v5.6.0

5.6.0 (2026-09-22)

Features

• add installed scenario pack adapter seams (#1141) (9b86286)
• appliance: deliver qualified KVM seats and public artifacts (#1107) (35ebb3b)
• integrate full TechVault delivery and host MCP access (#1102) (ffecaf0)
• scope backend resource ownership (#1054) (d9dfbb6)

Bug Fixes

• address backend resources by their workspace-scoped names in integration tests (#1104) (1448f16)
• detection,mcp: fire custom Suricata rules (303020) and repair MISP add_indicator (#1036) (ba41876)
• detection,mcp: fire custom Suricata rules and repair MISP add_indicator (ba41876), closes #1034
• ground Wazuh evidence and scenario credentials (#1152) (d1871df)
• make issue 956 lab startup and QA reliable (#1110) (5a2a9b1)
• realize authored spawn-template images as written (#1131) (3ce89ad), closes #974
• realize SDL runtime authority as authored (#1108) (18dcc70)
• realize unfixed host publications and persist workflow history (#1142) (faf39e3)
• remove helpers stranded by a killed aptl process on stop (#1147) (a810dac)
• retire MISP and Redis post-realization mutation (#1109) (e6bef3c)
• security: drop privileges to install the operator key and keep credentials off argv (#1106) (0b2e0d2)
• stop helper containers and anonymous volumes outliving teardown (#1145) (5d3ab1f)
• stop the TechVault build cache accepting caller-supplied paths (#1154) (dd9145b)

Documentation

• improve first-time lab guidance (#1150) (8bb1529)
• prepare badge and dual docs publishing (5b57bbc)
• prepare OpenSSF badge and dual docs publishing (#1153) (5b57bbc)
• record issue 956 candidate manual QA (#1111) (4d55a94)