jev-approvals v0.3.0

Highlights

• Hardened the provider boundary: HTTPS-only endpoints, exact/subdomain host matching, same-origin redirects, expanded credential redaction, and complete Jev Choice/Score validation.
• Added uniform structured audit rows for successful and failed decisions, including transport metadata, raw and final verdicts, stable rule IDs, policy/question fingerprints, secure profile-scoped logging, and bounded rotation.
• Extracted the decision policy into a pure, replayable module without changing production thresholds or verdict behavior.
• Added offline evaluation tools: a frozen 24-case holdout with provenance, a zero-false-allow gate, adversarial matched pairs, log statistics, replay, and threshold sweeps that never modify production settings.
• Preserved complete guardian inputs, including long operator policies and commands containing literal closing delimiters; safety post-processing no longer weakens a model DENY.
• Added configurable Jev-compatible HTTPS endpoints with optional endpoint-specific authentication or anonymous transport. TypeSafe and OpenRouter remain presets; OpenCode Zen free and paid examples are documented.
• Simplified the README around purpose, decision values, installation, configuration, and verification; detailed material lives under docs/.

Safety and scope

• The plugin remains approvals-only and registers zero tools and zero hooks.
• Malformed provider answers and transport failures fail to human review.
• Custom endpoints never inherit TypeSafe or aggregator credentials implicitly.

Full diff: v0.2.1...v0.3.0

v0.2.1

Fixed

• Preserve upstream HTTP status codes so Hermes auxiliary recovery correctly recognizes authentication, rate-limit, and transient server errors.
• Add regression coverage against Hermes' exact recovery matchers.