v0.1.0

Changelog

• c9cda20 Add Dependabot, go vet, and govulncheck
• c13e826 Add OPA call facts and an approval webhook
• 2bddee4 Add a gate mark for the README and the social card.
• 6b517bd Add a root Makefile
• ba277d0 Add agent surface CI as the enterprise killer backlog item.
• aeb2083 Add authenticated Streamable HTTP MCP
• 1fc5e69 Add capability bundles
• 707850b Add container and tag release
• 3757447 Add doctor findings and invoke preview
• ce65a1a Add the license, the two-API example, and CI
• 29edeaa Add the operator guide and veto init
• 6578e66 Add the veto runtime and the open-source backlog.
• 1117d78 Add upstream auth sources
• 7fbf79b Bound projection pages without overflow
• 4d8a586 Budget the serialized context pack
• 2505c5c Bump actions/checkout from 4 to 7 (#12)
• 7199ded Bump actions/setup-go from 5 to 7 (#10)
• ae1d608 Bump github.com/getkin/kin-openapi from 0.133.0 to 0.149.0 (#11)
• 9463111 Bump github.com/go-openapi/jsonpointer from 1.0.0 to 1.0.2 (#13)
• df0937e Bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace (#9)
• b17c918 Bump golang.org/x/oauth2 from 0.36.0 to 0.37.0 (#15)
• 13e54c4 Claim an unsigned approval once
• f01cbb0 Close the audit findings before release
• f4fbcba Close the invoke, trace, and policy gaps
• 5625f4e Close the launch-review gaps in invoke, config, and generation
• 2439531 Coerce model params and return a stable HTTP result
• 388fa87 Correct the README claims that do not match the commands
• f2a6869 Correct the sentences that contradict the code
• 14b6ddc Correct the setup guide against the commands.
• 9c6bbf1 Document the wow slice after the first eight backlog items.
• 011c1af Drop CONTRIBUTING.md and add make format and make ci.
• ee7c6db Drop the internal launch checklist
• 8f8b961 Drop the license link from the README
• 4068b66 Drop the machine-local checkout path from the agent guide.
• cbd1ad6 Drop the repeated Veto heading from the README.
• 0680ddb Extract one invoke runtime
• f99ff94 Fail a file that drops a field or clips an order id
• eaba15c Fail an eval case when HTTP was not expected
• fe41203 Fail closed on confirmation, and keep stdout traces on the allowlist.
• 47e38fe Fail veto check when the agent surface regresses
• e8ef0d6 Fix confirmation, contract fidelity, and policy wrap
• f95b3cf Fix error causes, flow resume, and retries
• 7dd2978 Fix the findings from the standard linters
• 0d98dda Give File.Confirms the same pointer receiver as the other methods.
• d111f5b Give replay two rows in the Check it table.
• ff16567 Group declarations and methods by receiver
• 4d5418c Honor context cancel and the model response close error
• 1b89c3f Ignore .DS_Store
• 92c553b Keep a signed approval one-time, and match the docs to the gate
• 6e95723 Keep an optional file log of turns
• c62e90f Keep bundles to contracts, relations, and checks
• dc241ea Keep catalog scopes ahead of scheme defaults
• 8a7f579 Keep each generated operation on its own server URL
• 455b8d7 Keep exposure and auth on generated catalogs
• 774971e Keep future providers as keys and return structured invoke errors
• 13c5694 Keep permission denial ahead of OPA confirmation
• 68d4ba1 Keep tests off the user approval directory
• ca2a1d8 Keep tests that lock a behavior
• 4a26e50 Keep the capability surface as the first line
• e6be821 Keep the core off the HTTP edge and lock confirmation state.
• ce35aa1 Keep veto init in the connect section
• bacab0b Lead the README with the control-plane pitch
• 6ac3339 Lead the README with the decision
• 55ce326 Lead the README with the decision before the call
• 6bcd760 Lead the README with the delete scene
• d3b793d Let the three sentences be the social card.
• c3b3edd Limit invoke inside the process
• b7ccabc List veto init before validate
• faba800 Lock relation load failures
• 06a4056 Lock the must-have map and guardrails in the backlog.
• 94c6396 Mark the open-source checklist against the tree
• b80bcfd Mark v0.1.0 and document the module install.
• 94f6cfd Match the docs to the code and add make test
• 0f357e8 Move the model completer into agent
• 1fe8bf7 Name the three tools in the first line
• 1505e16 Order each file as const, var, type, then func.
• 7b3359c Point the README at the listening demo
• b406bd1 Print the demo as a short story
• 13bffee Project named response fields
• 34da00d Put interfaces next to the loop and parse bytes in core
• 2f9870f Put the call shape in the pack and keep whole operations
• bf5cef7 Reject a body that is not a JSON object
• 0cb0255 Reject callbacks and webhooks, and print the pack
• ebf35cd Reject unknown config fields
• 8938393 Remove the security policy and the unused orders example.
• 3954661 Replace the README with the short pitch
• 3be1887 Report a missing ping client
• b007959 Report an unfinished page walk, and make generated CLIs and modules build.
• 91b184b Report doctor blockers on stderr
• e6f65fc Retry idempotent calls and send an idempotency key
• d3c6089 Return a failed close from reads and writes
• b8fb1d8 Return a stable invoke result to MCP
• fa24723 Return one unresolved operationRef error
• 9f661d0 Return the follow error on one line
• 3e040e1 Return the invoke result from generated methods
• c928b97 Rewrite the README and run the orders example
• 7809f18 Run CI on the Go version in go.mod
• 9147f18 Say init once and validate once
• bb3a652 Say what this preview actually does
• 6b6f3e1 Say what veto turns OpenAPI into
• c0fe71d Select a named server and follow list pages
• c32f002 Send a JSON body and reject an empty required parameter
• 420e12a Send bearer auth from the contract
• f879306 Send contract media types and header defaults
• 69bfecb Show joins, the confirmation line, and command metadata
• e8a1b1b Show the share card in the README.
• 1cb8c7e Sign approval tokens the caller holds
• 062c088 Sort with slices.SortFunc
• 2a3fb19 Split notifiers and return the projection view
• b0734d0 Start from veto init, then validate
• f5c5833 Start the veto repository.
• d8d11c4 Stop taking an unused context on search and describe
• a5909a6 Tell contributors to run make ci before a pull request.
• 5f6a797 Tell the two-API example with orders and customers
• 1e75440 Turn confirmation off for a deployment with one veto.yaml key.
• 00d1ecc Turn on stricter Go lint checks
• fed868a Use Cobra for the veto operator CLI.
• c090ca2 Use context-aware test requests and net/http method constants.
• 9147ec4 Use t.Context and WaitGroup.Go
• 53f0311 Use the Debian 13 distroless image
• b8a784d Walk a declared relation and pass step output forward
• 5784334 Write a redacted trace file and export OTLP
• a094b54 wrap defaults instead of replacing them