v0.1.0

0.1.0 (2026-10-15)

Features

• approval: approval core with rules, grants and limits (#45) (fce7477)
• audit: hash-chained audit log and audit verify (#42) (7b2a09d)
• broker: broker service and client API (#56) (2674b08)
• broker: nodkey broker command, start and stop order, systemd unit (#60) (0129939)
• broker: refuse variable names that make programs print or run the value (#66) (db47e6e)
• claim: make claimed text safe to show and mask secrets in it (#41) (536ee24)
• config: broker and client config, rules and strict known_hosts (#38) (ec60c16)
• run: nodkey run passes approved secrets to one command (#58) (d2ba8f7)
• ssh-agent: nodkey ssh-agent forwards SSH logins to the broker (#62) (e1c3f31)
• ssh-grant: one tap for SSH logins to a list of hosts (#64) (ce433f3)
• sshauth: check session-bind and SSH login data, then sign (#46) (613c813)
• store: fetch secrets with bws and bw (#50) (03bb431)
• telegram: Telegram approver with strict tap checks (#49) (fdcaab0)
• transport: keygen and mutual TLS with pinned keys (#44) (fca1caf)

Bug Fixes

• approval: a refused notice is a limit, and does not use up max_per_day (#52) (4f74782)
• broker: send start alerts at the same time, so a stop stays clean (#70) (131611b)
• client: a cancel always wins over a late answer; fix flaky tests (#68) (9ff4a0e)
• telegram: keep edited-message reports and count a Deny on an edited message (#54) (ed3a810)

Documentation

• design, threat model and repo rules (#36) (8297fe8), closes #1
• record what the real Telegram test showed (#74) (4d4a5e8)
• release App setup for a shared App, and its risk (#43) (3be3fb7)
• setup guide, quick start and manual Telegram test (#71) (7899ee0)