v2.1.0

2.1.0 (2026-05-23)

Features

• v2.1 — OR composition + parameterized policies + resource-based authz (#1+#2+#3) (#28) (4aa90bc)

Bug Fixes

• generator: discovery walkers now process nested types (#29) (c0dd1ee)

v2.0.2

2.0.2 (2026-05-22)

Bug Fixes

• fire analyzer-filter guards before _HandlePackageFileConflicts (2.0.2) (#24) (d7e30a6)

v2.0.1

2.0.1 (2026-05-22)

Features

• split ZeroAlloc.Authorization.Generator into a standalone package (2.0.1) (#22) (9333bdc)

v2.0.0

2.0.0 (2026-05-19)

⚠ BREAKING CHANGES

• drop sync IsAuthorized, async IsAuthorizedAsync, sync Evaluate from IAuthorizationPolicy. All policies must now implement async EvaluateAsync only. Sync-completing policies wrap their result in new ValueTask<...>(result) — allocation-free.

Features

• v2 — source-generated policy registry + [Policy]/[RequirePolicy] rename (#19) (5e3b2c7)

Documentation

• v2 - rename to [Policy]/[RequirePolicy], async-only IAuthorizationPolicy (#21) (9263ec5)

v1.2.2

1.2.2 (2026-05-12)

Bug Fixes

• readme: absolute GitHub URLs so nuget.org links resolve (#17) (9dfcab4)

v1.2.1

1.2.1 (2026-05-07)

Documentation

• backlog: add host-coupling notes for items affecting Mediator.Authorization (#13) (cddf38c)
• backlog: mark item #6 (Certify the ZeroAlloc promise) as DONE (#16) (3fd239e)

v1.2.0

1.2.0 (2026-05-06)

Features

• certify: AOT-enforced allocation gate for happy-path APIs (#11) (3cfad38)

v1.1.1

1.1.1 (2026-05-03)

Bug Fixes

• release-please: drop pre-major flags + rename changelog-types→changelog-sections (#7) (dce002f)

v1.1.0

1.1.0 (2026-05-01)

Features

• add [Authorize] and [AuthorizationPolicy] attributes (adb2ae6)
• add AuthorizationFailure struct for structured deny info (f92e6d0)
• add Evaluate/EvaluateAsync via UnitResult<AuthorizationFailure> (ffb1901)
• add IAuthorizationPolicy with async overload via default-interface-method (ea51654)
• add ISecurityContext + AnonymousSecurityContext (f6a5dd7)
• add PolicyEvaluationBenchmarks (BenchmarkDotNet harness) (715ffc3)
• aot smoke test exercises every public path (3fe4143)
• ZeroAlloc.Authorization 1.0 readiness (6583f9d)

Bug Fixes

• guard AuthorizationFailure.Code against default-struct null (ab4bae2)
• harden public API contracts (null-checks, attribute targets, cancellation) (968c82c)