v0.7.0

Changelog

• c0b659e Add authenticated backup verification metadata
• fe062dd Add control plane disaster recovery inventory
• b8b0aca Add database restore to staging
• 755d324 Add developer environment and account lifecycle controls
• 46d3618 Add developer runtime and build runner workflows
• aa54fee Add enforceable site resource profiles
• bd18c9d Add human-readable API guide
• 3584bde Add managed database staging clones
• 3c8eed5 Add offsite database restore
• c742a9d Add offsite restore to staging
• 073a6ff Add operator version command
• 04eb33b Add opt-in filesystem quota enforcement
• 3c83479 Add preview build to release pipeline
• a4a845c Add private Git deploy keys and scheduled tasks
• 9f4fe9a Add protected staging routes
• 90da502 Add read-only host security center
• 132f87c Add shared hosting workspace foundation
• f9a6324 Add transactional customer account updates
• ea7822e Add upgrade and destructive recovery gates
• 86fceb9 Add verified files-only backup restore
• 1b7b100 Add verified managed database restore
• d7bac35 Add verified offsite file restore
• 1a2d303 Align database staging documentation
• 1ad0a44 Align installation smoke with production backup policy
• 7d73c5a Align release retention documentation
• 2ee9dfe Align route lock identities
• 0fcce59 Apply SSH access policy through host helper
• d7fbb1e Apply resource reconciliation to account updates
• e27cdbb Apply runtime image security updates
• 0486de8 Authorize staging restore backup source
• 0d4fd23 Automate Git release retention and helper allowlists
• d24b876 Bound CI test concurrency
• 796f408 Bound scheduled tasks and fix worker lifecycle
• 077ab20 Clarify backup restore availability
• f2f497b Clarify filesystem quota boundaries
• f1900b3 Clarify webserver-specific WAF support
• 5d351c4 Close production readiness audit gaps
• f0533e7 Close production-readiness audit gaps and finish the security-header/permission fixes
• 4f3da0f Complete production architecture controls
• ce8702e Correlate release pipeline stages
• 872685e Define DNS provider and optional mail boundaries
• eee3d65 Define disaster recovery objectives
• afde03f Document SSH access API contract
• 4909b97 Document complete restore surface
• 17231af Document customer account update workflow
• 831782f Document developer controls and webhook APIs
• d6428cc Document developer workflows and add preview
• a02fb16 Document mandatory production encryption keys
• 1156f06 Document production architecture checkpoint
• c4c14d3 Document staging database restore status
• 9ab4f5e Enforce aggregate account resource limits
• 7911be2 Enforce built-in hosting plan resources
• b4dd464 Enforce exclusive site ownership
• 9972b84 Enforce production state integrity requirements
• bcce555 Enforce resource ceilings on site edits
• 0139987 Enforce site limits in build runner
• ca98b1e Enforce staging authentication in Caddy
• b8c597e Exercise failure recovery boundaries
• ce615d8 Expand installation smoke coverage
• 0784e5f Extract authentication policy seam
• 2de645d Extract deployment state behind internal package
• cfd65f1 Extract session registry behind internal package
• fedc0ff Extract site operation locks package
• 698cbcd Extract site usage package
• 5235812 Fix Terraform CI formatting
• 821f2ff Fix production container smoke configuration
• faef180 Fix production smoke test credentials
• 1aa1cfd Fix self-matching regex in release toolchain pin guard
• 7aa02a4 Guard release toolchain pinning
• 113c41c Harden backup and authentication validation
• b1a96fe Harden control-plane state and dashboard
• 7bb09a0 Harden deployment acceptance checks
• 13afecd Harden filesystem path handling
• 35a19aa Harden local validation and privileged helper paths
• 564d6ef Harden private Git clone destination validation
• d0aa518 Harden private Git host verification
• 65fa96f Harden production deployment readiness
• 66b6ef5 Harden resource state reconciliation
• c752b88 Install rclone in smoke hosts
• 1a8f300 Keep resource desired state recoverable after write failures
• a96c8ea Limit race test runtime threads
• 19f795b Make cPanel restores retry safe
• c0961f7 Make executable security test runner-independent
• 176095d Make process death recovery test coverage-safe
• e0f7b77 Make recovery test process launch portable
• 7d686f9 Polish profile bio for hiring presentation
• 1dc124d Prepare v0.7.0 production release
• 8295b53 Preserve task state when deletion persistence fails
• 6357b70 Prevent environment deletion state drift
• 61310bb Propagate site resource limits to scheduled tasks
• 799edbd Protect staging routes from indexing
• 876545c Provide control plane path in production smoke test
• 8634570 Publish materialized durable jobs atomically
• 43934b6 Reconcile PHP runtime profiles
• 0faaa97 Reconcile Python application deployment
• b1913bb Reconcile desired resource profiles
• fea39e9 Reconcile documentation and pin release tooling
• 6b737de Reconcile filesystem quota removal
• 65b0f41 Reconcile resource documentation status
• 042f8d4 Reconcile resource enforcement during startup
• 31721b7 Reconcile resources when account plans change
• 045d7c7 Reconcile restore documentation
• 47389f1 Reconcile worker lifecycle state
• d522642 Record extracted control plane package seams
• d87b6e1 Refine project architecture and presentation
• 891e2c0 Refresh dashboard workspace preview
• 090d654 Release SQLite rows before refreshing durable jobs
• a22fd8a Remove runner-dependent recovery test process
• 034e97b Replace legacy dashboard preview asset
• 09a7ff0 Report live resource and site usage
• cf90211 Restore green repository checks
• b731e19 Restore verified backups to staging
• a839081 Retain bounded Git rollback releases
• 9a8918d Revoke customer sessions on suspension
• 7588fe1 Rollback resource state when persistence fails
• 28423b6 Rollback staging side effects on failure
• 90b3b73 Separate durable job snapshots from shared state
• ebf6b76 Serialize Git rollback per site
• b9af531 Serialize all site mutations
• 76f99da Serialize restore and application mutations
• df39a3f Serialize same-site deployments
• ab568a0 Serialize site database and security operations
• 51f16c8 Serialize site mutations
• 3cdb742 Streamline project landing documentation
• c3dce79 Strengthen operational evidence and package boundaries
• 7cf9b43 Test release installation across Linux distributions
• 51b9ac8 Test restore idempotency across restart
• f99b428 Track durable deployment stages
• d7e4e96 Update Dependabot dependency pins
• dfe2412 Update setup-helm to v5.0.1
• f4868b7 Update standalone build runner caller
• bfa84ce Verify backups before listing
• 1972723 Wait for background jobs in race tests
• 9f940bf Wait for completed job cleanup in tests
• d272275 feat: add customer credential recovery
• 0c5f3b8 feat: add one-time mfa recovery codes
• fb85ff8 feat: encrypt customer totp secrets
• cd6eb42 feat: extend site resource enforcement
• fa701c5 feat: reconcile desired task and environment state
• c5a935a fix: apply site resource slices to scheduled tasks
• df664d2 fix: clarify account removal and harden tasks
• e152a5a fix: make session revocation transactional