What's Changed
- docs: render hermes/connection-lifecycle diagrams as mermaid by @Ar9av in #224
- Name the decision contract every enforcement surface already shared by @Ar9av in #305
- Show which enforcement surfaces are actually governing this machine by @Ar9av in #310
- workspace scope: org can disable personal workspaces by @Ar9av in #311
- remote_policy: fold allow_personal_workspaces into managedReposSig by @Ar9av in #312
- docs: point the attestation bundle at a Cloak page that exists by @Ar9av in #313
- Semantic guard: any provider via litellm + register_llm() for SDK frameworks by @Ar9av in #314
- Fix cloaking transcript leak + scope-blind status/audit + scanner/sweep false positives by @Ar9av in #315
- mcp-gateway install: default the installed gateway to enforce (was inert observe) by @Ar9av in #320
- deps: match dependencies against the bundled IOC database, not just the (empty) feed by @Ar9av in #317
- gateway: withhold poisoned tool results by default (was inert) + stop echoing the payload by @Ar9av in #318
- semantic-check: fail fast on a tty instead of hanging on stdin by @Ar9av in #319
- scoped-agent: see through the MCP gateway to its upstreams by @Ar9av in #322
- fix(mcp): make the gateway and the mirror survive being used together by @Ar9av in #323
- sec(deps): floor idna at >=3.15 (GHSA-65pc-fj4g-8rjx) by @Portll in #321
- Move the main guard to the end of cli.py by @Ar9av in #325
- Redact tool results in the SDK adapters, not just screen the calls by @Ar9av in #324
- Release 1.44.0 by @Ar9av in #326
New Contributors
Full Changelog: v1.43.0...v1.44.0
Contributors
Portll and Ar9av