe584c7)
• Platform Intent, the twenty-six render gaps, and gates for all of it (#12) (1945903)
• Service Intent keeps facts, the platform keeps policy (#15) (caa3396)
• the deployment model, its decision record, and the CI that guards them (0e0f379)
• validate pull request titles and commits, and scan with CodeQL (#58) (f71f262)

Bug Fixes

• ci: scan secrets with pinned gitleaks binary (#7) (1b5bc7c)
• ignore coverage output (#8) (c0f47e4)
• two places the examples contradicted the model, and a gate for both (#16) (72fcfe7)