DPOLens 0.1.0

The first release of DPOLens, after three release candidates. Since 0.1.0-rc.3 it supports
Codex, has a plugin for Cursor's directories, and says "AI assistant" and "URL" wherever people
read them. The interfaces (the HTTP API, the pack format, the database schema) can still change
before 1.0, and only the newest release gets fixes.

Nothing needs doing before upgrading from 0.1.0-rc.3: no setting, route or table has changed.
From an earlier release candidate, the steps in its own section below apply as well.

What it holds:

• An MCP server that gives an AI coding assistant four tools to search and read the law
  and the organisation's own policies, with guidance that tells it to search before writing
  code that touches personal data. Every result is the clause word for word, with its key, its
  version and the date that version took effect. Claude Code has a plugin, and clients/ has
  the files for Codex, Cursor and GitHub Copilot in VS Code.
• GDPR, and the UAE's Personal Data Protection Law in Arabic, which prevails, and in its
  official English translation. An administrator chooses which laws apply, and a search keeps
  to them. A law has releases of its own: dpolens pack update loads a newer version beside the
  one before it, and nothing changes the law in force unasked.
• Search by words and by meaning on the CPU, with no API key and no LLM. On held-out
  questions, the clause the guidance points at is among the top five answers 77% of the time
  for GDPR and 55% for the UAE's law.
• The organisation's own policies, uploaded as Word or Markdown files, read into clauses
  without an AI model, checked beside the file, and published as versions that never change.
  Any two versions can be compared.
• A dashboard for the library, search, policies, people, roles, tokens, the laws that
  apply, an overview of what was asked, and both logs: the governance log, append only and hash
  chained, and the questions asked, with personal data taken out, kept unless a retention is
  set.
• A community version: an instance can answer anyone's AI assistant with no token, from the
  law alone, within limits for each IP address, each shared range and everybody together.

What changed since 0.1.0-rc.3:

• Codex, beside Claude Code, Cursor and GitHub Copilot in VS Code: a configuration file in
  clients/codex/, and a Codex tab where the dashboard shows a new token. On a community
  version, the MCP server's instructions now say when to search before anything else, which is
  where Codex looks when it chooses a server.
  (#60)
• A Cursor plugin for Cursor's directories. It connects Cursor to the community version,
  with a rule that says when to search; clients/cursor/ still connects Cursor to your own
  instance. (#61,
  #62)
• A search on a community version says it searched the law alone, no longer the
  organisation's own policies too. (#61)
• "AI assistant" and "URL" wherever people read them: the dashboard, the API's descriptions
  and the Compose file's comments. Only the words changed: no setting, field or route was
  renamed. (#54,
  #56)
• The user docs are on dpolens.com, each page
  linking to its source. (#55)

Images

Each is built for amd64 and arm64, and docker compose up in a checkout of this release pulls them.

ghcr.io/alkhatibdev/dpolens:0.1.0
ghcr.io/alkhatibdev/dpolens-mcp:0.1.0
ghcr.io/alkhatibdev/dpolens-dashboard:0.1.0
ghcr.io/alkhatibdev/dpolens-postgres:0.1.0

To check that an image was built here, from this tag: gh attestation verify oci://ghcr.io/alkhatibdev/dpolens:0.1.0 --repo alkhatibdev/dpolens.