v0.2.0

Compare with previous release

Added

• Record build provenance attestations for every release asset so repository readers can verify that archive bytes were built by this repository's workflow with gh attestation verify; while the repository is private the workflow reports attestations as explicitly unavailable (GitHub does not offer them for user-owned private repositories) and delivery stays checksum-verified.
• Accept RFC 6750 bearer scheme spellings: bearer and BEARER authorization headers now authenticate like Bearer on the MCP gateway and metrics endpoint; rejection behavior for malformed credentials is unchanged.
• Refuse Docker engine sockets that grant world access: the observer previously accepted world-readable sockets, which are root-equivalent on the host; group-restricted sockets (mode 0660 root:group) are unaffected.
• Ship version-coherent documentation: archive copies of OPERATIONS.md, INSTALL.md, and VALIDATION.md now name the release version they ship in instead of stale development literals.
• Run native arm64 systemd acceptance: restricted and standard lifecycle cases execute on ubuntu-24.04-arm hosted runners instead of amd64-only coverage.
• Build release notes from the hand-maintained changelog section for the tagged version; the publish job fails loudly when the section is missing instead of falling back to a commit list.
• Archive documentation now ships link-clean: repository-only links to openspec records, RELEASING.md, and SPEC.md are rewritten to versioned GitHub URLs, and archive acceptance verifies every shipped link resolves.

Changed

• Bring the gateway systemd unit to the full sandbox baseline: syscall filtering with native-architecture pinning, personality, realtime, and namespace locks now apply to the network-facing gateway, all three services protect clock, hostname, kernel logs, and IPC namespaces, and the gateway and observer additionally hide other users' processes and non-PID proc files; the diagnostic backend keeps system-wide /proc visibility because audit evidence reads it.
• Cut the internal test suite wall time from 18.3s to 11.9s with warm compiler cache by merging 42 zero-delta tests into their covering tests, shrinking deadline-driven waits to config values, and running independent tests in parallel; statement coverage stays at 85.8%.
• Delete verified dead code from the observer contract (ValidName, UniqueSize, References/ResourceRefs, Response.Negotiated, EngineInfo mode flags, summary size fields, Request.Offset/Limit); the diagnostic backend and observer ship version-coherent.
• Raise internal test coverage from 77.5% to 85.9% with observer transport, listener, archive, lifecycle, CLI, gateway, and CPU-health tests; document the intentionally uncovered surface in docs/v1/VALIDATION.md.
• Run CI once per pull request: workflow pushes now trigger only for the default branch instead of double-running the full suite for PR branches.
• Propose weekly Dependabot updates for GitHub Actions and the tools/dev Go modules; SHA-pinned action bumps remain deliberate reviews.
• Stop double-uploading goreleaser metadata to CI candidates: the tested-candidate artifact carries only archives and checksums.

Fixed

• Ship a version-coherent Docker observer: tagged releases previously reported 0.1.0-dev from hostlens-docker-observer version because the observer carried a duplicate version literal no release build injected; all three executables now share the release version and acceptance asserts it.
• Enforce the telemetry size limit for all writers: the exposition buffer embedded bytes.Buffer, whose promoted ReadFrom let io.Copy-style writers bypass the 1 MiB ceiling.
• Refuse bearer verification from an untrusted token store directory: reads now require the parent directory to be a real directory owned by root or the effective user without group or other write access, closing a directory-swap credential-injection path; administrative changes apply the same owner check.
• Enforce the collector inspection limit for command output: the bounded capture buffer embedded bytes.Buffer, whose promoted ReadFrom let exec's copy path bypass the ceiling and capture unbounded output.
• Make release delivery idempotent: a retried publish run now refuses to create a duplicate draft when the release already exists.