v0.22.0

0.22.0 (2026-10-28)

Features

• api: POST /evidence/batches and GET /evidence/batches/{id} (#505) (61ddb2c)
• evidence: batch service for asynchronous evidence ingest (#504) (d1cb975)
• evidence: prune evidence batches after a retention period (#509) (10d9c53)
• sdk: CreateBatch, GetBatch and WaitForBatch for evidence batches (#506) (c0a622a)
• ssp-scope: automatic per-policy filters (#520) (81b157d)
• ssp-scope: filters that follow the SSP scope (#519) (9dba7b1)
• ssp-scope: restrict filter-building inputs to the SSP scope (#518) (6feac53)
• ssp-scope: scope models and sspscope service (#516) (bb0c476)
• ssp-scope: scope routes and SSP-scoped evidence search (#517) (0ad30ed)
• ssp-templates: discovery planner and preview route (#524) (9a875e3)
• ssp-templates: discovery worker and periodic job (#525) (c7856f1)
• ssp-templates: run, created SSPs and forget routes (#526) (75918b2)
• ssp-templates: SSP template model and admin CRUD routes (#522) (b647d23)
• worker: evidence batch chunk queue and worker (#503) (7a2be54)

Bug Fixes

• deps: update all non-major dependencies (#531) (e7fa71c)
• deps: update aws-sdk-go-v2 monorepo (#532) (2f0c91e)
• deps: update module github.com/go-jose/go-jose/v3 to v4 [security] (#530) (95c08b2)
• deps: update module github.com/open-policy-agent/opa to v1.21.3 (#533) (e49cede)
• deps: update river monorepo to v0.49.0 (#534) (0d12d7c)
• deps: update security fixes (gomod) [security] (#529) (dea901c)

Performance Improvements

• compliance: batch profile compliance and leverage posture evidence counts (#502) (673416e)
• evidence: latest evidence per stream via skip scan, not DISTINCT ON (#511) (b484ffa)
• evidence: match filter sets to evidence through the label index (#514) (ee0a710)
• evidence: store evidence in 36 SQL statements instead of 65 (#510) (82bf122)
• lineage: label index and shared engine cache for the Compliance Map (#513) (364388a)