v0.6.1

0.6.1 (2026-09-05)

Bug Fixes

• correct upstream errors and streamline PR CI (#448) (4af0898)

Refactors

• budget: remove obsolete reservation bookkeeping (#447) (0c12d40)

v0.6.0

0.6.0 (2026-09-04)

⚠ BREAKING CHANGES

• 429 budget_exceeded is spent >= limit (or no budget row). GET remaining is limit - spent; reserved_microdollars is always 0. Concurrent in-flight requests can overshoot the cap.
• gateway-core and gateway-transport are unpublished workspace members. Historical versions stay on the registry; they are not yanked. cargo install axond remains the crates.io path. The published tarball flattens those internals so it compiles without resolving them from crates.io.

Features

• charge actuals after response, no pre-dispatch budget hold (#445) (d8adb6b)
• gateway: charge spend from imported models.dev rates (#442) (6c67fa6)
• publish only the axond binary crate to crates.io (#444) (43b46f2)

---

This PR was generated with Release Please. See documentation.

v0.5.0

0.5.0 (2026-09-03)

⚠ BREAKING CHANGES

• Boot requires [storage]. Inference is /ns/{ns}/v1 with provider-id/model-id. [[model]], mode, [control_plane], minted axt1. tokens, and /admin/v1 are withdrawn. Exactly one [[gateway_key]].

Features

• admin: authorize bindings per touched surface and scope (#413) (2551a3e)
• admin: binding price changes close half-open book intervals (#417) (1d53771)
• admin: catalogue imported browse, NotEnabled, and catalogue refresh (#411) (04b383f)
• admin: POST /admin/v1/bindings expands one imported model into one revision (#412) (507901a)
• api: cached provider model discovery (#437) (b988561)
• api: DELETE /api/v1/namespaces/{ns} (#436) (6250f96)
• api: OpenAPI 3.1 and usage summary (#435) (afd3df5)
• budget: per-namespace per-period reserve/settle (#434) (ae91a11)
• cli: axond admin model apply fills expected-revision and idempotency-key (#415) (9c18d5f)
• models: tenant-scoped local catalogue snapshots for custom deployment ids (#416) (49a04f2)
• routing: providers-only prefixed model ids, drop [[model]] (#433) (45e06f0)
• store-backed namespaced gateway (ADR 0063) (1db2832)
• store: required SQLite/Postgres store, namespaces, /ns/{ns}/v1, static API key (#431) (5ea10f5)

Bug Fixes

• admin: derive catalogue billable from compiled pricing, not enablement pointers (#410) (e48d89f)
• gateway: unmount /admin/v1 and reject withdrawn bootstrap config (#438) (bdb0907)

Documentation

• align operator docs with ADR 0063 (#439) (1dfbe44)
• teach axond admin model apply as the only happy path (#418) (ad3c9ba)

Tests

• admin: binding revision compiles to a chargeable alias (#414) (a85fe39)
• hydrate a four-step revision and a binding-adopted one on the new binary (#419) (7f6e787)

Continuous Integration

• bump the github-actions group across 1 directory with 2 updates (#422) (ecc37e4)

---

This PR was generated with Release Please. See documentation.

v0.4.2

0.4.2 (2026-08-24)

Continuous Integration

• bump the github-actions group with 2 updates (#408) (efdadd8)

---

This PR was generated with Release Please. See documentation.

v0.4.1

0.4.1 (2026-08-21)

Documentation

• deploy: add Azure Container Apps production path (e998ba9)

---

This PR was generated with Release Please. See documentation.

v0.4.0

0.4.0 (2026-08-21)

⚠ BREAKING CHANGES

• routing: remove the legacy governance and guardrail APIs in favor of typed, bounded request/response middleware.

Features

• backends: add Azure Blob object store (0d16157)
• backends: add Azure Blob object store (e49a2a4)
• backends: add conditional object erasure (2f984d7)
• backends: add conditional object erasure (3431dd8)
• backends: add object-store CAS contract (5d19a59)
• backends: add object-store CAS contract (0b42810)
• blob: add read-only revision hydration (d60701d)
• blob: add read-only revision hydration (#398) (c73ae3c)
• blob: decode canonical resource documents (a180bdb)
• blob: decode canonical resource documents (#397) (d9d9294)
• blob: implement blob-backed flat namespace control plane (cbdf03a)
• blob: persist candidate sequence floors (4f6f156)
• blob: persist sequence floors and signed recovery candidates (57b7b53)
• blob: read authenticated immutable objects (7e91263)
• config: add blob control-plane contract (7f617a2)
• config: add blob control-plane contract (a8c4fc8)
• convergence: wire blob secrets into snapshot compilation (5436b5c)
• desired-state: add blob publication protocol (da10795)
• desired-state: add blob publication protocol (2588a80)
• desired-state: add flat namespace projection (b623c6a)
• desired-state: add flat namespace projection (#394) (9ab3628)
• desired-state: authenticate blob publication (8b5148f)
• middleware: add the request-path primitive (#365) (b9b6248)
• operations: register content middleware through policy (#367) (0aa3ba9)
• publication: add authenticated immutable object reads (#396) (c359efb)
• routes: add namespaced inference contract (39ae8ce)
• routing: add deterministic request-path redaction (#370) (7e2edec)
• routing: opt byte-faithful routes into buffered middleware responses (#368) (1abef95)
• secrets: add namespace blob envelope codec (f8fd49e)
• secrets: add namespace blob envelope codec (3ad4bb9)
• secrets: bind blob secrets to authenticated candidates (1ee9474)

Bug Fixes

• auth: compare projected workload-key digests in constant time (bd6bedf)
• backends: align Azure CAS contract (dee7cb3)
• backends: distinguish missing CAS targets (5fef93a)
• backends: harden Azure Blob edge cases (4f49f90)
• backends: keep maintenance trait unambiguous (14d05bb)
• budget: honor static-only namespace bypass in memory (b3c9c0e)
• ci: align endurance policy tests (6977cf7)
• ci: bound musl package installation (#376) (10a4008)
• ci: pin scheduled fuzzing to GNU target (#351) (4639bf5)
• config: align Azurite URL contract (be73a5c)
• config: harden blob control-plane contract (ad5d58c)
• deploy: set fsGroup on persistent cache PVCs (c6f4a54)
• desired-state: fence blob activation (e7c75bd)
• desired-state: harden blob publication bounds (6ff36fb)
• desired-state: tighten blob activation boundary (3843696)
• policy: allow mixed flat static-only namespaces (dfb604d)
• preserve exact rollout trace evidence (#378) (6b35561)
• qualification: align restore provenance validation (cfb4ac2)
• qualification: align restore provenance validation (c81469d)
• qualification: align rollout shared alias (#380) (205a7aa)
• qualification: bound model cancellation fault timing (#374) (42b90f3)
• qualification: close Devin review gaps on PR 385 (413a242)
• qualification: repair rollout and capacity evidence (#377) (e9aa36c)
• qualification: reproduce rollout float fold (5322691)
• qualification: reproduce rollout float fold (d946f23)
• qualification: verify rollout control plane structurally (e1c7eac)
• routes: align stateful checks with namespaces (a3e4845)
• routes: avoid retaining refused namespace text (555a557)
• routes: keep namespace error tests clippy-clean (c37b83d)
• routes: redact invalid namespace debug output (bcff46b)
• secrets: bind blob opens to signed provenance (7d058b8)
• secrets: harden blob envelope cryptogr...

v0.3.40

0.3.40 (2026-08-15)

Features

• stateful: add durable recovery and catalogue contracts (0aaa258)
• stateful: complete wave 2 qualification (c18b7a5)
• stateful: project durable workload principals (e18e64a)

Documentation

• adr: add request-path middleware seam decision (#350) (afffe41)

Tests

• qualification: retain fault and recovery evidence (#353) (114c6fd)

v0.3.39

0.3.39 (2026-08-14)

Features

• recovery: qualify durable secret and catalogue restore state (6cb8dff)
• stateful: wire fail-closed convergence posture (55c0b01)
• stateful: wire outage recovery serving spine (e3b80e2)

Bug Fixes

• config: include convergence in override keys (90aca6c)
• deploy: preserve stateful pod template (b697026)
• models: bound legacy alias publication context (dbbf4b7)
• models: clarify legacy alias repair failures (0ee373d)
• models: complete legacy lifecycle edge cases (8695dc1)
• models: enforce alias lifecycle safety (6654fd0)
• models: preserve legacy alias lifecycle compatibility (5f65ac3)
• models: retire aliases with disabled targets (80895ad)
• qualification: retire catalogue recovery dependency (5edd69a)
• recovery: align evidence and qualification docs (39299a3)
• recovery: expect unready inference refusal (2d80335)
• recovery: keep provider key out of child environment (8d0fcaf)
• recovery: make restore evidence non-repopulating (813b5ee)
• recovery: scope provider key to evidence check (f2587b7)
• recovery: stream drill secret material (01e8c50)
• recovery: stream secret schema into postgres (d0e1389)
• recovery: wait for catalogue import (5b7e614)
• stateful: remove rebase conflict markers (de4b4fe)
• stateful: validate preflight cache posture (9118b8c)

Documentation

• stateful: clarify fail-closed rollout contract (146cf80)
• stateful: preserve outage section anchor (55fa76e)
• stateful: scope convergence to fail-closed wiring (0441f51)

Tests

• recovery: align restore contracts with runtime ordering (f8fc066)
• recovery: assert auth-first stateful refusal (1e59740)
• recovery: qualify durable restore state (c143559)

v0.3.38

0.3.38 (2026-08-14)

Features

• catalog: import and version models.dev catalogues in a running deployment (#311) (061ecf9)
• pricing: charge requests at the approved price book (#318) (b7dd7a7)
• secrets: administer the credential lifecycle without a redeploy (#312) (a90ba37)

Documentation

• integration: correct the wave-1 roster and contract-dependency scope (#323) (32844a9)

Tests

• qualification: soak the mixed workload against a stateful fleet (#303) (fc1e66d)
• security: fuzz the models.dev catalogue import and normalization (#222) (#266) (aacb003)
• security: sweep the /admin/v1 surface for secret material (#223) (#314) (3e3a13b)

v0.3.37

0.3.37 (2026-08-13)

Features

• admin: validate disabled tenant aliases (#336) (19b88e7)

Documentation

• ops: add stateful deployment rollback runbook (#339) (7795850)
• ops: make stateful runbook release agnostic (#342) (4eb6ed4)

Tests

• qualification: gate stateless fault evidence (#340) (cef347c)