Compare
Sorry, something went wrong.
No results found
Release v0.4.0
Observability subsystem + benchmarks + cleanup + aws_mapping removed.
Highlights:
- New tessera.observability: Prometheus histograms + OpenTelemetry (off by
default, TESSERA_OTEL_ENABLED=1) + structured event hooks
- Hot-path correctness: JWKS pre-warm, regex pre-compile at policy load,
cost-tier condition ordering (cheap-first within when[])
- OAuth: POST /revoke (RFC 7009) + /introspect signature verification +
/register per-IP rate limiter (10/min default, configurable)
- Tooling: scripts/bump_version.py + tessera/_version.py
- Benchmarks: p50 decision latency 15-72us; blast-radius prefetch ~797x
speedup vs OFF (100ms simulated IAM RTT)
- BREAKING: tessera.cost.aws_mapping removed (Q1 locked decision); migrate
to cost_for_call() introduced in v0.3.0. InfracostQuery moved to
tessera.cost.types; _BUILTIN_MAPPING -> BUILTIN_AWS_OPS in
tessera.cost._aws_canonical_ops.
751 tests GREEN, mypy 0 errors, ruff 0 errors.