v0.13.0

Changelog

• bcd639b: build(release): keep-existing release mode for idempotent re-runs (@bfoing)
• 4afe6f2: build(release): use replace mode so release re-runs are idempotent (@bfoing)
• c1bd6d9: feat: Distribution formats + agent wiring (agents init, Claude plugin) (@bfoing)
• ed7b9ee: fix(release): use skip_upload (not disable) to gate brew/scoop on TAP_GITHUB_TOKEN (@bfoing)

v0.12.1

Changelog

• 13f0098: style: white wordmark, lighter green check mark (@bfoing)

v0.12.0

Changelog

• 5875639: feat: friendlier CLI — branded install script, ✔ success, brand colours (@bfoing)

v0.11.0

Changelog

• 28de81e: feat: apps call streams responses (chunked/SSE); --attest gates att-server (@bfoing)

v0.10.0

Changelog

• 4ead417: fix: resolve enclave hostname from the active deployment; accept app names (@bfoing)

v0.9.0

Changelog

• 0151ad8: feat: apps call is direct over RA-TLS (data plane off the control plane) (@bfoing)

v0.8.0

Changelog

• c1457fb: refactor: attest is client-side only (no control-plane proxy) (@bfoing)

v0.7.0

Changelog

• db4857f: ci: Set GOPROXY/GOSUMDB explicitly (fork go.env ships empty GOPROXY) (@bfoing)
• fd24618: feat: client-side RA-TLS — attest --direct challenges the enclave itself (@bfoing)

v0.6.0

Changelog

• 529820d: ci: Run release workflow JS actions on Node 24 (@bfoing)
• f151ff8: feat: richer attestation (verify, OID extract, x509/quote export) + README (@bfoing)

v0.5.0

Changelog

• ec82b28: feat: Phase 5 — MCP server, agent-surface polish, release tooling (@bfoing)