AegisGate Platform v3.5.0 — Compliance Engine v2 🏛️
FedRAMP 151/170 Automated (88.8%)
- 69 controls promoted from manual/stub to real CheckFuncs across two waves
- 19 remaining controls are genuinely customer-responsibility (policy-only, HR, physical security)
- Bug fix: 5 duplicate registrations where manual stubs overrode automated CheckFuncs
Cross-Framework Mapping: 153/153 (100%)
- Every FedRAMP control maps to MITRE ATLAS techniques (41 unique)
- Every FedRAMP control links to SOC 2, ISO 27001, HIPAA, PCI, NIST CSF, CIS, and 13+ frameworks
- 19 NIST 800-53 families covered
gRPC Service Layer
- 7 services, 50 RPCs with health checking, server reflection, and TLS
Trust API Attestation
- Cryptographic attestation generation and verification with RFC 3161 TSA timestamping
SIEM Promotion
- Real event forwarding to Splunk, Datadog, ELK (no longer a stub)
SSO PostgreSQL Persistence
- OIDC sessions persist across restarts with TTL and ACR value mapping
Token Analytics
- Per-request usage metrics wired into the request pipeline
PDF Export
- Questionnaire results to formatted PDF with scoring and evidence citations
Security
- Stripe webhook HMAC-SHA256 validation
- OPSEC scan: 0 failures, 0 warnings
- Version consistency sweep: all 15 files updated
Stats
- 93 packages, 0 failures, 0 race conditions
- Docker: 34.7MB (Alpine, non-root, digested bases)
- Helm chart: v1.6.0 / appVersion v3.5.0
Breaking Changes
- Starter tier removed from billing. Community is free, Developer ($79/mo) is first paid tier.
Full Changelog: v3.4.3...v3.5.0