v0.4.0

0.4.0 (2026-10-04)

Features

• a Process declares the Kubernetes API access it needs, the platform admits who may hold any, and the delivery machinery renders (#245) (eb3afa7)
• give each backup identity a network policy of its own, from the surface its method dumps and where its off-cluster copy goes (#243) (5377ee3)
• render the Release Gate's inputs as a ConfigMap, and name a Vault role for its namespace and identity (#239) (131a8e3)
• render the Vault policy job, named by the digest of the documents it writes (#246) (885d7aa), closes #202